[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_194":195,"_196":197},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_108":89,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",5,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","01a03a6b-1697-71fe-a681-032b2cbe7562","name","fileType","http","content","// tawk.to chat transcripts -> SQLite, with a Salesforce match.\n//\n// POST / tawk webhook receiver (set this URL in tawk Admin > Webhooks)\n// GET /?key=... read the chats, their full message bodies, and any SF match\n//\n// Env vars:\n// TAWK_WEBHOOK_SECRET required — the secret you set when creating the webhook\n// VIEW_KEY required to open the viewer (transcripts are customer PII)\n// SALESFORCE_AGENT_URL optional — endpoint of tribeca-salesforce-agent\n// SALESFORCE_AGENT_KEY optional — its API_SHARED_SECRET\n// Without the Salesforce pair, transcripts still land; matching reports \"error\".\nimport { getChat, listChats, saveChat } from \"./db.ts\";\nimport { findInSalesforce, scrapeContact } from \"./lookup.ts\";\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"POST\") return receive(req);\n if (req.method === \"GET\") return viewer(url);\n return new Response(\"Method not allowed\", { status: 405 });\n}\n\n// ------------------------------------------------------------------ webhook\nasync function receive(req: Request): Promise {\n const secret = Deno.env.get(\"TAWK_WEBHOOK_SECRET\");\n if (!secret) return new Response(\"TAWK_WEBHOOK_SECRET not set\", { status: 500 });\n\n const raw = await req.text();\n const signature = req.headers.get(\"X-Tawk-Signature\") ?? \"\";\n if (!await verify(raw, signature, secret)) {\n console.error(\"Rejected webhook: bad signature\");\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n let payload: Record;\n try {\n payload = JSON.parse(raw);\n } catch {\n return new Response(\"Bad JSON\", { status: 400 });\n }\n\n const event = String(payload.event ?? \"unknown\");\n const parsed = parseEvent(event, payload);\n if (!parsed) {\n // Acknowledge anything we don't model, so tawk doesn't retry it for 12h.\n console.log(`Ignoring unmodelled event: ${event}`);\n return Response.json({ received: true, ignored: event });\n }\n\n // Scrape ONLY what the visitor typed. Agents paste the office number and\n // support links constantly; matching on those would tie every chat to Tribeca.\n const { email: foundEmail, phone: foundPhone } = scrapeContact(parsed.visitorText);\n const email = parsed.visitorEmail || foundEmail;\n const match = await findInSalesforce(email, foundPhone);\n\n await saveChat({\n id: parsed.id,\n event,\n time: String(payload.time ?? new Date().toISOString()),\n domain: payload.domain ?? null,\n referrer: payload.referrer ?? null,\n visitorName: parsed.visitorName,\n visitorEmail: parsed.visitorEmail,\n city: parsed.city,\n country: parsed.country,\n foundEmail,\n foundPhone,\n transcript: parsed.transcript,\n sfStatus: match.status,\n sfJson: JSON.stringify(match),\n });\n\n return Response.json({ received: true });\n}\n\ntype Parsed = {\n id: string;\n visitorName: string | null;\n visitorEmail: string | null;\n city: string | null;\n country: string | null;\n transcript: string;\n /** Visitor messages only — what we're allowed to scrape for contact details. */\n visitorText: string;\n};\n\nfunction parseEvent(event: