[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_166":167,"_168":169},"routes/_app.x.$handle.$name",{"_94":93,"_31":43,"_103":84,"_26":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":24,"_118":119,"_120":56,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":30,"_55":56,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":77,"_78":79,"_80":81,"_82":24},"version",7,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","d022c0ca-7497-11f1-8760-1607ee4eb77e","name","fileType","http","content","/** Living Pantry — multi-user\n * Adds a login gate + per-user data (each person has their own private pantry).\n * The original single-file app (full frontend HTML + Claude helpers) is imported\n * unchanged from ./core.tsx; this file adds auth, per-user SQL scoping, and the\n * login / account-setup pages.\n * Requires env var ANTHROPIC_API_KEY for recipe generation & receipt scanning.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { HTML, callClaude, parseJSON, rows, safeParse, nowISO, norm, parseReceipt } from \"./core.tsx\";\n\nconst htmlHeaders = { \"content-type\": \"text/html; charset=utf-8\" };\nconst json = (obj: any, status = 200) =>\n new Response(JSON.stringify(obj), { status, headers: { \"content-type\": \"application/json\" } });\n\n// ---------- schema + migration ----------\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS pantry (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL, quantity REAL, unit TEXT, category TEXT,\n added_at TEXT, shelf_life_days INTEGER, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS shopping (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL, quantity REAL, unit TEXT, checked INTEGER DEFAULT 0,\n added_at TEXT, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS recipes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL, tier TEXT, active_minutes INTEGER, total_minutes INTEGER,\n ingredients TEXT, steps TEXT, created_at TEXT, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS pantry_users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT UNIQUE NOT NULL, display_name TEXT,\n pass_salt TEXT, pass_hash TEXT, claim_token TEXT, created_at TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS pantry_meta (k TEXT PRIMARY KEY, v TEXT)`,\n ]);\n // add user_id to legacy tables if it's missing (existing installs)\n for (const t of [\"pantry\", \"shopping\", \"recipes\"]) {\n const cols = rows(await sqlite.execute(`PRAGMA table_info(${t})`)).map((c: any) => c.name);\n if (!cols.includes(\"user_id\")) {\n await sqlite.execute(`ALTER TABLE ${t} ADD COLUMN user_id INTEGER`);\n }\n }\n // seed the two accounts on first run\n const existing = rows(await sqlite.execute(`SELECT id FROM pantry_users`));\n if (!existing.length) {\n await sqlite.execute({\n sql: `INSERT INTO pantry_users (username, display_name, claim_token, created_at) VALUES (?, ?, ?, ?)`,\n args: [\"wohara010\", \"You\", randomHex(24), nowISO()],\n });\n await sqlite.execute({\n sql: `INSERT INTO pantry_users (username, display_name, claim_token, created_at) VALUES (?, ?, ?, ?)`,\n args: [\"guest\", \"Guest\", randomHex(24), nowISO()],\n });\n }\n // back-fill any pre-existing pantry data to the owner account\n const owner = rows(await sqlite.execute(`SELECT id FROM pantry_users WHERE username = 'wohara010'`))[0];\n if (owner) {\n for (const t of [\"pantry\", \"shopping\", \"recipes\"]) {\n await sqlite.execute({ sql: `UPDATE ${t} SET user_id = ? WHERE user_id IS NULL`, args: [owner.id] });\n }\n }\n schemaReady = true;\n}\n\n// ---------- per-user data ----------\nasync function getState(userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT * FROM pantry WHERE user_id = ? ORDER BY category, name`, args: [userId] }));\n const shopping = rows(await sqlite.execute({ sql: `SELECT * FROM shopping WHERE user_id = ? ORDER BY checked, name`, args: [userId] }));\n const recipes = rows(await sqlite.execute({ sql: `SELECT * FROM recipes WHERE user_id = ? ORDER BY created_at DESC`, args: [userId] }))\n .map((r: any) => ({ ...r, ingredients: safeParse(r.ingredients), steps: safeParse(r.steps) }));\n const today = Date.now();\n for (const p of pantry) {\n if (p.added_at && p.shelf_life_days) {\n const ageDays = (today - Date.parse(p.added_at)) / 86400000;\n p.days_left = Math.round(p.shelf_life_days - ageDays);\n } else {\n p.days_left = null;\n }\n }\n return { pantry, shopping, recipes };\n}\n\nasync function addOrMergePantry(it: any, userId: number) {\n const existing = rows(await sqlite.execute({\n sql: `SELECT * FROM pantry WHERE user_id = ? AND lower(name) = ? AND ifnull(unit,'') = ifnull(?, '')`,\n args: [userId, norm(it.name), it.unit ?? null],\n }));\n if (existing.length && typeof it.quantity === \"number\") {\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ifnull(quantity,0) + ?, added_at = ? WHERE id = ?