[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_676":677,"_678":679},"routes/_app.x.$handle.$name",{"_101":100,"_32":46,"_110":91,"_27":54,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":60,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",370,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","backend/core/db.ts","latestPath","fileId","f3c1e416-6128-11f1-b2c9-1607ee4eb77e","name","db.ts","fileType","script","content","// db.ts — Val-scoped SQLite: per-customer auth header config + a light call log.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ------------------------------------------------------------------------------\n// types\n// ------------------------------------------------------------------------------\nexport interface AuthConfig {\n customer: string;\n secret: string; // the full self-identifying key `utt__`\n enabled: boolean;\n updated_ts: string;\n}\n\nexport interface CallLogEntry {\n id: number;\n customer: string;\n fn: string;\n ok: boolean;\n status: number; // HTTP status returned to the caller\n latency_ms: number;\n detail: string; // short note (error message for failures)\n req_body: string; // request body, headers stripped (capped)\n resp_body: string; // response body, headers stripped (capped)\n ts: string;\n}\n\n/** What the logging middleware captures for one invocation. */\nexport interface CallRecord {\n ok: boolean;\n status: number;\n latencyMs: number;\n detail?: string;\n reqBody?: string;\n respBody?: string;\n}\n\n// ------------------------------------------------------------------------------\n// schema migration\n// ------------------------------------------------------------------------------\nlet migrated = false;\n\n/** Lazily create tables on first DB call. No-op while module is warm. */\nasync function migrate(): Promise {\n if (migrated) return;\n migrated = true;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS customer_auth (\n customer TEXT PRIMARY KEY,\n secret TEXT NOT NULL DEFAULT '',\n enabled INTEGER NOT NULL DEFAULT 0,\n updated_ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS call_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n customer TEXT NOT NULL,\n fn TEXT NOT NULL,\n ok INTEGER NOT NULL DEFAULT 0,\n status INTEGER NOT NULL DEFAULT 0,\n latency_ms INTEGER NOT NULL DEFAULT 0,\n detail TEXT NOT NULL DEFAULT '',\n req_body TEXT NOT NULL DEFAULT '',\n resp_body TEXT NOT NULL DEFAULT '',\n ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE INDEX IF NOT EXISTS idx_call_log_cust_fn ON call_log (customer, fn, id)`,\n ]);\n await addMissingCallColumns();\n}\n\n/** Bring an older `call_log` (id/customer/fn/ok/ts only) up to the rich schema. */\nasync function addMissingCallColumns(): Promise {\n const { rows } = await sqlite.execute(`PRAGMA table_info(call_log)`);\n const have = new Set(rows.map((r) => String(r[1]))); // r[1] = column name\n const wanted: [string, string][] = [\n [\"status\", \"INTEGER NOT NULL DEFAULT 0\"],\n [\"latency_ms\", \"INTEGER NOT NULL DEFAULT 0\"],\n [\"detail\", \"TEXT NOT NULL DEFAULT ''\"],\n [\"req_body\", \"TEXT NOT NULL DEFAULT ''\"],\n [\"resp_body\", \"TEXT NOT NULL DEFAULT ''\"],\n ];\n const missing = wanted.filter(([col]) => !have.has(col));\n if (missing.length === 0) return;\n await sqlite.batch(missing.map(([col, def]) => `ALTER TABLE call_log ADD COLUMN ${col} ${def}`));\n}\n\n// ------------------------------------------------------------------------------\n// customer auth config\n// ------------------------------------------------------------------------------\n\n/** Read one customer's auth config, or null if never configured. */\nexport async function getAuthConfig(customer: string): Promise {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT customer, secret, enabled, updated_ts\n FROM customer_auth WHERE customer = ?`,\n args: [customer],\n });\n return rows.length ? rowToConfig(rows[0]) : null;\n}\n\n/** Read all configs as a map keyed by customer id. */\nexport async function getAllAuthConfigs(): Promise> {\n await migrate();\n const { rows } = await sqlite.execute(\n `SELECT customer, secret, enabled, updated_ts FROM customer_auth`,\n );\n const out: Record = {};\n for (const r of rows) {\n const cfg = rowToConfig(r);\n out[cfg.customer] = cfg;\n }\n return out;\n}\n\n/** Upsert a customer's auth config. */\nexport async function saveAuthConfig(\n customer: string,\n secret: string,\n enabled: boolean,\n): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO customer_auth (customer, secret, enabled, updated_ts)\n VALUES (?, ?, ?, datetime('now'))\n ON CONFLICT(customer) DO UPDATE SET\n secret = excluded.secret,\n enabled = excluded.enabled,\n updated_ts = excluded.updated_ts`,\n args: [customer, secret, enabled ? 1 : 0],\n });\n}\n\n// ------------------------------------------------------------------------------\n// call log\n// ------------------------------------------------------------------------------\n\n// Retention is a per-(customer, fn) ring buffer pruned in batches: we only delete\n// once an endpoint crosses PRUNE_AT, dropping the oldest PRUNE_BATCH at a time —\n// so 1-in-PRUNE_BATCH calls pay the delete cost, never every call.\nconst DISPLAY_LIMIT = 100; // rows surfaced to the UI per query\nconst PRUNE_AT = 120; // start pruning past this many rows for an endpoint\nconst PRUNE_BATCH = 20; // rows dropped per prune (oldest first)\nconst MAX_DETAIL = 2000; // cap stored detail length\nconst MAX_BODY = 8000; // cap stored request / response body length\nconst CALL_COLS = `id, customer, fn, ok, status, latency_ms, detail, req_body, resp_body, ts`;\n\n/** Query filter for the call log. Omit `customer`/`fns` to widen the scope. */\nexport interface CallQuery {\n customer?: string;\n fns?: string[];\n limit?: number;\n}\n\n/** Record a function invocation with its full request + response bodies, then\n * batch-prune the endpoint. Best-effort: callers fire-and-forget so logging\n * never blocks a response. */\nexport async function logCall(customer: string, fn: string, rec: CallRecord): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO call_log (customer, fn, ok, status, latency_ms, detail, req_body, resp_body)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n customer,\n fn,\n rec.ok ? 