[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_182":183,"_184":185},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_61":147,"_16":-7,"_148":-5,"_17":149,"_150":151,"_28":152,"_21":153,"_23":154,"_155":-5,"_156":-5,"_157":-5,"_158":35,"_159":160,"_161":38,"_162":-5,"_163":-5,"_164":165},"routes/_app.x.$handle.$name._index",{"_11":12,"_13":14,"_15":-7,"_16":-7,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-7,"_26":-5,"_27":-5,"_28":29,"_30":31,"_32":-5,"_33":-5,"_34":35,"_36":35,"_37":38},"handle","wohara010","name","pantry","branchName","version","project",{"_39":91,"_13":14,"_50":92,"_93":-5,"_94":35,"_95":96,"_97":96,"_98":99,"_100":-5,"_101":102,"_103":43,"_104":38,"_105":-5,"_106":-5,"_107":81,"_108":109,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":115,"_116":115,"_117":118,"_119":118,"_120":118,"_121":115,"_122":115,"_123":124,"_125":126,"_127":128,"_129":35},"tags",[],"counts",{"_80":81,"_82":52,"_83":81,"_84":85,"_86":87},"contents",[74,75],"readme","upstream","pull","files",[63,31],"preview",{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":51,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_59":60,"_61":62},"ahead","behind","showHomeCustomizationHint",false,"showHTTPPreviewSettingsHint","hasHTTPFiles",true,"id","094def83-f1fb-4688-91c7-3ea969524c68","main.tsx","fileId","d022c0ca-7497-11f1-8760-1607ee4eb77e","parentId","branchId","bbed7776-5d27-11f1-8314-1607ee4eb77e","branchVersion",8,"latest","createdAt",["D",1785178198705],1,"fileType","http","content","/** Living Pantry — name-based profiles (no passwords)\n * Type your name -> opens your own private pantry. Each name has separate data.\n * The original single-file app (full frontend HTML + Claude helpers) is imported\n * unchanged from ./core.tsx; this file adds the name gate + per-user SQL scoping.\n * Requires env var ANTHROPIC_API_KEY for recipe generation & receipt scanning.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { HTML, callClaude, parseJSON, rows, safeParse, nowISO, norm, parseReceipt } from \"./core.tsx\";\n\nconst htmlHeaders = { \"content-type\": \"text/html; charset=utf-8\" };\nconst json = (obj: any, status = 200) =>\n new Response(JSON.stringify(obj), { status, headers: { \"content-type\": \"application/json\" } });\n\n// Profiles to ensure exist. Add names here (or ask) to create more pantries.\nconst PROFILES = [\"Billy\", \"Yos\"];\n\n// ---------- schema + migration ----------\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS pantry (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL, quantity REAL, unit TEXT, category TEXT,\n added_at TEXT, shelf_life_days INTEGER, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS shopping (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL, quantity REAL, unit TEXT, checked INTEGER DEFAULT 0,\n added_at TEXT, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS recipes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL, tier TEXT, active_minutes INTEGER, total_minutes INTEGER,\n ingredients TEXT, steps TEXT, created_at TEXT, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS pantry_users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT UNIQUE NOT NULL, display_name TEXT,\n pass_salt TEXT, pass_hash TEXT, claim_token TEXT, created_at TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS pantry_meta (k TEXT PRIMARY KEY, v TEXT)`,\n ]);\n // add user_id to legacy tables if it's missing (existing installs)\n for (const t of [\"pantry\", \"shopping\", \"recipes\"]) {\n const cols = rows(await sqlite.execute(`PRAGMA table_info(${t})`)).map((c: any) => c.name);\n if (!cols.includes(\"user_id\")) {\n await sqlite.execute(`ALTER TABLE ${t} ADD COLUMN user_id INTEGER`);\n }\n }\n // ensure each named profile exists (case-insensitive username, original-case display name)\n for (const nm of PROFILES) {\n const uname = nm.trim().toLowerCase();\n const ex = rows(await sqlite.execute({ sql: `SELECT id FROM pantry_users WHERE username = ?