`,\n args: [it.quantity, nowISO(), existing[0].id],\n });\n } else if (existing.length) {\n await sqlite.execute({ sql: `UPDATE pantry SET added_at = ? WHERE id = ?`, args: [nowISO(), existing[0].id] });\n } else {\n await sqlite.execute({\n sql: `INSERT INTO pantry (name, quantity, unit, category, added_at, shelf_life_days, user_id) VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, it.category ?? null, nowISO(), it.shelf_life_days ?? null, userId],\n });\n }\n}\n\nasync function generateRecipes(tier: string, note: string, userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT name, quantity, unit FROM pantry WHERE user_id = ?`, args: [userId] }));\n const tierGuide: Record = {\n quick: \"QUICK: hands-on (active) time at most 15 minutes. Minimal chopping/steps. OK if total time is longer due to hands-off waiting.\",\n moderate: \"MODERATE: active time roughly 15-35 minutes.\",\n involved: \"INVOLVED: active time may exceed 35 minutes; more technique and components allowed.\",\n };\n const system =\n \"You are a recipe generator for a pantry app. Given a user's pantry, propose exactly 3 distinct recipes at the requested effort tier. \" +\n \"Tier is defined by ACTIVE (hands-on) time, not total clock time. \" + (tierGuide[tier] || tierGuide.moderate) + \" \" +\n \"Assume these staples are always on hand: salt, pepper, cooking oil, butter, water, common dried spices. \" +\n \"Prefer recipes that use what's in the pantry. You MAY include up to 3 items the user must buy (put them in needToBuy). \" +\n \"Respond with ONLY valid JSON, no prose, no markdown. Schema: \" +\n '{\"recipes\":[{\"title\":string,\"tier\":string,\"activeMinutes\":number,\"totalMinutes\":number,' +\n '\"ingredients\":[{\"name\":string,\"quantity\":number,\"unit\":string}],' +\n '\"needToBuy\":[{\"name\":string,\"quantity\":number,\"unit\":string}],\"steps\":[string]}]}';\n const userMsg =\n \"Pantry: \" + JSON.stringify(pantry) + \"\\nTier: \" + tier +\n (note ? \"\\nUser note: \" + note : \"\") +\n \"\\nReturn 3 recipes as JSON.\";\n const text = await callClaude({ system, content: userMsg, maxTokens: 3000 });\n const parsed = parseJSON(text);\n return { recipes: parsed.recipes || [] };\n}\n\nasync function cookRecipe(r: any, userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT * FROM pantry WHERE user_id = ?`, args: [userId] }));\n const deducted: string[] = [];\n for (const ing of (r.ingredients || [])) {\n const match = pantry.find((p: any) => norm(p.name) === norm(ing.name) ||\n norm(p.name).includes(norm(ing.name)) || norm(ing.name).includes(norm(p.name)));\n if (!match) continue;\n if (typeof match.quantity === \"number\" && typeof ing.quantity === \"number\" && norm(match.unit) === norm(ing.unit)) {\n const newQty = match.quantity - ing.quantity;\n if (newQty <= 0) {\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ? AND user_id = ?`, args: [match.id, userId] });\n deducted.push(match.name + \" (used up)\");\n } else {\n await sqlite.execute({ sql: `UPDATE pantry SET quantity = ? WHERE id = ? AND user_id = ?`, args: [newQty, match.id, userId] });\n deducted.push(match.name + \" (-\" + ing.quantity + \" \" + (ing.unit || \"\") + \")\");\n }\n } else {\n deducted.push(match.name + \" (used)\");\n }\n }\n return deducted;\n}\n\n// =================== AUTH ===================\nconst COOKIE_BASE = \"HttpOnly; Secure; SameSite=Lax; Path=/\";\nconst sessionCookie = (token: string) => `session=${token}; ${COOKIE_BASE}; Max-Age=2592000`;\nconst clearCookie = () => `session=; ${COOKIE_BASE}; Max-Age=0`;\n\nfunction randomHex(nBytes: number) {\n const a = new Uint8Array(nBytes);\n crypto.getRandomValues(a);\n return Array.from(a).