[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","amir5","name","dogsspot_puppy_path","path","google-ads-ingest.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/amir5/dogsspot_puppy_path/code/google-ads-ingest.ts","extension","id","36293982-e23a-4cdc-b76f-7241a7e5aa5c","fileId","14bbe268-9a4d-11f1-9cbb-1607ee4eb77e","parentId","branchId","551774fb-a850-4c9d-94a1-d3509ddcf1b0","branchVersion",1229,"latest",true,"createdAt",["D",1787226704416],"version",3,"fileType","http","content","// PII-FREE GOOGLE ADS SNAPSHOT INGEST.\n//\n// A Google Ads Script posts aggregate campaign metrics here. The endpoint stores campaign names,\n// status, budgets and totals only. Tracking surfaces consume the same validated snapshot and always\n// expose its source timestamp. Older replays cannot replace newer truth.\n\nexport const GOOGLE_ADS_BLOB = \"google_ads_snapshot_v1\";\nexport const GOOGLE_ADS_HISTORY_BLOB = \"google_ads_history_v1\";\nexport const SNAPSHOT_FRESH_MS = 2 * 3_600_000;\nexport const SNAPSHOT_MAX_INGEST_AGE_MS = 30 * 60_000;\nexport const SNAPSHOT_FUTURE_TOLERANCE_MS = 5 * 60_000;\nconst MAX_BODY_BYTES = 200_000;\n\nexport type CampaignMetric = {\n id: string;\n name: string;\n status: \"ENABLED\" | \"PAUSED\" | \"REMOVED\" | \"UNKNOWN\";\n type: string;\n dailyBudget: number;\n today: { impressions: number; clicks: number; cost: number; conversions: number };\n last7Days: { impressions: number; clicks: number; cost: number; conversions: number };\n};\n\nexport type GoogleAdsSnapshot = {\n schema: 1;\n generatedAt: string;\n accountTimeZone: string;\n currency: string;\n campaigns: CampaignMetric[];\n};\n\nexport type SnapshotFreshness = {\n state: \"fresh\" | \"stale\" | \"future\" | \"missing\" | \"invalid\";\n snapshot: GoogleAdsSnapshot | null;\n ageMs: number | null;\n reason: string;\n};\n\nconst METRIC_KEYS = [\"impressions\", \"clicks\", \"cost\", \"conversions\"] as const;\nconst COUNT_KEYS = new Set([\"impressions\", \"clicks\"]);\nconst MAX_COUNT = 1_000_000_000;\nconst MAX_MONEY = 1_000_000_000;\nconst BAD_TEXT = /[\\u0000-\\u001f\\u007f\\u202a-\\u202e\\u2066-\\u2069\\u200e\\u200f\\u061c]/i;\n\nconst assertKeys = (value: Record, allowed: readonly string[], label: string): void => {\n const allow = new Set(allowed);\n const unexpected = Object.keys(value).find((key) => !allow.has(key));\n if (unexpected) throw new Error(`${label} contains an unexpected field: ${unexpected}`);\n};\n\n/** Reject any payload shape that could accidentally turn this aggregate store into a lead dump. */\nexport function assertNoPii(value: unknown): void {\n const walk = (v: unknown, key = \"\") => {\n if (/email|phone|contact|gclid|gbraid|wbraid|address|first.?name|last.?name|url|query|customer/i.test(key)) {\n throw new Error(`PII-like key is not allowed: ${key}`);\n }\n if (typeof v === \"string\") {\n if (/@/.test(v) || /(?:\\+\\d[\\d\\s().-]{8,}\\d|\$\\d{3}\$\\s*\\d{3}|\\d{3}[-.\\s]\\d{3}[-.\\s]\\d{4})/.test(v) ||\n /https?:\\/\\//i.test(v) || /(?:gclid|gbraid|wbraid)=/i.test(v)) {\n throw new Error(\"PII-like value is not allowed\");\n }\n return;\n }\n if (Array.isArray(v)) return v.forEach((x) => walk(x, key));\n if (v && typeof v === \"object\") {\n for (const [k, x] of Object.entries(v as Record)) walk(x, k);\n }\n };\n walk(value);\n}\n\nconst finiteNumber = (v: unknown, max: number): number => {\n if (typeof v !== \"number\") throw new Error(\"metric must be a JSON number\");\n const n = v;\n if (!Number.isFinite(n) || n < 0 || n > max) throw new Error(\"metric is outside the accepted range\");\n return n;\n};\n\nconst cleanText = (v: unknown, label: string, max: number): string => {\n if (typeof v !