`, args: [uname] }));\n if (!ex.length) {\n await sqlite.execute({\n sql: `INSERT INTO pantry_users (username, display_name, created_at) VALUES (?, ?, ?)`,\n args: [uname, nm.trim(), nowISO()],\n });\n }\n }\n schemaReady = true;\n}\n\n// ---------- per-user data ----------\nasync function getState(userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT * FROM pantry WHERE user_id = ? ORDER BY category, name`, args: [userId] }));\n const shopping = rows(await sqlite.execute({ sql: `SELECT * FROM shopping WHERE user_id = ? ORDER BY checked, name`, args: [userId] }));\n const recipes = rows(await sqlite.execute({ sql: `SELECT * FROM recipes WHERE user_id = ? ORDER BY created_at DESC`, args: [userId] }))\n .map((r: any) => ({ ...r, ingredients: safeParse(r.ingredients), steps: safeParse(r.steps) }));\n const today = Date.now();\n for (const p of pantry) {\n if (p.added_at && p.shelf_life_days) {\n const ageDays = (today - Date.parse(p.added_at)) / 86400000;\n p.days_left = Math.round(p.shelf_life_days - ageDays);\n } else {\n p.days_left = null;\n }\n }\n return { pantry, shopping, recipes };\n}\n\nasync function addOrMergePantry(it: any, userId: number) {\n const existing = rows(await sqlite.execute({\n sql: `SELECT * FROM pantry WHERE user_id = ? AND lower(name) = ? AND ifnull(unit,'') = ifnull(?, '')`,\n args: [userId, norm(it.name), it.unit ?? null],\n }));\n if (existing.length && typeof it.quantity === \"number\") {\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ifnull(quantity,0) + ?, added_at = ? WHERE id = ?`,\n args: [it.quantity, nowISO(), existing[0].id],\n });\n } else if (existing.length) {\n await sqlite.execute({ sql: `UPDATE pantry SET added_at = ? WHERE id = ?`, args: [nowISO(), existing[0].id] });\n } else {\n await sqlite.execute({\n sql: `INSERT INTO pantry (name, quantity, unit, category, added_at, shelf_life_days, user_id) VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, it.category ?? null, nowISO(), it.shelf_life_days ?? null, userId],\n });\n }\n}\n\nasync function generateRecipes(tier: string, note: string, userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT name, quantity, unit FROM pantry WHERE user_id = ?`, args: [userId] }));\n const tierGuide: Record = {\n quick: \"QUICK: hands-on (active) time at most 15 minutes. Minimal chopping/steps. OK if total time is longer due to hands-off waiting.\",\n moderate: \"MODERATE: active time roughly 15-35 minutes.\",\n involved: \"INVOLVED: active time may exceed 35 minutes; more technique and components allowed.\",\n };\n const system =\n \"You are a recipe generator for a pantry app. Given a user's pantry, propose exactly 3 distinct recipes at the requested effort tier. \" +\n \"Tier is defined by ACTIVE (hands-on) time, not total clock time. \" + (tierGuide[tier] || tierGuide.moderate) + \" \" +\n \"Assume these staples are always on hand: salt, pepper, cooking oil, butter, water, common dried spices. \" +\n \"Prefer recipes that use what's in the pantry. You MAY include up to 3 items the user must buy (put them in needToBuy). \" +\n \"Respond with ONLY valid JSON, no prose, no markdown. Schema: \" +\n '{\"recipes\":[{\"title\":string,\"tier\":string,\"activeMinutes\":number,\"totalMinutes\":number,' +\n '\"ingredients\":[{\"name\":string,\"quantity\":number,\"unit\":string}],' +\n '\"needToBuy\":[{\"name\":string,\"quantity\":number,\"unit\":string}],\"steps\":[string]}]}';\n const userMsg =\n \"Pantry: \" + JSON.stringify(pantry) + \"\\nTier: \" + tier +\n (note ? \"\\nUser note: \" + note : \"\") +\n \"\\nReturn 3 recipes as JSON.\";\n const text = await callClaude({ system, content: userMsg, maxTokens: 3000 });\n const parsed = parseJSON(text);\n return { recipes: parsed.recipes || [] };\n}\n\nasync function cookRecipe(r: any, userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT * FROM pantry WHERE user_id = ?