1 : 0,\n rec.status,\n rec.latencyMs,\n trunc(rec.detail, MAX_DETAIL),\n trunc(rec.reqBody, MAX_BODY),\n trunc(rec.respBody, MAX_BODY),\n ],\n });\n await prune(customer, fn);\n}\n\n/** Drop the oldest PRUNE_BATCH rows for an endpoint, but only once it exceeds\n * PRUNE_AT — amortising deletes so most inserts do no extra work. */\nasync function prune(customer: string, fn: string): Promise {\n const { rows } = await sqlite.execute({\n sql: `SELECT COUNT(*) FROM call_log WHERE customer = ? AND fn = ?`,\n args: [customer, fn],\n });\n if (Number(rows[0][0]) <= PRUNE_AT) return;\n await sqlite.execute({\n sql: `DELETE FROM call_log WHERE id IN (\n SELECT id FROM call_log WHERE customer = ? AND fn = ? ORDER BY id ASC LIMIT ?\n )`,\n args: [customer, fn, PRUNE_BATCH],\n });\n}\n\n/** Calls matching a filter, newest first. No filter → recent across all endpoints;\n * a `customer` and/or a set of `fns` narrows it (for the Recent calls page). */\nexport async function getCalls(q: CallQuery = {}): Promise {\n await migrate();\n const where: string[] = [];\n const args: (string | number)[] = [];\n if (q.customer) {\n where.push(`customer = ?`);\n args.push(q.customer);\n }\n if (q.fns && q.fns.length) {\n where.push(`fn IN (${q.fns.map(() => \"?\").join(\", \")})`);\n args.push(...q.fns);\n }\n const clause = where.length ? `WHERE ${where.join(\" AND \")}` : \"\";\n args.push(q.limit ?? DISPLAY_LIMIT);\n const { rows } = await sqlite.execute({\n sql: `SELECT ${CALL_COLS} FROM call_log ${clause} ORDER BY id DESC LIMIT ?`,\n args,\n });\n return rows.map(rowToCall);\n}\n\nfunction trunc(s: string | undefined, max: number): string {\n if (!s) return \"\";\n return s.length > max ? s.slice(0, max) + \"…\" : s;\n}\n\n// ------------------------------------------------------------------------------\n// helpers\n// ------------------------------------------------------------------------------\n\nfunction rowToConfig(r: { [i: number]: unknown }): AuthConfig {\n return {\n customer: String(r[0]),\n secret: String(r[1]),\n enabled: Number(r[2]) === 1,\n updated_ts: String(r[3]),\n };\n}\n\nfunction rowToCall(r: { [i: number]: unknown }): CallLogEntry {\n return {\n id: Number(r[0]),\n customer: String(r[1]),\n fn: String(r[2]),\n ok: Number(r[3]) === 1,\n status: Number(r[4]),\n latency_ms: Number(r[5]),\n detail: String(r[6]),\n req_body: String(r[7]),\n resp_body: String(r[8]),\n ts: String(r[9]),\n };\n}\n","// db.ts — Val-scoped SQLite: per-customer auth header config + a light call log.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ------------------------------------------------------------------------------\n// types\n// ------------------------------------------------------------------------------\nexport interface AuthConfig {\n customer: string;\n secret: string; // the full self-identifying key `utt__`\n enabled: boolean;\n updated_ts: string;\n}\n\nexport interface CallLogEntry {\n id: number;\n customer: string;\n fn: string;\n ok: boolean;\n status: number; // HTTP status returned to the caller\n latency_ms: number;\n detail: string; // short note (error message for failures)\n req_body: string; // request body, headers stripped (capped)\n resp_body: string; // response body, headers stripped (capped)\n ts: string;\n}\n\n/** What the logging middleware captures for one invocation. */\nexport interface CallRecord {\n ok: boolean;\n status: number;\n latencyMs: number;\n detail?: string;\n reqBody?: string;\n respBody?: string;\n}\n\n// ------------------------------------------------------------------------------\n// schema migration\n// ------------------------------------------------------------------------------\nlet migrated = false;\n\n/** Lazily create tables on first DB call. No-op while module is warm. */\nasync function migrate(): Promise {\n if (migrated) return;\n migrated = true;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS customer_auth (\n customer TEXT PRIMARY KEY,\n secret TEXT NOT NULL DEFAULT '',\n enabled INTEGER NOT NULL DEFAULT 0,\n updated_ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS call_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n customer TEXT NOT NULL,\n fn TEXT NOT NULL,\n ok INTEGER NOT NULL DEFAULT 0,\n status INTEGER NOT NULL DEFAULT 0,\n latency_ms INTEGER NOT NULL DEFAULT 0,\n detail TEXT NOT NULL DEFAULT '',\n req_body TEXT NOT NULL DEFAULT '',\n resp_body TEXT NOT NULL DEFAULT '',\n ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE INDEX IF NOT EXISTS idx_call_log_cust_fn ON call_log (customer, fn, id)`,\n ]);\n await addMissingCallColumns();\n}\n\n/** Bring an older `call_log` (id/customer/fn/ok/ts only) up to the rich schema. */\nasync function addMissingCallColumns(): Promise {\n const { rows } = await sqlite.execute(`PRAGMA table_info(call_log)`);\n const have = new Set(rows.map((r) => String(r[1]))); // r[1] = column name\n const wanted: [string, string][] = [\n [\"status\", \"INTEGER NOT NULL DEFAULT 0\"],\n [\"latency_ms\", \"INTEGER NOT NULL DEFAULT 0\"],\n [\"detail\", \"TEXT NOT NULL DEFAULT ''\"],\n [\"req_body\", \"TEXT NOT NULL DEFAULT ''\"],\n [\"resp_body\", \"TEXT NOT NULL DEFAULT ''\"],\n ];\n const missing = wanted.filter(([col]) => !have.has(col));\n if (missing.length === 0) return;\n await sqlite.batch(missing.map(([col, def]) => `ALTER TABLE call_log ADD COLUMN ${col} ${def}`));\n}\n\n// ------------------------------------------------------------------------------\n// customer auth config\n// ------------------------------------------------------------------------------\n\n/** Read one customer's auth config, or null if never configured. */\nexport async function getAuthConfig(customer: string): Promise {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT customer, secret, enabled, updated_ts\n FROM customer_auth WHERE customer = ?