[{"_1":2,"_183":-5,"_184":-5},"loaderData",{"_3":4,"_93":94},"root",{"_5":6,"_36":37,"_66":67},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":-5,"_32":33,"_34":20,"_35":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesChatPanelState","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63,"_64":65},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","e9e636d7b466d0cb012ac9b89f74068c1d9c5525","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_68":69},"__internal_clerk_state",{"_70":71,"_72":47,"_73":74,"_75":74,"_76":20,"_77":74,"_78":74,"_79":74,"_80":74,"_81":82,"_91":20,"_92":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_83":20,"_19":20,"_84":74,"_85":86,"_87":74,"_88":47,"_89":20,"_90":74},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_95":96,"_97":98,"_99":100,"_101":102,"_156":157,"_180":181,"_182":-5},"handle","catalloc","name","catnip","path","discord/linked-roles/patreon-webhook.ts","project",{"_103":104,"_97":98,"_105":106,"_107":-5,"_108":20,"_109":110,"_111":112,"_113":-5,"_12":114,"_115":-5,"_116":20,"_117":-5,"_118":-5,"_119":33,"_14":120,"_121":122,"_123":124,"_125":126,"_127":126,"_128":129,"_130":129,"_131":129,"_132":126,"_133":126,"_23":134,"_137":138,"_142":143,"_155":20},"id","f89e4358-134e-11f1-911b-42dde27851f2","createdAt",["D",1772136532467],"deletedAt","legacyEnvVars","privacy","public","description","Open source Discord bot template built for Val Town","imageUrl","d06b6c80-f3a1-11ef-89a3-8735e07158f4","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","e03963fb-ecc4-48fb-bc25-0173a8b9a8c8","tursoName","f89e4358134e11f1911b42dde27851f2","tursoHostname","f89e4358134e11f1911b42dde27851f2-val-town.aws-us-east-2.turso.io","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_95":96,"_135":136},"profileImageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/0478d851-5bca-4d5e-6593-fb952af01c00/square512","org",{"_95":96,"_139":136,"_12":114,"_140":141},"avatar","tier","pro","branch",{"_144":145,"_97":45,"_103":146,"_147":104,"_148":-5,"_149":-5,"_150":-5,"_151":-5,"_152":-5,"_153":98,"_154":96},"version",233,"f89e7d78-134e-11f1-911b-42dde27851f2","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_103":158,"_97":159,"_160":161,"_162":163,"_164":146,"_165":166,"_167":168,"_105":169,"_144":170,"_171":172,"_173":174,"_175":20,"_176":-5,"_99":177},"5e45b42a-1520-11f1-9008-42dde27851f2","patreon-webhook.ts","fileId","2406e196-14f6-11f1-af36-42dde27851f2","parentId","8b01a886-14ec-11f1-97f4-42dde27851f2","branchId","branchVersion",214,"latest",true,["D",1772336418982],1,"fileType","script","content","/**\n * discord/linked-roles/patreon-webhook.ts\n *\n * Handles Patreon webhook events (members:create, members:update, members:delete).\n * Verifies the MD5-HMAC signature, extracts the Discord user ID from the\n * member's social connections, and writes/deletes the KV record.\n */\n\nimport { CONFIG } from \"../constants.ts\";\nimport { kv } from \"../persistence/kv.ts\";\nimport { patreonKvKey, type PatreonRecord } from \"./verifiers/patreon.ts\";\nimport { timingSafeEqual } from \"../helpers/crypto.ts\";\n\n/**\n * Verify the Patreon webhook signature (MD5-HMAC in the X-Patreon-Signature header).\n */\nasync function verifySignature(\n body: string,\n signature: string,\n): Promise {\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(CONFIG.patreonWebhookSecret),\n { name: \"HMAC\", hash: \"MD5\" },\n false,\n [\"sign\"],\n );\n\n const signed = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(body));\n const hex = [...new Uint8Array(signed)]\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n\n return await timingSafeEqual(hex, signature);\n}\n\n/** Extract the Discord user ID from the Patreon webhook payload. */\nfunction extractDiscordId(payload: Record): string | null {\n try {\n const included = payload.included as Array> | undefined;\n if (!Array.isArray(included)) return null;\n\n for (const resource of included) {\n if (resource.type !== \"user\") continue;\n const attrs = resource.attributes as Record | undefined;\n const socials = attrs?.social_connections as Record | undefined;\n const discord = socials?.discord as Record | undefined;\n if (discord?.user_id) return discord.user_id as string;\n }\n } catch {\n // Malformed payload — fall through\n }\n return null;\n}\n\n/** Extract patron status and tier from the Patreon webhook payload. */\nfunction extractMemberData(payload: Record): {\n patronStatus: string;\n tier: string;\n} {\n try {\n const data = payload.data as Record;\n const attrs = data.attributes as Record;\n const patronStatus = (attrs.patron_status as string) ?? \"unknown\";\n\n const relationships = data.relationships as Record | undefined;\n const tierData = relationships?.currently_entitled_tiers as Record | undefined;\n const tiers = tierData?.data as Array> | undefined;\n const tier = tiers?.[0]?.id as string ?? \"none\";\n\n return { patronStatus, tier };\n } catch {\n return { patronStatus: \"unknown\", tier: \"none\" };\n }\n}\n\n/**\n * Handle an incoming Patreon webhook request.\n * POST /patreon/webhook\n */\nexport async function handlePatreonWebhook(req: Request): Promise {\n if (!CONFIG.patreonWebhookSecret) {\n return Response.json(\n { error: \"PATREON_WEBHOOK_SECRET not configured\" },\n { status: 503 },\n );\n }\n\n const signature = req.headers.get(\"X-Patreon-Signature\");\n if (!signature) {\n return Response.json({ error: \"Missing signature\" }, { status: 401 });\n }\n\n const body = await req.text();\n\n if (!(await verifySignature(body, signature))) {\n return Response.json({ error: \"Invalid signature\" }, { status: 401 });\n }\n\n const event = req.headers.get(\"X-Patreon-Event\");\n\n let payload: Record;\n try {\n payload = JSON.parse(body) as Record;\n } catch {\n return Response.json({ error: \"Malformed JSON body\" }, { status: 400 });\n }\n\n const discordId = extractDiscordId(payload);\n\n if (!discordId) {\n // No Discord linked on Patreon — nothing to do, but acknowledge\n return Response.json({ ok: true, skipped: \"no_discord_id\" });\n }\n\n if (event === \"members:delete\") {\n await kv.delete(patreonKvKey(discordId));\n console.log(`[patreon] Deleted record for Discord ${discordId}`);\n return Response.json({ ok: true, action: \"deleted\" });\n }\n\n // members:create or members:update\n const { patronStatus, tier } = extractMemberData(payload);\n const isPatron = patronStatus === \"active_patron\";\n\n const record: PatreonRecord = {\n isPatron,\n patronStatus,\n tier,\n updatedAt: new Date().toISOString(),\n };\n\n await kv.set(patreonKvKey(discordId), record);\n console.log(`[patreon] Updated record for Discord ${discordId}: ${patronStatus}`);\n\n return Response.json({ ok: true, action: \"updated\" });\n}\n","deleted","label",[178,179,159],"discord","linked-roles","permalink","https://www.val.town/x/catalloc/catnip/code/discord/linked-roles/patreon-webhook.ts","extension","actionData","errors"]