[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_156":157,"_158":159},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_118":-5,"_20":119,"_22":120,"_121":122,"_123":124,"_25":125,"_24":-5,"_126":-5,"_127":-5,"_128":53,"_129":130,"_131":44,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","amarnadh27","name","test-project","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":19,"_69":-5,"_70":71,"_72":37,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":85,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":97,"_98":99,"_100":101,"_102":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","144cc8b8-7122-4b07-815a-f441a6bbce02","main.ts","fileId","43ec17e8-85de-11f1-8f38-1607ee4eb77e","parentId","branchId","4b037f43-0411-40e8-af2f-04314f85ef48","branchVersion",10,"latest",true,"createdAt",["D",1784732587176],3,"fileType","http","content","/**\n * DealHub webhook capture sink (Val Town HTTP val).\n *\n * Purpose: accept ANY incoming request from DealHub (or anything else),\n * record the full request — method, path, query, headers (incl. the\n * `Authorization: Bearer ...` header), and body (raw + parsed JSON) — into\n * the Val Town blob store, then always return 200. A browser GET on the\n * viewer paths lets you inspect what actually arrived so you can design the\n * real service.\n *\n * Docs this supports: https://developers.dealhub.io/docs/webhooks-overview\n *\n * Viewer routes (open in a browser):\n * GET / -> HTML list of captured requests (newest first)\n * GET /json -> same list as raw JSON\n * GET /latest -> the single most recent capture as JSON\n * GET /clear -> delete all captures (confirmation page)\n * GET /clear?yes=1 -> actually delete all captures\n *\n * Everything else (POST/PUT/PATCH/DELETE on any path) is treated as a\n * webhook delivery and captured.\n */\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst PREFIX = \"dealhub_capture_\";\nconst MAX_KEEP = 500; // ring-buffer cap so the blob store doesn't grow forever\n\n// These paths are the inspection UI, not webhook deliveries.\nconst VIEWER_PATHS = new Set([\"/\", \"/json\", \"/latest\", \"/clear\", \"/favicon.ico\"]);\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // --- Viewer / management routes (GET only) ---\n if (req.method === \"GET\" && VIEWER_PATHS.has(path)) {\n if (path === \"/favicon.ico\") return new Response(null, { status: 204 });\n if (path === \"/json\") return json(await loadAll());\n if (path === \"/latest\") {\n const all = await loadAll();\n return json(all[0] ?? { message: \"no captures yet\" });\n }\n if (path === \"/clear\") return clearHandler(url);\n return html(renderList(await loadAll()));\n }\n\n // --- Everything else = a webhook delivery. Capture it. ---\n const capture = await buildCapture(req, url);\n\n const key = `${PREFIX}${capture.receivedAt}_${capture.id}`;\n await blob.setJSON(key, capture);\n await pruneOld();\n\n // Always 200 so DealHub considers the delivery successful during discovery.\n return json({ status: \"captured\", id: capture.id, receivedAt: capture.receivedAt });\n}\n\nasync function buildCapture(req: Request, url: URL) {\n const headers: Record = {};\n for (const [k, v] of req.headers.entries()) headers[k] = v;\n\n const authHeader = req.headers.get(\"authorization\") ?? null;\n const bearer =\n authHeader && /^bearer\\s+/i.test(authHeader)\n ? authHeader.replace(/^bearer\\s+/i, \"\")\n : null;\n\n const rawBody = await req.text(); // read once as text; safe for any content-type\n let jsonBody: unknown = null;\n let jsonParseError: string | null = null;\n if (rawBody) {\n try {\n jsonBody = JSON.parse(rawBody);\n } catch (e) {\n jsonParseError = (e as Error).message;\n }\n }\n\n return {\n id: crypto.randomUUID().slice(0, 8),\n receivedAt: new Date().toISOString(),\n method: req.method,\n path: url.pathname,\n query: Object.fromEntries(url.searchParams.entries()),\n contentType: req.headers.get(\"content-type\") ?? null,\n authorizationHeader: authHeader, // full header, e.g. \"Bearer eyJ...\"\n bearerToken: bearer, // token only, or null if not a Bearer scheme\n headers,\n rawBody,\n jsonBody,\n jsonParseError,\n };\n}\n\nasync function loadAll() {\n const items = await blob.list(PREFIX);\n const captures = await Promise.all(\n items.map((i) => blob.getJSON(i.key).catch(() => null)),\n );\n return captures\n .filter(Boolean)\n .sort((a: any, b: any) => (a.receivedAt < b.receivedAt ? 1 : -1)); // newest first\n}\n\nasync function pruneOld() {\n const items = await blob.list(PREFIX);\n if (items.length <= MAX_KEEP) return;\n const sorted = items.sort((a, b) => (a.key < b.key ? -1 : 1)); // oldest first by ts-prefixed key\n const toDelete = sorted.slice(0, items.length - MAX_KEEP);\n await Promise.all(toDelete.map((i) => blob.delete(i.key)));\n}\n\nasync function clearHandler(url: URL): Promise {\n if (url.searchParams.get(\"yes\") !== \"1\") {\n return html(\n `

Clear all captures?