== \"string\") throw new Error(`invalid ${label}`);\n const s = v.trim();\n if (!s || s.length > max || BAD_TEXT.test(s)) throw new Error(`invalid ${label}`);\n return s;\n};\n\nconst validTimeZone = (v: unknown): string => {\n const s = cleanText(v, \"accountTimeZone\", 80);\n try { new Intl.DateTimeFormat(\"en-US\", { timeZone: s }).format(new Date(0)); }\n catch { throw new Error(\"invalid accountTimeZone\"); }\n return s;\n};\n\nexport function validateSnapshot(raw: unknown): GoogleAdsSnapshot {\n assertNoPii(raw);\n const v = raw as any;\n if (!v || typeof v !== \"object\" || Array.isArray(v)) throw new Error(\"snapshot must be an object\");\n assertKeys(v, [\"schema\", \"generatedAt\", \"accountTimeZone\", \"currency\", \"campaigns\"], \"snapshot\");\n if (v?.schema !== 1) throw new Error(\"unsupported schema\");\n if (typeof v.generatedAt !== \"string\" || !/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{1,3})?Z$/.test(v.generatedAt)) {\n throw new Error(\"invalid generatedAt\");\n }\n const generated = Date.parse(v.generatedAt);\n if (!Number.isFinite(generated) || new Date(generated).toISOString() !== v.generatedAt) throw new Error(\"invalid generatedAt\");\n const accountTimeZone = validTimeZone(v.accountTimeZone);\n const currency = typeof v.currency === \"string\" ? v.currency : \"\";\n if (!/^[A-Z]{3}$/.test(currency)) throw new Error(\"invalid currency\");\n if (!Array.isArray(v.campaigns) || v.campaigns.length < 1 || v.campaigns.length > 100) {\n throw new Error(\"campaigns must contain 1 to 100 rows\");\n }\n\n const campaigns = v.campaigns.map((c: any): CampaignMetric => {\n if (!c || typeof c !== \"object\" || Array.isArray(c)) throw new Error(\"invalid campaign row\");\n assertKeys(c, [\"id\", \"name\", \"status\", \"type\", \"dailyBudget\", \"today\", \"last7Days\"], \"campaign\");\n const id = typeof c.id === \"string\" ? c.id : \"\";\n const name = cleanText(c?.name, \"campaign name\", 160);\n const status = typeof c.status === \"string\" ? c.status.toUpperCase() : \"\";\n const type = cleanText(c?.type, \"campaign type\", 80);\n if (!/^\\d{1,30}$/.test(id)) throw new Error(\"invalid campaign id\");\n if (![\"ENABLED\", \"PAUSED\", \"REMOVED\", \"UNKNOWN\"].includes(status)) throw new Error(\"invalid campaign status\");\n const dailyBudget = finiteNumber(c?.dailyBudget, MAX_MONEY);\n const period = (key: \"today\" | \"last7Days\") => {\n if (!c?.[key] || typeof c[key] !== \"object\" || Array.isArray(c[key])) throw new Error(`invalid ${key} metrics`);\n assertKeys(c[key], METRIC_KEYS, key);\n const out: Record = {};\n for (const metric of METRIC_KEYS) {\n const n = finiteNumber(c[key][metric], COUNT_KEYS.has(metric) ? MAX_COUNT : MAX_MONEY);\n if (COUNT_KEYS.has(metric) && !Number.isInteger(n)) throw new Error(`${key}.${metric} must be an integer`);\n out[metric] = +n.toFixed(2);\n }\n return out as CampaignMetric[typeof key];\n };\n return {\n id, name, status: status as CampaignMetric[\"status\"], type,\n dailyBudget: +dailyBudget.toFixed(2), today: period(\"today\"), last7Days: period(\"last7Days\"),\n };\n });\n\n const ids = new Set();\n for (const c of campaigns) {\n if (ids.has(c.id)) throw new Error(\"duplicate campaign id\");\n ids.add(c.id);\n }\n return {\n schema: 1,\n generatedAt: new Date(generated).toISOString(),\n accountTimeZone,\n currency,\n campaigns,\n };\n}\n\n/** Structural validation plus the clock state used by every reader. */\nexport function snapshotFreshness(\n raw: unknown,\n nowMs: number = Date.now(),\n maxAgeMs: number = SNAPSHOT_FRESH_MS,\n): SnapshotFreshness {\n if (raw == null) return { state: \"missing\", snapshot: null, ageMs: null, reason: \"No Google Ads snapshot has been stored.\" };\n let snapshot: GoogleAdsSnapshot;\n try { snapshot = validateSnapshot(raw); }\n catch (e) { return { state: \"invalid\", snapshot: null, ageMs: null, reason: String(e).replace(/^Error:\\s*/, \"\").slice(0, 180) }; }\n const generated = Date.parse(snapshot.generatedAt);\n if (!Number.isFinite(nowMs) || nowMs < 0 || !Number.isFinite(maxAgeMs) || maxAgeMs < 0) {\n return { state: \"invalid\", snapshot: null, ageMs: null, reason: \"The freshness clock is invalid.