[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_774":775,"_776":777},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_108":89,"_27":53,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":26,"_122":123,"_124":24,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":26,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":24,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":26},"version",425,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":26,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":14,"_41":42,"_23":26},"previous","deleted",true,"deletedHere",false,"path","scripts/delete-metafields.ts","latestPath","fileId","a0f28f54-68a5-11f1-b802-1607ee4eb77e","name","delete-metafields.ts","fileType","script","content","#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// delete-metafields.ts — Delete ALL metafields for Mayank's customer record.\n// Reads current metafields (with their GIDs), bulk-deletes them, then verifies.\n//\n// Usage (from exp/vals/uAgents/):\n// deno task delete-metafields\n\nimport { load } from \"jsr:@std/dotenv@^0.225\";\nimport { jjsSecrets } from \"../backend/core/app.ts\";\nimport { shopifyConfig } from \"../backend/integrations/shopify/config.ts\";\nimport { resolveCustomerGid } from \"../backend/integrations/shopify/snapshot.ts\";\nimport { adminGql } from \"../backend/integrations/shopify/client.ts\";\n\nawait load({ export: true });\n\nconst QA_EMAIL = \"mayank.raj.unofficial@gmail.com\";\n\n// queries + mutation -----------------------------------------------------------\n\nconst FETCH_QUERY = `\nquery($id: ID!) {\n customer(id: $id) {\n metafields(first: 50) {\n edges { node { id namespace key } }\n }\n }\n}`;\n\nconst DELETE_MUTATION = `\nmutation MetafieldsDelete($metafields: [MetafieldIdentifierInput!]!) {\n metafieldsDelete(metafields: $metafields) {\n deletedMetafields { key namespace }\n userErrors { message }\n }\n}`;\n\n// run -------------------------------------------------------------------------\n\nconst cfg = shopifyConfig(jjsSecrets());\n\nconst customerId = await resolveCustomerGid(cfg, { email: QA_EMAIL });\nif (!customerId) {\n console.error(`Customer not found: ${QA_EMAIL}`);\n Deno.exit(1);\n}\n\n// fetch all metafields with their GIDs\nconst fetched = await adminGql<{\n customer: { metafields: { edges: { node: { id: string; namespace: string; key: string } }[] } };\n}>(cfg, FETCH_QUERY, { id: customerId });\n\nconst nodes = fetched.customer.metafields.edges.map((e) => e.node);\n\nif (!nodes.length) {\n console.log(\"No metafields to delete.\");\n Deno.exit(0);\n}\n\nconsole.log(`\\nDeleting ${nodes.length} metafield(s) from ${QA_EMAIL}:`);\nfor (const n of nodes) console.log(` ${n.namespace}.${n.key} (${n.id})`);\n\nconst ids = nodes.map((n) => ({ namespace: n.namespace, key: n.key, ownerId: customerId }));\nconst result = await adminGql<{\n metafieldsDelete: { deletedMetafields: { key: string }[]; userErrors: { message: string }[] };\n}>(cfg, DELETE_MUTATION, { metafields: ids });\n\nif (result.metafieldsDelete.userErrors.length) {\n console.error(\"Errors:\", result.metafieldsDelete.userErrors.map((e) => e.message).join(\"; \"));\n Deno.exit(1);\n}\n\nconsole.log(`✅ Deleted ${result.metafieldsDelete.deletedMetafields.length} metafield(s).`);\n\n// verify\nconst check = await adminGql<{\n customer: { metafields: { edges: unknown[] } };\n}>(cfg, FETCH_QUERY, { id: customerId });\n\nconst remaining = check.customer.metafields.edges.length;\nconsole.log(\n remaining === 0\n ? \"\\nAll clear ✅ — no metafields remaining.\"\n : `\\n⚠️ ${remaining} metafield(s) still present.`,\n);\n","createdAt",["D",1781519600354],"branchVersion","branchId","b9c38076-09b5-49a6-8d65-4b509f9cce50","id","30ca1bfe-8d0b-41cd-af05-40f09f5a31a1","uAgents",["D",1780696391552],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","279c3e70-f2b8-11ef-a073-37253b8bcbda","pinnedFileId","f3dc8b86-6128-11f1-854e-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e994f-fcc4-73e9-86ed-2d14fe9f5dfa","tursoName","30ca1bfe8d0b41cdaf0540f09f5a31a1","tursoHostname","30ca1bfe8d0b41cdaf0540f09f5a31a1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789531852468],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":-5,"_104":105,"_106":26},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",679,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","ttai","handle","displayName","Tough Tongue AI","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/4b8edab4-7879-48e2-f777-109aa5256800/square512?exp=1789587812&sig=af8a70838bb7a8853df1cdb3c6afbdd87adb578348a31d60fa14f44080d75b8f","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":769,"_47":-5,"_48":26,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":24,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":770,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":771,"_83":772,"_85":773,"_87":26},"tree",[208,252,267,271,272,273,274,275],"files",[208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275],"counts",{"_198":62,"_199":162,"_200":62,"_201":202,"_203":204},"contents",[129,130,131,132,133,134,135,136],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":192,"_32":193,"_30":194,"_140":-5,"_41":42,"_40":195,"_142":24,"_38":196,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_27":197},{"_43":187,"_32":188,"_30":189,"_140":-5,"_41":42,"_40":162,"_142":24,"_38":190,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_27":191},{"_43":180,"_32":181,"_30":182,"_140":-5,"_41":42,"_40":183,"_142":24,"_38":184,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_27":186},{"_43":173,"_32":174,"_30":175,"_140":-5,"_41":42,"_40":176,"_142":24,"_38":177,"_13":62,"_34":20,"_36":178,"_23":26,"_146":-5,"_27":179},{"_43":165,"_32":166,"_30":167,"_140":-5,"_41":42,"_40":168,"_142":26,"_38":169,"_13":170,"_34":20,"_36":171,"_23":26,"_146":-5,"_27":172},{"_43":157,"_32":158,"_30":159,"_140":-5,"_41":42,"_40":160,"_142":26,"_38":161,"_13":162,"_34":20,"_36":163,"_23":26,"_146":-5,"_27":164},{"_43":148,"_32":149,"_30":57,"_140":-5,"_41":42,"_40":150,"_142":24,"_38":151,"_13":152,"_34":153,"_36":154,"_23":26,"_146":155,"_27":156},{"_43":137,"_32":138,"_30":139,"_140":-5,"_41":42,"_40":141,"_142":26,"_38":143,"_13":144,"_34":20,"_36":145,"_23":26,"_146":-5,"_27":147},"5c7058d6-3f4f-4861-ba28-3bd7de23ffa2","val.yml","f3605d0e-6128-11f1-9354-1607ee4eb77e","parentId",409,"latest",["D",1781364521141],9,"# val.yml — metadata contract for this val. Not consumed by `vt` today; reserved\n# for a future repo wrapper over vt-cli (safer deploys, env checks, file typing).