[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_844":845,"_846":847},"routes/_app.x.$handle.$name",{"_101":100,"_32":46,"_110":91,"_27":54,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":60,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",526,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","backend/customers/jjs/shopify-sidekick.ts","latestPath","fileId","86ad9d5c-6358-11f1-b0b3-1607ee4eb77e","name","shopify-sidekick.ts","fileType","script","content","// shopify-sidekick.ts — Disabled for JJS. Shopify agent testing happens on the\n// ttai customer (/c/ttai/shopify-sidekick) against our own dev store first.\n\nimport { jsonError } from \"../../core/shared.ts\";\nimport type { SecretsJjs } from \"../../core/app.ts\";\nimport type { FnSpec } from \"../types.ts\";\n\nexport const shopifySidekickFn: FnSpec = {\n description:\n \"Shopify agent — temporarily disabled for JJS. Use /c/ttai/shopify-sidekick for testing.\",\n run: () => jsonError(\"shopify-sidekick is not enabled for JJS\", 503),\n};\n","// shopify-sidekick.ts — JJS Shopify sidekick: shared Shopify agent, JJS sample data.\n\nimport { defineShopifySidekickFn } from \"../shared/shopify-sidekick-fn.ts\";\nimport type { SecretsJjs } from \"../../core/app.ts\";\nimport type { FnSpec } from \"../types.ts\";\nimport { JJS_SAMPLE_CUSTOMER_EMAIL } from \"./utils.ts\";\n\nexport const shopifySidekickFn: FnSpec = defineShopifySidekickFn(\n JJS_SAMPLE_CUSTOMER_EMAIL,\n);\n","createdAt",["D",1782028227816],"branchVersion","branchId","b9c38076-09b5-49a6-8d65-4b509f9cce50","id","30ca1bfe-8d0b-41cd-af05-40f09f5a31a1","uAgents",["D",1780696391552],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","279c3e70-f2b8-11ef-a073-37253b8bcbda","pinnedFileId","f3dc8b86-6128-11f1-854e-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019e994f-fcc4-73e9-86ed-2d14fe9f5dfa","tursoName","30ca1bfe8d0b41cdaf0540f09f5a31a1","tursoHostname","30ca1bfe8d0b41cdaf0540f09f5a31a1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789531852468],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":-5,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":46,"_99":100},"isOwned",679,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","ttai","handle","displayName","Tough Tongue AI","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/4b8edab4-7879-48e2-f777-109aa5256800/square512?exp=1789592552&sig=685b3d7d22e1040ce82f1d4d778d63061de4da5070efd9a85ce95bd3240fbbf5","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_44":45,"_32":46,"_39":839,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":840,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":841,"_85":842,"_87":843,"_89":25},"tree",[218,265,280,287,288,289,290,291,292],"files",[218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292],"counts",{"_208":64,"_209":199,"_210":64,"_211":212,"_213":214},"contents",[131,132,133,134,135,136,137,138,139],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":202,"_32":203,"_30":204,"_143":-5,"_42":43,"_41":205,"_145":60,"_39":206,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_27":207},{"_44":196,"_32":197,"_30":198,"_143":-5,"_42":43,"_41":199,"_145":60,"_39":200,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_27":201},{"_44":189,"_32":190,"_30":191,"_143":-5,"_42":43,"_41":192,"_145":60,"_39":193,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_27":195},{"_44":182,"_32":183,"_30":184,"_143":-5,"_42":43,"_41":185,"_145":60,"_39":186,"_13":64,"_34":20,"_36":187,"_24":25,"_149":-5,"_27":188},{"_44":175,"_32":176,"_30":177,"_143":-5,"_42":43,"_41":178,"_145":25,"_39":179,"_13":64,"_34":20,"_36":180,"_24":25,"_149":-5,"_27":181},{"_44":167,"_32":168,"_30":169,"_143":-5,"_42":43,"_41":170,"_145":25,"_39":171,"_13":172,"_34":20,"_36":173,"_24":25,"_149":-5,"_27":174},{"_44":159,"_32":160,"_30":161,"_143":-5,"_42":43,"_41":162,"_145":25,"_39":163,"_13":164,"_34":20,"_36":165,"_24":25,"_149":-5,"_27":166},{"_44":151,"_32":152,"_30":58,"_143":-5,"_42":43,"_41":153,"_145":60,"_39":154,"_13":147,"_34":155,"_36":156,"_24":25,"_149":157,"_27":158},{"_44":140,"_32":141,"_30":142,"_143":-5,"_42":43,"_41":144,"_145":25,"_39":146,"_13":147,"_34":20,"_36":148,"_24":25,"_149":-5,"_27":150},"14184c70-fbf1-46a8-9d30-d6c560e493a0","val.yml","f3605d0e-6128-11f1-9354-1607ee4eb77e","parentId",426,"latest",["D",1781519600495],10,"# val.yml — metadata contract for this val. Not consumed by `vt` today; reserved\n# for a future repo wrapper over vt-cli (safer deploys, env checks, file typing).\nname: \"uAgents\"\norg: \"ttai\"\npublic: true # intended private; free-plan private-val limit forced public at create\n#\n# Two surfaces:\n# /c// → customer functions (Bearer key auth; cname from the URL)\n# /admin → Val Town OAuth-gated admin UI (gated to ADMIN_USERS)\n#\n# Only index.http.ts is the HTTP val. Other files must avoid Val Town's reserved\n# filename infixes (http, cron, email, …) — e.g. core/api.ts, not core/http.ts.\nfiles:\n index.http.ts: http\n\n# Env vars this app reads. Set them in the Val Town UI sidebar — never in code.\n# Shopify vars are per-customer: prefix = uppercased customer id (JJS = Jhaji).\n# The shop must expose Storefront MCP at https://{shop}/api/mcp.\n#\n# required — app will not work without this\n# recommended — has a safe fallback but set explicitly for production\n# optional — feature-flagged; functions 503 with the exact var name when missing\nenv:\n ADMIN_USERS: required # comma-separated Val Town usernames for /admin access\n OPENAI_API_KEY: required # OpenAI key for all LangChain agent-backed functions\n OAUTH_STATE_ENCRYPTION_KEY: recommended # AES-GCM key for admin OAuth session cookie; `openssl rand -base64 32`\n JJS_SHOPIFY_SHOP: optional # Jhaji store hostname, e.g. ttai-merchandise-dev.myshopify.com (no scheme)\n JJS_SHOPIFY_CLIENT_ID: optional # Jhaji Dev Dashboard app client id (client-credentials grant)\n JJS_SHOPIFY_CLIENT_SECRET: optional # Jhaji Dev Dashboard app client secret\n TTAI_SHOPIFY_SHOP: optional # ToughTongue AI dev store hostname (no scheme)\n TTAI_SHOPIFY_CLIENT_ID: optional # TTAI Dev Dashboard app client id\n TTAI_SHOPIFY_CLIENT_SECRET: optional # TTAI Dev Dashboard app client secret\n","label",[141],"a17d6cb6-e1b8-4017-bfe6-f364eeab5315","index.http.ts",280,["D",1780941501215],"http","// index.http.ts — HTTP entry point, built on Hono. Two surfaces, one app:\n// /c// → customer functions (each customer is a mounted sub-app)\n// /admin → Val Town OAuth admin UI (gated to ADMIN_USERS)\n// A function may invoke an agent internally; the API doesn't distinguish.\n// This file is pure wiring; logic lives in backend/ and frontend/.