`,\n args: [customer],\n });\n return rows.length ? rowToConfig(rows[0]) : null;\n}\n\n/** Read all configs as a map keyed by customer id. */\nexport async function getAllAuthConfigs(): Promise> {\n await migrate();\n const { rows } = await sqlite.execute(\n `SELECT customer, secret, enabled, updated_ts FROM customer_auth`,\n );\n const out: Record = {};\n for (const r of rows) {\n const cfg = rowToConfig(r);\n out[cfg.customer] = cfg;\n }\n return out;\n}\n\n/** Upsert a customer's auth config. */\nexport async function saveAuthConfig(\n customer: string,\n secret: string,\n enabled: boolean,\n): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO customer_auth (customer, secret, enabled, updated_ts)\n VALUES (?, ?, ?, datetime('now'))\n ON CONFLICT(customer) DO UPDATE SET\n secret = excluded.secret,\n enabled = excluded.enabled,\n updated_ts = excluded.updated_ts`,\n args: [customer, secret, enabled ? 1 : 0],\n });\n}\n\n// ------------------------------------------------------------------------------\n// call log\n// ------------------------------------------------------------------------------\n\n// Retention is a per-(customer, fn) ring buffer pruned in batches: we only delete\n// once an endpoint crosses PRUNE_AT, dropping the oldest PRUNE_BATCH at a time —\n// so 1-in-PRUNE_BATCH calls pay the delete cost, never every call.\nconst DISPLAY_LIMIT = 100; // rows surfaced to the UI per query\nconst PRUNE_AT = 120; // start pruning past this many rows for an endpoint\nconst PRUNE_BATCH = 20; // rows dropped per prune (oldest first)\nconst MAX_DETAIL = 2000; // cap stored detail length\nconst MAX_BODY = 8000; // cap stored request / response body length\nconst CALL_COLS = `id, customer, fn, ok, status, latency_ms, detail, req_body, resp_body, ts`;\n\n/** Query filter for the call log. Omit `customer`/`fns` to widen the scope. */\nexport interface CallQuery {\n customer?: string;\n fns?: string[];\n limit?: number;\n}\n\n/** Record a function invocation with its full request + response bodies, then\n * batch-prune the endpoint. Best-effort: callers fire-and-forget so logging\n * never blocks a response. */\nexport async function logCall(customer: string, fn: string, rec: CallRecord): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO call_log (customer, fn, ok, status, latency_ms, detail, req_body, resp_body)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n customer,\n fn,\n rec.ok ? 1 : 0,\n rec.status,\n rec.latencyMs,\n trunc(rec.detail, MAX_DETAIL),\n trunc(rec.reqBody, MAX_BODY),\n trunc(rec.respBody, MAX_BODY),\n ],\n });\n await prune(customer, fn);\n}\n\n/** Drop the oldest PRUNE_BATCH rows for an endpoint, but only once it exceeds\n * PRUNE_AT — amortising deletes so most inserts do no extra work. */\nasync function prune(customer: string, fn: string): Promise {\n // Index-friendly threshold: probe for a row past PRUNE_AT via the\n // (customer, fn, id) index instead of COUNT(*)-ing the whole partition.\n const { rows } = await sqlite.execute({\n sql: `SELECT id FROM call_log WHERE customer = ? AND fn = ?\n ORDER BY id DESC LIMIT 1 OFFSET ?`,\n args: [customer, fn, PRUNE_AT],\n });\n if (!rows.length) return;\n await sqlite.execute({\n sql: `DELETE FROM call_log WHERE id IN (\n SELECT id FROM call_log WHERE customer = ? AND fn = ? ORDER BY id ASC LIMIT ?\n )`,\n args: [customer, fn, PRUNE_BATCH],\n });\n}\n\n/** Calls matching a filter, newest first. No filter → recent across all endpoints;\n * a `customer` and/or a set of `fns` narrows it (for the Recent calls page). */\nexport async function getCalls(q: CallQuery = {}): Promise {\n await migrate();\n const where: string[] = [];\n const args: (string | number)[] = [];\n if (q.customer) {\n where.push(`customer = ?`);\n args.push(q.customer);\n }\n if (q.fns && q.fns.length) {\n where.push(`fn IN (${q.fns.map(() => \"?\").join(\", \")})`);\n args.push(...q.fns);\n }\n const clause = where.length ? `WHERE ${where.join(\" AND \")}` : \"\";\n args.push(q.limit ?? DISPLAY_LIMIT);\n const { rows } = await sqlite.execute({\n sql: `SELECT ${CALL_COLS} FROM call_log ${clause} ORDER BY id DESC LIMIT ?`,\n args,\n });\n return rows.map(rowToCall);\n}\n\nfunction trunc(s: string | undefined, max: number): string {\n if (!s) return \"\";\n return s.length > max ? s.slice(0, max) + \"…\" : s;\n}\n\n// ------------------------------------------------------------------------------\n// helpers\n// ------------------------------------------------------------------------------\n\nfunction rowToConfig(r: { [i: number]: unknown }): AuthConfig {\n return {\n customer: String(r[0]),\n secret: String(r[1]),\n enabled: Number(r[2]) === 1,\n updated_ts: String(r[3]),\n };\n}\n\nfunction rowToCall(r: { [i: number]: unknown }): CallLogEntry {\n return {\n id: Number(r[0]),\n customer: String(r[1]),\n fn: String(r[2]),\n ok: Number(r[3]) === 1,\n status: Number(r[4]),\n latency_ms: Number(r[5]),\n detail: String(r[6]),\n req_body: String(r[7]),\n resp_body: String(r[8]),\n ts: String(r[9]),\n };\n}\n","createdAt",["D",1780947302820],"branchVersion","branchId","b9c38076-09b5-49a6-8d65-4b509f9cce50","id","30ca1bfe-8d0b-41cd-af05-40f09f5a31a1","uAgents",["D",1780696391552],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","279c3e70-f2b8-11ef-a073-37253b8bcbda","pinnedFileId","f3dc8b86-6128-11f1-854e-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019e994f-fcc4-73e9-86ed-2d14fe9f5dfa","tursoName","30ca1bfe8d0b41cdaf0540f09f5a31a1","tursoHostname","30ca1bfe8d0b41cdaf0540f09f5a31a1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789531852468],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":-5,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":46,"_99":100},"isOwned",679,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","ttai","handle","displayName","Tough Tongue AI","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/4b8edab4-7879-48e2-f777-109aa5256800/square512?exp=1789592555&sig=43e35db33bb467ed523e9ea7a6015a250e42dd79ee7cd3ea0097c99142603c5e","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_44":45,"_32":46,"_39":671,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":672,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":673,"_85":674,"_87":675,"_89":25},"tree",[195,233,248,249,250,251],"files",[195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251],"counts",{"_185":64,"_186":162,"_187":64,"_188":189,"_190":191},"contents",[131,132,133,134,135,136],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":179,"_32":180,"_30":181,"_140":-5,"_42":43,"_41":182,"_142":60,"_39":183,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_27":184},{"_44":173,"_32":174,"_30":175,"_140":-5,"_42":43,"_41":162,"_142":60,"_39":176,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_27":178},{"_44":165,"_32":166,"_30":167,"_140":-5,"_42":43,"_41":168,"_142":25,"_39":169,"_13":170,"_34":20,"_36":171,"_24":25,"_146":-5,"_27":172},{"_44":157,"_32":158,"_30":159,"_140":-5,"_42":43,"_41":160,"_142":25,"_39":161,"_13":162,"_34":20,"_36":163,"_24":25,"_146":-5,"_27":164},{"_44":148,"_32":149,"_30":58,"_140":-5,"_42":43,"_41":150,"_142":60,"_39":151,"_13":152,"_34":153,"_36":154,"_24":25,"_146":155,"_27":156},{"_44":137,"_32":138,"_30":139,"_140":-5,"_42":43,"_41":141,"_142":25,"_39":143,"_13":144,"_34":20,"_36":145,"_24":25,"_146":-5,"_27":147},"c0e424dc-0aca-443e-809e-d34ff7e4c74c","val.yml","f3605d0e-6128-11f1-9354-1607ee4eb77e","parentId",212,"latest",["D",1780936729321],7,"# val.yml — metadata contract for this val. Not consumed by `vt` today; reserved\n# for a future repo wrapper over vt-cli (safer deploys, env checks, file typing).