\nname: \"uAgents\"\norg: \"ttai\"\npublic: true # intended private; free-plan private-val limit forced public at create\n#\n# Two surfaces:\n# /c// → customer functions (Bearer key auth; cname from the URL)\n# /admin → Val Town OAuth-gated admin UI (gated to ADMIN_USERS)\n#\n# Only index.http.ts is the HTTP val. Other files must avoid Val Town's reserved\n# filename infixes (http, cron, email, …) — e.g. core/api.ts, not core/http.ts.\nfiles:\n index.http.ts: http\n\n# Env vars this app reads. Set them in the Val Town UI sidebar — never in code.\n# Shopify vars are per-customer: prefix = uppercased customer id (JJS = Jhaji).\n# The shop must expose Storefront MCP at https://{shop}/api/mcp.\n#\n# required — app will not work without this\n# recommended — has a safe fallback but set explicitly for production\n# optional — feature-flagged; functions 503 with the exact var name when missing\nenv:\n ADMIN_USERS: required # comma-separated Val Town usernames for /admin access\n OPENAI_API_KEY: required # OpenAI key for all LangChain agent-backed functions\n OAUTH_STATE_ENCRYPTION_KEY: recommended # AES-GCM key for admin OAuth session cookie; `openssl rand -base64 32`\n JJS_SHOPIFY_SHOP: optional # Jhaji store hostname, e.g. ttai-merchandise-dev.myshopify.com (no scheme)\n JJS_SHOPIFY_CLIENT_ID: optional # Jhaji Dev Dashboard app client id (client-credentials grant)\n JJS_SHOPIFY_CLIENT_SECRET: optional # Jhaji Dev Dashboard app client secret\n JJS_SHOPIFY_STOREFRONT_TOKEN: optional # recommended — sent to /api/mcp; most MCP ops work without it on dev stores\n","label",[138],"a17d6cb6-e1b8-4017-bfe6-f364eeab5315","index.http.ts",280,["D",1780941501215],10,"http","// index.http.ts — HTTP entry point, built on Hono. Two surfaces, one app:\n// /c// → customer functions (each customer is a mounted sub-app)\n// /admin → Val Town OAuth admin UI (gated to ADMIN_USERS)\n// A function may invoke an agent internally; the API doesn't distinguish.\n// This file is pure wiring; logic lives in backend/ and frontend/.\n\nimport { Hono } from \"npm:hono@^4\";\nimport { type AdminUc, getAdminUc, withValTownAuth } from \"./backend/core/auth.ts\";\nimport {\n buildAdminView,\n buildCalls,\n buildCallsView,\n saveAuthForm,\n} from \"./backend/core/handlers.ts\";\nimport { apiErrorHandler } from \"./backend/core/api.ts\";\nimport { mountCustomers } from \"./backend/customers/registry.ts\";\nimport { LOGO_MIME, LOGO_SVG } from \"./frontend/assets.ts\";\nimport { renderAdmin, renderDenied, renderLogin } from \"./frontend/admin.tsx\";\nimport { renderCalls } from \"./frontend/calls.tsx\";\n\nconst app = new Hono();\n\n// -----------------------------------------------------------------------------\n// public assets — SVG logo / favicon (no auth; browser-cached)\n// -----------------------------------------------------------------------------\nconst logoResponse = () =>\n new Response(LOGO_SVG, {\n headers: { \"content-type\": LOGO_MIME, \"cache-control\": \"public, max-age=604800\" },\n });\napp.get(\"/logo.svg\", logoResponse);\napp.get(\"/favicon.ico\", logoResponse);\n\n// -----------------------------------------------------------------------------\n// admin — OAuth gate to ADMIN_USERS, then three pages\n// -----------------------------------------------------------------------------\nconst admin = new Hono<{ Variables: { uc: AdminUc } }>();\n\nadmin.use(\"*\", async (c, next) => {\n const uc = await getAdminUc(c.req.raw);\n if (!uc.isAuthed) return c.html(renderLogin(), 401);\n if (!uc.isAdmin) return c.html(renderDenied(uc.username ?? \"\"), 403);\n c.set(\"uc\", uc);\n await next();\n});\n\nadmin.get(\"/\", async (c) => {\n const uc = c.get(\"uc\");\n const saved = c.req.query(\"saved\") === \"1\";\n const view = await buildAdminView(\n uc.username ?? \"\",\n uc.avatarUrl,\n new URL(c.req.url).origin,\n saved,\n );\n return c.html(renderAdmin(view));\n});\n\nadmin.get(\"/calls\", (c) => {\n const uc = c.get(\"uc\");\n const view = buildCallsView(uc.username ?? \"\", uc.avatarUrl, new URL(c.req.url).origin);\n return c.html(renderCalls(view));\n});\n\n// JSON feed for the Recent calls page: filter by customer + selected functions.\nadmin.get(\"/calls.json\", async (c) => {\n const customer = c.req.query(\"customer\") ?? \"\";\n const fns = c.req.queries(\"fn\") ?? [];\n return c.json({ calls: await buildCalls(customer, fns) });\n});\n\nadmin.post(\"/auth\", async (c) => {\n await saveAuthForm(c.req.raw);\n return c.redirect(\"/admin?saved=1\", 303);\n});\nadmin.onError(apiErrorHandler);\n\n// -----------------------------------------------------------------------------\n// wiring — mount surfaces; root error boundary; JSON 404\n// -----------------------------------------------------------------------------\napp.get(\"/\", (c) => c.redirect(\"/admin\"));\napp.route(\"/admin\", admin);\nmountCustomers(app);\n\napp.onError(apiErrorHandler);\napp.notFound((c) => c.json({ ok: false, error: `Not found: ${c.req.path}` }, 404));\n\nexport default withValTownAuth((req) => app.fetch(req));\n","uagents",[149],"24194f00-10cf-47fb-bd6a-e98987c1c4f6","deno.json","f353dd04-6128-11f1-ac3a-1607ee4eb77e",89,["D",1780918461984],1,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"fmt\": {\n \"lineWidth\": 100,\n \"exclude\": [\".vt\"]\n },\n \"lint\": {\n \"exclude\": [\".vt\"],\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-external-import\",\n \"no-import-prefix\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[158],"9f1d7cc9-4c31-4ae7-9ac1-4b3c345b6e50","README.md","f3e9fe92-6128-11f1-b4a4-1607ee4eb77e",414,["D",1781364521515],21,"# uAgents\n\nA single Val Town HTTP val ([Hono](https://hono.dev) router) that exposes small, per-customer\n**functions** behind a per-customer API key, plus a [beer.css](https://www.beercss.com/) admin UI to\nmanage those keys. A function is a plain request→response unit that **may or may not invoke an\nagent** (LangChain + OpenAI) internally. Deno-native, no build step. Deployed to the `ttai` org.