[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_156":157,"_158":159},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_118":-5,"_20":119,"_22":120,"_121":122,"_123":124,"_25":125,"_24":-5,"_126":-5,"_127":-5,"_128":53,"_129":130,"_131":44,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","ziggyware","name","AgentClient","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":-5,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":85,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":97,"_98":99,"_100":101,"_102":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","f80d9d44-5539-11f1-81f6-ee650bb23af1","main.tsx","fileId","aadca55e-004a-11f1-a3c0-42dde27851f2","parentId","branchId","aada8db4-004a-11f1-a3c0-42dde27851f2","branchVersion",10,"latest",true,"createdAt",["D",1779384288815],9,"fileType","http","content","// @queue\n/** @jsxImportSource npm:preact */\n\nimport { Hono } from \"npm:hono@3\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n//import { Queue } from \"https://esm.town/queue\";\n\n// --- INFRASTRUCTURE & MIGRATION ---\n\n//const queue = new Queue(\"agent-factory-v3-queue\");\nconst app = new Hono();\n\n// Initialize V3 Schema with Organization Support\nawait sqlite.batch([\n `CREATE TABLE IF NOT EXISTS v3_orgs (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n api_key TEXT UNIQUE NOT NULL,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )`,\n `CREATE TABLE IF NOT EXISTS v3_jobs (\n id TEXT PRIMARY KEY,\n org_id TEXT NOT NULL,\n type TEXT NOT NULL,\n status TEXT NOT NULL,\n payload TEXT,\n result TEXT,\n error TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY(org_id) REFERENCES v3_orgs(id)\n )`,\n `CREATE TABLE IF NOT EXISTS v3_files (\n key TEXT NOT NULL,\n org_id TEXT NOT NULL,\n content TEXT NOT NULL,\n version INTEGER DEFAULT 1,\n size INTEGER,\n updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n PRIMARY KEY (key, org_id),\n FOREIGN KEY(org_id) REFERENCES v3_orgs(id)\n )`,\n]);\n\n// --- MIDDLEWARE ---\n\n// 1. Auth Middleware: Resolves API Key to Organization ID\napp.use(\"*\", async (c, next) => {\n // Skip auth for frontend assets or initial loading (login screen handles logic)\n if (c.req.method === \"GET\" && c.req.path === \"/\") return next();\n if (c.req.path === \"/auth/register\") return next();\n\n const apiKey = c.req.header(\"X-Org-Key\");\n if (!apiKey) {\n return c.json(\n { success: false, error: \"Unauthorized: Missing X-Org-Key\" },\n 401,\n );\n }\n\n const rs = await sqlite.execute({\n sql: `SELECT id, name FROM v3_orgs WHERE api_key = ?`,\n args: [apiKey],\n });\n\n if (rs.rows.length === 0) {\n return c.json({ success: false, error: \"Unauthorized: Invalid Key\" }, 403);\n }\n\n // Hydrate context with Org ID (The \"Tenant\")\n c.set(\"orgId\", rs.rows[0][0]);\n c.set(\"orgName\", rs.rows[0][1]);\n await next();\n});\n\n// 2. CORS\napp.use(\"*\", async (c, next) => {\n c.res.headers.set(\"Access-Control-Allow-Origin\", \"*\"); // In prod, restrict this\n c.res.headers.set(\n \"Access-Control-Allow-Methods\",\n \"GET, POST, PUT, DELETE, OPTIONS\",\n );\n c.res.headers.set(\n \"Access-Control-Allow-Headers\",\n \"Content-Type, Authorization, X-Org-Key, X-Expected-Version\",\n );\n if (c.req.method === \"OPTIONS\") return c.text(\"OK\", 204);\n await next();\n});\n\n// --- API ROUTES ---\n\n// Helper: Bootstrap a new Org (For demo purposes)\napp.post(\"/auth/register\", async (c) => {\n const { name } = await c.req.json();\n const newKey = \"sk_\" + crypto.randomUUID().replace(/-/g, \"\");\n const orgId = crypto.randomUUID();\n\n await sqlite.execute({\n sql: `INSERT INTO v3_orgs (id, name, api_key) VALUES (?, ?, ?)`,\n args: [orgId, name, newKey],\n });\n\n return c.json({ success: true, apiKey: newKey, orgId });\n});\n\n// 1. Enqueue Agent Job (Scoped by Org)\napp.post(\"/agent/create\", async (c) => {\n const orgId = c.get(\"orgId\") as string;\n let req;\n try {\n req = await c.req.json();\n } catch {\n return c.json({ error: \"Bad JSON\" }, 400);\n }\n\n const jobId = crypto.randomUUID();\n\n await sqlite.execute({\n sql:\n `INSERT INTO v3_jobs (id, org_id, type, status, payload) VALUES (?, ?, ?, ?, ?)`,\n args: [\n jobId,\n orgId,\n \"create_agent\",\n \"pending\",\n JSON.stringify({\n ...req,\n // We pass the Val Town Token provided in request for the actual execution\n valTownToken: req.valTownToken,\n }),\n ],\n });\n\n //await queue.push({ jobId });\n return c.json({ success: true, jobId, status: \"pending\" }, 202);\n});\n\n// 2. Poll Jobs (Scoped by Org)\napp.get(\"/jobs\", async (c) => {\n const orgId = c.get(\"orgId\") as string;\n const rs = (await sqlite.execute({\n sql:\n `SELECT id, status, result, error, created_at FROM v3_jobs WHERE org_id = ? ORDER BY created_at DESC LIMIT 20`,\n args: [orgId],\n })) as any;\n return c.json(rs.rows.map((r) => ({\n id: r.id,\n status: r.status,\n result: r.result ? JSON.parse(r.result) : null,\n error: r.error,\n createdAt: r.created_at,\n })));\n});\n\n// 3. Get File (Scoped by Org)\napp.get(\"/file/:key\", async (c) => {\n const orgId = c.get(\"orgId\") as string;\n const rs = (await sqlite.execute({\n sql:\n `SELECT content, version, size, updated_at FROM v3_files WHERE key = ? AND org_id = ?