Hi

\"\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport { parseProject, readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\" urls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's *extremely importing* to note that `parseProject` and other Standard Library utilities ONLY RUN ON THE SERVER.\nIf you need access to this data on the client, run it in the server and pass it to the client by splicing it into the HTML page\nor by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})` instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use: `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys) unless otherwise specified\n- **View Source:** Add a view source link by importing & using `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the client) and include `target=\"_top\"` attribute\n- **Error Debugging:** Add `` to HTML to capture client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local resolution; Avoid catches that merely log or return 500s. Let errors bubble up with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with `?deps=react@18.2.0,react-dom@18.2.0` and start the file with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same version\n- **Styling:** Default to using TailwindCSS via `` unless otherwise specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project files:\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n \n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n \n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to see full stack traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:** \n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with `export default app.fetch // This is the entry point for HTTP vals`\n\n",[],[184],{"_107":192,"_100":193,"_164":194,"_166":-5,"_167":149,"_168":195,"_170":171,"_109":196,"_104":33,"_173":174,"_175":197,"_177":22,"_178":-5,"_179":198,"_103":199},"718c6526-35d5-11f1-9ef3-42b51c65c3df","deno.json","718c65f8-35d5-11f1-9ef3-42b51c65c3df",30,["D",1775932627421],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/98f62cee78e85bfc47c62ed703777c6bc8794f1c/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": true,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"include\": [\"deno:/https/esm.town/**/*\"],\n \"rules\": {\n \"exclude\": [\"no-explicit-any\"]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}",[],[193],{"_107":201,"_100":202,"_164":203,"_166":-5,"_167":149,"_168":204,"_170":171,"_109":205,"_104":33,"_173":206,"_175":207,"_177":22,"_178":-5,"_179":208,"_103":209},"7196b17a-35d5-11f1-9770-42b51c65c3df","main.test.ts","7196b22e-35d5-11f1-9770-42b51c65c3df",32,["D",1775932627421],"script","import { assertEquals } from \"jsr:@std/assert@1.0.19\";\nimport { handler } from \"./main.ts\";\n\n// ── Routing ───────────────────────────────────────────────────────────────────\n\nDeno.test(\"GET /register returns 405\", async () => {\n const res = await handler(\n new Request(\"http://localhost/register\", { method: \"GET\" }),\n );\n assertEquals(res.status, 405);\n const body = await res.json();\n assertEquals(body.error, \"Method not allowed\");\n});\n\nDeno.test(\"POST /unknown returns 404\", async () => {\n const res = await handler(\n new Request(\"http://localhost/unknown\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({}),\n }),\n );\n assertEquals(res.status, 404);\n const body = await res.json();\n assertEquals(body.error, \"Not found\");\n});\n\n// ── /register validation ──────────────────────────────────────────────────────\n\nDeno.test(\"POST /register rejects invalid JSON\", async () => {\n const res = await handler(\n new Request(\"http://localhost/register\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: \"not json\",\n }),\n );\n assertEquals(res.status, 400);\n const body = await res.json();\n assertEquals(body.error, \"Invalid JSON\");\n});\n\nDeno.test(\"POST /register rejects missing did\", async () => {\n