[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_159":160,"_161":162},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_107":88,"_27":53,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":25,"_121":122,"_123":124,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",12,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","41ace24c-7e21-11f1-8c9d-1607ee4eb77e","name","fileType","http","content","// THE DOGS SPOT — Square to GHL Revenue Bridge (M2) v2\n// One money source (payment.updated), idempotent per-contact ledger keyed by\n// Square payment/refund id, exactly ONE Won-Paid opp per contact (self-heals\n// duplicates). Refunds subtract via a payment_id to contact map. No double counting.\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst NOTIFICATION_URL = \"https://amir5--41ace24c7e2111f18c9d1607ee4eb77e.web.val.run\";\nconst SQUARE_SIGNATURE_KEY = Deno.env.get(\"SQUARE_SIGNATURE_KEY\") ?? \"\";\nconst GHL_TOKEN = Deno.env.get(\"GHL_TOKEN\") ?? \"\";\nconst GHL_LOCATION_ID = \"BQHJ19uohldYe3eqA0bl\";\nconst GHL_PIPELINE_ID = \"FXt1UpCVBufbF0v3pfyf\";\nconst GHL_WON_PAID_STAGE_ID = \"ae173310-f8b1-4399-acb7-ef1fc03d3697\";\nconst GHL_BASE = \"https://services.leadconnectorhq.com\";\nconst GHL_HEADERS = () => ({ Authorization: `Bearer ${GHL_TOKEN}`, Version: \"2021-07-28\", \"Content-Type\": \"application/json\" });\n\nconst JOURNAL_KEY = \"m2_bridge_journal\";\nconst DEDUP_EVENT = \"m2_dedup_event:\";\nconst LEDGER = \"m2_ledger:\";\nconst PAY_CONTACT = \"m2_pay_contact:\";\n\nasync function journal(row: Record) {\n const j = (await blob.getJSON(JOURNAL_KEY).catch(() => null)) ?? [];\n j.push({ ts: new Date().toISOString(), ...row });\n await blob.setJSON(JOURNAL_KEY, j);\n}\nasync function seen(key: string): Promise {\n const v = await blob.getJSON(key).catch(() => null);\n return v !== null && v !== undefined;\n}\nasync function getBlob(key: string): Promise {\n return (await blob.getJSON(key).catch(() => null)) as T | null;\n}\nasync function remember(key: string, val: unknown = true) { await blob.setJSON(key, val); }\n\nasync function squareSigOk(rawBody: string, headerSig: string): Promise {\n if (!headerSig) return false;\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(SQUARE_SIGNATURE_KEY), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const mac = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(NOTIFICATION_URL + rawBody));\n const computed = btoa(String.fromCharCode(...new Uint8Array(mac)));\n if (computed.length !== headerSig.length) return false;\n let diff = 0;\n for (let i = 0; i < computed.length; i++) diff |= computed.charCodeAt(i) ^ headerSig.charCodeAt(i);\n return diff === 0;\n}\n\nasync function ghlFindContact(email?: string, phone?: string): Promise {\n for (const [param, val] of [[\"email\", email], [\"number\", phone]] as const) {\n if (!val) continue;\n const r = await fetch(`${GHL_BASE}/contacts/search/duplicate?locationId=${GHL_LOCATION_ID}&${param}=${encodeURIComponent(val)}`, { headers: GHL_HEADERS() });\n if (r.ok) { const d = await r.json().catch(() => ({})); const id = d?.contact?.id ?? d?.id ?? null; if (id) return id; }\n }\n return null;\n}\nasync function ghlAllOpps(contactId: string): Promise<{ id: string; value: number }[]> {\n const r = await fetch(`${GHL_BASE}/opportunities/search?location_id=${GHL_LOCATION_ID}&contact_id=${contactId}&pipeline_id=${GHL_PIPELINE_ID}`, { headers: GHL_HEADERS() });\n if (!r.ok) return [];\n const d = await r.json().catch(() => ({}));\n return (d?.opportunities ?? []).map((o: any) => ({ id: o.id, value: Number(o.monetaryValue ?? 