[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_980":981,"_982":983},"routes/_app.x.$handle.$name",{"_101":100,"_32":46,"_110":91,"_27":54,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":60,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",585,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","backend/core/app.ts","latestPath","fileId","a2612676-6363-11f1-9f54-1607ee4eb77e","name","app.ts","fileType","script","content","// app.ts — Static, explicit configuration. No prefix magic: each customer lists\n// exactly the env vars it reads, and we parse only those into a typed secrets\n// object. Globals (shared infra keys) sit in their own typed object.\n//\n// Isolation note: handing each function its own `secrets` is a *soft* convention,\n// not a hard wall — nothing physically stops code from importing `env()`. The win\n// is clarity and types: everything a customer can read is declared here, in one\n// place, and a `jjs` function is typed to see only `SecretsJjs`.\n\nimport { env } from \"./shared.ts\";\n\n// ------------------------------------------------------------------------------\n// globals — shared infra, not customer-scoped\n// ------------------------------------------------------------------------------\n\nexport interface Globals {\n openaiKey: string; // OPENAI_API_KEY — LangChain agents\n adminUsers: string; // ADMIN_USERS — comma-separated admin usernames\n}\n\n/** Read the global (infra) configuration from the environment. */\nexport function globals(): Globals {\n return {\n openaiKey: env(\"OPENAI_API_KEY\"),\n adminUsers: env(\"ADMIN_USERS\"),\n };\n}\n\n// ------------------------------------------------------------------------------\n// per-customer secrets — each shape lists exactly what that customer reads\n// ------------------------------------------------------------------------------\n\n/** Shopify credentials a merchant customer needs. `prefix` is the env-var prefix\n * (declared, not computed) used for the 503 hints and the token cache key. */\nexport interface ShopifySecrets {\n prefix: string;\n shop: string;\n clientId: string;\n clientSecret: string;\n}\n\n/** Jhaji — a Shopify merchant. Reads `JJS_SHOPIFY_*`. */\nexport type SecretsJjs = ShopifySecrets;\n\n/** ToughTongue AI — Shopify dev store for internal testing. Reads `TTAI_SHOPIFY_*`. */\nexport type SecretsTtai = ShopifySecrets;\n\n/** Fitelo — forwards post-session events to an n8n webhook (SMS / app). */\nexport interface SecretsFitelo {\n webhookUrl: string; // FITELO_N8N_WEBHOOK_URL — n8n workflow trigger\n}\n\n/** Every customer's secret shape — the type generic plumbing carries by default. */\nexport type CustomerSecrets = SecretsJjs | SecretsTtai | SecretsFitelo;\n\n// ------------------------------------------------------------------------------\n// resolvers — read ONLY the listed vars; each runs once per customer sub-app\n// ------------------------------------------------------------------------------\n\n/** Resolve Jhaji's secrets from `JJS_SHOPIFY_*`. Missing vars stay empty strings;\n * the consumer (`shopifyConfig`) decides which are required and reports them. */\nexport function jjsSecrets(): SecretsJjs {\n return {\n prefix: \"JJS\",\n shop: env(\"JJS_SHOPIFY_SHOP\"),\n clientId: env(\"JJS_SHOPIFY_CLIENT_ID\"),\n clientSecret: env(\"JJS_SHOPIFY_CLIENT_SECRET\"),\n };\n}\n\n/** ToughTongue AI — reads `TTAI_SHOPIFY_*` (dev store for internal testing). */\nexport function ttaiSecrets(): SecretsTtai {\n return {\n prefix: \"TTAI\",\n shop: env(\"TTAI_SHOPIFY_SHOP\"),\n clientId: env(\"TTAI_SHOPIFY_CLIENT_ID\"),\n clientSecret: env(\"TTAI_SHOPIFY_CLIENT_SECRET\"),\n };\n}\n\n/** Fitelo — reads the n8n webhook URL it forwards post-session events to. */\nexport function fiteloSecrets(): SecretsFitelo {\n return { webhookUrl: env(\"FITELO_N8N_WEBHOOK_URL\") };\n}\n","// app.ts — Static, explicit configuration. No prefix magic: each customer lists\n// exactly the env vars it reads, and we parse only those into a typed secrets\n// object. Globals (shared infra keys) sit in their own typed object.\n//\n// Isolation note: handing each function its own `secrets` is a *soft* convention,\n// not a hard wall — nothing physically stops code from importing `env()`. The win\n// is clarity and types: everything a customer can read is declared here, in one\n// place, and a `jjs` function is typed to see only `SecretsJjs`.\n\nimport { env } from \"./shared.ts\";\n\n// ------------------------------------------------------------------------------\n// globals — shared infra, not customer-scoped\n// ------------------------------------------------------------------------------\n\nexport interface Globals {\n openaiKey: string; // OPENAI_API_KEY — LangChain agents\n adminUsers: string; // ADMIN_USERS — comma-separated admin usernames\n}\n\n/** Read the global (infra) configuration from the environment. */\nexport function globals(): Globals {\n return {\n openaiKey: env(\"OPENAI_API_KEY\"),\n adminUsers: env(\"ADMIN_USERS\"),\n };\n}\n\n// ------------------------------------------------------------------------------\n// per-customer secrets — each shape lists exactly what that customer reads\n// ------------------------------------------------------------------------------\n\n/** Shopify credentials a merchant customer needs. `prefix` is the env-var prefix\n * (declared, not computed) used for the 503 hints and the token cache key. */\nexport interface ShopifySecrets {\n prefix: string;\n shop: string;\n clientId: string;\n clientSecret: string;\n}\n\n/** Jhaji — a Shopify merchant. Reads `JJS_SHOPIFY_*`. */\nexport type SecretsJjs = ShopifySecrets;\n\n/** ToughTongue AI — Shopify dev store for internal testing. Reads `TTAI_SHOPIFY_*`. */\nexport type SecretsTtai = ShopifySecrets;\n\n/** Fitelo — forwards post-session events to an n8n webhook (SMS / app). */\nexport interface SecretsFitelo {\n webhookUrl: string; // FITELO_N8N_WEBHOOK_URL — n8n workflow trigger\n}\n\n/** Adda247 — no external API secrets; only the shared OpenAI key is used. */\nexport type SecretsAdda247 = Record;\n\n/** Every customer's secret shape — the type generic plumbing carries by default. */\nexport type CustomerSecrets = SecretsJjs | SecretsTtai | SecretsFitelo | SecretsAdda247;\n\n// ------------------------------------------------------------------------------\n// resolvers — read ONLY the listed vars; each runs once per customer sub-app\n// ------------------------------------------------------------------------------\n\n/** Resolve Jhaji's secrets from `JJS_SHOPIFY_*`. Missing vars stay empty strings;\n * the consumer (`shopifyConfig`) decides which are required and reports them. */\nexport function jjsSecrets(): SecretsJjs {\n return {\n prefix: \"JJS\",\n shop: env(\"JJS_SHOPIFY_SHOP\"),\n clientId: env(\"JJS_SHOPIFY_CLIENT_ID\"),\n clientSecret: env(\"JJS_SHOPIFY_CLIENT_SECRET\"),\n };\n}\n\n/** ToughTongue AI — reads `TTAI_SHOPIFY_*` (dev store for internal testing). */\nexport function ttaiSecrets(): SecretsTtai {\n return {\n prefix: \"TTAI\",\n shop: env(\"TTAI_SHOPIFY_SHOP\"),\n clientId: env(\"TTAI_SHOPIFY_CLIENT_ID\"),\n clientSecret: env(\"TTAI_SHOPIFY_CLIENT_SECRET\"),\n };\n}\n\n/** Fitelo — reads the n8n webhook URL it forwards post-session events to. */\nexport function fiteloSecrets(): SecretsFitelo {\n return { webhookUrl: env(\"FITELO_N8N_WEBHOOK_URL\") };\n}\n\n/** Adda247 — no customer-specific secrets; agent uses only the global OpenAI key. */\nexport function adda247Secrets(): SecretsAdda247 {\n return {};\n}\n","createdAt",["D",1783485164649],"branchVersion","branchId","b9c38076-09b5-49a6-8d65-4b509f9cce50","id","30ca1bfe-8d0b-41cd-af05-40f09f5a31a1","uAgents",["D",1780696391552],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","279c3e70-f2b8-11ef-a073-37253b8bcbda","pinnedFileId","f3dc8b86-6128-11f1-854e-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019e994f-fcc4-73e9-86ed-2d14fe9f5dfa","tursoName","30ca1bfe8d0b41cdaf0540f09f5a31a1","tursoHostname","30ca1bfe8d0b41cdaf0540f09f5a31a1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789531852468],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":-5,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":46,"_99":100},"isOwned",679,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","ttai","handle","displayName","Tough Tongue