+ agreeArtistUpdates / agreeAnotherlandUpdates checkboxes\n // Shopify: + consent_ / consent_anotherland checkboxes\n var form = document.getElementById(\"hubspot-contact-form\") || document.getElementById(\"signup-form\");\n if (!form) { setTimeout(attachHandler, 100); return; }\n if (form.dataset.anotherlandWired === \"1\") return; // idempotent re-runs\n form.dataset.anotherlandWired = \"1\";\n\n form.addEventListener(\"submit\", function(e) {\n e.preventDefault();\n var btn = form.querySelector('button[type=\"submit\"]');\n var messageEl = document.getElementById(\"form-message\");\n\n // fullName splitter — Anna Golden (and similar sites) display a single\n // \"Name\" input but keep hidden firstName/lastName fields. Split before reading.\n if (form.fullName && form.firstName && form.lastName) {\n var nameParts = (form.fullName.value || \"\").trim().split(/\\\\s+/);\n form.firstName.value = nameParts[0] || \"\";\n form.lastName.value = nameParts.slice(1).join(\" \") || \"\";\n }\n\n var firstName = form.firstName ? form.firstName.value.trim() : \"\";\n var lastName = form.lastName ? form.lastName.value.trim() : \"\";\n var email = form.email.value.trim();\n var countryCode = form.countryCode ? form.countryCode.value : \"\";\n var phoneNumber = form.phoneNumber ? form.phoneNumber.value.trim() : \"\";\n var phone = phoneNumber ? countryCode + phoneNumber : \"\";\n var zipCode = form.zipCode ? form.zipCode.value.trim() : \"\";\n\n // Consent fields — try the Squarespace names first, then the Shopify (consent_) variants.\n var artistConsentEl = form.agreeArtistUpdates || form[\"consent_\" + SITE_CONFIG.artistSlug];\n var anotherlandConsentEl = form.agreeAnotherlandUpdates || form[\"consent_anotherland\"];\n var agreeArtist = artistConsentEl ? artistConsentEl.checked : true;\n var agreeAnotherland = anotherlandConsentEl ? anotherlandConsentEl.checked : false;\n\n if (!firstName || !lastName || !email) {\n messageEl.className = \"error\";\n messageEl.textContent = \"Please fill in all required fields.\";\n return;\n }\n if (!agreeArtist) {\n messageEl.className = \"error\";\n messageEl.textContent = \"Please agree to receive updates about \" + SITE_CONFIG.artistName + \".\";\n return;\n }\n\n btn.disabled = true;\n btn.textContent = \"Submitting...\";\n messageEl.className = \"\";\n messageEl.style.display = \"none\";\n\n // ── HubSpot Forms API payload ──\n var communications = [];\n if (agreeArtist && SITE_CONFIG.artistSubscriptionId) {\n communications.push({\n value: true,\n subscriptionTypeId: Number(SITE_CONFIG.artistSubscriptionId),\n text: \"I agree to receive updates about \" + SITE_CONFIG.artistName + \".\"\n });\n }\n // Always include Anotherland with the explicit checkbox state — sending\n // value: false records an explicit opt-out and stops HubSpot's portal\n // default from auto-subscribing when the user leaves the box unchecked.\n if (SITE_CONFIG.anotherlandSubscriptionId) {\n communications.push({\n value: agreeAnotherland,\n subscriptionTypeId: Number(SITE_CONFIG.anotherlandSubscriptionId),\n text: \"I agree to receive updates about Anotherland.\"\n });\n }\n\n var formsFields = [\n { name: \"firstname\", value: firstName },\n { name: \"lastname\", value: lastName },\n { name: \"email\", value: email },\n { name: \"phone\", value: phone }\n ];\n if (zipCode) formsFields.push({ name: \"zip\", value: zipCode });\n\n var formsPayload = {\n fields: formsFields,\n context: { hutk: getHutk() || undefined, pageUri: window.location.href, pageName: document.title },\n legalConsentOptions: {\n consent: {\n consentToProcess: true,\n text: \"By submitting, you consent to our Privacy Policy.\",\n communications: communications\n }\n }\n };\n\n // ── Val Town backend payload (includes anotherlandConsent — v17 fix) ──\n var valPayload = {\n firstName: firstName,\n lastName: lastName,\n email: email,\n phone: phone,\n zipCode: zipCode,\n countryCode: countryCode,\n artists: [SITE_CONFIG.artistSlug],\n anotherlandConsent: agreeAnotherland,\n hutk: getHutk() || undefined,\n pageUri: window.location.href,\n pageName: document.title\n };\n\n // Forms API only fires if the artist has a HubSpot form configured\n var formsPromise = SITE_CONFIG.formGuid\n ? fetch(\"https://api.hsforms.com/submissions/v3/integration/submit/\" + SITE_CONFIG.portalId + \"/\" + SITE_CONFIG.formGuid, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(formsPayload)\n }).then(function(res) { return { ok: res.ok, status: res.status, source: \"forms\" }; })\n .catch(function(err) { console.warn(\"[form] Forms API error:\", err); return { ok: false, status: 0, source: \"forms\", error: err }; })\n : Promise.resolve({ ok: false, status: 0, source: \"forms\", error: \"no formGuid configured\" });\n\n var valPromise = fetch(SITE_CONFIG.valTownEndpoint, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(valPayload)\n }).then(function(res) {\n return res.json().then(function(data) { return { ok: res.ok, status: res.status, source: \"val\", data: data }; });\n }).catch(function(err) {\n console.warn(\"[form] Val Town error:\", err);\n return { ok: false, status: 0, source: \"val\", error: err };\n });\n\n Promise.all([formsPromise, valPromise]).then(function(results) {\n var formsResult = results[0];\n var valResult = results[1];\n if (formsResult.ok || valResult.ok) {\n messageEl.className = \"success\";\n messageEl.textContent = \"Thank you! Your form has been submitted successfully.\";\n form.reset();\n } else {\n messageEl.className = \"error\";\n messageEl.textContent = \"There was an error submitting your form. Please try again.\";\n }\n btn.disabled = false;\n btn.textContent = \"Submit\";\n console.info(\"[form] Forms API:\", formsResult);\n console.info(\"[form] Val Town:\", valResult);\n });\n });\n }\n\n if (document.readyState === \"loading\") {\n document.addEventListener(\"DOMContentLoaded\", attachHandler);\n } else {\n attachHandler();\n }\n})();`;\n}\n// Reverse map for Referer-based artist resolution.