0) }));\n}\nasync function ghlCreateOpp(contactId: string, name: string, value: number): Promise {\n const r = await fetch(`${GHL_BASE}/opportunities/`, { method: \"POST\", headers: GHL_HEADERS(), body: JSON.stringify({ pipelineId: GHL_PIPELINE_ID, locationId: GHL_LOCATION_ID, name, pipelineStageId: GHL_WON_PAID_STAGE_ID, status: \"won\", contactId, monetaryValue: value }) });\n const d = await r.json().catch(() => ({}));\n return d?.opportunity?.id ?? d?.id ?? null;\n}\nasync function ghlSetOppValue(oppId: string, value: number) {\n await fetch(`${GHL_BASE}/opportunities/${oppId}`, { method: \"PUT\", headers: GHL_HEADERS(), body: JSON.stringify({ pipelineStageId: GHL_WON_PAID_STAGE_ID, status: \"won\", monetaryValue: value }) });\n}\nasync function ghlDeleteOpp(oppId: string) { await fetch(`${GHL_BASE}/opportunities/${oppId}`, { method: \"DELETE\", headers: GHL_HEADERS() }); }\nasync function ghlNote(contactId: string, body: string) { await fetch(`${GHL_BASE}/contacts/${contactId}/notes`, { method: \"POST\", headers: GHL_HEADERS(), body: JSON.stringify({ body }) }); }\n\ntype Ledger = { payments: Record; refunds: Record; oppId: string | null; name?: string };\nconst sum = (o: Record) => Object.values(o).reduce((a, b) => a + b, 0);\n\nasync function reconcile(contactId: string, name?: string): Promise<{ oppId: string | null; value: number }> {\n const ledger = (await getBlob(LEDGER + contactId)) ?? { payments: {}, refunds: {}, oppId: null, name };\n const value = Math.max(0, sum(ledger.payments) - sum(ledger.refunds));\n const opps = await ghlAllOpps(contactId);\n let keep = (ledger.oppId && opps.find(o => o.id === ledger.oppId)?.id) || opps[0]?.id || null;\n for (const o of opps) if (o.id !== keep) await ghlDeleteOpp(o.id);\n if (!keep) keep = await ghlCreateOpp(contactId, ledger.name || name || \"Square Paid\", value);\n else await ghlSetOppValue(keep, value);\n ledger.oppId = keep; if (name && !ledger.name) ledger.name = name;\n await remember(LEDGER + contactId, ledger);\n return { oppId: keep, value };\n}\nasync function addPayment(contactId: string, name: string, paymentId: string, amount: number) {\n const ledger = (await getBlob(LEDGER + contactId)) ?? { payments: {}, refunds: {}, oppId: null, name };\n if (paymentId in ledger.payments) { await journal({ kind: \"PAY-DUP\", contactId, id: paymentId }); await reconcile(contactId, name); return; }\n ledger.payments[paymentId] = amount; if (name && !ledger.name) ledger.name = name;\n await remember(LEDGER + contactId, ledger);\n await remember(PAY_CONTACT + paymentId, contactId);\n const { oppId, value } = await reconcile(contactId, name);\n await ghlNote(contactId, `[Square] +$${amount.toFixed(2)} payment ${paymentId} (balance $${value.toFixed(2)})`);\n await journal({ kind: \"PAYMENT\", contactId, oppId, amount, note: `payment ${paymentId}` });\n}\nasync function addRefund(contactId: string, refundId: string, amount: number) {\n const ledger = (await getBlob(LEDGER + contactId)) ?? { payments: {}, refunds: {}, oppId: null };\n if (refundId in ledger.refunds) { await journal({ kind: \"REFUND-DUP\", contactId, id: refundId }); return; }\n ledger.refunds[refundId] = amount;\n await remember(LEDGER + contactId, ledger);\n const { oppId, value } = await reconcile(contactId);\n await ghlNote(contactId, `[Square] Refund -$${amount.toFixed(2)} ${refundId} (balance $${value.toFixed(2)})`);\n await journal({ kind: \"REFUND\", contactId, oppId, amount, note: `refund ${refundId}` });\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.searchParams.get(\"dump\") === \"1\") return Response.json((await blob.getJSON(JOURNAL_KEY).catch(() => null)) ?? []);\n if (req.method === \"GET\" && url.searchParams.get(\"admin\") === GHL_TOKEN && url.searchParams.get(\"wipe\") === \"1\") {\n const keys = await blob.list(\"m2_\"); let n = 0;\n for (const k of keys) { await blob.delete((k as any).key); n++; }\n return new Response(\"wiped \" + n);\n }\n if (req.method !