\n\nimport { Hono } from \"npm:hono@^4\";\nimport { type AdminUc, getAdminUc, withValTownAuth } from \"./backend/core/auth.ts\";\nimport {\n buildAdminView,\n buildCalls,\n buildCallsView,\n saveAuthForm,\n} from \"./backend/core/handlers.ts\";\nimport { apiErrorHandler } from \"./backend/core/api.ts\";\nimport { mountCustomers } from \"./backend/customers/registry.ts\";\nimport { LOGO_MIME, LOGO_SVG } from \"./frontend/assets.ts\";\nimport { renderAdmin, renderDenied, renderLogin } from \"./frontend/admin.tsx\";\nimport { renderCalls } from \"./frontend/calls.tsx\";\n\nconst app = new Hono();\n\n// -----------------------------------------------------------------------------\n// public assets — SVG logo / favicon (no auth; browser-cached)\n// -----------------------------------------------------------------------------\nconst logoResponse = () =>\n new Response(LOGO_SVG, {\n headers: { \"content-type\": LOGO_MIME, \"cache-control\": \"public, max-age=604800\" },\n });\napp.get(\"/logo.svg\", logoResponse);\napp.get(\"/favicon.ico\", logoResponse);\n\n// -----------------------------------------------------------------------------\n// admin — OAuth gate to ADMIN_USERS, then three pages\n// -----------------------------------------------------------------------------\nconst admin = new Hono<{ Variables: { uc: AdminUc } }>();\n\nadmin.use(\"*\", async (c, next) => {\n const uc = await getAdminUc(c.req.raw);\n if (!uc.isAuthed) return c.html(renderLogin(), 401);\n if (!uc.isAdmin) return c.html(renderDenied(uc.username ?? \"\"), 403);\n c.set(\"uc\", uc);\n await next();\n});\n\nadmin.get(\"/\", async (c) => {\n const uc = c.get(\"uc\");\n const saved = c.req.query(\"saved\") === \"1\";\n const view = await buildAdminView(\n uc.username ?? \"\",\n uc.avatarUrl,\n new URL(c.req.url).origin,\n saved,\n );\n return c.html(renderAdmin(view));\n});\n\nadmin.get(\"/calls\", (c) => {\n const uc = c.get(\"uc\");\n const view = buildCallsView(uc.username ?? \"\", uc.avatarUrl, new URL(c.req.url).origin);\n return c.html(renderCalls(view));\n});\n\n// JSON feed for the Recent calls page: filter by customer + selected functions.\nadmin.get(\"/calls.json\", async (c) => {\n const customer = c.req.query(\"customer\") ?? \"\";\n const fns = c.req.queries(\"fn\") ?? [];\n return c.json({ calls: await buildCalls(customer, fns) });\n});\n\nadmin.post(\"/auth\", async (c) => {\n await saveAuthForm(c.req.raw);\n return c.redirect(\"/admin?saved=1\", 303);\n});\nadmin.onError(apiErrorHandler);\n\n// -----------------------------------------------------------------------------\n// wiring — mount surfaces; root error boundary; JSON 404\n// -----------------------------------------------------------------------------\napp.get(\"/\", (c) => c.redirect(\"/admin\"));\napp.route(\"/admin\", admin);\nmountCustomers(app);\n\napp.onError(apiErrorHandler);\napp.notFound((c) => c.json({ ok: false, error: `Not found: ${c.req.path}` }, 404));\n\nexport default withValTownAuth((req) => app.fetch(req));\n","uagents",[152],"d01dca8f-bbd5-4bab-b6d0-d78367165f09","deno.json","f353dd04-6128-11f1-ac3a-1607ee4eb77e",522,["D",1782028227618],6,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\"dom\", \"dom.iterable\", \"dom.asynciterable\", \"deno.ns\", \"deno.unstable\"]\n },\n \"fmt\": {\n \"lineWidth\": 100,\n \"exclude\": [\".vt\"]\n },\n \"lint\": {\n \"exclude\": [\".vt\"],\n \"rules\": {\n \"exclude\": [\"no-explicit-any\", \"no-external-import\", \"no-import-prefix\"]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"],\n \"tasks\": {\n \"view-meta\": \"deno run -A scripts/view-meta.ts\",\n \"set-meta\": \"deno run -A scripts/set-meta.ts\",\n \"del-meta\": \"deno run -A scripts/del-meta.ts\",\n \"get-customer-info\": \"deno run -A scripts/get-customer-info.ts\",\n \"fetch-context\": \"deno run -A scripts/fetch-context.ts\"\n }\n}\n",[160],"08f25fc7-2afd-43ca-b2e3-64023657b149","README.md","f3e9fe92-6128-11f1-b4a4-1607ee4eb77e",441,["D",1781519602158],22,"# uAgents\n\nA single Val Town HTTP val ([Hono](https://hono.dev) router) that exposes small, per-customer\n**functions** behind a per-customer API key, plus a [beer.css](https://www.beercss.com/) admin UI to\nmanage those keys. A function is a plain request→response unit that **may or may not invoke an\nagent** (LangChain + OpenAI) internally. Deno-native, no build step. Deployed to the `ttai` org.\nPair with **uFns** for lightweight integration endpoints.\n\nTwo surfaces, one val:\n\n| Surface | Path | Auth |\n| --------- | --------------------------- | -------------------------------------- |\n| Functions | `GET\\|POST /c//` | Bearer key, verified for that `cname` |\n| Admin UI | `GET /admin` (`/` → it) | Val Town OAuth, gated to `ADMIN_USERS` |\n\n> This repo does **not** use `vtx`. Use the native `vt` CLI directly. Pushing cleanly is your\n> responsibility.\n\n---\n\n## Layout\n\n```\nuAgents/\n index.http.ts Hono root app: admin sub-app + customer sub-apps + /logo.svg\n val.yml name, files contract, env declarations\n deno.json Deno/Val Town compiler + lint config + task shortcuts\n .env.sample copy → .env and fill in for local scripts (gitignored)\n backend/\n core/ cross-cutting infrastructure\n shared.ts env(), JSON helpers, mintKey()\n app.ts static config: globals() + per-customer Secrets types ← registry\n api.ts ApiError, readJsonObject(), error mapping ← mini framework\n db.ts SQLite: customer_auth + call_log (req+resp bodies, batched prune)\n auth.ts OAuth admin gate + authenticate(req, cname)\n handlers.ts admin view assembly + key-config form save + call queries\n agentic-core/ the agent framework — no concrete agents live here\n types.ts Agent / AgentCtx / AgentResult contract\n runtime.ts LangChain ChatOpenAI wiring (global LLM key) + runAgent()\n tool-loop.ts generic model→tools→model loop (reusable by any agent)\n prompt.ts shared input-shaping helpers (withContext, str, compact)\n agents/ concrete agents + their LangChain tool wrappers\n quote-agent.ts the quote agent (structured output)\n shopify-mcp-agent.ts unified Shopify agent (Admin tools + Storefront MCP, ≤12 rounds)\n shopify-admin-tools.ts LangChain tool wrappers for Shopify Admin reads\n integrations/ external-service primitives (one folder per integration)\n shopify/\n config.ts validate a customer's ShopifySecrets → ShopifyConfig (503 on missing)\n token.ts Admin token via client-credentials grant (cached ~24h)\n errors.ts map scope/credential failures to visible 4xx (not masked 502)\n client.ts adminGql() (fetch, no SDK)\n snapshot.ts resolveCustomer(), resolveCustomerGid(), listAbandonedCheckouts()\n metafields.ts setMetafields(), readMetafields() — generic, no business logic\n customers/ one auth scope per customer; their functions live here\n types.ts Fn / FnCtx / Customer / CustomerSpec contracts\n define.ts defineCustomer() — a Hono sub-app per customer\n agent-fn.ts agentFn() — bridge any Agent into an FnSpec\n builtins.ts reusable functions (echo) customers can register\n registry.ts all customers + mountCustomers() ← register here\n jjs/\n index.ts customer: Jhaji (echo, get-customer-info, get-metafields, shopify-sidekick, post-feedback)\n get-customer-info.ts deterministic Shopify read (no LLM)\n get-metafields.ts read customer metafields (all or by namespace)\n post-feedback.ts POST_SESSION hook — writes call feedback as ttai_call.