[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_167":168,"_169":170},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",8,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","d022c0ca-7497-11f1-8760-1607ee4eb77e","name","fileType","http","content","/** Living Pantry — multi-user\n * Adds a login gate + per-user data (each person has their own private pantry).\n * The original single-file app (full frontend HTML + Claude helpers) is imported\n * unchanged from ./core.tsx; this file adds auth, per-user SQL scoping, and the\n * login / account-setup pages.\n * Requires env var ANTHROPIC_API_KEY for recipe generation & receipt scanning.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { HTML, callClaude, parseJSON, rows, safeParse, nowISO, norm, parseReceipt } from \"./core.tsx\";\n\nconst htmlHeaders = { \"content-type\": \"text/html; charset=utf-8\" };\nconst json = (obj: any, status = 200) =>\n new Response(JSON.stringify(obj), { status, headers: { \"content-type\": \"application/json\" } });\n\n// ---------- schema + migration ----------\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS pantry (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL, quantity REAL, unit TEXT, category TEXT,\n added_at TEXT, shelf_life_days INTEGER, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS shopping (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL, quantity REAL, unit TEXT, checked INTEGER DEFAULT 0,\n added_at TEXT, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS recipes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL, tier TEXT, active_minutes INTEGER, total_minutes INTEGER,\n ingredients TEXT, steps TEXT, created_at TEXT, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS pantry_users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT UNIQUE NOT NULL, display_name TEXT,\n pass_salt TEXT, pass_hash TEXT, claim_token TEXT, created_at TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS pantry_meta (k TEXT PRIMARY KEY, v TEXT)`,\n ]);\n // add user_id to legacy tables if it's missing (existing installs)\n for (const t of [\"pantry\", \"shopping\", \"recipes\"]) {\n const cols = rows(await sqlite.execute(`PRAGMA table_info(${t})`)).map((c: any) => c.name);\n if (!cols.includes(\"user_id\")) {\n await sqlite.execute(`ALTER TABLE ${t} ADD COLUMN user_id INTEGER`);\n }\n }\n // seed the two accounts on first run\n const existing = rows(await sqlite.execute(`SELECT id FROM pantry_users`));\n if (!existing.length) {\n await sqlite.execute({\n sql: `INSERT INTO pantry_users (username, display_name, claim_token, created_at) VALUES (?, ?, ?, ?)`,\n args: [\"wohara010\", \"You\", randomHex(24), nowISO()],\n });\n await sqlite.execute({\n sql: `INSERT INTO pantry_users (username, display_name, claim_token, created_at) VALUES (?, ?, ?, ?)`,\n args: [\"guest\", \"Guest\", randomHex(24), nowISO()],\n });\n }\n // back-fill any pre-existing pantry data to the owner account\n const owner = rows(await sqlite.execute(`SELECT id FROM pantry_users WHERE username = 'wohara010'`))[0];\n if (owner) {\n for (const t of [\"pantry\", \"shopping\", \"recipes\"]) {\n await sqlite.execute({ sql: `UPDATE ${t} SET user_id = ? WHERE user_id IS NULL`, args: [owner.id] });\n }\n }\n schemaReady = true;\n}\n\n// ---------- per-user data ----------\nasync function getState(userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT * FROM pantry WHERE user_id = ? ORDER BY category, name`, args: [userId] }));\n const shopping = rows(await sqlite.execute({ sql: `SELECT * FROM shopping WHERE user_id = ? ORDER BY checked, name`, args: [userId] }));\n const recipes = rows(await sqlite.execute({ sql: `SELECT * FROM recipes WHERE user_id = ? ORDER BY created_at DESC`, args: [userId] }))\n .map((r: any) => ({ ...r, ingredients: safeParse(r.ingredients), steps: safeParse(r.steps) }));\n const today = Date.now();\n for (const p of pantry) {\n if (p.added_at && p.shelf_life_days) {\n const ageDays = (today - Date.parse(p.added_at)) / 86400000;\n p.days_left = Math.round(p.shelf_life_days - ageDays);\n } else {\n p.days_left = null;\n }\n }\n return { pantry, shopping, recipes };\n}\n\nasync function addOrMergePantry(it: any, userId: number) {\n const existing = rows(await sqlite.execute({\n sql: `SELECT * FROM pantry WHERE user_id = ? AND lower(name) = ? AND ifnull(unit,'') = ifnull(?, '')`,\n args: [userId, norm(it.name), it.unit ?? null],\n }));\n if (existing.length && typeof it.quantity === \"number\") {\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ifnull(quantity,0) + ?, added_at = ? WHERE id = ?`,\n args: [it.quantity, nowISO(), existing[0].id],\n });\n } else if (existing.length) {\n await sqlite.execute({ sql: `UPDATE pantry SET added_at = ? WHERE id = ?`, args: [nowISO(), existing[0].id] });\n } else {\n await sqlite.execute({\n sql: `INSERT INTO pantry (name, quantity, unit, category, added_at, shelf_life_days, user_id) VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, it.category ?? null, nowISO(), it.shelf_life_days ?? null, userId],\n });\n }\n}\n\nasync function generateRecipes(tier: string, note: string, userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT name, quantity, unit FROM pantry WHERE user_id = ?`, args: [userId] }));\n const tierGuide: Record = {\n quick: \"QUICK: hands-on (active) time at most 15 minutes. Minimal chopping/steps. OK if total time is longer due to hands-off waiting.\",\n moderate: \"MODERATE: active time roughly 15-35 minutes.\",\n involved: \"INVOLVED: active time may exceed 35 minutes; more technique and components allowed.