{APP_NAME}

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_513":514,"_515":516},"routes/_app.x.$handle.$name",{"_101":100,"_32":46,"_110":91,"_27":54,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":60,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",110,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","backend/information.ts","latestPath","fileId","e9ad89e8-9018-11f1-b697-1607ee4eb77e","name","information.ts","fileType","script","content","// information.ts — Weather + headlines from free, keyless public APIs, padded\n// to take at least `targetMs`. Backs both /get-information (~6s) and\n// /get-information-slow (~20s); see README.md for the API options considered.\n//\n// Weather → Open-Meteo (geocoding + forecast) — no key, no rate limit.\n// Headlines → Hacker News (Firebase) API — no key, consistently low latency.\n\nimport { logRequest } from \"./db.ts\";\nimport { readJson } from \"./api.ts\";\nimport { loadSettingsWithDefaults } from \"./settings-store.ts\";\nimport { isRecord, jsonOk } from \"./shared.ts\";\n\nconst FETCH_TIMEOUT_MS = 4_000; // per external call; keeps worst-case bounded\nconst HEADLINES_LIMIT = 5;\n\n// ------------------------------------------------------------------------------\n// fetchers — Open-Meteo (weather) + Hacker News (headlines), both free/keyless\n// ------------------------------------------------------------------------------\n\nexport interface WeatherReport {\n location: string;\n country?: string;\n temperatureC: number;\n windKph: number;\n humidityPct: number;\n conditions: string;\n source: \"open-meteo.com\";\n}\n\nconst WMO_CONDITIONS: Record = {\n 0: \"Clear sky\",\n 1: \"Mainly clear\",\n 2: \"Partly cloudy\",\n 3: \"Overcast\",\n 45: \"Fog\",\n 48: \"Depositing rime fog\",\n 51: \"Light drizzle\",\n 53: \"Moderate drizzle\",\n 55: \"Dense drizzle\",\n 61: \"Slight rain\",\n 63: \"Moderate rain\",\n 65: \"Heavy rain\",\n 71: \"Slight snow\",\n 73: \"Moderate snow\",\n 75: \"Heavy snow\",\n 80: \"Slight rain showers\",\n 81: \"Moderate rain showers\",\n 82: \"Violent rain showers\",\n 95: \"Thunderstorm\",\n 96: \"Thunderstorm with slight hail\",\n 99: \"Thunderstorm with heavy hail\",\n};\n\n/** Shape of `geocoding-api.open-meteo.com/v1/search` — only the fields we read. */\ninterface GeocodeResult {\n results?: Array<{ name: string; latitude: number; longitude: number; country?: string }>;\n}\n\n/** Shape of `api.open-meteo.com/v1/forecast` (current-conditions block only). */\ninterface ForecastResult {\n current?: {\n temperature_2m: number;\n weather_code: number;\n wind_speed_10m: number;\n relative_humidity_2m: number;\n };\n}\n\nasync function fetchWeather(location: string): Promise {\n try {\n const geo = await fetchJson(\n `https://geocoding-api.open-meteo.com/v1/search?name=${encodeURIComponent(location)}` +\n `&count=1&language=en&format=json`,\n );\n const place = geo.results?.[0];\n if (!place) return { error: `No location match for \"${location}\"` };\n\n const fc = await fetchJson(\n `https://api.open-meteo.com/v1/forecast?latitude=${place.latitude}&longitude=${place.longitude}` +\n `¤t=temperature_2m,weather_code,wind_speed_10m,relative_humidity_2m&timezone=auto`,\n );\n const cur = fc.current;\n if (!cur) return { error: \"Forecast unavailable\" };\n\n return {\n location: place.name,\n country: place.country,\n temperatureC: cur.temperature_2m,\n windKph: cur.wind_speed_10m,\n humidityPct: cur.relative_humidity_2m,\n conditions: WMO_CONDITIONS[cur.weather_code] ?? `WMO code ${cur.weather_code}`,\n source: \"open-meteo.com\",\n };\n } catch (err) {\n return { error: errMessage(err) };\n }\n}\n\n// headlines — Hacker News (Firebase-hosted) API: top story ids, then titles ---\n\nexport interface Headline {\n title: string;\n source: string;\n url: string;\n}\n\nconst HN_BASE = \"https://hacker-news.firebaseio.com/v0\";\n\n/** Shape of `hacker-news.firebaseio.com/v0/item/.json` — fields we read. */\ninterface HnItem {\n title?: string;\n url?: string;\n id?: number;\n}\n\nasync function fetchHeadlines(): Promise {\n try {\n const ids = await fetchJson(`${HN_BASE}/topstories.json`);\n const items = await Promise.all(\n ids.slice(0, HEADLINES_LIMIT).map((id) => fetchJson(`${HN_BASE}/item/${id}.json`)),\n );\n return items.map((item) => ({\n title: String(item.title ?? \"\"),\n source: \"news.ycombinator.com\",\n url: typeof item.url === \"string\"\n ? item.url\n : `https://news.ycombinator.com/item?id=${item.id}`,\n }));\n } catch (err) {\n return { error: errMessage(err) };\n }\n}\n\n// ------------------------------------------------------------------------------\n// payload + handler