[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_156":157,"_158":159},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":53,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",34,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","new-file-7974.ts","latestPath","fileId","5435aa8e-aa31-11f1-ac28-1607ee4eb77e","name","fileType","http","content","/* =============================================================================\n AGENTIC FLOW LABS — WhatsApp intake & lead-gen webhook\n Val Town HTTP val (Deno) · v2\n\n Meta WhatsApp Cloud API (Coexistence Mode) -> Claude -> Cloud API\n\n ENVIRONMENT VARIABLES\n ANTHROPIC_API_KEY\n WHATSAPP_TOKEN System User token, expiry Never\n PHONE_NUMBER_ID the REGISTERED number's ID, not the test number's\n\n ORDER OF OPERATIONS AFTER ANY NUMBER OR APP CHANGE\n 1. /diag confirms env vars, resolves the real WABA, shows routing\n 2. WABA_ID below must match what /diag reports\n 3. /bind forces the subscribed_apps binding\n 4. message the number from another phone, watch for a POST\n\n WHY /diag EXISTS\n Neither the GET handshake nor a {\"success\":true} from /bind proves\n event delivery. The handshake only proves URL ownership; the bind only\n proves the ID you passed is reachable by your token — including when\n it is the wrong WABA entirely. /diag resolves the WABA from the phone\n number itself, so the ID cannot be assumed.\n ============================================================================= */\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n// ----------------------------------------------------------------- config\n\nconst VERIFY_TOKEN = \"ayan9823\";\n\n// Must be the WABA that owns PHONE_NUMBER_ID. Verify with /diag — do not\n// carry this over from a previous number.\nconst WABA_ID = \"882839321578409\";\n\nconst GRAPH = \"https://graph.facebook.com/v26.0\";\n\nconst MODEL = \"claude-haiku-4-5-20251001\";\nconst MAX_TOKENS = 150;\nconst CLAUDE_TIMEOUT_MS = 10_000;\n\nconst MAX_MESSAGE_AGE_SEC = 24 * 60 * 60;\nconst HISTORY_TURNS = 8;\nconst DEDUPE_TTL_MS = 60 * 60 * 1000;\n\n/**\n * Word-boundary matching with a negative lookahead on \"agentic\".\n * Substring matching fired on the company's own name, so leads asking\n * \"do you build agents?\" muted themselves permanently and silently.\n */\nconst HANDOFF_PATTERN =\n /\\b(human|support|real person)\\b|\\bagent\\b(?!ic)|talk to (a )?(person|human)|speak to (someone|a human)/i;\n\nconst SYSTEM_PROMPT =\n `You are a technical sales engineer at Agentic Flow Labs, an AI agency. You are talking to an inbound lead on WhatsApp.\n\nOUTPUT FORMAT — NON-NEGOTIABLE:\n- One to two sentences. Never more.\n- No lists, no bullets, no markdown, no line breaks. Plain prose only.\n- No greetings padding, no \"happy to help\", no restating their question.\n\nWHAT WE BUILD:\n- WhatsApp Lead Gen Agents: qualify inbound leads, capture requirements, book calls.\n- Custom Support Bots: trained on the client's docs, catalogue or knowledge base.\n- Multi-Agent Systems: several specialised agents with routing and handoff between them.\n\nYOUR JOB:\n- Qualify: what they are trying to automate, rough volume, what they use now.\n- Ask exactly one question per message. Never two.\n- Steer toward a technical scoping call once you know their use case.\n- Ground claims in the three services above. Never invent capabilities, integrations, timelines or prices.\n- Pricing depends on workload and integration complexity; say that and move to the call rather than quoting numbers.\n- If they ask something you cannot answer, say a specialist will confirm on the call.