\nconst HOSTNAME_TO_SLUG = (() => {\n const m = {};\n for (const [slug, cfg] of Object.entries(ARTISTS)) {\n for (const host of cfg.hostnames || []) {\n const norm = host.toLowerCase().replace(/^www\\./, \"\");\n m[norm] = slug;\n }\n }\n return m;\n})();\nfunction resolveSlug(req) {\n const url = new URL(req.url);\n const explicit = url.searchParams.get(\"artist\");\n if (explicit)\n return explicit;\n const ref = req.headers.get(\"referer\") || req.headers.get(\"Referer\");\n if (ref) {\n try {\n const host = new URL(ref).hostname.toLowerCase().replace(/^www\\./, \"\");\n if (HOSTNAME_TO_SLUG[host])\n return HOSTNAME_TO_SLUG[host];\n }\n catch { /* malformed referer */ }\n }\n return null;\n}\nexport default async function (req) {\n const slug = resolveSlug(req) || \"\";\n const script = buildScript(slug);\n const headers = {\n \"Content-Type\": \"application/javascript; charset=utf-8\",\n \"Cache-Control\": \"public, max-age=300, s-maxage=300\",\n \"Access-Control-Allow-Origin\": \"*\",\n };\n if (!script) {\n const known = Object.keys(ARTISTS).join(\", \");\n return new Response(`/* signup-modal: unknown or missing artist slug \"${slug}\". Pass ?artist=. Known: ${known} */`, { status: 404, headers });\n }\n return new Response(script, { status: 200, headers });\n}\n","deleted","label",[114],"e5b1a5bd-4f58-4ef4-85f0-c9a1c9c3224e","main.ts","9de56608-1c1d-11f1-86d4-42dde27851f2",69,["D",1783990105393],55,"// Val Town HTTP endpoint: HubSpot + Community.com artist signup handler\n// Single pipeline: Form submit → Contact lookup → AR → Associations → Note → Community\n// This replaces @greatnessinabox/hubspot-form — the site-side form just POSTs here.\n// --- Artist Configuration ---\n// formGuid: the HubSpot form ID for this artist's website form.\n// Artists without a Squarespace \"Developer Form\" have formGuid: \"\" —\n// they still get AR + Community processing but no Forms API submission.\nconst ARTISTS = {\n allisoneide: {\n name: \"Allison Eide\",\n hubspotRecordId: \"313169842935\",\n formGuid: \"b4e046e4-8871-41ca-ba82-b67921792cd9\",\n subscriptionTypeId: \"2795287586\",\n communityClientId: \"7f2460a6-eb1d-4b4d-a602-e48c9678b34e\",\n },\n aodhanking: {\n name: \"Aodhán King\",\n hubspotRecordId: \"124163010241\",\n formGuid: \"29a22a0c-b7de-414a-977f-666fa1d5da5e\",\n subscriptionTypeId: \"1339435176\",\n communityClientId: \"92c0beda-9c19-4cfc-806d-322484089eee\",\n sharedTeamId: \"364339650\",\n },\n annagolden: {\n name: \"Anna Golden\",\n hubspotRecordId: \"162379232966\",\n formGuid: \"ecc76a4e-e997-4cef-b458-45c887963eaa\",\n subscriptionTypeId: \"1339436562\",\n communityClientId: \"9d431d2c-a387-4ce1-b0a6-90e458b122e9\",\n },\n citizens: {\n name: \"Citizens\",\n hubspotRecordId: \"162296597181\",\n formGuid: \"\",\n subscriptionTypeId: \"1339435709\",\n communityClientId: \"51354939-4ca0-4a0d-b5e6-140c1cabf357\",\n },\n colonyhouse: {\n name: \"Colony House\",\n hubspotRecordId: \"153220976359\",\n formGuid: \"bcbcd5e2-c64a-4a85-8cb2-fe79106cfcd3\",\n subscriptionTypeId: \"1339434780\",\n communityClientId: \"bdebae85-644c-4789-b102-36ce5ba90809\",\n },\n jordancolle: {\n name: \"Jordan Colle\",\n hubspotRecordId: \"124163010240\",\n formGuid: \"\",\n subscriptionTypeId: \"1351262854\",\n // Community client_id nulled 2026-06-10: his site (jordancolle.com) is mid-migration\n // Squarespace→Cloudflare and NOT yet wired to this pipeline, and a token was never\n // generated — so the entry was configured-but-tokenless (silent-403 risk, 0 actual loss\n // verified across all 2,892 ARs). Re-add the client_id + generate/wire the token via the\n // onboarding checklist (anotherland-hubspot skill) when his Cloudflare site goes live.\n communityClientId: null, // was db5a4b2e-d792-4c63-aa94-e4f283d8f584\n },\n lanirose: {\n name: \"Lani Rose\",\n hubspotRecordId: \"312670433003\",\n formGuid: \"40b0dda7-4f74-4181-8c04-d1008905b0fb\",\n subscriptionTypeId: \"2792690768\",\n communityClientId: null,\n },\n mattcrocker: {\n name: \"Matt Crocker\",\n hubspotRecordId: \"124163010234\",\n formGuid: \"9ac168d7-1e16-4184-8192-39ca71b4e63d\",\n subscriptionTypeId: \"933574474\",\n communityClientId: \"a9032373-1daf-42cc-807a-a5607c4e66d2\",\n },\n taylorcharmayne: {\n name: \"taylor charmayne\",\n hubspotRecordId: \"162296597180\",\n formGuid: \"942bc0b2-a1e0-425a-bc30-6f351bb5caf0\",\n subscriptionTypeId: \"1339436165\",\n communityClientId: \"9593eb9e-d6cd-4f8b-b4ac-5d9c25e3b94f\",\n },\n twocargarage: {\n name: \"Two Car Garage\",\n hubspotRecordId: \"162380673738\",\n formGuid: \"50b441bb-6e0d-4fdf-9161-3891dcf197eb\",\n subscriptionTypeId: \"1339436031\",\n communityClientId: \"eb2ce70a-8659-4c7e-a98a-ed36c8a387a4\",\n },\n trustgodbro: {\n name: \"TrustGodbro\",\n hubspotRecordId: \"265047697107\",\n formGuid: \"855ad956-6364-4284-8454-81e82d82a3fb\",\n subscriptionTypeId: \"2032574322\",\n communityClientId: \"16ba82de-226c-4a90-86b7-5647de0d1ccb\",\n },\n united: {\n name: \"UNITED\",\n hubspotRecordId: \"209629726454\",\n formGuid: \"\",\n subscriptionTypeId: \"1578967228\",\n communityClientId: \"d37bf2b3-249c-4252-96f5-d50ff711a81f\",\n },\n johnmarkmcmillan: {\n name: \"John Mark McMillan\",\n hubspotRecordId: \"300777444082\",\n formGuid: \"\",\n subscriptionTypeId: null,\n // JMM self-manages his own Community account — Anotherland has no API access.\n // communityClientId nulled 2026-06-09 so the pipeline stops attempting a push\n // that always 403s. His self-run client_id is 8f49ea8c-a686-46e7-96ac-921f19003f41.