factory\n// ------------------------------------------------------------------------------\n\nexport interface InformationPayload {\n location: string;\n weather: WeatherReport | { error: string };\n headlines: Headline[] | { error: string };\n elapsedMs: number;\n generatedAt: string;\n}\n\n/** Fetch weather + headlines in parallel, then pad the response so total time\n * is at least `minMs` — demonstrates a slow downstream integration without\n * depending on the (fast) public APIs actually being slow. */\nasync function buildInformationPayload(\n location: string,\n minMs: number,\n): Promise {\n const start = Date.now();\n const [weather, headlines] = await Promise.all([fetchWeather(location), fetchHeadlines()]);\n const remaining = minMs - (Date.now() - start);\n if (remaining > 0) await sleep(remaining);\n return {\n location,\n weather,\n headlines,\n elapsedMs: Date.now() - start,\n generatedAt: new Date().toISOString(),\n };\n}\n\n/** Build a POST handler returning weather + headlines, padded to ≥ `targetMs`.\n * Location comes from the request body (`{\"location\": \"...\"}`) or falls back\n * to the mock user's configured location (Settings tab). */\nexport function makeInformationHandler(targetMs: number): (req: Request) => Promise {\n return async (req: Request): Promise => {\n const body = await readJson(req);\n const settings = await loadSettingsWithDefaults();\n const location = isRecord(body) && typeof body.location === \"string\" && body.location.trim()\n ? body.location.trim()\n : settings.location;\n\n const payload = await buildInformationPayload(location, targetMs);\n logRequest(JSON.stringify(body), JSON.stringify(payload)).catch(() => {});\n return jsonOk({ ...payload });\n };\n}\n\n// ------------------------------------------------------------------------------\n// helpers\n// ------------------------------------------------------------------------------\n\nasync function fetchJson(url: string): Promise {\n const res = await fetch(url, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });\n if (!res.ok) throw new Error(`${res.status} ${res.statusText}`);\n return await res.json();\n}\n\nfunction sleep(ms: number): Promise {\n const { promise, resolve } = Promise.withResolvers();\n setTimeout(resolve, ms);\n return promise;\n}\n\nfunction errMessage(err: unknown): string {\n return err instanceof Error ? err.message : String(err);\n}\n","// information.ts — Weather + headlines from free, keyless public APIs, padded\n// to take at least `targetMs`. Backs both /get-information (~3s) and\n// /get-information-slow (~20s); see README.md for the API options considered.\n//\n// Weather → Open-Meteo (geocoding + forecast) — no key, no rate limit.\n// Headlines → Hacker News (Firebase) API — no key, consistently low latency.\n\nimport { logRequest } from \"./db.ts\";\nimport { readJson } from \"./api.ts\";\nimport { loadSettingsWithDefaults } from \"./settings-store.ts\";\nimport { isRecord, jsonOk } from \"./shared.ts\";\n\nconst FETCH_TIMEOUT_MS = 4_000; // per external call; keeps worst-case bounded\nconst HEADLINES_LIMIT = 5;\n\n// ------------------------------------------------------------------------------\n// fetchers — Open-Meteo (weather) + Hacker News (headlines), both free/keyless\n// ------------------------------------------------------------------------------\n\nexport interface WeatherReport {\n location: string;\n country?: string;\n temperatureC: number;\n windKph: number;\n humidityPct: number;\n conditions: string;\n source: \"open-meteo.com\";\n}\n\nconst WMO_CONDITIONS: Record = {\n 0: \"Clear sky\",\n 1: \"Mainly clear\",\n 2: \"Partly cloudy\",\n 3: \"Overcast\",\n 45: \"Fog\",\n 48: \"Depositing rime fog\",\n 51: \"Light drizzle\",\n 53: \"Moderate drizzle\",\n 55: \"Dense drizzle\",\n 61: \"Slight rain\",\n 63: \"Moderate rain\",\n 65: \"Heavy rain\",\n 71: \"Slight snow\",\n 73: \"Moderate snow\",\n 75: \"Heavy snow\",\n 80: \"Slight rain showers\",\n 81: \"Moderate rain showers\",\n 82: \"Violent rain showers\",\n 95: \"Thunderstorm\",\n 96: \"Thunderstorm with slight hail\",\n 99: \"Thunderstorm with heavy hail\",\n};\n\n/** Shape of `geocoding-api.open-meteo.com/v1/search` — only the fields we read. */\ninterface GeocodeResult {\n results?: Array<{ name: string; latitude: number; longitude: number; country?: string }>;\n}\n\n/** Shape of `api.open-meteo.com/v1/forecast` (current-conditions block only). */\ninterface ForecastResult {\n current?: {\n temperature_2m: number;\n weather_code: number;\n wind_speed_10m: number;\n relative_humidity_2m: number;\n };\n}\n\nasync function fetchWeather(location: string): Promise {\n try {\n const geo = await fetchJson(\n `https://geocoding-api.open-meteo.com/v1/search?name=${encodeURIComponent(location)}` +\n `&count=1&language=en&format=json`,\n );\n const place = geo.results?.