\nname: \"uAgents\"\norg: \"ttai\"\npublic: true # intended private; free-plan private-val limit forced public at create\n# Single HTTP service. Two surfaces:\n# /c// → customer functions (key auth; cname taken from the URL)\n# a function may or may not invoke an agent internally\n# /admin → Val Town OAuth-gated admin UI (beer.css)\n# Only index.http.ts is the HTTP val. Other files must avoid Val Town's reserved\n# filename infixes (http, cron, email, …) — e.g. core/api.ts, not core/http.ts.\nfiles:\n index.http.ts: http\n# Env vars this App reads. Set them in the Val Town UI sidebar — never in code.\n# required: App will not work without it | optional: has a safe default\n#\n# Shopify integration is per-customer: it reads `_SHOPIFY_*` (uppercased\n# customer id). Jhaji (`jjs`) → JJS_SHOPIFY_*. Add a merchant by setting their vars.\nenv:\n ADMIN_USERS: required # comma-separated Val Town usernames allowed into /admin\n OPENAI_API_KEY: required # used by the LangChain agents (/c//)\n OAUTH_STATE_ENCRYPTION_KEY: recommended # AES key for the admin OAuth session cookie; `openssl rand -base64 32`\n JJS_SHOPIFY_SHOP: optional # jjs Shopify store hostname, e.g. jhaji.myshopify.com (no scheme)\n JJS_SHOPIFY_CLIENT_ID: optional # jjs Dev Dashboard app client id (client-credentials grant)\n JJS_SHOPIFY_CLIENT_SECRET: optional # jjs Dev Dashboard app client secret\n JJS_SHOPIFY_STOREFRONT_TOKEN: optional # jjs Storefront API token (cart mutations)\n","label",[138],"a17d6cb6-e1b8-4017-bfe6-f364eeab5315","index.http.ts",280,["D",1780941501215],10,"http","// index.http.ts — HTTP entry point, built on Hono. Two surfaces, one app:\n// /c// → customer functions (each customer is a mounted sub-app)\n// /admin → Val Town OAuth admin UI (gated to ADMIN_USERS)\n// A function may invoke an agent internally; the API doesn't distinguish.\n// This file is pure wiring; logic lives in backend/ and frontend/.\n\nimport { Hono } from \"npm:hono@^4\";\nimport { type AdminUc, getAdminUc, withValTownAuth } from \"./backend/core/auth.ts\";\nimport {\n buildAdminView,\n buildCalls,\n buildCallsView,\n saveAuthForm,\n} from \"./backend/core/handlers.ts\";\nimport { apiErrorHandler } from \"./backend/core/api.ts\";\nimport { mountCustomers } from \"./backend/customers/registry.ts\";\nimport { LOGO_MIME, LOGO_SVG } from \"./frontend/assets.ts\";\nimport { renderAdmin, renderDenied, renderLogin } from \"./frontend/admin.tsx\";\nimport { renderCalls } from \"./frontend/calls.tsx\";\n\nconst app = new Hono();\n\n// -----------------------------------------------------------------------------\n// public assets — SVG logo / favicon (no auth; browser-cached)\n// -----------------------------------------------------------------------------\nconst logoResponse = () =>\n new Response(LOGO_SVG, {\n headers: { \"content-type\": LOGO_MIME, \"cache-control\": \"public, max-age=604800\" },\n });\napp.get(\"/logo.svg\", logoResponse);\napp.get(\"/favicon.ico\", logoResponse);\n\n// -----------------------------------------------------------------------------\n// admin — OAuth gate to ADMIN_USERS, then three pages\n// -----------------------------------------------------------------------------\nconst admin = new Hono<{ Variables: { uc: AdminUc } }>();\n\nadmin.use(\"*\", async (c, next) => {\n const uc = await getAdminUc(c.req.raw);\n if (!uc.isAuthed) return c.html(renderLogin(), 401);\n if (!uc.isAdmin) return c.html(renderDenied(uc.username ?? \"\"), 403);\n c.set(\"uc\", uc);\n await next();\n});\n\nadmin.get(\"/\", async (c) => {\n const uc = c.get(\"uc\");\n const saved = c.req.query(\"saved\") === \"1\";\n const view = await buildAdminView(\n uc.username ?? \"\",\n uc.avatarUrl,\n new URL(c.req.url).origin,\n saved,\n );\n return c.html(renderAdmin(view));\n});\n\nadmin.get(\"/calls\", (c) => {\n const uc = c.get(\"uc\");\n const view = buildCallsView(uc.username ?? \"\", uc.avatarUrl, new URL(c.req.url).origin);\n return c.html(renderCalls(view));\n});\n\n// JSON feed for the Recent calls page: filter by customer + selected functions.\nadmin.get(\"/calls.json\", async (c) => {\n const customer = c.req.query(\"customer\") ?? \"\";\n const fns = c.req.queries(\"fn\") ?? [];\n return c.json({ calls: await buildCalls(customer, fns) });\n});\n\nadmin.post(\"/auth\", async (c) => {\n await saveAuthForm(c.req.raw);\n return c.redirect(\"/admin?saved=1\", 303);\n});\nadmin.onError(apiErrorHandler);\n\n// -----------------------------------------------------------------------------\n// wiring — mount surfaces; root error boundary; JSON 404\n// -----------------------------------------------------------------------------\napp.get(\"/\", (c) => c.redirect(\"/admin\"));\napp.route(\"/admin\", admin);\nmountCustomers(app);\n\napp.onError(apiErrorHandler);\napp.notFound((c) => c.json({ ok: false, error: `Not found: ${c.req.path}` }, 404));\n\nexport default withValTownAuth((req) => app.fetch(req));\n","uagents",[149],"24194f00-10cf-47fb-bd6a-e98987c1c4f6","deno.json","f353dd04-6128-11f1-ac3a-1607ee4eb77e",89,["D",1780918461984],1,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"fmt\": {\n \"lineWidth\": 100,\n \"exclude\": [\".vt\"]\n },\n \"lint\": {\n \"exclude\": [\".vt\"],\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-external-import\",\n \"no-import-prefix\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[158],"89ceaee6-2111-47f6-a7ad-62a6b98a6880","README.md","f3e9fe92-6128-11f1-b4a4-1607ee4eb77e",350,["D",1780944718260],19,"# uAgents\n\nA single Val Town HTTP val ([Hono](https://hono.dev) router) that exposes small, per-customer\n**functions** behind a per-customer API key, plus a [beer.css](https://www.beercss.com/) admin UI to\nmanage those keys. A function is a plain request→response unit that **may or may not invoke an\nagent** (LangChain + OpenAI) internally. Deno-native, no build step. Deployed to the `ttai` org.