\nPair with **uFns** for lightweight integration endpoints.\n\nTwo surfaces, one val:\n\n| Surface | Path | Auth |\n| --------- | --------------------------- | -------------------------------------- |\n| Functions | `GET\\|POST /c//` | Bearer key, verified for that `cname` |\n| Admin UI | `GET /admin` (`/` → it) | Val Town OAuth, gated to `ADMIN_USERS` |\n\n> This repo does **not** use `vtx`. Use the native `vt` CLI directly. Pushing cleanly is your\n> responsibility.\n\n---\n\n## Layout\n\n```\nuAgents/\n index.http.ts Hono root app: admin sub-app + customer sub-apps + /logo.svg\n val.yml name, files contract, env declarations\n deno.json Deno/Val Town compiler + lint config\n backend/\n core/ cross-cutting infrastructure\n shared.ts env(), JSON helpers, mintKey()\n app.ts static config: globals() + per-customer Secrets types ← registry\n api.ts ApiError, readJsonObject(), error mapping ← mini framework\n db.ts SQLite: customer_auth + call_log (req+resp bodies, batched prune)\n auth.ts OAuth admin gate + authenticate(req, cname)\n handlers.ts admin view assembly + key-config form save + call queries\n agentic-core/ the agent framework — no concrete agents live here\n types.ts Agent / AgentCtx / AgentResult contract\n runtime.ts LangChain ChatOpenAI wiring (global LLM key) + runAgent()\n tool-loop.ts generic model→tools→model loop (reusable by any agent)\n prompt.ts shared input-shaping helpers (withContext, str, compact)\n agents/ concrete agents built on agentic-core\n quote-agent.ts the quote agent (structured output)\n shopify-mcp-agent.ts unified Shopify agent (Admin tools + Storefront MCP, ≤12 rounds)\n integrations/ external-service modules (one folder per integration)\n shopify/\n config.ts validate a customer's ShopifySecrets → ShopifyConfig (503 on missing)\n token.ts Admin token via client-credentials grant (cached ~24h)\n errors.ts map scope/credential failures to visible 4xx (not masked 502)\n client.ts adminGql() + storefrontGql() (fetch, no SDK)\n snapshot.ts customer profile + pending orders + abandoned checkouts\n tools.ts Admin LangChain tools (customer + abandoned checkouts)\n customers/ one auth scope per customer; their functions live here\n types.ts Fn / FnCtx / Customer / CustomerSpec contracts\n define.ts defineCustomer() — a Hono sub-app per customer\n agent-fn.ts agentFn() — bridge any Agent into an FnSpec\n builtins.ts reusable functions (echo) customers can register\n registry.ts all customers + mountCustomers() ← register here\n jjs/\n index.ts customer: Jhaji (echo, get-customer-info, shopify-sidekick)\n get-customer-info.ts deterministic Shopify read (no LLM)\n shopify-sidekick.ts function that invokes the Shopify agent\n ttai/\n index.ts customer: ToughTongue AI (echo, get-a-new-quote)\n get-a-new-quote.ts function that invokes the quote agent\n frontend/\n layout.tsx Shell: beer.css doc + top app bar (logo + brand + actions + user)\n shared.tsx doc(), UserMenu/LoginLink (navbar), logout, banner\n assets.ts inline SVG \"uA\" logo → served at /logo.svg (favicon + navbar)\n admin.tsx admin (Auth + Debug + TTAI Integration tabs) / login / denied\n debug.tsx Debug tab: live runner (URL + Authorization + curl + body)\n integration.tsx TTAI Integration tab: endpoint URL + params-schema JSON\n auth-header.tsx Authorization header display helper (shared by debug + integration)\n calls.tsx Recent calls page (customer + fn filters, expandable req/resp)\n types.ts admin view models\n styles/ modular CSS layers (Next.js-style)\n tokens.ts design tokens + semantic M3 aliases (palette is runtime-generated)\n base.ts document layout + typography scale\n components.ts cards, key row, tabs, chips, table, debug box\n index.ts composes layers → GLOBAL_CSS\n```\n\n> File naming: only `index.http.ts` is the HTTP entry. Val Town infers a file's val-type from\n> reserved name infixes (`http`, `cron`, `email`, …), so the mini-framework lives in `core/api.ts`,\n> **not** `core/http.ts`.\n\n---\n\n## Auth model (per-customer key, cname in the URL)\n\nThe customer (`cname`) is the first path segment: `/c//`. Auth is scoped to that cname:\n\n- Send the key as `Authorization: Bearer ` (or `X-API-Key: `).\n- Each customer is a [Hono](https://hono.dev) sub-app mounted at `/c/`. Its middleware (bound to\n that `id`) calls `authenticate(req, cname)` — loads ``'s config and compares the bearer\n token to the stored key in constant time. Rejected when the customer is unconfigured/disabled\n (403) or the key is missing/wrong (401). The customer module \"owns\" its name + validation by\n construction. An outer middleware records every call (success or denied) to the call log — status,\n latency, and the full request + response bodies (headers stripped, capped).\n- **Admin UI** is gated by Val Town OAuth — only usernames in `ADMIN_USERS` get in.\n\nKeys are minted in the admin UI (generated on first save, rotatable), stored in SQLite, and shown in\nthe UI so you can copy them. They carry a readable `utt__` prefix, but routing no\nlonger depends on the prefix — the URL's `cname` is authoritative.\n\n### Security properties (code is public)\n\nThe val is public on Val Town — anyone can read the source. Security rests on secrets, not obscurity:\n\n| Surface | Protection | Notes |\n| -------------------- | ------------------------------------------ | ----------------------------------------------------------------------- |\n| `/c//` | Per-customer Bearer key (SQLite) | Constant-time compare; 403 when disabled |\n| `/admin/*` | Val Town OAuth + `ADMIN_USERS` allow-list | All sub-routes including `calls.json` |\n| `/admin/auth` (POST) | OAuth + admin check + registry guard | `customer` field validated against known registry — rejects unknown ids |\n| Shopify creds | Val Town env vars (never in code/logs) | Only read server-side; 503 names missing var |\n| Call log bodies | Stored headers-stripped, capped at 8 KB | Admin-only read; request bodies are logged |\n| Key length timing | Early-exit on mismatched length | Acceptable: all keys share the fixed-length prefix |\n| Rate limiting | None per-customer beyond Val Town platform | An attacker needs a valid key (admin-issued) to reach agents |\n\n---\n\n## Customers & functions\n\nEverything served over the API is a **function** — a `Fn = (ctx) => Response`. Functions are\nregistered per customer and exposed at `/c//`. A function may invoke an agent or not; the\nAPI doesn't distinguish. A customer's `index.ts` declares its functions via\n`defineCustomer({ id, label, fns })`; the factory builds a Hono sub-app, wiring auth + call-logging\nmiddleware (bound to that `id`) and a route per function. Routing, methods, and errors are Hono's\njob — there is no hand-rolled path parsing.