string, p: Record): Parsed | null {\n const v = (o: any) => ({\n visitorName: o?.name ?? null,\n visitorEmail: o?.email ?? null,\n city: o?.city ?? null,\n country: o?.country ?? null,\n });\n\n if (event === \"chat:transcript_created\") {\n const chat = p.chat ?? {};\n const messages: any[] = Array.isArray(chat.messages) ? chat.messages : [];\n const label = (m: any) =>\n m?.sender?.t === \"v\" ? \"visitor\" : m?.sender?.t === \"a\" ? `agent ${m?.sender?.n ?? \"\"}`.trim() : \"system\";\n return {\n id: String(chat.id ?? p.chatId ?? crypto.randomUUID()),\n ...v(chat.visitor),\n transcript: messages.map((m) => `${label(m)}: ${m?.msg ?? \"\"}`).join(\"\\n\"),\n visitorText: messages.filter((m) => m?.sender?.t === \"v\").map((m) => m?.msg ?? \"\").join(\"\\n\"),\n };\n }\n\n if (event === \"chat:start\") {\n const text = p.message?.text ?? \"\";\n const fromVisitor = p.message?.sender?.type === \"visitor\";\n return {\n id: String(p.chatId ?? crypto.randomUUID()),\n ...v(p.visitor),\n transcript: `${fromVisitor ? \"visitor\" : \"agent\"}: ${text}`,\n visitorText: fromVisitor ? text : \"\",\n };\n }\n\n if (event === \"ticket:create\") {\n const t = p.ticket ?? {};\n const text = `${t.subject ?? \"\"}\\n${t.message ?? \"\"}`.trim();\n return {\n id: `ticket-${t.id ?? crypto.randomUUID()}`,\n visitorName: p.requester?.name ?? null,\n visitorEmail: p.requester?.email ?? null,\n city: null,\n country: null,\n transcript: text,\n visitorText: text,\n };\n }\n\n // chat:end carries no message body — the transcript event covers that chat.\n return null;\n}\n\n/** tawk signs with HMAC-SHA1 over the raw body, hex encoded. */\nasync function verify(body: string, signature: string, secret: string): Promise {\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(secret),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const sig = await crypto.subtle.sign(\"HMAC\", key, enc.encode(body));\n const hex = [...new Uint8Array(sig)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n return timingSafeEqual(hex, signature.trim().toLowerCase());\n}\n\nfunction timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n return diff === 0;\n}\n\n// ------------------------------------------------------------------- viewer\nasync function viewer(url: URL): Promise {\n const expected = Deno.env.get(\"VIEW_KEY\");\n if (!expected) {\n return new Response(\n \"Set a VIEW_KEY environment variable, then open /?key=YOUR_KEY.\\n\" +\n \"This page shows chat transcripts and customer contact details, so it stays closed until you do.\",\n { status: 503 },\n );\n }\n if (url.searchParams.get(\"key\") !== expected) return new Response(\"Not found\", { status: 404 });\n\n const id = url.searchParams.get(\"chat\");\n if (id) {\n const chat = await getChat(id);\n if (!chat) return new Response(\"Not found\", { status: 404 });\n return html(detailPage(chat, url.searchParams.get(\"key\")!));\n }\n return html(listPage(await listChats(), url.searchParams.get(\"key\")!));\n}\n\nconst esc = (s: unknown) =>\n String(s ?? \"\").replace(/[&<>\"]/g, (m) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\" }[m]!));\n\nconst STYLE =\n ``;\n\nconst html = (body: string) => new Response(`${STYLE}${body}`, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n});\n\nfunction listPage(chats: Record[], key: string) {\n if (!chats.length) {\n return `

