[{"_1":2,"_185":-5,"_186":-5},"loaderData",{"_3":4,"_98":99},"root",{"_5":6,"_39":40,"_71":72},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":-5,"_32":33,"_34":20,"_35":20,"_36":-5,"_37":20,"_38":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesChatPanelState","notificationCount",0,"flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","ENV",{"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","6001c7decb8dfd083f3b0ffa5d457c864fb16b4a","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","API_URL","https://api.val.town","clerkState",{"_73":74},"__internal_clerk_state",{"_75":76,"_77":50,"_78":79,"_80":79,"_81":20,"_82":79,"_83":79,"_84":79,"_85":79,"_86":87,"_96":20,"_97":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_88":20,"_19":20,"_89":79,"_90":91,"_92":79,"_93":50,"_94":20,"_95":79},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_100":101,"_102":103,"_104":105,"_106":107,"_163":164,"_182":183,"_184":-5},"handle","jowood94","name","notifyCompletion","path","icalFeed.ts","project",{"_108":109,"_102":103,"_110":111,"_112":-5,"_113":20,"_114":115,"_116":-5,"_117":-5,"_12":118,"_119":-5,"_120":20,"_121":-5,"_122":-5,"_123":33,"_14":124,"_125":-5,"_126":-5,"_127":-5,"_128":-5,"_129":130,"_131":130,"_132":133,"_134":133,"_135":133,"_136":130,"_137":130,"_23":138,"_141":142,"_146":147,"_162":20},"id","b2f7a1c2-399c-11f1-8224-42b51c65c3df","createdAt",["D",1776348060532],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","be2d4e89-1497-47a1-9051-1fee95fe0b49","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","019d9692-976f-76db-bd3a-758011d08db5","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_100":101,"_139":140},"profileImageUrl","https://avatars.githubusercontent.com/u/34335418?v=4","org",{"_100":101,"_143":140,"_12":118,"_144":145},"avatar","tier","free","branch",{"_148":149,"_102":48,"_108":150,"_151":109,"_152":153,"_154":155,"_156":115,"_157":158,"_159":124,"_160":103,"_161":101},"version",44,"b2fd158a-399c-11f1-8224-42b51c65c3df","projectId","forkedBranchId","775d8550-399c-11f1-9019-42b51c65c3df","forkedBranchVersion",1,"forkedProjectPrivacy","forkedProjectId","775cbc1a-399c-11f1-9019-42b51c65c3df","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_108":165,"_102":105,"_166":167,"_168":-5,"_169":150,"_170":149,"_171":172,"_110":173,"_148":174,"_175":176,"_177":178,"_179":20,"_180":-5,"_104":181},"4e791728-39ae-11f1-9f3f-42b51c65c3df","fileId","11af7472-39a9-11f1-9b9f-42b51c65c3df","parentId","branchId","branchVersion","latest",true,["D",1776355622851],33,"fileType","http","content","// punto! — iCal subscription feed (val.town HTTP trigger)\n//\n// Permette di sottoscrivere i reminder di punto! in Apple Calendar / Google Calendar\n// come feed .ics in sola lettura. Il feed si auto-aggiorna (le app calendar\n// rifetchano ogni 5-60 min a seconda del client).\n//\n// Deploy:\n// - HTTP val su val.town (stesso Project di notifyCompletion)\n// - Env vars condivise: FIREBASE_PROJECT_ID, FIREBASE_SERVICE_ACCOUNT\n//\n// Endpoint: GET /?t=\n// Auth: il token in URL È la credenziale. Va generato dal client con crypto-random\n// e salvato su users/{uid}.calendarFeedToken. Revocare = cambiare/cancellare\n// quel campo → il feed si disattiva (404).\n// Response: text/calendar; charset=utf-8 (VCALENDAR con VEVENT + RRULE + VALARM)\n//\n// Privacy: se title/content sono cifrati PGP (prefisso \"-----BEGIN PGP MESSAGE-----\")\n// il val NON può decifrarli → SUMMARY fallback a \"punto! reminder\".