`;\n\n// -------------------------------------------------------------------- env\n\nfunction env(name: string): string {\n return Deno.env.get(name) ?? \"\";\n}\n\nfunction bearer() {\n return { authorization: `Bearer ${env(\"WHATSAPP_TOKEN\")}` };\n}\n\n// ------------------------------------------------------------- blob state\n\nasync function readState(key: string): Promise {\n try {\n return ((await blob.getJSON(key)) as T) ?? null;\n } catch {\n return null;\n }\n}\n\nconst handoffKey = (phone: string) => `handoff:${phone}`;\nconst historyKey = (phone: string) => `history:${phone}`;\nconst seenKey = (id: string) => `seen:${id}`;\n\nasync function isHandedOff(phone: string): Promise {\n return (await readState(handoffKey(phone))) === true;\n}\n\nasync function setHandoff(phone: string, reason: string): Promise {\n await blob.setJSON(handoffKey(phone), true);\n console.log(`HANDOFF ${phone} (${reason}) — bot muted for this chat`);\n}\n\n/** Meta redelivers on any non-200 or slow response. Without this, one\n * inbound message can bill several completions. */\nasync function alreadyHandled(id: string): Promise {\n if (!id) return false;\n const seen = await readState(seenKey(id));\n if (seen && Date.now() - seen < DEDUPE_TTL_MS) return true;\n await blob.setJSON(seenKey(id), Date.now());\n return false;\n}\n\n// -------------------------------------------------------------- guardrail\n\n/** Meta replays queued webhooks after an outage. Answering a two-day-old\n * message is a policy violation and unbillable, so drop before any paid call. */\nfunction withinServiceWindow(timestamp: string | undefined): boolean {\n if (!timestamp) return false;\n const sent = Number(timestamp);\n if (!Number.isFinite(sent)) return false;\n const ageSec = Math.floor(Date.now() / 1000) - sent;\n return ageSec >= 0 && ageSec < MAX_MESSAGE_AGE_SEC;\n}\n\n// ----------------------------------------------------------------- claude\n\ntype Turn = { role: \"user\" | \"assistant\"; content: string };\n\nasync function generate(phone: string, text: string): Promise {\n const past = (await readState(historyKey(phone))) ?? [];\n\n const abort = new AbortController();\n const timer = setTimeout(() => abort.abort(), CLAUDE_TIMEOUT_MS);\n\n try {\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n signal: abort.signal,\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": env(\"ANTHROPIC_API_KEY\"),\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: MODEL,\n max_tokens: MAX_TOKENS,\n system: [\n {\n type: \"text\",\n text: SYSTEM_PROMPT,\n cache_control: { type: \"ephemeral\" },\n },\n ],\n messages: [...past, { role: \"user\", content: text }],\n }),\n });\n\n if (!res.ok) {\n console.error(\"CLAUDE\", res.status, await res.text());\n return null;\n }\n\n const data = await res.json();\n const reply = (data?.content ?? []).map((c: any) => c?.text ?? \"\").join(\"\")\n .trim();\n if (!reply) return null;\n\n await blob.setJSON(\n historyKey(phone),\n [...past, { role: \"user\", content: text }, {\n role: \"assistant\",\n content: reply,\n }]\n .slice(-HISTORY_TURNS * 2),\n );\n\n return reply;\n } catch (err) {\n console.error(\"CLAUDE request failed:\", err);\n return null;\n } finally {\n clearTimeout(timer);\n }\n}\n\n// --------------------------------------------------------------- outbound\n\nasync function send(to: string, body: string): Promise {\n const res = await fetch(`${GRAPH}/${env(\"PHONE_NUMBER_ID\")}/messages`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\", ...bearer() },\n body: JSON.stringify({\n messaging_product: \"whatsapp\",\n to,\n type: \"text\",\n text: { body: body.slice(0, 4000) },\n }),\n });\n\n if (!res.ok) console.error(\"SEND\", res.status, await res.text());\n else console.log(`SENT -> ${to}`);\n}\n\n// ------------------------------------------------------- inbound handling\n\nasync function handleCustomerMessage(msg: any): Promise {\n const from: string = msg.from;\n console.log(`INBOUND ${msg.id} from ${from} type=${msg.type}`);\n\n if (await alreadyHandled(msg.id)) {\n console.log(`DUPLICATE ${msg.id} — ignored`);\n return;\n }\n\n if (!withinServiceWindow(msg.timestamp)) {\n console.log(`DROP ${msg.id} — outside 24h service window`);\n return;\n }\n\n if (await isHandedOff(from)) {\n console.log(`MUTED ${from} — human handoff active`);\n return;\n }\n\n if (msg.type !