\nPair with **uFns** for lightweight integration endpoints.\n\nTwo surfaces, one val:\n\n| Surface | Path | Auth |\n| --------- | --------------------------- | -------------------------------------- |\n| Functions | `GET\\|POST /c//` | Bearer key, verified for that `cname` |\n| Admin UI | `GET /admin` (`/` → it) | Val Town OAuth, gated to `ADMIN_USERS` |\n\n> This repo does **not** use `vtx`. Use the native `vt` CLI directly. Pushing cleanly is your\n> responsibility.\n\n---\n\n## Layout\n\n```\nuAgents/\n index.http.ts Hono root app: admin sub-app + customer sub-apps + /logo.svg\n val.yml name, files contract, env declarations\n deno.json Deno/Val Town compiler + lint config\n backend/\n core/ cross-cutting infrastructure\n shared.ts env(), JSON helpers, mintKey()\n app.ts static config: globals() + per-customer Secrets types ← registry\n api.ts ApiError, readJsonObject(), error mapping ← mini framework\n db.ts SQLite: customer_auth + call_log (req+resp bodies, batched prune)\n auth.ts OAuth admin gate + authenticate(req, cname)\n handlers.ts admin view assembly + key-config form save + call queries\n agentic-core/ the agent framework — no concrete agents live here\n types.ts Agent / AgentCtx / AgentResult contract\n runtime.ts LangChain ChatOpenAI wiring (global LLM key) + runAgent()\n tool-loop.ts generic model→tools→model loop (reusable by any agent)\n prompt.ts shared input-shaping helpers (withContext, str)\n agents/ concrete agents built on agentic-core\n quote-agent.ts the quote agent (structured output)\n shopify-agent.ts general Shopify operator (full toolset, up to 12 rounds)\n integrations/ external-service modules (one folder per integration)\n shopify/\n config.ts validate a customer's ShopifySecrets → ShopifyConfig (503 on missing)\n token.ts Admin token via client-credentials grant (cached ~24h)\n errors.ts map scope/credential failures to visible 4xx (not masked 502)\n client.ts adminGql() + storefrontGql() (fetch, no SDK)\n snapshot.ts customer profile + pending orders + abandoned checkouts\n cart.ts Storefront cart read / lines add / lines remove\n tools.ts five LangChain tools bound to one store's config\n customers/ one auth scope per customer; their functions live here\n types.ts Fn / FnCtx / Customer / CustomerSpec contracts\n define.ts defineCustomer() — a Hono sub-app per customer\n builtins.ts reusable functions (echo) customers can register\n registry.ts all customers + mountCustomers() ← register here\n jjs/\n index.ts customer: Jhaji (echo, get-customer-info, shopify-sidekick)\n get-customer-info.ts deterministic Shopify read (no LLM)\n shopify-sidekick.ts function that invokes the Shopify agent\n ttai/\n index.ts customer: ToughTongue AI (echo, get-a-new-quote)\n get-a-new-quote.ts function that invokes the quote agent\n frontend/\n layout.tsx Shell: beer.css doc + top app bar (logo + brand + actions + user)\n shared.tsx doc(), UserMenu/LoginLink (navbar), logout, banner\n assets.ts inline SVG \"uA\" logo → served at /logo.svg (favicon + navbar)\n admin.tsx admin (Auth + Debug + TTAI Integration tabs) / login / denied\n debug.tsx Debug tab: live runner (URL + Authorization + curl + body)\n integration.tsx TTAI Integration tab: endpoint URL + params-schema JSON\n calls.tsx Recent calls page (customer + fn filters, expandable req/resp)\n types.ts admin view models\n styles/ modular CSS layers (Next.js-style)\n tokens.ts design tokens + semantic M3 aliases (palette is runtime-generated)\n base.ts document layout + typography scale\n components.ts cards, key row, tabs, chips, table, debug box\n index.ts composes layers → GLOBAL_CSS\n```\n\n> File naming: only `index.http.ts` is the HTTP entry. Val Town infers a file's val-type from\n> reserved name infixes (`http`, `cron`, `email`, …), so the mini-framework lives in `core/api.ts`,\n> **not** `core/http.ts`.\n\n---\n\n## Auth model (per-customer key, cname in the URL)\n\nThe customer (`cname`) is the first path segment: `/c//`. Auth is scoped to that cname:\n\n- Send the key as `Authorization: Bearer ` (or `X-API-Key: `).\n- Each customer is a [Hono](https://hono.dev) sub-app mounted at `/c/`. Its middleware (bound to\n that `id`) calls `authenticate(req, cname)` — loads ``'s config and compares the bearer\n token to the stored key in constant time. Rejected when the customer is unconfigured/disabled\n (403) or the key is missing/wrong (401). The customer module \"owns\" its name + validation by\n construction. An outer middleware records every call (success or denied) to the call log — status,\n latency, and the full request + response bodies (headers stripped, capped).\n- **Admin UI** is gated by Val Town OAuth — only usernames in `ADMIN_USERS` get in.\n\nKeys are minted in the admin UI (generated on first save, rotatable), stored in SQLite, and shown in\nthe UI so you can copy them. They carry a readable `utt__` prefix, but routing no\nlonger depends on the prefix — the URL's `cname` is authoritative.\n\n---\n\n## Customers & functions\n\nEverything served over the API is a **function** — a `Fn = (ctx) => Response`. Functions are\nregistered per customer and exposed at `/c//`. A function may invoke an agent or not; the\nAPI doesn't distinguish. A customer's `index.ts` declares its functions via\n`defineCustomer({ id, label, fns })`; the factory builds a Hono sub-app, wiring auth + call-logging\nmiddleware (bound to that `id`) and a route per function. Routing, methods, and errors are Hono's\njob — there is no hand-rolled path parsing.\n\nEach customer is a folder under `backend/customers/`. To add one:\n\n1. Copy `backend/customers/jjs/` to `backend/customers//` and edit the id + label.\n2. Register it in `backend/customers/registry.ts`.\n3. In the admin UI, generate + enable its key.