AI","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/4b8edab4-7879-48e2-f777-109aa5256800/square512?exp=1789588799&sig=1e7ad78cdd57075a01956d9db9b0bcccc37046e5fda001d3494bb7ff2313aa1b","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_44":45,"_32":46,"_39":975,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":976,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":977,"_85":978,"_87":979,"_89":25},"tree",[235,295,310,317,318,319,320,321,322,323,324],"files",[235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324],"counts",{"_225":64,"_226":183,"_227":64,"_228":229,"_230":231},"contents",[131,132,133,134,135,136,137,138,139,140,141],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":219,"_32":220,"_30":221,"_145":-5,"_42":43,"_41":222,"_147":60,"_39":223,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_27":224},{"_44":214,"_32":215,"_30":216,"_145":-5,"_42":43,"_41":183,"_147":60,"_39":217,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_27":218},{"_44":207,"_32":208,"_30":209,"_145":-5,"_42":43,"_41":210,"_147":60,"_39":211,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_27":213},{"_44":200,"_32":201,"_30":202,"_145":-5,"_42":43,"_41":203,"_147":60,"_39":204,"_13":64,"_34":20,"_36":205,"_24":25,"_151":-5,"_27":206},{"_44":193,"_32":194,"_30":195,"_145":-5,"_42":43,"_41":196,"_147":25,"_39":197,"_13":64,"_34":20,"_36":198,"_24":25,"_151":-5,"_27":199},{"_44":186,"_32":187,"_30":188,"_145":-5,"_42":43,"_41":189,"_147":60,"_39":190,"_13":183,"_34":20,"_36":191,"_24":25,"_151":-5,"_27":192},{"_44":178,"_32":179,"_30":180,"_145":-5,"_42":43,"_41":181,"_147":25,"_39":182,"_13":183,"_34":20,"_36":184,"_24":25,"_151":-5,"_27":185},{"_44":170,"_32":171,"_30":172,"_145":-5,"_42":43,"_41":173,"_147":25,"_39":174,"_13":175,"_34":20,"_36":176,"_24":25,"_151":-5,"_27":177},{"_44":162,"_32":163,"_30":164,"_145":-5,"_42":43,"_41":165,"_147":25,"_39":166,"_13":167,"_34":20,"_36":168,"_24":25,"_151":-5,"_27":169},{"_44":153,"_32":154,"_30":58,"_145":-5,"_42":43,"_41":155,"_147":60,"_39":156,"_13":157,"_34":158,"_36":159,"_24":25,"_151":160,"_27":161},{"_44":142,"_32":143,"_30":144,"_145":-5,"_42":43,"_41":146,"_147":25,"_39":148,"_13":149,"_34":20,"_36":150,"_24":25,"_151":-5,"_27":152},"938ac1c7-f8e1-456c-b2de-977bf96a0bfa","val.yml","f3605d0e-6128-11f1-9354-1607ee4eb77e","parentId",537,"latest",["D",1782557041254],11,"# val.yml — metadata contract for this val. Not consumed by `vt` today; reserved\n# for a future repo wrapper over vt-cli (safer deploys, env checks, file typing).\nname: \"uAgents\"\norg: \"ttai\"\npublic: true # intended private; free-plan private-val limit forced public at create\n#\n# Two surfaces:\n# /c// → customer functions (Bearer key auth; cname from the URL)\n# /admin → Val Town OAuth-gated admin UI (gated to ADMIN_USERS)\n#\n# Only index.http.ts is the HTTP val. Other files must avoid Val Town's reserved\n# filename infixes (http, cron, email, …) — e.g. core/api.ts, not core/http.ts.\nfiles:\n index.http.ts: http\n\n# Env vars this app reads. Set them in the Val Town UI sidebar — never in code.\n# Shopify vars are per-customer: prefix = uppercased customer id (JJS = Jhaji).\n# The shop must expose Storefront MCP at https://{shop}/api/mcp.\n#\n# required — app will not work without this\n# recommended — has a safe fallback but set explicitly for production\n# optional — feature-flagged; functions 503 with the exact var name when missing\nenv:\n ADMIN_USERS: required # comma-separated Val Town usernames for /admin access\n OPENAI_API_KEY: required # OpenAI key for all LangChain agent-backed functions\n OAUTH_STATE_ENCRYPTION_KEY: recommended # AES-GCM key for admin OAuth session cookie; `openssl rand -base64 32`\n JJS_SHOPIFY_SHOP: optional # Jhaji store hostname, e.g. ttai-merchandise-dev.myshopify.com (no scheme)\n JJS_SHOPIFY_CLIENT_ID: optional # Jhaji Dev Dashboard app client id (client-credentials grant)\n JJS_SHOPIFY_CLIENT_SECRET: optional # Jhaji Dev Dashboard app client secret\n TTAI_SHOPIFY_SHOP: optional # ToughTongue AI dev store hostname (no scheme)\n TTAI_SHOPIFY_CLIENT_ID: optional # TTAI Dev Dashboard app client id\n TTAI_SHOPIFY_CLIENT_SECRET: optional # TTAI Dev Dashboard app client secret\n FITELO_N8N_WEBHOOK_URL: optional # Fitelo n8n webhook the post-session-sms fn forwards to\n","label",[143],"a17d6cb6-e1b8-4017-bfe6-f364eeab5315","index.http.ts",280,["D",1780941501215],10,"http","// index.http.ts — HTTP entry point, built on Hono. Two surfaces, one app:\n// /c// → customer functions (each customer is a mounted sub-app)\n// /admin → Val Town OAuth admin UI (gated to ADMIN_USERS)\n// A function may invoke an agent internally; the API doesn't distinguish.\n// This file is pure wiring; logic lives in backend/ and frontend/.\n\nimport { Hono } from \"npm:hono@^4\";\nimport { type AdminUc, getAdminUc, withValTownAuth } from \"./backend/core/auth.ts\";\nimport {\n buildAdminView,\n buildCalls,\n buildCallsView,\n saveAuthForm,\n} from \"./backend/core/handlers.ts\";\nimport { apiErrorHandler } from \"./backend/core/api.ts\";\nimport { mountCustomers } from \"./backend/customers/registry.ts\";\nimport { LOGO_MIME, LOGO_SVG } from \"./frontend/assets.ts\";\nimport { renderAdmin, renderDenied, renderLogin } from \"./frontend/admin.tsx\";\nimport { renderCalls } from \"./frontend/calls.tsx\";\n\nconst app = new Hono();\n\n// -----------------------------------------------------------------------------\n// public assets — SVG logo / favicon (no auth; browser-cached)\n// -----------------------------------------------------------------------------\nconst logoResponse = () =>\n new Response(LOGO_SVG, {\n headers: { \"content-type\": LOGO_MIME, \"cache-control\": \"public, max-age=604800\" },\n });\napp.get(\"/logo.svg\", logoResponse);\napp.get(\"/favicon.ico\", logoResponse);\n\n// -----------------------------------------------------------------------------\n// admin — OAuth gate to ADMIN_USERS, then three pages\n// -----------------------------------------------------------------------------\nconst admin = new Hono<{ Variables: { uc: AdminUc } }>();\n\nadmin.use(\"*\", async (c, next) => {\n const uc = await getAdminUc(c.req.raw);\n if (!uc.isAuthed) return c.html(renderLogin(), 401);\n if (!uc.isAdmin) return c.html(renderDenied(uc.username ?? \"\"), 403);\n c.set(\"uc\", uc);\n await next();\n});\n\nadmin.get(\"/\", async (c) => {\n const uc = c.get(\"uc\");\n const saved = c.req.query(\"saved\") === \"1\";\n const view = await buildAdminView(\n uc.username ?? \"\",\n uc.avatarUrl,\n new URL(c.req.url).origin,\n saved,\n );\n return c.html(renderAdmin(view));\n});\n\nadmin.get(\"/calls\", (c) => {\n const uc = c.get(\"uc\");\n const view = buildCallsView(uc.username ?? \"\", uc.avatarUrl, new URL(c.req.url).origin);\n return c.html(renderCalls(view));\n});\n\n// JSON feed for the Recent calls page: filter by customer + selected functions.\nadmin.get(\"/calls.json\", async (c) => {\n const customer = c.req.query(\"customer\") ?? \"\";\n const fns = c.req.queries(\"fn\") ?? [];\n return c.json({ calls: await buildCalls(customer, fns) });\n});\n\nadmin.post(\"/auth\", async (c) => {\n await saveAuthForm(c.req.raw);\n return c.redirect(\"/admin?saved=1\", 303);\n});\nadmin.onError(apiErrorHandler);\n\n// -----------------------------------------------------------------------------\n// wiring — mount surfaces; root error boundary; JSON 404\n// -----------------------------------------------------------------------------\napp.get(\"/\", (c) => c.redirect(\"/admin\"));\napp.route(\"/admin\", admin);\nmountCustomers(app);\n\napp.onError(apiErrorHandler);\napp.notFound((c) => c.json({ ok: false, error: `Not found: ${c.req.path}` }, 404));\n\nexport default withValTownAuth((req) => app.fetch(req));\n","uagents",[154],"d01dca8f-bbd5-4bab-b6d0-d78367165f09","deno.json","f353dd04-6128-11f1-ac3a-1607ee4eb77e",522,["D",1782028227618],6,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\"dom\", \"dom.iterable\", \"dom.asynciterable\", \"deno.ns\", \"deno.unstable\"]\n },\n \"fmt\": {\n \"lineWidth\": 100,\n \"exclude\": [\".vt\"]\n },\n \"lint\": {\n \"exclude\": [\".vt\"],\n \"rules\": {\n \"exclude\": [\"no-explicit-any\", \"no-external-import\", \"no-import-prefix\"]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"],\n \"tasks\": {\n \"view-meta\": \"deno run -A scripts/view-meta.ts\",\n \"set-meta\": \"deno run -A scripts/set-meta.ts\",\n \"del-meta\": \"deno run -A scripts/del-meta.ts\",\n \"get-customer-info\": \"deno run -A scripts/get-customer-info.ts\",\n \"fetch-context\": \"deno run -A scripts/fetch-context.ts\"\n }\n}\n",[163],"a4f3781b-af79-4e99-a594-cb9649d2a698","README.md","f3e9fe92-6128-11f1-b4a4-1607ee4eb77e",530,["D",1782157536204],24,"# uAgents\n\nA single Val Town HTTP val ([Hono](https://hono.dev) router) that exposes small, per-customer\n**functions** behind a per-customer API key, plus a [beer.css](https://www.beercss.com/) admin UI to\nmanage those keys. A function is a plain request→response unit that **may or may not invoke an\nagent** (LangChain + OpenAI) internally. Deno-native, no build step. Deployed to the `ttai` org.\nPair with **uFns** for lightweight integration endpoints.\n\nTwo surfaces, one val:\n\n| Surface | Path | Auth |\n| --------- | --------------------------- | -------------------------------------- |\n| Functions | `GET\\|POST /c//` | Bearer key, verified for that `cname` |\n| Admin UI | `GET /admin` (`/` → it) | Val Town OAuth, gated to `ADMIN_USERS` |\n\n> This repo does **not** use `vtx`. Use the native `vt` CLI directly. Pushing cleanly is your\n> responsibility.