\n communityClientId: null,\n },\n benjaminwilliamhastings: {\n name: \"Benjamin William Hastings\",\n hubspotRecordId: \"293211907778\",\n formGuid: \"\",\n subscriptionTypeId: \"2171144858\",\n communityClientId: null,\n sharedTeamId: \"364339650\",\n },\n claudiaisaki: {\n name: \"Claudia Isaki\",\n hubspotRecordId: \"162026096332\",\n formGuid: \"855c0bf6-976b-425a-a303-2e1f337202b6\",\n subscriptionTypeId: \"1347558063\",\n communityClientId: \"395e3c88-de3c-46e4-8f95-d884edfb4718\",\n },\n ethanbeer: {\n name: \"Ethan Beer\",\n hubspotRecordId: \"167680270045\",\n formGuid: \"44d9383a-1c0e-4c85-b5f1-d6041583b40a\",\n subscriptionTypeId: \"1420832410\",\n communityClientId: null,\n },\n abbiegamboa: {\n name: \"Abbie Gamboa\",\n hubspotRecordId: \"167680270047\",\n formGuid: \"\",\n subscriptionTypeId: \"1339436685\",\n communityClientId: null,\n },\n johnvandeusen: {\n name: \"John Van Deusen\",\n hubspotRecordId: \"167874834112\",\n formGuid: \"\",\n subscriptionTypeId: \"1339435533\",\n communityClientId: null,\n },\n amxnradio: {\n name: \"AMXNRADIO\",\n hubspotRecordId: \"124163010260\",\n formGuid: \"\",\n subscriptionTypeId: \"1339435404\",\n communityClientId: null,\n },\n mkgreen: {\n name: \"MK Green\",\n hubspotRecordId: \"243815552723\",\n formGuid: \"8c47260e-c67b-457e-9c93-1893a86eb87c\",\n subscriptionTypeId: \"1954923820\",\n communityClientId: \"525f35a8-b0a3-4789-b947-c61c7e6258a6\",\n },\n rooseveltstewart: {\n name: \"Roosevelt Stewart\",\n hubspotRecordId: \"249222317790\",\n formGuid: \"46d56463-1291-48b1-9f6d-f7461d760b25\",\n subscriptionTypeId: \"1957110577\",\n communityClientId: null,\n },\n htbh: {\n name: \"Aodhán King x Benjamin William Hastings\",\n hubspotRecordId: \"311465233082\",\n formGuid: \"d34be54e-b148-4047-bdba-ef0b955de9d2\",\n subscriptionTypeId: \"2721608050\",\n communityClientId: null,\n sharedTeamId: \"364339650\",\n },\n // Project-level entry — joint project of Abbie Gamboa + Aodhán King.\n // No HubSpot form (signups go via children's forms or future joint form);\n // no dedicated subscription type today (children's subs handle email opt-in);\n // no Community.com client (no joint SMS account).\n // Added 2026-06-03 alongside expandArtists guard.\n abbieandaodhan: {\n name: \"Abbie Gamboa & Aodhán King\",\n hubspotRecordId: \"314908787408\",\n formGuid: \"\",\n subscriptionTypeId: null,\n communityClientId: null,\n },\n // Brand-level entry (not an individual artist). Used by anotherland.com newsletter\n // signups via embed.anotherland.com/api/subscribe with artists: [\"anotherland\"].\n anotherland: {\n name: \"Anotherland\",\n hubspotRecordId: \"314105799401\",\n formGuid: \"\",\n subscriptionTypeId: \"933574493\", // Anotherland global subscription\n communityClientId: null, // No Community.com account for Anotherland brand\n },\n};\n// Per-artist Community.com API tokens — loaded from Val Town env vars (secrets), NEVER hardcoded here.\n// Map: communityClientId (UUID) → env var name (COMMUNITY_TOKEN_).\n// Migrated out of source 2026-07-08 (the tokens had been exposed in the public val source).\n// Backup of values: 1Password \"Community.com Per-Artist API Tokens\".\n// To rotate: regenerate at dashboard.community.com → Settings → API Tokens, then update the env var.\nconst COMMUNITY_TOKENS: Record = {};\nfor (const [cid, envKey] of [\n [\"92c0beda-9c19-4cfc-806d-322484089eee\", \"COMMUNITY_TOKEN_AODHANKING\"],\n [\"eb2ce70a-8659-4c7e-a98a-ed36c8a387a4\", \"COMMUNITY_TOKEN_TWOCARGARAGE\"],\n [\"9d431d2c-a387-4ce1-b0a6-90e458b122e9\", \"COMMUNITY_TOKEN_ANNAGOLDEN\"],\n [\"51354939-4ca0-4a0d-b5e6-140c1cabf357\", \"COMMUNITY_TOKEN_CITIZENS\"],\n [\"395e3c88-de3c-46e4-8f95-d884edfb4718\", \"COMMUNITY_TOKEN_CLAUDIAISAKI\"],\n [\"bdebae85-644c-4789-b102-36ce5ba90809\", \"COMMUNITY_TOKEN_COLONYHOUSE\"],\n [\"a9032373-1daf-42cc-807a-a5607c4e66d2\", \"COMMUNITY_TOKEN_MATTCROCKER\"],\n [\"16ba82de-226c-4a90-86b7-5647de0d1ccb\", \"COMMUNITY_TOKEN_TRUSTGODBRO\"],\n [\"d37bf2b3-249c-4252-96f5-d50ff711a81f\", \"COMMUNITY_TOKEN_UNITED\"],\n [\"9593eb9e-d6cd-4f8b-b4ac-5d9c25e3b94f\", \"COMMUNITY_TOKEN_TAYLORCHARMAYNE\"],\n [\"7f2460a6-eb1d-4b4d-a602-e48c9678b34e\", \"COMMUNITY_TOKEN_ALLISONEIDE\"],\n [\"525f35a8-b0a3-4789-b947-c61c7e6258a6\", \"COMMUNITY_TOKEN_MKGREEN\"],\n] as Array<[string, string]>) {\n const v = Deno.env.get(envKey);\n if (v) COMMUNITY_TOKENS[cid] = v;\n}\n// Config-consistency guard. Any artist with a communityClientId but no token in\n// COMMUNITY_TOKENS will silently 403 on every website signup (the class of failure that\n// hid for ~a month: Allison Eide, MK Green, Jordan Colle, JMM). The /health route below\n// enumerates these so the daily claude-audit can catch a misconfig the next morning\n// instead of weeks later. Returns [] when healthy.\nfunction communityTokenHealth() {\n const misconfigured = [];\n for (const [slug, cfg] of Object.entries(ARTISTS)) {\n const cid = cfg.communityClientId;\n if (cid && !COMMUNITY_TOKENS[cid]) {\n misconfigured.push({ slug, name: cfg.name, communityClientId: cid });\n }\n }\n return misconfigured;\n}\n// Reverse-sync (Community→HubSpot webhook) config guard: every Community-configured artist\n// should have a signing secret in COMMUNITY_WEBHOOK_SECRETS, else its webhook events fail\n// verification (or the webhook was never registered). Mirrors communityTokenHealth for the\n// reverse direction. (Cannot confirm the webhook still exists in Community from here — that\n// needs the dashboard client-scoped JWT; this catches the missing-secret class.)\nfunction communityWebhookHealth() {\n let secrets = {};\n try { secrets = JSON.parse(Deno.env.get(\"COMMUNITY_WEBHOOK_SECRETS\") || \"{}\"); } catch { /* malformed → none */ }\n const missing = [];\n for (const [slug, cfg] of Object.entries(ARTISTS)) {\n const cid = cfg.communityClientId;\n if (cid && !secrets[cid]) {\n missing.push({ slug, name: cfg.name, communityClientId: cid });\n }\n }\n return missing;\n}\n// Projects: time-bounded, multi-artist campaign sites. Signup pipelines fan out — a single\n// POST with artists=['htbh'] expands to artists=['aodhanking','benjaminwilliamhastings'] before\n// per-artist AR / association / Community processing runs.