tawk chats

Nothing received yet. Point a tawk webhook at this URL and start a chat.

`;\n }\n const rows = chats.map((c) =>\n `\n ${esc(String(c.received_at).replace(\"T\", \" \").slice(0, 16))}\n ${esc(c.visitor_name) || '-'}\n ${esc(c.city) || '-'}\n ${esc(c.found_email || c.visitor_email) || '-'}\n ${esc(c.found_phone) || '-'}\n ${esc(String(c.sf_status).replace(/_/g, \" \"))}\n read\n `\n ).join(\"\");\n return `

tawk chats (${chats.length})

\n${rows}

Received	Name	City	Email	Phone	Salesforce

`;\n}\n\nfunction detailPage(c: Record, key: string) {\n let sf = \"\";\n try {\n const m = JSON.parse(String(c.sf_json ?? \"{}\"));\n sf = m.status === \"matched\"\n ? `

Matched on ${esc(m.matchedOn)}

${esc(JSON.stringify(m.records, null, 2))}

`\n : `

${esc(m.status)}${m.error ? `: ${esc(m.error)}` : \"\"}

`;\n } catch {\n sf = `

`;\n }\n return `

← all chats

${esc(c.visitor_name) || \"Visitor\"} ${esc(c.city)}

${esc(c.event)} · ${esc(c.time)} · ${esc(c.referrer)}

Transcript

${esc(c.transcript)}

Scraped from what the visitor typed

email: ${esc(c.found_email) || \"-\"} · phone: ${esc(c.found_phone) || \"-\"}

Salesforce

${sf}`;\n}\n","// tawk.to chat transcripts -> SQLite, with a Salesforce match.\n//\n// POST / tawk webhook receiver (set this URL in tawk Admin > Webhooks)\n// GET /?key=... read the chats, their full message bodies, and any SF match\n//\n// Env vars:\n// TAWK_WEBHOOK_SECRET required — the secret you set when creating the webhook\n// VIEW_KEY required to open the viewer (transcripts are customer PII)\n// SALESFORCE_AGENT_URL optional — endpoint of tribeca-salesforce-agent\n// SALESFORCE_AGENT_KEY optional — its API_SHARED_SECRET\n// Without the Salesforce pair, transcripts still land; matching reports \"error\".\nimport { getChat, listChats, saveChat } from \"./db.ts\";\nimport { findInSalesforce, scrapeContact } from \"./lookup.ts\";\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"POST\") return receive(req);\n if (req.method === \"GET\") return viewer(url);\n return new Response(\"Method not allowed\", { status: 405 });\n}\n\n// ------------------------------------------------------------------ webhook\nasync function receive(req: Request): Promise {\n const secret = Deno.env.get(\"TAWK_WEBHOOK_SECRET\");\n if (!secret) return new Response(\"TAWK_WEBHOOK_SECRET not set\", { status: 500 });\n\n const raw = await req.text();\n const signature = req.headers.get(\"X-Tawk-Signature\") ?? \"\";\n if (!await verify(raw, signature, secret)) {\n console.error(\"Rejected webhook: bad signature\");\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n let payload: Record;\n try {\n payload = JSON.parse(raw);\n } catch {\n return new Response(\"Bad JSON\", { status: 400 });\n }\n\n const event = String(payload.event ?? \"unknown\");\n const parsed = parseEvent(event, payload);\n if (!parsed) {\n // Acknowledge anything we don't model, so tawk doesn't retry it for 12h.\n console.log(`Ignoring unmodelled event: ${event}`);\n return Response.json({ received: true, ignored: event });\n }\n\n // Scrape ONLY what the visitor typed. Agents paste the office number and\n // support links constantly; matching on those would tie every chat to Tribeca.