\",\n };\n const system =\n \"You are a recipe generator for a pantry app. Given a user's pantry, propose exactly 3 distinct recipes at the requested effort tier. \" +\n \"Tier is defined by ACTIVE (hands-on) time, not total clock time. \" + (tierGuide[tier] || tierGuide.moderate) + \" \" +\n \"Assume these staples are always on hand: salt, pepper, cooking oil, butter, water, common dried spices. \" +\n \"Prefer recipes that use what's in the pantry. You MAY include up to 3 items the user must buy (put them in needToBuy). \" +\n \"Respond with ONLY valid JSON, no prose, no markdown. Schema: \" +\n '{\"recipes\":[{\"title\":string,\"tier\":string,\"activeMinutes\":number,\"totalMinutes\":number,' +\n '\"ingredients\":[{\"name\":string,\"quantity\":number,\"unit\":string}],' +\n '\"needToBuy\":[{\"name\":string,\"quantity\":number,\"unit\":string}],\"steps\":[string]}]}';\n const userMsg =\n \"Pantry: \" + JSON.stringify(pantry) + \"\\nTier: \" + tier +\n (note ? \"\\nUser note: \" + note : \"\") +\n \"\\nReturn 3 recipes as JSON.\";\n const text = await callClaude({ system, content: userMsg, maxTokens: 3000 });\n const parsed = parseJSON(text);\n return { recipes: parsed.recipes || [] };\n}\n\nasync function cookRecipe(r: any, userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT * FROM pantry WHERE user_id = ?`, args: [userId] }));\n const deducted: string[] = [];\n for (const ing of (r.ingredients || [])) {\n const match = pantry.find((p: any) => norm(p.name) === norm(ing.name) ||\n norm(p.name).includes(norm(ing.name)) || norm(ing.name).includes(norm(p.name)));\n if (!match) continue;\n if (typeof match.quantity === \"number\" && typeof ing.quantity === \"number\" && norm(match.unit) === norm(ing.unit)) {\n const newQty = match.quantity - ing.quantity;\n if (newQty <= 0) {\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ? AND user_id = ?`, args: [match.id, userId] });\n deducted.push(match.name + \" (used up)\");\n } else {\n await sqlite.execute({ sql: `UPDATE pantry SET quantity = ? WHERE id = ? AND user_id = ?`, args: [newQty, match.id, userId] });\n deducted.push(match.name + \" (-\" + ing.quantity + \" \" + (ing.unit || \"\") + \")\");\n }\n } else {\n deducted.push(match.name + \" (used)\");\n }\n }\n return deducted;\n}\n\n// =================== AUTH ===================\nconst COOKIE_BASE = \"HttpOnly; Secure; SameSite=Lax; Path=/\";\nconst sessionCookie = (token: string) => `session=${token}; ${COOKIE_BASE}; Max-Age=2592000`;\nconst clearCookie = () => `session=; ${COOKIE_BASE}; Max-Age=0`;\n\nfunction randomHex(nBytes: number) {\n const a = new Uint8Array(nBytes);\n crypto.getRandomValues(a);\n return Array.from(a).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction hexToBytes(hex: string) {\n const a = new Uint8Array(hex.length / 2);\n for (let i = 0; i < a.length; i++) a[i] = parseInt(hex.substr(i * 2, 2), 16);\n return a;\n}\nfunction bytesToHex(b: Uint8Array) {\n return Array.from(b).map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function hashPassword(password: string, saltHex: string) {\n const enc = new TextEncoder();\n const km = await crypto.subtle.importKey(\"raw\", enc.encode(password), \"PBKDF2\", false, [\"deriveBits\"]);\n const bits = await crypto.subtle.deriveBits(\n { name: \"PBKDF2\", salt: hexToBytes(saltHex), iterations: 100000, hash: \"SHA-256\" }, km, 256,\n );\n return bytesToHex(new Uint8Array(bits));\n}\nasync function hmac(data: string, secret: string) {\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\"raw\", enc.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const sig = await crypto.subtle.sign(\"HMAC\", key, enc.encode(data));\n return bytesToHex(new Uint8Array(sig));\n}\nasync function makeToken(userId: number, secret: string) {\n const exp = Date.now() + 1000 * 60 * 60 * 24 * 30;\n const payload = userId + \".\" + exp;\n return payload + \".\" + (await hmac(payload, secret));\n}\nasync function verifyToken(token: string, secret: string): Promise {\n const parts = (token || \"\").split(\".\");\n if (parts.length !== 3) return null;\n const expected = await hmac(parts[0] + \".\" + parts[1], secret);\n if (parts[2] !== expected) return null;\n if (Date.now() > Number(parts[1])) return null;\n return Number(parts[0]);\n}\nasync function getSecret() {\n let r = rows(await sqlite.execute(`SELECT v FROM pantry_meta WHERE k = 'auth_secret'`));\n if (r.length) return r[0].v;\n await sqlite.execute({ sql: `INSERT OR IGNORE INTO pantry_meta (k, v) VALUES ('auth_secret', ?)`, args: [randomHex(32)] });\n r = rows(await sqlite.execute(`SELECT v FROM pantry_meta WHERE k = 'auth_secret'`));\n return r[0].v;\n}\nconst getUserByUsername = async (u: string) =>\n rows(await sqlite.execute({ sql: `SELECT * FROM pantry_users WHERE username = ?`, args: [u] }))[0];\nconst getUserById = async (id: number) =>\n rows(await sqlite.execute({ sql: `SELECT * FROM pantry_users WHERE id = ?`, args: [id] }))[0];\n\nasync function currentUserId(req: Request): Promise {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const m = cookie.match(/(?:^|;\\s*)session=([^;]+)/);\n if (!m) return null;\n try {\n return await verifyToken(decodeURIComponent(m[1]), await getSecret());\n } catch {\n return null;\n }\n}\nasync function handleLogin(req: Request) {\n const body = await req.json().catch(() => ({}));\n const u = await getUserByUsername(String(body.username || \"\").trim().toLowerCase());\n if (!u || !u.pass_hash) return json({ error: \"invalid\", message: \"Wrong username or password.\" }, 401);\n const hash = await hashPassword(String(body.password || \"\"), u.pass_salt);\n if (hash !== u.pass_hash) return json({ error: \"invalid\", message: \"Wrong username or password.