[0];\n if (!place) return { error: `No location match for \"${location}\"` };\n\n const fc = await fetchJson(\n `https://api.open-meteo.com/v1/forecast?latitude=${place.latitude}&longitude=${place.longitude}` +\n `¤t=temperature_2m,weather_code,wind_speed_10m,relative_humidity_2m&timezone=auto`,\n );\n const cur = fc.current;\n if (!cur) return { error: \"Forecast unavailable\" };\n\n return {\n location: place.name,\n country: place.country,\n temperatureC: cur.temperature_2m,\n windKph: cur.wind_speed_10m,\n humidityPct: cur.relative_humidity_2m,\n conditions: WMO_CONDITIONS[cur.weather_code] ?? `WMO code ${cur.weather_code}`,\n source: \"open-meteo.com\",\n };\n } catch (err) {\n return { error: errMessage(err) };\n }\n}\n\n// headlines — Hacker News (Firebase-hosted) API: top story ids, then titles ---\n\nexport interface Headline {\n title: string;\n source: string;\n url: string;\n}\n\nconst HN_BASE = \"https://hacker-news.firebaseio.com/v0\";\n\n/** Shape of `hacker-news.firebaseio.com/v0/item/.json` — fields we read. */\ninterface HnItem {\n title?: string;\n url?: string;\n id?: number;\n}\n\nasync function fetchHeadlines(): Promise {\n try {\n const ids = await fetchJson(`${HN_BASE}/topstories.json`);\n const items = await Promise.all(\n ids.slice(0, HEADLINES_LIMIT).map((id) => fetchJson(`${HN_BASE}/item/${id}.json`)),\n );\n return items.map((item) => ({\n title: String(item.title ?? \"\"),\n source: \"news.ycombinator.com\",\n url: typeof item.url === \"string\"\n ? item.url\n : `https://news.ycombinator.com/item?id=${item.id}`,\n }));\n } catch (err) {\n return { error: errMessage(err) };\n }\n}\n\n// ------------------------------------------------------------------------------\n// payload + handler factory\n// ------------------------------------------------------------------------------\n\nexport interface InformationPayload {\n location: string;\n weather: WeatherReport | { error: string };\n headlines: Headline[] | { error: string };\n elapsedMs: number;\n generatedAt: string;\n}\n\n/** Fetch weather + headlines in parallel, then pad the response so total time\n * is at least `minMs` — demonstrates a slow downstream integration without\n * depending on the (fast) public APIs actually being slow. */\nasync function buildInformationPayload(\n location: string,\n minMs: number,\n): Promise {\n const start = Date.now();\n const [weather, headlines] = await Promise.all([fetchWeather(location), fetchHeadlines()]);\n const remaining = minMs - (Date.now() - start);\n if (remaining > 0) await sleep(remaining);\n return {\n location,\n weather,\n headlines,\n elapsedMs: Date.now() - start,\n generatedAt: new Date().toISOString(),\n };\n}\n\n/** Build a POST handler returning weather + headlines, padded to ≥ `targetMs`.\n * Location comes from the request body (`{\"location\": \"...\"}`) or falls back\n * to the mock user's configured location (Settings tab). */\nexport function makeInformationHandler(targetMs: number): (req: Request) => Promise {\n return async (req: Request): Promise => {\n const body = await readJson(req);\n const settings = await loadSettingsWithDefaults();\n const location = isRecord(body) && typeof body.location === \"string\" && body.location.trim()\n ? body.location.trim()\n : settings.location;\n\n const payload = await buildInformationPayload(location, targetMs);\n logRequest(JSON.stringify(body), JSON.stringify(payload)).catch(() => {});\n return jsonOk({ ...payload });\n };\n}\n\n// ------------------------------------------------------------------------------\n// helpers\n// ------------------------------------------------------------------------------\n\nasync function fetchJson(url: string): Promise {\n const res = await fetch(url, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });\n if (!res.ok) throw new Error(`${res.status} ${res.statusText}`);\n return await res.json();\n}\n\nfunction sleep(ms: number): Promise {\n const { promise, resolve } = Promise.withResolvers();\n setTimeout(resolve, ms);\n return promise;\n}\n\nfunction errMessage(err: unknown): string {\n return err instanceof Error ? err.message : String(err);\n}\n","createdAt",["D",1785875509426],"branchVersion","branchId","5ce0246c-39c2-47d2-86b7-4133abafc79e","id","fd3404f9-cc43-40a4-9f5e-11cc4fb7f36a","uFns",["D",1780696380052],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","279c3e70-f2b8-11ef-a073-37253b8bcbda","pinnedFileId","ecb9a046-6128-11f1-a23b-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019e994f-fcc4-73e9-86ed-2d14fe9f5dfa","tursoName","fd3404f9cc4340a49f5e11cc4fb7f36a","tursoHostname","fd3404f9cc4340a49f5e11cc4fb7f36a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789506093912],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":-5,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":46,"_99":100},"isOwned",112,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","ttai","handle","displayName","Tough