\n const { email: foundEmail, phone: foundPhone } = scrapeContact(parsed.visitorText);\n const email = parsed.visitorEmail || foundEmail;\n const match = await findInSalesforce(email, foundPhone);\n\n await saveChat({\n id: parsed.id,\n event,\n time: String(payload.time ?? new Date().toISOString()),\n domain: payload.domain ?? null,\n referrer: payload.referrer ?? null,\n visitorName: parsed.visitorName,\n visitorEmail: parsed.visitorEmail,\n city: parsed.city,\n country: parsed.country,\n foundEmail,\n foundPhone,\n transcript: parsed.transcript,\n sfStatus: match.status,\n sfJson: JSON.stringify(match),\n });\n\n return Response.json({ received: true });\n}\n\ntype Parsed = {\n id: string;\n visitorName: string | null;\n visitorEmail: string | null;\n city: string | null;\n country: string | null;\n transcript: string;\n /** Visitor messages only — what we're allowed to scrape for contact details. */\n visitorText: string;\n};\n\nexport function parseEvent(event: string, p: Record): Parsed | null {\n const v = (o: any) => ({\n visitorName: o?.name ?? null,\n visitorEmail: o?.email ?? null,\n city: o?.city ?? null,\n country: o?.country ?? null,\n });\n\n if (event === \"chat:transcript_created\") {\n const chat = p.chat ?? {};\n const messages: any[] = Array.isArray(chat.messages) ? chat.messages : [];\n const label = (m: any) =>\n m?.sender?.t === \"v\" ? \"visitor\" : m?.sender?.t === \"a\" ? `agent ${m?.sender?.n ?? \"\"}`.trim() : \"system\";\n return {\n id: String(chat.id ?? p.chatId ?? crypto.randomUUID()),\n ...v(chat.visitor),\n transcript: messages.map((m) => `${label(m)}: ${m?.msg ?? \"\"}`).join(\"\\n\"),\n visitorText: messages.filter((m) => m?.sender?.t === \"v\").map((m) => m?.msg ?? \"\").join(\"\\n\"),\n };\n }\n\n if (event === \"chat:start\") {\n const text = p.message?.text ?? \"\";\n const fromVisitor = p.message?.sender?.type === \"visitor\";\n return {\n id: String(p.chatId ?? crypto.randomUUID()),\n ...v(p.visitor),\n transcript: `${fromVisitor ? \"visitor\" : \"agent\"}: ${text}`,\n visitorText: fromVisitor ? text : \"\",\n };\n }\n\n if (event === \"ticket:create\") {\n const t = p.ticket ?? {};\n const text = `${t.subject ?? \"\"}\\n${t.message ?? \"\"}`.trim();\n return {\n id: `ticket-${t.id ?? crypto.randomUUID()}`,\n visitorName: p.requester?.name ?? null,\n visitorEmail: p.requester?.email ?? null,\n city: null,\n country: null,\n transcript: text,\n visitorText: text,\n };\n }\n\n // chat:end carries no message body — the transcript event covers that chat.\n return null;\n}\n\n/** tawk signs with HMAC-SHA1 over the raw body, hex encoded. */\nasync function verify(body: string, signature: string, secret: string): Promise {\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(secret),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const sig = await crypto.subtle.sign(\"HMAC\", key, enc.encode(body));\n const hex = [...new Uint8Array(sig)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n return timingSafeEqual(hex, signature.trim().toLowerCase());\n}\n\nfunction timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n return diff === 0;\n}\n\n// ------------------------------------------------------------------- viewer\nasync function viewer(url: URL): Promise {\n const expected = Deno.env.get(\"VIEW_KEY\");\n if (!expected) {\n return new Response(\n \"Set a VIEW_KEY environment variable, then open /?key=YOUR_KEY.\\n\" +\n \"This page shows chat transcripts and customer contact details, so it stays closed until you do.\",\n { status: 503 },\n );\n }\n if (url.searchParams.get(\"key\") !== expected) return new Response(\"Not found\", { status: 404 });\n\n const id = url.searchParams.get(\"chat\");\n if (id) {\n const chat = await getChat(id);\n if (!chat) return new Response(\"Not found\", { status: 404 });\n return html(detailPage(chat, url.searchParams.get(\"key\")!));\n }\n return html(listPage(await listChats(), url.searchParams.get(\"key\")!));\n}\n\nconst esc = (s: unknown) =>\n String(s ?? \"\").replace(/[&<>\"]/g, (m) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\" }[m]!));\n\nconst STYLE =\n ``;\n\nconst html = (body: string) => new Response(`${STYLE}${body}`, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n});\n\nfunction listPage(chats: Record[], key: string) {\n if (!chats.length) {\n return `