\" }, 401);\n const token = await makeToken(u.id, await getSecret());\n return new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"content-type\": \"application/json\", \"set-cookie\": sessionCookie(token) },\n });\n}\nasync function handleClaim(req: Request) {\n const body = await req.json().catch(() => ({}));\n const token = String(body.token || \"\");\n const password = String(body.password || \"\");\n if (!token || password.length < 6) return json({ error: \"bad\", message: \"Choose a password of at least 6 characters.\" }, 400);\n const u = rows(await sqlite.execute({ sql: `SELECT * FROM pantry_users WHERE claim_token = ?`, args: [token] }))[0];\n if (!u) return json({ error: \"bad_token\", message: \"This setup link is invalid or has already been used.\" }, 400);\n const salt = randomHex(16);\n const hash = await hashPassword(password, salt);\n const name = String(body.displayName || u.display_name || u.username).slice(0, 40);\n await sqlite.execute({\n sql: `UPDATE pantry_users SET pass_salt = ?, pass_hash = ?, display_name = ?, claim_token = NULL WHERE id = ?`,\n args: [salt, hash, name, u.id],\n });\n const token2 = await makeToken(u.id, await getSecret());\n return new Response(JSON.stringify({ ok: true, username: u.username }), {\n status: 200,\n headers: { \"content-type\": \"application/json\", \"set-cookie\": sessionCookie(token2) },\n });\n}\nconst logoutResponse = () =>\n new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"content-type\": \"application/json\", \"set-cookie\": clearCookie() },\n });\n\n// Inject a small sign-out control + session-expiry handling into the imported app HTML,\n// without modifying the original frontend file.\nfunction appPage(): string {\n const inject = ``;\n return HTML.replace(\"\", inject + \"\");\n}\n\n// =================== HANDLER ===================\nexport default async function (req: Request): Promise {\n await ensureSchema();\n const url = new URL(req.url);\n const path = url.pathname;\n const method = req.method;\n\n try {\n // ---- public auth routes ----\n if (path === \"/api/login\" && method === \"POST\") return await handleLogin(req);\n if (path === \"/api/logout\" && method === \"POST\") return logoutResponse();\n if (path === \"/claim\") return new Response(CLAIM_HTML, { headers: htmlHeaders });\n if (path === \"/api/claim\" && method === \"POST\") return await handleClaim(req);\n\n const userId = await currentUserId(req);\n\n if (path === \"/\" || path === \"\") {\n return new Response(userId ? appPage() : LOGIN_HTML, { headers: htmlHeaders });\n }\n if (path === \"/api/me\" && method === \"GET\") {\n if (!userId) return json({ error: \"unauthorized\" }, 401);\n const u = await getUserById(userId);\n return json({ username: u.username, displayName: u.display_name || u.username });\n }\n\n // ---- everything below requires a signed-in user ----\n if (!userId) return json({ error: \"unauthorized\" }, 401);\n\n if (path === \"/api/state\" && method === \"GET\") return json(await getState(userId));\n\n // PANTRY\n if (path === \"/api/pantry\" && method === \"POST\") {\n const body = await req.json();\n for (const it of (body.items || [])) await addOrMergePantry(it, userId);\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ?, unit = ? WHERE id = ? AND user_id = ?`,\n args: [body.quantity ?? null, body.unit ?? null, id, userId],\n });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n\n // RECIPES\n if (path === \"/api/recipes/generate\" && method === \"POST\") {\n const body = await req.json();\n return json(await generateRecipes(body.tier, body.note, userId));\n }\n if (path === \"/api/recipes/save\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n await sqlite.execute({\n sql: `INSERT INTO recipes (title, tier, active_minutes, total_minutes, ingredients, steps, created_at, user_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [r.title, r.tier || \"\", r.activeMinutes || 0, r.totalMinutes || 0,\n JSON.stringify(r.ingredients || []), JSON.stringify(r.steps || []), nowISO(), userId],\n });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/recipes/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM recipes WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n if (path === \"/api/cook\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n const deducted = await cookRecipe(r, userId);\n return json({ deducted, state: await getState(userId) });\n }\n\n // SHOPPING\n if (path === \"/api/shopping\" && method === \"POST\") {\n const items = (await req.json()).items || [];\n for (const it of items) {\n await sqlite.execute({\n sql: `INSERT INTO shopping (name, quantity, unit, checked, added_at, user_id) VALUES (?, ?, ?, 0, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, nowISO(), userId],\n });\n }\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({ sql: `UPDATE shopping SET checked = ? WHERE id = ? AND user_id = ?`, args: [body.checked ? 1 : 0, id, userId] });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n if (path === \"/api/shopping/clear-checked\" && method === \"POST\") {\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE checked = 1 AND user_id = ?`, args: [userId] });\n return json(await getState(userId));\n }\n\n // RECEIPT (parsing only, no DB writes)\n if (path === \"/api/receipt\" && method === \"POST\") {\n const body = await req.json();\n return json(await parseReceipt(body.image, body.mimeType || \"image/jpeg\"));\n }\n\n return json({ error: \"not found\", path }, 404);\n } catch (e) {\n const msg = String(e && (e as any).message ? (e as any).message : e);\n if (msg.includes(\"NO_API_KEY\")) {\n return json({ error: \"no_api_key\", message: \"Set ANTHROPIC_API_KEY in this val's environment variables to enable recipes and receipt scanning.\" }, 400);\n }\n return json({ error: \"server_error\", message: msg }, 500);\n }\n}\n\n// =================== LOGIN PAGE ===================\nconst LOGIN_HTML = `\n\n\n\n\nSign in \\u00b7 Pantry\n\n\n

