[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_101":102,"_103":104},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","samy","name","bison-reply-agent","path","calendly.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":-5,"_53":-5,"_54":55,"_56":-5,"_57":42,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/samy/bison-reply-agent/code/calendly.ts","extension","id","0077a4d8-3520-4f2d-aa0c-eab8919f54f5","fileId","c443a84e-82f4-11f1-adff-1607ee4eb77e","parentId","branchId","54481d2d-a3f3-4dfa-ab51-1abb2a0d7de9","branchVersion",80,"latest",true,"createdAt",["D",1784420096609],"version",1,"fileType","script","content","// Calendly calendar layer - mirrors the ghl.ts calendar interface so\n// scheduling.ts/webhook.ts keep their contracts (slot strings\n// \"YYYY-MM-DDTHH:mm:ss±HH:MM\" in prospect tz; bookWithRecovery outcomes\n// booked|taken|stuck; upcoming-appointment {id, startTime} with location-local\n// startTime). GHL remains the CRM; only calendar ops live here.\n//\n// Env: CALENDLY_TOKEN (PAT), CALENDLY_EVENT_TYPE (the SECRET twin event type\n// URI - ALL agent bookings/availability go through it; the public /pilot link\n// is only for self-bookers, which doubles as agent-vs-self attribution),\n// CALENDLY_ORG_URI (optional, derived from /users/me), CALENDLY_WEBHOOK_SIGNING_KEY.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst CAL_BASE = \"https://api.calendly.com\";\nexport const CALENDLY_TIMEZONE = \"America/Los_Angeles\"; // location tz (mirrors GHL_TIMEZONE)\nexport const CALENDLY_BOOKING_QUESTIONS = true; // twin has required Mobile Phone / Clinic Name\n\n// Error prefix \"calendly METHOD path STATUS: body\" is load-bearing:\n// bookingErrorIsDefinitive() distinguishes HTTP-answered rejections from\n// ambiguous timeout/network aborts (never match timeout text - it differs per\n// runtime). 15s reads / 60s mutations, same recovery ladder as GHL.\nasync function calendly(\n method: string,\n path: string,\n body?: unknown,\n timeoutMs = 15_000,\n): Promise {\n const resp = await fetch(CAL_BASE + path, {\n method,\n headers: {\n \"Authorization\": `Bearer ${Deno.env.get(\"CALENDLY_TOKEN\")}`,\n \"Content-Type\": \"application/json\",\n },\n body: body === undefined ? undefined : JSON.stringify(body),\n signal: AbortSignal.timeout(timeoutMs),\n });\n const text = await resp.text();\n if (!resp.ok) throw new Error(`calendly ${method} ${path} ${resp.status}: ${text.slice(0, 400)}`);\n return text ? JSON.parse(text) : {};\n}\n\nexport function calendarConfigured(): boolean {\n return Boolean(Deno.env.get(\"CALENDLY_TOKEN\") && Deno.env.get(\"CALENDLY_EVENT_TYPE\"));\n}\n\nfunction eventTypeUri(): string {\n return Deno.env.get(\"CALENDLY_EVENT_TYPE\") ?? \"\";\n}\n\nlet cachedOrg: string | null = null;\nexport async function orgUri(): Promise {\n const env = Deno.env.get(\"CALENDLY_ORG_URI\");\n if (env) return env;\n if (cachedOrg) return cachedOrg;\n const me = await calendly(\"GET\", \"/users/me\");\n cachedOrg = me?.resource?.current_organization ?? \"\";\n return cachedOrg!;\n}\n\nexport function uuidOf(uri: string): string {\n return uri.split(\"/\").pop() ?? uri;\n}\n\n// UTC instant -> \"YYYY-MM-DDTHH:mm:ss±HH:MM\" rendered in `timezone` (the slot\n// string layout scheduling.ts slotDate/slotMinutes parse by fixed offsets).\nexport function utcToZonedIso(utc: string, timezone: string): string {\n const d = new Date(utc);\n const wall = d.toLocaleString(\"sv-SE\", { timeZone: timezone }); // \"YYYY-MM-DD HH:mm:ss\"\n const raw = new Intl.DateTimeFormat(\"en-US\", { timeZone: timezone, timeZoneName: \"longOffset\" })\n .formatToParts(d).find((p) => p.type === \"timeZoneName\")?.value ?? \"GMT+00:00\";\n const offset = raw === \"GMT\" ? \"+00:00\" : raw.replace(\"GMT\", \"\");\n return `${wall.slice(0, 10)}T${wall.slice(11, 19)}${offset}`;\n}\n\nfunction isoNowPlus(seconds: number): string {\n return new Date(Date.now() + seconds * 1000).toISOString().replace(/\\.