\n\nEach customer is a folder under `backend/customers/`. To add one:\n\n1. Copy `backend/customers/jjs/` to `backend/customers//` and edit the id + label.\n2. Register it in `backend/customers/registry.ts`.\n3. In the admin UI, generate + enable its key.\n\nCurrent functions:\n\n- **`echo`** (builtin, all customers) — reflects method, query, and body back to the caller.\n- **`get-a-new-quote`** (`ttai`) — invokes a LangChain + OpenAI agent that invents a fresh, original\n quote. Output is schema-constrained (`quote`, `author`, `theme`) via structured output. Optional\n JSON body `{ \"theme\": \"courage\" }`; otherwise a theme is picked for you.\n- **`get-customer-info`** (`jjs`) — deterministic Shopify Admin read (no LLM). Body with at least\n one of `customer_id` / `customer_email` / `customer_phone` → profile, pending orders, abandoned\n checkouts. The same lookup is exposed to the agent as `get_customer_info`.\n- **`shopify-sidekick`** (`jjs`) — full-service Shopify agent (`shopify-mcp-agent`). Body\n `{ prompt, customer_id?, customer_email?, customer_phone?, cart_id? }`. Combines two Admin tools\n (customer lookup, abandoned checkouts) with five Storefront MCP tools from the shop's `/api/mcp`\n (catalog search, product details, cart create/update, policies). Up to 12 tool rounds.\n\n**Add a function** — drop a file in `backend/customers//` exporting an `Fn`, then add it to that\ncustomer's `fns` map. Reusable functions (like `echo`) live in `backend/customers/builtins.ts`.\n\n**Invoke an agent from a function** — see `customers/ttai/get-a-new-quote.ts` or\n`customers/jjs/shopify-sidekick.ts`: each adapts the request into an `AgentCtx` and calls\n`runAgent()`. The runtime (`agentic-core/runtime.ts`) owns all LLM wiring, so agents stay\ndeclarative; add new concrete agents under `backend/agents/`. Tool-using agents reuse\n`agentic-core/tool-loop.ts` (model→tools→model). The framework lives in `agentic-core/`; `agents/`\nholds only the concrete agents.\n\n**Add an integration** — create `backend/integrations//` with a customer-agnostic client +\nhelpers (see `shopify/`). Resolve per-customer credentials from `__*` env so adding\na merchant is config-only.\n\n---\n\n## Environment variables\n\nSet these in the **Val Town UI sidebar** — never in code (`Deno.env.set()` is a no-op on Val Town).\nAll config is **static and explicit** in `backend/core/app.ts` (declared in `val.yml`).\n`OAUTH_STATE_ENCRYPTION_KEY` is read directly by the Val Town OAuth middleware (`std/oauth`).\n\n**Two kinds of config, listed explicitly — no prefix magic:**\n\n- **Globals** — `globals()` returns a typed `{ openaiKey, adminUsers }`. Shared infra (the LLM key,\n the admin allow-list); used by the runtime + auth only.\n- **Per-customer secrets** — each customer has a named type (`SecretsJjs`, `SecretsTtai`) and a\n resolver (`jjsSecrets()`) that reads **only that customer's listed env vars** (`JJS_SHOPIFY_*`)\n into a typed object. A customer's `defineCustomer({ secrets })` resolver runs once; every `Fn` /\n `Agent` for that customer is handed its own typed `ctx.secrets` (e.g. a `jjs` function sees\n exactly `SecretsJjs`). Add a customer = add a `Secrets` type + resolver in `app.ts`, then\n pass it in that customer's `index.ts`.\n\n> The isolation is a **soft convention**, not a hard wall — nothing physically stops code from\n> importing `env()`. The value is clarity + types: what each customer can read is declared in one\n> place, and the type system keeps a `jjs` function from reaching another customer's (or a global's)\n> secrets.\n\n| Var | Status | Used by | Purpose |\n| ------------------------------ | ----------- | --------------------------------- | ------------------------------------------------------------ |\n| `ADMIN_USERS` | required | `core/auth.ts` (`/admin`) | Comma-separated Val Town usernames allowed into the admin |\n| `OPENAI_API_KEY` | required | `agentic-core/runtime.ts` | OpenAI key for the LangChain agents (agent-backed functions) |\n| `OAUTH_STATE_ENCRYPTION_KEY` | recommended | `std/oauth` via `withValTownAuth` | AES-GCM key material that encrypts the admin session cookie |\n| `JJS_SHOPIFY_SHOP` | optional | `integrations/shopify` (`jjs`) | jjs store hostname — must expose `/api/mcp` (no scheme) |\n| `JJS_SHOPIFY_CLIENT_ID` | optional | `integrations/shopify/token.ts` | jjs Dev Dashboard app client id — mints Admin tokens |\n| `JJS_SHOPIFY_CLIENT_SECRET` | optional | `integrations/shopify/token.ts` | jjs Dev Dashboard app client secret |\n| `JJS_SHOPIFY_STOREFRONT_TOKEN` | optional | `integrations/shopify` (`jjs`) | recommended — sent to `/api/mcp`; many ops work without it |\n\nNotes:\n\n- `ADMIN_USERS` example: `alice,bob`. Empty/unset ⇒ nobody can reach `/admin` (everyone is denied).\n- `OPENAI_API_KEY` only matters for agents. Unset ⇒ agent-backed functions return **503**; plain\n functions (e.g. `echo`) still work.\n- `JJS_SHOPIFY_*` only matter for the `jjs` Shopify functions. A new merchant lists its own vars in\n a `secretsAcme()` resolver (`app.ts`). Unset shop/client creds ⇒ those functions return **503**\n naming the exact var. `JJS_SHOPIFY_STOREFRONT_TOKEN` is optional — the unified agent uses Shopify's\n `/api/mcp` and many catalog/cart ops work without it on dev stores; set it for production.