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction hexToBytes(hex: string) {\n const a = new Uint8Array(hex.length / 2);\n for (let i = 0; i < a.length; i++) a[i] = parseInt(hex.substr(i * 2, 2), 16);\n return a;\n}\nfunction bytesToHex(b: Uint8Array) {\n return Array.from(b).map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function hashPassword(password: string, saltHex: string) {\n const enc = new TextEncoder();\n const km = await crypto.subtle.importKey(\"raw\", enc.encode(password), \"PBKDF2\", false, [\"deriveBits\"]);\n const bits = await crypto.subtle.deriveBits(\n { name: \"PBKDF2\", salt: hexToBytes(saltHex), iterations: 100000, hash: \"SHA-256\" }, km, 256,\n );\n return bytesToHex(new Uint8Array(bits));\n}\nasync function hmac(data: string, secret: string) {\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\"raw\", enc.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const sig = await crypto.subtle.sign(\"HMAC\", key, enc.encode(data));\n return bytesToHex(new Uint8Array(sig));\n}\nasync function makeToken(userId: number, secret: string) {\n const exp = Date.now() + 1000 * 60 * 60 * 24 * 30;\n const payload = userId + \".\" + exp;\n return payload + \".\" + (await hmac(payload, secret));\n}\nasync function verifyToken(token: string, secret: string): Promise {\n const parts = (token || \"\").split(\".\");\n if (parts.length !== 3) return null;\n const expected = await hmac(parts[0] + \".\" + parts[1], secret);\n if (parts[2] !== expected) return null;\n if (Date.now() > Number(parts[1])) return null;\n return Number(parts[0]);\n}\nasync function getSecret() {\n let r = rows(await sqlite.execute(`SELECT v FROM pantry_meta WHERE k = 'auth_secret'`));\n if (r.length) return r[0].v;\n await sqlite.execute({ sql: `INSERT OR IGNORE INTO pantry_meta (k, v) VALUES ('auth_secret', ?)`, args: [randomHex(32)] });\n r = rows(await sqlite.execute(`SELECT v FROM pantry_meta WHERE k = 'auth_secret'`));\n return r[0].v;\n}\nconst getUserByUsername = async (u: string) =>\n rows(await sqlite.execute({ sql: `SELECT * FROM pantry_users WHERE username = ?`, args: [u] }))[0];\nconst getUserById = async (id: number) =>\n rows(await sqlite.execute({ sql: `SELECT * FROM pantry_users WHERE id = ?`, args: [id] }))[0];\n\nasync function currentUserId(req: Request): Promise {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const m = cookie.match(/(?:^|;\\s*)session=([^;]+)/);\n if (!m) return null;\n try {\n return await verifyToken(decodeURIComponent(m[1]), await getSecret());\n } catch {\n return null;\n }\n}\nasync function handleLogin(req: Request) {\n const body = await req.json().catch(() => ({}));\n const u = await getUserByUsername(String(body.username || \"\").trim().toLowerCase());\n if (!u || !u.pass_hash) return json({ error: \"invalid\", message: \"Wrong username or password.\" }, 401);\n const hash = await hashPassword(String(body.password || \"\"), u.pass_salt);\n if (hash !== u.pass_hash) return json({ error: \"invalid\", message: \"Wrong username or password.\" }, 401);\n const token = await makeToken(u.id, await getSecret());\n return new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"content-type\": \"application/json\", \"set-cookie\": sessionCookie(token) },\n });\n}\nasync function handleClaim(req: Request) {\n const body = await req.json().catch(() => ({}));\n const token = String(body.token || \"\");\n const password = String(body.password || \"\");\n if (!token || password.length < 6) return json({ error: \"bad\", message: \"Choose a password of at least 6 characters.\" }, 400);\n const u = rows(await sqlite.execute({ sql: `SELECT * FROM pantry_users WHERE claim_token = ?`, args: [token] }))[0];\n if (!u) return json({ error: \"bad_token\", message: \"This setup link is invalid or has already been used.\" }, 400);\n const salt = randomHex(16);\n const hash = await hashPassword(password, salt);\n const name = String(body.displayName || u.display_name || u.username).slice(0, 40);\n await sqlite.execute({\n sql: `UPDATE pantry_users SET pass_salt = ?, pass_hash = ?, display_name = ?, claim_token = NULL WHERE id = ?`,\n args: [salt, hash, name, u.id],\n });\n const token2 = await makeToken(u.id, await getSecret());\n return new Response(JSON.stringify({ ok: true, username: u.username }), {\n status: 200,\n headers: { \"content-type\": \"application/json\", \"set-cookie\": sessionCookie(token2) },\n });\n}\nconst logoutResponse = () =>\n new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"content-type\": \"application/json\", \"set-cookie\": clearCookie() },\n });\n\n// Inject a small sign-out control + session-expiry handling into the imported app HTML,\n// without modifying the original frontend file.