Inbox sweep

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","tribeca_airep","name","tribeca-salesforce-agent","path","triage.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/tribeca_airep/tribeca-salesforce-agent/code/triage.ts","extension","id","039fce44-a092-4b5a-b07f-aafb087d385c","fileId","999a7962-ad31-11f1-87c8-1607ee4eb77e","parentId","branchId","ceda7ac1-4fbd-45e5-ab28-65082ea4218c","branchVersion",278,"latest",true,"createdAt",["D",1789144012730],"version",36,"fileType","http","content","// One decision per email, made here rather than in Apps Script.\n//\n// The Gmail add-on used to carry the matching rules, the skip rules and the\n// digest itself. All of that now lives in this file, because the Apps Script\n// editor can only be edited by pasting into a browser and that paste fails\n// silently often enough to have lost four separate edits on 2026-09-10. What\n// is left in Apps Script is the part that genuinely has to be there: reading\n// Gmail, applying labels, and drawing the card.\n//\n// POST /triage { messageId?, from, subject, body, model?, force?, record? }\n// -> the whole verdict, including the Gmail label to apply.\n// GET /triage/pending what the digest has not sent yet\n// GET /triage/recent the last few verdicts, for looking at\n//\n// Auth: API_SHARED_SECRET, same as the rest of the val.\n//\n// It records what it decided so the same message is never analysed twice and\n// so the digest cron has something to send. Nothing here writes to Salesforce.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { sfQuery } from \"./salesforce.ts\";\n\nconst OWN_DOMAIN = \"tribecabeverage.com\";\n// Our own numbers turn up in quoted replies, signatures, and in the subject of\n// a forwarded text (\"SMS From To 19739134568\"). 973-913-4568 matters\n// most: two Accounts carry it, so without it a forward whose real number missed\n// would fall through and confidently show the wrong customer.\nconst OWN_PHONES = new Set([\"6466812965\", \"6467988015\", \"9739134568\"]);\n\n// Our own street address, keyed the way extractAddresses keys one:\n// `${number}|${core.toLowerCase()}`. This matters as much as OWN_PHONES and for\n// the same reason: \"23 Carol St Clifton NJ 07014\" sits in the signature of every\n// outbound email, so it is quoted back to us in every single reply. Whenever the\n// email and phone tiers missed, the address tier matched our own signature and\n// confidently returned the Account literally named \"test address 23 Carol St\" -\n// producing a Ready-to-act row proposing a delivery-date change on the wrong\n// record. Seen on the first live sweep, 2026-09-10.\nconst OWN_ADDRESSES = new Set([\"23|carol\"]);\n\n// Free filters, applied before anything costs a request. Marketing mail is\n// deliberately absent: it costs one cheap Salesforce lookup, fails to match,\n// and never reaches the model.\nconst SKIP_SENDER = /(^|[.<@])(noreply|no-reply|donotreply|do-not-reply|mailer-daemon|postmaster)/i;\nconst SKIP_SUBJECT = /^\\s*(skipped delivery|automatic reply|out of office|automatic response|delivery status notification|undeliverable|read receipt)/i;\n\n// The customer portal mails these to info@ from info@, which meant the\n// own-domain rule below threw away the best input this thing gets. They are\n// machine-written but the CUSTOMER wrote the request: it is already\n// categorised (Earlier Delivery / Skip Delivery / Order Change / Standing\n// Order Change / Move Delivery / Account Details Update), the account name is\n// the last segment of the subject, and the body carries the customer's email,\n// phone, service address, current delivery week and the close-date rule. About\n// fifteen arrive on a normal working day. Found 2026-09-10.\nconst PORTAL_SUBJECT = /^\\s*Customer Portal Request\\s*[—–-]/i;\n\n/** \"Customer Portal Request — Earlier Delivery Request — Ursula Serluca CPA\" -> \"Ursula Serluca CPA\". */\nexport function portalAccountName(subject: string): string | null {\n if (!PORTAL_SUBJECT.test(subject ?? \"\")) return null;\n // Split on the em dash only. Account names contain plain hyphens\n // (\"Middlesex College - Dean's Office, North Hall\"), so splitting on those\n // would cut the name in half.\n const parts = String(subject).split(/[—–]/);\n if (parts.length < 3) return null;\n return parts.slice(2).join(\"—\").trim() || null;\n}\n\nexport const LABELS: Record = {\n action: \"SF Triage/Action ready\",\n human: \"SF Triage/Needs a person\",\n none: \"SF Triage/No action\",\n nomatch: \"SF Triage/No account match\",\n skipped: \"\",\n};\n\n// GMAIL LABELLING IS OFF, AND OFF IS THE DEFAULT.\n//\n// info@ is a shared mailbox. A Gmail label shows as a coloured chip on the\n// message row for everyone who opens it, and Gmail has no setting that hides a\n// chip from the conversation list - \"hide in label list\" only affects the left\n// sidebar. So there is no way to label quietly, and the inbox is not ours to\n// decorate. Turned off at the customer's request on 2026-09-10.\n//\n// Nothing else changes: every verdict is still recorded in triage_v1, so the\n// digest email and /digest-preview show exactly what they did before. The sweep\n// in Apps Script guards with `if (t.label)`, so an empty string here means it\n// creates no label and touches no thread.