\n- **Admin auth (Shopify Dev Dashboard):** set `CLIENT_ID` + `CLIENT_SECRET` from the app's Settings\n page. `token.ts` exchanges them for a ~24h Admin token via the client-credentials grant and caches\n it. See\n [Admin & Storefront API → Generate tokens](../../../docs/wiki/integrations/shopify/admin-api.md).\n- `OAUTH_STATE_ENCRYPTION_KEY` — if unset, the middleware auto-generates a key and stores it in Val\n Town blob storage per redirect URI. That works, but **set it explicitly** so admin sessions\n survive redeploys and work on self-hosted runtimes. Any high-entropy string works (it's SHA-256'd\n to a 256-bit AES key); generate one with:\n\n```bash\n# generate a 32-byte base64 key (macOS: append `| pbcopy` to copy it)\nopenssl rand -base64 32\n```\n\nThen paste the value into the val's **Environment Variables** sidebar as\n`OAUTH_STATE_ENCRYPTION_KEY`. `vt` does not manage env vars — they must be set in the Val Town UI.\n\n---\n\n## Local → Val Town with `vt`\n\nRun from **inside this directory** (`exp/vals/uAgents/`).\n\n```bash\nvt status # review what changed\nvt push # push (forceful — revert via the Val Town website if needed)\nvt browse # open the deployed val\n```\n\nFirst push of a brand-new val: `vt create uAgents .`. To link an existing remote val, `vt clone` it\nto a temp dir and move its `.vt/` folder next to this code. After pushing, set the\n[environment variables](#environment-variables) in the Val Town UI.\n\n---\n\n## Try it\n\n```bash\n# 1. In /admin, generate + enable a key for \"ttai\", then:\nexport VT_TTAI_APP_TOKEN=\"generate-from-admin-ui\"\nexport VT_JJS_APP_TOKEN=\"generate-from-admin-ui\"\n\n# plain function (echo)\ncurl -X POST https://uagents.val.run/c/ttai/echo \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{\"hi\":\"there\"}'\n\n# agent-backed function (fresh quote)\ncurl -X POST https://uagents.val.run/c/ttai/get-a-new-quote \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{\"theme\":\"craftsmanship\"}'\n\n# jjs Shopify sidekick (Admin + Storefront MCP)\ncurl -X POST https://uagents.val.run/c/jjs/shopify-sidekick \\\n -H \"Authorization: Bearer $VT_JJS_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"prompt\":\"Search for hoodies and add the first one to a new cart\",\"customer_email\":\"buyer@example.com\"}'\n```\n\nNegative paths (auth + routing) — handy as a quick smoke test:\n\n```bash\nBASE=https://uagents.val.run\n\n# missing key → 401\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/echo\" -d '{}'\n\n# wrong key → 401\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/echo\" \\\n -H \"Authorization: Bearer nope\" -d '{}'\n\n# unknown customer → 404\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/nope/echo\" \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" -d '{}'\n\n# unknown function on a real customer → 404\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/nope\" \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" -d '{}'\n```\n",[166],"d84c0d0f-d790-4707-b0e0-a3639874eb9d",".env.sample","a09df8b8-68a5-11f1-9dd7-1607ee4eb77e",420,["D",1781519599844],"# Shopify Dev Dashboard app credentials (same vars as pushed to Val Town)\n# JJS — Jhaji merchant store\nJJS_SHOPIFY_SHOP=ttai-merchandise-dev.myshopify.com\nJJS_SHOPIFY_CLIENT_ID=\nJJS_SHOPIFY_CLIENT_SECRET=\n\n# TTAI — ToughTongue AI internal dev store (for testing before production)\nTTAI_SHOPIFY_SHOP=\nTTAI_SHOPIFY_CLIENT_ID=\nTTAI_SHOPIFY_CLIENT_SECRET=\n",[174],"ff7f2101-71a5-425e-a367-560ef13a2086","scripts","a06c5628-68a5-11f1-b189-1607ee4eb77e",416,["D",1781519599541],"directory",[181],"6d14e6de-c8d3-45e7-ba6f-2ed984a1f71b","frontend","f2b2b82a-6128-11f1-9496-1607ee4eb77e",["D",1780696392346],[188],"157d3e42-b14b-4a4a-b3d1-13e8c95b8213","backend","f2d380b4-6128-11f1-b4a4-1607ee4eb77e",2,["D",1780696392550],[193],"pulls","branches","forks","envVars",{"_205":162,"_207":62},"connections",{"_205":62,"_206":62},"count","unfilledCount","emptyCount",{"_43":192,"_32":193,"_30":194,"_140":-5,"_41":42,"_40":195,"_142":24,"_38":766,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":767,"_27":768},{"_43":761,"_32":736,"_30":730,"_140":194,"_41":42,"_40":762,"_142":24,"_38":763,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":764,"_27":765},{"_43":753,"_32":754,"_30":755,"_140":730,"_41":42,"_40":756,"_142":24,"_38":757,"_13":195,"_34":35,"_36":758,"_23":26,"_146":-5,"_277":759,"_27":760},{"_43":745,"_32":746,"_30":747,"_140":730,"_41":42,"_40":748,"_142":26,"_38":749,"_13":453,"_34":35,"_36":750,"_23":26,"_146":-5,"_277":751,"_27":752},{"_43":737,"_32":738,"_30":739,"_140":730,"_41":42,"_40":740,"_142":24,"_38":741,"_13":346,"_34":35,"_36":742,"_23":26,"_146":-5,"_277":743,"_27":744},{"_43":728,"_32":316,"_30":729,"_140":730,"_41":42,"_40":731,"_142":24,"_38":732,"_13":453,"_34":35,"_36":733,"_23":26,"_146":-5,"_277":734,"_27":735},{"_43":723,"_32":714,"_30":708,"_140":194,"_41":42,"_40":724,"_142":24,"_38":725,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":726,"_27":727},{"_43":715,"_32":716,"_30":717,"_140":708,"_41":42,"_40":718,"_142":26,"_38":719,"_13":346,"_34":35,"_36":720,"_23":26,"_146":-5,"_277":721,"_27":722},{"_43":705,"_32":706,"_30":707,"_140":708,"_41":42,"_40":709,"_142":26,"_38":710,"_13":364,"_34":35,"_36":711,"_23":26,"_146":-5,"_277":712,"_27":713},{"_43":700,"_32":659,"_30":653,"_140":194,"_41":42,"_40":701,"_142":24,"_38":702,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":703,"_27":704},{"_43":692,"_32":693,"_30":694,"_140":653,"_41":42,"_40":695,"_142":24,"_38":696,"_13":195,"_34":35,"_36":697,"_23":26,"_146":-5,"_277":698,"_27":699},{"_43":684,"_32":685,"_30":686,"_140":653,"_41":42,"_40":687,"_142":26,"_38":688,"_13":195,"_34":35,"_36":689,"_23":26,"_146":-5,"_277":690,"_27":691},{"_43":676,"_32":677,"_30":678,"_140":653,"_41":42,"_40":679,"_142":26,"_38":680,"_13":399,"_34":35,"_36":681,"_23":26,"_146":-5,"_277":682,"_27":683},{"_43":668,"_32":669,"_30":670,"_140":653,"_41":42,"_40":671,"_142":26,"_38":672,"_13":453,"_34":35,"_36":673,"_23":26,"_146":-5,"_277":674,"_27":675},{"_43":660,"_32":661,"_30":662,"_140":653,"_41":42,"_40":663,"_142":24,"_38":664,"_13":320,"_34":35,"_36":665,"_23":26,"_146":-5,"_277":666,"_27":667},{"_43":650,"_32":651,"_30":652,"_140":653,"_41":42,"_40":654,"_142":24,"_38":655,"_13":346,"_34":35,"_36":656,"_23":