\n\nimport { SignJWT } from \"npm:jose@5\";\n\nconst FIREBASE_PROJECT_ID = Deno.env.get(\"FIREBASE_PROJECT_ID\")!;\nconst SERVICE_ACCOUNT = JSON.parse(Deno.env.get(\"FIREBASE_SERVICE_ACCOUNT\")!);\n\nlet cachedGcpToken: { token: string; exp: number } | null = null;\nlet cachedTokenScope: string | null = null;\nconst ICAL_SCOPE = \"https://www.googleapis.com/auth/datastore\";\n\nasync function getGcpAccessToken(): Promise {\n const now = Math.floor(Date.now() / 1000);\n // Invalida cache se scope diverso (possibile se il val condivide state con altri val del Project)\n if (cachedGcpToken && cachedGcpToken.exp > now + 60 && cachedTokenScope === ICAL_SCOPE) {\n return cachedGcpToken.token;\n }\n\n const pem = (SERVICE_ACCOUNT.private_key as string)\n .replace(/-----BEGIN PRIVATE KEY-----/g, \"\")\n .replace(/-----END PRIVATE KEY-----/g, \"\")\n .replace(/\\s+/g, \"\");\n const der = Uint8Array.from(atob(pem), (c) => c.charCodeAt(0));\n const key = await crypto.subtle.importKey(\n \"pkcs8\",\n der,\n { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n\n const jwt = await new SignJWT({\n scope: ICAL_SCOPE,\n })\n .setProtectedHeader({ alg: \"RS256\", typ: \"JWT\" })\n .setIssuer(SERVICE_ACCOUNT.client_email)\n .setAudience(\"https://oauth2.googleapis.com/token\")\n .setIssuedAt(now)\n .setExpirationTime(now + 3600)\n .sign(key);\n\n const resp = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n grant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n assertion: jwt,\n }),\n });\n if (!resp.ok) throw new Error(`GCP token exchange failed: ${await resp.text()}`);\n const { access_token, expires_in } = await resp.json();\n cachedGcpToken = { token: access_token, exp: now + expires_in };\n cachedTokenScope = ICAL_SCOPE;\n return access_token;\n}\n\ntype FirestoreValue = any;\n\nfunction fsToJs(v: FirestoreValue): any {\n if (!v) return null;\n if (\"stringValue\" in v) return v.stringValue;\n if (\"integerValue\" in v) return Number(v.integerValue);\n if (\"doubleValue\" in v) return v.doubleValue;\n if (\"booleanValue\" in v) return v.booleanValue;\n if (\"arrayValue\" in v) return (v.arrayValue.values ?? []).map(fsToJs);\n if (\"mapValue\" in v) {\n const out: any = {};\n for (const [k, val] of Object.entries(v.mapValue.fields ?? {})) out[k] = fsToJs(val);\n return out;\n }\n if (\"nullValue\" in v) return null;\n if (\"timestampValue\" in v) return new Date(v.timestampValue).getTime();\n return null;\n}\n\nasync function fsGet(token: string, path: string): Promise {\n const url = `https://firestore.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents/${path}`;\n const resp = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });\n if (resp.status === 404) return null;\n if (!resp.ok) throw new Error(`fsGet ${path}: ${resp.status} ${await resp.text()}`);\n const doc = await resp.json();\n const out: any = {};\n for (const [k, v] of Object.entries(doc.fields ?? {})) out[k] = fsToJs(v);\n return out;\n}\n\nasync function loadFeedIndex(\n gcp: string,\n token: string,\n): Promise<{ uid: string; noteIds: string[] } | null> {\n // Schema: calendarFeeds/{token} = { uid, noteIds: string[], updatedAt }\n // Lookup diretto via doc id → solo fsGet (il service account ha `get` ma non\n // sempre `list/runQuery` → questo schema evita IAM list permission).