== \"POST\") return new Response(\"M2 Square to GHL bridge up. ?dump=1 for the journal.\");\n\n const raw = await req.text();\n const sig = req.headers.get(\"x-square-hmacsha256-signature\") ?? \"\";\n if (!(await squareSigOk(raw, sig))) { await journal({ kind: \"BAD-SIG\" }); return new Response(\"bad sig\", { status: 401 }); }\n\n let evt: any; try { evt = JSON.parse(raw); } catch { return new Response(\"bad json\", { status: 400 }); }\n const eventId = evt?.event_id;\n if (eventId) { if (await seen(DEDUP_EVENT + eventId)) { await journal({ kind: \"DUPLICATE-SKIP\" }); return new Response(\"dup\"); } await remember(DEDUP_EVENT + eventId); }\n\n const type = evt?.type as string;\n const obj = evt?.data?.object ?? {};\n try {\n if (type === \"payment.updated\" || type === \"payment.created\") {\n const p = obj.payment ?? {};\n if (p.status === \"COMPLETED\") {\n const amt = (p.amount_money?.amount ?? 0) / 100;\n const cid = await ghlFindContact(p.buyer_email_address, undefined);\n if (cid) await addPayment(cid, \"\", p.id, amt);\n else await journal({ kind: \"NO-MATCH\", note: `payment ${p.id}`, amount: amt, email: p.buyer_email_address });\n }\n } else if (type === \"invoice.payment_made\") {\n const inv = obj.invoice ?? {}; const r = inv.primary_recipient ?? {};\n const cid = await ghlFindContact(r.email_address, r.phone_number);\n if (cid) { if (obj?.payment?.id) await remember(PAY_CONTACT + obj.payment.id, cid); await reconcile(cid); }\n await journal({ kind: \"INVOICE-INFO\", note: `invoice ${inv.id}` });\n } else if (type === \"invoice.refunded\") {\n const inv = obj.invoice ?? {}; const r = inv.primary_recipient ?? {};\n const cid = await ghlFindContact(r.email_address, r.phone_number);\n const amt = (obj?.refund?.amount_money?.amount ?? 0) / 100;\n if (cid) await addRefund(cid, `inv-${inv.id}`, amt);\n else await journal({ kind: \"REFUND-NO-MATCH\", note: `invoice-refund ${inv.id}` });\n } else if (type === \"refund.updated\" || type === \"refund.created\") {\n const rf = obj.refund ?? {};\n if (rf.status === \"COMPLETED\") {\n const cid = rf.payment_id ? await getBlob(PAY_CONTACT + rf.payment_id) : null;\n const amt = (rf.amount_money?.amount ?? 0) / 100;\n if (cid) await addRefund(cid, rf.id, amt);\n else await journal({ kind: \"REFUND-NO-MATCH\", amount: amt, note: `refund ${rf.id}` });\n }\n } else {\n await journal({ kind: \"IGNORED\", type });\n }\n } catch (e) { await journal({ kind: \"ERROR\", type, error: String(e) }); }\n\n return new Response(\"EVENT_RECEIVED\");\n}","// THE DOGS SPOT — Square to GHL Revenue Bridge (M2) + Facebook CAPI (M3) v3.1\n// M2: one money source (payment.updated), idempotent per-contact ledger keyed by\n// Square payment/refund id, exactly ONE Won-Paid opp per contact (self-heals\n// duplicates). Refunds subtract via a payment_id to contact map. No double counting.\n// M3: on each matched payment, send a Facebook CAPI Purchase event (hashed email/\n// phone) to the dataset. Gated on FB_CAPI_TOKEN env var — no-op until it is set.\n// v3.1: adds an admin-guarded GET ?captest=&code= that\n// fires ONE test Purchase to the dataset (via test_event_code, so it lands in\n// Events Manager Test Events, never live) and returns Meta's response — no GHL write.