26,"_146":-5,"_277":657,"_27":658},{"_43":645,"_32":517,"_30":511,"_140":194,"_41":42,"_40":646,"_142":24,"_38":647,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":648,"_27":649},{"_43":640,"_32":610,"_30":604,"_140":511,"_41":42,"_40":641,"_142":24,"_38":642,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":643,"_27":644},{"_43":633,"_32":301,"_30":634,"_140":604,"_41":42,"_40":635,"_142":26,"_38":636,"_13":144,"_34":35,"_36":637,"_23":26,"_146":-5,"_277":638,"_27":639},{"_43":626,"_32":575,"_30":627,"_140":604,"_41":42,"_40":628,"_142":26,"_38":629,"_13":62,"_34":35,"_36":630,"_23":26,"_146":-5,"_277":631,"_27":632},{"_43":618,"_32":405,"_30":619,"_140":604,"_41":42,"_40":620,"_142":26,"_38":621,"_13":622,"_34":35,"_36":623,"_23":26,"_146":-5,"_277":624,"_27":625},{"_43":611,"_32":560,"_30":612,"_140":604,"_41":42,"_40":613,"_142":26,"_38":614,"_13":62,"_34":35,"_36":615,"_23":26,"_146":-5,"_277":616,"_27":617},{"_43":602,"_32":551,"_30":603,"_140":604,"_41":42,"_40":605,"_142":26,"_38":606,"_13":355,"_34":35,"_36":607,"_23":26,"_146":-5,"_277":608,"_27":609},{"_43":597,"_32":98,"_30":553,"_140":511,"_41":42,"_40":598,"_142":24,"_38":599,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":600,"_27":601},{"_43":589,"_32":590,"_30":591,"_140":553,"_41":42,"_40":592,"_142":24,"_38":593,"_13":364,"_34":35,"_36":594,"_23":26,"_146":-5,"_277":595,"_27":596},{"_43":582,"_32":301,"_30":583,"_140":553,"_41":42,"_40":584,"_142":26,"_38":585,"_13":62,"_34":35,"_36":586,"_23":26,"_146":-5,"_277":587,"_27":588},{"_43":574,"_32":575,"_30":576,"_140":553,"_41":42,"_40":577,"_142":26,"_38":578,"_13":62,"_34":35,"_36":579,"_23":26,"_146":-5,"_277":580,"_27":581},{"_43":567,"_32":405,"_30":568,"_140":553,"_41":42,"_40":569,"_142":26,"_38":570,"_13":346,"_34":35,"_36":571,"_23":26,"_146":-5,"_277":572,"_27":573},{"_43":559,"_32":560,"_30":561,"_140":553,"_41":42,"_40":562,"_142":26,"_38":563,"_13":62,"_34":35,"_36":564,"_23":26,"_146":-5,"_277":565,"_27":566},{"_43":550,"_32":551,"_30":552,"_140":553,"_41":42,"_40":554,"_142":26,"_38":555,"_13":62,"_34":35,"_36":556,"_23":26,"_146":-5,"_277":557,"_27":558},{"_43":542,"_32":543,"_30":544,"_140":511,"_41":42,"_40":545,"_142":26,"_38":546,"_13":462,"_34":35,"_36":547,"_23":26,"_146":-5,"_277":548,"_27":549},{"_43":534,"_32":535,"_30":536,"_140":511,"_41":42,"_40":537,"_142":24,"_38":538,"_13":364,"_34":35,"_36":539,"_23":26,"_146":-5,"_277":540,"_27":541},{"_43":526,"_32":527,"_30":528,"_140":511,"_41":42,"_40":529,"_142":26,"_38":530,"_13":320,"_34":35,"_36":531,"_23":26,"_146":-5,"_277":532,"_27":533},{"_43":518,"_32":519,"_30":520,"_140":511,"_41":42,"_40":521,"_142":26,"_38":522,"_13":462,"_34":35,"_36":523,"_23":26,"_146":-5,"_277":524,"_27":525},{"_43":509,"_32":316,"_30":510,"_140":511,"_41":42,"_40":512,"_142":24,"_38":513,"_13":320,"_34":35,"_36":514,"_23":26,"_146":-5,"_277":515,"_27":516},{"_43":504,"_32":446,"_30":499,"_140":194,"_41":42,"_40":505,"_142":24,"_38":506,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":507,"_27":508},{"_43":498,"_32":447,"_30":440,"_140":499,"_41":42,"_40":500,"_142":24,"_38":501,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":502,"_27":503},{"_43":490,"_32":491,"_30":492,"_140":440,"_41":42,"_40":493,"_142":26,"_38":494,"_13":346,"_34":35,"_36":495,"_23":26,"_146":-5,"_277":496,"_27":497},{"_43":482,"_32":483,"_30":484,"_140":440,"_41":42,"_40":485,"_142":26,"_38":486,"_13":453,"_34":35,"_36":487,"_23":26,"_146":-5,"_277":488,"_27":489},{"_43":474,"_32":475,"_30":476,"_140":440,"_41":42,"_40":477,"_142":24,"_38":478,"_13":462,"_34":35,"_36":479,"_23":26,"_146":-5,"_277":480,"_27":481},{"_43":466,"_32":467,"_30":468,"_140":440,"_41":42,"_40":469,"_142":26,"_38":470,"_13":62,"_34":35,"_36":471,"_23":26,"_146":-5,"_277":472,"_27":473},{"_43":457,"_32":458,"_30":459,"_140":440,"_41":42,"_40":460,"_142":26,"_38":461,"_13":462,"_34":35,"_36":463,"_23":26,"_146":-5,"_277":464,"_27":465},{"_43":448,"_32":449,"_30":450,"_140":440,"_41":42,"_40":451,"_142":24,"_38":452,"_13":453,"_34":35,"_36":454,"_23":26,"_146":-5,"_277":455,"_27":456},{"_43":437,"_32":438,"_30":439,"_140":440,"_41":42,"_40":441,"_142":26,"_38":442,"_13":320,"_34":35,"_36":443,"_23":26,"_146":-5,"_277":444,"_27":445},{"_43":187,"_32":188,"_30":189,"_140":-5,"_41":42,"_40":162,"_142":24,"_38":434,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":435,"_27":436},{"_43":429,"_32":403,"_30":396,"_140":189,"_41":42,"_40":430,"_142":24,"_38":431,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":432,"_27":433},{"_43":421,"_32":422,"_30":423,"_140":396,"_41":42,"_40":424,"_142":24,"_38":425,"_13":355,"_34":35,"_36":426,"_23":26,"_146":-5,"_277":427,"_27":428},{"_43":412,"_32":413,"_30":414,"_140":396,"_41":42,"_40":415,"_142":26,"_38":416,"_13":417,"_34":35,"_36":418,"_23":26,"_146":-5,"_277":419,"_27":420},{"_43":404,"_32":405,"_30":406,"_140":396,"_41":42,"_40":407,"_142":24,"_38":408,"_13":62,"_34":35,"_36":409,"_23":26,"_146":-5,"_277":410,"_27":411},{"_43":393,"_32":394,"_30":395,"_140":396,"_41":42,"_40":397,"_142":26,"_38":398,"_13":399,"_34":35,"_36":400,"_23":26,"_146":-5,"_277":401,"_27":402},{"_43":384,"_32":385,"_30":386,"_140":189,"_41":42,"_40":387,"_142":26,"_38":388,"_13":389,"_34":35,"_36":390,"_23":26,"_146":-5,"_277":391,"_27":392},{"_43":376,"_32":377,"_30":378,"_140":189,"_41":42,"_40":379,"_142":24,"_38":380,"_13":195,"_34":35,"_36":381,"_23":26,"_146":-5,"_277":382,"_27":383},{"_43":368,"_32":369,"_30":370,"_140":189,"_41":42,"_40":371,"_142":24,"_38":372,"_13":162,"_34":35,"_36":373,"_23":26,"_146":-5,"_277":374,"_27":375},{"_43":359,"_32":360,"_30":361,"_140":189,"_41":42,"_40":362,"_142":24,"_38":363,"_13":364,"_34":35,"_36":365,"_23":26,"_146":-5,"_277":366,"_27":367},{"_43":350,"_32":351,"_30":352,"_140":189,"_41":42,"_40":353,"_142":26,"_38":354,"_13":355,"_34":35,"_36":356,"_23":26,"_146":-5,"_277":357,"_27":358},{"_43":341,"_32":342,"_30":343,"_140":189,"_41":42,"_40":344,"_142":24,"_38":345,"_13":346,"_34":35,"_36":347,"_23":26,"_146":-5,"_277":348,"_27":349},{"_43":333,"_32":334,"_30":335,"_140":189,"_41":42,"_40":336,"_142":24,"_38":337,"_13":320,"_34":35,"_36":338,"_23":26,"_146":-5,"_277