\nfunction appPage(): string {\n const inject = ``;\n return HTML.replace(\"\", inject + \"\");\n}\n\n// =================== HANDLER ===================\nexport default async function (req: Request): Promise {\n await ensureSchema();\n const url = new URL(req.url);\n const path = url.pathname;\n const method = req.method;\n\n try {\n // ---- public auth routes ----\n if (path === \"/api/login\" && method === \"POST\") return await handleLogin(req);\n if (path === \"/api/logout\" && method === \"POST\") return logoutResponse();\n if (path === \"/claim\") return new Response(CLAIM_HTML, { headers: htmlHeaders });\n if (path === \"/api/claim\" && method === \"POST\") return await handleClaim(req);\n\n const userId = await currentUserId(req);\n\n if (path === \"/\" || path === \"\") {\n return new Response(userId ? appPage() : LOGIN_HTML, { headers: htmlHeaders });\n }\n if (path === \"/api/me\" && method === \"GET\") {\n if (!userId) return json({ error: \"unauthorized\" }, 401);\n const u = await getUserById(userId);\n return json({ username: u.username, displayName: u.display_name || u.username });\n }\n\n // ---- everything below requires a signed-in user ----\n if (!userId) return json({ error: \"unauthorized\" }, 401);\n\n if (path === \"/api/state\" && method === \"GET\") return json(await getState(userId));\n\n // PANTRY\n if (path === \"/api/pantry\" && method === \"POST\") {\n const body = await req.json();\n for (const it of (body.items || [])) await addOrMergePantry(it, userId);\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ?, unit = ? WHERE id = ? AND user_id = ?`,\n args: [body.quantity ?? null, body.unit ?? null, id, userId],\n });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n\n // RECIPES\n if (path === \"/api/recipes/generate\" && method === \"POST\") {\n const body = await req.json();\n return json(await generateRecipes(body.tier, body.note, userId));\n }\n if (path === \"/api/recipes/save\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n await sqlite.execute({\n sql: `INSERT INTO recipes (title, tier, active_minutes, total_minutes, ingredients, steps, created_at, user_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [r.title, r.tier || \"\", r.activeMinutes || 0, r.totalMinutes || 0,\n JSON.stringify(r.ingredients || []), JSON.stringify(r.steps || []), nowISO(), userId],\n });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/recipes/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM recipes WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n if (path === \"/api/cook\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n const deducted = await cookRecipe(r, userId);\n return json({ deducted, state: await getState(userId) });\n }\n\n // SHOPPING\n if (path === \"/api/shopping\" && method === \"POST\") {\n const items = (await req.json()).items || [];\n for (const it of items) {\n await sqlite.execute({\n sql: `INSERT INTO shopping (name, quantity, unit, checked, added_at, user_id) VALUES (?, ?, ?, 0, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, nowISO(), userId],\n });\n }\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({ sql: `UPDATE shopping SET checked = ? WHERE id = ? AND user_id = ?`, args: [body.checked ? 1 : 0, id, userId] });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n if (path === \"/api/shopping/clear-checked\" && method === \"POST\") {\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE checked = 1 AND user_id = ?`, args: [userId] });\n return json(await getState(userId));\n }\n\n // RECEIPT (parsing only, no DB writes)\n if (path === \"/api/receipt\" && method === \"POST\") {\n const body = await req.json();\n return json(await parseReceipt(body.image, body.mimeType || \"image/jpeg\"));\n }\n\n return json({ error: \"not found\", path }, 404);\n } catch (e) {\n const msg = String(e && (e as any).message ? (e as any).message : e);\n if (msg.includes(\"NO_API_KEY\")) {\n return json({ error: \"no_api_key\", message: \"Set ANTHROPIC_API_KEY in this val's environment variables to enable recipes and receipt scanning.\" }, 400);\n }\n return json({ error: \"server_error\", message: msg }, 500);\n }\n}\n\n// =================== LOGIN PAGE ===================\nconst LOGIN_HTML = `\n\n\n\n\nSign in \\u00b7 Pantry\n\n\n