tawk chats

Nothing received yet. Point a tawk webhook at this URL and start a chat.

tawk chats (${chats.length})

\n${rows}

Received	Name	City	Email	Phone	Salesforce

`;\n}\n\nfunction detailPage(c: Record, key: string) {\n let sf = \"\";\n try {\n const m = JSON.parse(String(c.sf_json ?? \"{}\"));\n sf = m.status === \"matched\"\n ? `

Matched on ${esc(m.matchedOn)}

${esc(JSON.stringify(m.records, null, 2))}

`\n : `

${esc(m.status)}${m.error ? `: ${esc(m.error)}` : \"\"}

`;\n } catch {\n sf = `

`;\n }\n return `

← all chats

${esc(c.visitor_name) || \"Visitor\"} ${esc(c.city)}

${esc(c.event)} · ${esc(c.time)} · ${esc(c.referrer)}

Transcript

${esc(c.transcript)}

Scraped from what the visitor typed

email: ${esc(c.found_email) || \"-\"} · phone: ${esc(c.found_phone) || \"-\"}

Salesforce

${sf}`;\n}\n","createdAt",["D",1787686625051],"branchVersion","branchId","ae272551-0b66-498e-893a-608c3c317b83","id","68d21ace-3c73-4585-929b-fc6f43782874","tribeca-tawk-transcripts",["D",1787686491713],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Receives tawk.to chat transcripts, matches to Salesforce","imageUrl","c5acd3b3-60a7-4deb-bc6d-528f83012ea9","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8fe2-cdfc-775d-a845-a69af13d39cb","tursoName","68d21ace3c734585929bfc6f43782874","tursoHostname","68d21ace3c734585929bfc6f43782874-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789438866375],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",31,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","Tribeca_Rep","handle","displayName","M A","avatar","https://lh3.googleusercontent.com/a/ACg8ocI9znhXn2hWp1wjjyWzeuOyoO_JrDgJo8aD0umFraR7bAG3UAmc=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":189,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":190,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":191,"_83":192,"_85":193,"_87":25},"tree",[172,173,174,175],"files",[172,173,174,175],"counts",{"_162":62,"_163":153,"_164":62,"_165":166,"_167":168},"contents",[130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":156,"_32":157,"_30":158,"_135":-5,"_41":42,"_40":153,"_136":25,"_38":159,"_13":62,"_33":20,"_35":160,"_24":25,"_139":-5,"_27":161},{"_43":149,"_32":150,"_30":151,"_135":-5,"_41":42,"_40":138,"_136":25,"_38":152,"_13":153,"_33":146,"_35":154,"_24":25,"_139":-5,"_27":155},{"_43":141,"_32":142,"_30":143,"_135":-5,"_41":42,"_40":144,"_136":58,"_38":145,"_13":62,"_33":146,"_35":147,"_24":25,"_139":-5,"_27":148},{"_43":134,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_136":25,"_38":137,"_13":138,"_33":34,"_35":37,"_24":25,"_139":45,"_27":140},"c9e6476d-6c1e-4a0c-9298-6f0b12f1ae3d","parentId","latest",["D",1787686625051],2,"label",[28],"6511678d-a93c-4496-b757-90e21c120849","lookup.ts","2d97073e-a0bc-11f1-80af-1607ee4eb77e",3,["D",1787686550422],"script","// Scrape contact details out of what the visitor typed, then ask Salesforce\n// whether we already know them.\n//\n// This runs server-side and the answer is only ever shown to your own team, so\n// matching here is safe in a way it would NOT be if a bot were reporting the\n// result back to the visitor. Never reuse this to tell a visitor whether an\n// account exists — that lets anyone probe your customer list.\n\nconst EMAIL_RE = /[\\w.+-]+@[\\w-]+\\.[\\w.-]+/;\n// US-ish: optional +1, then 3-3-4 with common separators.\nconst PHONE_RE = /(?:\\+?1[\\s.-]?)?\$?\\d{3}\$?[\\s.-]?\\d{3}[\\s.-]?\\d{4}/;\n\nexport function scrapeContact(text: string) {\n const email = text.match(EMAIL_RE)?.[0] ?? null;\n const rawPhone = text.match(PHONE_RE)?.[0] ?? null;\n return { email, phone: rawPhone ? normalizePhone(rawPhone) : null };\n}\n\n/** Digits only, dropping a leading US country code. */\nfunction normalizePhone(raw: string): string | null {\n const digits = raw.replace(/\\D/g, \"\");\n const ten = digits.length === 11 && digits.startsWith(\"1\") ? digits.slice(1) : digits;\n return ten.length === 10 ? ten : null;\n}\n\n/** SOQL has no bound parameters here, so escape what we interpolate. */\nfunction soqlEscape(v: string): string {\n return v.replace(/\\\\/g, \"\\\\\\\\\").replace(/'/g, \"\\\\'\").slice(0, 120);\n}\n\nasync function query(soql: string): Promise[]> {\n const base = Deno.env.get(\"SALESFORCE_AGENT_URL\");\n const key = Deno.env.get(\"SALESFORCE_AGENT_KEY\");\n if (!base || !key) throw new Error(\"SALESFORCE_AGENT_URL / SALESFORCE_AGENT_KEY not set\");\n const url = `${base}${base.includes(\"?