Tongue AI","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/4b8edab4-7879-48e2-f777-109aa5256800/square512?exp=1789538399&sig=f978c5623c37a24b1c2bd834ce5944a75af416ca407e74dc08ea9b2a912bd15f","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_44":45,"_32":46,"_39":508,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":509,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":510,"_85":511,"_87":512,"_89":25},"tree",[211,227,243,244,245,246,247,248],"files",[211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248],"counts",{"_201":64,"_202":191,"_203":64,"_204":205,"_206":207},"contents",[131,132,133,134,135,136,137,138],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":195,"_32":196,"_30":197,"_142":-5,"_42":43,"_41":198,"_144":60,"_39":199,"_13":64,"_34":193,"_36":-5,"_24":25,"_148":-5,"_27":200},{"_44":188,"_32":189,"_30":190,"_142":-5,"_42":43,"_41":191,"_144":60,"_39":192,"_13":64,"_34":193,"_36":-5,"_24":25,"_148":-5,"_27":194},{"_44":181,"_32":182,"_30":183,"_142":-5,"_42":43,"_41":184,"_144":60,"_39":185,"_13":64,"_34":20,"_36":186,"_24":25,"_148":-5,"_27":187},{"_44":173,"_32":174,"_30":175,"_142":-5,"_42":43,"_41":176,"_144":25,"_39":177,"_13":178,"_34":20,"_36":179,"_24":25,"_148":-5,"_27":180},{"_44":165,"_32":166,"_30":167,"_142":-5,"_42":43,"_41":168,"_144":60,"_39":169,"_13":64,"_34":170,"_36":171,"_24":25,"_148":-5,"_27":172},{"_44":158,"_32":159,"_30":160,"_142":-5,"_42":43,"_41":161,"_144":60,"_39":162,"_13":64,"_34":20,"_36":163,"_24":25,"_148":-5,"_27":164},{"_44":150,"_32":151,"_30":58,"_142":-5,"_42":43,"_41":152,"_144":60,"_39":153,"_13":146,"_34":154,"_36":155,"_24":25,"_148":156,"_27":157},{"_44":139,"_32":140,"_30":141,"_142":-5,"_42":43,"_41":143,"_144":60,"_39":145,"_13":146,"_34":20,"_36":147,"_24":25,"_148":-5,"_27":149},"2a4d1b1e-e1cb-4ccc-ba12-27b29f553f8d","val.yml","ec9d2eac-6128-11f1-a087-1607ee4eb77e","parentId",99,"latest",["D",1785864194556],4,"# val.yml — metadata contract for this val. Not consumed by `vt` today; reserved\n# for a future repo wrapper over vt-cli (safer deploys, env checks, file typing).\nname: \"uFns\"\norg: \"ttai\"\npublic: true\n# Mock/dev integration fns behind one global API key + a beer.css admin UI\n# gated to ADMIN_USERS via Val Town OAuth (see backend/auth.ts). Dev/staging only.\n# Only index.http.ts is the HTTP val and cron.ts the interval val. Other files\n# must avoid Val Town's reserved filename infixes (http, cron, email, …) — e.g.\n# backend/api.ts, not backend/http.ts (previously a stray second HTTP val).\nfiles:\n index.http.ts: http\n cron.ts: interval\n","label",[140],"41da38a5-1c51-47ca-811e-1cee58ea9d1f","index.http.ts",98,["D",1785864195231],"http","// index.http.ts — HTTP entry point built on Hono. Two surfaces:\n// Fn calls → /get-user-details, /get-information*, /webhook — POST-only,\n// each requires the global API key (Authorization: Bearer ).\n// Admin UI → / (tabs), POST /settings, POST /api-key/regenerate — Val Town\n// OAuth, gated to the ADMIN_USERS allow-list (see backend/auth.ts).\n// This file is pure wiring; logic lives in backend/ and frontend/.\n\nimport { Hono } from \"npm:hono@^4\";\nimport type { Context, Next } from \"npm:hono@^4\";\nimport { isHttpError } from \"./backend/api.ts\";\nimport { authenticateApi, getAdminUc, withValTownAuth } from \"./backend/auth.ts\";\nimport { getInformationSlow } from \"./backend/fns/get-information-slow.ts\";\nimport { getInformation } from \"./backend/fns/get-information.ts\";\nimport { getUserDetails } from \"./backend/fns/get-user-details.ts\";\nimport { webhookHandler } from \"./backend/fns/webhook.ts\";\nimport { buildAdminView } from \"./backend/pages/admin.ts\";\nimport { regenerateApiKey, saveSettingsForm } from \"./backend/settings-store.ts\";\nimport { html, jsonError } from \"./backend/shared.ts\";\nimport { renderAdmin } from \"./frontend/admin.tsx\";\nimport { renderDenied, renderLogin } from \"./frontend/auth.tsx\";\nimport type { AdminUser } from \"./frontend/layout.tsx\";\n\nconst app = new Hono<{ Variables: { adminUser: AdminUser } }>();\n\n// ------------------------------------------------------------------------------\n// fn routes — POST-only, each gated by the global API key\n// ------------------------------------------------------------------------------\n\nasync function apiKeyGate(c: Context, next: Next): Promise {\n await