`, args: [userId] }));\n const deducted: string[] = [];\n for (const ing of (r.ingredients || [])) {\n const match = pantry.find((p: any) => norm(p.name) === norm(ing.name) ||\n norm(p.name).includes(norm(ing.name)) || norm(ing.name).includes(norm(p.name)));\n if (!match) continue;\n if (typeof match.quantity === \"number\" && typeof ing.quantity === \"number\" && norm(match.unit) === norm(ing.unit)) {\n const newQty = match.quantity - ing.quantity;\n if (newQty <= 0) {\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ? AND user_id = ?`, args: [match.id, userId] });\n deducted.push(match.name + \" (used up)\");\n } else {\n await sqlite.execute({ sql: `UPDATE pantry SET quantity = ? WHERE id = ? AND user_id = ?`, args: [newQty, match.id, userId] });\n deducted.push(match.name + \" (-\" + ing.quantity + \" \" + (ing.unit || \"\") + \")\");\n }\n } else {\n deducted.push(match.name + \" (used)\");\n }\n }\n return deducted;\n}\n\n// =================== NAME-BASED SESSION ===================\nconst COOKIE_BASE = \"HttpOnly; Secure; SameSite=Lax; Path=/\";\nconst sessionCookie = (token: string) => `session=${token}; ${COOKIE_BASE}; Max-Age=2592000`;\nconst clearCookie = () => `session=; ${COOKIE_BASE}; Max-Age=0`;\n\nfunction randomHex(nBytes: number) {\n const a = new Uint8Array(nBytes);\n crypto.getRandomValues(a);\n return Array.from(a).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction bytesToHex(b: Uint8Array) {\n return Array.from(b).map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function hmac(data: string, secret: string) {\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\"raw\", enc.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const sig = await crypto.subtle.sign(\"HMAC\", key, enc.encode(data));\n return bytesToHex(new Uint8Array(sig));\n}\nasync function makeToken(userId: number, secret: string) {\n const exp = Date.now() + 1000 * 60 * 60 * 24 * 30;\n const payload = userId + \".\" + exp;\n return payload + \".\" + (await hmac(payload, secret));\n}\nasync function verifyToken(token: string, secret: string): Promise {\n const parts = (token || \"\").split(\".\");\n if (parts.length !== 3) return null;\n const expected = await hmac(parts[0] + \".\" + parts[1], secret);\n if (parts[2] !== expected) return null;\n if (Date.now() > Number(parts[1])) return null;\n return Number(parts[0]);\n}\nasync function getSecret() {\n let r = rows(await sqlite.execute(`SELECT v FROM pantry_meta WHERE k = 'auth_secret'`));\n if (r.length) return r[0].v;\n await sqlite.execute({ sql: `INSERT OR IGNORE INTO pantry_meta (k, v) VALUES ('auth_secret', ?)`, args: [randomHex(32)] });\n r = rows(await sqlite.execute(`SELECT v FROM pantry_meta WHERE k = 'auth_secret'`));\n return r[0].v;\n}\nconst getUserByUsername = async (u: string) =>\n rows(await sqlite.execute({ sql: `SELECT * FROM pantry_users WHERE username = ?`, args: [u] }))[0];\nconst getUserById = async (id: number) =>\n rows(await sqlite.execute({ sql: `SELECT * FROM pantry_users WHERE id = ?`, args: [id] }))[0];\n\nasync function currentUserId(req: Request): Promise {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const m = cookie.match(/(?:^|;\\s*)session=([^;]+)/);\n if (!m) return null;\n try {\n return await verifyToken(decodeURIComponent(m[1]), await getSecret());\n } catch {\n return null;\n }\n}\nasync function handleEnter(req: Request) {\n const body = await req.json().catch(() => ({}));\n const name = String(body.name || \"\").trim().toLowerCase();\n if (!name) return json({ error: \"bad\", message: \"Please type your name.\" }, 400);\n const u = await getUserByUsername(name);\n if (!u) return json({ error: \"not_found\", message: \"No pantry found for that name yet.\" }, 404);\n const token = await makeToken(u.id, await getSecret());\n return new Response(JSON.stringify({ ok: true, displayName: u.display_name || u.username }), {\n status: 200,\n headers: { \"content-type\": \"application/json\", \"set-cookie\": sessionCookie(token) },\n });\n}\nconst switchResponse = () =>\n new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"content-type\": \"application/json\", \"set-cookie\": clearCookie() },\n });\n\n// Inject a small \"Switch\" control + session handling into the imported app HTML,\n// without modifying the original frontend file.