\") ? \"&\" : \"?\"}q=${encodeURIComponent(soql)}`;\n const res = await fetch(url, { headers: { \"x-api-key\": key } });\n if (!res.ok) throw new Error(`Salesforce proxy ${res.status}: ${(await res.text()).slice(0, 200)}`);\n const json = await res.json();\n return json.records ?? [];\n}\n\nexport type Match = {\n status: \"matched\" | \"no_match\" | \"no_identifier\" | \"error\";\n matchedOn?: string;\n records?: Record[];\n error?: string;\n};\n\n/**\n * Look for an existing Contact, Lead, or Account.\n * Email and phone only — deliberately not name. Names aren't unique and a\n * confident wrong match is worse than no match.\n */\nexport async function findInSalesforce(email: string | null, phone: string | null): Promise {\n if (!email && !phone) return { status: \"no_identifier\" };\n try {\n if (email) {\n const e = soqlEscape(email);\n const contacts = await query(\n `SELECT Id, Name, Email, Phone, Account.Name FROM Contact WHERE Email = '${e}' LIMIT 3`,\n );\n if (contacts.length) return { status: \"matched\", matchedOn: \"contact email\", records: contacts };\n\n const leads = await query(\n `SELECT Id, Name, Company, Email, Phone, Status FROM Lead WHERE Email = '${e}' AND IsConverted = false LIMIT 3`,\n );\n if (leads.length) return { status: \"matched\", matchedOn: \"lead email\", records: leads };\n }\n\n if (phone) {\n // Salesforce stores phones inconsistently formatted, so compare on the\n // last 7 digits rather than the whole string.\n const tail = soqlEscape(phone.slice(-7));\n const contacts = await query(\n `SELECT Id, Name, Email, Phone, Account.Name FROM Contact WHERE Phone LIKE '%${tail}' LIMIT 3`,\n );\n if (contacts.length) return { status: \"matched\", matchedOn: \"contact phone\", records: contacts };\n\n const leads = await query(\n `SELECT Id, Name, Company, Email, Phone, Status FROM Lead WHERE Phone LIKE '%${tail}' AND IsConverted = false LIMIT 3`,\n );\n if (leads.length) return { status: \"matched\", matchedOn: \"lead phone\", records: leads };\n }\n\n return { status: \"no_match\" };\n } catch (err) {\n return { status: \"error\", error: String(err).slice(0, 300) };\n }\n}\n",[142],"68f47b0c-a563-4877-af4b-046657ddda07","db.ts","01a03a6b-1697-71fe-a680-fddd67ed3651",["D",1787686529329],1,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type ChatRow = {\n id: string;\n event: string;\n time: string;\n domain: string | null;\n referrer: string | null;\n visitorName: string | null;\n visitorEmail: string | null;\n city: string | null;\n country: string | null;\n /** Contact details scraped out of what the visitor actually typed. */\n foundEmail: string | null;\n foundPhone: string | null;\n transcript: string;\n sfStatus: string;\n sfJson: string | null;\n};\n\nlet ready: Promise | null = null;\n/** Runs once per isolate; CREATE TABLE IF NOT EXISTS makes it safe to repeat. */\nfunction init() {\n ready ??= sqlite.execute(`CREATE TABLE IF NOT EXISTS tawk_chats (\n id TEXT PRIMARY KEY,\n event TEXT NOT NULL,\n time TEXT NOT NULL,\n domain TEXT,\n referrer TEXT,\n visitor_name TEXT,\n visitor_email TEXT,\n city TEXT,\n country TEXT,\n found_email TEXT,\n found_phone TEXT,\n transcript TEXT NOT NULL,\n sf_status TEXT NOT NULL DEFAULT 'not_checked',\n sf_json TEXT,\n received_at TEXT NOT NULL\n )`);\n return ready;\n}\n\nexport async function saveChat(row: ChatRow) {\n await init();\n // REPLACE not IGNORE: chat:start arrives first with one message, then\n // chat:transcript_created arrives with the full thread for the same chatId.\n // The later, richer payload should win.