`,\n args: [c.req.param(\"key\"), orgId],\n })) as any;\n\n if (rs.rows.length === 0) {\n return c.json({ success: false, error: \"Not Found\" }, 404);\n }\n const f = rs.rows[0];\n return c.json({\n success: true,\n data: { content: f.content, version: f.version, updatedAt: f.updated_at },\n });\n});\n\n// 4. Upsert File with OPTIMISTIC LOCKING (The strict \"No Toe Stepping\" logic)\napp.put(\"/file/:key\", async (c) => {\n const orgId = c.get(\"orgId\");\n const key = c.req.param(\"key\");\n const { content } = await c.req.json();\n\n // Client MUST tell us what version they base their changes on.\n // If creating new, expectedVersion should be 0 or null.\n const expectedVersion = parseInt(c.req.header(\"X-Expected-Version\") || \"0\");\n\n if (expectedVersion === 0) {\n // Case A: Create New (Insert)\n try {\n await sqlite.execute({\n sql:\n `INSERT INTO v3_files (key, org_id, content, size, version) VALUES (?, ?, ?, ?, 1)`,\n args: [key, orgId, content, content.length],\n });\n return c.json({ success: true, version: 1 });\n } catch {\n // If constraint fails, file exists\n return c.json({\n success: false,\n error: \"File already exists. Fetch first.\",\n }, 409);\n }\n } else {\n // Case B: Update Existing (Compare-And-Swap)\n const rs = (await sqlite.execute({\n sql: `\n UPDATE v3_files \n SET content = ?, size = ?, version = version + 1, updated_at = CURRENT_TIMESTAMP\n WHERE key = ? AND org_id = ? AND version = ?\n RETURNING version\n `,\n args: [content, content.length, key, orgId, expectedVersion],\n })) as any;\n\n if (rs.rows.length === 0) {\n // The update failed because the WHERE clause (version = ?) didn't match.\n // This means someone else updated the file in the background.\n return c.json({\n success: false,\n error:\n \"Conflict: The file has been modified by another user. Please reload.\",\n code: \"VERSION_MISMATCH\",\n }, 409);\n }\n\n return c.json({ success: true, version: rs.rows[0].version });\n }\n});\n\n// --- WORKER (QUEUE CONSUMER) ---\nexport async function queueHandler(batch: any[]) {\n for (const msg of batch) {\n const { jobId } = msg.body;\n const jobRow =\n (await sqlite.execute({\n sql: \"SELECT payload FROM v3_jobs WHERE id = ?\",\n args: [jobId],\n })) as any;\n if (jobRow.rows.length === 0) continue;\n\n const payload = JSON.parse(jobRow.rows[0].payload);\n await sqlite.execute({\n sql: \"UPDATE v3_jobs SET status = 'processing' WHERE id = ?\",\n args: [jobId],\n });\n\n try {\n // Call Val Town API\n const upstreamRes = await fetch(\"https://api.val.town/v2/vals\", {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${payload.valTownToken}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n name: payload.name,\n description: payload.description,\n privacy: payload.privacy,\n }),\n });\n const data = await upstreamRes.json();\n if (!upstreamRes.ok) throw new Error(JSON.stringify(data));\n\n await sqlite.execute({\n sql:\n \"UPDATE v3_jobs SET status = 'completed', result = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?\",\n args: [JSON.stringify(data), jobId],\n });\n } catch (err: any) {\n await sqlite.execute({\n sql:\n \"UPDATE v3_jobs SET status = 'failed', error = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?\",\n args: [err.message, jobId],\n });\n }\n }\n}\n\n// --- FRONTEND (SERVED VIA GET /) ---\napp.get(\"/\", (c) => {\n // We use strict JSON escaping for the embedded script to prevent XSS and syntax errors\n // Note the double backslashes \\\\n and escaped \\${} for client-side variables\n const clientScript = `\n import { h, render } from 'https://esm.sh/preact@10.19.3';\n import { useState, useEffect } from 'https://esm.sh/preact@10.19.3/hooks';\n import { html } from 'https://esm.sh/htm@3.1.1/preact';\n\n const API_BASE = window.location.origin;\n\n function App() {\n const [orgKey, setOrgKey] = useState(localStorage.getItem(\"org_key\") || \"\");\n const [valToken, setValToken] = useState(localStorage.getItem(\"val_token\") || \"\");\n \n const login = (k, v) => {\n localStorage.setItem(\"org_key\", k);\n localStorage.setItem(\"val_token\", v);\n setOrgKey(k);\n setValToken(v);\n };\n\n if (!orgKey) return html\\`<\\${Auth} onLogin=\\${login} />\\`;\n\n return html\\`\n