\n//\n// Set the val env var GMAIL_LABELS=on to put the chips back.\nconst GMAIL_LABELS = (Deno.env.get(\"GMAIL_LABELS\") ?? \"\").toLowerCase() === \"on\";\nfunction labelFor(verdict: string) {\n return GMAIL_LABELS ? (LABELS[verdict] ?? \"\") : \"\";\n}\n\nconst ACCOUNT_FIELDS =\n \"Id, Name, Phone, Email_Address__c, Water_Type__c, Water_Cooler__c, Amount_of_Bottles__c, Frequency__c, \" +\n \"ShippingStreet, ShippingCity, ShippingPostalCode, BillingStreet, Balance_for_Wordpress__c, \" +\n \"Most_Recent_Invoice_Number__c, Most_Recent_Invoice_Amount__c, \" +\n \"(SELECT Id, Name, StageName, CloseDate, Route_Date__c, Needs_Delivery_ASAP__c FROM Opportunities ORDER BY CreatedDate DESC LIMIT 1)\";\n\nfunction json(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), { status, headers: { \"Content-Type\": \"application/json\" } });\n}\nfunction esc(v: string) {\n return v.replace(/\\\\/g, \"\\\\\\\\\").replace(/'/g, \"\\\\'\");\n}\n\n/** Checkbox fields come back as real booleans; \"true\" reads like debug output. */\nfunction fmtCell(v: unknown) {\n if (v === null || v === undefined || v === \"\") return \"(empty)\";\n if (v === true) return \"Yes\";\n if (v === false) return \"No\";\n return String(v);\n}\n\n// Email content is not kept. Anything older than this is deleted outright, and\n// the triage record keeps only what dedupe needs. Runs on every digest tick.\nexport const RETAIN_CONTENT_MS = 24 * 60 * 60 * 1000;\nexport const RETAIN_DEDUPE_MS = 48 * 60 * 60 * 1000;\n\n// ---------------------------------------------------------------------------\n// Signals: everything in the From header, subject and body that could identify\n// a customer. Priority when searching is email, then phone, then address, then\n// the sender's name.\n// ---------------------------------------------------------------------------\n\nfunction normalizePhone(raw: string) {\n let d = String(raw ?? \"\").replace(/\\D/g, \"\");\n if (d.length === 11 && d[0] === \"1\") d = d.slice(1);\n return d.length === 10 ? d : null;\n}\nfunction formatPhone(ten: string) {\n return `(${ten.slice(0, 3)}) ${ten.slice(3, 6)}-${ten.slice(6)}`;\n}\nfunction uniq(list: string[]) {\n const seen = new Set();\n return list.filter((v) => {\n const k = String(v).toLowerCase();\n if (!v || seen.has(k)) return false;\n seen.add(k);\n return true;\n });\n}\n\nconst STREET_SUFFIX =\n \"(?:Street|St|Avenue|Ave|Av|Road|Rd|Boulevard|Blvd|Drive|Dr|Lane|Ln|Place|Pl|Court|Ct|Way|Parkway|Pkwy|Terrace|Ter|Highway|Hwy|Square|Sq|Plaza|Plz|Circle|Cir)\";\nconst STREET_DIRECTIONAL = /^(n|s|e|w|north|south|east|west|ne|nw|se|sw)\\.?$/i;\nconst STREET_SUFFIX_RE = new RegExp(`^${STREET_SUFFIX}$`, \"i\");\n\ntype Addr = { number: string; core: string; raw: string };\n\n/** \"127 E 56th St\" -> { number: \"127\", core: \"56\", raw: \"127 E 56th St\" } */\nfunction parseStreet(raw: string, num: string, name: string): Addr | null {\n const tokens = name.replace(/[.,]/g, \" \").trim().split(/\\s+/)\n .filter((t) => t && !STREET_DIRECTIONAL.test(t) && !STREET_SUFFIX_RE.test(t));\n if (!tokens.length) return null;\n let core = tokens.reduce((best, t) => (t.length > best.length ? t : best), \"\");\n const ordinal = core.match(/^(\\d+)(st|nd|rd|th)$/i);\n if (ordinal) core = ordinal[1];\n if (core.length < 2) return null;\n return { number: num, core, raw: raw.replace(/\\s+/g, \" \").trim() };\n}\n\nfunction extractAddresses(text: string): Addr[] {\n const out: Addr[] = [];\n let m: RegExpExecArray | null;\n const noSuffix = /\\b(\\d{1,6})\\s+(Broadway|Bowery|Park Row|Avenue\\s+[A-Z]\\b|Ave\\.?\\s+[A-Z]\\b)/gi;\n while ((m = noSuffix.exec(text)) !== null) {\n const a = parseStreet(m[0], m[1], m[2]);\n if (a) out.push(a);\n }\n const withSuffix = new RegExp(\n `\\\\b(\\\\d{1,6})\\\\s+((?:[A-Za-z0-9][A-Za-z0-9.'-]*\\\\s+){0,3}[A-Za-z0-9][A-Za-z0-9.'-]*)\\\\s+${STREET_SUFFIX}\\\\b\\\\.?`,\n \"gi\",\n );\n while ((m = withSuffix.exec(text)) !== null) {\n const a = parseStreet(m[0], m[1], m[2]);\n if (a) out.push(a);\n }\n const seen = new Set();\n return out.filter((a) => {\n const k = `${a.number}|${a.core.toLowerCase()}`;\n if (seen.has(k) || OWN_ADDRESSES.has(k)) return false;\n seen.add(k);\n return true;\n });\n}\n\nexport function extractSignals(fromHeader: string, subject: string, body: string) {\n const text = `${subject ?? \"\"}\\n${body ?? \"\"}`;\n const emails: string[] = [];\n const fromEmail = (fromHeader ?? \"\").match(/[\\w.+-]+@[\\w-]+\\.[\\w.-]+/);\n if (fromEmail) emails.push(fromEmail[0].toLowerCase());\n for (const e of text.match(/[\\w.+-]+@[\\w-]+\\.[\\w.-]+/g) ?? []) {\n emails.push(e.toLowerCase().replace(/[.,;:]+$/, \"\"));\n }\n const cleanEmails = uniq(emails).filter((e) => !e.includes(`@${OWN_DOMAIN}`));\n\n const phones: string[] = [];\n for (const p of text.match(/(?:\\+?1[-.\\s]?)?\$?\\d{3}\$?[-.\\s]?\\d{3}[-.\\s]?\\d{4}\\b/g) ?? []) {\n const ten = normalizePhone(p);\n if (ten && !OWN_PHONES.has(ten)) phones.push(ten);\n }\n\n const names: string[] = [];\n const nameMatch = (fromHeader ?? \"\").match(/^\"?([^\"<]+?)\"?\\s*<[\\w.+-]+@/);\n if (nameMatch) {\n const n = nameMatch[1].replace(/\\s+via\\s+.*$/i, \"\").replace(/[^\\w\\s.'&-]/g, \" \").replace(/\\s+/g, \" \").trim();\n if (n && !