\nfunction appPage(): string {\n const inject = ``;\n return HTML.replace(\"\", inject + \"\");\n}\n\n// =================== HANDLER ===================\nexport default async function (req: Request): Promise {\n await ensureSchema();\n const url = new URL(req.url);\n const path = url.pathname;\n const method = req.method;\n\n try {\n // ---- public routes ----\n if (path === \"/api/enter\" && method === \"POST\") return await handleEnter(req);\n if (path === \"/api/switch\" && method === \"POST\") return switchResponse();\n\n const userId = await currentUserId(req);\n\n if (path === \"/\" || path === \"\") {\n return new Response(userId ? appPage() : NAME_HTML, { headers: htmlHeaders });\n }\n if (path === \"/api/me\" && method === \"GET\") {\n if (!userId) return json({ error: \"unauthorized\" }, 401);\n const u = await getUserById(userId);\n return json({ username: u.username, displayName: u.display_name || u.username });\n }\n\n // ---- everything below requires a chosen name ----\n if (!userId) return json({ error: \"unauthorized\" }, 401);\n\n if (path === \"/api/state\" && method === \"GET\") return json(await getState(userId));\n\n // PANTRY\n if (path === \"/api/pantry\" && method === \"POST\") {\n const body = await req.json();\n for (const it of (body.items || [])) await addOrMergePantry(it, userId);\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ?, unit = ? WHERE id = ? AND user_id = ?`,\n args: [body.quantity ?? null, body.unit ?? null, id, userId],\n });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n\n // RECIPES\n if (path === \"/api/recipes/generate\" && method === \"POST\") {\n const body = await req.json();\n return json(await generateRecipes(body.tier, body.note, userId));\n }\n if (path === \"/api/recipes/save\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n await sqlite.execute({\n sql: `INSERT INTO recipes (title, tier, active_minutes, total_minutes, ingredients, steps, created_at, user_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [r.title, r.tier || \"\", r.activeMinutes || 0, r.totalMinutes || 0,\n JSON.stringify(r.ingredients || []), JSON.stringify(r.steps || []), nowISO(), userId],\n });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/recipes/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM recipes WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n if (path === \"/api/cook\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n const deducted = await cookRecipe(r, userId);\n return json({ deducted, state: await getState(userId) });\n }\n\n // SHOPPING\n if (path === \"/api/shopping\" && method === \"POST\") {\n const items = (await req.json()).items || [];\n for (const it of items) {\n await sqlite.execute({\n sql: `INSERT INTO shopping (name, quantity, unit, checked, added_at, user_id) VALUES (?, ?, ?, 0, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, nowISO(), userId],\n });\n }\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({ sql: `UPDATE shopping SET checked = ? WHERE id = ? AND user_id = ?`, args: [body.checked ? 1 : 0, id, userId] });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n if (path === \"/api/shopping/clear-checked\" && method === \"POST\") {\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE checked = 1 AND user_id = ?`, args: [userId] });\n return json(await getState(userId));\n }\n\n // RECEIPT (parsing only, no DB writes)\n if (path === \"/api/receipt\" && method === \"POST\") {\n const body = await req.json();\n return json(await parseReceipt(body.image, body.mimeType || \"image/jpeg\"));\n }\n\n return json({ error: \"not found\", path }, 404);\n } catch (e) {\n const msg = String(e && (e as any).message ? (e as any).message : e);\n if (msg.includes(\"NO_API_KEY\")) {\n return json({ error: \"no_api_key\", message: \"Set ANTHROPIC_API_KEY in this val's environment variables to enable recipes and receipt scanning.\" }, 400);\n }\n return json({ error: \"server_error\", message: msg }, 500);\n }\n}\n\n// =================== NAME ENTRY PAGE ===================\nconst NAME_HTML = `\n\n\n\n\nYour Pantry\n\n\n