\n\n---\n\n## Layout\n\n```\nuAgents/\n index.http.ts Hono root app: admin sub-app + customer sub-apps + /logo.svg\n val.yml name, files contract, env declarations\n deno.json Deno/Val Town compiler + lint config + task shortcuts\n .env.sample copy → .env and fill in for local scripts (gitignored)\n backend/\n core/ cross-cutting infrastructure\n shared.ts env(), JSON helpers, mintKey()\n app.ts static config: globals() + per-customer Secrets types ← registry\n api.ts ApiError, readJsonObject(), error mapping ← mini framework\n db.ts SQLite: customer_auth + call_log (req+resp bodies, batched prune)\n auth.ts OAuth admin gate + authenticate(req, cname)\n handlers.ts admin view assembly + key-config form save + call queries\n agentic-core/ the agent framework — no concrete agents live here\n types.ts Agent / AgentCtx / AgentResult contract\n runtime.ts LangChain ChatOpenAI wiring (global LLM key) + runAgent()\n tool-loop.ts generic model→tools→model loop (reusable by any agent)\n prompt.ts shared input-shaping helpers (withContext, str, compact)\n agents/ concrete agents + their LangChain tool wrappers\n quote-agent.ts the quote agent (structured output)\n shopify-mcp-agent.ts unified Shopify agent (Admin tools + Storefront MCP, ≤12 rounds)\n shopify-admin-tools.ts LangChain tool wrappers for Shopify Admin reads\n integrations/ external-service primitives (one folder per integration)\n shopify/\n config.ts validate a customer's ShopifySecrets → ShopifyConfig (503 on missing)\n token.ts Admin token via client-credentials grant (cached ~24h)\n errors.ts map scope/credential failures to visible 4xx (not masked 502)\n client.ts adminGql() (fetch, no SDK)\n snapshot.ts resolveCustomer(), resolveCustomerGid(), listAbandonedCheckouts()\n context.ts deterministic reads for fetch-context\n metafields.ts setMetafields(), readMetafields() — generic, no business logic\n customers/ one auth scope per customer; their functions live here\n types.ts Fn / FnCtx / Customer / CustomerSpec contracts\n define.ts defineCustomer() — a Hono sub-app per customer\n agent-fn.ts agentFn() — bridge any Agent into an FnSpec\n builtins.ts reusable functions (echo) customers can register\n registry.ts all customers + mountCustomers() ← register here\n jjs/\n index.ts customer: Jhaji (echo, get-customer-info, get-metafields, shopify-sidekick, post-feedback)\n get-customer-info.ts deterministic Shopify read (no LLM)\n get-metafields.ts read customer metafields (all or by namespace)\n post-feedback.ts POST_SESSION hook — writes call feedback as ttai_call.* metafields\n shopify-sidekick.ts function that invokes the Shopify agent\n ttai/\n index.ts customer: ToughTongue AI (echo, get-a-new-quote)\n get-a-new-quote.ts function that invokes the quote agent\n scripts/ local Deno scripts for testing against the real store\n get-customer-info.ts fetch customer profile + all metafields by email\n fetch-context.ts fetch exact order context + recent abandoned checkouts\n frontend/\n layout.tsx Shell: beer.css doc + top app bar (logo + brand + actions + user)\n shared.tsx doc(), UserMenu/LoginLink (navbar), logout, banner\n assets.ts inline SVG \"uA\" logo → served at /logo.svg (favicon + navbar)\n admin.tsx admin (Auth + Debug + TTAI Integration tabs) / login / denied\n debug.tsx Debug tab: live runner (URL + Authorization + curl + body)\n integration.tsx TTAI Integration tab: endpoint URL + params-schema JSON\n auth-header.tsx Authorization header display helper (shared by debug + integration)\n calls.tsx Recent calls page (customer + fn filters, expandable req/resp)\n types.ts admin view models\n styles/ modular CSS layers (Next.js-style)\n tokens.ts design tokens + semantic M3 aliases (palette is runtime-generated)\n base.ts document layout + typography scale\n components.ts cards, key row, tabs, chips, table, debug box\n index.ts composes layers → GLOBAL_CSS\n```\n\n> File naming: only `index.http.ts` is the HTTP entry. Val Town infers a file's val-type from\n> reserved name infixes (`http`, `cron`, `email`, …), so the mini-framework lives in `core/api.ts`,\n> **not** `core/http.ts`.\n\n---\n\n## Auth model (per-customer key, cname in the URL)\n\nThe customer (`cname`) is the first path segment: `/c//`. Auth is scoped to that cname:\n\n- Send the key as `Authorization: Bearer ` (or `X-API-Key: `).\n- Each customer is a [Hono](https://hono.dev) sub-app mounted at `/c/`. Its middleware (bound to\n that `id`) calls `authenticate(req, cname)` — loads ``'s config and compares the bearer\n token to the stored key in constant time. Rejected when the customer is unconfigured/disabled\n (403) or the key is missing/wrong (401). The customer module \"owns\" its name + validation by\n construction. An outer middleware records every call (success or denied) to the call log — status,\n latency, and the full request + response bodies (headers stripped, capped).\n- **Admin UI** is gated by Val Town OAuth — only usernames in `ADMIN_USERS` get in.\n\nKeys are minted in the admin UI (generated on first save, rotatable), stored in SQLite, and shown in\nthe UI so you can copy them. They carry a readable `utt__` prefix, but routing no\nlonger depends on the prefix — the URL's `cname` is authoritative.\n\n### Security properties (code is public)\n\nThe val is public on Val Town — anyone can read the source. Security rests on secrets, not\nobscurity:\n\n| Surface | Protection | Notes |\n| -------------------- | ------------------------------------------ | ----------------------------------------------------------------------- |\n| `/c//` | Per-customer Bearer key (SQLite) | Constant-time compare; 403 when disabled |\n| `/admin/*` | Val Town OAuth + `ADMIN_USERS` allow-list | All sub-routes including `calls.json` |\n| `/admin/auth` (POST) | OAuth + admin check + registry guard | `customer` field validated against known registry — rejects unknown ids |\n| Shopify creds | Val Town env vars (never in code/logs) | Only read server-side; 503 names missing var |\n| Call log bodies | Stored headers-stripped, capped at 8 KB | Admin-only read; request bodies are logged |\n| Key length timing | Early-exit on mismatched length | Acceptable: all keys share the fixed-length prefix |\n| Rate limiting | None per-customer beyond Val Town platform | An attacker needs a valid key (admin-issued) to reach agents |\n\n---\n\n## Customers & functions\n\nEverything served over the API is a **function** — a `Fn = (ctx) => Response`. Functions are\nregistered per customer and exposed at `/c//`. A function may invoke an agent or not; the\nAPI doesn't distinguish. A customer's `index.ts` declares its functions via\n`defineCustomer({ id, label, fns })`; the factory builds a Hono sub-app, wiring auth + call-logging\nmiddleware (bound to that `id`) and a route per function. Routing, methods, and errors are Hono's\njob — there is no hand-rolled path parsing.\n\nEach customer is a folder under `backend/customers/`. To add one:\n\n1. Copy `backend/customers/jjs/` to `backend/customers//` and edit the id + label.\n2. Register it in `backend/customers/registry.ts`.\n3. In the admin UI, generate + enable its key.\n\nCurrent functions:\n\n- **`echo`** (builtin, all customers) — reflects method, query, and body back to the caller.\n- **`get-a-new-quote`** (`ttai`) — invokes a LangChain + OpenAI agent that invents a fresh, original\n quote. Output is schema-constrained (`quote`, `author`, `theme`) via structured output. Optional\n JSON body `{ \"theme\": \"courage\" }`; otherwise a theme is picked for you.\n- **`get-customer-info`** (`jjs`, `ttai`) — deterministic Shopify Admin read (no LLM). Body with at\n least one of `customer_id` / `customer_email` / `customer_phone` → profile, pending orders,\n abandoned checkouts. The same lookup is exposed to the agent as `get_customer_info`.\n- **`fetch-context`** (`jjs`, `ttai`) — deterministic Shopify Admin read (no LLM). Body\n `{ order_id, user_email?, user_phone? }` returns `user_phone`, `abandoned_ts`, `cart_value`, exact\n order JSON in `order_context`, matching unrecovered last-10-day abandoned checkouts in\n `user_context`, and an empty `related_items` array for response-shape compatibility.\n- **`shopify-sidekick`** (`jjs`, `ttai`) — full-service Shopify agent (`shopify-mcp-agent`). Body\n `{ prompt, customer_id?, customer_email?, customer_phone?, cart_id? }`. Combines two Admin tools\n (customer lookup, abandoned checkouts) with five Storefront MCP tools from the shop's `/api/mcp`\n (catalog search, product details, cart create/update, policies). Up to 12 tool rounds.\n\n**Add a function** — drop a file in `backend/customers//` exporting an `Fn`, then add it to that\ncustomer's `fns` map. Reusable functions (like `echo`) live in `backend/customers/builtins.ts`.\n\n**Invoke an agent from a function** — see `customers/ttai/get-a-new-quote.ts` or\n`customers/jjs/shopify-sidekick.ts`: each adapts the request into an `AgentCtx` and calls\n`runAgent()`. The runtime (`agentic-core/runtime.ts`) owns all LLM wiring, so agents stay\ndeclarative; add new concrete agents under `backend/agents/`. Tool-using agents reuse\n`agentic-core/tool-loop.ts` (model→tools→model). The framework lives in `agentic-core/`; `agents/`\nholds only the concrete agents.\n\n**Add an integration** — create `backend/integrations//` with a customer-agnostic client +\nhelpers (see `shopify/`). Resolve per-customer credentials from `__*` env so adding\na merchant is config-only.\n\n---\n\n## Environment variables\n\nSet these in the **Val Town UI sidebar** — never in code (`Deno.env.set()` is a no-op on Val Town).\nAll config is **static and explicit** in `backend/core/app.ts` (declared in `val.yml`).\n`OAUTH_STATE_ENCRYPTION_KEY` is read directly by the Val Town OAuth middleware (`std/oauth`).