authenticateApi(c.req.raw);\n await next();\n}\n\napp.post(\"/get-user-details\", apiKeyGate, async (c) => await getUserDetails(c.req.raw));\napp.post(\"/get-information\", apiKeyGate, async (c) => await getInformation(c.req.raw));\napp.post(\"/get-information-slow\", apiKeyGate, async (c) => await getInformationSlow(c.req.raw));\napp.post(\"/webhook\", apiKeyGate, async (c) => await webhookHandler(c.req.raw));\n\n// ------------------------------------------------------------------------------\n// admin UI — Val Town OAuth, then the tabbed page + its two action routes\n// ------------------------------------------------------------------------------\n\nasync function adminGate(c: Context<{ Variables: { adminUser: AdminUser } }>, next: Next) {\n const uc = await getAdminUc(c.req.raw);\n if (!uc.isAuthed) return html(renderLogin(), 401);\n if (!uc.isAdmin) return html(renderDenied(uc.username ?? \"\"), 403);\n c.set(\"adminUser\", { username: uc.username ?? \"\", avatarUrl: uc.avatarUrl });\n await next();\n}\n\napp.get(\"/\", adminGate, async (c) => {\n const saved = c.req.query(\"saved\") === \"1\";\n const view = await buildAdminView(new URL(c.req.url), saved);\n return html(renderAdmin(view, c.get(\"adminUser\")));\n});\n\napp.post(\"/settings\", adminGate, async (c) => {\n await saveSettingsForm(c.req.raw);\n return c.redirect(\"/?saved=1#data\", 303);\n});\n\napp.post(\"/api-key/regenerate\", adminGate, async (c) => {\n await regenerateApiKey();\n return c.redirect(\"/?saved=1#data\", 303);\n});\n\n// ------------------------------------------------------------------------------\n// error handling\n// ------------------------------------------------------------------------------\n\napp.onError((err) => {\n if (isHttpError(err)) return jsonError(err.message, err.status);\n console.error(\"[uFns] unhandled error:\", err instanceof Error ? err.message : err);\n return jsonError(\"Internal server error\", 500);\n});\napp.notFound((c) => jsonError(`Not found: ${c.req.path}`, 404));\n\nexport default withValTownAuth((req) => app.fetch(req));\n","micro-fns",[151],"e70eafe0-39e0-45c4-8d7e-4abf2fd344df","deno.json","ec82e4ac-6128-11f1-9fb3-1607ee4eb77e",8,["D",1780696381966],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\"dom\", \"dom.iterable\", \"dom.asynciterable\", \"deno.ns\", \"deno.unstable\"]\n },\n \"fmt\": {\n \"lineWidth\": 100\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\"no-explicit-any\", \"no-external-import\", \"no-import-prefix\"]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[159],"612c8dcf-a5cf-490b-8aad-f4f05d872659","cron.ts","eccd21ac-6128-11f1-ac3a-1607ee4eb77e",16,["D",1780696382454],"interval","// cron.ts — Scheduled cleanup: prune logs older than RETENTION_DAYS.\n\nimport { RETENTION_DAYS } from \"./backend/config.ts\";\nimport { deleteOldData } from \"./backend/db.ts\";\n\nexport default async function cleanup() {\n const result = await deleteOldData(RETENTION_DAYS);\n console.log(\n `Cleanup done: deleted ${result.requests} request(s), ${result.webhooks} webhook(s) older than ${RETENTION_DAYS}d`,\n );\n}\n",[166],"9548eb98-b49f-45a9-b10e-79360569375e","README.md","eca9edfe-6128-11f1-90f7-1607ee4eb77e",97,["D",1785864195008],6,"# uFns\n\nSmall integration functions for ToughTongue AI — mock user details, weather + headlines lookups,\nwebhook capture, and a single tabbed admin UI (Data / Debug / Activity / Info).\n\nPair with **uAgents** for heavier per-customer agent APIs behind header secrets.\n\n| Val | Role |\n| ----------- | ---------------------------------------------------------------- |\n| **uFns** | Lightweight integration fns (`/get-user-details`, `/webhook`, …) |\n| **uAgents** | Customer-scoped agent fns at `/fns//` |\n\nDeployed to the `ttai` org on Val Town (`vt create … --org-name ttai`).\n\n## Auth\n\nTwo independent surfaces:\n\n- **Fn calls** — one **global API key**, sent as `Authorization: Bearer ` (or\n `X-API-Key: `) on every request. The key is auto-minted on first use, viewable and rotatable\n on the **Data** tab. There is no per-customer scoping (that's what uAgents is for) — one key,\n checked in constant time, guards every fn.\n- **Admin UI** (`/`) — **Val Town sign-in**, gated to an allow-list, same pattern as uAgents. Set\n the `ADMIN_USERS` env var (Val Town sidebar) to a comma-separated list of Val Town usernames\n (case-insensitive). Sign-in uses\n [`std/oauth`](https://docs.val.town/guides/auth/#sign-in-with-val-town); see `backend/auth.ts`.