🥤

Your Pantry

Type your name to open your pantry.

\n\n\n

\n\n`;\n","deleted","label","children",[],"path",[41],{"_39":64,"_13":65,"_42":66,"_44":-5,"_45":46,"_47":67,"_49":38,"_50":68,"_16":69,"_53":70,"_55":71,"_57":35,"_58":-5,"_59":72,"_61":73},"bec9443f-a862-4017-8cf9-915fd3bcb4b1","core.tsx","019f191f-26a4-751b-bc0a-586b3b461a12",5,["D",1782832909338],2,"script","/** Living Pantry — Val Town MVP\n * Single-file HTTP val: SQLite storage + Anthropic API (recipes + receipt OCR) + mobile UI.\n * Requires env var ANTHROPIC_API_KEY (set in val settings) for recipe generation & receipt scan.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst MODEL = \"claude-sonnet-4-6\";\nconst ANTHROPIC_URL = \"https://api.anthropic.com/v1/messages\";\n\n// ---------- DB ----------\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS pantry (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n quantity REAL,\n unit TEXT,\n category TEXT,\n added_at TEXT,\n shelf_life_days INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS shopping (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n quantity REAL,\n unit TEXT,\n checked INTEGER DEFAULT 0,\n added_at TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS recipes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL,\n tier TEXT,\n active_minutes INTEGER,\n total_minutes INTEGER,\n ingredients TEXT,\n steps TEXT,\n created_at TEXT\n )`,\n ]);\n schemaReady = true;\n}\n\nfunction rows(result: any): any[] {\n const cols = result.columns as string[];\n return (result.rows as any[][]).map((r) =>\n Object.fromEntries(cols.map((c, i) => [c, r[i]]))\n );\n}\n\nconst nowISO = () => new Date().toISOString();\nconst norm = (s: string) => (s || \"\").trim().toLowerCase();\n\n// ---------- Anthropic ----------\nasync function callClaude(opts: {\n system: string;\n content: any;\n maxTokens?: number;\n}): Promise {\n const key = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!key) throw new Error(\"NO_API_KEY\");\n const res = await fetch(ANTHROPIC_URL, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": key,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: MODEL,\n max_tokens: opts.maxTokens ?? 2000,\n system: opts.system,\n messages: [{ role: \"user\", content: opts.content }],\n }),\n });\n if (!res.ok) {\n const t = await res.text();\n throw new Error(\"ANTHROPIC_ERROR \" + res.status + \" \" + t.slice(0, 300));\n }\n const data = await res.json();\n return (data.content || [])\n .filter((b: any) => b.type === \"text\")\n .map((b: any) => b.text)\n .join(\"\\n\");\n}\n\nfunction parseJSON(text: string): any {\n let t = (text || \"\").trim();\n t = t.replace(/^```(?:json)?/i, \"\").replace(/```$/i, \"\").trim();\n const firstObj = t.search(/[\\[{]/);\n if (firstObj > 0) t = t.slice(firstObj);\n const lastClose = Math.max(t.lastIndexOf(\"}\"), t.lastIndexOf(\"]\"));\n if (lastClose >= 0) t = t.slice(0, lastClose + 1);\n return JSON.parse(t);\n}\n\n// ---------- helpers ----------\nconst json = (obj: any, status = 200) =>\n new Response(JSON.stringify(obj), {\n status,\n headers: { \"content-type\": \"application/json\" },\n });\n\nconst safeParse = (s: any) => {\n try { return JSON.parse(s); } catch { return []; }\n};\n\nasync function getState() {\n const pantry = rows(await sqlite.execute(`SELECT * FROM pantry ORDER BY category, name`));\n const shopping = rows(await sqlite.execute(`SELECT * FROM shopping ORDER BY checked, name`));\n const recipes = rows(await sqlite.execute(`SELECT * FROM recipes ORDER BY created_at DESC`)).map(\n (r) => ({ ...r, ingredients: safeParse(r.ingredients), steps: safeParse(r.steps) })\n );\n const today = Date.now();\n for (const p of pantry) {\n if (p.added_at && p.shelf_life_days) {\n const ageDays = (today - Date.parse(p.added_at)) / 86400000;\n p.days_left = Math.round(p.shelf_life_days - ageDays);\n } else {\n p.days_left = null;\n }\n }\n return { pantry, shopping, recipes };\n}\n\n// ---------- main handler ----------\nexport default async function (req: Request): Promise {\n await ensureSchema();\n