\n\n**Two kinds of config, listed explicitly — no prefix magic:**\n\n- **Globals** — `globals()` returns a typed `{ openaiKey, adminUsers }`. Shared infra (the LLM key,\n the admin allow-list); used by the runtime + auth only.\n- **Per-customer secrets** — each customer has a named type (`SecretsJjs`, `SecretsTtai`) and a\n resolver (`jjsSecrets()`, `ttaiSecrets()`) that reads **only that customer's listed env vars**\n (`JJS_SHOPIFY_*`, `TTAI_SHOPIFY_*`) into a typed object. A customer's\n `defineCustomer({ secrets })` resolver runs once; every `Fn` / `Agent` for that customer is handed\n its own typed `ctx.secrets` (e.g. a `jjs` function sees exactly `SecretsJjs`). Add a customer =\n add a `Secrets` type + resolver in `app.ts`, then pass it in that customer's `index.ts`.\n\n> The isolation is a **soft convention**, not a hard wall — nothing physically stops code from\n> importing `env()`. The value is clarity + types: what each customer can read is declared in one\n> place, and the type system keeps a `jjs` function from reaching another customer's (or a global's)\n> secrets.\n\n| Var | Status | Used by | Purpose |\n| ---------------------------- | ----------- | --------------------------------- | ------------------------------------------------------------ |\n| `ADMIN_USERS` | required | `core/auth.ts` (`/admin`) | Comma-separated Val Town usernames allowed into the admin |\n| `OPENAI_API_KEY` | required | `agentic-core/runtime.ts` | OpenAI key for the LangChain agents (agent-backed functions) |\n| `OAUTH_STATE_ENCRYPTION_KEY` | recommended | `std/oauth` via `withValTownAuth` | AES-GCM key material that encrypts the admin session cookie |\n| `JJS_SHOPIFY_SHOP` | optional | `integrations/shopify` (`jjs`) | jjs store hostname — must expose `/api/mcp` (no scheme) |\n| `JJS_SHOPIFY_CLIENT_ID` | optional | `integrations/shopify/token.ts` | jjs Dev Dashboard app client id — mints Admin tokens |\n| `JJS_SHOPIFY_CLIENT_SECRET` | optional | `integrations/shopify/token.ts` | jjs Dev Dashboard app client secret |\n| `TTAI_SHOPIFY_SHOP` | optional | `integrations/shopify` (`ttai`) | TTAI dev store hostname — must expose `/api/mcp` (no scheme) |\n| `TTAI_SHOPIFY_CLIENT_ID` | optional | `integrations/shopify/token.ts` | TTAI Dev Dashboard app client id — mints Admin tokens |\n| `TTAI_SHOPIFY_CLIENT_SECRET` | optional | `integrations/shopify/token.ts` | TTAI Dev Dashboard app client secret |\n\nNotes:\n\n- `ADMIN_USERS` example: `alice,bob`. Empty/unset ⇒ nobody can reach `/admin` (everyone is denied).\n- `OPENAI_API_KEY` only matters for agents. Unset ⇒ agent-backed functions return **503**; plain\n functions (e.g. `echo`) still work.\n- `JJS_SHOPIFY_*` and `TTAI_SHOPIFY_*` only matter for their own Shopify functions. A new merchant\n lists its own vars in a `secretsAcme()` resolver (`app.ts`). Unset shop/client creds ⇒ those\n functions return **503** naming the exact var.\n- **Admin auth (Shopify Dev Dashboard):** set `CLIENT_ID` + `CLIENT_SECRET` from the app's Settings\n page. `token.ts` exchanges them for a ~24h Admin token via the client-credentials grant and caches\n it. See\n [Admin & Storefront API → Generate tokens](../../../docs/wiki/integrations/shopify/admin-api.md).\n- `OAUTH_STATE_ENCRYPTION_KEY` — if unset, the middleware auto-generates a key and stores it in Val\n Town blob storage per redirect URI. That works, but **set it explicitly** so admin sessions\n survive redeploys and work on self-hosted runtimes. Any high-entropy string works (it's SHA-256'd\n to a 256-bit AES key); generate one with:\n\n```bash\n# generate a 32-byte base64 key (macOS: append `| pbcopy` to copy it)\nopenssl rand -base64 32\n```\n\nThen paste the value into the val's **Environment Variables** sidebar as\n`OAUTH_STATE_ENCRYPTION_KEY`. `vt` does not manage env vars — they must be set in the Val Town UI.\n\n---\n\n## Local scripts\n\nScripts in `scripts/` run with Deno directly against the real store — no val deployment needed. They\nimport the backend primitives via relative paths, so they stay in sync automatically.\n\n**One-time setup** (from `exp/vals/uAgents/`):\n\n```bash\ncp .env.sample .env\n# fill in JJS_SHOPIFY_SHOP, JJS_SHOPIFY_CLIENT_ID, JJS_SHOPIFY_CLIENT_SECRET\n```\n\n### `get-customer-info`\n\nResolves a customer by email and prints their profile, pending orders, abandoned checkouts, and all\nmetafields. Optionally scope metafields to a namespace.\n\n```bash\n# from exp/vals/uAgents/\ndeno task get-customer-info mayank.raj.unofficial@gmail.com\ndeno task get-customer-info mayank.raj.unofficial@gmail.com ttai_call # scope to namespace\n\n# or directly\ndeno run -A scripts/get-customer-info.ts mayank.raj.unofficial@gmail.com\n```\n\n### `fetch-context`\n\nResolves an order, backfills the customer's phone when Shopify has it, returns exact order JSON in\n`order_context`, and returns unrecovered abandoned checkouts in `user_context` only when they match\nthat order's customer/email/phone and were created in the last 10 days. `abandoned_ts` and\n`cart_value` are taken from the newest matching abandoned checkout. This function does not call\nOpenAI or generate related product recommendations; `related_items` is intentionally returned as\n`[]` for compatibility.\n\n```bash\n# from exp/vals/uAgents/\ndeno task fetch-context --order-id '#1001'\ndeno task fetch-context -c jjs '#1001' --user-email priya.sharma@example.com\n\n# or directly\ndeno run -A scripts/fetch-context.ts --order-id '#1001'\n```\n\n---\n\n## Local → Val Town with `vt`\n\nRun from **inside this directory** (`exp/vals/uAgents/`).\n\n```bash\nvt status # review what changed\nvt push # push (forceful — revert via the Val Town website if needed)\nvt browse # open the deployed val\n```\n\nFirst push of a brand-new val: `vt create uAgents .`. To link an existing remote val, `vt clone` it\nto a temp dir and move its `.vt/` folder next to this code. After pushing, set the\n[environment variables](#environment-variables) in the Val Town UI.\n\n---\n\n## Try it\n\n```bash\n# 1. In /admin, generate + enable a key for \"ttai\", then:\nexport VT_TTAI_APP_TOKEN=\"generate-from-admin-ui\"\nexport VT_JJS_APP_TOKEN=\"generate-from-admin-ui\"\n\n# plain function (echo)\ncurl -X POST https://uagents.val.run/c/ttai/echo \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{\"hi\":\"there\"}'\n\n# agent-backed function (fresh quote)\ncurl -X POST https://uagents.val.run/c/ttai/get-a-new-quote \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{\"theme\":\"craftsmanship\"}'\n\n# jjs Shopify sidekick (Admin + Storefront MCP)\ncurl -X POST https://uagents.val.run/c/jjs/shopify-sidekick \\\n -H \"Authorization: Bearer $VT_JJS_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"prompt\":\"Search for hoodies and add the first one to a new cart\",\"customer_email\":\"mayank.raj.unofficial@gmail.com\"}'\n```\n\nNegative paths (auth + routing) — handy as a quick smoke test:\n\n```bash\nBASE=https://uagents.val.run\n\n# missing key → 401\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/echo\" -d '{}'\n\n# wrong key → 401\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/echo\" \\\n -H \"Authorization: Bearer nope\" -d '{}'\n\n# unknown customer → 404\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/nope/echo\" \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" -d '{}'\n\n# unknown function on a real customer → 404\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/nope\" \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" -d '{}'\n```\n",[171],"5b280113-d54c-44da-8e75-6ab700c98b06","AGENTS.md","a5bb54c0-7571-11f1-b237-1607ee4eb77e",567,["D",1783012393209],1,"You are an advanced assistant specialized in generating Val Town code.\n\n## Core Guidelines\n\n- Ask clarifying questions when requirements are ambiguous\n- Provide complete, functional solutions rather than skeleton implementations\n- Test your logic against edge cases before presenting the final solution\n- Ensure all code follows Val Town's specific platform requirements\n- If a section of code that you're working on is getting too complex, consider refactoring it into\n subcomponents\n\n## Code Standards\n\n- Generate code in TypeScript or TSX\n- Add appropriate TypeScript types and interfaces for all data structures\n- Prefer official SDKs or libraries than writing API calls directly\n- Ask the user to supply API or library documentation if you are at all unsure about it\n- **Never bake in secrets into the code** - always use environment variables\n- Include comments explaining complex logic (avoid commenting obvious operations)\n- Follow modern ES6+ conventions and functional programming practices if possible\n\n## Types of triggers\n\n### 1. HTTP Trigger\n\n- Create web APIs and endpoints\n- Handle HTTP requests and responses\n- Example structure:\n\n```ts\nexport default async function (req: Request) {\n return new Response(\"Hello World\");\n}\n```\n\nFiles that are HTTP triggers have http in their name like `foobar.http.tsx`\n\n### 2. Cron Triggers\n\n- Run on a schedule\n- Use cron expressions for timing\n- Example structure:\n\n```ts\nexport default async function () {\n // Scheduled task code\n}\n```\n\nFiles that are Cron triggers have cron in their name like `foobar.cron.tsx`\n\n### 3. Email Triggers\n\n- Process incoming emails\n- Handle email-based workflows\n- Example structure:\n\n```ts\nexport default async function (email: Email) {\n // Process email\n}\n```\n\nFiles that are Email triggers have email in their name like `foobar.email.tsx`\n\n## Val Town Standard Libraries\n\nVal Town provides several hosted services and utility functions.