[{"_1":2,"_175":-5,"_176":-5},"loaderData",{"_3":4,"_93":94},"root",{"_5":6,"_36":37,"_66":67},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":-5,"_32":33,"_34":20,"_35":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesChatPanelState","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63,"_64":65},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","6050acf0705e6826bb1b68e27572c5b8979c5bd9","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_68":69},"__internal_clerk_state",{"_70":71,"_72":47,"_73":74,"_75":74,"_76":20,"_77":74,"_78":74,"_79":74,"_80":74,"_81":82,"_91":20,"_92":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_83":20,"_19":20,"_84":74,"_85":86,"_87":74,"_88":47,"_89":20,"_90":74},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_95":96,"_97":98,"_99":100,"_101":102,"_153":154,"_172":173,"_174":-5},"handle","metatronapps","name","val","path","main.ts","project",{"_103":104,"_97":98,"_105":106,"_107":-5,"_108":20,"_109":110,"_111":-5,"_112":-5,"_12":113,"_114":-5,"_115":20,"_116":-5,"_117":-5,"_118":33,"_14":119,"_120":-5,"_121":-5,"_122":123,"_124":123,"_125":126,"_127":126,"_128":126,"_129":123,"_130":123,"_23":131,"_134":135,"_139":140,"_152":20},"id","65900652-09d3-11f1-b865-42dde27851f2","createdAt",["D",1771093897186],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","019c5d6a-0fbb-74db-a361-631e1f6ab643","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","019c5d6a-0fbb-74db-a361-670aee038119","tursoName","tursoHostname","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_95":96,"_132":133},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18zOWZpdkx1VWhuaXI3RzA2MkhJQnczMWF1MFAifQ","org",{"_95":96,"_136":133,"_12":113,"_137":138},"avatar","tier","free","branch",{"_141":142,"_97":45,"_103":143,"_144":104,"_145":-5,"_146":-5,"_147":-5,"_148":-5,"_149":-5,"_150":98,"_151":96},"version",14,"65903ea6-09d3-11f1-b865-42dde27851f2","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_103":155,"_97":100,"_156":157,"_158":-5,"_159":143,"_160":142,"_161":162,"_105":163,"_141":164,"_165":166,"_167":168,"_169":20,"_170":-5,"_99":171},"ec6308d4-0c29-11f1-aff4-42dde27851f2","fileId","65920178-09d3-11f1-b865-42dde27851f2","parentId","branchId","branchVersion","latest",true,["D",1771350961873],13,"fileType","http","content","import { Hono } from \"npm:hono\";\n\nconst app = new Hono();\n\nconst API_KEY_ID = \"674bc462-683a-42de-b4d0-ce2f467112fd\";\nconst KALSHI_BASE = \"https://api.elections.kalshi.com/trade-api/v2\";\nconst PRIVATE_KEY_PEM = Deno.env.get(\"KALSHI_PRIVATE_KEY\");\n\nfunction pemToBytes(pem: string): Uint8Array {\n const b64 = pem.replace(/-----[^-]+-----/g, \"\").replace(/\\s/g, \"\");\n const binary = atob(b64);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes;\n}\n\nfunction pkcs1ToPkcs8(pkcs1Bytes: Uint8Array): Uint8Array {\n const pkcs8Header = new Uint8Array([\n 0x30,\n 0x82,\n 0x00,\n 0x00,\n 0x02,\n 0x01,\n 0x00,\n 0x30,\n 0x0d,\n 0x06,\n 0x09,\n 0x2a,\n 0x86,\n 0x48,\n 0x86,\n 0xf7,\n 0x0d,\n 0x01,\n 0x01,\n 0x01,\n 0x05,\n 0x00,\n 0x04,\n 0x82,\n 0x00,\n 0x00,\n ]);\n const totalLen = pkcs8Header.length + pkcs1Bytes.length;\n const result = new Uint8Array(totalLen);\n result.set(pkcs8Header);\n result.set(pkcs1Bytes, pkcs8Header.length);\n const outerLen = totalLen - 4;\n result[2] = (outerLen >> 8) & 0xff;\n result[3] = outerLen & 0xff;\n const octetLen = pkcs1Bytes.length;\n result[pkcs8Header.length - 2] = (octetLen >> 8) & 0xff;\n result[pkcs8Header.length - 1] = octetLen & 0xff;\n return result;\n}\n\nasync function getSigningKey(): Promise {\n if (!PRIVATE_KEY_PEM) throw new Error(\"KALSHI_PRIVATE_KEY not set\");\n const raw = pemToBytes(PRIVATE_KEY_PEM);\n const pkcs8Bytes = PRIVATE_KEY_PEM.includes(\"BEGIN RSA PRIVATE KEY\")\n ? pkcs1ToPkcs8(raw)\n : raw;\n return crypto.subtle.importKey(\n \"pkcs8\",\n