\\d{3}Z$/, \"Z\");\n}\n\nasync function availableTimes(startIso: string, endIso: string, timezone: string): Promise> {\n const et = encodeURIComponent(eventTypeUri());\n const data = await calendly(\n \"GET\",\n `/event_type_available_times?event_type=${et}&start_time=${encodeURIComponent(startIso)}&end_time=${encodeURIComponent(endIso)}`,\n );\n const out: Record = {};\n for (const s of data?.collection ?? []) {\n if (s?.status && s.status !== \"available\") continue;\n const zoned = utcToZonedIso(s.start_time, timezone);\n (out[zoned.slice(0, 10)] ??= []).push(zoned);\n }\n for (const day of Object.keys(out)) out[day].sort();\n return out;\n}\n\n// SAME name/shape as ghl.fetchFreeSlots. API caps ranges at 7 days.\nexport async function fetchFreeSlots(days = 6, timezone = CALENDLY_TIMEZONE): Promise> {\n return await availableTimes(isoNowPlus(120), isoNowPlus(Math.min(days, 6.9) * 86_400), timezone);\n}\n\n// Targeted far-out window: one ≤7-day fetch covering the proposed date (the\n// twin's 60-day scheduling window is what makes far-out dates visible at all).\nexport async function fetchSlotsForDate(proposedDate: string, timezone: string): Promise> {\n const dayStartUtc = new Date(`${proposedDate}T00:00:00Z`).getTime() - 86_400_000; // pad a day for tz offsets\n const start = Math.max(dayStartUtc, Date.now() + 120_000);\n const startIso = new Date(start).toISOString().replace(/\\.\\d{3}Z$/, \"Z\");\n const endIso = new Date(start + 3 * 86_400_000).toISOString().replace(/\\.\\d{3}Z$/, \"Z\");\n return await availableTimes(startIso, endIso, timezone);\n}\n\n// POST /invitees on the twin. startTime accepts the local-offset slot string.\n// The twin's REQUIRED questions must always be answered (verified live:\n// \"Required Questions and Answers cannot be blank\"; phone accepts free text,\n// so the fallback chain can bottom out at \"not provided\").\nexport async function bookAppointment(a: {\n email: string;\n name: string;\n startTime: string; // local-offset slot string or UTC ISO\n timezone: string; // prospect IANA zone - drives their confirmation rendering\n phone?: string;\n clinic?: string;\n}): Promise<{ id: string; inviteeUri: string }> {\n const data = await calendly(\"POST\", \"/invitees\", {\n event_type: eventTypeUri(),\n start_time: new Date(a.startTime).toISOString().replace(/\\.\\d{3}Z$/, \"Z\"),\n location: { kind: \"google_conference\" },\n invitee: { name: a.name, email: a.email, timezone: a.timezone },\n questions_and_answers: [\n { question: \"Mobile Phone\", answer: a.phone || \"not provided\", position: 0 },\n { question: \"Clinic Name\", answer: a.clinic || \"not provided\", position: 1 },\n ],\n }, 60_000);\n const r = data?.resource ?? data;\n const eventUri = r?.event;\n if (!eventUri) throw new Error(\"calendly bookAppointment: no event in response\");\n return { id: uuidOf(eventUri), inviteeUri: r?.uri ?? \"\" };\n}\n\nexport function bookingErrorIsDefinitive(e: unknown): boolean {\n return String(e).startsWith(\"Error: calendly \") || String(e).includes(\"calendly POST\") ||\n String(e).includes(\"calendly GET\");\n}\n\nasync function bookingLanded(emails: (string | undefined)[]): Promise<{ id: string; startTime: string } | null> {\n for (const waitMs of [5_000, 10_000, 15_000]) {\n await new Promise((r) => setTimeout(r, waitMs));\n const appt = await getUpcomingAppointment(emails).catch(() => null);\n if (appt) return appt;\n }\n return null;\n}\n\n// Identical outcome contract to the GHL version (see NOTES.md Cornerstone\n// incident): 2 attempts; ambiguous abort -> landed-check -> retry -> check;\n// a definitive 400 AFTER an ambiguous attempt gets one more landed-check\n// (\"already_filled\" may be our own aborted POST having committed).