\n\n### Blob Storage\n\n```ts\nimport { blob } from \"https://esm.town/v/std/blob\";\nawait blob.setJSON(\"myKey\", { hello: \"world\" });\nlet blobDemo = await blob.getJSON(\"myKey\");\nlet appKeys = await blob.list(\"app_\");\nawait blob.delete(\"myKey\");\n```\n\n### SQLite\n\n```ts\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nconst TABLE_NAME = \"todo_app_users_2\";\n// Create table - do this before usage and change table name when modifying schema\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE_NAME} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL\n)`);\n// Query data\nconst result = await sqlite.execute(`SELECT * FROM ${TABLE_NAME} WHERE id = ?`, [1]);\n```\n\nNote: When changing a SQLite table's schema, change the table's name (e.g., add _2 or _3) to create\na fresh table.\n\n### OpenAI\n\n```ts\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nconst openai = new OpenAI();\nconst completion = await openai.chat.completions.create({\n messages: [\n { role: \"user\", content: \"Say hello in a creative way\" },\n ],\n model: \"gpt-4o-mini\",\n max_tokens: 30,\n});\n```\n\n### Email\n\n```ts\nimport { email } from \"https://esm.town/v/std/email\";\n// By default emails the owner of the val\nawait email({\n subject: \"Hi\",\n text: \"Hi\",\n html: \"

Hi

\",\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport { parseProject, readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", (c) => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\" urls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's _extremely importing_ to note that `parseProject` and other Standard Library utilities\nONLY RUN ON THE SERVER. If you need access to this data on the client, run it in the server and pass\nit to the client by splicing it into the HTML page or by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use\n `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})` instead\n of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode symbols, or icon\n fonts/libraries instead\n- **AI Image:** To inline generate an AI image use:\n `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys) unless otherwise\n specified\n- **View Source:** Add a view source link by importing & using\n `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the client) and include\n `target=\"_top\"` attribute\n- **Error Debugging:** Add `` to HTML to capture\n client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local resolution; Avoid catches that\n merely log or return 500s. Let errors bubble up with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but generally prefer\n APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure compatibility on server\n and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer simple static\n client-side sites\n- **React Configuration:** When using React libraries, pin versions with\n `?deps=react@18.2.0,react-dom@18.2.0` and start the file with\n `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same version\n- **Styling:** Default to using TailwindCSS via\n `` unless otherwise specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project files:\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n\n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", (c) => serveFile(c.req.path, import.meta.url));\n\n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async (c) => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n\n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n\n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to see full stack\n traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:**\n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with `export default app.fetch // This is the entry point for HTTP vals`\n",[179],"5115440a-9447-4dc7-9012-dd40a4d49af6",".vtignore","a5c30cba-7571-11f1-ad5a-1607ee4eb77e",575,["D",1783058175024],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor\n",[187],"ed26c467-4364-40b5-9a09-ae75cab95f12",".gitignore","a117d82c-68a5-11f1-926a-1607ee4eb77e",427,["D",1781519600473],".env\nscripts/.env\n",[194],"d84c0d0f-d790-4707-b0e0-a3639874eb9d",".env.sample","a09df8b8-68a5-11f1-9dd7-1607ee4eb77e",420,["D",1781519599844],"# Shopify Dev Dashboard app credentials (same vars as pushed to Val Town)\n# JJS — Jhaji merchant store\nJJS_SHOPIFY_SHOP=ttai-merchandise-dev.myshopify.com\nJJS_SHOPIFY_CLIENT_ID=\nJJS_SHOPIFY_CLIENT_SECRET=\n\n# TTAI — ToughTongue AI internal dev store (for testing before production)\nTTAI_SHOPIFY_SHOP=\nTTAI_SHOPIFY_CLIENT_ID=\nTTAI_SHOPIFY_CLIENT_SECRET=\n",[201],"ff7f2101-71a5-425e-a367-560ef13a2086","scripts","a06c5628-68a5-11f1-b189-1607ee4eb77e",416,["D",1781519599541],"directory",[208],"6d14e6de-c8d3-45e7-ba6f-2ed984a1f71b","frontend","f2b2b82a-6128-11f1-9496-1607ee4eb77e",["D",1780696392346],[215],"157d3e42-b14b-4a4a-b3d1-13e8c95b8213","backend","f2d380b4-6128-11f1-b4a4-1607ee4eb77e",2,["D",1780696392550],[220],"pulls","branches","forks","envVars",{"_232":183,"_234":64},"connections",{"_232":64,"_233":64},"count","unfilledCount","emptyCount",{"_44":219,"_32":220,"_30":221,"_145":-5,"_42":43,"_41":222,"_147":60,"_39":972,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":973,"_27":974},{"_44":967,"_32":942,"_30":936,"_145":221,"_42":43,"_41":968,"_147":60,"_39":969,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":970,"_27":971},{"_44":959,"_32":960,"_30":961,"_145":936,"_42":43,"_41":962,"_147":60,"_39":963,"_13":222,"_34":35,"_36":964,"_24":25,"_151":-5,"_326":965,"_27":966},{"_44":951,"_32":952,"_30":953,"_145":936,"_42":43,"_41":954,"_147":60,"_39":955,"_13":167,"_34":35,"_36":956,"_24":25,"_151":-5,"_326":957,"_27":958},{"_44":943,"_32":944,"_30":945,"_145":936,"_42":43,"_41":946,"_147":60,"_39":947,"_13":433,"_34":35,"_36":948,"_24":25,"_151":-5,"_326":949,"_27":950},{"_44":934,"_32":403,"_30":935,"_145":936,"_42":43,"_41":937,"_147":60,"_39":938,"_13":529,"_34":35,"_36":939,"_24":25,"_151":-5,"_326":940,"_27":941},{"_44":929,"_32":880,"_30":874,"_145":221,"_42":43,"_41":930,"_147":60,"_39":931,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":932,"_27":933},{"_44":921,"_32":922,"_30":923,"_145":874,"_42":43,"_41":924,"_147":25,"_39":925,"_13":64,"_34":35,"_36":926,"_24":25,"_151":-5,"_326":927,"_27":928},{"_44":913,"_32":914,"_30":915,"_145":874,"_42":43,"_41":916,"_147":25,"_39":917,"_13":64,"_34":35,"_36":918,"_24":25,"_151":-5,"_326":919,"_27":920},{"_44":905,"_32":906,"_30":907,"_145":874,"_42":43,"_41":908,"_147":60,"_39":909,"_13":167,"_34":35,"_36":910,"_24":25,"_151":-5,"_326":911,"_27":912},{"_44":897,"_32":898,"_30":899,"_145":874,"_42":43,"_41":900,"_147":60,"_39":901,"_13":157,"_34":35,"_36":902,"_24":25,"_151":-5,"_326":903,"_27":904},{"_44":889,"_32":890,"_30":891,"_145":874,"_42":43,"_41":892,"_147":25,"_39":893,"_13":371,"_34":35,"_36":894,"_24":25,"_151":-5,"_326":895,"_27":896},{"_44":881,"_32":882,"_30":883,"_145":874,"_42":43,"_41":884,"_147":25,"_39":885,"_13":183,"_34":35,"_36":886,"_24":25,"_151":-5,"_326":887,"_27":888},{"_44":871,"_32":872,"_30":873,"_145":874,"_42":43,"_41":875,"_147":25,"_39":876,"_13":157,"_34":35,"_36":877,"_24":25,"_151":-5,"_326":878,"_27":879},{"_44":866,"_32":829,"_30":823,"_145":221,"_42":43,"_41":867,"_147":60,"_39":868,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":869,"_27":870},{"_44":858,"_32":859,"_30":860,"_145":823,"_42":43,"_41":861,"_147":60,"_39":862,"_13":222,"_34":35,"_36":863,"_24":25,"_151":-5,"_326":864,"_27":865},{"_44":854,"_32":33,"_30":31,"_145":823,"_42":43,"_41":14,"_147":25,"_39":855,"_13":529,"_34":35,"_36":38,"_24":25,"_151":-5,"_326":856,"_27":857},{"_44":846,"_32":847,"_30":848,"_145":823,"_42":43,"_41":849,"_147":25,"_39":850,"_13":167,"_34":35,"_36":851,"_24":25,"_151":-5,"_326":852,"_27":853},{"_44":838,"_32":839,"_30":840,"_145":823,"_42":43,"_41":841,"_147":25,"_39":842,"_13":529,"_34":35,"_36":843,"_24":25,"_151":-5,"_326":844,"_27":845},{"_44":830,"_32":831,"_30":832,"_145":823,"_42":43,"_41":833,"_147":60,"_39":834,"_13":407,"_34":35,"_36":835,"_24":25,"_151":-5,"_326":836,"_27":837},{"_44":820,"_32":821,"_30":822,"_145":823,"_42":43,"_41":824,"_147":60,"_39":825,"_13":433,"_34":35,"_36":826,"_24":25,"_151":-5,"_326":827,"_27":828},{"_44":815,"_32":610,"_30":604,"_145":221,"_42":43,"_41":816,"_147":60,"_39":817,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":818,"_27":819},{"_44":810,"_32":802,"_30":796,"_145":604,"_42":43,"_41":811,"_147":60,"_39":812,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":813,"_27":814},{"_44":803,"_32":491,"_30":804,"_145":796,"_42":43,"_41":805,"_147":60,"_39":806,"_13":64,"_34":35,"_36":807,"_24":25,"_151":-5,"_326":808,"_27":809},{"_44":793,"_32":794,"_30":795,"_145":796,"_42":43,"_41":797,"_147":60,"_39":798,"_13":64,"_34":35,"_36":799,"_24":25,"_151":-5,"_326":800,"_27":801},{"_44":788,"_32":780,"_30":774,"_145":604,"_42":43,"_41":789,"_147":60,"_39":790,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":791,"_27":792},{"_44":781,"_