Your Pantry

\nUsername\n\nPassword\n\n\n

Have a setup link? Open it to create your password.

\n\n`;\n\n// =================== ACCOUNT SETUP PAGE ===================\nconst CLAIM_HTML = `\n\n\n\n\nSet up your account \\u00b7 Pantry\n\n\n

Set up your account

Create a password to start using your pantry.

\nYour name\n\nChoose a password\n\nConfirm password\n\n\n

\n\n`;\n","createdAt",["D",1782833080583],"branchVersion","branchId","bbed7776-5d27-11f1-8314-1607ee4eb77e","id","bbecafbc-5d27-11f1-8314-1607ee4eb77e","pantry",["D",1780256066315],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Living pantry: receipt scan, recipe generation, shopping list","imageUrl","019c452d-eb8d-7124-ac84-fd3eee7429af","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019c452d-eb8d-7124-ac85-003287cdb181","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_94":93,"_102":98},"org",{"_94":93,"_95":96,"_97":98,"_18":53,"_99":100,"_101":24},"branch",{"_13":83,"_31":84,"_41":40,"_85":42,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":43,"_92":93},"isOwned",8,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","wohara010","handle","displayName","Billy","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/189d5be3-0aea-450f-0b6c-366cb482cb00/square512?exp=1789590552&sig=96ea40574729f3e742543e0d5f8c23c572556cc3a2833bff4dcc2f3d0ebdc995","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":162,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":30,"_55":56,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":163,"_78":164,"_80":165,"_82":24},"tree",[153,154],"files",[153,154],"counts",{"_142":60,"_143":144,"_145":60,"_146":147,"_148":149},"contents",[125,126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":133,"_31":134,"_29":135,"_128":-5,"_39":40,"_38":136,"_129":56,"_36":137,"_13":138,"_32":139,"_34":140,"_23":24,"_131":-5,"_26":141},{"_41":127,"_31":27,"_29":30,"_128":-5,"_39":40,"_38":14,"_129":24,"_36":130,"_13":60,"_32":33,"_34":35,"_23":24,"_131":-5,"_26":132},"d581852c-4424-423b-829e-2a0f7752b6bc","parentId","latest",["D",1782833080583],"label",[27],"bec9443f-a862-4017-8cf9-915fd3bcb4b1","core.tsx","019f191f-26a4-751b-bc0a-586b3b461a12",5,["D",1782832909338],2,"script","/** Living Pantry — Val Town MVP\n * Single-file HTTP val: SQLite storage + Anthropic API (recipes + receipt OCR) + mobile UI.\n * Requires env var ANTHROPIC_API_KEY (set in val settings) for recipe generation & receipt scan.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst MODEL = \"claude-sonnet-4-6\";\nconst ANTHROPIC_URL = \"https://api.anthropic.com/v1/messages\";\n\n// ---------- DB ----------\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS pantry (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n quantity REAL,\n unit TEXT,\n category TEXT,\n added_at TEXT,\n shelf_life_days INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS shopping (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n quantity REAL,\n unit TEXT,\n checked INTEGER DEFAULT 0,\n added_at TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS recipes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL,\n tier TEXT,\n active_minutes INTEGER,\n total_minutes INTEGER,\n ingredients TEXT,\n steps TEXT,\n created_at TEXT\n )`,\n ]);\n schemaReady = true;\n}\n\nfunction rows(result: any): any[] {\n const cols = result.columns as string[];\n return (result.rows as any[][]).map((r) =>\n Object.fromEntries(cols.map((c, i) => [c, r[i]]))\n );\n}\n\nconst nowISO = () => new Date().toISOString();\nconst norm = (s: string) => (s || \"\").trim().toLowerCase();\n\n// ---------- Anthropic ----------\nasync function callClaude(opts: {\n system: string;\n content: any;\n maxTokens?: number;\n}): Promise {\n const key = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!key) throw new Error(\"NO_API_KEY\");\n const res = await fetch(ANTHROPIC_URL, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": key,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: MODEL,\n max_tokens: opts.maxTokens ?? 2000,\n system: opts.system,\n messages: [{ role: \"user\", content: opts.content }],\n }),\n });\n if (!res.ok) {\n const t = await res.text();\n throw new Error(\"ANTHROPIC_ERROR \" + res.status + \" \" + t.slice(0, 300));\n }\n const data = await res.json();\n return (data.content || [])\n .filter((b: any) => b.type === \"text\")\n .map((b: any) => b.text)\n .join(\"\\n\");\n}\n\nfunction parseJSON(text: string): any {\n let t = (text || \"\").trim();\n t = t.replace(/^```(?:json)?