== \"text\" || !msg.text?.body) {\n await send(\n from,\n \"I can only read text here — what are you looking to automate?\",\n );\n return;\n }\n\n const text: string = msg.text.body;\n\n if (HANDOFF_PATTERN.test(text)) {\n await setHandoff(from, \"keyword\");\n await send(\n from,\n \"I am routing your request to a human specialist — someone will pick this up shortly.\",\n );\n return;\n }\n\n const reply = await generate(from, text);\n if (!reply) {\n console.error(\n `No completion for ${from}; staying silent rather than sending filler.`,\n );\n return;\n }\n\n await send(from, reply);\n}\n\n/** Coexistence: the owner answering from the mobile Business app arrives as\n * an echo. Shape varies by API version, so try each known path and log the\n * raw object if none resolve. */\nasync function handleEcho(echo: any): Promise {\n const target: string | undefined = echo?.to ?? echo?.recipient_id ??\n echo?.message_echo?.to;\n\n if (!target) {\n console.error(\"ECHO with no resolvable recipient:\", JSON.stringify(echo));\n return;\n }\n\n await setHandoff(target, \"owner replied from mobile app\");\n}\n\n// ------------------------------------------------------------------- main\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname === \"/favicon.ico\") {\n return new Response(null, { status: 204 });\n }\n\n // ---- /diag: resolve the real WABA and show routing -------------------\n if (url.pathname === \"/diag\") {\n const out: Record = {\n ANTHROPIC_API_KEY: env(\"ANTHROPIC_API_KEY\") ? \"set\" : \"MISSING\",\n WHATSAPP_TOKEN: env(\"WHATSAPP_TOKEN\") ? \"set\" : \"MISSING\",\n PHONE_NUMBER_ID: env(\"PHONE_NUMBER_ID\") || \"MISSING\",\n WABA_ID_IN_CODE: WABA_ID,\n };\n\n try {\n const r = await fetch(\n `${GRAPH}/${\n env(\"PHONE_NUMBER_ID\")\n }?fields=id,display_phone_number,verified_name,whatsapp_business_account`,\n { headers: bearer() },\n );\n const num = await r.json();\n out.number = num;\n\n const realWaba = num?.whatsapp_business_account?.id;\n out.WABA_ID_ACTUAL = realWaba ?? \"could not resolve\";\n out.WABA_MATCH = realWaba\n ? (realWaba === WABA_ID\n ? \"OK\"\n : `MISMATCH — set WABA_ID to ${realWaba}`)\n : \"unknown\";\n\n if (realWaba) {\n const subs = await fetch(`${GRAPH}/${realWaba}/subscribed_apps`, {\n headers: bearer(),\n });\n out.routing = await subs.json();\n }\n } catch (err) {\n out.error = String(err);\n }\n\n return Response.json(out);\n }\n\n // ---- /bind: force the subscribed_apps binding ------------------------\n // Binds the WABA resolved from PHONE_NUMBER_ID, falling back to the\n // constant. Binding a hardcoded ID that no longer owns the number is the\n // exact failure this avoids.\n if (url.pathname === \"/bind\") {\n let target = WABA_ID;\n try {\n const r = await fetch(\n `${GRAPH}/${env(\"PHONE_NUMBER_ID\")}?fields=whatsapp_business_account`,\n { headers: bearer() },\n );\n const resolved = (await r.json())?.whatsapp_business_account?.id;\n if (resolved) target = resolved;\n } catch { /* fall back to the constant */ }\n\n const post = await fetch(`${GRAPH}/${target}/subscribed_apps`, {\n method: \"POST\",\n headers: bearer(),\n });\n const bound = await post.text();\n\n const state = await fetch(`${GRAPH}/${target}/subscribed_apps`, {\n headers: bearer(),\n });\n\n return new Response(\n `BOUND WABA: ${target}${\n target === WABA_ID ? \"\" : \" (resolved, differs from WABA_ID in code)\"\n }\\n\\n` +\n `BIND: ${bound}\\n\\nROUTING: ${await state.text()}`,\n { headers: { \"content-type\": \"text/plain\" } },\n );\n }\n\n // ---- /unmute?phone=923277660045 --------------------------------------\n if (url.pathname === \"/unmute\") {\n const phone = url.searchParams.get(\"phone\");\n if (!phone) return new Response(\"Pass ?phone=\", { status: 400 });\n await blob.delete(handoffKey(phone)).catch(() => {});\n return new Response(`Bot re-enabled for ${phone}`);\n }\n\n // ---- Meta verification handshake -------------------------------------\n if (req.method === \"GET\") {\n if (url.searchParams.get(\"hub.verify_token\") === VERIFY_TOKEN) {\n return new Response(url.searchParams.get(\"hub.challenge\") ?? \"\");\n }\n if (!url.searchParams.has(\"hub.verify_token\")) {\n return new Response(\n \"Agentic Flow Labs intake webhook.