32":491,"_30":782,"_145":774,"_42":43,"_41":783,"_147":25,"_39":784,"_13":64,"_34":35,"_36":785,"_24":25,"_151":-5,"_326":786,"_27":787},{"_44":771,"_32":772,"_30":773,"_145":774,"_42":43,"_41":775,"_147":25,"_39":776,"_13":433,"_34":35,"_36":777,"_24":25,"_151":-5,"_326":778,"_27":779},{"_44":766,"_32":750,"_30":744,"_145":604,"_42":43,"_41":767,"_147":60,"_39":768,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":769,"_27":770},{"_44":758,"_32":491,"_30":759,"_145":744,"_42":43,"_41":760,"_147":25,"_39":761,"_13":762,"_34":35,"_36":763,"_24":25,"_151":-5,"_326":764,"_27":765},{"_44":751,"_32":653,"_30":752,"_145":744,"_42":43,"_41":753,"_147":60,"_39":754,"_13":416,"_34":35,"_36":755,"_24":25,"_151":-5,"_326":756,"_27":757},{"_44":742,"_32":644,"_30":743,"_145":744,"_42":43,"_41":745,"_147":60,"_39":746,"_13":64,"_34":35,"_36":747,"_24":25,"_151":-5,"_326":748,"_27":749},{"_44":737,"_32":688,"_30":682,"_145":604,"_42":43,"_41":738,"_147":60,"_39":739,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":740,"_27":741},{"_44":729,"_32":730,"_30":731,"_145":682,"_42":43,"_41":732,"_147":60,"_39":733,"_13":222,"_34":35,"_36":734,"_24":25,"_151":-5,"_326":735,"_27":736},{"_44":721,"_32":722,"_30":723,"_145":682,"_42":43,"_41":724,"_147":25,"_39":725,"_13":183,"_34":35,"_36":726,"_24":25,"_151":-5,"_326":727,"_27":728},{"_44":713,"_32":714,"_30":715,"_145":682,"_42":43,"_41":716,"_147":60,"_39":717,"_13":222,"_34":35,"_36":718,"_24":25,"_151":-5,"_326":719,"_27":720},{"_44":705,"_32":706,"_30":707,"_145":682,"_42":43,"_41":708,"_147":25,"_39":709,"_13":167,"_34":35,"_36":710,"_24":25,"_151":-5,"_326":711,"_27":712},{"_44":697,"_32":698,"_30":699,"_145":682,"_42":43,"_41":700,"_147":25,"_39":701,"_13":529,"_34":35,"_36":702,"_24":25,"_151":-5,"_326":703,"_27":704},{"_44":689,"_32":690,"_30":691,"_145":682,"_42":43,"_41":692,"_147":60,"_39":693,"_13":183,"_34":35,"_36":694,"_24":25,"_151":-5,"_326":695,"_27":696},{"_44":680,"_32":644,"_30":681,"_145":682,"_42":43,"_41":683,"_147":25,"_39":684,"_13":183,"_34":35,"_36":685,"_24":25,"_151":-5,"_326":686,"_27":687},{"_44":675,"_32":100,"_30":646,"_145":604,"_42":43,"_41":676,"_147":60,"_39":677,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":678,"_27":679},{"_44":667,"_32":668,"_30":669,"_145":646,"_42":43,"_41":670,"_147":60,"_39":671,"_13":451,"_34":35,"_36":672,"_24":25,"_151":-5,"_326":673,"_27":674},{"_44":660,"_32":491,"_30":661,"_145":646,"_42":43,"_41":662,"_147":25,"_39":663,"_13":442,"_34":35,"_36":664,"_24":25,"_151":-5,"_326":665,"_27":666},{"_44":652,"_32":653,"_30":654,"_145":646,"_42":43,"_41":655,"_147":60,"_39":656,"_13":183,"_34":35,"_36":657,"_24":25,"_151":-5,"_326":658,"_27":659},{"_44":643,"_32":644,"_30":645,"_145":646,"_42":43,"_41":647,"_147":60,"_39":648,"_13":64,"_34":35,"_36":649,"_24":25,"_151":-5,"_326":650,"_27":651},{"_44":635,"_32":636,"_30":637,"_145":604,"_42":43,"_41":638,"_147":60,"_39":639,"_13":433,"_34":35,"_36":640,"_24":25,"_151":-5,"_326":641,"_27":642},{"_44":627,"_32":628,"_30":629,"_145":604,"_42":43,"_41":630,"_147":60,"_39":631,"_13":451,"_34":35,"_36":632,"_24":25,"_151":-5,"_326":633,"_27":634},{"_44":619,"_32":620,"_30":621,"_145":604,"_42":43,"_41":622,"_147":25,"_39":623,"_13":407,"_34":35,"_36":624,"_24":25,"_151":-5,"_326":625,"_27":626},{"_44":611,"_32":612,"_30":613,"_145":604,"_42":43,"_41":614,"_147":25,"_39":615,"_13":529,"_34":35,"_36":616,"_24":25,"_151":-5,"_326":617,"_27":618},{"_44":602,"_32":403,"_30":603,"_145":604,"_42":43,"_41":605,"_147":60,"_39":606,"_13":407,"_34":35,"_36":607,"_24":25,"_151":-5,"_326":608,"_27":609},{"_44":597,"_32":533,"_30":592,"_145":221,"_42":43,"_41":598,"_147":60,"_39":599,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":600,"_27":601},{"_44":591,"_32":534,"_30":526,"_145":592,"_42":43,"_41":593,"_147":60,"_39":594,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":595,"_27":596},{"_44":583,"_32":584,"_30":585,"_145":526,"_42":43,"_41":586,"_147":60,"_39":587,"_13":167,"_34":35,"_36":588,"_24":25,"_151":-5,"_326":589,"_27":590},{"_44":575,"_32":576,"_30":577,"_145":526,"_42":43,"_41":578,"_147":60,"_39":579,"_13":167,"_34":35,"_36":580,"_24":25,"_151":-5,"_326":581,"_27":582},{"_44":567,"_32":568,"_30":569,"_145":526,"_42":43,"_41":570,"_147":25,"_39":571,"_13":183,"_34":35,"_36":572,"_24":25,"_151":-5,"_326":573,"_27":574},{"_44":559,"_32":560,"_30":561,"_145":526,"_42":43,"_41":562,"_147":25,"_39":563,"_13":64,"_34":35,"_36":564,"_24":25,"_151":-5,"_326":565,"_27":566},{"_44":551,"_32":552,"_30":553,"_145":526,"_42":43,"_41":554,"_147":60,"_39":555,"_13":371,"_34":35,"_36":556,"_24":25,"_151":-5,"_326":557,"_27":558},{"_44":543,"_32":544,"_30":545,"_145":526,"_42":43,"_41":546,"_147":25,"_39":547,"_13":529,"_34":35,"_36":548,"_24":25,"_151":-5,"_326":549,"_27":550},{"_44":535,"_32":536,"_30":537,"_145":526,"_42":43,"_41":538,"_147":25,"_39":539,"_13":167,"_34":35,"_36":540,"_24":25,"_151":-5,"_326":541,"_27":542},{"_44":523,"_32":524,"_30":525,"_145":526,"_42":43,"_41":527,"_147":60,"_39":528,"_13":529,"_34":35,"_36":530,"_24":25,"_151":-5,"_326":531,"_27":532},{"_44":214,"_32":215,"_30":216,"_145":-5,"_42":43,"_41":183,"_147":60,"_39":520,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":521,"_27":522},{"_44":515,"_32":489,"_30":483,"_145":216,"_42":43,"_41":516,"_147":60,"_39":517,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":518,"_27":519},{"_44":507,"_32":508,"_30":509,"_145":483,"_42":43,"_41":510,"_147":60,"_39":511,"_13":149,"_34":35,"_36":512,"_24":25,"_151":-5,"_326":513,"_27":514},{"_44":498,"_32":499,"_30":500,"_145":483,"_42":43,"_41":501,"_147":25,"_39":502,"_13":503,"_34":35,"_36":504,"_24":25,"_151":-5,"_326":505,"_27":506},{"_44":490,"_32":491,"_30":492,"_145":483,"_42":43,"_41":493,"_147":60,"_39":494,"_13":64,"_34":35,"_36":495,"_24":25,"_151":-5,"_326":496,"_27":497},{"_44":480,"_32":481,"_30":482,"_145":483,"_42":43,"_41":484,"_147":25,"_39":485,"_13":167,"_34":35,"_36":486,"_24":25,"_151":-5,"_326":487,"_27":488},{"_44":471,"_32":472,"_30":473,"_145":216,"_42":43,"_41":474,"_147":25,"_39":475,"_13":476,"_34":35,"_36":477,"_24":25,"_151":-5,"_326":478,"_27":479},{"_44":463,"_32":464,"_30":465,"_145":216,"_42":43,"_41":466,"_147":60,"_39":467,"_13":222,"_34":35,"_36":468,"_24":25,"_151":-5,"_326":469,"_27":470},{"_44":455,"_32":456,"_30":457,"_145":216,"_42":43,"_41":458,"_147":60,"_39":459,"_13":183,"_34":35,"_36":460,"_24":25,"_151":-5,"_326":461,"_27":462},{"_44":446,"_32":447,"_30":448,"_145":216,"_42":43,"_41":449,"_147":60,"_39":450,"_13":451,"_34":35,"_36":452,"_24":25,"_151":-5,"_326":453,"_27":454},{"_44":437,"_32":438,"_30":439,"_145":216,"_42":43,"_41":440,"_147":25,"_39":441,"_13":442,"_34":35,"_36":443,"_24":25,"_151":-5,"_326":444,"_27":445},{"_44":428,"_32":429,"_30":430,"_145":216,"_42":43,"_41":431,"_147":60,"_39":432,"_13":433,"_34":35,"_36":434,"_24":25,"_151":-5,"_326":435,"_27":436},{"_44":420,"_32":421,"_30":422,"_145":216,"_42":43,"_41":423,"_147":60,"_39":424,"_13":407,"_34":35,"_36":425,"_24":25,"_151":-5,"_326":426,"_27":427},{"_44":411,"_32":412,"_30":413,"_145":216,"_42":43,"_41":414,"_147":60,"_39":415,"_13":416,"_34":35,"_36":417,"_24":25,"_151":-5,"_326":418,"_27":419},{"_44":402,"_32":403,"_30":404,"_145":216,"_42":43,"_41":405,"_147":60,"_39":406,"_13":407,"_34":35,"_36":408,"_24":25,"_151":-5,"_326":409,"_27":410},{"_44":207,"_32":208,"_30":209,"_145":-5,"_42":43,"_41":210,"_147":60,"_39":399,"_13":64,"_34":212,"_36":-5,"_24":25,"_151":-5,"_326":400,"_27":401},{"_44":391,"_32":392,"_30":393,"_145":209,"_42":43,"_41":394,"_147":60,"_39":395,"_13":222,"_34":35,"_36":396,"_24":25,"_151":-5,"_326":397,"_27":398},{"_44":383,"_32":384,"_30":385,"_145":209,"_42":43,"_41":386,"_147":60,"_39":387,"_13":222,"_34":35,"_36":388,"_24":25,"_151":-5,"_326":389,"_27":390},{"_44":375,"_32":376,"_30":377,"_145":209,"_42":43,"_41":378,"_147":60,"_39":379,"_13":183,"_34":35,"_36":380,"_24":25,"_151":-5,"_326":381,"_27":382},{"_44":366,"_32":367,"_30":368,"_145":209,"_42":43,"_41":369,"_147":60,"_39":370,"_13":371,"_34":35,"_36":372,"_24":25,"_151":-5,"_326":373,"_27":374},{"_44":358,"_32":359,"_30":360,"_145":209,"_42":43,"_41":361,"_147":60,"_39":362,"_13":222,"_34":35,"_36":363,"_24":25,"_151":-5,"_326":364,"_27":365},{"_44":350,"_32":351,"_30":352,"_145":209,"_42":43,"_41":353,"_147":25,"_39":354,"_13":222,"_34":35,"_36":355,"_24":25,"_151":-5,"_326":356,"_27":357},{"_44":200,"_32":201,"_30":202,"_145":-5,"_42":43,"_41":203,"_147":60,"_39":347,"_13":64,"_34":20,"_36":205,"_24":25,"_151":-5,"_326":348,"_27":349},{"_44":193,"_32":194,"_30":195,"_145":-5,"_42":43,"_41":196,"_147":25,"_39":344,"_13":64,"_34":20,"_36":198,"_24":25,"_151":-5,"_326":345,"_27":346},{"_44":186,"_32":187,"_30":188,"_145":-5,"_42":43,"_41":189,"_147":60,"_39":341,"_13":183,"_34":20,"_36":191,"_24":25,"_151":-5,"_326":342,"_27":343},{"_44":178,"_32":179,"_30":180,"_145":-5,"_42":43,"_41":181,"_147":25,"_39":338,"_13":183,"_34":20,"_36":184,"_24":25,"_151":-5,"_326":339,"_27":340},{"_44":170,"_32":171,"_30":172,"_145":-5,"_42":43,"_41":173,"_147":25,"_39":335,"_13":175,"_34":20,"_36":176,"_24":25,"_151":-5,"_326":336,"_27":337},{"_44":162,"_32":163,"_30":164,"_145":-5,"_42":43,"_41":165,"_147":25,"_39":332,"_13":167,"_34":20,"_36":168,"_24":25,"_151":-5,"_326":333,"_27":334},{"_44":153,"_32":154,"_30":58,"_145":-5,"_42":43,"_41":155,"_147":60,"_39":329,"_13":157,"_34":158,"_36":159,"_24":25,"_151":160,"_326":330,"_27":331},{"_44":142,"_32":143,"_30":144,"_145":-5,"_42":43,"_41":146,"_147":25,"_39":325,"_13":149,"_34":20,"_36":150,"_24":25,"_151":-5,"_326":327,"_27":328},["D",1782557041254],"children",[],[143],["D",1780941501215],[],[154],["D",1782028227618],[],[163],["D",1782157536204],[],[171],["D",1783012393209],[],[179],["D",1783058175024],[],[187],["D",1781519600473],[],[194],["D",1781519599844],[],[201],"9c4320cd-3e7d-4b5b-b58e-d95340fbbecd","view-meta.ts","81da3cbc-68c2-11f1-8bd7-1607ee4eb77e",546,["D",1782893137728],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// view-meta.ts — Read metafields for a customer or order.