\n\nCurrent functions:\n\n- **`echo`** (builtin, all customers) — reflects method, query, and body back to the caller.\n- **`get-a-new-quote`** (`ttai`) — invokes a LangChain + OpenAI agent that invents a fresh, original\n quote. Output is schema-constrained (`quote`, `author`, `theme`) via structured output. Optional\n JSON body `{ \"theme\": \"courage\" }`; otherwise a theme is picked for you.\n- **`get-customer-info`** (`jjs`) — deterministic Shopify Admin read (no LLM). Body with at least\n one of `customer_id` / `email` / `phone` → profile, pending orders, abandoned checkouts. The same\n lookup is also exposed to the Shopify agent as its `get_customer_info` tool.\n- **`shopify-sidekick`** (`jjs`) — the single general-purpose Shopify operator (the\n `shopify-agent`). Body `{ prompt, customer_id?, cart_id? }`; plans across the full toolset\n (customer lookup by GID/email/phone, pending orders, abandoned checkouts, cart read + add/remove)\n over up to 12 rounds, then summarises what it found or changed.\n\n**Add a function** — drop a file in `backend/customers//` exporting an `Fn`, then add it to that\ncustomer's `fns` map. Reusable functions (like `echo`) live in `backend/customers/builtins.ts`.\n\n**Invoke an agent from a function** — see `customers/ttai/get-a-new-quote.ts` or\n`customers/jjs/shopify-sidekick.ts`: each adapts the request into an `AgentCtx` and calls\n`runAgent()`. The runtime (`agentic-core/runtime.ts`) owns all LLM wiring, so agents stay\ndeclarative; add new concrete agents under `backend/agents/`. Tool-using agents reuse\n`agentic-core/tool-loop.ts` (model→tools→model). The framework lives in `agentic-core/`; `agents/`\nholds only the concrete agents.\n\n**Add an integration** — create `backend/integrations//` with a customer-agnostic client +\nhelpers (see `shopify/`). Resolve per-customer credentials from `__*` env so adding\na merchant is config-only.\n\n---\n\n## Environment variables\n\nSet these in the **Val Town UI sidebar** — never in code (`Deno.env.set()` is a no-op on Val Town).\nAll config is **static and explicit** in `backend/core/app.ts` (declared in `val.yml`).\n`OAUTH_STATE_ENCRYPTION_KEY` is read directly by the Val Town OAuth middleware (`std/oauth`).\n\n**Two kinds of config, listed explicitly — no prefix magic:**\n\n- **Globals** — `globals()` returns a typed `{ openaiKey, adminUsers }`. Shared infra (the LLM key,\n the admin allow-list); used by the runtime + auth only.\n- **Per-customer secrets** — each customer has a named type (`SecretsJjs`, `SecretsTtai`) and a\n resolver (`jjsSecrets()`) that reads **only that customer's listed env vars** (`JJS_SHOPIFY_*`)\n into a typed object. A customer's `defineCustomer({ secrets })` resolver runs once; every `Fn` /\n `Agent` for that customer is handed its own typed `ctx.secrets` (e.g. a `jjs` function sees\n exactly `SecretsJjs`). Add a customer = add a `Secrets` type + resolver in `app.ts`, then\n pass it in that customer's `index.ts`.\n\n> The isolation is a **soft convention**, not a hard wall — nothing physically stops code from\n> importing `env()`. The value is clarity + types: what each customer can read is declared in one\n> place, and the type system keeps a `jjs` function from reaching another customer's (or a global's)\n> secrets.\n\n| Var | Status | Used by | Purpose |\n| ------------------------------ | ----------- | --------------------------------- | ------------------------------------------------------------ |\n| `ADMIN_USERS` | required | `core/auth.ts` (`/admin`) | Comma-separated Val Town usernames allowed into the admin |\n| `OPENAI_API_KEY` | required | `agentic-core/runtime.ts` | OpenAI key for the LangChain agents (agent-backed functions) |\n| `OAUTH_STATE_ENCRYPTION_KEY` | recommended | `std/oauth` via `withValTownAuth` | AES-GCM key material that encrypts the admin session cookie |\n| `JJS_SHOPIFY_SHOP` | optional | `integrations/shopify` (`jjs`) | jjs store hostname, e.g. `jhaji.myshopify.com` (no scheme) |\n| `JJS_SHOPIFY_CLIENT_ID` | optional | `integrations/shopify/token.ts` | jjs Dev Dashboard app client id — mints Admin tokens |\n| `JJS_SHOPIFY_CLIENT_SECRET` | optional | `integrations/shopify/token.ts` | jjs Dev Dashboard app client secret |\n| `JJS_SHOPIFY_STOREFRONT_TOKEN` | optional | `integrations/shopify` (`jjs`) | jjs Storefront API token — cart mutations |\n\nNotes:\n\n- `ADMIN_USERS` example: `alice,bob`. Empty/unset ⇒ nobody can reach `/admin` (everyone is denied).\n- `OPENAI_API_KEY` only matters for agents. Unset ⇒ agent-backed functions return **503**; plain\n functions (e.g. `echo`) still work.\n- `JJS_SHOPIFY_*` only matter for the `jjs` Shopify functions. A new merchant lists its own vars in\n a `secretsAcme()` resolver (`app.ts`). Unset ⇒ those functions return **503** naming the exact\n var. Storefront token is needed only for cart read + mutations (`shopify-sidekick`).\n- **Admin auth (Shopify Dev Dashboard):** set `CLIENT_ID` + `CLIENT_SECRET` from the app's Settings\n page. `token.ts` exchanges them for a ~24h Admin token via the client-credentials grant and caches\n it. See\n [Admin & Storefront API → Generate tokens](../../../docs/wiki/integrations/shopify/admin-api.md).\n- `OAUTH_STATE_ENCRYPTION_KEY` — if unset, the middleware auto-generates a key and stores it in Val\n Town blob storage per redirect URI. That works, but **set it explicitly** so admin sessions\n survive redeploys and work on self-hosted runtimes. Any high-entropy string works (it's SHA-256'd\n to a 256-bit AES key); generate one with:\n\n```bash\n# generate a 32-byte base64 key (macOS: append `| pbcopy` to copy it)\nopenssl rand -base64 32\n```\n\nThen paste the value into the val's **Environment Variables** sidebar as\n`OAUTH_STATE_ENCRYPTION_KEY`. `vt` does not manage env vars — they must be set in the Val Town UI.\n\n---\n\n## Local → Val Town with `vt`\n\nRun from **inside this directory** (`exp/vals/uAgents/`).\n\n```bash\nvt status # review what changed\nvt push # push (forceful — revert via the Val Town website if needed)\nvt browse # open the deployed val\n```\n\nFirst push of a brand-new val: `vt create uAgents .`. To link an existing remote val, `vt clone` it\nto a temp dir and move its `.vt/` folder next to this code. After pushing, set the\n[environment variables](#environment-variables) in the Val Town UI.