\\nRun /diag first, then /bind.\",\n { headers: { \"content-type\": \"text/plain\" } },\n );\n }\n return new Response(\"Forbidden\", { status: 403 });\n }\n\n if (req.method !== \"POST\") return new Response(\"OK\");\n\n const body = await req.json().catch(() => null);\n\n // Logged raw so an unrecognised field shows up instead of vanishing.\n console.log(\"WEBHOOK\", JSON.stringify(body)?.slice(0, 900));\n\n try {\n for (const entry of body?.entry ?? []) {\n for (const change of entry?.changes ?? []) {\n const value = change?.value ?? {};\n\n // Mute first, so a racing inbound message cannot slip past the flag.\n const echo = value.message_echoes?.[0];\n if (echo) {\n await handleEcho(echo);\n continue;\n }\n\n if (value.statuses) continue; // delivery receipts, read markers\n\n for (const msg of value.messages ?? []) {\n await handleCustomerMessage(msg);\n }\n }\n }\n } catch (err) {\n // Never return non-200: it triggers Meta redelivery, multiplying the\n // failure instead of containing it.\n console.error(\"Webhook processing error:\", err);\n }\n\n return new Response(\"OK\", { status: 200 });\n}","/* =============================================================================\n AGENTIC FLOW LABS — WhatsApp intake & lead-gen webhook\n Val Town HTTP val (Deno) · v2\n\n Meta WhatsApp Cloud API (Coexistence Mode) -> Claude -> Cloud API\n\n ENVIRONMENT VARIABLES\n ANTHROPIC_API_KEY\n WHATSAPP_TOKEN System User token, expiry Never\n PHONE_NUMBER_ID the REGISTERED number's ID, not the test number's\n\n ORDER OF OPERATIONS AFTER ANY NUMBER OR APP CHANGE\n 1. /diag confirms env vars, resolves the real WABA, shows routing\n 2. WABA_ID below must match what /diag reports\n 3. /bind forces the subscribed_apps binding\n 4. message the number from another phone, watch for a POST\n\n WHY /diag EXISTS\n Neither the GET handshake nor a {\"success\":true} from /bind proves\n event delivery. The handshake only proves URL ownership; the bind only\n proves the ID you passed is reachable by your token — including when\n it is the wrong WABA entirely. /diag resolves the WABA from the phone\n number itself, so the ID cannot be assumed.\n ============================================================================= */\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n// ----------------------------------------------------------------- config\n\nconst VERIFY_TOKEN = \"ayan9823\";\n\n// Must be the WABA that owns PHONE_NUMBER_ID. Verify with /diag — do not\n// carry this over from a previous number.\nconst WABA_ID = \"1292041733993604\";\n\nconst GRAPH = \"https://graph.facebook.com/v26.0\";\n\nconst MODEL = \"claude-haiku-4-5-20251001\";\nconst MAX_TOKENS = 150;\nconst CLAUDE_TIMEOUT_MS = 10_000;\n\nconst MAX_MESSAGE_AGE_SEC = 24 * 60 * 60;\nconst HISTORY_TURNS = 8;\nconst DEDUPE_TTL_MS = 60 * 60 * 1000;\n\n/**\n * Word-boundary matching with a negative lookahead on \"agentic\".\n * Substring matching fired on the company's own name, so leads asking\n * \"do you build agents?\" muted themselves permanently and silently.\n */\nconst HANDOFF_PATTERN =\n /\\b(human|support|real person)\\b|\\bagent\\b(?!ic)|talk to (a )?(person|human)|speak to (someone|a human)/i;\n\nconst SYSTEM_PROMPT =\n `You are a technical sales engineer at Agentic Flow Labs, an AI agency. You are talking to an inbound lead on WhatsApp.\n\nOUTPUT FORMAT — NON-NEGOTIABLE:\n- One to two sentences. Never more.\n- No lists, no bullets, no markdown, no line breaks. Plain prose only.\n- No greetings padding, no \"happy to help\", no restating their question.\n\nWHAT WE BUILD:\n- WhatsApp Lead Gen Agents: qualify inbound leads, capture requirements, book calls.\n- Custom Support Bots: trained on the client's docs, catalogue or knowledge base.