Your Pantry

\nUsername\n\nPassword\n\n\n

Have a setup link? Open it to create your password.

\n\n`;\n\n// =================== ACCOUNT SETUP PAGE ===================\nconst CLAIM_HTML = `\n\n\n\n\nSet up your account \\u00b7 Pantry\n\n\n

Set up your account

Create a password to start using your pantry.

\nYour name\n\nChoose a password\n\nConfirm password\n\n\n

\n\n`;\n","/** Living Pantry — name-based profiles (no passwords)\n * Type your name -> opens your own private pantry. Each name has separate data.\n * The original single-file app (full frontend HTML + Claude helpers) is imported\n * unchanged from ./core.tsx; this file adds the name gate + per-user SQL scoping.\n * Requires env var ANTHROPIC_API_KEY for recipe generation & receipt scanning.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { HTML, callClaude, parseJSON, rows, safeParse, nowISO, norm, parseReceipt } from \"./core.tsx\";\n\nconst htmlHeaders = { \"content-type\": \"text/html; charset=utf-8\" };\nconst json = (obj: any, status = 200) =>\n new Response(JSON.stringify(obj), { status, headers: { \"content-type\": \"application/json\" } });\n\n// Profiles to ensure exist. Add names here (or ask) to create more pantries.\nconst PROFILES = [\"Billy\", \"Yos\"];\n\n// ---------- schema + migration ----------\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS pantry (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL, quantity REAL, unit TEXT, category TEXT,\n added_at TEXT, shelf_life_days INTEGER, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS shopping (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL, quantity REAL, unit TEXT, checked INTEGER DEFAULT 0,\n added_at TEXT, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS recipes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL, tier TEXT, active_minutes INTEGER, total_minutes INTEGER,\n ingredients TEXT, steps TEXT, created_at TEXT, user_id INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS pantry_users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT UNIQUE NOT NULL, display_name TEXT,\n pass_salt TEXT, pass_hash TEXT, claim_token TEXT, created_at TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS pantry_meta (k TEXT PRIMARY KEY, v TEXT)`,\n ]);\n // add user_id to legacy tables if it's missing (existing installs)\n for (const t of [\"pantry\", \"shopping\", \"recipes\"]) {\n const cols = rows(await sqlite.execute(`PRAGMA table_info(${t})`)).map((c: any) => c.name);\n if (!cols.includes(\"user_id\")) {\n await sqlite.execute(`ALTER TABLE ${t} ADD COLUMN user_id INTEGER`);\n }\n }\n // ensure each named profile exists (case-insensitive username, original-case display name)\n for (const nm of PROFILES) {\n const uname = nm.trim().toLowerCase();\n const ex = rows(await sqlite.execute({ sql: `SELECT id FROM pantry_users WHERE username = ?`, args: [uname] }));\n if (!ex.length) {\n await sqlite.execute({\n sql: `INSERT INTO pantry_users (username, display_name, created_at) VALUES (?, ?, ?)`,\n args: [uname, nm.trim(), nowISO()],\n });\n }\n }\n schemaReady = true;\n}\n\n// ---------- per-user data ----------\nasync function getState(userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT * FROM pantry WHERE user_id = ? ORDER BY category, name`, args: [userId] }));\n const shopping = rows(await sqlite.execute({ sql: `SELECT * FROM shopping WHERE user_id = ? ORDER BY checked, name`, args: [userId] }));\n const recipes = rows(await sqlite.execute({ sql: `SELECT * FROM recipes WHERE user_id = ? ORDER BY created_at DESC`, args: [userId] }))\n .map((r: any) => ({ ...r, ingredients: safeParse(r.ingredients), steps: safeParse(r.steps) }));\n const today = Date.now();\n for (const p of pantry) {\n if (p.added_at && p.shelf_life_days) {\n const ageDays = (today - Date.parse(p.added_at)) / 86400000;\n p.days_left = Math.round(p.shelf_life_days - ageDays);\n } else {\n p.days_left = null;\n }\n }\n return { pantry, shopping, recipes };\n}\n\nasync function addOrMergePantry(it: any, userId: number) {\n const existing = rows(await sqlite.execute({\n sql: `SELECT * FROM pantry WHERE user_id = ? AND lower(name) = ? AND ifnull(unit,'') = ifnull(?, '')`,\n args: [userId, norm(it.name), it.unit ?? null],\n }));\n if (existing.length && typeof it.quantity === \"number\") {\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ifnull(quantity,0) + ?, added_at = ? WHERE id = ?`,\n args: [it.quantity, nowISO(), existing[0].id],\n });\n } else if (existing.length) {\n await sqlite.execute({ sql: `UPDATE pantry SET added_at = ? WHERE id = ?`, args: [nowISO(), existing[0].id] });\n } else {\n await sqlite.execute({\n sql: `INSERT INTO pantry (name, quantity, unit, category, added_at, shelf_life_days, user_id) VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, it.category ?? null, nowISO(), it.shelf_life_days ?? null, userId],\n });\n }\n}\n\nasync function generateRecipes(tier: string, note: string, userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT name, quantity, unit FROM pantry WHERE user_id = ?`, args: [userId] }));\n const tierGuide: Record = {\n quick: \"QUICK: hands-on (active) time at most 15 minutes. Minimal chopping/steps. OK if total time is longer due to hands-off waiting.\",\n moderate: \"MODERATE: active time roughly 15-35 minutes.\",\n involved: \"INVOLVED: active time may exceed 35 minutes; more technique and components allowed.\",\n };\n const system =\n \"You are a recipe generator for a pantry app. Given a user's pantry, propose exactly 3 distinct recipes at the requested effort tier. \" +\n \"Tier is defined by ACTIVE (hands-on) time, not total clock time. \" + (tierGuide[tier] || tierGuide.moderate) + \" \" +\n \"Assume these staples are always on hand: salt, pepper, cooking oil, butter, water, common dried spices. \" +\n \"Prefer recipes that use what's in the pantry. You MAY include up to 3 items the user must buy (put them in needToBuy). \" +\n \"Respond with ONLY valid JSON, no prose, no markdown. Schema: \" +\n '{\"recipes\":[{\"title\":string,\"tier\":string,\"activeMinutes\":number,\"totalMinutes\":number,' +\n '\"ingredients\":[{\"name\":string,\"quantity\":number,\"unit\":string}],' +\n '\"needToBuy\":[{\"name\":string,\"quantity\":number,\"unit\":string}],\"steps\":[string]}]}';\n const userMsg =\n \"Pantry: \" + JSON.stringify(pantry) + \"\\nTier: \" + tier +\n (note ? \"\\nUser note: \" + note : \"\") +\n \"\\nReturn 3 recipes as JSON.\";\n const text = await callClaude({ system, content: userMsg, maxTokens: 3000 });\n const parsed = parseJSON(text);\n return { recipes: parsed.recipes || [] };\n}\n\nasync function cookRecipe(r: any, userId: number) {\n const pantry = rows(await sqlite.execute({ sql: `SELECT * FROM pantry WHERE user_id = ?`, args: [userId] }));\n const deducted: string[] = [];\n for (const ing of (r.ingredients || [])) {\n const match = pantry.find((p: any) => norm(p.name) === norm(ing.name) ||\n norm(p.name).includes(norm(ing.name)) || norm(ing.name).includes(norm(p.name)));\n if (!match) continue;\n if (typeof match.quantity === \"number\" && typeof ing.quantity === \"number\" && norm(match.unit) === norm(ing.unit)) {\n const newQty = match.quantity - ing.quantity;\n if (newQty <= 0) {\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ? AND user_id = ?`, args: [match.id, userId] });\n deducted.push(match.name + \" (used up)\");\n } else {\n await sqlite.execute({ sql: `UPDATE pantry SET quantity = ? WHERE id = ? AND user_id = ?