/tribeca/i.test(n)) names.push(n);\n }\n // A portal request is sent by us on the customer's behalf, so the From name\n // is \"TriBeCa Beverage Company\" and is thrown away just above. The account\n // name in the subject is the real one, and it is exact rather than a guess,\n // so it goes to the front of the queue.\n const portalName = portalAccountName(subject ?? \"\");\n if (portalName) names.unshift(portalName);\n\n return { emails: cleanEmails, phones: uniq(phones), addresses: extractAddresses(text), names: uniq(names) };\n}\n\nexport function describeSignals(s: ReturnType) {\n const parts: string[] = [];\n if (s.emails.length) parts.push(`email ${s.emails.join(\", \")}`);\n if (s.phones.length) parts.push(`phone ${s.phones.map(formatPhone).join(\", \")}`);\n if (s.addresses.length) parts.push(`address ${s.addresses.map((a) => a.raw).join(\"; \")}`);\n if (s.names.length) parts.push(`name ${s.names.join(\", \")}`);\n return parts.join(\" / \");\n}\n\n/** Search in priority order and stop at the first tier that hits. */\nexport async function lookupAccounts(sig: ReturnType) {\n if (sig.emails.length) {\n const list = sig.emails.map((e) => `'${esc(e)}'`).join(\", \");\n const r = (await sfQuery(`SELECT ${ACCOUNT_FIELDS} FROM Account WHERE Email_Address__c IN (${list}) LIMIT 10`)).records ?? [];\n if (r.length) {\n const hit = sig.emails.find((e) => r.some((a: any) => (a.Email_Address__c ?? \"\").toLowerCase() === e));\n return { accounts: r, matchedOn: `email ${hit ?? sig.emails[0]}`, tier: \"email\" };\n }\n }\n for (const ten of sig.phones) {\n const cands = (await sfQuery(`SELECT ${ACCOUNT_FIELDS} FROM Account WHERE Phone LIKE '%${esc(ten.slice(-4))}' LIMIT 50`)).records ?? [];\n const exact = cands.filter((a: any) => normalizePhone(a.Phone ?? \"\") === ten);\n if (exact.length) return { accounts: exact, matchedOn: `phone ${formatPhone(ten)}`, tier: \"phone\" };\n }\n for (const addr of sig.addresses) {\n const like = `'%${esc(addr.number)} %${esc(addr.core)}%'`;\n const rows = (await sfQuery(\n `SELECT ${ACCOUNT_FIELDS} FROM Account WHERE ShippingStreet LIKE ${like} OR BillingStreet LIKE ${like} LIMIT 20`,\n )).records ?? [];\n const confirmed = rows.filter((a: any) =>\n [a.ShippingStreet, a.BillingStreet].some((street) =>\n String(street ?? \"\").split(/\\r?\\n/).some((line) => {\n const t = line.trim();\n return new RegExp(`^${addr.number}\\\\b`).test(t) && t.toLowerCase().includes(addr.core.toLowerCase());\n })\n )\n );\n if (confirmed.length) return { accounts: confirmed, matchedOn: `address ${addr.raw}`, tier: \"address\" };\n }\n for (const name of sig.names) {\n if (!(/\\s/.test(name) || name.length >= 4)) continue;\n const rows = (await sfQuery(\n `SELECT ${ACCOUNT_FIELDS} FROM Account WHERE Name LIKE '%${esc(name)}%' ORDER BY LastModifiedDate DESC LIMIT 10`,\n )).records ?? [];\n if (rows.length) {\n return {\n accounts: rows,\n matchedOn: `name \"${name}\"${rows.length > 1 ? ` (${rows.length} accounts, check the alternates)` : \"\"}`,\n tier: \"name\",\n };\n }\n }\n return { accounts: [], matchedOn: \"\", tier: \"none\" };\n}\n\n// ---------------------------------------------------------------------------\n// Record of what was decided. Doubles as the dedupe record and the digest queue.\n// ---------------------------------------------------------------------------\n\nasync function ensureTable() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS triage_v1 (\n message_id TEXT PRIMARY KEY,\n decided_at INTEGER NOT NULL,\n verdict TEXT NOT NULL,\n sender TEXT,\n subject TEXT,\n account_id TEXT,\n account_name TEXT,\n matched_on TEXT,\n summary TEXT,\n needs_human TEXT,\n actions_json TEXT,\n thread_id TEXT,\n digested INTEGER NOT NULL DEFAULT 0\n )`);\n // The email itself, so the panel can show what the customer actually wrote\n // instead of only a summary of it. Added after the fact, hence the ALTER:\n // the table already exists in production. Treated as content, so purge wipes\n // it at 24 hours along with the subject and summary.\n try {\n await sqlite.execute(\"ALTER TABLE triage_v1 ADD COLUMN body TEXT\");\n } catch { /* already there; SQLite has no ADD COLUMN IF NOT EXISTS */ }\n // 0 = leave the message alone (the default, and what almost every row stays).\n // 1 = every proposed change was applied and nothing was left for a person, so\n // the sweep may mark it read in Gmail. 2 = the sweep has done so.\n try {\n await sqlite.execute(\"ALTER TABLE triage_v1 ADD COLUMN mark_read INTEGER NOT NULL DEFAULT 0\");\n } catch { /* already there */ }\n\n // THE OUTCOME LEDGER: what we proposed, and what the office actually did.\n //\n // Separate table on purpose. triage_v1 is email content and is wiped at 24\n // hours, which means the evidence for \"was that proposal right?\" disappears\n // exactly as fast as it accumulates - the only reason a comparison was\n // possible on 2026-09-11 is that the proposals happened to be hours old.\n // This table holds no email: an id, a field name, and the values. It can\n // therefore be kept long enough to say something.\n //\n // Account.Name and Email_Address__c ARE customer data, so for those the\n // values are stored as a hash. Agreement is still computable (equal hashes\n // mean equal values) without keeping the name or address itself.