* metafields\n shopify-sidekick.ts function that invokes the Shopify agent\n ttai/\n index.ts customer: ToughTongue AI (echo, get-a-new-quote)\n get-a-new-quote.ts function that invokes the quote agent\n scripts/ local Deno scripts for testing against the real store\n get-customer-info.ts fetch customer profile + all metafields by email\n frontend/\n layout.tsx Shell: beer.css doc + top app bar (logo + brand + actions + user)\n shared.tsx doc(), UserMenu/LoginLink (navbar), logout, banner\n assets.ts inline SVG \"uA\" logo → served at /logo.svg (favicon + navbar)\n admin.tsx admin (Auth + Debug + TTAI Integration tabs) / login / denied\n debug.tsx Debug tab: live runner (URL + Authorization + curl + body)\n integration.tsx TTAI Integration tab: endpoint URL + params-schema JSON\n auth-header.tsx Authorization header display helper (shared by debug + integration)\n calls.tsx Recent calls page (customer + fn filters, expandable req/resp)\n types.ts admin view models\n styles/ modular CSS layers (Next.js-style)\n tokens.ts design tokens + semantic M3 aliases (palette is runtime-generated)\n base.ts document layout + typography scale\n components.ts cards, key row, tabs, chips, table, debug box\n index.ts composes layers → GLOBAL_CSS\n```\n\n> File naming: only `index.http.ts` is the HTTP entry. Val Town infers a file's val-type from\n> reserved name infixes (`http`, `cron`, `email`, …), so the mini-framework lives in `core/api.ts`,\n> **not** `core/http.ts`.\n\n---\n\n## Auth model (per-customer key, cname in the URL)\n\nThe customer (`cname`) is the first path segment: `/c//`. Auth is scoped to that cname:\n\n- Send the key as `Authorization: Bearer ` (or `X-API-Key: `).\n- Each customer is a [Hono](https://hono.dev) sub-app mounted at `/c/`. Its middleware (bound to\n that `id`) calls `authenticate(req, cname)` — loads ``'s config and compares the bearer\n token to the stored key in constant time. Rejected when the customer is unconfigured/disabled\n (403) or the key is missing/wrong (401). The customer module \"owns\" its name + validation by\n construction. An outer middleware records every call (success or denied) to the call log — status,\n latency, and the full request + response bodies (headers stripped, capped).\n- **Admin UI** is gated by Val Town OAuth — only usernames in `ADMIN_USERS` get in.\n\nKeys are minted in the admin UI (generated on first save, rotatable), stored in SQLite, and shown in\nthe UI so you can copy them. They carry a readable `utt__` prefix, but routing no\nlonger depends on the prefix — the URL's `cname` is authoritative.\n\n### Security properties (code is public)\n\nThe val is public on Val Town — anyone can read the source. Security rests on secrets, not obscurity:\n\n| Surface | Protection | Notes |\n| -------------------- | ------------------------------------------ | ----------------------------------------------------------------------- |\n| `/c//` | Per-customer Bearer key (SQLite) | Constant-time compare; 403 when disabled |\n| `/admin/*` | Val Town OAuth + `ADMIN_USERS` allow-list | All sub-routes including `calls.json` |\n| `/admin/auth` (POST) | OAuth + admin check + registry guard | `customer` field validated against known registry — rejects unknown ids |\n| Shopify creds | Val Town env vars (never in code/logs) | Only read server-side; 503 names missing var |\n| Call log bodies | Stored headers-stripped, capped at 8 KB | Admin-only read; request bodies are logged |\n| Key length timing | Early-exit on mismatched length | Acceptable: all keys share the fixed-length prefix |\n| Rate limiting | None per-customer beyond Val Town platform | An attacker needs a valid key (admin-issued) to reach agents |\n\n---\n\n## Customers & functions\n\nEverything served over the API is a **function** — a `Fn = (ctx) => Response`. Functions are\nregistered per customer and exposed at `/c//`. A function may invoke an agent or not; the\nAPI doesn't distinguish. A customer's `index.ts` declares its functions via\n`defineCustomer({ id, label, fns })`; the factory builds a Hono sub-app, wiring auth + call-logging\nmiddleware (bound to that `id`) and a route per function. Routing, methods, and errors are Hono's\njob — there is no hand-rolled path parsing.\n\nEach customer is a folder under `backend/customers/`. To add one:\n\n1. Copy `backend/customers/jjs/` to `backend/customers//` and edit the id + label.\n2. Register it in `backend/customers/registry.ts`.\n3. In the admin UI, generate + enable its key.\n\nCurrent functions:\n\n- **`echo`** (builtin, all customers) — reflects method, query, and body back to the caller.\n- **`get-a-new-quote`** (`ttai`) — invokes a LangChain + OpenAI agent that invents a fresh, original\n quote. Output is schema-constrained (`quote`, `author`, `theme`) via structured output. Optional\n JSON body `{ \"theme\": \"courage\" }`; otherwise a theme is picked for you.\n- **`get-customer-info`** (`jjs`) — deterministic Shopify Admin read (no LLM). Body with at least\n one of `customer_id` / `customer_email` / `customer_phone` → profile, pending orders, abandoned\n checkouts. The same lookup is exposed to the agent as `get_customer_info`.\n- **`shopify-sidekick`** (`jjs`) — full-service Shopify agent (`shopify-mcp-agent`). Body\n `{ prompt, customer_id?, customer_email?, customer_phone?, cart_id? }`. Combines two Admin tools\n (customer lookup, abandoned checkouts) with five Storefront MCP tools from the shop's `/api/mcp`\n (catalog search, product details, cart create/update, policies). Up to 12 tool rounds.\n\n**Add a function** — drop a file in `backend/customers//` exporting an `Fn`, then add it to that\ncustomer's `fns` map. Reusable functions (like `echo`) live in `backend/customers/builtins.ts`.\n\n**Invoke an agent from a function** — see `customers/ttai/get-a-new-quote.ts` or\n`customers/jjs/shopify-sidekick.ts`: each adapts the request into an `AgentCtx` and calls\n`runAgent()`. The runtime (`agentic-core/runtime.ts`) owns all LLM wiring, so agents stay\ndeclarative; add new concrete agents under `backend/agents/`. Tool-using agents reuse\n`agentic-core/tool-loop.ts` (model→tools→model). The framework lives in `agentic-core/`; `agents/`\nholds only the concrete agents.\n\n**Add an integration** — create `backend/integrations//` with a customer-agnostic client +\nhelpers (see `shopify/`). Resolve per-customer credentials from `__*` env so adding\na merchant is config-only.\n\n---\n\n## Environment variables\n\nSet these in the **Val Town UI sidebar** — never in code (`Deno.env.set()` is a no-op on Val Town).\nAll config is **static and explicit** in `backend/core/app.ts` (declared in `val.yml`).\n`OAUTH_STATE_ENCRYPTION_KEY` is read directly by the Val Town OAuth middleware (`std/oauth`).\n\n**Two kinds of config, listed explicitly — no prefix magic:**\n\n- **Globals** — `globals()` returns a typed `{ openaiKey, adminUsers }`. Shared infra (the LLM key,\n the admin allow-list); used by the runtime + auth only.\n- **Per-customer secrets** — each customer has a named type (`SecretsJjs`, `SecretsTtai`) and a\n resolver (`jjsSecrets()`) that reads **only that customer's listed env vars** (`JJS_SHOPIFY_*`)\n into a typed object. A customer's `defineCustomer({ secrets })` resolver runs once; every `Fn` /\n `Agent` for that customer is handed its own typed `ctx.secrets` (e.g. a `jjs` function sees\n exactly `SecretsJjs`). Add a customer = add a `Secrets` type + resolver in `app.ts`, then\n pass it in that customer's `index.ts`.