\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst NOTIFICATION_URL =\n \"https://amir5--41ace24c7e2111f18c9d1607ee4eb77e.web.val.run\";\nconst SQUARE_SIGNATURE_KEY = Deno.env.get(\"SQUARE_SIGNATURE_KEY\") ?? \"\";\nconst GHL_TOKEN = Deno.env.get(\"GHL_TOKEN\") ?? \"\";\nconst GHL_LOCATION_ID = \"BQHJ19uohldYe3eqA0bl\";\nconst GHL_PIPELINE_ID = \"FXt1UpCVBufbF0v3pfyf\";\nconst GHL_WON_PAID_STAGE_ID = \"ae173310-f8b1-4399-acb7-ef1fc03d3697\";\nconst GHL_BASE = \"https://services.leadconnectorhq.com\";\nconst GHL_HEADERS = () => ({\n Authorization: `Bearer ${GHL_TOKEN}`,\n Version: \"2021-07-28\",\n \"Content-Type\": \"application/json\",\n});\n\n// M3 — Facebook Conversions API (dataset for The Dogs Spot)\nconst FB_CAPI_TOKEN = Deno.env.get(\"FB_CAPI_TOKEN\") ?? \"\";\nconst FB_DATASET_ID = \"3838731049764356\";\nconst FB_API_VERSION = \"v21.0\";\n\nconst JOURNAL_KEY = \"m2_bridge_journal\";\nconst DEDUP_EVENT = \"m2_dedup_event:\";\nconst LEDGER = \"m2_ledger:\";\nconst PAY_CONTACT = \"m2_pay_contact:\";\n\nasync function journal(row: Record) {\n const j = (await blob.getJSON(JOURNAL_KEY).catch(() => null)) ?? [];\n j.push({ ts: new Date().toISOString(), ...row });\n await blob.setJSON(JOURNAL_KEY, j);\n}\nasync function seen(key: string): Promise {\n const v = await blob.getJSON(key).catch(() => null);\n return v !== null && v !== undefined;\n}\nasync function getBlob(key: string): Promise {\n return (await blob.getJSON(key).catch(() => null)) as T | null;\n}\nasync function remember(key: string, val: unknown = true) {\n await blob.setJSON(key, val);\n}\n\nasync function sha256Hex(input: string): Promise {\n const data = new TextEncoder().encode(input.trim().toLowerCase());\n const buf = await crypto.subtle.digest(\"SHA-256\", data);\n return Array.from(new Uint8Array(buf)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n}\n\nasync function squareSigOk(\n rawBody: string,\n headerSig: string,\n): Promise {\n if (!headerSig) return false;\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(SQUARE_SIGNATURE_KEY),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(NOTIFICATION_URL + rawBody),\n );\n const computed = btoa(String.fromCharCode(...new Uint8Array(mac)));\n if (computed.length !== headerSig.length) return false;\n let diff = 0;\n for (let i = 0; i < computed.length; i++) {\n diff |= computed.charCodeAt(i) ^ headerSig.charCodeAt(i);\n }\n return diff === 0;\n}\n\n// M3 — send a Purchase event to the Facebook dataset. No-op if the token isn't set.\n// Returns Meta's parsed response (or null when skipped) so callers can verify.\nasync function sendCapiPurchase(\n email: string | undefined,\n phone: string | undefined,\n amount: number,\n eventId: string,\n testEventCode?: string,\n): Promise {\n if (!FB_CAPI_TOKEN) {\n await journal({ kind: \"CAPI-SKIP\", note: \"no FB_CAPI_TOKEN\", eventId });\n return null;\n }\n try {\n const user_data: Record = {};\n if (email) user_data.em = [await sha256Hex(email)];\n if (phone) user_data.ph = [await sha256Hex(phone.replace(/[^0-9]/g, \"\"))];\n if (!user_data.em && !user_data.ph) {\n await journal({ kind: \"CAPI-NO-PII\", eventId });\n return { error: \"no PII\" };\n }\n const payload: any = {\n data: [{\n event_name: \"Purchase\",\n event_time: Math.floor(Date.now() / 1000),\n action_source: \"system_generated\",\n event_id: `purchase_${eventId}`,\n user_data,\n custom_data: { currency: \"USD\", value: Number(amount.toFixed(2)) },\n }],\n };\n if (testEventCode) payload.test_event_code = testEventCode;\n const r = await fetch(\n `https://graph.facebook.com/${FB_API_VERSION}/${FB_DATASET_ID}/events?access_token=${\n encodeURIComponent(FB_CAPI_TOKEN)\n }`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(payload),\n },\n );\n const d = await r.json().catch(() => ({}));\n await journal({\n kind: r.ok ? \"CAPI-PURCHASE\" : \"CAPI-ERROR\",\n eventId,\n amount,\n test: !!testEventCode,\n resp: d?.events_received ?? d?.error?.message ??