`, args: [newQty, match.id, userId] });\n deducted.push(match.name + \" (-\" + ing.quantity + \" \" + (ing.unit || \"\") + \")\");\n }\n } else {\n deducted.push(match.name + \" (used)\");\n }\n }\n return deducted;\n}\n\n// =================== NAME-BASED SESSION ===================\nconst COOKIE_BASE = \"HttpOnly; Secure; SameSite=Lax; Path=/\";\nconst sessionCookie = (token: string) => `session=${token}; ${COOKIE_BASE}; Max-Age=2592000`;\nconst clearCookie = () => `session=; ${COOKIE_BASE}; Max-Age=0`;\n\nfunction randomHex(nBytes: number) {\n const a = new Uint8Array(nBytes);\n crypto.getRandomValues(a);\n return Array.from(a).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction bytesToHex(b: Uint8Array) {\n return Array.from(b).map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function hmac(data: string, secret: string) {\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\"raw\", enc.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const sig = await crypto.subtle.sign(\"HMAC\", key, enc.encode(data));\n return bytesToHex(new Uint8Array(sig));\n}\nasync function makeToken(userId: number, secret: string) {\n const exp = Date.now() + 1000 * 60 * 60 * 24 * 30;\n const payload = userId + \".\" + exp;\n return payload + \".\" + (await hmac(payload, secret));\n}\nasync function verifyToken(token: string, secret: string): Promise {\n const parts = (token || \"\").split(\".\");\n if (parts.length !== 3) return null;\n const expected = await hmac(parts[0] + \".\" + parts[1], secret);\n if (parts[2] !== expected) return null;\n if (Date.now() > Number(parts[1])) return null;\n return Number(parts[0]);\n}\nasync function getSecret() {\n let r = rows(await sqlite.execute(`SELECT v FROM pantry_meta WHERE k = 'auth_secret'`));\n if (r.length) return r[0].v;\n await sqlite.execute({ sql: `INSERT OR IGNORE INTO pantry_meta (k, v) VALUES ('auth_secret', ?)`, args: [randomHex(32)] });\n r = rows(await sqlite.execute(`SELECT v FROM pantry_meta WHERE k = 'auth_secret'`));\n return r[0].v;\n}\nconst getUserByUsername = async (u: string) =>\n rows(await sqlite.execute({ sql: `SELECT * FROM pantry_users WHERE username = ?`, args: [u] }))[0];\nconst getUserById = async (id: number) =>\n rows(await sqlite.execute({ sql: `SELECT * FROM pantry_users WHERE id = ?`, args: [id] }))[0];\n\nasync function currentUserId(req: Request): Promise {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const m = cookie.match(/(?:^|;\\s*)session=([^;]+)/);\n if (!m) return null;\n try {\n return await verifyToken(decodeURIComponent(m[1]), await getSecret());\n } catch {\n return null;\n }\n}\nasync function handleEnter(req: Request) {\n const body = await req.json().catch(() => ({}));\n const name = String(body.name || \"\").trim().toLowerCase();\n if (!name) return json({ error: \"bad\", message: \"Please type your name.\" }, 400);\n const u = await getUserByUsername(name);\n if (!u) return json({ error: \"not_found\", message: \"No pantry found for that name yet.\" }, 404);\n const token = await makeToken(u.id, await getSecret());\n return new Response(JSON.stringify({ ok: true, displayName: u.display_name || u.username }), {\n status: 200,\n headers: { \"content-type\": \"application/json\", \"set-cookie\": sessionCookie(token) },\n });\n}\nconst switchResponse = () =>\n new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"content-type\": \"application/json\", \"set-cookie\": clearCookie() },\n });\n\n// Inject a small \"Switch\" control + session handling into the imported app HTML,\n// without modifying the original frontend file.\nfunction appPage(): string {\n const inject = ``;\n return HTML.replace(\"\", inject + \"\");\n}\n\n// =================== HANDLER ===================\nexport default async function (req: Request): Promise {\n await ensureSchema();\n const url = new URL(req.url);\n const path = url.pathname;\n const method = req.method;\n\n try {\n // ---- public routes ----\n if (path === \"/api/enter\" && method === \"POST\") return await handleEnter(req);\n if (path === \"/api/switch\" && method === \"POST\") return switchResponse();\n\n const userId = await currentUserId(req);\n\n if (path === \"/\" || path === \"\") {\n return new Response(userId ? appPage() : NAME_HTML, { headers: htmlHeaders });\n }\n if (path === \"/api/me\" && method === \"GET\") {\n if (!userId) return json({ error: \"unauthorized\" }, 401);\n const u = await getUserById(userId);\n return json({ username: u.username, displayName: u.display_name || u.username });\n }\n\n // ---- everything below requires a chosen name ----\n if (!userId) return json({ error: \"unauthorized\" }, 401);\n\n if (path === \"/api/state\" && method === \"GET\") return json(await getState(userId));\n\n // PANTRY\n if (path === \"/api/pantry\" && method === \"POST\") {\n const body = await req.json();\n for (const it of (body.items || [])) await addOrMergePantry(it, userId);\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ?, unit = ? WHERE id = ? AND user_id = ?`,\n args: [body.quantity ?? null, body.unit ?? null, id, userId],\n });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n\n // RECIPES\n if (path === \"/api/recipes/generate\" && method === \"POST\") {\n const body = await req.json();\n return json(await generateRecipes(body.tier, body.note, userId));\n }\n if (path === \"/api/recipes/save\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n await sqlite.execute({\n sql: `INSERT INTO recipes (title, tier, active_minutes, total_minutes, ingredients, steps, created_at, user_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [r.title, r.tier || \"\", r.activeMinutes || 0, r.totalMinutes || 0,\n JSON.stringify(r.ingredients || []), JSON.stringify(r.steps || []), nowISO(), userId],\n });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/recipes/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM recipes WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n if (path === \"/api/cook\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n const deducted = await cookRecipe(r, userId);\n return json({ deducted, state: await getState(userId) });\n }\n\n // SHOPPING\n if (path === \"/api/shopping\" && method === \"POST\") {\n const items = (await req.json()).items || [];\n for (const it of items) {\n await sqlite.execute({\n sql: `INSERT INTO shopping (name, quantity, unit, checked, added_at, user_id) VALUES (?, ?, ?, 0, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, nowISO(), userId],\n });\n }\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({ sql: `UPDATE shopping SET checked = ? WHERE id = ? AND user_id = ?`, args: [body.checked ? 1 : 0, id, userId] });\n return json(await getState(userId));\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE id = ? AND user_id = ?`, args: [id, userId] });\n return json(await getState(userId));\n }\n if (path === \"/api/shopping/clear-checked\" && method === \"POST\") {\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE checked = 1 AND user_id = ?`, args: [userId] });\n return json(await getState(userId));\n }\n\n // RECEIPT (parsing only, no DB writes)\n if (path === \"/api/receipt\" && method === \"POST\") {\n const body = await req.json();\n return json(await parseReceipt(body.image, body.mimeType || \"image/jpeg\"));\n }\n\n return json({ error: \"not found\", path }, 404);\n } catch (e) {\n const msg = String(e && (e as any).message ? (e as any).message : e);\n if (msg.includes(\"NO_API_KEY\")) {\n return json({ error: \"no_api_key\", message: \"Set ANTHROPIC_API_KEY in this val's environment variables to enable recipes and receipt scanning.\" }, 400);\n }\n return json({ error: \"server_error\", message: msg }, 500);\n }\n}\n\n// =================== NAME ENTRY PAGE ===================\nconst NAME_HTML = `\n\n\n\n\nYour Pantry\n\n\n