\n\nimport { parseArgs } from \"jsr:@std/cli@^1/parse-args\";\nimport { bootstrap, opt, resolveGid, usage, wantsHelp } from \"./_common.ts\";\nimport { readMetafields, readMetafieldsByGid } from \"../backend/integrations/shopify/metafields.ts\";\n\nif (wantsHelp(Deno.args.length)) {\n usage([\n \"view-meta — Read metafields for a Shopify customer or order.\",\n \"\",\n \"Usage:\",\n \" deno task view-meta --type user --email \",\n \" deno task view-meta --type user --phone \",\n \" deno task view-meta --type user --id \",\n \" deno task view-meta --type order --order-id \",\n \"\",\n \"Options:\",\n \" --type Resource type (required)\",\n \" --email Customer email (user)\",\n \" --phone Customer phone in E.164 (user)\",\n \" --id Customer Shopify GID (user)\",\n \" --order-id Order ID, #name, or full GID (order)\",\n \" --namespace Filter to a specific namespace\",\n \" -c Store to query (default: ttai)\",\n ]);\n}\n\nconst { cfg, store } = await bootstrap();\nconst p = parseArgs(Deno.args, {\n string: [\"type\", \"email\", \"phone\", \"id\", \"order-id\", \"namespace\", \"c\"],\n});\n\nconst ns = opt(p.namespace);\nconst { gid } = await resolveGid(cfg, store, {\n type: opt(p.type),\n email: opt(p.email),\n phone: opt(p.phone),\n id: opt(p.id),\n \"order-id\": opt(p[\"order-id\"]),\n});\n\nconst mf = opt(p.type) === \"user\"\n ? await readMetafields(cfg, gid, ns)\n : await readMetafieldsByGid(cfg, gid, ns);\n\nif (!mf.length) {\n console.log(\"(no metafields)\");\n Deno.exit(0);\n}\n\nconst nW = ns ? 0 : Math.max(...mf.map((m) => m.namespace.length), 9);\nconst kW = Math.max(...mf.map((m) => m.key.length), 3);\nconst hdr = ns\n ? `${\"KEY\".padEnd(kW)} ${\"VALUE\".padEnd(40)} UPDATED`\n : `${\"NS\".padEnd(nW)} ${\"KEY\".padEnd(kW)} ${\"VALUE\".padEnd(40)} UPDATED`;\nconsole.log(hdr);\nconsole.log(\"─\".repeat(hdr.length));\nfor (const m of mf) {\n const v = m.value.length > 39 ? m.value.slice(0, 36) + \"…\" : m.value;\n console.log(\n ns\n ? `${m.key.padEnd(kW)} ${v.padEnd(40)} ${m.updatedAt}`\n : `${m.namespace.padEnd(nW)} ${m.key.padEnd(kW)} ${v.padEnd(40)} ${m.updatedAt}`,\n );\n}\nconsole.log(`\\n${mf.length} metafield(s)`);\n",[],[208,351],"9b26b63f-09aa-491d-bf4e-cf9324a9b669","set-meta.ts","81b25940-68c2-11f1-a0f2-1607ee4eb77e",549,["D",1782893137906],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// set-meta.ts — Write metafields on a customer or order.\n\nimport { parseArgs } from \"jsr:@std/cli@^1/parse-args\";\nimport { bootstrap, die, opt, resolveGid, usage, wantsHelp } from \"./_common.ts\";\nimport { setMetafields } from \"../backend/integrations/shopify/metafields.ts\";\nimport type { MetafieldInput, MetafieldType } from \"../backend/integrations/shopify/metafields.ts\";\n\nif (wantsHelp(Deno.args.length)) {\n usage([\n \"set-meta — Write metafields on a Shopify customer or order.\",\n \"\",\n \"Usage:\",\n \" deno task set-meta --type user --email [ ...]\",\n \" deno task set-meta --type order --order-id '#1001' rating 9 outcome confirmed\",\n \"\",\n \"Options:\",\n \" --type Resource type (required)\",\n \" --email Customer email (user)\",\n \" --phone Customer phone in E.164 (user)\",\n \" --id Customer Shopify GID (user)\",\n \" --order-id Order ID, #name, or full GID (order)\",\n \" --namespace Metafield namespace (default: ttai_call)\",\n \" --field-type Field type shortcode (default: str)\",\n \" -c Store to write to (default: ttai)\",\n \"\",\n \"Field types:\",\n \" str single_line_text_field (default)\",\n \" text multi_line_text_field\",\n ]);\n}\n\nconst TYPES: Record = {\n str: \"single_line_text_field\",\n text: \"multi_line_text_field\",\n};\n\nconst { cfg, store } = await bootstrap();\nconst p = parseArgs(Deno.args, {\n string: [\"type\", \"email\", \"phone\", \"id\", \"order-id\", \"namespace\", \"field-type\", \"c\"],\n});\n\nconst ns = opt(p.namespace) ?? \"ttai_call\";\nconst ft = opt(p[\"field-type\"]) ?? \"str\";\nconst fieldType = TYPES[ft];\nif (!fieldType) die(`Unknown --field-type: ${ft}. Valid: ${Object.keys(TYPES).join(\", \")}`);\n\nconst { gid, label } = await resolveGid(cfg, store, {\n type: opt(p.type),\n email: opt(p.email),\n phone: opt(p.phone),\n id: opt(p.id),\n \"order-id\": opt(p[\"order-id\"]),\n});\n\nconst pos = p._.map(String);\nif (pos.length < 2 || pos.length % 2 !== 0) die(\"Args: [ ...]\");\n\nconst inputs: MetafieldInput[] = [];\nfor (let i = 0; i < pos.length; i += 2) {\n inputs.push({ ownerId: gid, namespace: ns, key: pos[i], type: fieldType, value: pos[i + 1] });\n}\n\nif (inputs.length > 25) {\n die(`Too many key/value pairs (${inputs.length}). metafieldsSet is capped at 25 per call.`);\n}\n\nconsole.log(`Writing ${inputs.length} field(s) to ${ns} [${ft}] …`);\nconst result = await setMetafields(cfg, inputs);\nif (result.userErrors.length) {\n die(`Write failed: ${result.userErrors.map((e) => e.message).join(\"; \")}`);\n}\n\nfor (const m of result.metafields) console.log(` ${m.key} = ${m.value}`);\nconsole.log(`\\n✅ ${result.metafields.length} metafield(s) on ${label}`);\n",[],[208,359],"2c0f21c8-7e8f-4d8d-9f80-170778eda71c","get-customer-info.ts","a0e38a86-68a5-11f1-a4b4-1607ee4eb77e",547,["D",1782893137775],3,"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// get-customer-info.ts — Full customer profile: identity, orders, checkouts, metafields.\n\nimport { bootstrap, die, usage, wantsHelp } from \"./_common.ts\";\nimport {\n listAbandonedCheckouts,\n resolveCustomer,\n} from \"../backend/integrations/shopify/snapshot.ts\";\nimport { readMetafields } from \"../backend/integrations/shopify/metafields.ts\";\n\nif (wantsHelp(Deno.args.length)) {\n usage([\n \"get-customer-info — Full Shopify customer snapshot.\",\n \"\",\n \"Usage:\",\n \" deno task get-customer-info [namespace]\",\n \" deno task get-customer-info -c jjs \",\n \"\",\n \"Options:\",\n \" Customer email (required, positional)\",\n \" [namespace] Filter metafields to this namespace (optional)\",\n \" -c Store to query (default: ttai)\",\n \"\",\n \"Returns: profile, pending orders, abandoned checkouts, metafields.\",\n ]);\n}\n\nconst { cfg, store, args } = await bootstrap();\nconst [email, namespace] = args;\nif (!email) die(\"Usage: deno task get-customer-info [--c ttai|jjs] [namespace]\");\n\nconsole.log(`[${store}] Looking up ${email} …\\n`);\n\nconst resolved = await resolveCustomer(cfg, { email });\nif (!resolved) {\n console.log(`No customer found for: ${email}`);\n Deno.exit(0);\n}\n\nconst { customer: c, orders } = resolved;\nconst [abandoned, metafields] = await Promise.all([\n listAbandonedCheckouts(cfg, { email: c.email ?? email, customer_id: c.id }),\n readMetafields(cfg, c.id, namespace),\n]);\n\nconsole.log(\"── Customer ────────────────────────────────────────────────\");\nconsole.log(` ID: ${c.id}\\n Name: ${c.display_name}`);\nconsole.log(\n ` Email: ${c.email ?? \"—\"}\\n Phone: ${c.phone ?? \"—\"}\\n Orders: ${c.orders_count}`,\n);\n\nif (orders.length) {\n console.log(\"\\n── Pending Orders ──────────────────────────────────────────\");\n for (const o of orders) {\n console.log(` ${o.name} [${o.financial_status}]`);\n for (const li of o.line_items) console.log(` • ${li.title} × ${li.quantity}`);\n }\n}\nif (abandoned.length) {\n console.log(\"\\n── Abandoned Checkouts ─────────────────────────────────────\");\n for (const ac of abandoned) {\n console.log(` ${ac.created_at.slice(0, 10)}${ac.total_price ? ` ₹${ac.total_price}` : \"\"}`);\n for (const li of ac.line_items) console.log(` • ${li.title} × ${li.quantity}`);\n }\n}\n\nconst mfLabel = namespace ? `(${namespace})` : \"(all)\";\nconsole.log(`\\n── Metafields ${mfLabel} ${\"─\".repeat(40)}`);\nif (!metafields.length) {\n console.log(\" (none)\");\n} else {\n const w = Math.max(...metafields.map((m) => `${m.namespace}.${m.key}`.length), 10);\n for (const m of metafields) {\n const v = m.value.length > 70 ? m.value.slice(0, 67) + \"…\" : m.value;\n console.log(` ${`${m.namespace}.${m.key}`.padEnd(w)} ${v}`);\n }\n}\nconsole.log();\n",[],[208,367],"fed8fed3-d5e9-4bd3-aa34-fcffac087aa1","fetch-context.ts","de5d4448-6d45-11f1-ba3c-1607ee4eb77e",533,["D",1782157536216],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// fetch-context.ts — Fetch exact order context and recent abandoned checkouts.\n\nimport { parseArgs } from \"jsr:@std/cli@^1/parse-args\";\nimport { bootstrap, die, opt, usage, wantsHelp } from \"./_common.ts\";\nimport { fetchContext } from \"../backend/integrations/shopify/context.ts\";\n\nif (wantsHelp(Deno.args.length)) {\n usage([\n \"fetch-context — Fetch exact Shopify order context and recent abandoned checkouts.