\n\n> The isolation is a **soft convention**, not a hard wall — nothing physically stops code from\n> importing `env()`. The value is clarity + types: what each customer can read is declared in one\n> place, and the type system keeps a `jjs` function from reaching another customer's (or a global's)\n> secrets.\n\n| Var | Status | Used by | Purpose |\n| ------------------------------ | ----------- | --------------------------------- | ------------------------------------------------------------ |\n| `ADMIN_USERS` | required | `core/auth.ts` (`/admin`) | Comma-separated Val Town usernames allowed into the admin |\n| `OPENAI_API_KEY` | required | `agentic-core/runtime.ts` | OpenAI key for the LangChain agents (agent-backed functions) |\n| `OAUTH_STATE_ENCRYPTION_KEY` | recommended | `std/oauth` via `withValTownAuth` | AES-GCM key material that encrypts the admin session cookie |\n| `JJS_SHOPIFY_SHOP` | optional | `integrations/shopify` (`jjs`) | jjs store hostname — must expose `/api/mcp` (no scheme) |\n| `JJS_SHOPIFY_CLIENT_ID` | optional | `integrations/shopify/token.ts` | jjs Dev Dashboard app client id — mints Admin tokens |\n| `JJS_SHOPIFY_CLIENT_SECRET` | optional | `integrations/shopify/token.ts` | jjs Dev Dashboard app client secret |\n\nNotes:\n\n- `ADMIN_USERS` example: `alice,bob`. Empty/unset ⇒ nobody can reach `/admin` (everyone is denied).\n- `OPENAI_API_KEY` only matters for agents. Unset ⇒ agent-backed functions return **503**; plain\n functions (e.g. `echo`) still work.\n- `JJS_SHOPIFY_*` only matter for the `jjs` Shopify functions. A new merchant lists its own vars in\n a `secretsAcme()` resolver (`app.ts`). Unset shop/client creds ⇒ those functions return **503**\n naming the exact var.\n- **Admin auth (Shopify Dev Dashboard):** set `CLIENT_ID` + `CLIENT_SECRET` from the app's Settings\n page. `token.ts` exchanges them for a ~24h Admin token via the client-credentials grant and caches\n it. See\n [Admin & Storefront API → Generate tokens](../../../docs/wiki/integrations/shopify/admin-api.md).\n- `OAUTH_STATE_ENCRYPTION_KEY` — if unset, the middleware auto-generates a key and stores it in Val\n Town blob storage per redirect URI. That works, but **set it explicitly** so admin sessions\n survive redeploys and work on self-hosted runtimes. Any high-entropy string works (it's SHA-256'd\n to a 256-bit AES key); generate one with:\n\n```bash\n# generate a 32-byte base64 key (macOS: append `| pbcopy` to copy it)\nopenssl rand -base64 32\n```\n\nThen paste the value into the val's **Environment Variables** sidebar as\n`OAUTH_STATE_ENCRYPTION_KEY`. `vt` does not manage env vars — they must be set in the Val Town UI.\n\n---\n\n## Local scripts\n\nScripts in `scripts/` run with Deno directly against the real store — no val deployment needed.\nThey import the backend primitives via relative paths, so they stay in sync automatically.\n\n**One-time setup** (from `exp/vals/uAgents/`):\n\n```bash\ncp .env.sample .env\n# fill in JJS_SHOPIFY_SHOP, JJS_SHOPIFY_CLIENT_ID, JJS_SHOPIFY_CLIENT_SECRET\n```\n\n### `get-customer-info`\n\nResolves a customer by email and prints their profile, pending orders, abandoned checkouts,\nand all metafields. Optionally scope metafields to a namespace.\n\n```bash\n# from exp/vals/uAgents/\ndeno task get-customer-info mayank.raj.unofficial@gmail.com\ndeno task get-customer-info mayank.raj.unofficial@gmail.com ttai_call # scope to namespace\n\n# or directly\ndeno run -A scripts/get-customer-info.ts mayank.raj.unofficial@gmail.com\n```\n\n---\n\n## Local → Val Town with `vt`\n\nRun from **inside this directory** (`exp/vals/uAgents/`).\n\n```bash\nvt status # review what changed\nvt push # push (forceful — revert via the Val Town website if needed)\nvt browse # open the deployed val\n```\n\nFirst push of a brand-new val: `vt create uAgents .`. To link an existing remote val, `vt clone` it\nto a temp dir and move its `.vt/` folder next to this code. After pushing, set the\n[environment variables](#environment-variables) in the Val Town UI.\n\n---\n\n## Try it\n\n```bash\n# 1. In /admin, generate + enable a key for \"ttai\", then:\nexport VT_TTAI_APP_TOKEN=\"generate-from-admin-ui\"\nexport VT_JJS_APP_TOKEN=\"generate-from-admin-ui\"\n\n# plain function (echo)\ncurl -X POST https://uagents.val.run/c/ttai/echo \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{\"hi\":\"there\"}'\n\n# agent-backed function (fresh quote)\ncurl -X POST https://uagents.val.run/c/ttai/get-a-new-quote \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{\"theme\":\"craftsmanship\"}'\n\n# jjs Shopify sidekick (Admin + Storefront MCP)\ncurl -X POST https://uagents.val.run/c/jjs/shopify-sidekick \\\n -H \"Authorization: Bearer $VT_JJS_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"prompt\":\"Search for hoodies and add the first one to a new cart\",\"customer_email\":\"mayank.raj.unofficial@gmail.com\"}'\n```\n\nNegative paths (auth + routing) — handy as a quick smoke test:\n\n```bash\nBASE=https://uagents.val.run\n\n# missing key → 401\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/echo\" -d '{}'\n\n# wrong key → 401\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/echo\" \\\n -H \"Authorization: Bearer nope\" -d '{}'\n\n# unknown customer → 404\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/nope/echo\" \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" -d '{}'\n\n# unknown function on a real customer → 404\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/nope\" \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" -d '{}'\n```\n",[168],"ed26c467-4364-40b5-9a09-ae75cab95f12",".gitignore","a117d82c-68a5-11f1-926a-1607ee4eb77e",427,["D",1781519600473],".env\nscripts/.env\n",[176],"d84c0d0f-d790-4707-b0e0-a3639874eb9d",".env.sample","a09df8b8-68a5-11f1-9dd7-1607ee4eb77e",420,["D",1781519599844],"# Shopify Dev Dashboard app credentials (same vars as pushed to Val Town)\n# JJS — Jhaji merchant store\nJJS_SHOPIFY_SHOP=ttai-merchandise-dev.myshopify.com\nJJS_SHOPIFY_CLIENT_ID=\nJJS_SHOPIFY_CLIENT_SECRET=\n\n# TTAI — ToughTongue AI internal dev store (for testing before production)\nTTAI_SHOPIFY_SHOP=\nTTAI_SHOPIFY_CLIENT_ID=\nTTAI_SHOPIFY_CLIENT_SECRET=\n",[183],"ff7f2101-71a5-425e-a367-560ef13a2086","scripts","a06c5628-68a5-11f1-b189-1607ee4eb77e",416,["D",1781519599541],"directory",[190],"6d14e6de-c8d3-45e7-ba6f-2ed984a1f71b","frontend","f2b2b82a-6128-11f1-9496-1607ee4eb77e",1,["D",1780696392346],[197],"157d3e42-b14b-4a4a-b3d1-13e8c95b8213","backend","f2d380b4-6128-11f1-b4a4-1607ee4eb77e",2,["D",1780696392550],[203],"pulls","branches","forks","envVars",{"_215":199,"_217":64},"connections",{"_215":64,"_216":64},"count","unfilledCount","emptyCount",{"_44":202,"_32":203,"_30":204,"_143":-5,"_42":43,"_41":205,"_145":60,"_39":836,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":837,"_27":838},{"_44":831,"_32":806,"_30":800,"_143":204,"_42":43,"_41":832,"_145":60,"_39":833,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":834,"_27":835},{"_44":823,"_32":824,"_30":825,"_143":800,"_42":43,"_41":826,"_145":60,"_39":827,"_13":205,"_34":35,"_36":828,"_24":25,"_149":-5,"_294":829,"_27":830},{"_44":815,"_32":816,"_30":817,"_143":800,"_42":43,"_41":818,"_145":60,"_39":819,"_13":164,"_34":35,"_36":820,"_24":25,"_149":-