\" };\n }\n if (generated > nowMs + SNAPSHOT_FUTURE_TOLERANCE_MS) {\n return { state: \"future\", snapshot, ageMs: generated - nowMs, reason: \"The source timestamp is materially in the future.\" };\n }\n const ageMs = Math.max(0, nowMs - generated);\n return ageMs <= maxAgeMs\n ? { state: \"fresh\", snapshot, ageMs, reason: \"The Google Ads Script snapshot is current.\" }\n : { state: \"stale\", snapshot, ageMs, reason: \"The Google Ads Script snapshot has stopped updating.\" };\n}\n\n/** New ingests must be near-real-time. Exact retries are handled before this check. */\nexport function assertSnapshotCurrent(snapshot: GoogleAdsSnapshot, nowMs: number = Date.now()): void {\n const generated = Date.parse(snapshot.generatedAt);\n if (generated > nowMs + SNAPSHOT_FUTURE_TOLERANCE_MS) throw new Error(\"generatedAt is too far in the future\");\n if (nowMs - generated > SNAPSHOT_MAX_INGEST_AGE_MS) throw new Error(\"generatedAt is too old to become current truth\");\n}\n\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function authorised(key: string): Promise {\n const expected = (Deno.env.get(\"GADS_INGEST_SHA256\") ?? \"\").trim().toLowerCase();\n if (!key || !/^[0-9a-f]{64}$/.test(expected)) return false;\n const got = await sha256Hex(key);\n let diff = got.length ^ expected.length;\n for (let i = 0; i < Math.min(got.length, expected.length); i++) diff |= got.charCodeAt(i) ^ expected.charCodeAt(i);\n return diff === 0;\n}\n\nclass BodyTooLarge extends Error {}\n\nasync function readBody(req: Request): Promise {\n const declaredRaw = req.headers.get(\"content-length\");\n if (declaredRaw != null) {\n const declared = Number(declaredRaw);\n if (!Number.isInteger(declared) || declared < 0) throw new Error(\"invalid content-length\");\n if (declared > MAX_BODY_BYTES) throw new BodyTooLarge(\"payload too large\");\n }\n if (!req.body) throw new Error(\"empty body\");\n const reader = req.body.getReader();\n const chunks: Uint8Array[] = [];\n let total = 0;\n while (true) {\n const { value, done } = await reader.read();\n if (done) break;\n total += value.byteLength;\n if (total > MAX_BODY_BYTES) {\n await reader.cancel().catch(() => undefined);\n throw new BodyTooLarge(\"payload too large\");\n }\n chunks.push(value);\n }\n if (!total) throw new Error(\"empty body\");\n const bytes = new Uint8Array(total);\n let offset = 0;\n for (const chunk of chunks) { bytes.set(chunk, offset); offset += chunk.byteLength; }\n return new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes);\n}\n\nconst noStore = { \"Cache-Control\": \"no-store\", \"X-Content-Type-Options\": \"nosniff\" };\nconst empty204 = (result: string, at: string) => new Response(null, {\n status: 204,\n headers: { ...noStore, \"X-Ingest-Result\": result, \"X-Snapshot-At\": at },\n});\n\n// Blob reads and writes have no compare-and-swap primitive. Serialize requests handled by this\n// isolate so two different source timestamps cannot race and leave the older one as current.\nlet ingestTail: Promise = Promise.resolve();\nfunction serialiseIngest(work: () => Promise): Promise {\n const run = ingestTail.then(work, work);\n ingestTail = run.then(() => undefined, () => undefined);\n return run;\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") return new Response(\"Not found\", { status: 404, headers: noStore });\n const u = new URL(req.url);\n const key = u.pathname.split(\"/\").filter(Boolean)[0] ?? \"\";\n if (!(await authorised(key))) return new Response(\"Not found\", { status: 404, headers: noStore });\n if (!/^application\\/json(?:\\s*;|$)/i.test(req.headers.get(\"content-type\") ?? \"\")) {\n return new Response(\"Content-Type must be application/json\", { status: 415, headers: noStore });\n }\n\n let raw: unknown;\n try { raw = JSON.parse(await readBody(req)); }\n catch (e) {\n const status = e instanceof BodyTooLarge ? 