/i, \"\").replace(/```$/i, \"\").trim();\n const firstObj = t.search(/[\\[{]/);\n if (firstObj > 0) t = t.slice(firstObj);\n const lastClose = Math.max(t.lastIndexOf(\"}\"), t.lastIndexOf(\"]\"));\n if (lastClose >= 0) t = t.slice(0, lastClose + 1);\n return JSON.parse(t);\n}\n\n// ---------- helpers ----------\nconst json = (obj: any, status = 200) =>\n new Response(JSON.stringify(obj), {\n status,\n headers: { \"content-type\": \"application/json\" },\n });\n\nconst safeParse = (s: any) => {\n try { return JSON.parse(s); } catch { return []; }\n};\n\nasync function getState() {\n const pantry = rows(await sqlite.execute(`SELECT * FROM pantry ORDER BY category, name`));\n const shopping = rows(await sqlite.execute(`SELECT * FROM shopping ORDER BY checked, name`));\n const recipes = rows(await sqlite.execute(`SELECT * FROM recipes ORDER BY created_at DESC`)).map(\n (r) => ({ ...r, ingredients: safeParse(r.ingredients), steps: safeParse(r.steps) })\n );\n const today = Date.now();\n for (const p of pantry) {\n if (p.added_at && p.shelf_life_days) {\n const ageDays = (today - Date.parse(p.added_at)) / 86400000;\n p.days_left = Math.round(p.shelf_life_days - ageDays);\n } else {\n p.days_left = null;\n }\n }\n return { pantry, shopping, recipes };\n}\n\n// ---------- main handler ----------\nexport default async function (req: Request): Promise {\n await ensureSchema();\n const url = new URL(req.url);\n const path = url.pathname;\n const method = req.method;\n\n try {\n if (path === \"/\" || path === \"\") {\n return new Response(HTML, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n }\n\n if (path === \"/api/state\" && method === \"GET\") {\n return json(await getState());\n }\n\n // ---- PANTRY ----\n if (path === \"/api/pantry\" && method === \"POST\") {\n const body = await req.json();\n const items = body.items || [];\n for (const it of items) await addOrMergePantry(it);\n return json(await getState());\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ?, unit = ? WHERE id = ?`,\n args: [body.quantity ?? null, body.unit ?? null, id],\n });\n return json(await getState());\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ?`, args: [id] });\n return json(await getState());\n }\n\n // ---- RECIPES ----\n if (path === \"/api/recipes/generate\" && method === \"POST\") {\n const body = await req.json();\n return json(await generateRecipes(body.tier, body.note));\n }\n if (path === \"/api/recipes/save\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n await sqlite.execute({\n sql: `INSERT INTO recipes (title, tier, active_minutes, total_minutes, ingredients, steps, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [r.title, r.tier || \"\", r.activeMinutes || 0, r.totalMinutes || 0,\n JSON.stringify(r.ingredients || []), JSON.stringify(r.steps || []), nowISO()],\n });\n return json(await getState());\n }\n if (path.startsWith(\"/api/recipes/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM recipes WHERE id = ?`, args: [id] });\n return json(await getState());\n }\n if (path === \"/api/cook\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n const deducted = await cookRecipe(r);\n return json({ deducted, state: await getState() });\n }\n\n // ---- SHOPPING ----\n if (path === \"/api/shopping\" && method === \"POST\") {\n const items = (await req.json()).items || [];\n for (const it of items) {\n await sqlite.execute({\n sql: `INSERT INTO shopping (name, quantity, unit, checked, added_at) VALUES (?, ?, ?, 0, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, nowISO()],\n });\n }\n return json(await getState());\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({\n sql: `UPDATE shopping SET checked = ? WHERE id = ?`,\n args: [body.checked ? 1 : 0, id],\n });\n return json(await getState());\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE id = ?`, args: [id] });\n return json(await getState());\n }\n if (path === \"/api/shopping/clear-checked\" && method === \"POST\") {\n await sqlite.execute(`DELETE FROM shopping WHERE checked = 1`);\n return json(await getState());\n }\n\n // ---- RECEIPT ----\n if (path === \"/api/receipt\" && method === \"POST\") {\n const body = await req.json();\n return json(await parseReceipt(body.image, body.mimeType || \"image/jpeg\"));\n }\n\n return json({ error: \"not found\", path }, 404);\n } catch (e) {\n const msg = String(e && e.message ? e.message : e);\n if (msg.includes(\"NO_API_KEY\")) {\n return json({ error: \"no_api_key\", message: \"Set ANTHROPIC_API_KEY in this val's environment variables to enable recipes and receipt scanning.\" }, 400);\n }\n return json({ error: \"server_error\", message: msg }, 500);\n }\n}\n\nasync function addOrMergePantry(it: any) {\n const existing = rows(await sqlite.execute({\n sql: `SELECT * FROM pantry WHERE lower(name) = ? AND ifnull(unit,'') = ifnull(?, '')`,\n args: [norm(it.name), it.unit ?? null],\n }));\n if (existing.length && typeof it.quantity === \"number\") {\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ifnull(quantity,0) + ?, added_at = ? WHERE id = ?