[{"_1":2,"_186":-5,"_187":-5},"loaderData",{"_3":4,"_98":99},"root",{"_5":6,"_39":40,"_71":72},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":-5,"_32":33,"_34":20,"_35":20,"_36":-5,"_37":20,"_38":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesChatPanelState","notificationCount",0,"flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","ENV",{"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","6001c7decb8dfd083f3b0ffa5d457c864fb16b4a","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","API_URL","https://api.val.town","clerkState",{"_73":74},"__internal_clerk_state",{"_75":76,"_77":50,"_78":79,"_80":79,"_81":20,"_82":79,"_83":79,"_84":79,"_85":79,"_86":87,"_96":20,"_97":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_88":20,"_19":20,"_89":79,"_90":91,"_92":79,"_93":50,"_94":20,"_95":79},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_100":101,"_102":103,"_104":105,"_106":107,"_163":164,"_183":184,"_185":-5},"handle","jowood94","name","notifyCompletion","path","main.ts","project",{"_108":109,"_102":103,"_110":111,"_112":-5,"_113":20,"_114":115,"_116":-5,"_117":-5,"_12":118,"_119":-5,"_120":20,"_121":-5,"_122":-5,"_123":33,"_14":124,"_125":-5,"_126":-5,"_127":-5,"_128":-5,"_129":130,"_131":130,"_132":133,"_134":133,"_135":133,"_136":130,"_137":130,"_23":138,"_141":142,"_146":147,"_162":20},"id","b2f7a1c2-399c-11f1-8224-42b51c65c3df","createdAt",["D",1776348060532],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","be2d4e89-1497-47a1-9051-1fee95fe0b49","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","019d9692-976f-76db-bd3a-758011d08db5","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_100":101,"_139":140},"profileImageUrl","https://avatars.githubusercontent.com/u/34335418?v=4","org",{"_100":101,"_143":140,"_12":118,"_144":145},"avatar","tier","free","branch",{"_148":149,"_102":48,"_108":150,"_151":109,"_152":153,"_154":155,"_156":115,"_157":158,"_159":124,"_160":103,"_161":101},"version",44,"b2fd158a-399c-11f1-8224-42b51c65c3df","projectId","forkedBranchId","775d8550-399c-11f1-9019-42b51c65c3df","forkedBranchVersion",1,"forkedProjectPrivacy","forkedProjectId","775cbc1a-399c-11f1-9019-42b51c65c3df","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_108":165,"_102":105,"_166":167,"_168":-5,"_169":150,"_170":171,"_172":173,"_110":174,"_148":175,"_176":177,"_178":179,"_180":20,"_181":-5,"_104":182},"c31e7822-399d-11f1-ac39-42b51c65c3df","fileId","019d9698-5bb5-765b-aa25-4e05f1f46d61","parentId","branchId","branchVersion",6,"latest",true,["D",1776348517122],5,"fileType","http","content","// punto! — real-time completion notification proxy\n// Deploy as HTTP val on val.town. Requires env vars:\n// - FIREBASE_PROJECT_ID es. \"punto-staging\" o \"punto-84646\"\n// - FIREBASE_SERVICE_ACCOUNT JSON completo della service account (stesso usato dal cron)\n//\n// Endpoint: POST /\n// Auth: Authorization: Bearer \n// Body: { noteId: string }\n//\n// Contract con client:\n// 1. Client scrive sul doc nota: completionNotifyPending=true + By/ByName/At\n// 2. Client chiama questo val (fire-and-forget)\n// 3. Val legge la nota, valida che l'utente autenticato == completionNotifyBy,\n// invia FCM ai destinatari, resetta i flag\n// 4. Fallback: se il val fallisce, il cron GHA (ogni 5min) pulisce l'arretrato\n\nimport { createRemoteJWKSet, jwtVerify, SignJWT } from \"npm:jose@5\";\n\nconst COMPLETION_STRINGS: Record<\n string,\n { title: string; body: (name: string) => string }\n> = {\n it: {\n title: \"punto! — Promemoria evaso\",\n body: (name) => `${name} ha evaso un promemoria condiviso`,\n },\n en: {\n title: \"punto! — Reminder completed\",\n body: (name) => `${name} completed a shared reminder`,\n },\n};\n\nlet cachedGcpToken: { token: string; exp: number } | null = null;\nconst FIREBASE_PROJECT_ID = Deno.env.get(\"FIREBASE_PROJECT_ID\")!;\nconst SERVICE_ACCOUNT = JSON.parse(Deno.env.get(\"FIREBASE_SERVICE_ACCOUNT\")!);\n\nconst firebaseJwks = createRemoteJWKSet(\n new URL(\n \"https://www.googleapis.com/robot/v1/metadata/x509/securetoken@system.gserviceaccount.com\",\n ),\n { cacheMaxAge: 60 * 60 * 1000 },\n);\n\nasync function verifyFirebaseIdToken(idToken: string): Promise {\n // Firebase usa cert pubblici in formato X509 sull'endpoint sopra. jose JWKS parser\n // non gestisce X509 direttamente → usiamo l'endpoint JWKS-compatibile alternativo:\n const jwksUrl = new URL(\n \"https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com\",\n );\n const jwks = createRemoteJWKSet(jwksUrl, { cacheMaxAge: 60 * 60 * 1000 });\n const { payload } = await jwtVerify(idToken, jwks, {\n issuer: `https://securetoken.google.com/${FIREBASE_PROJECT_ID}`,\n audience: FIREBASE_PROJECT_ID,\n });\n if (!payload.sub) throw new Error(\"ID token without sub\");\n return payload.sub as string;\n}\n\nasync function getGcpAccessToken(): Promise {\n const now = Math.floor(Date.now() / 1000);\n if (cachedGcpToken && cachedGcpToken.exp > now + 60) {\n return cachedGcpToken.token;\n }\n\n // Import PEM private key → CryptoKey\n const pem = (SERVICE_ACCOUNT.private_key as string)\n .replace(/-----BEGIN PRIVATE KEY-----/g, \"\")\n .replace(/-----END PRIVATE KEY-----/g, \"\")\n .replace(/\\s+/g, \"\");\n const der = Uint8Array.from(atob(pem), (c) => c.charCodeAt(0));\n const key = await crypto.subtle.importKey(\n \"pkcs8\",\n der,\n { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n\n const jwt = await new SignJWT({\n scope:\n \"https://www.googleapis.com/auth/datastore https://www.googleapis.com/auth/firebase.messaging\",\n })\n .setProtectedHeader({ alg: \"RS256\", typ: \"JWT\" })\n .setIssuer(SERVICE_ACCOUNT.client_email)\n .setAudience(\"https://oauth2.googleapis.com/token\")\n .setIssuedAt(now)\n .setExpirationTime(now + 3600)\n .sign(key);\n\n const resp = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n grant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n assertion: jwt,\n }),\n });\n if (!resp.ok) {\n throw new Error(`GCP token exchange failed: ${await resp.text()}`);\n }\n const { access_token, expires_in } = await resp.json();\n cachedGcpToken = { token: access_token, exp: now + expires_in };\n return access_token;\n}\n\ntype FirestoreValue = any;\n\nfunction firestoreToJs(v: FirestoreValue): any {\n if (!v) return null;\n if (\"stringValue\" in v) return v.stringValue;\n if (\"integerValue\" in v) return Number(v.integerValue);\n if (\"doubleValue\" in v) return v.doubleValue;\n if (\"booleanValue\" in v) return v.booleanValue;\n if (\"arrayValue\" in v) return (v.arrayValue.values ?? []).map(firestoreToJs);\n if (\"mapValue\" in v) {\n const out: any = {};\n for (const [k, val] of Object.entries(v.mapValue.fields ?? {})) {\n out[k] = firestoreToJs(val);\n }\n return out;\n }\n if (\"nullValue\" in v) return null;\n if (\"timestampValue\" in v) return new Date(v.timestampValue).getTime();\n return null;\n}\n\nasync function firestoreGet(token: string, path: string): Promise {\n const url =\n `https://firestore.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents/${path}`;\n const resp = await fetch(url, {\n headers: { Authorization: `Bearer ${token}` },\n });\n if (resp.status === 404) return null;\n if (!resp.ok) {\n throw new Error(\n `firestoreGet ${path}: ${resp.status} ${await resp.text()}`,\n );\n }\n const doc = await resp.json();\n const out: any = {};\n for (const [k, v] of Object.entries(doc.fields ?? {})) {\n out[k] = firestoreToJs(v);\n }\n return out;\n}\n\nasync function firestoreResetCompletion(\n token: string,\n noteId: string,\n): Promise {\n // PATCH con updateMask che include i 4 campi → quelli omessi dal body vengono cancellati.