\n\n---\n\n## Try it\n\n```bash\n# 1. In /admin, generate + enable a key for \"ttai\", then:\nexport VT_TTAI_APP_TOKEN=\"generate-from-admin-ui\"\nexport VT_JJS_APP_TOKEN=\"generate-from-admin-ui\"\n\n# plain function (echo)\ncurl -X POST https://uagents.val.run/c/ttai/echo \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{\"hi\":\"there\"}'\n\n# agent-backed function (fresh quote)\ncurl -X POST https://uagents.val.run/c/ttai/get-a-new-quote \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{\"theme\":\"craftsmanship\"}'\n```\n\nNegative paths (auth + routing) — handy as a quick smoke test:\n\n```bash\nBASE=https://uagents.val.run\n\n# missing key → 401\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/echo\" -d '{}'\n\n# wrong key → 401\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/echo\" \\\n -H \"Authorization: Bearer nope\" -d '{}'\n\n# unknown customer → 404\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/nope/echo\" \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" -d '{}'\n\n# unknown function on a real customer → 404\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/nope\" \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" -d '{}'\n```\n",[166],"6d14e6de-c8d3-45e7-ba6f-2ed984a1f71b","frontend","f2b2b82a-6128-11f1-9496-1607ee4eb77e",["D",1780696392346],"directory",[174],"157d3e42-b14b-4a4a-b3d1-13e8c95b8213","backend","f2d380b4-6128-11f1-b4a4-1607ee4eb77e",2,["D",1780696392550],[180],"pulls","branches","forks","envVars",{"_192":162,"_194":64},"connections",{"_192":64,"_193":64},"count","unfilledCount","emptyCount",{"_44":179,"_32":180,"_30":181,"_140":-5,"_42":43,"_41":182,"_142":60,"_39":668,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":669,"_27":670},{"_44":663,"_32":638,"_30":632,"_140":181,"_42":43,"_41":664,"_142":60,"_39":665,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":666,"_27":667},{"_44":655,"_32":656,"_30":657,"_140":632,"_42":43,"_41":658,"_142":25,"_39":659,"_13":162,"_34":35,"_36":660,"_24":25,"_146":-5,"_253":661,"_27":662},{"_44":647,"_32":648,"_30":649,"_140":632,"_42":43,"_41":650,"_142":25,"_39":651,"_13":403,"_34":35,"_36":652,"_24":25,"_146":-5,"_253":653,"_27":654},{"_44":639,"_32":640,"_30":641,"_140":632,"_42":43,"_41":642,"_142":60,"_39":643,"_13":296,"_34":35,"_36":644,"_24":25,"_146":-5,"_253":645,"_27":646},{"_44":630,"_32":266,"_30":631,"_140":632,"_42":43,"_41":633,"_142":60,"_39":634,"_13":403,"_34":35,"_36":635,"_24":25,"_146":-5,"_253":636,"_27":637},{"_44":625,"_32":616,"_30":610,"_140":181,"_42":43,"_41":626,"_142":60,"_39":627,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":628,"_27":629},{"_44":617,"_32":618,"_30":619,"_140":610,"_42":43,"_41":620,"_142":25,"_39":621,"_13":296,"_34":35,"_36":622,"_24":25,"_146":-5,"_253":623,"_27":624},{"_44":607,"_32":608,"_30":609,"_140":610,"_42":43,"_41":611,"_142":25,"_39":612,"_13":270,"_34":35,"_36":613,"_24":25,"_146":-5,"_253":614,"_27":615},{"_44":602,"_32":565,"_30":559,"_140":181,"_42":43,"_41":603,"_142":60,"_39":604,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":605,"_27":606},{"_44":594,"_32":595,"_30":596,"_140":559,"_42":43,"_41":597,"_142":60,"_39":598,"_13":182,"_34":35,"_36":599,"_24":25,"_146":-5,"_253":600,"_27":601},{"_44":586,"_32":587,"_30":588,"_140":559,"_42":43,"_41":589,"_142":25,"_39":590,"_13":182,"_34":35,"_36":591,"_24":25,"_146":-5,"_253":592,"_27":593},{"_44":578,"_32":579,"_30":580,"_140":559,"_42":43,"_41":581,"_142":25,"_39":582,"_13":314,"_34":35,"_36":583,"_24":25,"_146":-5,"_253":584,"_27":585},{"_44":574,"_32":33,"_30":31,"_140":559,"_42":43,"_41":14,"_142":25,"_39":575,"_13":403,"_34":35,"_36":38,"_24":25,"_146":-5,"_253":576,"_27":577},{"_44":566,"_32":567,"_30":568,"_140":559,"_42":43,"_41":569,"_142":25,"_39":570,"_13":144,"_34":35,"_36":571,"_24":25,"_146":-5,"_253":572,"_27":573},{"_44":556,"_32":557,"_30":558,"_140":559,"_42":43,"_41":560,"_142":60,"_39":561,"_13":296,"_34":35,"_36":562,"_24":25,"_146":-5,"_253":563,"_27":564},{"_44":551,"_32":466,"_30":460,"_140":181,"_42":43,"_41":552,"_142":60,"_39":553,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":554,"_27":555},{"_44":546,"_32":529,"_30":523,"_140":460,"_42":43,"_41":547,"_142":60,"_39":548,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":549,"_27":550},{"_44":538,"_32":539,"_30":540,"_140":523,"_42":43,"_41":541,"_142":25,"_39":542,"_13":144,"_34":35,"_36":543,"_24":25,"_146":-5,"_253":544,"_27":545},{"_44":530,"_32":354,"_30":531,"_140":523,"_42":43,"_41":532,"_142":25,"_39":533,"_13":534,"_34":35,"_36":535,"_24":25,"_146":-5,"_253":536,"_27":537},{"_44":520,"_32":521,"_30":522,"_140":523,"_42":43,"_41":524,"_142":25,"_39":525,"_13":270,"_34":35,"_36":526,"_24":25,"_146":-5,"_253":527,"_27":528},{"_44":515,"_32":100,"_30":501,"_140":460,"_42":43,"_41":516,"_142":60,"_39":517,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":518,"_27":519},{"_44":507,"_32":508,"_30":509,"_140":501,"_42":43,"_41":510,"_142":60,"_39":511,"_13":144,"_34":35,"_36":512,"_24":25,"_146":-5,"_253":513,"_27":514},{"_44":499,"_32":354,"_30":500,"_140":501,"_42":43,"_41":502,"_142":25,"_39":503,"_13":296,"_34":35,"_36":504,"_24":25,"_146":-5,"_253":505,"_27":506},{"_44":491,"_32":492,"_30":493,"_140":460,"_42":43,"_41":494,"_142":25,"_39":495,"_13":392,"_34":35,"_36":496,"_24":25,"_146":-5,"_253":497,"_27":498},{"_44":483,"_32":484,"_30":485,"_140":460,"_42":43,"_41":486,"_142":60,"_39":487,"_13":144,"_34":35,"_36":488,"_24":25,"_146":-5,"_253":489,"_27":490},{"_44":475,"_32":476,"_30":477,"_140":460,"_42":43,"_41":478,"_142":25,"_39":479,"_13":270,"_34":35,"_36":480,"_24":25,"_146":-5,"_253":481,"_27":482},{"_44":467,"_32":468,"_30":469,"_140":460,"_42":43,"_41":470,"_142":25,"_39":471,"_13":392,"_34":35,"_36":472,"_24":25,"_146":-5,"_253":473,"_27":474},{"_44":458,"_32":266,"_30":459,"_140":460,"_42":43,"_41":461,"_142":60,"_39":462,"_13":270,"_34":35,"_36":463,"_24":25,"_146":-5,"_253":464,"_27":465},{"_44":453,"_32":396,"_30":448,"_140":181,"_42":43,"_41":454,"_142":60,"_39":455,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":456,"_27":457},{"_44":447,"_32":397,"_30":389,"_140":448,"_42":43,"_41":449,"_142":60,"_39":450,