`,\n args: [it.quantity, nowISO(), existing[0].id],\n });\n } else if (existing.length) {\n await sqlite.execute({ sql: `UPDATE pantry SET added_at = ? WHERE id = ?`, args: [nowISO(), existing[0].id] });\n } else {\n await sqlite.execute({\n sql: `INSERT INTO pantry (name, quantity, unit, category, added_at, shelf_life_days) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, it.category ?? null, nowISO(), it.shelf_life_days ?? null],\n });\n }\n}\n\nasync function generateRecipes(tier: string, note: string) {\n const pantry = rows(await sqlite.execute(`SELECT name, quantity, unit FROM pantry`));\n const tierGuide: Record = {\n quick: \"QUICK: hands-on (active) time at most 15 minutes. Minimal chopping/steps. OK if total time is longer due to hands-off waiting.\",\n moderate: \"MODERATE: active time roughly 15-35 minutes.\",\n involved: \"INVOLVED: active time may exceed 35 minutes; more technique and components allowed.\",\n };\n const system =\n \"You are a recipe generator for a pantry app. Given a user's pantry, propose exactly 3 distinct recipes at the requested effort tier. \" +\n \"Tier is defined by ACTIVE (hands-on) time, not total clock time. \" + (tierGuide[tier] || tierGuide.moderate) + \" \" +\n \"Assume these staples are always on hand: salt, pepper, cooking oil, butter, water, common dried spices. \" +\n \"Prefer recipes that use what's in the pantry. You MAY include up to 3 items the user must buy (put them in needToBuy). \" +\n \"Respond with ONLY valid JSON, no prose, no markdown. Schema: \" +\n '{\"recipes\":[{\"title\":string,\"tier\":string,\"activeMinutes\":number,\"totalMinutes\":number,' +\n '\"ingredients\":[{\"name\":string,\"quantity\":number,\"unit\":string}],' +\n '\"needToBuy\":[{\"name\":string,\"quantity\":number,\"unit\":string}],\"steps\":[string]}]}';\n const userMsg =\n \"Pantry: \" + JSON.stringify(pantry) + \"\\nTier: \" + tier +\n (note ? \"\\nUser note: \" + note : \"\") +\n \"\\nReturn 3 recipes as JSON.\";\n const text = await callClaude({ system, content: userMsg, maxTokens: 3000 });\n const parsed = parseJSON(text);\n return { recipes: parsed.recipes || [] };\n}\n\nasync function cookRecipe(r: any) {\n const pantry = rows(await sqlite.execute(`SELECT * FROM pantry`));\n const deducted: string[] = [];\n for (const ing of (r.ingredients || [])) {\n const match = pantry.find((p) => norm(p.name) === norm(ing.name) ||\n norm(p.name).includes(norm(ing.name)) || norm(ing.name).includes(norm(p.name)));\n if (!match) continue;\n if (typeof match.quantity === \"number\" && typeof ing.quantity === \"number\" &&\n norm(match.unit) === norm(ing.unit)) {\n const newQty = match.quantity - ing.quantity;\n if (newQty <= 0) {\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ?`, args: [match.id] });\n deducted.push(match.name + \" (used up)\");\n } else {\n await sqlite.execute({ sql: `UPDATE pantry SET quantity = ? WHERE id = ?`, args: [newQty, match.id] });\n deducted.push(match.name + \" (-\" + ing.quantity + \" \" + (ing.unit || \"\") + \")\");\n }\n } else {\n deducted.push(match.name + \" (used)\");\n }\n }\n return deducted;\n}\n\nasync function parseReceipt(imageB64: string, mimeType: string) {\n const system =\n \"You read a photographed grocery receipt and extract food/grocery items for a pantry inventory. \" +\n \"Normalize cryptic abbreviations to clear canonical food names (e.g. 'GV SHRD CHS' -> 'Shredded cheddar cheese'). \" +\n \"For each item estimate quantity and unit if inferable from the line; if package size is unknown, set quantity to 1 and unit to 'pkg'. \" +\n \"Assign a category (produce, dairy, meat, seafood, bakery, frozen, pantry, beverage, snack, other) and an estimated shelf_life_days. \" +\n \"Skip non-food lines: totals, tax, subtotal, payment, change, loyalty, bags. \" +\n \"Respond with ONLY valid JSON, no prose. Schema: \" +\n '{\"items\":[{\"name\":string,\"quantity\":number,\"unit\":string,\"category\":string,\"shelf_life_days\":number,\"rawLine\":string}]}';\n const content = [\n { type: \"image\", source: { type: \"base64\", media_type: mimeType, data: imageB64 } },\n { type: \"text\", text: \"Extract the grocery items from this receipt as JSON.\" },\n ];\n const text = await callClaude({ system, content, maxTokens: 2500 });\n const parsed = parseJSON(text);\n return { items: parsed.items || [] };\n}\n\n// =================== FRONTEND ===================\nconst HTML = `\n\n\n\n\n\nPantry\n\n\n\n