413 : 400;\n return Response.json({ ok: false, error: String(e).replace(/^Error:\\s*/, \"\").slice(0, 180) }, { status, headers: noStore });\n }\n\n let snapshot: GoogleAdsSnapshot;\n try { snapshot = validateSnapshot(raw); }\n catch (e) { return Response.json({ ok: false, error: String(e).slice(0, 180) }, { status: 400, headers: noStore }); }\n\n return serialiseIngest(async () => { try {\n const { blob } = await import(\"https://esm.town/v/std/blob\");\n const existingRaw = await blob.getJSON(GOOGLE_ADS_BLOB).catch(() => null);\n let existing: GoogleAdsSnapshot | null = null;\n if (existingRaw != null) {\n try { existing = validateSnapshot(existingRaw); }\n catch { existing = null; } // a valid new source reading repairs an invalid current blob\n }\n if (existing) {\n const incomingAt = Date.parse(snapshot.generatedAt), existingAt = Date.parse(existing.generatedAt);\n if (incomingAt === existingAt) {\n if (JSON.stringify(snapshot) === JSON.stringify(existing)) return empty204(\"duplicate\", snapshot.generatedAt);\n return Response.json({ ok: false, error: \"conflicting snapshot at the same generatedAt\" }, { status: 409, headers: noStore });\n }\n if (incomingAt < existingAt) {\n return Response.json({ ok: false, error: \"older snapshot cannot replace newer truth\" }, { status: 409, headers: noStore });\n }\n }\n assertSnapshotCurrent(snapshot);\n\n // Val's blob API returns `null` for a key that has never existed; the offline harness used to\n // model that as a rejected promise. Both shapes mean \"first snapshot\", while a non-null,\n // non-array value is still corruption and must fail closed.\n const historyRaw = await blob.getJSON(GOOGLE_ADS_HISTORY_BLOB).catch(() => null);\n if (historyRaw != null && !Array.isArray(historyRaw)) {\n throw new Error(`Google Ads history blob is not an array (${Object.prototype.toString.call(historyRaw)})`);\n }\n const history: GoogleAdsSnapshot[] = (historyRaw ?? []).map((x: unknown) => validateSnapshot(x));\n const day = snapshot.generatedAt.slice(0, 10);\n const nextHistory = [snapshot, ...history.filter((x) => x.generatedAt.slice(0, 10) !== day)]\n .sort((a, b) => Date.parse(b.generatedAt) - Date.parse(a.generatedAt))\n .slice(0, 90);\n\n // History first: if it cannot persist, current truth remains untouched and the source retries.\n await blob.setJSON(GOOGLE_ADS_HISTORY_BLOB, nextHistory);\n await blob.setJSON(GOOGLE_ADS_BLOB, snapshot);\n return empty204(\"stored\", snapshot.generatedAt);\n } catch (e) {\n return Response.json({ ok: false, error: `storage unavailable: ${String(e).replace(/^Error:\\s*/, \"\").slice(0, 140)}` },\n { status: 503, headers: noStore });\n } });\n}\n","deleted",false,"label",[14],"1bfa6e81-74e1-4c6c-ab32-118304a4ffff",["D",1785429259053],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Puppy path nurture engine v1.2 — The Dogs Spot","imageUrl","userId","d26e64e6-cd39-4be1-b5b4-1de11cc555f8","pinnedFileId","ad633fec-8e73-11f1-b800-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f56fd-bd59-724f-8163-80ffcf8235dd","tursoName","1bfa6e8174e14c6cab32118304a4ffff","tursoHostname","1bfa6e8174e14c6cab32118304a4ffff-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789519842404],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":102},"org",{"_9":10,"_99":100,"_101":102,"_55":56,"_103":104,"_105":42},"branch",{"_35":89,"_11":90,"_22":28,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",1233,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Amir","avatar","https://lh3.googleusercontent.com/a/ACg8ocILk3bwhcvrzozUWm7gxlKoBm7ZGtsgIkesW3ysOOsJ1rSQuA=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_140":141,"_142":143,"_144":145,"_146":42,"_147":42,"_148":42,"_149":32,"_150":-5,"_151":-7,"_152":-7,"_153":63,"_154":42,"_155":42,"_156":-5,"_157":42,"_158":42,"_159":42,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":90,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]