[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","signalnode","name","site","path","twilio.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":32,"_60":-5,"_61":-5,"_62":36,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/signalnode/site/code/twilio.ts","extension","id","60e8da1b-ec71-410f-aee1-e5e40302bc77","fileId","e2b69c74-afe9-11f1-a771-1607ee4eb77e","parentId","branchId","b306cb0e-01ee-409d-afb7-1ab23aa82e31","branchVersion",9,"latest",true,"createdAt",["D",1789355449089],"version",0,"fileType","script","content","/**\n * Twilio plumbing: outbound SMS over the REST API, and inbound webhook signature\n * validation.\n *\n * Nothing here is required for the SMS demo to work — inbound replies go back as\n * TwiML, which needs no credentials. Credentials are only needed to send a message\n * we weren't asked for: the missed-call text-back, and the owner notification.\n *\n * Env vars (all optional until you wire the account up):\n * TWILIO_ACCOUNT_SID ACxxxxxxxx\n * TWILIO_AUTH_TOKEN used for both REST auth and signature validation\n * TWILIO_FROM_NUMBER +19047461401\n * TWILIO_WEBHOOK_BASE e.g. https://signalnode.com — only if the host Twilio\n * calls differs from the host this val sees\n * TWILIO_SKIP_VALIDATION set to \"1\" to accept unsigned webhooks (testing only)\n * OWNER_NOTIFY_NUMBER cell number to text when a demo books\n */\n\nconst env = (k: string) => Deno.env.get(k) || \"\";\n\nexport const twilioConfigured = () =>\n !!(env(\"TWILIO_ACCOUNT_SID\") && env(\"TWILIO_AUTH_TOKEN\") && env(\"TWILIO_FROM_NUMBER\"));\n\nexport const fromNumber = () => env(\"TWILIO_FROM_NUMBER\") || \"+19047461401\";\n\n/** Send an SMS. Returns {ok, skipped?, error?} — never throws, so a send failure\n * can't take down a webhook response. */\nexport async function sendSms(to: string, body: string): Promise<\n { ok: boolean; skipped?: boolean; error?: string }\n> {\n if (!twilioConfigured()) {\n console.log(`[twilio not configured] would send to ${to}: ${body}`);\n return { ok: false, skipped: true };\n }\n const sid = env(\"TWILIO_ACCOUNT_SID\");\n const url = `https://api.twilio.com/2010-04-01/Accounts/${sid}/Messages.json`;\n try {\n const res = await fetch(url, {\n method: \"POST\",\n headers: {\n Authorization: \"Basic \" + btoa(`${sid}:${env(\"TWILIO_AUTH_TOKEN\")}`),\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({ To: to, From: fromNumber(), Body: body }),\n });\n if (!res.ok) {\n const text = await res.text();\n console.error(\"twilio send failed\", res.status, text);\n return { ok: false, error: `${res.status} ${text.slice(0, 300)}` };\n }\n return { ok: true };\n } catch (e) {\n console.error(\"twilio send threw\", e);\n return { ok: false, error: String(e) };\n }\n}\n\n/** Escape text for inclusion in TwiML. */\nexport function xmlEscape(s: string): string {\n return s.replace(/&/g, \"&\").replace(//g, \">\")\n .replace(/\"/g, \""\").replace(/'/g, \"'\");\n}\n\nexport function twiml(body: string, headers: Record = {}): Response {\n return new Response(`\\n${body}`, {\n headers: { \"content-type\": \"text/xml; charset=utf-8\", ...headers },\n });\n}\n\nexport function twimlMessage(text: string): Response {\n return twiml(`${xmlEscape(text)}`);\n}\n\nexport const twimlEmpty = () => twiml(\"\");\n\n/**\n * Validate Twilio's X-Twilio-Signature: HMAC-SHA1, base64, over the full request\n * URL followed by every POST parameter sorted by name, key and value concatenated.\n */\nexport async function verifySignature(req: Request, params: Record): Promise {\n const token = env(\"TWILIO_AUTH_TOKEN\");\n if (!token) return true; // not wired up yet — nothing to verify against\n if (env(\"TWILIO_SKIP_VALIDATION\") === \"1\") return true;\n\n const sig = req.headers.get(\"x-twilio-signature\");\n if (!sig) return false;\n\n const incoming = new URL(req.url);\n const base = env(\"TWILIO_WEBHOOK_BASE\");\n const url = base\n ? base.replace(/\\/$/, \"\") + incoming.pathname + incoming.search\n : incoming.toString();\n\n let data = url;\n for (const key of Object.keys(params).sort()) data += key + params[key];\n\n const cryptoKey = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(token),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\"HMAC\", cryptoKey, new TextEncoder().encode(data));\n const expected = btoa(String.fromCharCode(...new Uint8Array(mac)));\n\n if (expected === sig) return true;\n console.warn(`twilio signature mismatch. signed url used: ${url}`);\n return false;\n}\n\n/** Read a Twilio webhook body into a plain object. */\nexport async function formParams(req: Request): Promise> {\n const text = await req.text();\n const out: Record = {};\n for (const [k, v] of new URLSearchParams(text)) out[k] = v;\n return out;\n}\n","deleted",false,"label",[14],"065ba883-3200-4512-a59a-6625d393c1bd",["D",1789354379548],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","signalnode.com — site, lead capture, Twilio missed-call demo","imageUrl","userId","38a02ae8-c0d3-4aad-b209-cdcfb48151b5","pinnedFileId","01a09dd5-0992-7247-a5ec-8b9d75d774f0","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a09dc1-48e0-714a-bcd6-ee6743ed615c","tursoName","065ba88332004512a59a6625d393c1bd","tursoHostname","065ba88332004512a59a6625d393c1bd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789443053029],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",14,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","val gorsh","avatar","https://lh3.googleusercontent.com/a/ACg8ocKU4umesnjLh5nqdPuiYJMGD9-pj8pCgsrOVbvxycC5KXeA1oCFOQ=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":36,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]