pkcs8Bytes,\n { name: \"RSA-PSS\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n}\n\nasync function signRequest(\n timestamp: string,\n method: string,\n path: string,\n): Promise {\n const key = await getSigningKey();\n const data = new TextEncoder().encode(timestamp + method + path);\n const sig = await crypto.subtle.sign(\n { name: \"RSA-PSS\", saltLength: 32 },\n key,\n data,\n );\n return btoa(String.fromCharCode(...new Uint8Array(sig)));\n}\n\nfunction authHeaders(\n timestamp: string,\n signature: string,\n): Record {\n return {\n \"KALSHI-ACCESS-KEY\": API_KEY_ID,\n \"KALSHI-ACCESS-TIMESTAMP\": timestamp,\n \"KALSHI-ACCESS-SIGNATURE\": signature,\n \"Content-Type\": \"application/json\",\n \"Accept\": \"application/json\",\n };\n}\n\nasync function handleBalance(): Promise {\n const ts = String(Date.now() + 10000);\n const path = \"/trade-api/v2/portfolio/balance\";\n const sig = await signRequest(ts, \"GET\", path);\n const res = await fetch(KALSHI_BASE + \"/portfolio/balance\", {\n method: \"GET\",\n headers: authHeaders(ts, sig),\n });\n const data = await res.json();\n return new Response(JSON.stringify(data), {\n status: res.status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nasync function handleOrder(body: Record): Promise {\n const ts = String(Date.now() + 10000);\n const path = \"/trade-api/v2/portfolio/orders\";\n const sig = await signRequest(ts, \"POST\", path);\n const orderBody: Record = {\n ticker: body.ticker,\n action: body.order_action,\n side: body.side,\n count: body.count,\n type: body.type,\n };\n if (body.yes_price !== undefined) orderBody.yes_price = body.yes_price;\n if (body.no_price !== undefined) orderBody.no_price = body.no_price;\n const res = await fetch(KALSHI_BASE + \"/portfolio/orders\", {\n method: \"POST\",\n headers: authHeaders(ts, sig),\n body: JSON.stringify(orderBody),\n });\n const data = await res.json();\n return new Response(JSON.stringify(data), {\n status: res.status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nasync function handleCancel(body: Record): Promise {\n const orderId = body.order_id as string;\n if (!orderId) {\n return new Response(\n JSON.stringify({ error: \"order_id required for cancel action\" }),\n { status: 400, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n const ts = String(Date.now() + 10000);\n const path = `/trade-api/v2/portfolio/orders/${orderId}`;\n const sig = await signRequest(ts, \"DELETE\", path);\n const res = await fetch(\n `https://api.elections.kalshi.com${path}`,\n {\n method: \"DELETE\",\n headers: authHeaders(ts, sig),\n },\n );\n const data = await res.json().catch(() => ({}));\n return new Response(\n JSON.stringify({\n action: \"cancel\",\n order_id: orderId,\n status: res.status,\n ...data,\n }),\n { status: res.status, headers: { \"Content-Type\": \"application/json\" } },\n );\n}\n\napp.post(\"/\", async (c) => {\n try {\n const body = await c.req.json();\n if (body.action === \"balance\") return handleBalance();\n if (body.action === \"cancel\") return handleCancel(body);\n if (body.action === \"order\") {\n if (\n !body.ticker || !body.order_action || !body.side || !body.count ||\n !body.type\n ) {\n return c.json({\n error: \"Missing required: ticker, order_action, side, count, type\",\n }, 400);\n }\n return handleOrder(body);\n }\n const { timestamp, method, path } = body;\n if (!timestamp || !method || !path) {\n return c.json({\n error:\n \"Use action: balance|order|cancel, or provide timestamp+method+path\",\n }, 400);\n }\n const signature = await signRequest(timestamp, method, path);\n return c.json({ signature, timestamp });\n } catch (error) {\n return c.json({ error: String(error) }, 500);\n }\n});\n\nexport default app.fetch;","deleted","label",[100],"permalink","https://www.val.town/x/metatronapps/val/code/main.ts","extension","actionData","errors"]