\n JSON.stringify(d).slice(0, 200),\n });\n return d;\n } catch (e) {\n await journal({ kind: \"CAPI-ERROR\", eventId, error: String(e) });\n return { error: String(e) };\n }\n}\n\nasync function ghlFindContact(\n email?: string,\n phone?: string,\n): Promise {\n for (const [param, val] of [[\"email\", email], [\"number\", phone]] as const) {\n if (!val) continue;\n const r = await fetch(\n `${GHL_BASE}/contacts/search/duplicate?locationId=${GHL_LOCATION_ID}&${param}=${\n encodeURIComponent(val)\n }`,\n { headers: GHL_HEADERS() },\n );\n if (r.ok) {\n const d = await r.json().catch(() => ({}));\n const id = d?.contact?.id ?? d?.id ?? null;\n if (id) return id;\n }\n }\n return null;\n}\nasync function ghlAllOpps(\n contactId: string,\n): Promise<{ id: string; value: number }[]> {\n const r = await fetch(\n `${GHL_BASE}/opportunities/search?location_id=${GHL_LOCATION_ID}&contact_id=${contactId}&pipeline_id=${GHL_PIPELINE_ID}`,\n { headers: GHL_HEADERS() },\n );\n if (!r.ok) return [];\n const d = await r.json().catch(() => ({}));\n return (d?.opportunities ?? []).map((o: any) => ({\n id: o.id,\n value: Number(o.monetaryValue ?? 0),\n }));\n}\nasync function ghlCreateOpp(\n contactId: string,\n name: string,\n value: number,\n): Promise {\n const r = await fetch(`${GHL_BASE}/opportunities/`, {\n method: \"POST\",\n headers: GHL_HEADERS(),\n body: JSON.stringify({\n pipelineId: GHL_PIPELINE_ID,\n locationId: GHL_LOCATION_ID,\n name,\n pipelineStageId: GHL_WON_PAID_STAGE_ID,\n status: \"won\",\n contactId,\n monetaryValue: value,\n }),\n });\n const d = await r.json().catch(() => ({}));\n return d?.opportunity?.id ?? d?.id ?? null;\n}\nasync function ghlSetOppValue(oppId: string, value: number) {\n await fetch(`${GHL_BASE}/opportunities/${oppId}`, {\n method: \"PUT\",\n headers: GHL_HEADERS(),\n body: JSON.stringify({\n pipelineStageId: GHL_WON_PAID_STAGE_ID,\n status: \"won\",\n monetaryValue: value,\n }),\n });\n}\nasync function ghlDeleteOpp(oppId: string) {\n await fetch(`${GHL_BASE}/opportunities/${oppId}`, {\n method: \"DELETE\",\n headers: GHL_HEADERS(),\n });\n}\nasync function ghlNote(contactId: string, body: string) {\n await fetch(`${GHL_BASE}/contacts/${contactId}/notes`, {\n method: \"POST\",\n headers: GHL_HEADERS(),\n body: JSON.stringify({ body }),\n });\n}\n\ntype Ledger = {\n payments: Record;\n refunds: Record;\n oppId: string | null;\n name?: string;\n};\nconst sum = (o: Record) =>\n Object.values(o).reduce((a, b) => a + b, 0);\n\nasync function reconcile(\n contactId: string,\n name?: string,\n): Promise<{ oppId: string | null; value: number }> {\n const ledger = (await getBlob(LEDGER + contactId)) ??\n { payments: {}, refunds: {}, oppId: null, name };\n const value = Math.max(0, sum(ledger.payments) - sum(ledger.refunds));\n const opps = await ghlAllOpps(contactId);\n let keep = (ledger.oppId && opps.find((o) => o.id === ledger.oppId)?.id) ||\n opps[0]?.id || null;\n for (const o of opps) if (o.id !== keep) await ghlDeleteOpp(o.id);\n if (!keep) {\n keep = await ghlCreateOpp(\n contactId,\n ledger.name || name || \"Square Paid\",\n value,\n );\n } else await ghlSetOppValue(keep, value);\n ledger.oppId = keep;\n if (name && !ledger.name) ledger.name = name;\n await remember(LEDGER + contactId, ledger);\n return { oppId: keep, value };\n}\nasync function addPayment(\n contactId: string,\n name: string,\n paymentId: string,\n amount: number,\n email?: string,\n phone?: string,\n) {\n const ledger = (await getBlob(LEDGER + contactId)) ??