\n- Multi-Agent Systems: several specialised agents with routing and handoff between them.\n\nYOUR JOB:\n- Qualify: what they are trying to automate, rough volume, what they use now.\n- Ask exactly one question per message. Never two.\n- Steer toward a technical scoping call once you know their use case.\n- Ground claims in the three services above. Never invent capabilities, integrations, timelines or prices.\n- Pricing depends on workload and integration complexity; say that and move to the call rather than quoting numbers.\n- If they ask something you cannot answer, say a specialist will confirm on the call.`;\n\n// -------------------------------------------------------------------- env\n\nfunction env(name: string): string {\n return Deno.env.get(name) ?? \"\";\n}\n\nfunction bearer() {\n return { authorization: `Bearer ${env(\"WHATSAPP_TOKEN\")}` };\n}\n\n// ------------------------------------------------------------- blob state\n\nasync function readState(key: string): Promise {\n try {\n return ((await blob.getJSON(key)) as T) ?? null;\n } catch {\n return null;\n }\n}\n\nconst handoffKey = (phone: string) => `handoff:${phone}`;\nconst historyKey = (phone: string) => `history:${phone}`;\nconst seenKey = (id: string) => `seen:${id}`;\n\nasync function isHandedOff(phone: string): Promise {\n return (await readState(handoffKey(phone))) === true;\n}\n\nasync function setHandoff(phone: string, reason: string): Promise {\n await blob.setJSON(handoffKey(phone), true);\n console.log(`HANDOFF ${phone} (${reason}) — bot muted for this chat`);\n}\n\n/** Meta redelivers on any non-200 or slow response. Without this, one\n * inbound message can bill several completions. */\nasync function alreadyHandled(id: string): Promise {\n if (!id) return false;\n const seen = await readState(seenKey(id));\n if (seen && Date.now() - seen < DEDUPE_TTL_MS) return true;\n await blob.setJSON(seenKey(id), Date.now());\n return false;\n}\n\n// -------------------------------------------------------------- guardrail\n\n/** Meta replays queued webhooks after an outage. Answering a two-day-old\n * message is a policy violation and unbillable, so drop before any paid call. */\nfunction withinServiceWindow(timestamp: string | undefined): boolean {\n if (!timestamp) return false;\n const sent = Number(timestamp);\n if (!Number.isFinite(sent)) return false;\n const ageSec = Math.floor(Date.now() / 1000) - sent;\n return ageSec >= 0 && ageSec < MAX_MESSAGE_AGE_SEC;\n}\n\n// ----------------------------------------------------------------- claude\n\ntype Turn = { role: \"user\" | \"assistant\"; content: string };\n\nasync function generate(phone: string, text: string): Promise {\n const past = (await readState(historyKey(phone))) ?? [];\n\n const abort = new AbortController();\n const timer = setTimeout(() => abort.abort(), CLAUDE_TIMEOUT_MS);\n\n try {\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n signal: abort.signal,\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": env(\"ANTHROPIC_API_KEY\"),\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: MODEL,\n max_tokens: MAX_TOKENS,\n system: [\n {\n type: \"text\",\n text: SYSTEM_PROMPT,\n cache_control: { type: \"ephemeral\" },\n },\n ],\n messages: [...past, { role: \"user\", content: text }],\n }),\n });\n\n if (!res.ok) {\n console.error(\"CLAUDE\", res.status, await res.text());\n return null;\n }\n\n const data = await res.json();\n const reply = (data?.content ?? []).map((c: any) => c?.text ?? \"\").join(\"\")\n .trim();\n if (!reply) return null;\n\n await blob.setJSON(\n historyKey(phone),\n [...past, { role: \"user\", content: text }, {\n role: \"assistant\",\n content: reply,\n }]\n .slice(-HISTORY_TURNS * 2),\n );\n\n return reply;\n } catch (err) {\n console.error(\"CLAUDE request failed:\", err);\n return null;\n } finally {\n clearTimeout(timer);\n }\n}\n\n// --------------------------------------------------------------- outbound\n\nasync function send(to: string, body: string): Promise {\n const res = await