\n// Local registry mirror: ~/.claude/skills/squarespace/lib/allowlist.ts PROJECT_SITES.\n// NOTE: any project's child artist MUST exist in ARTISTS above for full fanout. Children\n// missing from ARTISTS will return per-artist \"Unknown artist slug\" in `results` but the\n// overall signup still creates the Contact and processes whatever children ARE configured.\nconst PROJECTS = {\n htbh: {\n display: \"Happy To Be Here (AK × BWH)\",\n // waitingtoseewhatgoddoes.com — Vercel\n artists: [\"aodhanking\", \"benjaminwilliamhastings\"],\n // Custom event fired on AR creation for this project signup.\n // Replaces the htbh-post-signup-nightly cron (2026-06-03) which previously\n // back-filled this data via HubSpot list 622. fireOnSlugs = slugs whose AR\n // should get the event; BWH excluded because BWH is not an Anotherland artist.\n customEvent: {\n eventName: \"pe242432623_artist_interaction\",\n fireOnSlugs: [\"htbh\", \"aodhanking\"],\n properties: {\n interaction_name: \"Happy To Be Here — Studio Sessions Signup\",\n interaction_type: \"data_capture\",\n interaction_source: \"project_site\",\n hs_page_url: \"https://www.waitingtoseewhatgoddoes.com/\",\n details: \"Joint album signup via waitingtoseewhatgoddoes.com — opted into Aodhán King, Benjamin William Hastings, and Happy To Be Here email subscriptions.\",\n },\n },\n },\n abbieandaodhan: {\n display: \"Abbie and Aodhan are making an Album\",\n // abbieandaodhanaremakinganalbum.com — Framer\n artists: [\"abbiegamboa\", \"aodhanking\"],\n },\n};\nfunction expandArtists(inputArtists) {\n // For each entry, include it in the output if it has an ARTISTS entry (so\n // project-level ARs get created too — e.g. an 'htbh' AR per signup, not just\n // the children). Project slugs without an ARTISTS entry are silently skipped\n // here — their children still fan out below. This prevents \"Unknown artist\n // slug\" results for projects that don't have a HubSpot Artist record yet.\n // Order preserved, dedupes.\n const seen = new Set();\n const out = [];\n for (const slug of inputArtists) {\n if (ARTISTS[slug] && !seen.has(slug)) {\n seen.add(slug);\n out.push(slug);\n }\n const project = PROJECTS[slug];\n if (project) {\n for (const child of project.artists) {\n if (!seen.has(child)) {\n seen.add(child);\n out.push(child);\n }\n }\n }\n }\n return out;\n}\n// HubSpot portal ID\nconst PORTAL_ID = \"242432623\";\n// Anotherland global subscription — every signup gets this\nconst ANOTHERLAND_SUBSCRIPTION_TYPE_ID = \"933574493\";\n// --- CORS Helpers ---\nconst CORS_HEADERS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\nfunction corsResponse(body, status = 200) {\n const jsonBody = typeof body === \"string\" ? body : JSON.stringify(body);\n return new Response(jsonBody, {\n status,\n headers: { ...CORS_HEADERS, \"Content-Type\": \"application/json\" },\n });\n}\n// --- Durable capture-first write (HubSpot-independent) ---\n// Records every signup in the signup-capture Worker (Cloudflare D1) BEFORE any HubSpot\n// call, so a HubSpot outage/lapse can never lose the fan. One row per artist. Never throws.\nasync function captureSignup(body, artists) {\n const url = Deno.env.get(\"CAPTURE_URL\") || \"https://signup-capture.anotherland.workers.dev/capture\";\n const token = Deno.env.get(\"CAPTURE_TOKEN\");\n if (!token) { console.error(\"captureSignup: no CAPTURE_TOKEN configured\"); return; }\n const slugs = (artists && artists.length ? artists : body.artists) || [\"unknown\"];\n await Promise.allSettled(slugs.map((slug) =>\n fetch(url, {\n method: \"POST\",\n headers: { \"Authorization\": `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n email: body.email,\n first_name: body.firstName || \"\",\n last_name: body.lastName || \"\",\n phone: body.phone || \"\",\n artist_slug: slug,\n source: body.pageUri || body.source || \"valtown\",\n raw: body,\n }),\n }).then((r) => (r.ok ? null : console.error(`capture ${slug} -> ${r.status}`)))\n .catch((e) => console.error(`capture ${slug} failed:`, e))\n ));\n}\n// Community member webhook → D1 capture worker (durable). Replaces the dead HubSpot reverse-sync\n// as the source of truth; never throws (best-effort like captureSignup).\nasync function captureCommunityMember(member, slug, eventType, clientId) {\n const base = (Deno.env.get(\"CAPTURE_URL\") || \"https://signup-capture.anotherland.workers.dev/capture\").replace(/\\/capture$/, \"\");\n const token = Deno.env.get(\"CAPTURE_TOKEN\");\n if (!token) { console.error(\"captureCommunityMember: no CAPTURE_TOKEN configured\"); return; }\n try {\n const r = await fetch(base + \"/community-member\", {\n method: \"POST\",\n headers: { \"Authorization\": `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ slug, eventType, clientId, member }),\n });\n if (!r.ok) console.error(`community-member capture ${slug} -> ${r.status}`);\n } catch (e) { console.error(`community-member capture ${slug} failed:`, e); }\n}\n\n// --- HubSpot CRM API Helper ---\nasync function hubspotFetch(path, method, body) {\n const token = Deno.env.get(\"HUBSPOT_TOKEN\");\n const res = await fetch(`https://api.hubapi.com${path}`, {\n method,\n headers: {\n \"Authorization\": `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: body ? JSON.stringify(body) : undefined,\n });\n const data = await res.json().catch(() => null);\n return { status: res.status, data };\n}\n// --- Step 1) Submit to HubSpot Forms API ---\n// Creates/updates the contact with record source \"Forms\" + form name as detail.\n// Handles email subscriptions via legalConsentOptions.\n// Passes hutk/pageUri for web analytics (page views, conversion rate).