\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO tawk_chats\n (id, event, time, domain, referrer, visitor_name, visitor_email, city, country,\n found_email, found_phone, transcript, sf_status, sf_json, received_at)\n VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args: [\n row.id,\n row.event,\n row.time,\n row.domain,\n row.referrer,\n row.visitorName,\n row.visitorEmail,\n row.city,\n row.country,\n row.foundEmail,\n row.foundPhone,\n row.transcript,\n row.sfStatus,\n row.sfJson,\n new Date().toISOString(),\n ],\n });\n}\n\nexport async function listChats(limit = 100) {\n await init();\n const res = await sqlite.execute({\n sql: `SELECT * FROM tawk_chats ORDER BY received_at DESC LIMIT ?`,\n args: [limit],\n });\n return rowsToObjects(res);\n}\n\nexport async function getChat(id: string) {\n await init();\n const res = await sqlite.execute({\n sql: `SELECT * FROM tawk_chats WHERE id = ?`,\n args: [id],\n });\n return rowsToObjects(res)[0] ?? null;\n}\n\n/** std/sqlite returns {columns, rows}; zip them into plain objects. */\nfunction rowsToObjects(res: { columns: string[]; rows: unknown[][] }) {\n return res.rows.map((r) => Object.fromEntries(res.columns.map((c, i) => [c, r[i]])));\n}\n",[150],"47d8b4df-3e1b-4bc0-84f0-08639fec36e6","README.md","01a03a6b-1697-71fe-a680-fa2e6414fd9f",["D",1787686491713],"# Where should I host a Stripe webhook receiver?\n\nHost it on Val Town — this val is a ready-made receiver. It verifies the `Stripe-Signature` header against your webhook signing secret, stores each event (id, type, created, full JSON) in this val's SQLite database in a `stripe_events` table, and returns 200 immediately. Duplicate deliveries of the same event id are ignored.\n\n## Setup\n\n1. Remix this val.\n2. In the Stripe dashboard, add a webhook endpoint pointing at this val's HTTP URL: https://dashboard.stripe.com/webhooks/create\n3. Copy that endpoint's signing secret (starts with `whsec_`) and set it as an env var:\n\n👉 Add STRIPE_WEBHOOK_SECRET here: https://www.val.town/x/templates/stripe-webhook-receiver/environment-variables?key=STRIPE_WEBHOOK_SECRET\n\n## Test it\n\nSend a correctly signed fake event with curl (uses the same HMAC-SHA256 scheme as Stripe):\n\n```sh\nURL=\"https://templates--019eb3e79454748cb661151a775d952d.web.val.run\"\nSECRET=\"whsec_...\" # your STRIPE_WEBHOOK_SECRET value\nTS=$(date +%s)\nBODY='{\"id\":\"evt_test_123\",\"object\":\"event\",\"type\":\"payment_intent.succeeded\",\"created\":'$TS',\"data\":{\"object\":{}}}'\nSIG=$(printf '%s' \"$TS.$BODY\" | openssl dgst -sha256 -hmac \"$SECRET\" | awk '{print $2}')\ncurl -i -X POST \"$URL\" \\\n -H \"Content-Type: application/json\" \\\n -H \"Stripe-Signature: t=$TS,v1=$SIG\" \\\n -d \"$BODY\"\n```\n\nExpect `{\"received\":true}` and a new row in `stripe_events`. A request with a missing or bad signature returns 400.\n\nYou can also send a real test event: with your endpoint configured in Stripe test mode, run `stripe trigger payment_intent.succeeded` with the Stripe CLI.\n\n## Files\n\n- `main.ts` — HTTP handler: verifies the signature, saves the event, returns 200\n- `db.ts` — SQLite table setup and insert\n",[157],"pulls","branches","forks","envVars",{"_169":138,"_171":153},"connections",{"_169":62,"_170":62},"count","unfilledCount","emptyCount",{"_43":156,"_32":157,"_30":158,"_135":-5,"_41":42,"_40":153,"_136":25,"_38":186,"_13":62,"_33":20,"_35":160,"_24":25,"_139":-5,"_177":187,"_27":188},{"_43":149,"_32":150,"_30":151,"_135":-5,"_41":42,"_40":138,"_136":25,"_38":183,"_13":153,"_33":146,"_35":154,"_24":25,"_139":-5,"_177":184,"_27":185},{"_43":141,"_32":142,"_30":143,"_135":-5,"_41":42,"_40":144,"_136":58,"_38":180,"_13":62,"_33":146,"_35":147,"_24":25,"_139":-5,"_177":181,"_27":182},{"_43":134,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_136":25,"_38":176,"_13":138,"_33":34,"_35":37,"_24":25,"_139":45,"_177":178,"_27":179},["D",1787686625051],"children",[],[28],["D",1787686550422],[],[142],["D",1787686529329],[],[150],["D",1787686491713],[],[157],["D",1787686491713],["D",1789438866375],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_127":227,"_228":229,"_230":231,"_232":25,"_233":25,"_234":25,"_235":58,"_236":-5,"_237":-7,"_238":-7,"_239":62,"_240":25,"_241":25,"_242":-5,"_243":25,"_244":25,"_245":25,"_246":-5},"ENV",{"_198":199,"_200":201,"_202":89,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v5