const url = new URL(req.url);\n const path = url.pathname;\n const method = req.method;\n\n try {\n if (path === \"/\" || path === \"\") {\n return new Response(HTML, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n }\n\n if (path === \"/api/state\" && method === \"GET\") {\n return json(await getState());\n }\n\n // ---- PANTRY ----\n if (path === \"/api/pantry\" && method === \"POST\") {\n const body = await req.json();\n const items = body.items || [];\n for (const it of items) await addOrMergePantry(it);\n return json(await getState());\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ?, unit = ? WHERE id = ?`,\n args: [body.quantity ?? null, body.unit ?? null, id],\n });\n return json(await getState());\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ?`, args: [id] });\n return json(await getState());\n }\n\n // ---- RECIPES ----\n if (path === \"/api/recipes/generate\" && method === \"POST\") {\n const body = await req.json();\n return json(await generateRecipes(body.tier, body.note));\n }\n if (path === \"/api/recipes/save\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n await sqlite.execute({\n sql: `INSERT INTO recipes (title, tier, active_minutes, total_minutes, ingredients, steps, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [r.title, r.tier || \"\", r.activeMinutes || 0, r.totalMinutes || 0,\n JSON.stringify(r.ingredients || []), JSON.stringify(r.steps || []), nowISO()],\n });\n return json(await getState());\n }\n if (path.startsWith(\"/api/recipes/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM recipes WHERE id = ?`, args: [id] });\n return json(await getState());\n }\n if (path === \"/api/cook\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n const deducted = await cookRecipe(r);\n return json({ deducted, state: await getState() });\n }\n\n // ---- SHOPPING ----\n if (path === \"/api/shopping\" && method === \"POST\") {\n const items = (await req.json()).items || [];\n for (const it of items) {\n await sqlite.execute({\n sql: `INSERT INTO shopping (name, quantity, unit, checked, added_at) VALUES (?, ?, ?, 0, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, nowISO()],\n });\n }\n return json(await getState());\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({\n sql: `UPDATE shopping SET checked = ? WHERE id = ?`,\n args: [body.checked ? 1 : 0, id],\n });\n return json(await getState());\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE id = ?`, args: [id] });\n return json(await getState());\n }\n if (path === \"/api/shopping/clear-checked\" && method === \"POST\") {\n await sqlite.execute(`DELETE FROM shopping WHERE checked = 1`);\n return json(await getState());\n }\n\n // ---- RECEIPT ----\n if (path === \"/api/receipt\" && method === \"POST\") {\n const body = await req.json();\n return json(await parseReceipt(body.image, body.mimeType || \"image/jpeg\"));\n }\n\n return json({ error: \"not found\", path }, 404);\n } catch (e) {\n const msg = String(e && e.message ? e.message : e);\n if (msg.includes(\"NO_API_KEY\")) {\n return json({ error: \"no_api_key\", message: \"Set ANTHROPIC_API_KEY in this val's environment variables to enable recipes and receipt scanning.\" }, 400);\n }\n return json({ error: \"server_error\", message: msg }, 500);\n }\n}\n\nasync function addOrMergePantry(it: any) {\n const existing = rows(await sqlite.execute({\n sql: `SELECT * FROM pantry WHERE lower(name) = ? AND ifnull(unit,'') = ifnull(?, '')`,\n args: [norm(it.name), it.unit ?? null],\n }));\n if (existing.length && typeof it.quantity === \"number\") {\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ifnull(quantity,0) + ?, added_at = ? WHERE id = ?`,\n args: [it.quantity, nowISO(), existing[0].id],\n });\n } else if (existing.length) {\n await sqlite.execute({ sql: `UPDATE pantry SET added_at = ? WHERE id = ?