5,"_294":821,"_27":822},{"_44":807,"_32":808,"_30":809,"_143":800,"_42":43,"_41":810,"_145":60,"_39":811,"_13":394,"_34":35,"_36":812,"_24":25,"_149":-5,"_294":813,"_27":814},{"_44":798,"_32":364,"_30":799,"_143":800,"_42":43,"_41":801,"_145":60,"_39":802,"_13":491,"_34":35,"_36":803,"_24":25,"_149":-5,"_294":804,"_27":805},{"_44":793,"_32":776,"_30":770,"_143":204,"_42":43,"_41":794,"_145":60,"_39":795,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":796,"_27":797},{"_44":785,"_32":786,"_30":787,"_143":770,"_42":43,"_41":788,"_145":60,"_39":789,"_13":164,"_34":35,"_36":790,"_24":25,"_149":-5,"_294":791,"_27":792},{"_44":777,"_32":778,"_30":779,"_143":770,"_42":43,"_41":780,"_145":25,"_39":781,"_13":618,"_34":35,"_36":782,"_24":25,"_149":-5,"_294":783,"_27":784},{"_44":767,"_32":768,"_30":769,"_143":770,"_42":43,"_41":771,"_145":25,"_39":772,"_13":618,"_34":35,"_36":773,"_24":25,"_149":-5,"_294":774,"_27":775},{"_44":762,"_32":721,"_30":715,"_143":204,"_42":43,"_41":763,"_145":60,"_39":764,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":765,"_27":766},{"_44":754,"_32":755,"_30":756,"_143":715,"_42":43,"_41":757,"_145":60,"_39":758,"_13":205,"_34":35,"_36":759,"_24":25,"_149":-5,"_294":760,"_27":761},{"_44":746,"_32":747,"_30":748,"_143":715,"_42":43,"_41":749,"_145":25,"_39":750,"_13":518,"_34":35,"_36":751,"_24":25,"_149":-5,"_294":752,"_27":753},{"_44":738,"_32":739,"_30":740,"_143":715,"_42":43,"_41":741,"_145":25,"_39":742,"_13":164,"_34":35,"_36":743,"_24":25,"_149":-5,"_294":744,"_27":745},{"_44":730,"_32":731,"_30":732,"_143":715,"_42":43,"_41":733,"_145":25,"_39":734,"_13":491,"_34":35,"_36":735,"_24":25,"_149":-5,"_294":736,"_27":737},{"_44":722,"_32":723,"_30":724,"_143":715,"_42":43,"_41":725,"_145":60,"_39":726,"_13":368,"_34":35,"_36":727,"_24":25,"_149":-5,"_294":728,"_27":729},{"_44":712,"_32":713,"_30":714,"_143":715,"_42":43,"_41":716,"_145":60,"_39":717,"_13":394,"_34":35,"_36":718,"_24":25,"_149":-5,"_294":719,"_27":720},{"_44":707,"_32":565,"_30":559,"_143":204,"_42":43,"_41":708,"_145":60,"_39":709,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":710,"_27":711},{"_44":702,"_32":689,"_30":683,"_143":559,"_42":43,"_41":703,"_145":60,"_39":704,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":705,"_27":706},{"_44":694,"_32":452,"_30":695,"_143":683,"_42":43,"_41":696,"_145":25,"_39":697,"_13":698,"_34":35,"_36":699,"_24":25,"_149":-5,"_294":700,"_27":701},{"_44":690,"_32":33,"_30":31,"_143":683,"_42":43,"_41":14,"_145":60,"_39":691,"_13":377,"_34":35,"_36":38,"_24":25,"_149":-5,"_294":692,"_27":693},{"_44":681,"_32":599,"_30":682,"_143":683,"_42":43,"_41":684,"_145":60,"_39":685,"_13":64,"_34":35,"_36":686,"_24":25,"_149":-5,"_294":687,"_27":688},{"_44":676,"_32":643,"_30":637,"_143":559,"_42":43,"_41":677,"_145":60,"_39":678,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":679,"_27":680},{"_44":668,"_32":669,"_30":670,"_143":637,"_42":43,"_41":671,"_145":25,"_39":672,"_13":64,"_34":35,"_36":673,"_24":25,"_149":-5,"_294":674,"_27":675},{"_44":660,"_32":661,"_30":662,"_143":637,"_42":43,"_41":663,"_145":25,"_39":664,"_13":491,"_34":35,"_36":665,"_24":25,"_149":-5,"_294":666,"_27":667},{"_44":652,"_32":653,"_30":654,"_143":637,"_42":43,"_41":655,"_145":25,"_39":656,"_13":394,"_34":35,"_36":657,"_24":25,"_149":-5,"_294":658,"_27":659},{"_44":644,"_32":645,"_30":646,"_143":637,"_42":43,"_41":647,"_145":25,"_39":648,"_13":64,"_34":35,"_36":649,"_24":25,"_149":-5,"_294":650,"_27":651},{"_44":635,"_32":599,"_30":636,"_143":637,"_42":43,"_41":638,"_145":25,"_39":639,"_13":199,"_34":35,"_36":640,"_24":25,"_149":-5,"_294":641,"_27":642},{"_44":630,"_32":100,"_30":601,"_143":559,"_42":43,"_41":631,"_145":60,"_39":632,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":633,"_27":634},{"_44":622,"_32":623,"_30":624,"_143":601,"_42":43,"_41":625,"_145":60,"_39":626,"_13":412,"_34":35,"_36":627,"_24":25,"_149":-5,"_294":628,"_27":629},{"_44":614,"_32":452,"_30":615,"_143":601,"_42":43,"_41":616,"_145":25,"_39":617,"_13":618,"_34":35,"_36":619,"_24":25,"_149":-5,"_294":620,"_27":621},{"_44":607,"_32":33,"_30":608,"_143":601,"_42":43,"_41":609,"_145":60,"_39":610,"_13":199,"_34":35,"_36":611,"_24":25,"_149":-5,"_294":612,"_27":613},{"_44":598,"_32":599,"_30":600,"_143":601,"_42":43,"_41":602,"_145":60,"_39":603,"_13":64,"_34":35,"_36":604,"_24":25,"_149":-5,"_294":605,"_27":606},{"_44":590,"_32":591,"_30":592,"_143":559,"_42":43,"_41":593,"_145":25,"_39":594,"_13":518,"_34":35,"_36":595,"_24":25,"_149":-5,"_294":596,"_27":597},{"_44":582,"_32":583,"_30":584,"_143":559,"_42":43,"_41":585,"_145":60,"_39":586,"_13":412,"_34":35,"_36":587,"_24":25,"_149":-5,"_294":588,"_27":589},{"_44":574,"_32":575,"_30":576,"_143":559,"_42":43,"_41":577,"_145":25,"_39":578,"_13":368,"_34":35,"_36":579,"_24":25,"_149":-5,"_294":580,"_27":581},{"_44":566,"_32":567,"_30":568,"_143":559,"_42":43,"_41":569,"_145":25,"_39":570,"_13":518,"_34":35,"_36":571,"_24":25,"_149":-5,"_294":572,"_27":573},{"_44":557,"_32":364,"_30":558,"_143":559,"_42":43,"_41":560,"_145":60,"_39":561,"_13":368,"_34":35,"_36":562,"_24":25,"_149":-5,"_294":563,"_27":564},{"_44":552,"_32":495,"_30":547,"_143":204,"_42":43,"_41":553,"_145":60,"_39":554,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":555,"_27":556},{"_44":546,"_32":496,"_30":488,"_143":547,"_42":43,"_41":548,"_145":60,"_39":549,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":550,"_27":551},{"_44":538,"_32":539,"_30":540,"_143":488,"_42":43,"_41":541,"_145":60,"_39":542,"_13":164,"_34":35,"_36":543,"_24":25,"_149":-5,"_294":544,"_27":545},{"_44":530,"_32":531,"_30":532,"_143":488,"_42":43,"_41":533,"_145":60,"_39":534,"_13":164,"_34":35,"_36":535,"_24":25,"_149":-5,"_294":536,"_27":537},{"_44":522,"_32":523,"_30":524,"_143":488,"_42":43,"_41":525,"_145":25,"_39":526,"_13":64,"_34":35,"_36":527,"_24":25,"_149":-5,"_294":528,"_27":529},{"_44":513,"_32":514,"_30":515,"_143":488,"_42":43,"_41":516,"_145":60,"_39":517,"_13":518,"_34":35,"_36":519,"_24":25,"_149":-5,"_294":520,"_27":521},{"_44":505,"_32":506,"_30":507,"_143":488,"_42":43,"_41":508,"_145":25,"_39":509,"_13":491,"_34":35,"_36":510,"_24":25,"_149":-5,"_294":511,"_27":512},{"_44":497,"_32":498,"_30":499,"_143":488,"_42":43,"_41":500,"_145":25,"_39":501,"_13":491,"_34":35,"_36":502,"_24":25,"_149":-5,"_294":503,"_27":504},{"_44":485,"_32":486,"_30":487,"_143":488,"_42":43,"_41":489,"_145":60,"_39":490,"_13":491,"_34":35,"_36":492,"_24":25,"_149":-5,"_294":493,"_27":494},{"_44":196,"_32":197,"_30":198,"_143":-5,"_42":43,"_41":199,"_145":60,"_39":482,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":483,"_27":484},{"_44":477,"_32":450,"_30":444,"_143":198,"_42":43,"_41":478,"_145":60,"_39":479,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":480,"_27":481},{"_44":468,"_32":469,"_30":470,"_143":444,"_42":43,"_41":471,"_145":60,"_39":472,"_13":473,"_34":35,"_36":474,"_24":25,"_149":-5,"_294":475,"_27":476},{"_44":459,"_32":460,"_30":461,"_143":444,"_42":43,"_41":462,"_145":25,"_39":463,"_13":464,"_34":35,"_36":465,"_24":25,"_149":-5,"_294":466,"_27":467},{"_44":451,"_32":452,"_30":453,"_143":444,"_42":43,"_41":454,"_145":60,"_39":455,"_13":64,"_34":35,"_36