const res = await handler(\n new Request(\"http://localhost/register\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({}),\n }),\n );\n assertEquals(res.status, 400);\n const body = await res.json();\n assertEquals(body.error, \"Missing required field: did\");\n});\n\nDeno.test(\"POST /register rejects non-DID string\", async () => {\n const res = await handler(\n new Request(\"http://localhost/register\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ did: \"alice.bsky.social\" }),\n }),\n );\n assertEquals(res.status, 400);\n const body = await res.json();\n assertEquals(body.error, \"Invalid DID format\");\n});\n\n// ── /submit-trail validation ──────────────────────────────────────────────────\n\nDeno.test(\"POST /submit-trail rejects missing did\", async () => {\n const res = await handler(\n new Request(\"http://localhost/submit-trail\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ trail: { name: \"Test Trail\" } }),\n }),\n );\n assertEquals(res.status, 400);\n const body = await res.json();\n assertEquals(body.error, \"Missing required field: did\");\n});\n\nDeno.test(\"POST /submit-trail rejects missing trail.name\", async () => {\n const res = await handler(\n new Request(\"http://localhost/submit-trail\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ did: \"did:plc:test\", trail: {} }),\n }),\n );\n assertEquals(res.status, 400);\n const body = await res.json();\n assertEquals(body.error, \"Missing required field: trail.name\");\n});\n\nDeno.test(\"POST /submit-trail rejects non-DID string\", async () => {\n const res = await handler(\n new Request(\"http://localhost/submit-trail\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ did: \"not-a-did\", trail: { name: \"Trail\" } }),\n }),\n );\n assertEquals(res.status, 400);\n const body = await res.json();\n assertEquals(body.error, \"Invalid DID format\");\n});\n",[],[202],{"_107":211,"_100":212,"_164":213,"_166":-5,"_167":149,"_168":214,"_170":171,"_109":215,"_104":216,"_173":217,"_175":218,"_177":22,"_178":101,"_179":219,"_103":220},"71a9c10c-35d5-11f1-9ef3-42b51c65c3df","main.ts","ef5d68ec-35c1-11f1-98c3-42b51c65c3df",34,["D",1775932627617],28,"http","// val/backend.ts\n// Val.town HTTP val — Deno-compatible TypeScript.\n//\n// Required val.town environment secrets:\n// MAPPED_AT_IDENTIFIER service account handle, e.g. \"mapped.at\"\n// MAPPED_AT_APP_PASSWORD service account app password (not the main password)\n// MAPPED_AT_PDS service account PDS URL, e.g. \"https://leccinum.us-west.host.bsky.network\"\n// MAPPED_AT_DID service account DID, e.g. \"did:plc:l5m5nuh5cvdatyn5fjxar2sh\"\n\nconst SERVICE_ACCOUNT_PDS = Deno.env.get(\"MAPPED_AT_PDS\") ?? \"\";\nconst SERVICE_ACCOUNT_DID = Deno.env.get(\"MAPPED_AT_DID\") ?? \"\";\n\n// ── Routing ───────────────────────────────────────────────────────────────────\n\nexport function handler(req: Request) {\n const url = new URL(req.url);\n\n if (req.method !== \"POST\") {\n return Response.json({ error: \"Method not allowed\" }, { status: 405 });\n }\n\n if (url.pathname === \"/register\") return handleRegister(req);\n if (url.pathname === \"/submit-trail\") return handleSubmitTrail(req);\n\n return Response.json({ error: \"Not found\" }, { status: 404 });\n}\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\n// Resolves a DID to the PDS serviceEndpoint via the DID document.\n// Supports did:plc (via plc.directory) and did:web.\nasync function resolvePds(did: string): Promise {\n try {\n let docUrl: string;\n if (did.startsWith(\"did:plc:\")) {\n docUrl = `https://plc.directory/${did}`;\n } else if (did.startsWith(\"did:web:\")) {\n const domain = did.slice(8).replace(/:/g, \"/\");\n docUrl = `https://${domain}/.well-known/did.json`;\n } else {\n return null;\n }\n const res = await fetch(docUrl);\n if (!res.ok) return null;\n const doc = await res.json();\n const svc = (doc.service ?? []).find(\n (s: { type: string }) => s.type === \"AtprotoPersonalDataServer\",\n ) as { serviceEndpoint: string } | undefined;\n return svc?.serviceEndpoint ?? null;\n } catch {\n return null;\n }\n}\n\n// Authenticates as the service account and returns a short-lived access JWT.