\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS outcome_v1 (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n message_id TEXT NOT NULL,\n proposed_at INTEGER NOT NULL,\n sobject TEXT NOT NULL,\n record_id TEXT NOT NULL,\n field TEXT NOT NULL,\n proposed_from TEXT,\n proposed_to TEXT,\n assumed INTEGER NOT NULL DEFAULT 0,\n hashed INTEGER NOT NULL DEFAULT 0,\n applied_by_us INTEGER NOT NULL DEFAULT 0,\n observed_at INTEGER,\n observed_value TEXT,\n observed_by TEXT,\n verdict TEXT\n )`);\n await sqlite.execute(\n \"CREATE INDEX IF NOT EXISTS outcome_v1_unobserved ON outcome_v1 (observed_at, proposed_at)\",\n );\n}\n\n// Values for these are never stored in the clear - see the note above.\nconst PERSONAL_FIELDS = new Set([\"Name\", \"Email_Address__c\"]);\n\nasync function digest8(v: unknown) {\n const data = new TextEncoder().encode(String(v ?? \"\"));\n const buf = await crypto.subtle.digest(\"SHA-256\", data);\n return [...new Uint8Array(buf)].slice(0, 8).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/** Record each proposed field change so it can be compared with reality later. */\nasync function recordProposals(messageId: string, actions: any[]) {\n for (const a of actions ?? []) {\n const personal = PERSONAL_FIELDS.has(String(a.field));\n const from = personal ? await digest8(a.currentValue) : String(a.currentValue ?? \"\");\n const to = personal ? await digest8(a.newValue) : String(a.newValue ?? \"\");\n await sqlite.execute({\n sql: `INSERT INTO outcome_v1\n (message_id, proposed_at, sobject, record_id, field, proposed_from, proposed_to, assumed, hashed)\n VALUES (?,?,?,?,?,?,?,?,?)`,\n args: [messageId, Date.now(), String(a.sobject), String(a.id), String(a.field),\n from, to, a.assumed ? 1 : 0, personal ? 1 : 0],\n });\n }\n}\n\nasync function alreadySeen(messageId: string) {\n const r = await sqlite.execute({ sql: \"SELECT verdict FROM triage_v1 WHERE message_id = ?\", args: [messageId] });\n return r.rows.length ? String((r.rows[0] as any).verdict ?? \"\") : null;\n}\n\n/** `body` is kept only for rows the panel will show; a no-match needs none. */\nasync function store(v: any, body: string | null = null) {\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO triage_v1\n (message_id, decided_at, verdict, sender, subject, account_id, account_name, matched_on, summary, needs_human, actions_json, thread_id, body, digested)\n VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,0)`,\n args: [\n v.messageId, Date.now(), v.verdict, v.from ?? \"\", v.subject ?? \"\",\n v.account?.Id ?? null, v.account?.Name ?? null, v.matchedOn ?? \"\",\n v.summary ?? \"\", v.needs_human ?? \"\", JSON.stringify(v.actions ?? []),\n v.threadId ?? null,\n // Enough to read the request and the quoted thread under it, without\n // keeping a 250KB invoice email around.\n body ? body.slice(0, 8000) : null,\n ],\n });\n}\n\n// ---------------------------------------------------------------------------\n\nconst SELF = \"https://tribeca_airep--8afdccb8abcb11f18b091607ee4eb77e.web.val.run\";\n\n// ---------------------------------------------------------------------------\n// The panel: a password-protected page that can apply changes.\n//\n// The master key can never be handed to a browser - it also unlocks arbitrary\n// SOQL on main.ts - so the page holds no key at all. It proves who it is with a\n// signed session cookie, and this val makes the privileged call to /apply\n// server-side, supplying both the master key and the approval password from its\n// own env. Neither ever reaches the page.\n//\n// The password (PANEL_PASSWORD) is therefore the whole gate, which is why the\n// link alone no longer shows anything: knowing the URL is not knowing the\n// password. Fails closed if the env var is missing.\n// ---------------------------------------------------------------------------\nconst COOKIE = \"sfpanel\";\nconst SESSION_MS = 12 * 60 * 60 * 1000;\n\nasync function sign(data: string) {\n const secret = Deno.env.get(\"API_SHARED_SECRET\") ?? \"\";\n const key = await crypto.subtle.importKey(\n \"raw\", new TextEncoder().encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"],\n );\n const sig = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(data));\n return [...new Uint8Array(sig)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/** Constant time, so a wrong cookie cannot be tuned byte by byte. */\nfunction same(a: string, b: string) {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n return diff === 0;\n}\n\nasync function hasSession(req: Request) {\n const raw = (req.headers.get(\"cookie\") ?? \"\").split(/;\\s*/)\n .find((c) => c.startsWith(`${COOKIE}=`));\n if (!raw) return false;\n const [exp, sig] = decodeURIComponent(raw.slice(COOKIE.length + 1)).split(\".\");\n if (!exp || !sig || !/^\\d+$/.test(exp) || Number(exp) < Date.now()) return false;\n return same(await sign(exp), sig);\n}\n\nasync function sessionCookie() {\n const exp = String(Date.now() + SESSION_MS);\n const v = `${exp}.${await sign(exp)}`;\n return `${COOKIE}=${encodeURIComponent(v)}; Path=/; Max-Age=${SESSION_MS / 1000}; ` +\n `HttpOnly; Secure; SameSite=Strict`;\n}\n\nfunction loginPage(failed: boolean) {\n return `` +\n `` +\n `Inbox sweep` +\n `