\nasync function submitToHubSpotForm(config, body) {\n if (!config.formGuid) {\n // No form configured — fall back to CRM API in step 2\n return false;\n }\n // Build subscription consent\n const communications = [];\n if (config.subscriptionTypeId) {\n communications.push({\n value: true,\n subscriptionTypeId: Number(config.subscriptionTypeId),\n text: `I agree to receive other communications from ${config.name}.`,\n });\n }\n // Only push Anotherland subscription consent if user explicitly checked the box.\n // Absence of this entry = \"no preference recorded\" (not explicit unsubscribe).\n if (body.anotherlandConsent === true) {\n communications.push({\n value: true,\n subscriptionTypeId: Number(ANOTHERLAND_SUBSCRIPTION_TYPE_ID),\n text: \"I agree to receive updates about Anotherland.\",\n });\n }\n const formFields = [\n { name: \"firstname\", value: body.firstName },\n { name: \"lastname\", value: body.lastName },\n { name: \"email\", value: body.email },\n { name: \"phone\", value: body.phone },\n ];\n if (body.zipCode) {\n formFields.push({ name: \"zip\", value: body.zipCode });\n }\n const formPayload = {\n fields: formFields,\n context: {\n ...(body.hutk ? { hutk: body.hutk } : {}),\n pageUri: body.pageUri || \"\",\n pageName: body.pageName || \"\",\n },\n legalConsentOptions: {\n consent: {\n consentToProcess: true,\n text: \"By submitting, you consent to our Privacy Policy.\",\n communications,\n },\n },\n };\n const res = await fetch(`https://api.hsforms.com/submissions/v3/integration/submit/${PORTAL_ID}/${config.formGuid}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(formPayload),\n });\n if (res.status >= 400) {\n const errData = await res.json().catch(() => null);\n console.error(`Forms API error for ${config.formGuid}:`, errData);\n return false;\n }\n return true;\n}\n// --- Step 2) Find or create contact via CRM API ---\n// The contact is created/updated here for immediate use in the AR pipeline.\n// The Forms API submission (step 1) runs beforehand for analytics + subscriptions,\n// but its contact creation is async and slow (~40s). If the contact already exists\n// (e.g. returning visitor), we just update it. If new, we create via CRM API.\n//\n// Note: For new contacts, the record source will be \"Integration\" since CRM API\n// creates it before the Forms API can. The site-side form handles this by submitting\n// to the Forms API directly from the browser (giving \"Forms\" source for new contacts)\n// while also sending data to this Val Town endpoint for AR/Community processing.\nasync function findOrCreateContact(email, firstName, lastName, phone, zipCode) {\n const searchRes = await hubspotFetch(\"/crm/v3/objects/contacts/search\", \"POST\", {\n filterGroups: [\n { filters: [{ propertyName: \"email\", operator: \"EQ\", value: email }] },\n ],\n });\n const contactProperties = {\n email,\n firstname: firstName,\n lastname: lastName,\n phone,\n zip: zipCode,\n };\n if (searchRes.data?.total > 0) {\n const contactId = searchRes.data.results[0].id;\n await hubspotFetch(`/crm/v3/objects/contacts/${contactId}`, \"PATCH\", {\n properties: contactProperties,\n });\n return contactId;\n }\n const createRes = await hubspotFetch(\"/crm/v3/objects/contacts\", \"POST\", {\n properties: contactProperties,\n });\n if (createRes.status >= 400) {\n // Race condition: another submission (Forms API or a parallel Val Town call) created\n // the contact between our search and our POST. HubSpot returns the existing contact\n // ID inline in the error body — parse it directly so we don't depend on the\n // contact-search index being consistent yet.\n //\n // Two known error shapes:\n // 409 OBJECT_ALREADY_EXISTS: \"Contact already exists. Existing ID: 478175054528\"\n // 400 VALIDATION_ERROR: \"Cannot set ... on 478195631806. 478195631804 already has that value.\"\n const errorBody = JSON.stringify(createRes.data ?? {});\n const existingIdMatch = errorBody.match(/Existing ID:\\s*(\\d+)/) ||\n errorBody.match(/(\\d+)\\s+already has that value/);\n if (existingIdMatch) {\n const contactId = existingIdMatch[1];\n await hubspotFetch(`/crm/v3/objects/contacts/${contactId}`, \"PATCH\", {\n properties: contactProperties,\n });\n return contactId;\n }\n // Fall back to re-search only if no ID was extractable from the error.\n if (createRes.status === 409) {\n const retrySearch = await hubspotFetch(\"/crm/v3/objects/contacts/search\", \"POST\", {\n filterGroups: [\n { filters: [{ propertyName: \"email\", operator: \"EQ\", value: email }] },\n ],\n });\n if (retrySearch.data?.total > 0) {\n const contactId = retrySearch.data.results[0].id;\n await hubspotFetch(`/crm/v3/objects/contacts/${contactId}`, \"PATCH\", {\n properties: contactProperties,\n });\n return contactId;\n }\n throw new Error(`Contact conflict but re-search found nothing: ${JSON.stringify(createRes.data)}`);\n }\n throw new Error(`Failed to create contact: ${JSON.stringify(createRes.data)}`);\n }\n return createRes.data.id;\n}\n// --- Step 3) Find or create Artist Relationship (AR) ---\n// Uses artist_relationship_id as the dedup key (artistslug-email).\n// If one already exists, returns its ID without creating a duplicate.\nasync function findOrCreateArtistRelationship(firstName, lastName, email, artistName, artistSlug, sharedTeamId) {\n // Fall back to email if no name was provided (e.g. newsletter signups).\n // Per AR naming convention: \"{First Last} ↔ {Artist}\" when name available, else \"{email} ↔ {Artist}\".\n const trimmedFirst = (firstName || \"\").trim();\n const trimmedLast = (lastName || \"\").trim();\n const fullName = [trimmedFirst, trimmedLast].filter(Boolean).join(\" \") || email;\n const arId = `${artistSlug}-${email.toLowerCase()}`;\n // Check if AR already exists\n const searchRes = await hubspotFetch(\"/crm/v3/objects/2-171708164/search\", \"POST\", {\n filterGroups: [\n { filters: [{ propertyName: \"artist_relationship_id\", operator: \"EQ\", value: arId }] },\n ],\n });\n if (searchRes.data?.total > 0) {\n return { arId: searchRes.data.results[0].id, alreadyExisted: true };\n }\n // Create new AR with all required properties.