\n// Re-authenticates on every call — acceptable for low-traffic usage.\nasync function getServiceAccountToken(): Promise {\n const identifier = Deno.env.get(\"MAPPED_AT_IDENTIFIER\")!;\n const password = Deno.env.get(\"MAPPED_AT_APP_PASSWORD\")!;\n const res = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.server.createSession`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ identifier, password }),\n },\n );\n if (!res.ok) throw new Error(`Service account auth failed: ${res.status}`);\n const { accessJwt } = await res.json();\n return accessJwt;\n}\n\n// ── Handlers ──────────────────────────────────────────────────────────────────\n\nasync function handleRegister(req: Request): Promise {\n // Parse body\n let body: { did?: unknown };\n try {\n body = await req.json();\n } catch {\n return Response.json({ error: \"Invalid JSON\" }, { status: 400 });\n }\n\n const { did } = body;\n if (!did || typeof did !== \"string\") {\n return Response.json(\n { error: \"Missing required field: did\" },\n {\n status: 400,\n },\n );\n }\n if (!did.startsWith(\"did:\")) {\n return Response.json({ error: \"Invalid DID format\" }, { status: 400 });\n }\n\n // Verify profile exists on the user's PDS\n const pds = await resolvePds(did);\n if (!pds) {\n return Response.json(\n { error: \"Could not resolve DID to a PDS\" },\n {\n status: 400,\n },\n );\n }\n\n const profileRes = await fetch(\n `${pds}/xrpc/com.atproto.repo.getRecord?` +\n `repo=${encodeURIComponent(did)}&collection=at.mapped.profile&rkey=self`,\n );\n if (!profileRes.ok) {\n return Response.json(\n { error: \"at.mapped.profile not found on user PDS\" },\n {\n status: 400,\n },\n );\n }\n\n // Idempotency: return early if already registered\n const membersRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.listRecords?` +\n `repo=${encodeURIComponent(\n SERVICE_ACCOUNT_DID,\n )}&collection=at.mapped.member&limit=100`,\n );\n if (membersRes.ok) {\n const { records } = (await membersRes.json()) as {\n records: { value: { did: string } }[];\n };\n if ((records ?? []).some((r) => r.value.did === did)) {\n return Response.json({ ok: true });\n }\n }\n\n // Create member record on service account\n const token = await getServiceAccountToken();\n const createRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.createRecord`,\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${token}`,\n },\n body: JSON.stringify({\n repo: SERVICE_ACCOUNT_DID,\n collection: \"at.mapped.member\",\n record: {\n $type: \"at.mapped.member\",\n did,\n joinedAt: new Date().toISOString(),\n },\n }),\n },\n );\n\n if (!createRes.ok) {\n const err = await createRes.text();\n return Response.json(\n { error: `Failed to create member record: ${err}` },\n { status: 500 },\n );\n }\n\n return Response.json({ ok: true });\n}\n\nasync function handleSubmitTrail(req: Request): Promise {\n // Parse body\n let body: {\n did?: unknown;\n trail?: {\n name?: unknown;\n polyline?: unknown;\n activityType?: unknown;\n locations?: unknown;\n };\n };\n try {\n body = await req.json();\n } catch {\n return Response.json({ error: \"Invalid JSON\" }, { status: 400 });\n }\n\n const { did, trail } = body;\n if (!did || typeof did !== \"string\") {\n return Response.json(\n { error: \"Missing required field: did\" },\n {\n status: 400,\n },\n );\n }\n if (!did.startsWith(\"did:\")) {\n return Response.json({ error: \"Invalid DID format\" }, { status: 400 });\n }\n if (!trail?.name || typeof trail.name !== \"string\") {\n return Response.json(\n { error: \"Missing required field: trail.name\" },\n {\n status: 400,\n },\n );\n }\n\n // Verify membership\n const membersRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.listRecords?