` +\n `

Inbox sweep

` +\n `

This page can change Salesforce. Enter the password.

` +\n (failed ? `

Wrong password.

` : \"\") +\n `

`;\n}\n\n/** Apply the ticked changes for one message, using what triage already stored. */\nasync function panelApply(body: any) {\n const messageId = String(body.messageId ?? \"\");\n const indexes: number[] = Array.isArray(body.indexes) ? body.indexes.map(Number) : [];\n if (!messageId || !indexes.length) return json({ error: \"Nothing to apply.\" }, 400);\n\n const row = (await sqlite.execute({\n sql: \"SELECT actions_json, needs_human FROM triage_v1 WHERE message_id = ?\",\n args: [messageId],\n })).rows[0] as any;\n if (!row) return json({ error: \"That message is no longer on file. Reload the page.\" }, 404);\n\n let stored: any[] = [];\n try {\n stored = JSON.parse(String(row.actions_json ?? \"[]\"));\n } catch { /* fall through to the empty check */ }\n // Content is wiped at 24 hours, so an old tab can point at a row that no\n // longer holds anything to apply.\n if (!stored.length) return json({ error: \"This item has aged out. Reload the page.\" }, 410);\n\n const chosen = indexes\n .filter((i) => Number.isInteger(i) && i >= 0 && i < stored.length)\n .map((i) => stored[i]);\n if (!chosen.length) return json({ error: \"Nothing to apply.\" }, 400);\n\n const password = Deno.env.get(\"EMAIL_ACTIONS_APPROVAL_PASSWORD\");\n if (!password) return json({ error: \"Approval password is not configured on the server.\" }, 500);\n\n const res = await fetch(`${SELF}/apply`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", \"x-api-key\": Deno.env.get(\"API_SHARED_SECRET\") ?? \"\" },\n body: JSON.stringify({ actions: chosen, password }),\n signal: AbortSignal.timeout(60_000),\n });\n const out = await res.json();\n\n // MAY THE SWEEP MARK THIS ONE READ? Only on the strictest reading of \"done\".\n //\n // Applying one field is not the same as the email being dealt with. Aurora\n // Ortega asked for a different bottle count AND an urgent delivery, and a\n // person may still owe her a reply; info@ is shared, so marking that read\n // buries it for whoever else works the inbox. So all four must hold: every\n // proposed change was ticked, every one of them actually landed, none failed,\n // and the model left nothing for a person. Anything less and the message\n // stays unread, which is the safe direction to be wrong in.\n const everythingTicked = chosen.length === stored.length;\n const everythingLanded = out?.applied === stored.length && !out?.failed;\n const nothingForAPerson = !String(row.needs_human ?? \"\").trim();\n if (res.ok && everythingTicked && everythingLanded && nothingForAPerson) {\n await sqlite.execute({\n sql: \"UPDATE triage_v1 SET mark_read = 1 WHERE message_id = ?\",\n args: [messageId],\n });\n }\n\n // /apply re-reads every record and re-checks every guard, so a change that has\n // gone stale since the sweep is rejected there rather than written blindly.\n return json(out, res.ok ? 200 : res.status);\n}\n\nasync function propose(emailText: string, account: any, opportunity: any, model?: string) {\n // Header, never ?key=. See the note in the handler: query strings land in\n // Val Town's traces verbatim and stay there.\n const res = await fetch(`${SELF}/propose`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", \"x-api-key\": Deno.env.get(\"API_SHARED_SECRET\") ?? \"\" },\n body: JSON.stringify({ emailText, account, opportunity, ...(model ? { model } : {}) }),\n signal: AbortSignal.timeout(60_000),\n });\n return await res.json();\n}\n\nasync function triage(body: any) {\n const from = String(body.from ?? \"\");\n const subject = String(body.subject ?? \"\");\n const text = String(body.body ?? \"\");\n const messageId = body.messageId ? String(body.messageId) : null;\n const record = body.record !== false;\n if (!from && !subject && !text) return json({ error: \"from, subject or body is required\" }, 400);\n\n await ensureTable();\n\n if (messageId && !body.force) {\n const seen = await alreadySeen(messageId);\n if (seen) return json({ skipped: true, reason: \"already triaged\", verdict: seen, label: labelFor(seen), messageId });\n }\n\n // Free filters first - but a portal request is exempt from both of them. It\n // comes from our own address and it is machine-written, so it was being\n // dropped twice over, and it is the one kind of mail here that states the\n // customer's request outright. See PORTAL_SUBJECT.\n const isPortal = PORTAL_SUBJECT.test(subject);\n if (!isPortal && from.toLowerCase().includes(OWN_DOMAIN)) {\n return json({ skipped: true, reason: \"our own mail\", verdict: \"skipped\", label: \"\", messageId });\n }\n if (!isPortal && (SKIP_SENDER.test(from) || SKIP_SUBJECT.test(subject))) {\n return json({ skipped: true, reason: \"machine mail\", verdict: \"skipped\", label: \"\", messageId });\n }\n\n // A typed search from the card's home page is treated like a tiny email:\n // anything shaped like an address, phone or street matches as that, and\n // whatever is left over is treated as a name.\n let signals;\n if (body.searchQuery) {\n const q = String(body.searchQuery).trim();\n signals = extractSignals(\"\", \"\", q);\n if (!signals.emails.length && !signals.phones.length && !signals.addresses.length) {\n signals = { ...signals, names: [q] };\n }\n } else {\n signals = extractSignals(from, subject, text);\n }\n const found = await lookupAccounts(signals);\n\n const base: any = {\n skipped: false,\n messageId,\n threadId: body.threadId ?? null,\n from,\n subject,\n signals: { ...signals, described: describeSignals(signals) },\n matchedOn: found.matchedOn,\n matchTier: found.tier,\n account: found.accounts[0] ?? null,\n alternates: found.accounts.slice(1, 5).map((a: any) => ({ Id: a.Id, Name: a.Name, Phone: a.Phone, Email_Address__c: a.Email_Address__c })),\n };\n\n if (!found.accounts.length) {\n base.verdict = \"nomatch\";\n base.label = labelFor(\"nomatch\");\n if (record && messageId) await store(base);\n return json(base);\n }\n\n const account = { ...found.accounts[0] };\n const latestOpp = account.Opportunities?.records?.[0] ?? null;\n delete account.Opportunities;\n base.account = account;\n\n // THE OPEN DELIVERY, NOT THE NEWEST RECORD. The subquery above orders by\n // CreatedDate, so for a customer whose most recent Opportunity has already\n // been Delivered it hands back a closed one - and every guard in the catalog\n // requires stage 'Delivery Due', so a genuine \"where is my water\" email came\n // back with nothing to do. Found by replaying a real hour of inbox on\n // 2026-09-10. Cost is one extra query per matched account.\n const openOpp = (await sfQuery(\n `SELECT Id, Name, StageName, CloseDate, Route_Date__c, Needs_Delivery_ASAP__c FROM Opportunity\n WHERE AccountId = '${esc(String(account.Id))}' AND StageName = 'Delivery Due'\n ORDER BY CloseDate ASC LIMIT 1`,\n )).records?.[0] ?? null;\n const opportunity = openOpp ?? latestOpp;\n base.opportunity = opportunity;\n\n // LOOKUP ONLY. The card calls this when someone merely opens an email, so it\n // must not spend a model call: it wants the account, the delivery and the\n // alternates to draw with, and nothing more. The Analyze button then calls\n // again without this flag. Without the split, every email anyone opened -\n // including spam - would cost an analysis.