":339,"_27":340},{"_43":324,"_32":325,"_30":326,"_140":189,"_41":42,"_40":327,"_142":24,"_38":328,"_13":329,"_34":35,"_36":330,"_23":26,"_146":-5,"_277":331,"_27":332},{"_43":315,"_32":316,"_30":317,"_140":189,"_41":42,"_40":318,"_142":24,"_38":319,"_13":320,"_34":35,"_36":321,"_23":26,"_146":-5,"_277":322,"_27":323},{"_43":180,"_32":181,"_30":182,"_140":-5,"_41":42,"_40":183,"_142":24,"_38":312,"_13":62,"_34":185,"_36":-5,"_23":26,"_146":-5,"_277":313,"_27":314},{"_43":308,"_32":33,"_30":31,"_140":182,"_41":42,"_40":14,"_142":26,"_38":309,"_13":62,"_34":35,"_36":37,"_23":26,"_146":-5,"_277":310,"_27":311},{"_43":300,"_32":301,"_30":302,"_140":182,"_41":42,"_40":303,"_142":26,"_38":304,"_13":62,"_34":35,"_36":305,"_23":26,"_146":-5,"_277":306,"_27":307},{"_43":292,"_32":293,"_30":294,"_140":182,"_41":42,"_40":295,"_142":26,"_38":296,"_13":62,"_34":35,"_36":297,"_23":26,"_146":-5,"_277":298,"_27":299},{"_43":173,"_32":174,"_30":175,"_140":-5,"_41":42,"_40":176,"_142":24,"_38":289,"_13":62,"_34":20,"_36":178,"_23":26,"_146":-5,"_277":290,"_27":291},{"_43":165,"_32":166,"_30":167,"_140":-5,"_41":42,"_40":168,"_142":26,"_38":286,"_13":170,"_34":20,"_36":171,"_23":26,"_146":-5,"_277":287,"_27":288},{"_43":157,"_32":158,"_30":159,"_140":-5,"_41":42,"_40":160,"_142":26,"_38":283,"_13":162,"_34":20,"_36":163,"_23":26,"_146":-5,"_277":284,"_27":285},{"_43":148,"_32":149,"_30":57,"_140":-5,"_41":42,"_40":150,"_142":24,"_38":280,"_13":152,"_34":153,"_36":154,"_23":26,"_146":155,"_277":281,"_27":282},{"_43":137,"_32":138,"_30":139,"_140":-5,"_41":42,"_40":141,"_142":26,"_38":276,"_13":144,"_34":20,"_36":145,"_23":26,"_146":-5,"_277":278,"_27":279},["D",1781364521141],"children",[],[138],["D",1780941501215],[],[149],["D",1780918461984],[],[158],["D",1781364521515],[],[166],["D",1781519599844],[],[174],"37e464f7-404f-4e26-91da-4003ad056297","set-metafields.ts","a0c6b2bc-68a5-11f1-a8ac-1607ee4eb77e",422,["D",1781519600133],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// set-metafields.ts — QA script: write a known post-session payload to Mayank's\n// customer record and confirm the metafields came back correctly.\n// Hardcoded — run this after any change to post-feedback logic to verify end-to-end.\n//\n// Usage (from exp/vals/uAgents/):\n// deno task set-metafields\n\nimport { load } from \"jsr:@std/dotenv@^0.225\";\nimport { jjsSecrets } from \"../backend/core/app.ts\";\nimport { shopifyConfig } from \"../backend/integrations/shopify/config.ts\";\nimport { resolveCustomerGid } from \"../backend/integrations/shopify/snapshot.ts\";\nimport { setMetafields, readMetafields } from \"../backend/integrations/shopify/metafields.ts\";\nimport type { MetafieldInput, MetafieldType } from \"../backend/integrations/shopify/metafields.ts\";\n\nawait load({ export: true });\n\n// -----------------------------------------------------------------------------\n// hardcoded QA fixture\n// -----------------------------------------------------------------------------\n\nconst QA_EMAIL = \"mayank.raj.unofficial@gmail.com\";\nconst NAMESPACE = \"ttai_call\";\n\nconst QA_VARS: Record = {\n call_outcome: \"order_placed\",\n cart_recovery_score: \"9\",\n items_ordered: \"Mithila Special Mango 250g\",\n order_total: \"490\",\n abandonment_reason: \"cod_not_showing\",\n customer_address: \"Pre-existing address confirmed\",\n follow_up_action: \"Send WhatsApp confirmation — Rs 490 COD order placed\",\n};\n\nconst QA_SESSION = {\n session_id: \"qa-script-001\",\n scenario_id: \"b67e6a0867d19142d9c90521\",\n call_ts: \"2026-06-15T00:00:00Z\",\n};\n\nconst TYPE_MAP: Record = {\n cart_recovery_score: \"number_integer\",\n order_total: \"number_decimal\",\n call_ts: \"date_time\",\n};\n\n// Shopify normalises number_decimal values (e.g. \"490\" → \"490.0\").\nconst DECIMAL_KEYS = new Set(\n Object.entries(TYPE_MAP)\n .filter(([, t]) => t === \"number_decimal\")\n .map(([k]) => k),\n);\nfunction normaliseValue(key: string, value: string): string {\n if (DECIMAL_KEYS.has(key) && !value.includes(\".\")) return `${value}.0`;\n return value;\n}\n\n// -----------------------------------------------------------------------------\n// write\n// -----------------------------------------------------------------------------\n\nconst cfg = shopifyConfig(jjsSecrets());\n\nconst customerId = await resolveCustomerGid(cfg, { email: QA_EMAIL });\nif (!customerId) {\n console.error(`Customer not found: ${QA_EMAIL}`);\n Deno.exit(1);\n}\n\nconst inputs: MetafieldInput[] = [\n {\n ownerId: customerId,\n namespace: NAMESPACE,\n key: \"session_id\",\n type: \"single_line_text_field\",\n value: QA_SESSION.session_id,\n },\n {\n ownerId: customerId,\n namespace: NAMESPACE,\n key: \"scenario_id\",\n type: \"single_line_text_field\",\n value: QA_SESSION.scenario_id,\n },\n {\n ownerId: customerId,\n namespace: NAMESPACE,\n key: \"call_ts\",\n type: \"date_time\",\n value: QA_SESSION.call_ts,\n },\n ...Object.entries(QA_VARS).map(\n ([key, value]): MetafieldInput => ({\n ownerId: customerId,\n namespace: NAMESPACE,\n key,\n type: TYPE_MAP[key] ?? \"single_line_text_field\",\n value,\n }),\n ),\n];\n\nconsole.log(`\\nWriting ${inputs.length} metafields to ${QA_EMAIL} …`);\nconst result = await setMetafields(cfg, inputs);\n\nif (result.userErrors.length) {\n console.error(\"Write errors:\", result.userErrors.map((e) => e.message).join(\"; \"));\n Deno.exit(1);\n}\nconsole.log(`✅ Written: ${result.metafields.map((m) => m.key).join(\", \")}`);\n\n// -----------------------------------------------------------------------------\n// verify\n// -----------------------------------------------------------------------------\n\nconsole.log(`\\nReading back ${NAMESPACE}.