` +\n `repo=${encodeURIComponent(\n SERVICE_ACCOUNT_DID,\n )}&collection=at.mapped.member&limit=100`,\n );\n if (!membersRes.ok) {\n return Response.json(\n { error: \"Could not verify membership\" },\n {\n status: 500,\n },\n );\n }\n const { records } = (await membersRes.json()) as {\n records: { value: { did: string } }[];\n };\n const isMember = (records ?? []).some((r) => r.value.did === did);\n if (!isMember) {\n return Response.json({ error: \"Not a registered member\" }, { status: 403 });\n }\n\n // Build trail record\n const trailRecord: Record = {\n $type: \"at.mapped.trail\",\n name: trail.name,\n contributor: did,\n };\n if (typeof trail.polyline === \"string\") trailRecord.polyline = trail.polyline;\n if (trail.activityType) trailRecord.activityType = trail.activityType;\n if (Array.isArray(trail.locations)) trailRecord.locations = trail.locations;\n\n // Create trail on service account\n const token = await getServiceAccountToken();\n const createRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.createRecord`,\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${token}`,\n },\n body: JSON.stringify({\n repo: SERVICE_ACCOUNT_DID,\n collection: \"at.mapped.trail\",\n record: trailRecord,\n }),\n },\n );\n\n if (!createRes.ok) {\n const err = await createRes.text();\n return Response.json(\n { error: `Failed to create trail: ${err}` },\n {\n status: 500,\n },\n );\n }\n\n const { uri, cid } = (await createRes.json()) as {\n uri: string;\n cid: string;\n };\n return Response.json({ uri, cid });\n}\n",[],[212],"files",[161,182,191,200,210],"counts",{"_225":33,"_226":227,"_228":33,"_229":230,"_234":235},"pulls","branches",1,"forks","envVars",{"_231":232,"_233":33},"count",4,"emptyCount","connections",{"_231":33,"_236":33},"unfilledCount","contents",[239,242,245,248,251],{"_107":162,"_100":163,"_164":165,"_166":-5,"_167":149,"_168":169,"_170":171,"_109":240,"_104":33,"_173":174,"_175":176,"_177":22,"_178":-5,"_103":241},["D",1775932627421],[163],{"_107":183,"_100":184,"_164":185,"_166":-5,"_167":149,"_168":186,"_170":171,"_109":243,"_104":33,"_173":174,"_175":188,"_177":22,"_178":-5,"_103":244},["D",1775932627398],[184],{"_107":192,"_100":193,"_164":194,"_166":-5,"_167":149,"_168":195,"_170":171,"_109":246,"_104":33,"_173":174,"_175":197,"_177":22,"_178":-5,"_103":247},["D",1775932627421],[193],{"_107":201,"_100":202,"_164":203,"_166":-5,"_167":149,"_168":204,"_170":171,"_109":249,"_104":33,"_173":206,"_175":207,"_177":22,"_178":-5,"_103":250},["D",1775932627421],[202],{"_107":211,"_100":212,"_164":213,"_166":-5,"_167":149,"_168":214,"_170":171,"_109":252,"_104":216,"_173":217,"_175":218,"_177":22,"_178":101,"_103":253},["D",1775932627617],[212],"upstreamProject","upstreamBranch","emptyEnvVars","isNew","flags",[],"routes/_app.x.$handle.$name.environment-variables",{"_98":99,"_100":101,"_105":262,"_229":267,"_283":22},{"_107":108,"_100":101,"_109":263,"_111":-5,"_112":22,"_113":114,"_115":116,"_117":-5,"_14":118,"_119":-5,"_120":22,"_121":-5,"_122":-5,"_123":33,"_16":124,"_125":-5,"_126":-5,"_127":-5,"_128":-5,"_129":130,"_131":130,"_132":133,"_134":133,"_135":133,"_136":130,"_137":130,"_23":264,"_141":265,"_146":266,"_158":22},["D",1775924248580],{"_98":99,"_139":140},{"_98":99,"_143":140,"_14":118,"_144":145},{"_104":148,"_100":46,"_107":149,"_150":108,"_151":-5,"_152":-5,"_153":-5,"_154":-5,"_155":-5,"_156":101,"_157":99},[268,274,277,280],{"_269":270,"_109":271,"_272":-5,"_115":77,"_273":22},"key","MAPPED_AT_DID",["D",1775924445225],"updatedAt","isEmpty",{"_269":275,"_109":276,"_272":-5,"_115":77,"_273":22},"MAPPED_AT_PDS",["D",1775924420843],{"_269":278,"_109":279,"_272":-5,"_115":77,"_273":22},"MAPPED_AT_APP_PASSWORD",["D",1775924400701],{"_269":281,"_109":282,"_272":-5,"_115":77,"_273":22},"MAPPED_AT_IDENTIFIER",["D",1775924337152],"isTeamOrg","actionData","errors"]

wilhelm

mapped-at-backend

Environment variables