\n if (body.lookupOnly) {\n base.verdict = \"lookup\";\n base.label = \"\";\n return json(base);\n }\n\n const analysis = await propose(`Subject: ${subject}\\n\\n${text}`, account, opportunity, body.model);\n if (analysis?.error) return json({ ...base, error: analysis.error }, 500);\n\n base.account = account;\n base.opportunity = opportunity;\n base.model = analysis.model ?? null;\n base.summary = analysis.summary ?? \"\";\n base.recommendation = analysis.recommendation ?? \"\";\n base.needs_human = analysis.needs_human ?? \"\";\n base.actions = analysis.actions ?? [];\n base.skippedActions = analysis.skipped ?? [];\n // \"none\" must mean \"nobody needs to do anything\", not \"no field changed\".\n // A matched customer asking when their delivery is, or asking for a one-off\n // change we have no field for, produced no actions AND an empty needs_human,\n // so it landed in \"none\" and would have dropped out of the digest entirely.\n // If the model recommended anything other than doing nothing, that is a\n // person's job. Seen on real mail 2026-09-10.\n const rec = String(base.recommendation ?? \"\").trim();\n const recommendsNothing = !rec || /^\\s*(no action needed|none|n\\/?a)\\b/i.test(rec);\n base.verdict = base.actions.length\n ? \"action\"\n : (base.needs_human || !recommendsNothing ? \"human\" : \"none\");\n if (!base.actions.length && !base.needs_human && !recommendsNothing) {\n base.needs_human = rec;\n }\n base.label = labelFor(base.verdict);\n\n if (record && messageId) {\n await store(base, text);\n await recordProposals(messageId, base.actions);\n }\n return json(base);\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n // THE PANEL ROUTES ARE GATED BY THE PASSWORD, NOT BY A KEY. They come first\n // so that no key in a URL can reach them: a link on its own now shows a login\n // form and nothing else.\n const p = url.pathname;\n if (p.endsWith(\"/digest-login\") || p.endsWith(\"/digest-preview\") ||\n p.endsWith(\"/digest-apply\") || p.endsWith(\"/digest-logout\")) {\n const expected = Deno.env.get(\"PANEL_PASSWORD\");\n if (!expected) {\n return new Response(\"The panel password is not configured on the server.\", { status: 500 });\n }\n\n if (p.endsWith(\"/digest-logout\")) {\n return new Response(\"\", {\n status: 302,\n headers: { \"Location\": \"digest-preview\", \"Set-Cookie\": `${COOKIE}=; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Strict` },\n });\n }\n\n if (p.endsWith(\"/digest-login\")) {\n if (req.method !== \"POST\") return new Response(\"POST required\", { status: 405 });\n const form = await req.formData();\n if (!same(String(form.get(\"password\") ?? \"\"), expected)) {\n // Deliberately slow, so the one gate on this page cannot be guessed at\n // speed. A person typing it once will not notice.\n await new Promise((r) => setTimeout(r, 1000));\n return new Response(loginPage(true), {\n status: 401,\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n return new Response(\"\", {\n status: 302,\n headers: { \"Location\": \"digest-preview\", \"Set-Cookie\": await sessionCookie() },\n });\n }\n\n if (!(await hasSession(req))) {\n if (p.endsWith(\"/digest-apply\")) return json({ error: \"Session expired. Reload the page.\" }, 401);\n return new Response(loginPage(false), {\n status: 401,\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (p.endsWith(\"/digest-apply\")) {\n if (req.method !== \"POST\") return json({ error: \"POST required\" }, 405);\n try {\n return await panelApply(await req.json());\n } catch (err) {\n return json({ error: String(err) }, 500);\n }\n }\n\n // The page itself, now with tick boxes and an Apply button.\n await ensureTable();\n const { renderDigest } = await import(\"./digest.ts\");\n // FILTER AND ORDER IN SQL, NOT AFTERWARDS.\n //\n // This used to take the 60 oldest rows of ANY verdict and only then keep the\n // action/human ones in JavaScript. Most rows are 'nomatch' or 'none', so the\n // limit was spent on rows the page never draws: with 115 rows pending, 47 of\n // them showable, the page drew 28 and silently dropped the 19 newest. The\n // panel was showing yesterday's work and hiding this morning's. Found\n // 2026-09-11. Newest first for the same reason - a fresh customer email\n // matters more than one that has sat here since last night.\n const undigested = url.searchParams.get(\"all\") ? \"\" : \"AND digested = 0\";\n const rows = (await sqlite.execute(\n `SELECT * FROM triage_v1\n WHERE verdict IN ('action','human') ${undigested}\n ORDER BY decided_at DESC LIMIT 100`,\n )).rows as any[];\n const html = renderDigest(\n rows.filter((r) => r.verdict === \"action\"),\n rows.filter((r) => r.verdict === \"human\"),\n true,\n );\n return new Response(html, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n }\n\n // TWO KEYS, ON PURPOSE, AND ONE OF THEM MUST NOT TRAVEL IN A URL.\n //\n // Val Town records the full request URL in its traces, so a key passed as\n // ?key= is written to platform logs on every single call and cannot be\n // purged (verified 2026-09-10). API_SHARED_SECRET also unlocks arbitrary\n // SOQL on main.ts, so publishing it that way is the worst option available.\n // It is therefore accepted ONLY as a header here.\n //\n // The read-only pages are the exception: a browser following a link cannot\n // set a header. Those use VIEW_KEY, which shows recent triage results and\n // grants nothing else, so leaking it costs a rotation rather than the org.\n const headerKey = req.headers.get(\"x-api-key\");\n const queryKey = url.searchParams.get(\"key\");\n const master = Deno.env.get(\"API_SHARED_SECRET\");\n // Two view keys are accepted only because Val Town will not show a stored\n // value back to you and has no update-in-place tool, so replacing one means\n // adding the new alongside the old. Delete VIEW_KEY in the UI and drop it\n // from this list once the new link is in use.\n const viewKeys = [Deno.env.get(\"VIEW_KEY\"), Deno.env.get(\"VIEW_KEY_2\")]\n .filter((k): k is string => !!k);\n const isMaster = !!master && headerKey === master;\n const isViewer = viewKeys.some((k) => headerKey === k || queryKey === k);\n\n const isPage = req.method === \"GET\" &&\n (url.pathname.endsWith(\"/inbound\") || url.pathname.endsWith(\"/digest-preview\"));\n\n if (isPage ? !(isViewer || isMaster) : !isMaster) {\n return new Response(\n isPage\n ? \"Unauthorized\"\n : \"Unauthorized. Send the key as an x-api-key header, not in the URL.\",\n { status: 401 },\n );\n }\n\n await ensureTable();\n\n if (req.method === \"GET\") {\n // Kept only so an old bookmark says something sensible. Forwarding was\n // dropped on 2026-09-10: an email val is an unauthenticated front door, and\n // anyone who worked out its address could have injected invented customers.\n // The add-on now pushes to /triage with a key instead.\n if (url.pathname.endsWith(\"/inbound\")) {\n return new Response(\n \"Forwarding was removed. The add-on now pushes messages to /triage with a key, \" +\n \"so there is no open address to receive mail. See /digest-preview.\",\n { status: 410, headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } },\n );\n }\n if (url.pathname.endsWith(\"/inbound-old-disabled\")) {\n let rows: any[] = [];\n try {\n rows = (await sqlite.execute(\n \"SELECT * FROM inbound_test ORDER BY id DESC LIMIT 20\",\n )).rows as any[];\n } catch {\n rows = []; // table only exists once something has been received\n }\n const esc2 = (v: unknown) =>\n String(v ?? \"\").replace(/&/g, \"&\").replace(//g, \">\");\n let html = `` +\n `