\n const feed = await fsGet(gcp, `calendarFeeds/${encodeURIComponent(token)}`);\n if (!feed || typeof feed.uid !== \"string\") return null;\n const noteIds = Array.isArray(feed.noteIds) ? feed.noteIds.filter((x: any) => typeof x === \"string\") : [];\n return { uid: feed.uid, noteIds };\n}\n\nasync function fetchNotesByIds(gcp: string, noteIds: string[]): Promise {\n const docs = await Promise.all(\n noteIds.map((id) => fsGet(gcp, `notes/${id}`).then((n) => (n ? { ...n, _id: id } : null))),\n );\n return docs.filter((x): x is any => x !== null);\n}\n\nfunction isPgpEncrypted(s: unknown): boolean {\n return typeof s === \"string\" && s.includes(\"-----BEGIN PGP MESSAGE-----\");\n}\n\nfunction icsEscape(s: string): string {\n return s\n .replace(/\\\\/g, \"\\\\\\\\\")\n .replace(/\\n/g, \"\\\\n\")\n .replace(/,/g, \"\\\\,\")\n .replace(/;/g, \"\\\\;\");\n}\n\nfunction icsFold(line: string): string {\n // RFC 5545: linee >75 ottetti vanno foldate (CRLF + spazio)\n if (line.length <= 75) return line;\n const out: string[] = [];\n let i = 0;\n while (i < line.length) {\n const chunk = line.slice(i, i + 75);\n out.push(i === 0 ? chunk : \" \" + chunk);\n i += 75;\n }\n return out.join(\"\\r\\n\");\n}\n\nfunction icsDate(tsMs: number): string {\n // UTC: YYYYMMDDTHHMMSSZ\n const d = new Date(tsMs);\n const pad = (n: number) => n.toString().padStart(2, \"0\");\n return (\n d.getUTCFullYear().toString() +\n pad(d.getUTCMonth() + 1) +\n pad(d.getUTCDate()) +\n \"T\" +\n pad(d.getUTCHours()) +\n pad(d.getUTCMinutes()) +\n pad(d.getUTCSeconds()) +\n \"Z\"\n );\n}\n\nfunction rrule(recurrence: string | null): string | null {\n switch (recurrence) {\n case \"daily\": return \"FREQ=DAILY\";\n case \"weekly\": return \"FREQ=WEEKLY\";\n case \"monthly\": return \"FREQ=MONTHLY\";\n default: return null;\n }\n}\n\nfunction buildVCalendar(uid: string, notes: any[]): string {\n const now = Date.now();\n const cutoffMs = 30 * 24 * 3600 * 1000;\n const lines: string[] = [];\n lines.push(\"BEGIN:VCALENDAR\");\n lines.push(\"VERSION:2.0\");\n lines.push(\"PRODID:-//punto!//Reminder Feed//EN\");\n lines.push(\"CALSCALE:GREGORIAN\");\n lines.push(\"METHOD:PUBLISH\");\n lines.push(\"X-WR-CALNAME:punto! — Promemoria\");\n lines.push(\"X-WR-TIMEZONE:Europe/Rome\");\n lines.push(\"NAME:punto! — Promemoria\");\n\n for (const n of notes) {\n const t: number | null = typeof n.reminderTime === \"number\" ? n.reminderTime : null;\n if (!t) continue;\n // Escludi reminder molto vecchi (solo se non ricorrenti)\n const rec = rrule(n.reminderRecurrence ?? null);\n if (!rec && t < now - cutoffMs) continue;\n\n const summary = isPgpEncrypted(n.title) || !n.title\n ? \"punto! reminder\"\n : String(n.title).slice(0, 200);\n\n const descParts: string[] = [];\n if (n.address && typeof n.address === \"string\") descParts.push(n.address);\n if (n.content && !isPgpEncrypted(n.content)) {\n const plain = String(n.content).replace(/<[^>]+>/g, \"\").slice(0, 500);\n if (plain.trim()) descParts.push(plain);\n }\n const description = descParts.join(\"\\n\");\n\n const dtstamp = icsDate(typeof n.updatedAt === \"number\" ? n.updatedAt : now);\n const dtstart = icsDate(t);\n const dtend = icsDate(t + 30 * 60 * 1000);\n\n lines.push(\"BEGIN:VEVENT\");\n lines.push(icsFold(`UID:${n._id}@punto-${FIREBASE_PROJECT_ID}`));\n lines.push(`DTSTAMP:${dtstamp}`);\n lines.push(`DTSTART:${dtstart}`);\n lines.push(`DTEND:${dtend}`);\n lines.push(icsFold(`SUMMARY:${icsEscape(summary)}`));\n if (description) lines.push(icsFold(`DESCRIPTION:${icsEscape(description)}`));\n if (typeof n.lat === \"number\" && typeof n.lon === \"number\") {\n lines.push(`GEO:${n.lat};${n.lon}`);\n if (n.address) lines.push(icsFold(`LOCATION:${icsEscape(String(n.address))}`));\n }\n if (rec) lines.push(`RRULE:${rec}`);\n lines.push(\"BEGIN:VALARM\");\n lines.push(\"ACTION:DISPLAY\");\n lines.push(\"DESCRIPTION:punto!