":456,"_24":25,"_149":-5,"_294":457,"_27":458},{"_44":441,"_32":442,"_30":443,"_143":444,"_42":43,"_41":445,"_145":25,"_39":446,"_13":164,"_34":35,"_36":447,"_24":25,"_149":-5,"_294":448,"_27":449},{"_44":432,"_32":433,"_30":434,"_143":198,"_42":43,"_41":435,"_145":25,"_39":436,"_13":437,"_34":35,"_36":438,"_24":25,"_149":-5,"_294":439,"_27":440},{"_44":424,"_32":425,"_30":426,"_143":198,"_42":43,"_41":427,"_145":60,"_39":428,"_13":205,"_34":35,"_36":429,"_24":25,"_149":-5,"_294":430,"_27":431},{"_44":416,"_32":417,"_30":418,"_143":198,"_42":43,"_41":419,"_145":60,"_39":420,"_13":199,"_34":35,"_36":421,"_24":25,"_149":-5,"_294":422,"_27":423},{"_44":407,"_32":408,"_30":409,"_143":198,"_42":43,"_41":410,"_145":60,"_39":411,"_13":412,"_34":35,"_36":413,"_24":25,"_149":-5,"_294":414,"_27":415},{"_44":398,"_32":399,"_30":400,"_143":198,"_42":43,"_41":401,"_145":25,"_39":402,"_13":403,"_34":35,"_36":404,"_24":25,"_149":-5,"_294":405,"_27":406},{"_44":389,"_32":390,"_30":391,"_143":198,"_42":43,"_41":392,"_145":60,"_39":393,"_13":394,"_34":35,"_36":395,"_24":25,"_149":-5,"_294":396,"_27":397},{"_44":381,"_32":382,"_30":383,"_143":198,"_42":43,"_41":384,"_145":60,"_39":385,"_13":368,"_34":35,"_36":386,"_24":25,"_149":-5,"_294":387,"_27":388},{"_44":372,"_32":373,"_30":374,"_143":198,"_42":43,"_41":375,"_145":60,"_39":376,"_13":377,"_34":35,"_36":378,"_24":25,"_149":-5,"_294":379,"_27":380},{"_44":363,"_32":364,"_30":365,"_143":198,"_42":43,"_41":366,"_145":60,"_39":367,"_13":368,"_34":35,"_36":369,"_24":25,"_149":-5,"_294":370,"_27":371},{"_44":189,"_32":190,"_30":191,"_143":-5,"_42":43,"_41":192,"_145":60,"_39":360,"_13":64,"_34":194,"_36":-5,"_24":25,"_149":-5,"_294":361,"_27":362},{"_44":352,"_32":353,"_30":354,"_143":191,"_42":43,"_41":355,"_145":25,"_39":356,"_13":199,"_34":35,"_36":357,"_24":25,"_149":-5,"_294":358,"_27":359},{"_44":344,"_32":345,"_30":346,"_143":191,"_42":43,"_41":347,"_145":25,"_39":348,"_13":199,"_34":35,"_36":349,"_24":25,"_149":-5,"_294":350,"_27":351},{"_44":336,"_32":337,"_30":338,"_143":191,"_42":43,"_41":339,"_145":25,"_39":340,"_13":64,"_34":35,"_36":341,"_24":25,"_149":-5,"_294":342,"_27":343},{"_44":328,"_32":329,"_30":330,"_143":191,"_42":43,"_41":331,"_145":25,"_39":332,"_13":205,"_34":35,"_36":333,"_24":25,"_149":-5,"_294":334,"_27":335},{"_44":320,"_32":321,"_30":322,"_143":191,"_42":43,"_41":323,"_145":25,"_39":324,"_13":199,"_34":35,"_36":325,"_24":25,"_149":-5,"_294":326,"_27":327},{"_44":312,"_32":313,"_30":314,"_143":191,"_42":43,"_41":315,"_145":25,"_39":316,"_13":199,"_34":35,"_36":317,"_24":25,"_149":-5,"_294":318,"_27":319},{"_44":182,"_32":183,"_30":184,"_143":-5,"_42":43,"_41":185,"_145":60,"_39":309,"_13":64,"_34":20,"_36":187,"_24":25,"_149":-5,"_294":310,"_27":311},{"_44":175,"_32":176,"_30":177,"_143":-5,"_42":43,"_41":178,"_145":25,"_39":306,"_13":64,"_34":20,"_36":180,"_24":25,"_149":-5,"_294":307,"_27":308},{"_44":167,"_32":168,"_30":169,"_143":-5,"_42":43,"_41":170,"_145":25,"_39":303,"_13":172,"_34":20,"_36":173,"_24":25,"_149":-5,"_294":304,"_27":305},{"_44":159,"_32":160,"_30":161,"_143":-5,"_42":43,"_41":162,"_145":25,"_39":300,"_13":164,"_34":20,"_36":165,"_24":25,"_149":-5,"_294":301,"_27":302},{"_44":151,"_32":152,"_30":58,"_143":-5,"_42":43,"_41":153,"_145":60,"_39":297,"_13":147,"_34":155,"_36":156,"_24":25,"_149":157,"_294":298,"_27":299},{"_44":140,"_32":141,"_30":142,"_143":-5,"_42":43,"_41":144,"_145":25,"_39":293,"_13":147,"_34":20,"_36":148,"_24":25,"_149":-5,"_294":295,"_27":296},["D",1781519600495],"children",[],[141],["D",1780941501215],[],[152],["D",1782028227618],[],[160],["D",1781519602158],[],[168],["D",1781519600473],[],[176],["D",1781519599844],[],[183],"c2fab69c-9ebd-45dc-88e4-029f6ab66dcc","view-meta.ts","81da3cbc-68c2-11f1-8bd7-1607ee4eb77e",515,["D",1781689428189],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// view-meta.ts — Read metafields for a customer or order.\n\nimport { parseArgs } from \"jsr:@std/cli@^1/parse-args\";\nimport { bootstrap, resolveGid, opt, usage, wantsHelp } from \"./_common.ts\";\nimport { readMetafields, readMetafieldsByGid } from \"../backend/integrations/shopify/metafields.ts\";\n\nif (wantsHelp(Deno.args.length))\n usage([\n \"view-meta — Read metafields for a Shopify customer or order.\",\n \"\",\n \"Usage:\",\n \" deno task view-meta --type user --email \",\n \" deno task view-meta --type user --phone \",\n \" deno task view-meta --type user --id \",\n \" deno task view-meta --type order --order-id \",\n \"\",\n \"Options:\",\n \" --type Resource type (required)\",\n \" --email Customer email (user)\",\n \" --phone Customer phone in E.164 (user)\",\n \" --id Customer Shopify GID (user)\",\n \" --order-id Order ID, #name, or full GID (order)\",\n \" --namespace Filter to a specific namespace\",\n \" -c Store to query (default: ttai)\",\n ]);\n\nconst { cfg, store } = await bootstrap();\nconst p = parseArgs(Deno.args, {\n string: [\"type\", \"email\", \"phone\", \"id\", \"order-id\", \"namespace\", \"c\"],\n});\n\nconst ns = opt(p.namespace);\nconst { gid } = await resolveGid(cfg, store, {\n type: opt(p.type),\n email: opt(p.email),\n phone: opt(p.phone),\n id: opt(p.id),\n \"order-id\": opt(p[\"order-id\"]),\n});\n\nconst mf =\n opt(p.type) === \"user\"\n ? await readMetafields(cfg, gid, ns)\n : await readMetafieldsByGid(cfg, gid, ns);\n\nif (!mf.length) {\n console.log(\"(no metafields)\");\n Deno.exit(0);\n}\n\nconst nW = ns ? 0 : Math.max(...mf.map((m) => m.namespace.length), 9);\nconst kW = Math.max(...mf.map((m) => m.key.length), 3);\nconst hdr = ns\n ? `${\"KEY\".padEnd(kW)} ${\"VALUE\".padEnd(40)} UPDATED`\n : `${\"NS\".padEnd(nW)} ${\"KEY\".padEnd(kW)} ${\"VALUE\".padEnd(40)} UPDATED`;\nconsole.log(hdr);\nconsole.log(\"─\".repeat(hdr.length));\nfor (const m of mf) {\n const v = m.value.length > 39 ? m.value.slice(0, 36) + \"…\" : m.value;\n console.log(\n ns\n ? `${m.key.padEnd(kW)} ${v.padEnd(40)} ${m.updatedAt}`\n : `${m.namespace.padEnd(nW)} ${m.key.padEnd(kW)} ${v.padEnd(40)} ${m.updatedAt}`,\n );\n}\nconsole.log(`\\n${mf.length} metafield(s)`);\n",[],[190,313],"7f5cb8d4-2caf-4695-8081-574629448fe7","set-meta.ts","81b25940-68c2-11f1-a0f2-1607ee4eb77e",514,["D",1781689428098],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// set-meta.ts — Write metafields on a customer or order.\n\nimport { parseArgs } from \"jsr:@std/cli@^1/parse-args\";\nimport { bootstrap, resolveGid, die, opt, usage, wantsHelp } from \"./_common.ts\";\nimport { setMetafields } from \"../backend/integrations/shopify/metafields.ts\";\nimport type { MetafieldInput, MetafieldType } from \"../backend/integrations/shopify/metafields.ts\";\n\nif (wantsHelp(Deno.args.length))\n usage([\n \"set-meta — Write metafields on a Shopify customer or order.\",\n \"\",\n \"Usage:\",\n \" deno task set-meta --type user --email [ ...]