\n\n## Admin UI\n\nA single page at `/` with four hash-routed tabs (`/#data`, `/#debug`, `/#activity`, `/#info`):\n\n| Tab | What |\n| ------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| **Data** | Mock user fields (returned by `/get-user-details`) + the global API key |\n| **Debug** | Pick a fn, edit its JSON body, and fire a live call from the browser — see the resolved URL, `Authorization` header, and an equivalent `curl` update live |\n| **Activity** | Fn catalog + a live request/webhook log |\n| **Info** | Role, auth model, quick start, pairing with uAgents |\n\n## Fn endpoints\n\nAll POST-only, all require the API key:\n\n| Path | Purpose |\n| ----------------------- | --------------------------------------------------------------------------------------- |\n| `/get-user-details` | Returns the mock user from SQLite |\n| `/get-information` | Weather + headlines, padded to ~6s |\n| `/get-information-slow` | Weather + headlines, padded to ~20s |\n| `/webhook` | Captures a POST body for the Activity log — a regular fn like the rest, not a catch-all |\n\n`/get-information*` accept an optional JSON body `{\"location\": \"Tokyo\"}`; without one they fall back\nto the mock user's `location` (Data tab, default `Paris`).\n\nReady-to-run `curl` examples with the real deployed base URL filled in live on the **Activity** tab\n(empty-state) and the **Info** tab (quick start) — no guessing your val's hostname.\n\n### Weather + headlines API options\n\nBoth fns call **free, keyless** public APIs — no signup, no rate-limit surprises for a dev tool:\n\n- **Weather — [Open-Meteo](https://open-meteo.com)** (chosen). Free forecast + geocoding APIs, no\n API key, no rate limit for reasonable use. Alternatives considered: [wttr.in](https://wttr.in)\n (free, keyless, but plain-text/ANSI-first — JSON is an afterthought) and\n [OpenWeatherMap](https://openweathermap.org/api) (richer data, but requires a free-tier API key —\n adds a required env var for a mock endpoint).\n- **Headlines — [Hacker News (Firebase) API](https://github.com/HackerNews/API)** (chosen). Free,\n keyless, and consistently fast (`topstories.json` + a parallel `item/.json` fetch per story —\n measured ~0.3s per call). Headlines skew tech/HN, not general news. Alternatives considered:\n [GDELT DOC 2.0](https://blog.gdeltproject.org/gdelt-doc-2-0-api-debuts/) (free, keyless, broader\n real-world news coverage via full-text search — but measured ~13s per query from this repo's dev\n network, too slow/unpredictable for a 6–20s budget); **NewsAPI.org** / **GNews** / **currentsapi**\n (broader coverage and categories, but all require a free-tier API key).\n\n## File layout\n\n```\nbackend/\n api.ts HttpError, readJson/readText, dispatch (named api.ts, not\n http.ts — Val Town infers a val's type from its filename;\n only index.http.ts should be an HTTP val)\n auth.ts OAuth admin gate + global API key check\n config.ts mock-user fields, FN_SPECS (fn catalog + Debug samples)\n db.ts SQLite: settings, request log, webhook log\n settings-store.ts mock-user settings + the global API key\n information.ts weather + headlines fetch/pad logic\n fns/ one file per fn handler\n pages/ view-model assembly for SSR (admin.ts, activity.ts)\nfrontend/\n layout.tsx Shell, Tab, Panel, Picker, ReadOnlyField, UserBadge\n admin.tsx composes Data/Debug/Activity/Info into the tabbed page\n data.tsx, debug.tsx, activity.tsx, info.tsx one tab each\n auth.tsx signed-out / access-denied pages\n styles/ modular CSS layers (Next.js-style)\n tokens.ts design tokens + semantic M3 aliases (palette is runtime-generated)\n base.ts document layout + typography scale\n components.ts cards, tabs, key row, fields/buttons/tables, debug box\n index.ts composes layers → GLOBAL_CSS\n```\n\n## Push\n\nFrom this directory:\n\n```bash\nvt create uFns . --org-name ttai --upload-if-exists --no-editor-files\nvt push # ship changes\n```\n\n`val.yml` is not read by `vt` yet — it documents the val contract for a future repo wrapper over\nvt-cli.\n\n## Add a function\n\n1. Write a thin handler in `backend/fns/.ts` — throw `HttpError` for client errors; body\n parsing via `readJson` / `readText` from `backend/api.ts`.\n2. Register it in `ROUTES` inside `index.http.ts`, wrapped in `withAuth(...)` so it requires the\n global API key (dispatch wraps error handling).\n3. Add it to `FN_SPECS` in `backend/config.ts` (path, note, sample body) so it shows up in the\n Activity table and the Debug tab's picker.\n4. `vt push`.\n",[174],"62fccb20-2409-47d1-b439-93272bd0e887",".env.sample","e81e6098-9018-11f1-ba51-1607ee4eb77e",36,["D",1785857207264],"# Val Town env vars for uFns (set in the Val Town sidebar — Deno.env.set() is a no-op).\n\n# Comma-separated Val Town usernames allowed into the admin UI (/, /settings, /info).\n# Case-insensitive; unset or empty = nobody gets in (signed-in visitors see \"Access denied\").