🥤

Your Pantry

Type your name to open your pantry.

\n\n\n

\n\n`;\n","createdAt",["D",1785178198705],"branchVersion","branchId","bbed7776-5d27-11f1-8314-1607ee4eb77e","id","bbecafbc-5d27-11f1-8314-1607ee4eb77e","pantry",["D",1780256066315],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Living pantry: receipt scan, recipe generation, shopping list","imageUrl","019c452d-eb8d-7124-ac84-fd3eee7429af","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019c452d-eb8d-7124-ac85-003287cdb181","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},"branch",{"_13":14,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","wohara010","handle","displayName","Billy","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/189d5be3-0aea-450f-0b6c-366cb482cb00/square512?exp=1789590602&sig=616d40ab0e09996c8fe848b0df6976a29eaa04a59f03235955670ef23ea2a657","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":163,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":164,"_80":165,"_82":166,"_84":25},"tree",[154,155],"files",[154,155],"counts",{"_144":62,"_145":132,"_146":62,"_147":148,"_149":150},"contents",[126,127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":135,"_32":136,"_30":137,"_129":-5,"_41":42,"_40":138,"_130":58,"_38":139,"_13":140,"_33":141,"_35":142,"_24":25,"_133":-5,"_27":143},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":58,"_38":131,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_27":134},"094def83-f1fb-4688-91c7-3ea969524c68","parentId","latest",["D",1785178198705],1,"label",[28],"bec9443f-a862-4017-8cf9-915fd3bcb4b1","core.tsx","019f191f-26a4-751b-bc0a-586b3b461a12",5,["D",1782832909338],2,"script","/** Living Pantry — Val Town MVP\n * Single-file HTTP val: SQLite storage + Anthropic API (recipes + receipt OCR) + mobile UI.\n * Requires env var ANTHROPIC_API_KEY (set in val settings) for recipe generation & receipt scan.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst MODEL = \"claude-sonnet-4-6\";\nconst ANTHROPIC_URL = \"https://api.anthropic.com/v1/messages\";\n\n// ---------- DB ----------\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS pantry (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n quantity REAL,\n unit TEXT,\n category TEXT,\n added_at TEXT,\n shelf_life_days INTEGER\n )`,\n `CREATE TABLE IF NOT EXISTS shopping (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n quantity REAL,\n unit TEXT,\n checked INTEGER DEFAULT 0,\n added_at TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS recipes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL,\n tier TEXT,\n active_minutes INTEGER,\n total_minutes INTEGER,\n ingredients TEXT,\n steps TEXT,\n created_at TEXT\n )`,\n ]);\n schemaReady = true;\n}\n\nfunction rows(result: any): any[] {\n const cols = result.columns as string[];\n return (result.rows as any[][]).map((r) =>\n Object.fromEntries(cols.map((c, i) => [c, r[i]]))\n );\n}\n\nconst nowISO = () => new Date().toISOString();\nconst norm = (s: string) => (s || \"\").trim().toLowerCase();\n\n// ---------- Anthropic ----------\nasync function callClaude(opts: {\n system: string;\n content: any;\n maxTokens?: number;\n}): Promise {\n const key = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!key) throw new Error(\"NO_API_KEY\");\n const res = await fetch(ANTHROPIC_URL, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": key,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: MODEL,\n max_tokens: opts.maxTokens ?? 2000,\n system: opts.system,\n messages: [{ role: \"user\", content: opts.content }],\n }),\n });\n if (!res.ok) {\n const t = await res.text();\n throw new Error(\"ANTHROPIC_ERROR \" + res.status + \" \" + t.slice(0, 300));\n }\n const data = await res.json();\n return (data.content || [])\n .filter((b: any) => b.type === \"text\")\n .map((b: any) => b.text)\n .join(\"\\n\");\n}\n\nfunction parseJSON(text: string): any {\n let t = (text || \"\").trim();\n t = t.replace(/^```(?:json)?/i, \"\").replace(/```$/i, \"\").trim();\n const firstObj = t.search(/[\\[{]/);\n if (firstObj > 0) t = t.slice(firstObj);\n const lastClose = Math.max(t.lastIndexOf(\"}\"), t.lastIndexOf(\"]\"));\n if (lastClose >= 0) t = t.slice(0, lastClose + 1);\n return JSON.parse(t);\n}\n\n// ---------- helpers ----------\nconst json = (obj: any, status = 200) =>\n new Response(JSON.stringify(obj), {\n status,\n headers: { \"content-type\": \"application/json\" },\n });\n\nconst safeParse = (s: any) => {\n try { return JSON.parse(s); } catch { return []; }\n};\n\nasync function getState() {\n const pantry = rows(await sqlite.execute(`SELECT * FROM pantry ORDER BY category, name`));\n const shopping = rows(await sqlite.execute(`SELECT * FROM shopping ORDER BY checked, name`));\n const recipes = rows(await sqlite.execute(`SELECT * FROM recipes ORDER BY created_at DESC`)).map(\n (r) => ({ ...r, ingredients: safeParse(r.ingredients), steps: safeParse(r.steps) })\n );\n const today = Date.now();\n for (const p of pantry) {\n if (p.added_at && p.shelf_life_days) {\n const ageDays = (today - Date.parse(p.added_at)) / 86400000;\n p.days_left = Math.round(p.shelf_life_days - ageDays);\n } else {\n p.days_left = null;\n }\n }\n return { pantry, shopping, recipes };\n}\n\n// ---------- main handler ----------\nexport default async function (req: Request): Promise {\n await ensureSchema();\n const url = new URL(req.url);\n const path = url.pathname;\n const method = req.method;\n\n try {\n if (path === \"/\" || path === \"\") {\n return new Response(HTML, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n }\n\n if (path === \"/api/state\" && method === \"GET\") {\n return json(await getState());\n }\n\n // ---- PANTRY ----\n if (path === \"/api/pantry\" && method === \"POST\") {\n const body = await req.json();\n const items = body.items || [];\n for (const it of items) await addOrMergePantry(it);\n return json(await getState());\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ?, unit = ? WHERE id = ?`,\n args: [body.quantity ?? null, body.unit ?? null, id],\n });\n return json(await getState());\n }\n if (path.startsWith(\"/api/pantry/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ?`, args: [id] });\n return json(await getState());\n }\n\n // ---- RECIPES ----\n if (path === \"/api/recipes/generate\" && method === \"POST\") {\n const body = await req.json();\n return json(await generateRecipes(body.tier, body.note));\n }\n if (path === \"/api/recipes/save\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n await sqlite.execute({\n sql: `INSERT INTO recipes (title, tier, active_minutes, total_minutes, ingredients, steps, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [r.title, r.tier || \"\", r.activeMinutes || 0, r.totalMinutes || 0,\n JSON.stringify(r.ingredients || []), JSON.stringify(r.steps || []), nowISO()],\n });\n return json(await getState());\n }\n if (path.startsWith(\"/api/recipes/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM recipes WHERE id = ?