Enterprise Agent OS V3.0 CAS

\n \n

\n <\\${AgentPanel} orgKey=\\${orgKey} valToken=\\${valToken} />\n <\\${FileEditor} orgKey=\\${orgKey} />\n

\n \\`;\n }\n\n function Auth({ onLogin }) {\n const [mode, setMode] = useState(\"login\");\n const [name, setName] = useState(\"\");\n const [key, setKey] = useState(\"\");\n const [vtToken, setVtToken] = useState(\"\");\n\n const register = async () => {\n const res = await fetch(API_BASE + \"/auth/register\", { \n method: \"POST\", body: JSON.stringify({ name }) \n });\n const data = await res.json();\n if(data.success) {\n prompt(\"Copy your new Organization Key (Safe keeping):\", data.apiKey);\n setKey(data.apiKey);\n setMode(\"login\");\n }\n };\n\n return html\\`\n

\\${mode === 'login' ? 'Organization Access' : 'Register Organization'}

\n \n \\${mode === 'register' && html\\`\n setName(e.target.value)} />\n \n

\n \\`}\n\n setKey(e.target.value)} />\n \n setVtToken(e.target.value)} />\n\n \n \n

setMode(mode === 'login' ? 'register' : 'login')}>\n \\${mode === 'login' ? 'Need an account? Register' : 'Have an key? Login'}\n

\n \\`;\n }\n\n function AgentPanel({ orgKey, valToken }) {\n const [jobs, setJobs] = useState([]);\n const [name, setName] = useState(\"\");\n\n const refresh = async () => {\n const res = await fetch(API_BASE + \"/jobs\", { headers: { \"X-Org-Key\": orgKey } });\n if(res.ok) setJobs(await res.json());\n };\n\n useEffect(() => { refresh(); const i = setInterval(refresh, 3000); return () => clearInterval(i); }, []);\n\n const spawn = async () => {\n await fetch(API_BASE + \"/agent/create\", {\n method: \"POST\",\n headers: { \"X-Org-Key\": orgKey, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ name, privacy: \"public\", valTownToken: valToken })\n });\n setName(\"\");\n refresh();\n };\n\n return html\\`\n