\nADMIN_USERS=\n",[182],"f3312fd8-02a6-496a-986f-44d7e39f2f13","frontend","ec17eeae-6128-11f1-87d6-1607ee4eb77e",1,["D",1780696381266],"directory",[189],"3362f264-0383-4acf-b57d-e1b15ccedfca","backend","ec3e8050-6128-11f1-9fb3-1607ee4eb77e",2,["D",1780696381494],[196],"pulls","branches","forks","envVars",{"_208":64,"_210":64},"connections",{"_208":64,"_209":64},"count","unfilledCount","emptyCount",{"_44":195,"_32":196,"_30":197,"_142":-5,"_42":43,"_41":198,"_144":60,"_39":505,"_13":64,"_34":193,"_36":-5,"_24":25,"_148":-5,"_250":506,"_27":507},{"_44":500,"_32":475,"_30":469,"_142":197,"_42":43,"_41":501,"_144":60,"_39":502,"_13":64,"_34":193,"_36":-5,"_24":25,"_148":-5,"_250":503,"_27":504},{"_44":492,"_32":493,"_30":494,"_142":469,"_42":43,"_41":495,"_144":60,"_39":496,"_13":64,"_34":35,"_36":497,"_24":25,"_148":-5,"_250":498,"_27":499},{"_44":484,"_32":485,"_30":486,"_142":469,"_42":43,"_41":487,"_144":60,"_39":488,"_13":198,"_34":35,"_36":489,"_24":25,"_148":-5,"_250":490,"_27":491},{"_44":476,"_32":477,"_30":478,"_142":469,"_42":43,"_41":479,"_144":60,"_39":480,"_13":191,"_34":35,"_36":481,"_24":25,"_148":-5,"_250":482,"_27":483},{"_44":466,"_32":467,"_30":468,"_142":469,"_42":43,"_41":470,"_144":60,"_39":471,"_13":198,"_34":35,"_36":472,"_24":25,"_148":-5,"_250":473,"_27":474},{"_44":461,"_32":452,"_30":446,"_142":197,"_42":43,"_41":462,"_144":60,"_39":463,"_13":64,"_34":193,"_36":-5,"_24":25,"_148":-5,"_250":464,"_27":465},{"_44":453,"_32":454,"_30":455,"_142":446,"_42":43,"_41":456,"_144":60,"_39":457,"_13":198,"_34":35,"_36":458,"_24":25,"_148":-5,"_250":459,"_27":460},{"_44":443,"_32":444,"_30":445,"_142":446,"_42":43,"_41":447,"_144":60,"_39":448,"_13":191,"_34":35,"_36":449,"_24":25,"_148":-5,"_250":450,"_27":451},{"_44":435,"_32":436,"_30":437,"_142":197,"_42":43,"_41":438,"_144":60,"_39":439,"_13":64,"_34":35,"_36":440,"_24":25,"_148":-5,"_250":441,"_27":442},{"_44":427,"_32":428,"_30":429,"_142":197,"_42":43,"_41":430,"_144":60,"_39":431,"_13":198,"_34":35,"_36":432,"_24":25,"_148":-5,"_250":433,"_27":434},{"_44":419,"_32":420,"_30":421,"_142":197,"_42":43,"_41":422,"_144":60,"_39":423,"_13":178,"_34":35,"_36":424,"_24":25,"_148":-5,"_250":425,"_27":426},{"_44":411,"_32":412,"_30":413,"_142":197,"_42":43,"_41":414,"_144":60,"_39":415,"_13":191,"_34":35,"_36":416,"_24":25,"_148":-5,"_250":417,"_27":418},{"_44":407,"_32":33,"_30":31,"_142":197,"_42":43,"_41":14,"_144":60,"_39":408,"_13":271,"_34":35,"_36":38,"_24":25,"_148":-5,"_250":409,"_27":410},{"_44":399,"_32":400,"_30":401,"_142":197,"_42":43,"_41":402,"_144":60,"_39":403,"_13":191,"_34":35,"_36":404,"_24":25,"_148":-5,"_250":405,"_27":406},{"_44":391,"_32":392,"_30":393,"_142":197,"_42":43,"_41":394,"_144":60,"_39":395,"_13":198,"_34":35,"_36":396,"_24":25,"_148":-5,"_250":397,"_27":398},{"_44":188,"_32":189,"_30":190,"_142":-5,"_42":43,"_41":191,"_144":60,"_39":388,"_13":64,"_34":193,"_36":-5,"_24":25,"_148":-5,"_250":389,"_27":390},{"_44":383,"_32":358,"_30":352,"_142":190,"_42":43,"_41":384,"_144":60,"_39":385,"_13":64,"_34":193,"_36":-5,"_24":25,"_148":-5,"_250":386,"_27":387},{"_44":375,"_32":376,"_30":377,"_142":352,"_42":43,"_41":378,"_144":60,"_39":379,"_13":64,"_34":35,"_36":380,"_24":25,"_148":-5,"_250":381,"_27":382},{"_44":367,"_32":368,"_30":369,"_142":352,"_42":43,"_41":370,"_144":60,"_39":371,"_13":64,"_34":35,"_36":372,"_24":25,"_148":-5,"_250":373,"_27":374},{"_44":359,"_32":360,"_30":361,"_142":352,"_42":43,"_41":362,"_144":60,"_39":363,"_13":64,"_34":35,"_36":364,"_24":25,"_148":-5,"_250":365,"_27":366},{"_44":349,"_32":350,"_30":351,"_142":352,"_42":43,"_41":353,"_144":60,"_39":354,"_13":64,"_34":35,"_36":355,"_24":25,"_148":-5,"_250":356,"_27":357},{"_44":341,"_32":342,"_30":343,"_142":190,"_42":43,"_41":344,"_144":60,"_39":345,"_13":289,"_34":35,"_36":346,"_24":25,"_148":-5,"_250":347,"_27":348},{"_44":333,"_32":334,"_30":335,"_142":190,"_42":43,"_41":336,"_144":60,"_39":337,"_13":198,"_34":35,"_36":338,"_24":25,"_148":-5,"_250":339,"_27":340},{"_44":325,"_32":326,"_30":327,"_142":190,"_42":43,"_41":328,"_144":60,"_39":329,"_13":191,"_34":35,"_36":330,"_24":25,"_148":-5,"_250":331,"_27":332},{"_44":317,"_32":318,"_30":319,"_142":190,"_42":43,"_41":320,"_144":60,"_39":321,"_13":191,"_34":35,"_36":322,"_24":25,"_148":-5,"_250":323,"_27":324},{"_44":309,"_32":310,"_30":311,"_142":190,"_42":43,"_41":312,"_144":25,"_39":313,"_13":198,"_34":35,"_36":314,"_24":25,"_148":-5,"_250":315,"_27":316},{"_44":301,"_32":302,"_30":303,"_142":190,"_42":43,"_41":304,"_144":60,"_39":305,"_13":289,"_34":35,"_36":306,"_24":25,"_148":-5,"_250":307,"_27":308},{"_44":293,"_32":294,"_30":295,"_142":190,"_42":43,"_41":296,"_144":60,"_39":297,"_13":64,"_34":35,"_36":298,"_24":