\n { payments: {}, refunds: {}, oppId: null, name };\n if (paymentId in ledger.payments) {\n await journal({ kind: \"PAY-DUP\", contactId, id: paymentId });\n await reconcile(contactId, name);\n return;\n }\n ledger.payments[paymentId] = amount;\n if (name && !ledger.name) ledger.name = name;\n await remember(LEDGER + contactId, ledger);\n await remember(PAY_CONTACT + paymentId, contactId);\n const { oppId, value } = await reconcile(contactId, name);\n await ghlNote(\n contactId,\n `[Square] +$${amount.toFixed(2)} payment ${paymentId} (balance $${\n value.toFixed(2)\n })`,\n );\n await journal({\n kind: \"PAYMENT\",\n contactId,\n oppId,\n amount,\n note: `payment ${paymentId}`,\n });\n await sendCapiPurchase(email, phone, amount, paymentId); // M3\n}\nasync function addRefund(contactId: string, refundId: string, amount: number) {\n const ledger = (await getBlob(LEDGER + contactId)) ??\n { payments: {}, refunds: {}, oppId: null };\n if (refundId in ledger.refunds) {\n await journal({ kind: \"REFUND-DUP\", contactId, id: refundId });\n return;\n }\n ledger.refunds[refundId] = amount;\n await remember(LEDGER + contactId, ledger);\n const { oppId, value } = await reconcile(contactId);\n await ghlNote(\n contactId,\n `[Square] Refund -$${amount.toFixed(2)} ${refundId} (balance $${\n value.toFixed(2)\n })`,\n );\n await journal({\n kind: \"REFUND\",\n contactId,\n oppId,\n amount,\n note: `refund ${refundId}`,\n });\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n // NOTE: public ?view dashboard REMOVED — val is public (free tier); serving customer PII on an open URL is a privacy risk.\n if (req.method === \"GET\" && url.searchParams.get(\"dump\") === \"1\") {\n return Response.json(\n (await blob.getJSON(JOURNAL_KEY).catch(() => null)) ?? [],\n );\n }\n // Admin-guarded CAPI self-test: fires one test Purchase (test_event_code -> Events Manager Test Events, never live). No GHL write.\n if (req.method === \"GET\" && url.searchParams.get(\"captest\") === GHL_TOKEN) {\n const code = url.searchParams.get(\"code\") || undefined;\n const resp = await sendCapiPurchase(\n \"captest@thedogsspotga.com\",\n \"+19125550123\",\n 1.00,\n \"captest_\" + Date.now(),\n code,\n );\n return Response.json({\n sent: true,\n hasToken: !!FB_CAPI_TOKEN,\n dataset: FB_DATASET_ID,\n testEventCode: code ?? null,\n meta: resp,\n });\n }\n if (\n req.method === \"GET\" && url.searchParams.get(\"admin\") === GHL_TOKEN &&\n url.searchParams.get(\"wipe\") === \"1\"\n ) {\n const keys = await blob.list(\"m2_\");\n let n = 0;\n for (const k of keys) {\n await blob.delete((k as any).key);\n n++;\n }\n return new Response(\"wiped \" + n);\n }\n if (req.method !== \"POST\") {\n return new Response(\n \"M2 Square to GHL bridge up (v3.1). ?dump=1 for the journal.\",\n );\n }\n\n const raw = await req.text();\n const sig = req.headers.get(\"x-square-hmacsha256-signature\") ?? \"\";\n if (!(await squareSigOk(raw, sig))) {\n await journal({ kind: \"BAD-SIG\" });\n return new Response(\"bad sig\", { status: 401 });\n }\n\n let evt: any;\n try {\n evt = JSON.parse(raw);\n } catch {\n return new Response(\"bad json\", { status: 400 });\n }\n const eventId = evt?.event_id;\n if (eventId) {\n if (await seen(DEDUP_EVENT + eventId)) {\n await journal({ kind: \"DUPLICATE-SKIP\" });\n return new Response(\"dup\");\n }\n await remember(DEDUP_EVENT + eventId);\n }\n\n const type = evt?.type as string;\n const obj = evt?.data?.object ?? {};\n try {\n if (type === \"payment.updated\" || type === \"payment.created\") {\n const p = obj.payment ?? {};\n if (p.status === \"COMPLETED\") {\n const amt = (p.amount_money?.amount ?? 