\nexport async function bookWithRecovery(a: {\n email: string;\n name: string;\n startTime: string;\n timezone: string;\n phone?: string;\n clinic?: string;\n}): Promise<\n | { outcome: \"booked\"; apptId: string; note: string }\n | { outcome: \"taken\"; error: unknown }\n | { outcome: \"stuck\"; error: unknown }\n> {\n let sawAmbiguous = false;\n let lastErr: unknown = null;\n for (let attempt = 1; attempt <= 2; attempt++) {\n try {\n const appt = await bookAppointment(a);\n return { outcome: \"booked\", apptId: appt.id, note: attempt > 1 ? \" (on retry)\" : \"\" };\n } catch (e) {\n lastErr = e;\n console.error(`calendly book attempt ${attempt} failed:`, e);\n if (bookingErrorIsDefinitive(e)) {\n if (!sawAmbiguous) return { outcome: \"taken\", error: e };\n const landed = await bookingLanded([a.email]);\n if (landed) return { outcome: \"booked\", apptId: landed.id, note: \" (earlier aborted call landed)\" };\n return { outcome: \"taken\", error: e };\n }\n sawAmbiguous = true;\n const landed = await bookingLanded([a.email]);\n if (landed) return { outcome: \"booked\", apptId: landed.id, note: \" (landed after aborted call)\" };\n }\n }\n return { outcome: \"stuck\", error: lastErr };\n}\n\nexport async function getScheduledEvent(eventUuid: string): Promise {\n const data = await calendly(\"GET\", `/scheduled_events/${eventUuid}`).catch(() => null);\n return data?.resource ?? null;\n}\n\n// Meet link for a just-booked event. Google pushes the conference a moment\n// after booking (location.status \"pushed\"); tiny retry covers the gap.\nexport async function getMeetLink(eventUuid: string): Promise {\n for (let attempt = 0; attempt < 3; attempt++) {\n try {\n const data = await calendly(\"GET\", `/scheduled_events/${eventUuid}`);\n const loc = data?.resource?.location;\n if (loc?.join_url) return loc.join_url;\n } catch (e) {\n console.error(\"getMeetLink:\", e);\n }\n await new Promise((r) => setTimeout(r, 3000));\n }\n return \"\";\n}\n\n// In-thread add-to-calendar links for booking confirmations (Calendly hosts\n// no linkable .ics - verified 2026-07-18; its .ics is an email attachment).\n// gcal = one-click Google prefill; ics = our own endpoint (test-ghl.ts\n// ?action=ics) serving a generated file for Apple/Outlook.\nexport function buildCalendarLinks(\n eventUuid: string,\n joinUrl: string,\n startUtc: string,\n adminUrl: string,\n durationMin = 30,\n): { gcal: string; ics: string } {\n const fmt = (iso: string) => iso.replace(/[-:]/g, \"\").replace(/\\.\\d+/, \"\");\n const start = new Date(startUtc);\n const end = new Date(start.getTime() + durationMin * 60_000);\n const q = new URLSearchParams({\n action: \"TEMPLATE\",\n text: \"Pilot Campaign Call with Lumina\",\n dates: `${fmt(start.toISOString())}/${fmt(end.toISOString())}`,\n details: joinUrl ? `Google Meet: ${joinUrl}` : \"Details in your confirmation email.\",\n location: joinUrl || \"Google Meet\",\n });\n return {\n gcal: `https://calendar.google.com/calendar/render?${q.toString()}`,\n ics: `${adminUrl}?action=ics&e=${eventUuid}`,\n };\n}\n\n// Cancels keep the record (Calendly has no hard-delete for events).