25,"_148":-5,"_250":299,"_27":300},{"_44":284,"_32":285,"_30":286,"_142":190,"_42":43,"_41":287,"_144":60,"_39":288,"_13":289,"_34":35,"_36":290,"_24":25,"_148":-5,"_250":291,"_27":292},{"_44":276,"_32":277,"_30":278,"_142":190,"_42":43,"_41":279,"_144":60,"_39":280,"_13":198,"_34":35,"_36":281,"_24":25,"_148":-5,"_250":282,"_27":283},{"_44":268,"_32":269,"_30":270,"_142":190,"_42":43,"_41":271,"_144":60,"_39":272,"_13":64,"_34":35,"_36":273,"_24":25,"_148":-5,"_250":274,"_27":275},{"_44":181,"_32":182,"_30":183,"_142":-5,"_42":43,"_41":184,"_144":60,"_39":265,"_13":64,"_34":20,"_36":186,"_24":25,"_148":-5,"_250":266,"_27":267},{"_44":173,"_32":174,"_30":175,"_142":-5,"_42":43,"_41":176,"_144":25,"_39":262,"_13":178,"_34":20,"_36":179,"_24":25,"_148":-5,"_250":263,"_27":264},{"_44":165,"_32":166,"_30":167,"_142":-5,"_42":43,"_41":168,"_144":60,"_39":259,"_13":64,"_34":170,"_36":171,"_24":25,"_148":-5,"_250":260,"_27":261},{"_44":158,"_32":159,"_30":160,"_142":-5,"_42":43,"_41":161,"_144":60,"_39":256,"_13":64,"_34":20,"_36":163,"_24":25,"_148":-5,"_250":257,"_27":258},{"_44":150,"_32":151,"_30":58,"_142":-5,"_42":43,"_41":152,"_144":60,"_39":253,"_13":146,"_34":154,"_36":155,"_24":25,"_148":156,"_250":254,"_27":255},{"_44":139,"_32":140,"_30":141,"_142":-5,"_42":43,"_41":143,"_144":60,"_39":249,"_13":146,"_34":20,"_36":147,"_24":25,"_148":-5,"_250":251,"_27":252},["D",1785864194556],"children",[],[140],["D",1785864195231],[],[151],["D",1780696381966],[],[159],["D",1780696382454],[],[166],["D",1785864195008],[],[174],["D",1785857207264],[],[182],"4a4fc7c0-88a2-4fc8-907e-a84d47f5d374","utils.ts","ec609fd2-6128-11f1-ac3a-1607ee4eb77e",3,["D",1780696381742],"// utils.ts — Formatting helpers for SSR pages.\n\nexport function formatJson(raw: string): string {\n try {\n return JSON.stringify(JSON.parse(raw), null, 2);\n } catch {\n return raw;\n }\n}\n\nexport function truncate(s: string, max: number): string {\n const flat = s.replace(/\\s+/g, \" \").trim();\n return flat.length > max ? flat.slice(0, max) + \"…\" : flat;\n}\n\nexport function isoUtc(ts: string): string {\n return ts.replace(\" \", \"T\") + \"Z\";\n}\n\nexport function methodChip(method: string): string {\n if (method === \"GET\") return \"blue\";\n if (method === \"POST\") return \"green\";\n if (method === \"PUT\" || method === \"PATCH\") return \"orange\";\n if (method === \"DELETE\") return \"red\";\n return \"grey\";\n}\n",[],[189,269],"bccdb792-426f-4081-9aad-a6b7deda33b3","types.ts","ec7b6a4c-6128-11f1-b845-1607ee4eb77e",71,["D",1785861997486],"// types.ts — View models passed from backend handlers into SSR pages.\n\nimport type { RequestLogEntry, WebhookLogEntry } from \"../backend/db.ts\";\n\nexport interface UserDetails {\n user_name: string;\n user_email: string;\n dynamic_vars: Record;\n}\n\nexport interface ActivityView {\n requests: RequestLogEntry[];\n webhooks: WebhookLogEntry[];\n reqTotal: number;\n whTotal: number;\n tab: \"requests\" | \"webhooks\";\n page: number;\n totalPages: number;\n}\n\n/** The single admin page: mock user + API key (Data tab) and the Activity log. */\nexport interface AdminView {\n saved: boolean;\n values: Record;\n apiKey: string;\n activity: ActivityView;\n baseUrl: string;\n}\n",[],[189,277],"3e9ce01d-ce1d-47f9-afd5-23fa685528b8","layout.tsx","ec667934-6128-11f1-b2c9-1607ee4eb77e",106,["D",1785871009139],5,"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// layout.tsx — Shared beer.css shell: top app bar, hash-based tabs, panels.\n\nimport type { ComponentChildren } from \"https://esm.sh/preact@10.29.1\";\nimport { APP_NAME } from \"../backend/shared.ts\";\nimport { GLOBAL_CSS } from \"./styles/index.ts\";\n\nconst BEER_CSS = \"https://cdn.jsdelivr.net/npm/beercss@4.0.21/dist/cdn/beer.min.css\";\nconst BEER_JS = \"https://cdn.jsdelivr.net/npm/beercss@4.0.21/dist/cdn/beer.min.js\";\nconst MDC_JS =\n \"https://cdn.jsdelivr.net/npm/material-dynamic-colors@1.1.2/dist/cdn/material-dynamic-colors.min.js\";\nconst ICONS =\n \"https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@24,400,0,0\";\n\n/** Brand seed — beer.css generates the full M3 palette from this at runtime.\n * Distinct from uAgents' blue (#2E6BE6) so the two admin UIs read apart. */\nconst BRAND_SEED = \"#7C4DFF\";\n\nexport interface AdminUser {\n username: string;\n avatarUrl?: string;\n}\n\ninterface ShellProps {\n children: ComponentChildren;\n user?: AdminUser;\n}\n\n/** Full HTML document with beer.css and a minimal top app bar. Pass `user` on\n * authenticated admin pages to show the signed-in badge + sign-out button. */\nexport function Shell({ children, user }: ShellProps) {\n return (\n \n \n \n \n {APP_NAME}\n \n \n \n \n

Diff · v110