fetch(`${GRAPH}/${env(\"PHONE_NUMBER_ID\")}/messages`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\", ...bearer() },\n body: JSON.stringify({\n messaging_product: \"whatsapp\",\n to,\n type: \"text\",\n text: { body: body.slice(0, 4000) },\n }),\n });\n\n if (!res.ok) console.error(\"SEND\", res.status, await res.text());\n else console.log(`SENT -> ${to}`);\n}\n\n// ------------------------------------------------------- inbound handling\n\nasync function handleCustomerMessage(msg: any): Promise {\n const from: string = msg.from;\n console.log(`INBOUND ${msg.id} from ${from} type=${msg.type}`);\n\n if (await alreadyHandled(msg.id)) {\n console.log(`DUPLICATE ${msg.id} — ignored`);\n return;\n }\n\n if (!withinServiceWindow(msg.timestamp)) {\n console.log(`DROP ${msg.id} — outside 24h service window`);\n return;\n }\n\n if (await isHandedOff(from)) {\n console.log(`MUTED ${from} — human handoff active`);\n return;\n }\n\n if (msg.type !== \"text\" || !msg.text?.body) {\n await send(\n from,\n \"I can only read text here — what are you looking to automate?\",\n );\n return;\n }\n\n const text: string = msg.text.body;\n\n if (HANDOFF_PATTERN.test(text)) {\n await setHandoff(from, \"keyword\");\n await send(\n from,\n \"I am routing your request to a human specialist — someone will pick this up shortly.\",\n );\n return;\n }\n\n const reply = await generate(from, text);\n if (!reply) {\n console.error(\n `No completion for ${from}; staying silent rather than sending filler.`,\n );\n return;\n }\n\n await send(from, reply);\n}\n\n/** Coexistence: the owner answering from the mobile Business app arrives as\n * an echo. Shape varies by API version, so try each known path and log the\n * raw object if none resolve. */\nasync function handleEcho(echo: any): Promise {\n const target: string | undefined = echo?.to ?? echo?.recipient_id ??\n echo?.message_echo?.to;\n\n if (!target) {\n console.error(\"ECHO with no resolvable recipient:\", JSON.stringify(echo));\n return;\n }\n\n await setHandoff(target, \"owner replied from mobile app\");\n}\n\n// ------------------------------------------------------------------- main\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname === \"/favicon.ico\") {\n return new Response(null, { status: 204 });\n }\n\n // ---- /diag: resolve the real WABA and show routing -------------------\n if (url.pathname === \"/diag\") {\n const out: Record = {\n ANTHROPIC_API_KEY: env(\"ANTHROPIC_API_KEY\") ? \"set\" : \"MISSING\",\n WHATSAPP_TOKEN: env(\"WHATSAPP_TOKEN\") ? \"set\" : \"MISSING\",\n PHONE_NUMBER_ID: env(\"PHONE_NUMBER_ID\") || \"MISSING\",\n WABA_ID_IN_CODE: WABA_ID,\n };\n\n try {\n const r = await fetch(\n `${GRAPH}/${\n env(\"PHONE_NUMBER_ID\")\n }?fields=id,display_phone_number,verified_name,whatsapp_business_account`,\n { headers: bearer() },\n );\n const num = await r.json();\n out.number = num;\n\n const realWaba = num?.whatsapp_business_account?.id;\n out.WABA_ID_ACTUAL = realWaba ?? \"could not resolve\";\n out.WABA_MATCH = realWaba\n ? (realWaba === WABA_ID\n ? \"OK\"\n : `MISMATCH — set WABA_ID to ${realWaba}`)\n : \"unknown\";\n\n if (realWaba) {\n const subs = await fetch(`${GRAPH}/${realWaba}/subscribed_apps`, {\n headers: bearer(),\n });\n out.routing = await subs.json();\n }\n } catch (err) {\n out.error = String(err);\n }\n\n return Response.json(out);\n }\n\n // ---- /bind: force the subscribed_apps binding ------------------------\n // Binds the WABA resolved from PHONE_NUMBER_ID, falling back to the\n // constant. Binding a hardcoded ID that no longer owns the number is the\n // exact failure this avoids.