`, args: [nowISO(), existing[0].id] });\n } else {\n await sqlite.execute({\n sql: `INSERT INTO pantry (name, quantity, unit, category, added_at, shelf_life_days) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, it.category ?? null, nowISO(), it.shelf_life_days ?? null],\n });\n }\n}\n\nasync function generateRecipes(tier: string, note: string) {\n const pantry = rows(await sqlite.execute(`SELECT name, quantity, unit FROM pantry`));\n const tierGuide: Record = {\n quick: \"QUICK: hands-on (active) time at most 15 minutes. Minimal chopping/steps. OK if total time is longer due to hands-off waiting.\",\n moderate: \"MODERATE: active time roughly 15-35 minutes.\",\n involved: \"INVOLVED: active time may exceed 35 minutes; more technique and components allowed.\",\n };\n const system =\n \"You are a recipe generator for a pantry app. Given a user's pantry, propose exactly 3 distinct recipes at the requested effort tier. \" +\n \"Tier is defined by ACTIVE (hands-on) time, not total clock time. \" + (tierGuide[tier] || tierGuide.moderate) + \" \" +\n \"Assume these staples are always on hand: salt, pepper, cooking oil, butter, water, common dried spices. \" +\n \"Prefer recipes that use what's in the pantry. You MAY include up to 3 items the user must buy (put them in needToBuy). \" +\n \"Respond with ONLY valid JSON, no prose, no markdown. Schema: \" +\n '{\"recipes\":[{\"title\":string,\"tier\":string,\"activeMinutes\":number,\"totalMinutes\":number,' +\n '\"ingredients\":[{\"name\":string,\"quantity\":number,\"unit\":string}],' +\n '\"needToBuy\":[{\"name\":string,\"quantity\":number,\"unit\":string}],\"steps\":[string]}]}';\n const userMsg =\n \"Pantry: \" + JSON.stringify(pantry) + \"\\nTier: \" + tier +\n (note ? \"\\nUser note: \" + note : \"\") +\n \"\\nReturn 3 recipes as JSON.\";\n const text = await callClaude({ system, content: userMsg, maxTokens: 3000 });\n const parsed = parseJSON(text);\n return { recipes: parsed.recipes || [] };\n}\n\nasync function cookRecipe(r: any) {\n const pantry = rows(await sqlite.execute(`SELECT * FROM pantry`));\n const deducted: string[] = [];\n for (const ing of (r.ingredients || [])) {\n const match = pantry.find((p) => norm(p.name) === norm(ing.name) ||\n norm(p.name).includes(norm(ing.name)) || norm(ing.name).includes(norm(p.name)));\n if (!match) continue;\n if (typeof match.quantity === \"number\" && typeof ing.quantity === \"number\" &&\n norm(match.unit) === norm(ing.unit)) {\n const newQty = match.quantity - ing.quantity;\n if (newQty <= 0) {\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ?`, args: [match.id] });\n deducted.push(match.name + \" (used up)\");\n } else {\n await sqlite.execute({ sql: `UPDATE pantry SET quantity = ? WHERE id = ?`, args: [newQty, match.id] });\n deducted.push(match.name + \" (-\" + ing.quantity + \" \" + (ing.unit || \"\") + \")\");\n }\n } else {\n deducted.push(match.name + \" (used)\");\n }\n }\n return deducted;\n}\n\nasync function parseReceipt(imageB64: string, mimeType: string) {\n const system =\n \"You read a photographed grocery receipt and extract food/grocery items for a pantry inventory. \" +\n \"Normalize cryptic abbreviations to clear canonical food names (e.g. 'GV SHRD CHS' -> 'Shredded cheddar cheese'). \" +\n \"For each item estimate quantity and unit if inferable from the line; if package size is unknown, set quantity to 1 and unit to 'pkg'. \" +\n \"Assign a category (produce, dairy, meat, seafood, bakery, frozen, pantry, beverage, snack, other) and an estimated shelf_life_days. \" +\n \"Skip non-food lines: totals, tax, subtotal, payment, change, loyalty, bags. \" +\n \"Respond with ONLY valid JSON, no prose. Schema: \" +\n '{\"items\":[{\"name\":string,\"quantity\":number,\"unit\":string,\"category\":string,\"shelf_life_days\":number,\"rawLine\":string}]}';\n const content = [\n { type: \"image\", source: { type: \"base64\", media_type: mimeType, data: imageB64 } },\n { type: \"text\", text: \"Extract the grocery items from this receipt as JSON.\" },\n ];\n const text = await callClaude({ system, content, maxTokens: 2500 });\n const parsed = parseJSON(text);\n return { items: parsed.items || [] };\n}\n\n// =================== FRONTEND ===================\nconst HTML = `\n\n\n\n\n\nPantry\n\n\n\n