\nexport async function cancelAppointment(eventUuid: string, reason = \"Cancelled via our scheduling assistant\") {\n return await calendly(\"POST\", `/scheduled_events/${eventUuid}/cancellation`, { reason }, 60_000);\n}\n\n// No reschedule-to-time API: BOOK-NEW-FIRST, THEN CANCEL-OLD. The old\n// appointment survives a failed booking; a cancel failure after a successful\n// booking is surfaced in the note (never orphans the prospect).\nexport async function rescheduleAppointment(a: {\n oldEventUuid: string;\n email: string;\n name: string;\n startTime: string;\n timezone: string;\n phone?: string;\n clinic?: string;\n}): Promise<\n | { outcome: \"moved\"; apptId: string; note: string }\n | { outcome: \"taken\"; error: unknown }\n | { outcome: \"stuck\"; error: unknown }\n> {\n const booked = await bookWithRecovery(a);\n if (booked.outcome !== \"booked\") return booked;\n try {\n await cancelAppointment(a.oldEventUuid, \"Rescheduled per your request\");\n return { outcome: \"moved\", apptId: booked.apptId, note: booked.note };\n } catch (e) {\n console.error(\"reschedule: new booking ok but old cancel failed:\", e);\n return {\n outcome: \"moved\",\n apptId: booked.apptId,\n note: `${booked.note} (WARNING: old appointment ${a.oldEventUuid} cancel failed - remove manually: ${String(e).slice(0, 120)})`,\n };\n }\n}\n\n// First upcoming active event for ANY of the given emails (reply-From AND\n// lead email - self-bookings can appear under either). startTime is rendered\n// location-local \"YYYY-MM-DD HH:mm:ss\" to preserve the ghl.ts contract.\nexport async function getUpcomingAppointment(\n emails: (string | undefined)[],\n): Promise<{ id: string; startTime: string; inviteeEmail?: string } | null> {\n const org = encodeURIComponent(await orgUri());\n const seen = new Set();\n for (const raw of emails) {\n const email = raw?.trim().toLowerCase();\n if (!email || seen.has(email)) continue;\n seen.add(email);\n const data = await calendly(\n \"GET\",\n `/scheduled_events?organization=${org}&invitee_email=${encodeURIComponent(email)}&status=active&min_start_time=${\n encodeURIComponent(isoNowPlus(0))\n }&sort=start_time:asc&count=5`,\n );\n const ev = (data?.collection ?? [])[0];\n if (ev) {\n return {\n id: uuidOf(ev.uri),\n startTime: new Date(ev.start_time).toLocaleString(\"sv-SE\", { timeZone: CALENDLY_TIMEZONE }),\n inviteeEmail: email,\n };\n }\n }\n return null;\n}\n\nexport type CalEvent = {\n id: string;\n startTimeUtc: string;\n inviteeEmail: string;\n inviteeName: string;\n eventTypeUri: string; // twin = agent-booked, public = self-booked\n status: string;\n};\n\n// Reconciler sweep source: active events in [startMs, endMs] with one invitee\n// sub-fetch per event (bounded by the sweep's 2-week window).\nexport async function listCalendarEvents(startMs: number, endMs: number): Promise {\n const org = encodeURIComponent(await orgUri());\n const min = encodeURIComponent(new Date(startMs).toISOString().replace(/\\.\\d{3}Z$/, \"Z\"));\n const max = encodeURIComponent(new Date(endMs).toISOString().replace(/\\.\\d{3}Z$/, \"Z\"));\n const data = await calendly(\n \"GET\",\n `/scheduled_events?organization=${org}&status=active&min_start_time=${min}&max_start_time=${max}&count=100`,\n );\n const out: CalEvent[] = [];\n for (const ev of data?.collection ?? []) {\n const uuid = uuidOf(ev.uri);\n let email = \"\", name = \"\";\n try {\n const inv = await calendly(\"GET\", `/scheduled_events/${uuid}/invitees?count=1`);\n const first = (inv?.collection ?? [])[0];\n email = first?.email ?? \"\";\n name = first?.name ?? \"\";\n } catch (e) {\n console.error(\"listCalendarEvents invitee fetch failed:\", e);\n }\n out.push({\n id: uuid,\n startTimeUtc: ev.start_time,\n inviteeEmail: email,\n inviteeName: name,\n