\",\n \" deno task set-meta --type order --order-id '#1001' rating 9 outcome confirmed\",\n \"\",\n \"Options:\",\n \" --type Resource type (required)\",\n \" --email Customer email (user)\",\n \" --phone Customer phone in E.164 (user)\",\n \" --id Customer Shopify GID (user)\",\n \" --order-id Order ID, #name, or full GID (order)\",\n \" --namespace Metafield namespace (default: ttai_call)\",\n \" --field-type Field type shortcode (default: str)\",\n \" -c Store to write to (default: ttai)\",\n \"\",\n \"Field types:\",\n \" str single_line_text_field (default)\",\n \" text multi_line_text_field\",\n ]);\n\nconst TYPES: Record = {\n str: \"single_line_text_field\",\n text: \"multi_line_text_field\",\n};\n\nconst { cfg, store } = await bootstrap();\nconst p = parseArgs(Deno.args, {\n string: [\"type\", \"email\", \"phone\", \"id\", \"order-id\", \"namespace\", \"field-type\", \"c\"],\n});\n\nconst ns = opt(p.namespace) ?? \"ttai_call\";\nconst ft = opt(p[\"field-type\"]) ?? \"str\";\nconst fieldType = TYPES[ft];\nif (!fieldType) die(`Unknown --field-type: ${ft}. Valid: ${Object.keys(TYPES).join(\", \")}`);\n\nconst { gid, label } = await resolveGid(cfg, store, {\n type: opt(p.type),\n email: opt(p.email),\n phone: opt(p.phone),\n id: opt(p.id),\n \"order-id\": opt(p[\"order-id\"]),\n});\n\nconst pos = p._.map(String);\nif (pos.length < 2 || pos.length % 2 !== 0) die(\"Args: [ ...]\");\n\nconst inputs: MetafieldInput[] = [];\nfor (let i = 0; i < pos.length; i += 2) {\n inputs.push({ ownerId: gid, namespace: ns, key: pos[i], type: fieldType, value: pos[i + 1] });\n}\n\nif (inputs.length > 25)\n die(`Too many key/value pairs (${inputs.length}). metafieldsSet is capped at 25 per call.`);\n\nconsole.log(`Writing ${inputs.length} field(s) to ${ns} [${ft}] …`);\nconst result = await setMetafields(cfg, inputs);\nif (result.userErrors.length)\n die(`Write failed: ${result.userErrors.map((e) => e.message).join(\"; \")}`);\n\nfor (const m of result.metafields) console.log(` ${m.key} = ${m.value}`);\nconsole.log(`\\n✅ ${result.metafields.length} metafield(s) on ${label}`);\n",[],[190,321],"dbb7836d-08bd-4877-b803-0fb44831c6cc","get-customer-info.ts","a0e38a86-68a5-11f1-a4b4-1607ee4eb77e",491,["D",1781532004410],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// get-customer-info.ts — Full customer profile: identity, orders, checkouts, metafields.\n\nimport { bootstrap, die, usage, wantsHelp } from \"./_common.ts\";\nimport {\n resolveCustomer,\n listAbandonedCheckouts,\n} from \"../backend/integrations/shopify/snapshot.ts\";\nimport { readMetafields } from \"../backend/integrations/shopify/metafields.ts\";\n\nif (wantsHelp(Deno.args.length))\n usage([\n \"get-customer-info — Full Shopify customer snapshot.\",\n \"\",\n \"Usage:\",\n \" deno task get-customer-info [namespace]\",\n \" deno task get-customer-info -c jjs \",\n \"\",\n \"Options:\",\n \" Customer email (required, positional)\",\n \" [namespace] Filter metafields to this namespace (optional)\",\n \" -c Store to query (default: ttai)\",\n \"\",\n \"Returns: profile, pending orders, abandoned checkouts, metafields.\",\n ]);\n\nconst { cfg, store, args } = await bootstrap();\nconst [email, namespace] = args;\nif (!email) die(\"Usage: deno task get-customer-info [--c ttai|jjs] [namespace]\");\n\nconsole.log(`[${store}] Looking up ${email} …\\n`);\n\nconst resolved = await resolveCustomer(cfg, { email });\nif (!resolved) {\n console.log(`No customer found for: ${email}`);\n Deno.exit(0);\n}\n\nconst { customer: c, orders } = resolved;\nconst [abandoned, metafields] = await Promise.all([\n listAbandonedCheckouts(cfg, { email: c.email ?? email, customer_id: c.id }),\n readMetafields(cfg, c.id, namespace),\n]);\n\nconsole.log(\"── Customer ────────────────────────────────────────────────\");\nconsole.log(` ID: ${c.id}\\n Name: ${c.display_name}`);\nconsole.log(\n ` Email: ${c.email ?? \"—\"}\\n Phone: ${c.phone ?? \"—\"}\\n Orders: ${c.orders_count}`,\n);\n\nif (orders.length) {\n console.log(\"\\n── Pending Orders ──────────────────────────────────────────\");\n for (const o of orders) {\n console.log(` ${o.name} [${o.financial_status}]`);\n for (const li of o.line_items) console.log(` • ${li.title} × ${li.quantity}`);\n }\n}\nif (abandoned.length) {\n console.log(\"\\n── Abandoned Checkouts ─────────────────────────────────────\");\n for (const ac of abandoned) {\n console.log(` ${ac.created_at.slice(0, 10)}${ac.total_price ? ` ₹${ac.total_price}` : \"\"}`);\n for (const li of ac.line_items) console.log(` • ${li.title} × ${li.quantity}`);\n }\n}\n\nconst mfLabel = namespace ? `(${namespace})` : \"(all)\";\nconsole.log(`\\n── Metafields ${mfLabel} ${\"─\".repeat(40)}`);\nif (!metafields.length) {\n console.log(\" (none)\");\n} else {\n const w = Math.max(...metafields.map((m) => `${m.namespace}.${m.key}`.length), 10);\n for (const m of metafields) {\n const v = m.value.length > 70 ? m.value.slice(0, 67) + \"…\" : m.value;\n console.log(` ${`${m.namespace}.${m.key}`.padEnd(w)} ${v}`);\n }\n}\nconsole.log();\n",[],[190,329],"c60027ca-9f5c-4ba9-ac5f-4bef7b8aaa1d","fetch-context.ts","de5d4448-6d45-11f1-ba3c-1607ee4eb77e",521,["D",1782028227592],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// fetch-context.ts — Fetch order/user context and related items for a Shopify order.\n\nimport { parseArgs } from \"jsr:@std/cli@^1/parse-args\";\nimport { bootstrap, die, opt, usage, wantsHelp } from \"./_common.ts\";\nimport { fetchContext } from \"../backend/agents/shopify-context-agent.ts\";\n\nif (wantsHelp(Deno.args.length)) {\n usage([\n \"fetch-context — Fetch Shopify order context, user context, and related items.\",\n \"\",\n \"Usage:\",\n \" deno task fetch-context --order-id [--user-email ] [--user-phone ]\",\n \" deno task fetch-context -c jjs '#1001' --user-email priya@example.com\",\n \"\",\n \"Options:\",\n \" --order-id Order ID, #name, or full GID (positional also accepted)\",\n \" --user-email Optional customer email override\",\n \" --user-phone Optional customer phone override\",\n \" -c Store to query (default: ttai)\",\n \"\",\n \"Returns JSON:\",\n \" { user_phone, abandoned_ts, cart_value, user_context, order_context, related_items }\",\n ]);\n}\n\nconst { cfg, store } = await bootstrap();\nconst p = parseArgs(Deno.args, {\n string: [\"order-id\", \"user-email\", \"user-phone\", \"c\"],\n});\n\nconst orderId = opt(p[\"order-id\"]) ?? opt(p._[0]);\nif (!orderId) die(\"Usage: deno task fetch-context [-c ttai|jjs] --order-id \");\n\nconsole.log(`[${store}] Fetching context for order ${orderId} …\\n`);\n\nconst result = await fetchContext(cfg, {\n order_id: orderId,\n user_email: opt(p[\"user-email\"]),\n user_phone: opt(p[\"user-phone\"]),\n});\n\nconsole.log(JSON.stringify(result, null, 2));\n",[],[190,337],"2546ad36-3848-4516-8b85-425feaab2198","del-meta.ts","83d705ea-68c2-11f1-bd6e-1607ee4eb77e",516,["D",1781689428475],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// del-meta.ts — Delete ALL metafields on a customer or order. TTAI store only.\n\nimport { parseArgs } from \"jsr:@std/cli@^1/parse-args\";\nimport { load } from \"jsr:@std/dotenv@^0.225\";\nimport { ttaiSecrets } from \"../backend/core/app.ts\";\nimport { shopifyConfig } from \"../backend/integrations/shopify/config.ts\";\nimport { resolveGid, die, opt, usage, wantsHelp } from \"./_common.ts\";\nimport {\n readMetafields,\n readMetafieldsByGid,\n deleteMetafields,\n} from \"../backend/integrations/shopify/metafields.ts\";\n\nif (wantsHelp(Deno.args.length))\n usage([\n \"del-meta — Delete ALL metafields on a Shopify customer or order.