Your Pantry

\n\n

\n \n \n

\n \n

Quick-add staples

Tap to add common items.

\n\n

\n What do you feel like cooking?\n

Effort is based on hands-on time.

\n Quick\n Moderate\n Involved\n

\n \n \n

Saved recipes

\n\n

\n \n \n

\n \n

\n\n\n\n\n

\n\n\n\n`;\n\n\n// Re-export internals so the auth wrapper (main.tsx) can reuse the original app unchanged.\nexport { HTML, callClaude, parseJSON, rows, safeParse, nowISO, norm, parseReceipt };\n",[],[65],{"_39":64,"_13":65,"_42":66,"_44":-5,"_45":46,"_47":67,"_49":38,"_50":78,"_16":69,"_53":70,"_55":71,"_57":35,"_58":-5,"_61":79},{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":76,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_61":77},["D",1785178198705],[41],["D",1782832909338],[65],"pulls",0,"branches","forks","envVars",{"_88":81,"_90":81},"connections",{"_88":81,"_89":81},"count","unfilledCount","emptyCount","bbecafbc-5d27-11f1-8314-1607ee4eb77e",["D",1780256066315],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Living pantry: receipt scan, recipe generation, shopping list","imageUrl","userId","019c452d-eb8d-7124-ac84-fd3eee7429af","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019c452d-eb8d-7124-ac85-003287cdb181","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_146":142},"org",{"_11":12,"_139":140,"_141":142,"_101":102,"_143":144,"_145":35},"branch",{"_16":48,"_13":130,"_39":46,"_131":91,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":14,"_138":12},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Billy","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/189d5be3-0aea-450f-0b6c-366cb482cb00/square512?exp=1789549199&sig=b4d207846865d1f83c6a5eee70789e5456c59aa007794690f7923b999aebcf2d","tier","pro","canRestrictVals","profileImageUrl","","adoptOrgId",{"_39":91,"_13":14,"_50":178,"_93":-5,"_94":35,"_95":96,"_97":96,"_98":99,"_100":-5,"_101":102,"_103":43,"_104":38,"_105":-5,"_106":-5,"_107":81,"_108":109,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":115,"_116":115,"_117":118,"_119":118,"_120":118,"_121":115,"_122":115,"_123":179,"_125":180,"_127":181,"_129":35},"tree",[172,173],[172,173],{"_80":81,"_82":52,"_83":81,"_84":170,"_86":171},[166,167],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_39":64,"_13":65,"_42":66,"_44":-5,"_45":46,"_47":67,"_49":38,"_50":78,"_16":69,"_53":70,"_55":71,"_57":35,"_58":-5,"_61":169},{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":76,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_61":168},[41],[65],{"_88":81,"_90":81},{"_88":81,"_89":81},{"_39":64,"_13":65,"_42":66,"_44":-5,"_45":46,"_47":67,"_49":38,"_50":68,"_16":69,"_53":70,"_55":71,"_57":35,"_58":-5,"_59":176,"_61":177},{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":51,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_59":174,"_61":175},[],[41],[],[65],["D",1780256066315],{"_11":12,"_146":142},{"_11":12,"_139":140,"_141":142,"_101":102,"_143":144,"_145":35},{"_16":48,"_13":130,"_39":46,"_131":91,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":14,"_138":12},"ctx",{"_123":-5,"_163":215,"_216":217,"_218":219,"_220":35,"_221":35,"_222":35,"_223":38,"_224":-5,"_225":-7,"_226":-7,"_227":81,"_228":35,"_229":35,"_230":-5,"_231":35,"_232":35,"_233":35,"_234":-5},"ENV",{"_186":187,"_188":189,"_190":130,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]