\");\n lines.push(\"TRIGGER:PT0M\");\n lines.push(\"END:VALARM\");\n lines.push(\"END:VEVENT\");\n }\n\n lines.push(\"END:VCALENDAR\");\n return lines.join(\"\\r\\n\") + \"\\r\\n\";\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"GET\" && req.method !== \"HEAD\") {\n return new Response(\"method not allowed\", { status: 405 });\n }\n\n const url = new URL(req.url);\n const token = url.searchParams.get(\"t\") ?? \"\";\n const debugPath = url.searchParams.get(\"debug\") ?? \"\";\n if (!token || token.length < 16 || token.length > 128) {\n return new Response(\"invalid token\", { status: 400 });\n }\n\n try {\n const gcp = await getGcpAccessToken();\n\n // DEBUG: ?debug=notes/abc → prova fsGet su path arbitrario\n // DEBUG: ?debug=env → stampa diagnostica env vars (oscurata)\n if (debugPath === \"env\") {\n const rawSa = Deno.env.get(\"FIREBASE_SERVICE_ACCOUNT\") ?? \"\";\n const saKeys = SERVICE_ACCOUNT && typeof SERVICE_ACCOUNT === \"object\"\n ? Object.keys(SERVICE_ACCOUNT)\n : [];\n const ce: string = typeof SERVICE_ACCOUNT?.client_email === \"string\" ? SERVICE_ACCOUNT.client_email : \"\";\n const pk: string = typeof SERVICE_ACCOUNT?.private_key === \"string\" ? SERVICE_ACCOUNT.private_key : \"\";\n return Response.json({\n FIREBASE_PROJECT_ID: FIREBASE_PROJECT_ID ?? null,\n rawEnvLength: rawSa.length,\n rawStartsWith: rawSa.slice(0, 20),\n rawEndsWith: rawSa.slice(-20),\n saKeys,\n serviceAccountType: SERVICE_ACCOUNT?.type ?? null,\n serviceAccountProjectId: SERVICE_ACCOUNT?.project_id ?? null,\n clientEmailLength: ce.length,\n clientEmailDomain: ce.includes(\"@\") ? ce.split(\"@\")[1] : null,\n privateKeyLength: pk.length,\n privateKeyStartsWith: pk.slice(0, 30),\n tokenPrefix: gcp.slice(0, 16),\n });\n }\n if (debugPath) {\n try {\n const doc = await fsGet(gcp, debugPath);\n return Response.json({ debug: debugPath, found: doc !== null, doc });\n } catch (e) {\n return Response.json({ debug: debugPath, error: (e as Error).message }, { status: 200 });\n }\n }\n\n const index = await loadFeedIndex(gcp, token);\n if (!index) return new Response(\"feed not found\", { status: 404 });\n\n const notes = index.noteIds.length === 0 ? [] : await fetchNotesByIds(gcp, index.noteIds);\n // Filtro server-side: la nota deve appartenere all'uid del feed (anti-tamper).\n const owned = notes.filter(\n (n) => n.uid === index.uid || (Array.isArray(n.collaboratorUids) && n.collaboratorUids.includes(index.uid)),\n );\n const ics = buildVCalendar(index.uid, owned);\n\n return new Response(ics, {\n status: 200,\n headers: {\n \"Content-Type\": \"text/calendar; charset=utf-8\",\n \"Cache-Control\": \"public, max-age=300\",\n \"Content-Disposition\": 'inline; filename=\"punto-reminders.ics\"',\n },\n });\n } catch (e) {\n return new Response(`internal error: ${(e as Error).message}`, { status: 500 });\n }\n}","deleted","label",[105],"permalink","https://www.val.town/x/jowood94/notifyCompletion/code/icalFeed.ts","extension","actionData","errors"]