\n const mask = [\n \"completionNotifyPending\",\n \"completionNotifyBy\",\n \"completionNotifyByName\",\n \"completionNotifyAt\",\n ];\n const qs = mask.map((m) => `updateMask.fieldPaths=${encodeURIComponent(m)}`)\n .join(\"&\");\n const url =\n `https://firestore.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents/notes/${noteId}?${qs}`;\n const body = {\n fields: {\n completionNotifyPending: { booleanValue: false },\n },\n };\n const resp = await fetch(url, {\n method: \"PATCH\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(body),\n });\n if (!resp.ok) {\n throw new Error(\n `firestoreResetCompletion: ${resp.status} ${await resp.text()}`,\n );\n }\n}\n\nasync function fcmSend(\n token: string,\n registrationToken: string,\n title: string,\n body: string,\n noteId: string,\n): Promise {\n const url =\n `https://fcm.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/messages:send`;\n const message = {\n message: {\n token: registrationToken,\n webpush: {\n notification: {\n title,\n body,\n icon: \"/icons/icon-192x192.png\",\n tag: `completion-${noteId}`,\n },\n data: { title, body, noteId, kind: \"completion\" },\n },\n },\n };\n const resp = await fetch(url, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(message),\n });\n return resp.ok;\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"method not allowed\", { status: 405 });\n }\n\n const auth = req.headers.get(\"authorization\") ?? \"\";\n if (!auth.startsWith(\"Bearer \")) {\n return new Response(\"missing token\", { status: 401 });\n }\n const idToken = auth.slice(7);\n\n let callerUid: string;\n try {\n callerUid = await verifyFirebaseIdToken(idToken);\n } catch (e) {\n return new Response(`invalid token: ${(e as Error).message}`, {\n status: 401,\n });\n }\n\n let noteId: string;\n try {\n const body = await req.json();\n noteId = body.noteId;\n if (!noteId || typeof noteId !== \"string\") {\n throw new Error(\"noteId required\");\n }\n } catch {\n return new Response(\"invalid body\", { status: 400 });\n }\n\n const gcpToken = await getGcpAccessToken();\n const note = await firestoreGet(gcpToken, `notes/${noteId}`);\n if (!note) return new Response(\"note not found\", { status: 404 });\n\n if (!note.completionNotifyPending) {\n return Response.json({ ok: true, noop: true, reason: \"no pending flag\" });\n }\n if (note.completionNotifyBy !== callerUid) {\n return new Response(\"caller not the completer\", { status: 403 });\n }\n\n const ownerUid: string = note.uid;\n const collabUids: string[] = note.collaboratorUids ?? [];\n const recipients = new Set([ownerUid, ...collabUids]);\n recipients.delete(callerUid);\n\n const byName: string = note.completionNotifyByName || \"A collaborator\";\n\n if (recipients.size === 0) {\n await firestoreResetCompletion(gcpToken, noteId);\n return Response.json({ ok: true, sent: 0, reason: \"no recipients\" });\n }\n\n const userDocs = await Promise.all(\n [...recipients].map(async (uid) => ({\n uid,\n data: await firestoreGet(gcpToken, `users/${uid}`),\n })),\n );\n\n const sends: Promise[] = [];\n for (const { data } of userDocs) {\n if (!data) continue;\n const tokens: string[] = data.fcmTokens ?? [];\n const lang = (data.language && data.language in COMPLETION_STRINGS\n ? data.language\n : \"it\") as \"it\" | \"en\";\n const strings = COMPLETION_STRINGS[lang];\n for (const t of tokens) {\n sends.push(\n fcmSend(gcpToken, t, strings.title, strings.body(byName), noteId),\n );\n }\n }\n\n const results = await Promise.all(sends);\n const sent = results.filter(Boolean).length;\n\n await firestoreResetCompletion(gcpToken, noteId);\n\n return Response.json({ ok: true, sent, total: sends.length });\n}","deleted","label",[105],"permalink","https://www.val.town/x/jowood94/notifyCompletion/code/main.ts","extension","actionData","errors"]