0) / 100;\n const cid = await ghlFindContact(p.buyer_email_address, undefined);\n if (cid) {\n await addPayment(\n cid,\n \"\",\n p.id,\n amt,\n p.buyer_email_address,\n undefined,\n );\n } else {await journal({\n kind: \"NO-MATCH\",\n note: `payment ${p.id}`,\n amount: amt,\n email: p.buyer_email_address,\n });}\n }\n } else if (type === \"invoice.payment_made\") {\n const inv = obj.invoice ?? {};\n const r = inv.primary_recipient ?? {};\n const cid = await ghlFindContact(r.email_address, r.phone_number);\n if (cid) {\n if (obj?.payment?.id) await remember(PAY_CONTACT + obj.payment.id, cid);\n await reconcile(cid);\n }\n await journal({ kind: \"INVOICE-INFO\", note: `invoice ${inv.id}` });\n } else if (type === \"invoice.refunded\") {\n const inv = obj.invoice ?? {};\n const r = inv.primary_recipient ?? {};\n const cid = await ghlFindContact(r.email_address, r.phone_number);\n const amt = (obj?.refund?.amount_money?.amount ?? 0) / 100;\n if (cid) await addRefund(cid, `inv-${inv.id}`, amt);\n else {await journal({\n kind: \"REFUND-NO-MATCH\",\n note: `invoice-refund ${inv.id}`,\n });}\n } else if (type === \"refund.updated\" || type === \"refund.created\") {\n const rf = obj.refund ?? {};\n if (rf.status === \"COMPLETED\") {\n const cid = rf.payment_id\n ? await getBlob(PAY_CONTACT + rf.payment_id)\n : null;\n const amt = (rf.amount_money?.amount ?? 0) / 100;\n if (cid) await addRefund(cid, rf.id, amt);\n else {await journal({\n kind: \"REFUND-NO-MATCH\",\n amount: amt,\n note: `refund ${rf.id}`,\n });}\n }\n } else {\n await journal({ kind: \"IGNORED\", type });\n }\n } catch (e) {\n await journal({ kind: \"ERROR\", type, error: String(e) });\n }\n\n return new Response(\"EVENT_RECEIVED\");\n}","createdAt",["D",1784043073270],"branchVersion","branchId","519c4181-5961-4e23-998f-34eb9ca0fd9b","id","29b95261-feff-47f1-9a81-1efec1642b61","dogsspot_m2_bridge",["D",1783881672579],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","d26e64e6-cd39-4be1-b5b4-1de11cc555f8","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f56fd-bd59-724f-8163-80ffcf8235dd","tursoName","29b95261feff47f19a811efec1642b61","tursoHostname","29b95261feff47f19a811efec1642b61-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789516253896],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",24,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","amir5","handle","displayName","Amir","avatar","https://lh3.googleusercontent.com/a/ACg8ocILk3bwhcvrzozUWm7gxlKoBm7ZGtsgIkesW3ysOOsJ1rSQuA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":154,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":155,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":156,"_82":157,"_84":158,"_86":25},"tree",[149],"files",[149],"counts",{"_137":61,"_138":139,"_140":61,"_141":142,"_143":144},"contents",[129],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":133,"_13":134,"_33":34,"_35":37,"_24":25,"_135":-5,"_27":136},"302a03f9-5b57-4f4a-b5cd-fb1709dc51fb","parentId","latest",["D",1784043073270],11,"label",[28],"pulls","branches",1,"forks","envVars",{"_145":147,"_148":61},"connections",{"_145":61,"_146":61},"count","unfilledCount",5,"emptyCount",{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":150,"_13":134,"_33":34,"_35":37,"_24":25,"_135":-5,"_151":152,"_27":153},["D",1784043073270],"children",[],[28],["D",1783881672579],["D",1789516253896],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_126":192,"_193":194,"_195":196,"_197":25,"_198":25,"_199":25,"_200":124,"_201":-5,"_202":-7,"_203":-7,"_204":61,"_205":25,"_206":25,"_207":-5,"_208":25,"_209":25,"_210":25,"_211":-5},"ENV",{"_163":164,"_165":166,"_167":88,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v12