This deletes every stored webhook capture.

Yes, delete everything | Cancel

`,\n );\n }\n const items = await blob.list(PREFIX);\n await Promise.all(items.map((i) => blob.delete(i.key)));\n return html(`

Deleted ${items.length} capture(s).

Back

`);\n}\n\nfunction json(data: unknown): Response {\n return new Response(JSON.stringify(data, null, 2), {\n status: 200,\n headers: { \"content-type\": \"application/json\" },\n });\n}\n\nfunction html(body: string): Response {\n return new Response(\n `\n DealHub webhook sink\n ${body}`,\n { status: 200, headers: { \"content-type\": \"text/html; charset=utf-8\" } },\n );\n}\n\nfunction renderList(captures: any[]): string {\n const header = `

DealHub webhook sink

\n POST anything to this URL and it gets captured here.\n | raw JSON\n | latest\n | clear all\n

${captures.length} capture(s) stored (newest first).

`;\n\n if (captures.length === 0) {\n return header + `

No captures yet. Send a test POST to this URL.

`;\n }\n\n const cards = captures\n .map((c) => {\n const bearer = c.bearerToken\n ? `Bearer ${escapeHtml(c.bearerToken)}`\n : c.authorizationHeader\n ? `${escapeHtml(c.authorizationHeader)}`\n : `(no Authorization header)`;\n const bodyPreview = c.jsonBody\n ? JSON.stringify(c.jsonBody, null, 2)\n : c.rawBody || \"(empty body)\";\n return `

${escapeHtml(c.method)}\n ${escapeHtml(c.path)}\n ${escapeHtml(c.receivedAt)} · id ${escapeHtml(c.id)}

Content-Type: ${escapeHtml(c.contentType ?? \"—\")}

Auth: ${bearer}

Headers (${Object.keys(c.headers).length})

${escapeHtml(JSON.stringify(c.headers, null, 2))}

Body

${escapeHtml(bodyPreview)}

`;\n })\n .join(\"\");\n\n return header + cards;\n}\n\nfunction escapeHtml(s: string): string {\n return String(s)\n .replace(/&/g, \"&\")\n .replace(//g, \">\");\n}","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1784732587176],"children",[],[35],"b88a387c-378c-4d65-830f-021169cb79c7",["D",1783448236020],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","4aae3864-01bd-426d-9479-b02064e02099","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f3dcb-a34a-7723-aff5-e82df97ddd88","tursoName","b88a387c378c4d65830f021169cb79c7","tursoHostname","b88a387c378c4d65830f021169cb79c7-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789473745358],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_117":19},"org",{"_11":12,"_111":112,"_113":19,"_70":71,"_114":115,"_116":53},"branch",{"_17":42,"_13":16,"_33":40,"_103":61,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":-5,"_109":14,"_110":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Amarnadh Gadde","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":151,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":19,"_69":-5,"_70":71,"_72":37,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":152,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":153,"_98":154,"_100":155,"_102":53},[148],"files",[148],"counts",{"_138":77,"_139":140,"_141":77,"_31":142,"_143":144},[136],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":137},[35],"pulls","branches",1,"forks",{"_145":77,"_147":77},"connections",{"_145":77,"_146":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":149,"_18":150},[],[35],["D",1783448236020],["D",1789473745358],{"_11":12,"_117":19},{"_11":12,"_111":112,"_113":19,"_70":71,"_114":115,"_116":53},{"_17":42,"_13":16,"_33":40,"_103":61,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":-5,"_109":14,"_110":12},"ctx",{"_96":-5,"_133":189,"_190":191,"_192":193,"_194":53,"_195":53,"_196":53,"_197":44,"_198":-5,"_199":-7,"_200":-7,"_201":77,"_202":53,"_203":53,"_204":-5,"_205":53,"_206":53,"_207":53,"_208":-5},"ENV",{"_160":161,"_162":163,"_164":16,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code