Agent Factory

\n setName(e.target.value)} />\n \n

\n \\${jobs.map(j => html\\`\n

\n \\${j.id.slice(0,6)}\n \\${j.status}\n

\n \\`)}\n

\n \\`;\n }\n\n // This component implements the Client-Side Optimistic Locking Logic\n function FileEditor({ orgKey }) {\n const [filename, setFilename] = useState(\"config.json\");\n const [content, setContent] = useState(\"\");\n const [version, setVersion] = useState(0);\n const [status, setStatus] = useState(\"\");\n const [loading, setLoading] = useState(false);\n\n const load = async () => {\n setLoading(true); setStatus(\"\");\n const res = await fetch(\\`\\${API_BASE}/file/\\${filename}\\`, { headers: { \"X-Org-Key\": orgKey } });\n if(res.status === 404) {\n setContent(\"\"); setVersion(0); setStatus(\"New File (v0)\");\n } else {\n const json = await res.json();\n setContent(json.data.content);\n setVersion(json.data.version);\n setStatus(\\`Loaded v\\${json.data.version}\\`);\n }\n setLoading(false);\n };\n\n const save = async () => {\n setLoading(true);\n const res = await fetch(\\`\\${API_BASE}/file/\\${filename}\\`, {\n method: \"PUT\",\n headers: { \n \"X-Org-Key\": orgKey, \n \"Content-Type\": \"application/json\",\n // CRITICAL: We send the version we *think* we are editing\n \"X-Expected-Version\": version.toString()\n },\n body: JSON.stringify({ content })\n });\n \n const json = await res.json();\n \n if (res.status === 409) {\n // CONFLICT DETECTED\n alert(\"CONFLICT! Another user modified this file while you were editing.\\\\n\\\\nThe system prevented you from overwriting their work.\\\\n\\\\nPlease reload to get the latest version.\");\n setStatus(\"Save Failed: Version Mismatch\");\n } else if (json.success) {\n setVersion(json.version);\n setStatus(\\`Saved successfully (v\\${json.version})\\`);\n } else {\n setStatus(\"Error: \" + json.error);\n }\n setLoading(false);\n };\n\n return html\\`\n

Atomic File System

\n setFilename(e.target.value)} />\n \n

\n \n

\n \\${status}\n \n

\n \\`;\n }\n\n render(html\\`<\\${App} />\\`, document.getElementById('root'));\n `;\n\n return c.html(`\n \n \n \n \n \n Enterprise Agent OS\n \n \n \n

\n \n \n \n `);\n});\n\nexport default app.fetch;","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1779384288815],"children",[],[35],"aada4de0-004a-11f1-a3c0-42dde27851f2",["D",1770045611918],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","2c6d46b0-54dd-11f0-a86c-6fbc2b29331a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","850db142-aa5e-4914-bceb-1e2e085ae4c5","tursoName","aada4de0004a11f1a3c042dde27851f2","tursoHostname","aada4de0004a11f1a3c042dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789501878689],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_117":113},"org",{"_11":12,"_111":-5,"_112":113,"_70":71,"_114":115,"_116":53},"branch",{"_17":42,"_13":16,"_33":40,"_103":61,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":-5,"_109":14,"_110":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yekJHRDE5SGVoUHUzUENQaXY2MTRkT3h0cncifQ","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":151,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":-5,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":152,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":153,"_98":154,"_100":155,"_102":53},[148],"files",[148],"counts",{"_138":77,"_139":140,"_141":77,"_31":142,"_143":144},[136],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":137},[35],"pulls","branches",1,"forks",{"_145":77,"_147":77},"connections",{"_145":77,"_146":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":149,"_18":150},[],[35],["D",1770045611918],["D",1789501878689],{"_11":12,"_117":113},{"_11":12,"_111":-5,"_112":113,"_70":71,"_114":115,"_116":53},{"_17":42,"_13":16,"_33":40,"_103":61,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":-5,"_109":14,"_110":12},"ctx",{"_96":-5,"_133":189,"_190":191,"_192":193,"_194":53,"_195":53,"_196":53,"_197":44,"_198":-5,"_199":-7,"_200":-7,"_201":77,"_202":53,"_203":53,"_204":-5,"_205":53,"_206":53,"_207":53,"_208":-5},"ENV",{"_160":161,"_162":163,"_164":16,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code