\",\n \" Safety: only works on the ttai dev store.\",\n \"\",\n \"Usage:\",\n \" deno task del-meta --type user --email \",\n \" deno task del-meta --type user --phone \",\n \" deno task del-meta --type order --order-id \",\n \"\",\n \"Options:\",\n \" --type Resource type (required)\",\n \" --email Customer email (user)\",\n \" --phone Customer phone in E.164 (user)\",\n \" --id Customer Shopify GID (user)\",\n \" --order-id Order ID, #name, or full GID (order)\",\n \"\",\n \"Note: -c flag is ignored; this script is hardcoded to ttai.\",\n ]);\n\nawait load({ export: true });\n\nconst p = parseArgs(Deno.args, {\n string: [\"type\", \"email\", \"phone\", \"id\", \"order-id\", \"c\"],\n});\nif (p.c && p.c !== \"ttai\") die(\"del-meta only works on the ttai store.\");\n\nconst cfg = shopifyConfig(ttaiSecrets());\nconst { gid, label } = await resolveGid(cfg, \"ttai\", {\n type: opt(p.type),\n email: opt(p.email),\n phone: opt(p.phone),\n id: opt(p.id),\n \"order-id\": opt(p[\"order-id\"]),\n});\n\nconst mf =\n opt(p.type) === \"user\" ? await readMetafields(cfg, gid) : await readMetafieldsByGid(cfg, gid);\n\nif (!mf.length) {\n console.log(`No metafields on ${label}.`);\n Deno.exit(0);\n}\n\nconsole.log(`Found ${mf.length} metafield(s) on ${label}:`);\nfor (const m of mf) console.log(` ${m.namespace}.${m.key} = ${m.value.slice(0, 50)}`);\n\nconst toDelete = mf.map((m) => ({ ownerId: gid, namespace: m.namespace, key: m.key }));\nif (toDelete.length > 25)\n die(\n `Too many metafields (${toDelete.length}). deleteMetafields is capped at 25 per call. Delete in batches.`,\n );\n\nconst result = await deleteMetafields(cfg, toDelete);\n\nif (result.userErrors.length)\n die(`Delete failed: ${result.userErrors.map((e) => e.message).join(\"; \")}`);\nconsole.log(`\\n✅ Deleted ${result.deletedMetafields.length} metafield(s).`);\n",[],[190,345],"118cbcf6-5867-4103-9921-e7c7e1a6929a","_common.ts","b9a49a52-68a9-11f1-bf28-1607ee4eb77e",494,["D",1781532004612],"// _common.ts — Shared bootstrap + resource resolution for scripts.\n\nimport { load } from \"jsr:@std/dotenv@^0.225\";\nimport { parseArgs } from \"jsr:@std/cli@^1/parse-args\";\nimport { jjsSecrets, ttaiSecrets } from \"../backend/core/app.ts\";\nimport { shopifyConfig, type ShopifyConfig } from \"../backend/integrations/shopify/config.ts\";\nimport { resolveCustomerGid, resolveOrderGid } from \"../backend/integrations/shopify/snapshot.ts\";\nimport type { ShopifySecrets } from \"../backend/core/app.ts\";\n\nconst STORES: Record ShopifySecrets> = { ttai: ttaiSecrets, jjs: jjsSecrets };\n\nexport interface ScriptCtx {\n cfg: ShopifyConfig;\n store: string;\n args: string[];\n}\n\n/** Parse --c flag, load .env, return ShopifyConfig + positional args. */\nexport async function bootstrap(): Promise {\n await load({ export: true });\n const parsed = parseArgs(Deno.args, { string: [\"c\"], default: { c: \"ttai\" } });\n const store = parsed.c as string;\n const resolver = STORES[store];\n if (!resolver) {\n console.error(`Unknown store: ${store}. Valid: ${Object.keys(STORES).join(\", \")}`);\n Deno.exit(1);\n }\n return { cfg: shopifyConfig(resolver()), store, args: parsed._.map(String) };\n}\n\n/** Resolve a Shopify GID from parsed flags. Returns GID + human label, or exits. */\nexport async function resolveGid(\n cfg: ShopifyConfig,\n store: string,\n opts: { type?: string; email?: string; phone?: string; id?: string; \"order-id\"?: string },\n): Promise<{ gid: string; label: string }> {\n const t = opts.type?.trim();\n if (!t || ![\"user\", \"order\"].includes(t)) die(\"--type must be user or order\");\n\n if (t === \"user\") {\n const email = opts.email?.trim() || undefined;\n const phone = opts.phone?.trim() || undefined;\n const id = opts.id?.trim() || undefined;\n if (!email && !phone && !id) die(\"Provide --email, --phone, or --id\");\n console.log(`[${store}] Resolving customer …`);\n const gid = await resolveCustomerGid(cfg, { email, phone, customer_id: id });\n if (!gid) die(`Customer not found: ${email ?? phone ?? id}`);\n console.log(` → ${gid}\\n`);\n return { gid, label: `customer ${email ?? phone ?? id}` };\n }\n\n const ref = opts[\"order-id\"]?.trim();\n if (!ref) die(\"Provide --order-id\");\n console.log(`[${store}] Resolving order ${ref} …`);\n const gid = await resolveOrderGid(cfg, ref);\n if (!gid) die(`Order not found: ${ref}`);\n console.log(` → ${gid}\\n`);\n return { gid, label: `order ${ref}` };\n}\n\nexport function die(msg: string): never {\n console.error(msg);\n Deno.exit(1);\n}\n\n/** Shorthand: trim or undefined. */\nexport function opt(v: unknown): string | undefined {\n return typeof v === \"string\" && v.trim() ? v.trim() : undefined;\n}\n\n/** Print usage and exit. Lines are joined with newline. */\nexport function usage(lines: string[]): never {\n console.log(lines.join(\"\\n\"));\n Deno.exit(0);\n}\n\n/** True if user passed --help or -h, or no meaningful args at all. */\nexport function wantsHelp(argCount: number): boolean {\n return Deno.args.includes(\"--help\") || Deno.args.includes(\"-h\") || argCount === 0;\n}\n",[],[190,353],["D",1781519599541],[281,282,283,284,285,286],[190],"8df317d9-1e53-4d64-bbaf-05bab76aa472","types.ts","f4109fca-6128-11f1-90f7-1607ee4eb77e",334,["D",1780944386447],8,"// types.ts — View models passed from backend handlers into the admin UI.\n\n/** One customer row for the Auth tab + the data the Debug/Integration tabs need. */\nexport interface CustomerView {\n id: string;\n label: string;\n fns: string[];\n secret: string;\n enabled: boolean;\n configured: boolean;\n updatedTs: string;\n descriptions: Record; // fn name → plain-language description\n sampleBodies: Record>; // fn name → example POST body\n paramsSchemas: Record>; // fn name → JSON Schema\n}\n\n/** A single logged invocation, shown (expandable) on the Recent calls page. */\nexport interface CallView {\n id: number;\n customer: string;\n fn: string;\n ok: boolean;\n status: number;\n latency_ms: number;\n detail: string;\n req_body: string;\n resp_body: string;\n ts: string;\n}\n\n/** The full /admin page model: signed-in user + every customer's config. */\nexport interface AdminView {\n username: string;\n avatarUrl?: string;\n baseUrl: string;\n customers: CustomerView[];\n saved: boolean;\n}\n\n/** A customer's selectable functions, for the Recent calls page filters. */\nexport interface CallsCustomer {\n id: string;\n label: string;\n fns: string[];\n}\n\nexport interface CallsView {\n username: string;\n avatarUrl?: string;\n baseUrl: string;\n customers: CallsCustomer[];\n}\n",[],[197,364],"a1457f60-24f4-4020-a557-4cff6f56b16e","shared.tsx","fe520698-632d-11f1-aacf-1607ee4eb77e",386,["D",1780952006405],13,"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// shared.tsx — Render helpers + navbar/chrome shared across admin pages.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\nimport type { ComponentChildren, VNode } from \"https://esm.sh/preact@10.29.1\";\n\n/** Serialize a Preact tree into a full HTML document string. */\nexport function doc(node: VNode): string {\n return \"\" + render(node);\n}\n\n/** Serialize data for safe inlining inside a `\n \n

Diff · v526