\n // Note: email is intentionally NOT set on the AR object — it lives on the\n // associated Contact (joined via association type 33). The AR is a join-row\n // between Contact ↔ Artist; carrying contact-level PII on it is redundant\n // and the property has been retired from the AR schema.\n const arProps = {\n artist_relationship_name: `${fullName} ↔ ${artistName}`,\n artist_relationship_id: arId,\n subscription_channel: \"Email\",\n };\n if (sharedTeamId)\n arProps.hs_shared_team_ids = sharedTeamId;\n const res = await hubspotFetch(\"/crm/v3/objects/2-171708164\", \"POST\", {\n properties: arProps,\n });\n if (res.status >= 400) {\n throw new Error(`Failed to create AR record: ${JSON.stringify(res.data)}`);\n }\n return { arId: res.data.id, alreadyExisted: false };\n}\n// --- Step 4½) Fire a custom HubSpot event on an AR ---\n// Used by project-level customEvent config (see PROJECTS above).\n// Idempotency is delegated to AR creation: only call this when the AR was newly\n// created in this signup (alreadyExisted === false) so a re-submission doesn't\n// double-fire. HubSpot's events API has no built-in dedup.\nasync function fireCustomEvent(arId, eventName, properties, occurredAt) {\n const payload = {\n eventName,\n objectId: Number(arId),\n occurredAt: occurredAt || new Date().toISOString(),\n properties: properties || {},\n };\n const res = await hubspotFetch(\"/events/v3/send\", \"POST\", payload);\n if (res.status >= 400) {\n throw new Error(`Failed to fire ${eventName} on AR ${arId}: ${JSON.stringify(res.data).slice(0, 300)}`);\n }\n return res.data;\n}\n// --- Step 4) Associate AR ↔ Contact and AR → Artist ---\nasync function createAssociations(arId, contactId, artistRecordId) {\n await hubspotFetch(`/crm/v4/objects/2-171708164/${arId}/associations/0-1/${contactId}`, \"PUT\", [{ associationCategory: \"USER_DEFINED\", associationTypeId: 33 }]);\n await hubspotFetch(`/crm/v4/objects/0-1/${contactId}/associations/2-171708164/${arId}`, \"PUT\", [{ associationCategory: \"USER_DEFINED\", associationTypeId: 34 }]);\n await hubspotFetch(`/crm/v4/objects/2-171708164/${arId}/associations/2-171708075/${artistRecordId}`, \"PUT\", [{ associationCategory: \"USER_DEFINED\", associationTypeId: 39 }]);\n}\n// --- Step 5) Log a note on the AR timeline ---\nasync function logSignupNote(arId, artistSlug) {\n const now = new Date().toISOString().split(\"T\")[0];\n const noteRes = await hubspotFetch(\"/crm/v3/objects/notes\", \"POST\", {\n properties: {\n hs_timestamp: new Date().toISOString(),\n hs_note_body: `Signed up via ${artistSlug} website form on ${now}`,\n },\n });\n if (noteRes.status >= 400) {\n throw new Error(`Failed to create note: ${JSON.stringify(noteRes.data)}`);\n }\n const noteId = noteRes.data.id;\n await hubspotFetch(`/crm/v4/objects/notes/${noteId}/associations/2-171708164/${arId}`, \"PUT\", [{ associationCategory: \"USER_DEFINED\", associationTypeId: 26 }]);\n}\n// --- Step 6) Subscribe contact to email lists ---\n// Safety net: The browser-side Forms API call handles subscriptions via legalConsentOptions,\n// but if that fails (ad blocker, network, etc.), we subscribe via the CRM API here.\nasync function subscribeContact(email, config, anotherlandConsent) {\n const subscriptionIds = [];\n // Artist-specific subscription — they consented by submitting the artist's form\n if (config.subscriptionTypeId) {\n subscriptionIds.push(config.subscriptionTypeId);\n }\n // Anotherland global subscription — only if the user explicitly checked the box\n if (anotherlandConsent === true) {\n subscriptionIds.push(ANOTHERLAND_SUBSCRIPTION_TYPE_ID);\n }\n for (const subId of subscriptionIds) {\n const isAnotherlandLabel = subId === ANOTHERLAND_SUBSCRIPTION_TYPE_ID;\n const explanation = isAnotherlandLabel\n ? \"I agree to receive updates about Anotherland.\"\n : `Opted in via ${config.name} website form`;\n try {\n await hubspotFetch(\"/communication-preferences/v3/subscribe\", \"POST\", {\n emailAddress: email,\n subscriptionId: subId,\n legalBasis: \"CONSENT_WITH_NOTICE\",\n legalBasisExplanation: explanation,\n });\n }\n catch (err) {\n console.error(`Subscription ${subId} failed for ${email}:`, err);\n }\n }\n // HubSpot's Forms API silently ignores legalConsentOptions value:false and\n // still subscribes contacts to every subscription listed on the form. To\n // honor an unchecked Anotherland checkbox we have to fire an explicit\n // unsubscribe AFTER the Forms API call has run.\n if (anotherlandConsent === false) {\n try {\n await hubspotFetch(\"/communication-preferences/v3/unsubscribe\", \"POST\", {\n emailAddress: email,\n subscriptionId: ANOTHERLAND_SUBSCRIPTION_TYPE_ID,\n legalBasis: \"CONSENT_WITH_NOTICE\",\n legalBasisExplanation: \"User did not check Anotherland consent on form.\",\n });\n }\n catch (err) {\n console.error(`Anotherland unsubscribe failed for ${email}:`, err);\n }\n }\n}\n// --- Step 7) Push subscriber to Community.com ---\nasync function pushToCommunity(communityClientId, firstName, lastName, email, phone, zipCode) {\n // Per-artist token, REQUIRED. No fallback to a default token: pushing with the wrong\n // token 403s (\"client ID doesn't match in path and JWT\") AND would leak one artist's\n // token onto another artist's webhook. A configured-but-tokenless artist must fail\n // CLEAN here so the error is explicit and greppable, not a silent cross-artist 403\n // (the failure that hid for ~a month until 2026-06-09). The /health route surfaces\n // any such artist before it can hide again.