eventTypeUri: ev.event_type ?? \"\",\n status: ev.status ?? \"active\",\n });\n }\n return out;\n}\n\n// ---------- webhooks ----------\n\nexport async function listWebhookSubscriptions(): Promise {\n const org = await orgUri();\n const data = await calendly(\n \"GET\",\n `/webhook_subscriptions?organization=${encodeURIComponent(org)}&scope=organization&count=20`,\n );\n return data?.collection ?? [];\n}\n\nexport async function createWebhookSubscription(\n callbackUrl: string,\n signingKey: string,\n): Promise {\n const org = await orgUri();\n const data = await calendly(\"POST\", \"/webhook_subscriptions\", {\n url: callbackUrl,\n events: [\"invitee.created\", \"invitee.canceled\"],\n organization: org,\n scope: \"organization\",\n signing_key: signingKey,\n }, 30_000);\n return data?.resource ?? data;\n}\n\n// The signing key is OUR generated secret (not one of Sam's), so it persists\n// itself in the val's sqlite (crm_state) at subscription time - no show-once\n// manual env step. Env var CALENDLY_WEBHOOK_SIGNING_KEY overrides if ever set.\nconst SIGNING_KEY_STATE = \"calendly:signing_key\";\nlet cachedSigningKey: string | null = null;\n\nexport async function storeSigningKey(key: string): Promise {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS crm_state (key TEXT PRIMARY KEY, value TEXT)`);\n await sqlite.execute({\n sql: `INSERT INTO crm_state (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value`,\n args: [SIGNING_KEY_STATE, key],\n });\n cachedSigningKey = key;\n}\n\nasync function signingKey(): Promise {\n const env = Deno.env.get(\"CALENDLY_WEBHOOK_SIGNING_KEY\");\n if (env) return env;\n if (cachedSigningKey) return cachedSigningKey;\n try {\n const r = await sqlite.execute({\n sql: `SELECT value FROM crm_state WHERE key = ?`,\n args: [SIGNING_KEY_STATE],\n });\n cachedSigningKey = (r.rows?.[0]?.[0] as string) ?? null;\n } catch {\n cachedSigningKey = null;\n }\n return cachedSigningKey;\n}\n\n// Header: \"t=,v1=\". Stale beyond\n// 5 min is rejected (replay guard).\nexport async function verifyWebhookSignature(rawBody: string, sigHeader: string | null): Promise {\n const key = await signingKey();\n if (!key || !sigHeader) return false;\n const parts = Object.fromEntries(sigHeader.split(\",\").map((p) => p.trim().split(\"=\", 2)));\n const t = parts[\"t\"], v1 = parts[\"v1\"];\n if (!t || !v1) return false;\n if (Math.abs(Date.now() / 1000 - Number(t)) > 300) return false;\n const cryptoKey = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(key),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\"HMAC\", cryptoKey, new TextEncoder().encode(`${t}.${rawBody}`));\n const hex = Array.from(new Uint8Array(mac)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n return hex === v1.toLowerCase();\n}\n","deleted",false,"label",[14],"e3dafc71-738c-40fe-ab70-9c5ae76a5d02",["D",1783490909384],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","352b7b81-2d40-4ef8-babc-d1dd56767822","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f404e-e73e-709b-8be4-84c9207a4140","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_100":95},"org",{"_9":10,"_94":95,"_96":95,"_54":55,"_97":98,"_99":42},"branch",{"_35":84,"_11":85,"_22":28,"_86":45,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":12,"_93":10},"isOwned",97,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_77":-5,"_134":135,"_136":137,"_138":139,"_140":42,"_141":42,"_142":42,"_143":32,"_144":-5,"_145":-7,"_146":-7,"_147":61,"_148":42,"_149":42,"_150":-5,"_151":42,"_152":42,"_153":42,"_154":-5},"ENV",{"_105":106,"_107":108,"_109":85,"_110":111,"_112":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]