`, args: [id] });\n return json(await getState());\n }\n if (path === \"/api/cook\" && method === \"POST\") {\n const r = (await req.json()).recipe;\n const deducted = await cookRecipe(r);\n return json({ deducted, state: await getState() });\n }\n\n // ---- SHOPPING ----\n if (path === \"/api/shopping\" && method === \"POST\") {\n const items = (await req.json()).items || [];\n for (const it of items) {\n await sqlite.execute({\n sql: `INSERT INTO shopping (name, quantity, unit, checked, added_at) VALUES (?, ?, ?, 0, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, nowISO()],\n });\n }\n return json(await getState());\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"PATCH\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json();\n await sqlite.execute({\n sql: `UPDATE shopping SET checked = ? WHERE id = ?`,\n args: [body.checked ? 1 : 0, id],\n });\n return json(await getState());\n }\n if (path.startsWith(\"/api/shopping/\") && method === \"DELETE\") {\n const id = Number(path.split(\"/\").pop());\n await sqlite.execute({ sql: `DELETE FROM shopping WHERE id = ?`, args: [id] });\n return json(await getState());\n }\n if (path === \"/api/shopping/clear-checked\" && method === \"POST\") {\n await sqlite.execute(`DELETE FROM shopping WHERE checked = 1`);\n return json(await getState());\n }\n\n // ---- RECEIPT ----\n if (path === \"/api/receipt\" && method === \"POST\") {\n const body = await req.json();\n return json(await parseReceipt(body.image, body.mimeType || \"image/jpeg\"));\n }\n\n return json({ error: \"not found\", path }, 404);\n } catch (e) {\n const msg = String(e && e.message ? e.message : e);\n if (msg.includes(\"NO_API_KEY\")) {\n return json({ error: \"no_api_key\", message: \"Set ANTHROPIC_API_KEY in this val's environment variables to enable recipes and receipt scanning.\" }, 400);\n }\n return json({ error: \"server_error\", message: msg }, 500);\n }\n}\n\nasync function addOrMergePantry(it: any) {\n const existing = rows(await sqlite.execute({\n sql: `SELECT * FROM pantry WHERE lower(name) = ? AND ifnull(unit,'') = ifnull(?, '')`,\n args: [norm(it.name), it.unit ?? null],\n }));\n if (existing.length && typeof it.quantity === \"number\") {\n await sqlite.execute({\n sql: `UPDATE pantry SET quantity = ifnull(quantity,0) + ?, added_at = ? WHERE id = ?`,\n args: [it.quantity, nowISO(), existing[0].id],\n });\n } else if (existing.length) {\n await sqlite.execute({ sql: `UPDATE pantry SET added_at = ? WHERE id = ?`, args: [nowISO(), existing[0].id] });\n } else {\n await sqlite.execute({\n sql: `INSERT INTO pantry (name, quantity, unit, category, added_at, shelf_life_days) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [it.name, it.quantity ?? null, it.unit ?? null, it.category ?? null, nowISO(), it.shelf_life_days ?? null],\n });\n }\n}\n\nasync function generateRecipes(tier: string, note: string) {\n const pantry = rows(await sqlite.execute(`SELECT name, quantity, unit FROM pantry`));\n const tierGuide: Record = {\n quick: \"QUICK: hands-on (active) time at most 15 minutes. Minimal chopping/steps. OK if total time is longer due to hands-off waiting.\",\n moderate: \"MODERATE: active time roughly 15-35 minutes.\",\n involved: \"INVOLVED: active time may exceed 35 minutes; more technique and components allowed.\",\n };\n const system =\n \"You are a recipe generator for a pantry app. Given a user's pantry, propose exactly 3 distinct recipes at the requested effort tier. \" +\n \"Tier is defined by ACTIVE (hands-on) time, not total clock time. \" + (tierGuide[tier] || tierGuide.moderate) + \" \" +\n \"Assume these staples are always on hand: salt, pepper, cooking oil, butter, water, common dried spices. \" +\n \"Prefer recipes that use what's in the pantry. You MAY include up to 3 items the user must buy (put them in needToBuy). \" +\n \"Respond with ONLY valid JSON, no prose, no markdown. Schema: \" +\n '{\"recipes\":[{\"title\":string,\"tier\":string,\"activeMinutes\":number,\"totalMinutes\":number,' +\n '\"ingredients\":[{\"name\":string,\"quantity\":number,\"unit\":string}],' +\n '\"needToBuy\":[{\"name\":string,\"quantity\":number,\"unit\":string}],\"steps\":[string]}]}';\n const userMsg =\n \"Pantry: \" + JSON.stringify(pantry) + \"\\nTier: \" + tier +\n (note ? \"\\nUser note: \" + note : \"\") +\n \"\\nReturn 3 recipes as JSON.\";\n const text = await callClaude({ system, content: userMsg, maxTokens: 3000 });\n const parsed = parseJSON(text);\n return { recipes: parsed.recipes || [] };\n}\n\nasync function cookRecipe(r: any) {\n const pantry = rows(await sqlite.execute(`SELECT * FROM pantry`));\n const deducted: string[] = [];\n for (const ing of (r.ingredients || [])) {\n const match = pantry.find((p) => norm(p.name) === norm(ing.name) ||\n norm(p.name).includes(norm(ing.name)) || norm(ing.name).includes(norm(p.name)));\n if (!match) continue;\n if (typeof match.quantity === \"number\" && typeof ing.quantity === \"number\" &&\n norm(match.unit) === norm(ing.unit)) {\n const newQty = match.quantity - ing.quantity;\n if (newQty <= 0) {\n await sqlite.execute({ sql: `DELETE FROM pantry WHERE id = ?`, args: [match.id] });\n deducted.push(match.name + \" (used up)\");\n } else {\n await sqlite.execute({ sql: `UPDATE pantry SET quantity = ? WHERE id = ?`, args: [newQty, match.id] });\n deducted.push(match.name + \" (-\" + ing.quantity + \" \" + (ing.unit || \"\") + \")\");\n }\n } else {\n deducted.push(match.name + \" (used)\");\n }\n }\n return deducted;\n}\n\nasync function parseReceipt(imageB64: string, mimeType: string) {\n const system =\n \"You read a photographed grocery receipt and extract food/grocery items for a pantry inventory. \" +\n \"Normalize cryptic abbreviations to clear canonical food names (e.g. 'GV SHRD CHS' -> 'Shredded cheddar cheese'). \" +\n \"For each item estimate quantity and unit if inferable from the line; if package size is unknown, set quantity to 1 and unit to 'pkg'. \" +\n \"Assign a category (produce, dairy, meat, seafood, bakery, frozen, pantry, beverage, snack, other) and an estimated shelf_life_days. \" +\n \"Skip non-food lines: totals, tax, subtotal, payment, change, loyalty, bags. \" +\n \"Respond with ONLY valid JSON, no prose. Schema: \" +\n '{\"items\":[{\"name\":string,\"quantity\":number,\"unit\":string,\"category\":string,\"shelf_life_days\":number,\"rawLine\":string}]}';\n const content = [\n { type: \"image\", source: { type: \"base64\", media_type: mimeType, data: imageB64 } },\n { type: \"text\", text: \"Extract the grocery items from this receipt as JSON.\" },\n ];\n const text = await callClaude({ system, content, maxTokens: 2500 });\n const parsed = parseJSON(text);\n return { items: parsed.items || [] };\n}\n\n// =================== FRONTEND ===================\nconst HTML = `\n\n\n\n\n\nPantry\n\n\n\n