\",\n \"\",\n \"Usage:\",\n \" deno task fetch-context --order-id [--user-email ] [--user-phone ]\",\n \" deno task fetch-context -c jjs '#1001' --user-email priya@example.com\",\n \"\",\n \"Options:\",\n \" --order-id Order ID, #name, or full GID (positional also accepted)\",\n \" --user-email Optional customer email override\",\n \" --user-phone Optional customer phone override\",\n \" -c Store to query (default: ttai)\",\n \"\",\n \"Returns JSON:\",\n \" { user_phone, abandoned_ts, cart_value, user_context, order_context, related_items: [] }\",\n ]);\n}\n\nconst { cfg, store } = await bootstrap();\nconst p = parseArgs(Deno.args, {\n string: [\"order-id\", \"user-email\", \"user-phone\", \"c\"],\n});\n\nconst orderId = opt(p[\"order-id\"]) ?? opt(p._[0]);\nif (!orderId) die(\"Usage: deno task fetch-context [-c ttai|jjs] --order-id \");\n\nconsole.log(`[${store}] Fetching context for order ${orderId} …\\n`);\n\nconst result = await fetchContext(cfg, {\n order_id: orderId,\n user_email: opt(p[\"user-email\"]),\n user_phone: opt(p[\"user-phone\"]),\n});\n\nconsole.log(JSON.stringify(result, null, 2));\n",[],[208,376],"5823d85b-a170-46e6-87d5-0f901922a8d0","del-meta.ts","83d705ea-68c2-11f1-bd6e-1607ee4eb77e",550,["D",1782893137939],"#!/usr/bin/env -S deno run --allow-env --allow-net --allow-read\n// del-meta.ts — Delete ALL metafields on a customer or order. TTAI store only.\n\nimport { parseArgs } from \"jsr:@std/cli@^1/parse-args\";\nimport { load } from \"jsr:@std/dotenv@^0.225\";\nimport { ttaiSecrets } from \"../backend/core/app.ts\";\nimport { shopifyConfig } from \"../backend/integrations/shopify/config.ts\";\nimport { die, opt, resolveGid, usage, wantsHelp } from \"./_common.ts\";\nimport {\n deleteMetafields,\n readMetafields,\n readMetafieldsByGid,\n} from \"../backend/integrations/shopify/metafields.ts\";\n\nif (wantsHelp(Deno.args.length)) {\n usage([\n \"del-meta — Delete ALL metafields on a Shopify customer or order.\",\n \" Safety: only works on the ttai dev store.\",\n \"\",\n \"Usage:\",\n \" deno task del-meta --type user --email \",\n \" deno task del-meta --type user --phone \",\n \" deno task del-meta --type order --order-id \",\n \"\",\n \"Options:\",\n \" --type Resource type (required)\",\n \" --email Customer email (user)\",\n \" --phone Customer phone in E.164 (user)\",\n \" --id Customer Shopify GID (user)\",\n \" --order-id Order ID, #name, or full GID (order)\",\n \"\",\n \"Note: -c flag is ignored; this script is hardcoded to ttai.\",\n ]);\n}\n\nawait load({ export: true });\n\nconst p = parseArgs(Deno.args, {\n string: [\"type\", \"email\", \"phone\", \"id\", \"order-id\", \"c\"],\n});\nif (p.c && p.c !== \"ttai\") die(\"del-meta only works on the ttai store.\");\n\nconst cfg = shopifyConfig(ttaiSecrets());\nconst { gid, label } = await resolveGid(cfg, \"ttai\", {\n type: opt(p.type),\n email: opt(p.email),\n phone: opt(p.phone),\n id: opt(p.id),\n \"order-id\": opt(p[\"order-id\"]),\n});\n\nconst mf = opt(p.type) === \"user\"\n ? await readMetafields(cfg, gid)\n : await readMetafieldsByGid(cfg, gid);\n\nif (!mf.length) {\n console.log(`No metafields on ${label}.`);\n Deno.exit(0);\n}\n\nconsole.log(`Found ${mf.length} metafield(s) on ${label}:`);\nfor (const m of mf) console.log(` ${m.namespace}.${m.key} = ${m.value.slice(0, 50)}`);\n\nconst toDelete = mf.map((m) => ({ ownerId: gid, namespace: m.namespace, key: m.key }));\nif (toDelete.length > 25) {\n die(\n `Too many metafields (${toDelete.length}). deleteMetafields is capped at 25 per call. Delete in batches.`,\n );\n}\n\nconst result = await deleteMetafields(cfg, toDelete);\n\nif (result.userErrors.length) {\n die(`Delete failed: ${result.userErrors.map((e) => e.message).join(\"; \")}`);\n}\nconsole.log(`\\n✅ Deleted ${result.deletedMetafields.length} metafield(s).`);\n",[],[208,384],"783d8c5c-d303-431c-8af6-300b83077802","_common.ts","b9a49a52-68a9-11f1-bf28-1607ee4eb77e",548,["D",1782893137811],"// _common.ts — Shared bootstrap + resource resolution for scripts.\n\nimport { load } from \"jsr:@std/dotenv@^0.225\";\nimport { parseArgs } from \"jsr:@std/cli@^1/parse-args\";\nimport { jjsSecrets, ttaiSecrets } from \"../backend/core/app.ts\";\nimport { type ShopifyConfig, shopifyConfig } from \"../backend/integrations/shopify/config.ts\";\nimport { resolveCustomerGid, resolveOrderGid } from \"../backend/integrations/shopify/snapshot.ts\";\nimport type { ShopifySecrets } from \"../backend/core/app.ts\";\n\nconst STORES: Record ShopifySecrets> = { ttai: ttaiSecrets, jjs: jjsSecrets };\n\nexport interface ScriptCtx {\n cfg: ShopifyConfig;\n store: string;\n args: string[];\n}\n\n/** Parse --c flag, load .env, return ShopifyConfig + positional args. */\nexport async function bootstrap(): Promise {\n await load({ export: true });\n const parsed = parseArgs(Deno.args, { string: [\"c\"], default: { c: \"ttai\" } });\n const store = parsed.c as string;\n const resolver = STORES[store];\n if (!resolver) {\n console.error(`Unknown store: ${store}. Valid: ${Object.keys(STORES).join(\", \")}`);\n Deno.exit(1);\n }\n return { cfg: shopifyConfig(resolver()), store, args: parsed._.map(String) };\n}\n\n/** Resolve a Shopify GID from parsed flags. Returns GID + human label, or exits. */\nexport async function resolveGid(\n cfg: ShopifyConfig,\n store: string,\n opts: { type?: string; email?: string; phone?: string; id?: string; \"order-id\"?: string },\n): Promise<{ gid: string; label: string }> {\n const t = opts.type?.trim();\n if (!t || ![\"user\", \"order\"].includes(t)) die(\"--type must be user or order\");\n\n if (t === \"user\") {\n const email = opts.email?.trim() || undefined;\n const phone = opts.phone?.trim() || undefined;\n const id = opts.id?.trim() || undefined;\n if (!email && !phone && !id) die(\"Provide --email, --phone, or --id\");\n console.log(`[${store}] Resolving customer …`);\n const gid = await resolveCustomerGid(cfg, { email, phone, customer_id: id });\n if (!gid) die(`Customer not found: ${email ?? phone ?? id}`);\n console.log(` → ${gid}\\n`);\n return { gid, label: `customer ${email ?? phone ?? id}` };\n }\n\n const ref = opts[\"order-id\"]?.trim();\n if (!ref) die(\"Provide --order-id\");\n console.log(`[${store}] Resolving order ${ref} …`);\n const gid = await resolveOrderGid(cfg, ref);\n if (!gid) die(`Order not found: ${ref}`);\n console.log(` → ${gid}\\n`);\n return { gid, label: `order ${ref}` };\n}\n\nexport function die(msg: string): never {\n console.error(msg);\n Deno.exit(1);\n}\n\n/** Shorthand: trim or undefined. */\nexport function opt(v: unknown): string | undefined {\n return typeof v === \"string\" && v.trim() ? v.trim() : undefined;\n}\n\n/** Print usage and exit. Lines are joined with newline. */\nexport function usage(lines: string[]): never {\n console.log(lines.join(\"\\n\"));\n Deno.exit(0);\n}\n\n/** True if user passed --help or -h, or no meaningful args at all. */\nexport function wantsHelp(argCount: number): boolean {\n return Deno.args.includes(\"--help\") || Deno.args.includes(\"-h\") || argCount === 0;\n}\n",[],[208,392],["D",1781519599541],[311,312,313,314,315,316],[208],"8df317d9-1e53-4d64-bbaf-05bab76aa472","types.ts","f4109fca-6128-11f1-90f7-1607ee4eb77e",334,["D",1780944386447],8,"// types.ts — View models passed from backend handlers into the admin UI.\n\n/** One customer row for the Auth tab + the data the Debug/Integration tabs need. */\nexport interface CustomerView {\n id: string;\n label: string;\n fns: string[];\n secret: string;\n enabled: boolean;\n configured: boolean;\n updatedTs: string;\n descriptions: Record; // fn name → plain-language description\n sampleBodies: Record>; // fn name → example POST body\n paramsSchemas: Record>; // fn name → JSON Schema\n}\n\n/** A single logged invocation, shown (expandable) on the Recent calls page. */\nexport interface CallView {\n id: number;\n customer: string;\n fn: string;\n ok: boolean;\n status: number;\n latency_ms: number;\n detail: string;\n req_body: string;\n resp_body: string;\n ts: string;\n}\n\n/** The full /admin page model: signed-in user + every customer's config. */\nexport interface AdminView {\n username: string;\n avatarUrl?: string;\n baseUrl: string;\n customers: CustomerView[];\n saved: boolean;\n}\n\n/** A customer's selectable functions, for the Recent calls page filters. */\nexport interface CallsCustomer {\n id: string;\n label: string;\n fns: string[];\n}\n\nexport interface CallsView {\n username: string;\n avatarUrl?: string;\n baseUrl: string;\n customers: CallsCustomer[];\n}\n",[],[215,403],"a1457f60-24f4-4020-a557-4cff6f56b16e","shared.tsx","fe520698-632d-11f1-aacf-1607ee4eb77e",386,["D",1780952006405],13,"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// shared.tsx — Render helpers + navbar/chrome shared across admin pages.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\nimport type { ComponentChildren, VNode } from \"https://esm.sh/preact@10.29.1\";\n\n/** Serialize a Preact tree into a full HTML document string. */\nexport function doc(node: VNode): string {\n return \"\" + render(node);\n}\n\n/** Serialize data for safe inlining inside a `\n \n

Diff · v585