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":451,"_27":452},{"_44":439,"_32":440,"_30":441,"_140":389,"_42":43,"_41":442,"_142":25,"_39":443,"_13":162,"_34":35,"_36":444,"_24":25,"_146":-5,"_253":445,"_27":446},{"_44":431,"_32":432,"_30":433,"_140":389,"_42":43,"_41":434,"_142":25,"_39":435,"_13":392,"_34":35,"_36":436,"_24":25,"_146":-5,"_253":437,"_27":438},{"_44":423,"_32":424,"_30":425,"_140":389,"_42":43,"_41":426,"_142":25,"_39":427,"_13":296,"_34":35,"_36":428,"_24":25,"_146":-5,"_253":429,"_27":430},{"_44":415,"_32":416,"_30":417,"_140":389,"_42":43,"_41":418,"_142":60,"_39":419,"_13":392,"_34":35,"_36":420,"_24":25,"_146":-5,"_253":421,"_27":422},{"_44":407,"_32":408,"_30":409,"_140":389,"_42":43,"_41":410,"_142":25,"_39":411,"_13":182,"_34":35,"_36":412,"_24":25,"_146":-5,"_253":413,"_27":414},{"_44":398,"_32":399,"_30":400,"_140":389,"_42":43,"_41":401,"_142":60,"_39":402,"_13":403,"_34":35,"_36":404,"_24":25,"_146":-5,"_253":405,"_27":406},{"_44":386,"_32":387,"_30":388,"_140":389,"_42":43,"_41":390,"_142":25,"_39":391,"_13":392,"_34":35,"_36":393,"_24":25,"_146":-5,"_253":394,"_27":395},{"_44":173,"_32":174,"_30":175,"_140":-5,"_42":43,"_41":162,"_142":60,"_39":383,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":384,"_27":385},{"_44":378,"_32":352,"_30":346,"_140":175,"_42":43,"_41":379,"_142":60,"_39":380,"_13":64,"_34":177,"_36":-5,"_24":25,"_146":-5,"_253":381,"_27":382},{"_44":370,"_32":371,"_30":372,"_140":346,"_42":43,"_41":373,"_142":60,"_39":374,"_13":305,"_34":35,"_36":375,"_24":25,"_146":-5,"_253":376,"_27":377},{"_44":361,"_32":362,"_30":363,"_140":346,"_42":43,"_41":364,"_142":25,"_39":365,"_13":366,"_34":35,"_36":367,"_24":25,"_146":-5,"_253":368,"_27":369},{"_44":353,"_32":354,"_30":355,"_140":346,"_42":43,"_41":356,"_142":60,"_39":357,"_13":64,"_34":35,"_36":358,"_24":25,"_146":-5,"_253":359,"_27":360},{"_44":343,"_32":344,"_30":345,"_140":346,"_42":43,"_41":347,"_142":25,"_39":348,"_13":314,"_34":35,"_36":349,"_24":25,"_146":-5,"_253":350,"_27":351},{"_44":334,"_32":335,"_30":336,"_140":175,"_42":43,"_41":337,"_142":25,"_39":338,"_13":339,"_34":35,"_36":340,"_24":25,"_146":-5,"_253":341,"_27":342},{"_44":326,"_32":327,"_30":328,"_140":175,"_42":43,"_41":329,"_142":60,"_39":330,"_13":182,"_34":35,"_36":331,"_24":25,"_146":-5,"_253":332,"_27":333},{"_44":318,"_32":319,"_30":320,"_140":175,"_42":43,"_41":321,"_142":25,"_39":322,"_13":64,"_34":35,"_36":323,"_24":25,"_146":-5,"_253":324,"_27":325},{"_44":309,"_32":310,"_30":311,"_140":175,"_42":43,"_41":312,"_142":25,"_39":313,"_13":314,"_34":35,"_36":315,"_24":25,"_146":-5,"_253":316,"_27":317},{"_44":300,"_32":301,"_30":302,"_140":175,"_42":43,"_41":303,"_142":25,"_39":304,"_13":305,"_34":35,"_36":306,"_24":25,"_146":-5,"_253":307,"_27":308},{"_44":291,"_32":292,"_30":293,"_140":175,"_42":43,"_41":294,"_142":60,"_39":295,"_13":296,"_34":35,"_36":297,"_24":25,"_146":-5,"_253":298,"_27":299},{"_44":283,"_32":284,"_30":285,"_140":175,"_42":43,"_41":286,"_142":60,"_39":287,"_13":270,"_34":35,"_36":288,"_24":25,"_146":-5,"_253":289,"_27":290},{"_44":274,"_32":275,"_30":276,"_140":175,"_42":43,"_41":277,"_142":25,"_39":278,"_13":279,"_34":35,"_36":280,"_24":25,"_146":-5,"_253":281,"_27":282},{"_44":265,"_32":266,"_30":267,"_140":175,"_42":43,"_41":268,"_142":60,"_39":269,"_13":270,"_34":35,"_36":271,"_24":25,"_146":-5,"_253":272,"_27":273},{"_44":165,"_32":166,"_30":167,"_140":-5,"_42":43,"_41":168,"_142":25,"_39":262,"_13":170,"_34":20,"_36":171,"_24":25,"_146":-5,"_253":263,"_27":264},{"_44":157,"_32":158,"_30":159,"_140":-5,"_42":43,"_41":160,"_142":25,"_39":259,"_13":162,"_34":20,"_36":163,"_24":25,"_146":-5,"_253":260,"_27":261},{"_44":148,"_32":149,"_30":58,"_140":-5,"_42":43,"_41":150,"_142":60,"_39":256,"_13":152,"_34":153,"_36":154,"_24":25,"_146":155,"_253":257,"_27":258},{"_44":137,"_32":138,"_30":139,"_140":-5,"_42":43,"_41":141,"_142":25,"_39":252,"_13":144,"_34":20,"_36":145,"_24":25,"_146":-5,"_253":254,"_27":255},["D",1780936729321],"children",[],[138],["D",1780941501215],[],[149],["D",1780918461984],[],[158],["D",1780944718260],[],[166],"8df317d9-1e53-4d64-bbaf-05bab76aa472","types.ts","f4109fca-6128-11f1-90f7-1607ee4eb77e",334,["D",1780944386447],8,"// types.ts — View models passed from backend handlers into the admin UI.\n\n/** One customer row for the Auth tab + the data the Debug/Integration tabs need. */\nexport interface CustomerView {\n id: string;\n label: string;\n fns: string[];\n secret: string;\n enabled: boolean;\n configured: boolean;\n updatedTs: string;\n descriptions: Record; // fn name → plain-language description\n sampleBodies: Record>; // fn name → example POST body\n paramsSchemas: Record>; // fn name → JSON Schema\n}\n\n/** A single logged invocation, shown (expandable) on the Recent calls page. */\nexport interface CallView {\n id: number;\n customer: string;\n fn: string;\n ok: boolean;\n status: number;\n latency_ms: number;\n detail: string;\n req_body: string;\n resp_body: string;\n ts: string;\n}\n\n/** The full /admin page model: signed-in user + every customer's config. */\nexport interface AdminView {\n username: string;\n avatarUrl?: string;\n baseUrl: string;\n customers: CustomerView[];\n saved: boolean;\n}\n\n/** A customer's selectable functions, for the Recent calls page filters. */\nexport interface CallsCustomer {\n id: string;\n label: string;\n fns: string[];\n}\n\nexport interface CallsView {\n username: string;\n avatarUrl?: string;\n baseUrl: string;\n customers: CallsCustomer[];\n}\n",[],[174,266],"1f6ce29e-a647-4e9d-9be2-8055b3e31c52","shared.tsx","fe520698-632d-11f1-aacf-1607ee4eb77e",362,["D",1780945381363],12,"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// shared.tsx — Render helpers + navbar/chrome shared across admin pages.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\nimport type { ComponentChildren, VNode } from \"https://esm.sh/preact@10.29.1\";\n\n/** Serialize a Preact tree into a full HTML document string. */\nexport function doc(node: VNode): string {\n return \"\" + render(node);\n}\n\n/** SQLite `YYYY-MM-DD HH:MM:SS` (UTC) → ISO string for ``. */\nexport function isoUtc(ts: string): string {\n return ts.replace(\" \", \"T\") + \"Z\";\n}\n\n/** Serialize data for safe inlining inside a `\n \n

Diff · v370