Your Pantry

\n\n

\n \n \n

\n \n

Quick-add staples

Tap to add common items.

\n\n

\n What do you feel like cooking?\n

Effort is based on hands-on time.

\n Quick\n Moderate\n Involved\n

\n \n \n

Saved recipes

\n\n

\n \n \n

\n \n

\n\n\n\n\n

\n\n\n\n`;\n\n\n// Re-export internals so the auth wrapper (main.tsx) can reuse the original app unchanged.\nexport { HTML, callClaude, parseJSON, rows, safeParse, nowISO, norm, parseReceipt };\n",[134],"pulls","branches",1,"forks","envVars",{"_150":60,"_152":60},"connections",{"_150":60,"_151":60},"count","unfilledCount","emptyCount",{"_41":133,"_31":134,"_29":135,"_128":-5,"_39":40,"_38":136,"_129":56,"_36":159,"_13":138,"_32":139,"_34":140,"_23":24,"_131":-5,"_156":160,"_26":161},{"_41":127,"_31":27,"_29":30,"_128":-5,"_39":40,"_38":14,"_129":24,"_36":155,"_13":60,"_32":33,"_34":35,"_23":24,"_131":-5,"_156":157,"_26":158},["D",1782833080583],"children",[],[27],["D",1782832909338],[],[134],["D",1780256066315],{"_94":93,"_102":98},{"_94":93,"_95":96,"_97":98,"_18":53,"_99":100,"_101":24},{"_13":83,"_31":84,"_41":40,"_85":42,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":43,"_92":93},"ctx",{"_76":-5,"_122":199,"_200":201,"_202":203,"_204":24,"_205":24,"_206":24,"_207":56,"_208":-5,"_209":-7,"_210":-7,"_211":60,"_212":24,"_213":24,"_214":-5,"_215":24,"_216":24,"_217":24,"_218":-5},"ENV",{"_170":171,"_172":173,"_174":84,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v7