` +\n `

Mail that reached Val Town

` +\n `

Newest first. The line that matters is From.

`;\n if (!rows.length) {\n html += `

Nothing has arrived yet.

`;\n }\n for (const r of rows) {\n let headers: Record = {};\n try {\n headers = JSON.parse(String(r.headers_json ?? \"{}\"));\n } catch { /* keep going, a bad row should still render */ }\n const notable = Object.keys(headers).filter((k) =>\n /^(from|reply-to|return-path|sender|delivered-to|x-forwarded|x-original|resent-)/i.test(k)\n );\n html += `

`;\n html += `

${esc2(new Date(Number(r.received_at)).toLocaleString(\"en-US\", { timeZone: \"America/New_York\" }))}

`;\n html += `

From: ${esc2(r.sender)}

`;\n html += `

To: ${esc2(r.recipients)}

`;\n html += `

Subject: ${esc2(r.subject)}

`;\n if (notable.length) {\n html += `

Routing headers

`;\n          for (const k of notable) html += `${esc2(k)}: ${esc2(headers[k])}\\n`;\n          html += `

`;\n }\n // What triage made of it. This is the half that matters once the\n // plumbing is proven: matched account, verdict, and the exact changes.\n let t: any = null;\n try {\n t = r.triage_json ? JSON.parse(String(r.triage_json)) : null;\n } catch { /* render the rest anyway */ }\n if (t) {\n const colour = t.verdict === \"action\" ? \"#1a73e8\" : t.verdict === \"human\" ? \"#f9ab00\" : \"#9aa0a6\";\n html += `

`;\n if (t.error) {\n html += `

Triage failed: ${esc2(t.error)}

`;\n } else {\n html += `

Verdict: ${esc2(t.verdict ?? \"-\")}${t.skipped ? ` (skipped: ${esc2(t.reason)})` : \"\"}