* …`);\nconst written = await readMetafields(cfg, customerId, NAMESPACE);\n\nconst expected: Record = {\n ...QA_SESSION,\n ...QA_VARS,\n};\n\nlet allOk = true;\nconst colW = Math.max(...written.map((m) => m.key.length), 10);\nconsole.log(`\\n${\"KEY\".padEnd(colW)} ${\"EXPECTED\".padEnd(35)} ${\"ACTUAL\".padEnd(35)} MATCH`);\nconsole.log(\"─\".repeat(colW + 80));\n\nfor (const m of written) {\n const raw = expected[m.key];\n if (raw === undefined) continue;\n const exp = normaliseValue(m.key, raw);\n const match = exp === m.value ? \"✅\" : \"❌\";\n if (match === \"❌\") allOk = false;\n console.log(\n `${m.key.padEnd(colW)} ${exp.slice(0, 34).padEnd(35)} ${m.value.slice(0, 34).padEnd(35)} ${match}`,\n );\n}\n\nconsole.log(`\\n${allOk ? \"All fields match ✅\" : \"Mismatches found ❌\"}`);\nif (!allOk) Deno.exit(1);\n",[],[181,293],"9f1c1e04-cfef-426d-884f-9d7c99481c84","get-customer-info.ts","a0e38a86-68a5-11f1-a4b4-1607ee4eb77e",424,["D",1781519600320],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// get-customer-info.ts — Fetch full customer profile + metafields from Shopify.\n//\n// Usage (from exp/vals/uAgents/):\n// deno task get-customer-info mayank.raj.unofficial@gmail.com\n// deno task get-customer-info mayank.raj.unofficial@gmail.com ttai_call # scope to namespace\n//\n// Reads .env from cwd. Copy .env.sample → .env and fill in credentials.\n\nimport { load } from \"jsr:@std/dotenv@^0.225\";\nimport { jjsSecrets } from \"../backend/core/app.ts\";\nimport { shopifyConfig } from \"../backend/integrations/shopify/config.ts\";\nimport {\n resolveCustomer,\n listAbandonedCheckouts,\n} from \"../backend/integrations/shopify/snapshot.ts\";\nimport { readMetafields } from \"../backend/integrations/shopify/metafields.ts\";\n\n// -----------------------------------------------------------------------------\n// bootstrap\n// -----------------------------------------------------------------------------\n\nawait load({ export: true }); // reads .env from cwd\n\nconst [email, namespace] = Deno.args;\nif (!email) {\n console.error(\"Usage: deno run -A scripts/get-customer-info.ts [namespace]\");\n Deno.exit(1);\n}\n\n// -----------------------------------------------------------------------------\n// fetch\n// -----------------------------------------------------------------------------\n\nconst cfg = shopifyConfig(jjsSecrets());\n\nconst resolved = await resolveCustomer(cfg, { email }).catch((err: unknown) => {\n console.error(\"Customer lookup failed:\", err instanceof Error ? err.message : err);\n Deno.exit(1);\n});\n\nif (!resolved) {\n console.log(`No customer found for: ${email}`);\n Deno.exit(0);\n}\n\nconst { customer, orders } = resolved;\n\nconst [abandoned, metafields] = await Promise.all([\n listAbandonedCheckouts(cfg, { email: customer.email ?? email, customer_id: customer.id }),\n readMetafields(cfg, customer.id, namespace),\n]);\n\n// -----------------------------------------------------------------------------\n// output\n// -----------------------------------------------------------------------------\n\nconsole.log(\"\\n── Customer ────────────────────────────────────────────────\");\nconsole.log(` ID: ${customer.id}`);\nconsole.log(` Name: ${customer.display_name}`);\nconsole.log(` Email: ${customer.email ?? \"—\"}`);\nconsole.log(` Phone: ${customer.phone ?? \"—\"}`);\nconsole.log(` Orders: ${customer.orders_count}`);\n\nif (orders.length) {\n console.log(\"\\n── Pending Orders ──────────────────────────────────────────\");\n for (const o of orders) {\n console.log(` ${o.name} [${o.financial_status}]`);\n for (const li of o.line_items) console.log(` • ${li.title} × ${li.quantity}`);\n }\n}\n\nif (abandoned.length) {\n console.log(\"\\n── Abandoned Checkouts ─────────────────────────────────────\");\n for (const ac of abandoned) {\n const total = ac.total_price ? ` ₹${ac.total_price}` : \"\";\n console.log(` ${ac.created_at.slice(0, 10)}${total}`);\n for (const li of ac.line_items) console.log(` • ${li.title} × ${li.quantity}`);\n }\n}\n\nconsole.log(\n \"\\n── Metafields\" +\n (namespace ? ` (${namespace})` : \" (all)\") +\n \" ─────────────────────────────────────\",\n);\nif (!metafields.length) {\n console.log(\" (none)\");\n} else {\n const colW = Math.max(...metafields.map((m) => `${m.namespace}.${m.key}`.length), 10);\n for (const m of metafields) {\n const key = `${m.namespace}.${m.key}`.padEnd(colW);\n const val = m.value.length > 80 ? m.value.slice(0, 77) + \"…\" : m.value;\n console.log(` ${key} ${val}`);\n }\n}\n\nconsole.log();\n",[],[181,301],"063db02b-047e-4c5b-b7ef-6a4343c32eff",["D",1781519600354],[],[181,33],["D",1781519599541],[268,269,270],[181],"8df317d9-1e53-4d64-bbaf-05bab76aa472","types.ts","f4109fca-6128-11f1-90f7-1607ee4eb77e",334,["D",1780944386447],8,"// types.ts — View models passed from backend handlers into the admin UI.\n\n/** One customer row for the Auth tab + the data the Debug/Integration tabs need. */\nexport interface CustomerView {\n id: string;\n label: string;\n fns: string[];\n secret: string;\n enabled: boolean;\n configured: boolean;\n updatedTs: string;\n descriptions: Record; // fn name → plain-language description\n sampleBodies: Record>; // fn name → example POST body\n paramsSchemas: Record>; // fn name → JSON Schema\n}\n\n/** A single logged invocation, shown (expandable) on the Recent calls page. */\nexport interface CallView {\n id: number;\n customer: string;\n fn: string;\n ok: boolean;\n status: number;\n latency_ms: number;\n detail: string;\n req_body: string;\n resp_body: string;\n ts: string;\n}\n\n/** The full /admin page model: signed-in user + every customer's config. */\nexport interface AdminView {\n username: string;\n avatarUrl?: string;\n baseUrl: string;\n customers: CustomerView[];\n saved: boolean;\n}\n\n/** A customer's selectable functions, for the Recent calls page filters. */\nexport interface CallsCustomer {\n id: string;\n label: string;\n fns: string[];\n}\n\nexport interface CallsView {\n username: string;\n avatarUrl?: string;\n baseUrl: string;\n customers: CallsCustomer[];\n}\n",[],[188,316],"a1457f60-24f4-4020-a557-4cff6f56b16e","shared.tsx","fe520698-632d-11f1-aacf-1607ee4eb77e",386,["D",1780952006405],13,"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// shared.tsx — Render helpers + navbar/chrome shared across admin pages.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\nimport type { ComponentChildren, VNode } from \"https://esm.sh/preact@10.29.1\";\n\n/** Serialize a Preact tree into a full HTML document string. */\nexport function doc(node: VNode): string {\n return \"\" + render(node);\n}\n\n/** Serialize data for safe inlining inside a `\n \n

Diff · v425