Your Pantry

\n\n

\n \n \n

\n \n

Quick-add staples

Tap to add common items.

\n\n

\n What do you feel like cooking?\n

Effort is based on hands-on time.

\n Quick\n Moderate\n Involved\n

\n \n \n

Saved recipes

\n\n

\n \n \n

\n \n

\n\n\n\n\n

\n\n\n\n`;\n\n\n// Re-export internals so the auth wrapper (main.tsx) can reuse the original app unchanged.\nexport { HTML, callClaude, parseJSON, rows, safeParse, nowISO, norm, parseReceipt };\n",[136],"pulls","branches","forks","envVars",{"_151":62,"_153":62},"connections",{"_151":62,"_152":62},"count","unfilledCount","emptyCount",{"_43":135,"_32":136,"_30":137,"_129":-5,"_41":42,"_40":138,"_130":58,"_38":160,"_13":140,"_33":141,"_35":142,"_24":25,"_133":-5,"_157":161,"_27":162},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":58,"_38":156,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_157":158,"_27":159},["D",1785178198705],"children",[],[28],["D",1782832909338],[],[136],["D",1780256066315],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},{"_13":14,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_78":-5,"_123":200,"_201":202,"_203":204,"_205":25,"_206":25,"_207":25,"_208":58,"_209":-5,"_210":-7,"_211":-7,"_212":62,"_213":25,"_214":25,"_215":-5,"_216":25,"_217":25,"_218":25,"_219":-5},"ENV",{"_171":172,"_173":174,"_175":85,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v8