`;\n html += `

Matched: ${esc2(t.matchedOn || \"no account matched\")}` +\n (t.account?.Name ? ` → ${esc2(t.account.Name)}` : \"\") + `

`;\n if (t.signals?.described) {\n html += `

Looked for: ${esc2(t.signals.described)}

`;\n }\n if (t.summary) html += `

${esc2(t.summary)}

`;\n for (const a of t.actions ?? []) {\n html += `

→ ${esc2(a.label)}: ${esc2(fmtCell(a.currentValue))} → ${esc2(fmtCell(a.newValue))}` +\n (a.assumed ? ` [date assumed]` : \"\") + `

`;\n }\n if (t.needs_human) {\n html += `

Needs a person: ${esc2(t.needs_human)}

`;\n }\n if (t.model) html += `

Analysis by ${esc2(t.model)}

`;\n }\n html += `

`;\n } else {\n html += `

No triage recorded for this message.

`;\n }\n html += `

Body

` +\n `

${esc2(r.text_head)}

`;\n html += `

`;\n }\n html += `

`;\n return new Response(html, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n }\n // The exact email the cron would send, without sending it or marking\n // anything as sent. Add ?verdict=all to include rows already digested.\n if (url.pathname.endsWith(\"/digest-preview\")) {\n const { renderDigest } = await import(\"./digest.ts\");\n const where = url.searchParams.get(\"all\") ? \"\" : \"WHERE digested = 0\";\n const rows = (await sqlite.execute(\n `SELECT * FROM triage_v1 ${where} ORDER BY decided_at ASC LIMIT 60`,\n )).rows as any[];\n const html = renderDigest(\n rows.filter((r) => r.verdict === \"action\"),\n rows.filter((r) => r.verdict === \"human\"),\n );\n return new Response(html, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n }\n // The sweep asks \"anything I should mark read?\" once per run. Gmail can\n // only be touched from Apps Script, so the val decides and the sweep acts.\n if (url.pathname.endsWith(\"/to-mark-read\")) {\n const r = await sqlite.execute(\n \"SELECT message_id, thread_id FROM triage_v1 WHERE mark_read = 1 LIMIT 50\",\n );\n return json({ messages: r.rows });\n }\n // Agreement, per field: of the proposals the office has since acted on,\n // how often did they land on the value we proposed? 'untouched' rows are\n // excluded from the rate because they mostly mean \"nobody has dealt with it\n // yet\", not \"they disagreed\".\n if (url.pathname.endsWith(\"/outcomes\")) {\n const byField = (await sqlite.execute(\n `SELECT sobject, field, assumed,\n SUM(verdict = 'agreed') agreed,\n SUM(verdict = 'diverged') diverged,\n SUM(verdict = 'untouched') untouched,\n SUM(observed_at IS NULL) pending\n FROM outcome_v1 GROUP BY sobject, field, assumed\n ORDER BY agreed + diverged DESC`,\n )).rows as any[];\n const divergences = (await sqlite.execute(\n `SELECT sobject, field, proposed_from, proposed_to, observed_value, observed_by,\n assumed, hashed, proposed_at\n FROM outcome_v1 WHERE verdict = 'diverged'\n ORDER BY proposed_at DESC LIMIT 100`,\n )).rows as any[];\n const rate = (r: any) => {\n const decided = Number(r.agreed) + Number(r.diverged);\n return decided ? Math.round((100 * Number(r.agreed)) / decided) : null;\n };\n return json({\n note:\n \"agreement_pct counts only proposals the office has acted on. 'untouched' means nobody has dealt with it, which is not disagreement.\",\n byField: byField.map((r) => ({ ...r, agreement_pct: rate(r) })),\n divergences,\n });\n }\n if (url.pathname.endsWith(\"/pending\")) {\n const r = await sqlite.execute(\"SELECT * FROM triage_v1 WHERE digested = 0 ORDER BY decided_at DESC LIMIT 100\");\n return json({ pending: r.rows });\n }\n const r = await sqlite.execute(\"SELECT message_id, decided_at, verdict, account_name, subject, matched_on FROM triage_v1 ORDER BY decided_at DESC LIMIT 30\");\n return json({ ok: true, routes: [\"POST /triage\", \"GET /triage/pending\", \"GET /triage/recent\"], recent: r.rows });\n }\n if (req.method !== \"POST\") return json({ error: \"POST required\" }, 405);\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n // The sweep reports back which ones it actually marked, so they are not\n // offered again on the next run.\n if (url.pathname.endsWith(\"/marked-read\")) {\n const ids = (Array.isArray(body?.messageIds) ? body.messageIds : []).map(String).slice(0, 50);\n if (!ids.length) return json({ updated: 0 });\n await sqlite.execute({\n sql: `UPDATE triage_v1 SET mark_read = 2\n WHERE mark_read = 1 AND message_id IN (${ids.map(() => \"?\").join(\",\")})`,\n args: ids,\n });\n return json({ updated: ids.length });\n }\n\n try {\n return await triage(body);\n } catch (err) {\n return json({ error: String(err) }, 500);\n }\n}\n","deleted",false,"label",[14],"0979b5fe-99f9-4673-be24-063bb9928dc3",["D",1785197056244],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Read-only Salesforce Account/Opportunity API access","imageUrl","userId","c5acd3b3-60a7-4deb-bc6d-528f83012ea9","pinnedFileId","6093920c-8a18-11f1-a4ec-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8fe3-60c5-70ee-a317-3aded0417f73","tursoName","0979b5fe99f94673be24063bb9928dc3","tursoHostname","0979b5fe99f94673be24063bb9928dc3-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789491713377],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":-5},"org",{"_9":10,"_99":100,"_101":-5,"_55":-5,"_102":103,"_104":42},"branch",{"_35":89,"_11":90,"_22":28,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",290,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Tribeca_AIrep","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":63,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":90,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]