\n if (url.pathname === \"/bind\") {\n let target = WABA_ID;\n try {\n const r = await fetch(\n `${GRAPH}/${env(\"PHONE_NUMBER_ID\")}?fields=whatsapp_business_account`,\n { headers: bearer() },\n );\n const resolved = (await r.json())?.whatsapp_business_account?.id;\n if (resolved) target = resolved;\n } catch { /* fall back to the constant */ }\n\n const post = await fetch(`${GRAPH}/${target}/subscribed_apps`, {\n method: \"POST\",\n headers: bearer(),\n });\n const bound = await post.text();\n\n const state = await fetch(`${GRAPH}/${target}/subscribed_apps`, {\n headers: bearer(),\n });\n\n return new Response(\n `BOUND WABA: ${target}${\n target === WABA_ID ? \"\" : \" (resolved, differs from WABA_ID in code)\"\n }\\n\\n` +\n `BIND: ${bound}\\n\\nROUTING: ${await state.text()}`,\n { headers: { \"content-type\": \"text/plain\" } },\n );\n }\n\n // ---- /unmute?phone=923277660045 --------------------------------------\n if (url.pathname === \"/unmute\") {\n const phone = url.searchParams.get(\"phone\");\n if (!phone) return new Response(\"Pass ?phone=\", { status: 400 });\n await blob.delete(handoffKey(phone)).catch(() => {});\n return new Response(`Bot re-enabled for ${phone}`);\n }\n\n // ---- Meta verification handshake -------------------------------------\n if (req.method === \"GET\") {\n if (url.searchParams.get(\"hub.verify_token\") === VERIFY_TOKEN) {\n return new Response(url.searchParams.get(\"hub.challenge\") ?? \"\");\n }\n if (!url.searchParams.has(\"hub.verify_token\")) {\n return new Response(\n \"Agentic Flow Labs intake webhook.\\nRun /diag first, then /bind.\",\n { headers: { \"content-type\": \"text/plain\" } },\n );\n }\n return new Response(\"Forbidden\", { status: 403 });\n }\n\n if (req.method !== \"POST\") return new Response(\"OK\");\n\n const body = await req.json().catch(() => null);\n\n // Logged raw so an unrecognised field shows up instead of vanishing.\n console.log(\"WEBHOOK\", JSON.stringify(body)?.slice(0, 900));\n\n try {\n for (const entry of body?.entry ?? []) {\n for (const change of entry?.changes ?? []) {\n const value = change?.value ?? {};\n\n // Mute first, so a racing inbound message cannot slip past the flag.\n const echo = value.message_echoes?.[0];\n if (echo) {\n await handleEcho(echo);\n continue;\n }\n\n if (value.statuses) continue; // delivery receipts, read markers\n\n for (const msg of value.messages ?? []) {\n await handleCustomerMessage(msg);\n }\n }\n }\n } catch (err) {\n // Never return non-200: it triggers Meta redelivery, multiplying the\n // failure instead of containing it.\n console.error(\"Webhook processing error:\", err);\n }\n\n return new Response(\"OK\", { status: 200 });\n}","createdAt",["D",1789145364999],"branchVersion","branchId","de1677f1-55e3-4620-b30e-dd05ec61774f","id","af3cde10-62a5-4f8d-b786-0e0cb943b1d4","Books-bot",["D",1788724892077],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","47eaf13b-b72f-4418-ae2f-ebe9fff309ae","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0783d-81e8-754f-ad5a-c8c2fb0c005f","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",42,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","AyanAfzal","handle","displayName","Rayan Bhatti","avatar","https://lh3.googleusercontent.com/a/ACg8ocLHYtPrlNBVkdnNY7c7Sp49jHoTN9_El-TKpOlHxwIPQn6Saw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":152,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":153,"_80":154,"_82":155,"_84":25},"tree",[147],"files",[147],"counts",{"_135":62,"_136":137,"_138":62,"_139":140,"_141":142},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":133,"_27":134},"78397ecf-557d-4c10-8616-83e8071533a0","parentId","latest",["D",1789145364999],28,"label","theagents",[28],"pulls","branches",1,"forks","envVars",{"_143":145,"_146":62},"connections",{"_143":62,"_144":62},"count","unfilledCount",6,"emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":148,"_13":131,"_33":34,"_35":37,"_24":25,"_132":133,"_149":150,"_27":151},["D",1789145364999],"children",[],[28],["D",1788724892077],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_123":189,"_190":191,"_192":193,"_194":25,"_195":25,"_196":25,"_197":58,"_198":-5,"_199":-7,"_200":-7,"_201":62,"_202":25,"_203":25,"_204":-5,"_205":25,"_206":25,"_207":25,"_208":-5},"ENV",{"_160":161,"_162":163,"_164":86,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v34