\n const token = COMMUNITY_TOKENS[communityClientId];\n if (!token) {\n throw new Error(`No Community token configured for client ${communityClientId} \\u2014 push skipped`);\n }\n const r = await fetch(`https://api.community.com/webhooks/v1/community/${communityClientId}/subscription_create`, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n phone_number: phone,\n given_name: firstName,\n surname: lastName,\n email,\n postal_code: zipCode,\n }),\n });\n if (!r.ok) {\n let body = \"\";\n try {\n body = await r.text();\n }\n catch { /* swallow */ }\n // 403 with \"client ID doesn't match\" → token is for a different artist (per-artist JWT scope).\n // 401 → bad/expired token. 404 → wrong client_id.\n throw new Error(`Community webhook HTTP ${r.status}: ${body.slice(0, 200)}`);\n }\n}\n// --- Main HTTP Handler ---\n// ============================================================\n// Community.com webhook handler — receives member.created / .updated / .deleted\n// events with UNMASKED phone numbers in `communication_channel_id` field.\n// Routes to existing helper functions; writes community_* fields to AR + fires events.\n// ============================================================\n\n// Reverse lookup: client_id → artist slug. Built once from ARTISTS at module load.\nconst CLIENT_ID_TO_SLUG = Object.fromEntries(\n Object.entries(ARTISTS)\n .filter(([_, cfg]) => cfg.communityClientId)\n .map(([slug, cfg]) => [cfg.communityClientId, slug])\n);\n\n// Normalize phone to E.164 if not already. Community.com sends raw digits like \"12126885505\".\nfunction normalizePhone(raw) {\n if (!raw) return \"\";\n const digits = String(raw).replace(/\\D/g, \"\");\n if (!digits) return \"\";\n return digits.startsWith(\"+\") ? digits : `+${digits}`;\n}\n\n// Extract YYYY-MM-DD from ISO timestamp for HubSpot date fields\nfunction extractDate(iso) {\n if (!iso) return null;\n return String(iso).slice(0, 10);\n}\n\n// Search Contact by phone — used when Community member has no email.\nasync function findContactByPhone(phone) {\n if (!phone) return null;\n const res = await hubspotFetch(\"/crm/v3/objects/contacts/search\", \"POST\", {\n filterGroups: [{ filters: [{ propertyName: \"phone\", operator: \"EQ\", value: phone }] }],\n });\n return res.data?.total > 0 ? res.data.results[0].id : null;\n}\n\n// Search AR by community_member_id (Community fan_id UUID)\nasync function findArByCommunityMemberId(fanId) {\n if (!fanId) return null;\n const res = await hubspotFetch(\"/crm/v3/objects/2-171708164/search\", \"POST\", {\n filterGroups: [{ filters: [{ propertyName: \"community_member_id\", operator: \"EQ\", value: fanId }] }],\n });\n return res.data?.total > 0 ? res.data.results[0].id : null;\n}\n\n// Write community_* fields onto an AR from a Community member payload\n// Valid options for the community_subscription_state enum (HubSpot AR property).\nconst VALID_SUBSCRIPTION_STATES = [\"live\", \"live_whatsapp\", \"opted_out\", \"blocked\", \"deleted\"];\n\nasync function updateArCommunityFields(arId, member, slug, clientId) {\n const fanId = member.fan_id || member.id;\n // Clamp to the enum — an unexpected state value would 400 the PATCH and 500 the event.\n const rawState = member.state || member.subscription_state || \"live\";\n const state = VALID_SUBSCRIPTION_STATES.includes(rawState) ? rawState : \"live\";\n const activatedAt = member.first_activated_at || member.activated_on || member.joined_at;\n const phone = normalizePhone(member.communication_channel_id || member.phone_number);\n\n // CORE fields — all guaranteed-valid (string / phone / date / clamped enum). This PATCH\n // must succeed or the event truly failed.\n const core = {\n community_member_id: fanId,\n community_leader_id: clientId,\n community_subscription_state: state,\n };\n if (phone) core.community_phone_number = phone;\n if (activatedAt) {\n core.community_first_activated_at = activatedAt;\n core.community_join_date = extractDate(activatedAt);\n }\n const res = await hubspotFetch(`/crm/v3/objects/2-171708164/${arId}`, \"PATCH\", { properties: core });\n if (res.status >= 400) {\n throw new Error(`Failed to update AR ${arId} (core): ${JSON.stringify(res.data)}`);\n }\n // community_subcommunities is a RESTRICTED enum (fixed per-artist tag list). A member with a\n // tag not yet in HubSpot's option list would 400 — so write it SEPARATELY and best-effort, so\n // one unknown tag can never lose the core community sync (cf. the subscription_channel \"Text\"\n // 500-everything bug, 2026-06-13). HubSpot checkbox multi-value uses \";\".\n if (Array.isArray(member.subscription_tags) && member.subscription_tags.length) {\n const r2 = await hubspotFetch(`/crm/v3/objects/2-171708164/${arId}`, \"PATCH\", {\n properties: { community_subcommunities: member.subscription_tags.join(\";\") },\n });\n if (r2.status >= 400) {\n console.warn(`Subcommunities write skipped for AR ${arId} (unknown tag?): ${JSON.stringify(r2.data).slice(0, 150)}`);\n }\n }\n return res.data;\n}\n\n// Fire a custom event on the pe242432623_community definition\nasync function fireCommunityEvent(arId, eventType, member, slug, clientId) {\n const occurredAt = (eventType === \"community_joined\")\n ? (member.first_activated_at || member.activated_on || member.joined_at || new Date().toISOString())\n : new Date().toISOString();\n\n const props = {\n event_type: eventType,\n artist_name: ARTISTS[slug]?.name || slug,\n };\n if (member.state || member.subscription_state) {\n props.subscription_status = member.state || member.subscription_state;\n }\n if (member.state_or_province) props.state = member.state_or_province;\n if (member.subscription_tag) props.community_tag = member.subscription_tag;\n\n const res = await hubspotFetch(\"/events/v3/send\", \"POST\", {\n eventName: \"pe242432623_community\",\n objectId: arId,\n properties: props,\n occurredAt,\n });\n if (res.status >= 400) {\n console.error(`Event fire failed (${eventType}): ${JSON.stringify(res.data)}`);\n }\n return res.data;\n}\n\n// member.created — full upsert: Contact + AR + community fields + community_joined event\nasync function handleMemberCreated(member, slug, config, clientId) {\n const fanId = member.fan_id || member.id;\n const phone = normalizePhone(member.communication_channel_id || member.phone_number);\n const email = member.email || \"\";\n const firstName = member.first_name || \"\";\n const lastName = member.last_name || \"\";\n\n // Idempotency: if we already have this fan_id on an AR, skip create path\n const existingArId = await findArByCommunityMemberId(fanId);\n if (existingArId) {\n // Already known — just refresh fields + skip event (avoid duplicate community_joined)\n await updateArCommunityFields(existingArId, member, slug, clientId);\n return { ok: true, dedup: \"existing_fan_id\", arId: existingArId };\n }\n\n // Find or create Contact — try email first (HubSpot primary key), fall back to phone\n let contactId;\n if (email) {\n contactId = await findOrCreateContact(email, firstName, lastName, phone, \"\");\n } else if (phone) {\n contactId = await findContactByPhone(phone);\n if (!contactId) {\n const cRes = await hubspotFetch(\"/crm/v3/objects/contacts\", \"POST\", {\n properties: { phone, firstname: firstName, lastname: lastName },\n });\n if (cRes.status >= 400) {\n throw new Error(`Phone-only contact create failed: ${JSON.stringify(cRes.data)}`);\n }\n contactId = cRes.data.id;\n }\n } else {\n return corsResponse({ error: \"Member missing both email and phone\" }, 400);\n }\n\n // Optional: set Contact.gender if Community provided it\n if (member.gender) {\n try {\n await hubspotFetch(`/crm/v3/objects/contacts/${contactId}`, \"PATCH\", {\n properties: { gender: member.gender },\n });\n } catch (err) { console.error(`Gender set failed: ${err}`); }\n }\n\n // Find or create AR — uses email-based ID convention if email exists, else phone\n let arId;\n if (email) {\n const ar = await findOrCreateArtistRelationship(firstName, lastName, email, config.name, slug, config.sharedTeamId);\n arId = ar.arId;\n } else {\n // Phone-only — custom AR creation (findOrCreateArtistRelationship assumes email)\n const dedupId = `${slug}-${phone}`;\n const search = await hubspotFetch(\"/crm/v3/objects/2-171708164/search\", \"POST\", {\n filterGroups: [{ filters: [{ propertyName: \"artist_relationship_id\", operator: \"EQ\", value: dedupId }] }],\n });\n if (search.data?.total > 0) {\n arId = search.data.results[0].id;\n } else {\n const fullName = lastName ? `${firstName} ${lastName}` : (firstName || phone);\n const arRes = await hubspotFetch(\"/crm/v3/objects/2-171708164\", \"POST\", {\n properties: {\n artist_relationship_name: `${fullName} ↔ ${config.name}`,\n artist_relationship_id: dedupId,\n // subscription_channel enum allows [Email, Community, feature.fm, Tunespeak].\n // \"Text\" is INVALID and 400'd → 500'd the webhook for every phone-only\n // (text-in, no-email) Community member — the 76% Colony House error rate\n // 2026-06-13. These ARs originate from Community webhook events → \"Community\".\n subscription_channel: \"Community\",\n },\n });\n if (arRes.status >= 400) {\n throw new Error(`Phone-only AR create failed: ${JSON.stringify(arRes.data)}`);\n }\n arId = arRes.data.id;\n }\n }\n\n // Associate AR ↔ Contact ↔ Artist\n await createAssociations(arId, contactId, config.hubspotRecordId);\n\n // Populate community_* fields on AR\n await updateArCommunityFields(arId, member, slug, clientId);\n\n // Fire community_joined event\n await fireCommunityEvent(arId, \"community_joined\", member, slug, clientId);\n\n return { ok: true, action: \"created\", contactId, arId };\n}\n\n// member.updated — refresh subscription_state, subcommunities. Fire transition events.\nasync function handleMemberUpdated(member, slug, config, clientId) {\n const fanId = member.fan_id || member.id;\n let arId = await findArByCommunityMemberId(fanId);\n\n if (!arId) {\n // We don't have this member yet — treat as a created event (idempotent path)\n return await handleMemberCreated(member, slug, config, clientId);\n }\n\n // Read current state for transition detection\n const cur = await hubspotFetch(`/crm/v3/objects/2-171708164/${arId}?properties=community_subscription_state,community_subcommunities`, \"GET\", null);\n const prevState = cur.data?.properties?.community_subscription_state || \"\";\n const prevTags = (cur.data?.properties?.community_subcommunities || \"\").split(\";\").filter(Boolean);\n const newState = member.state || member.subscription_state || \"live\";\n const newTags = Array.isArray(member.subscription_tags) ? member.subscription_tags : [];\n\n // Update the AR fields\n await updateArCommunityFields(arId, member, slug, clientId);\n\n // Detect transitions + fire events\n if (prevState !== newState) {\n if (newState === \"opted_out\") {\n await fireCommunityEvent(arId, \"opt_out\", member, slug, clientId);\n } else if (prevState === \"opted_out\" && (newState === \"live\" || newState === \"live_whatsapp\")) {\n await fireCommunityEvent(arId, \"opt_back_in\", member, slug, clientId);\n }\n }\n // Subcommunity transitions\n const prevSet = new Set(prevTags);\n const newSet = new Set(newTags);\n for (const tag of newTags) {\n if (!prevSet.has(tag)) {\n await fireCommunityEvent(arId, \"subcommunity_joined\", { ...member, subscription_tag: tag }, slug, clientId);\n }\n }\n for (const tag of prevTags) {\n if (!newSet.has(tag)) {\n await fireCommunityEvent(arId, \"subcommunity_left\", { ...member, subscription_tag: tag }, slug, clientId);\n }\n }\n\n return { ok: true, action: \"updated\", arId, transitions: { state: prevState !== newState, tags_added: [...newSet].filter(t => !prevSet.has(t)), tags_removed: [...prevSet].filter(t => !newSet.has(t)) } };\n}\n\n// member.deleted — mark AR.community_subscription_state = \"deleted\", fire opt_out\nasync function handleMemberDeleted(member, slug, config, clientId) {\n const fanId = member.fan_id || member.id;\n const arId = await findArByCommunityMemberId(fanId);\n if (!arId) {\n return { ok: true, action: \"noop_unknown_member\", fanId };\n }\n await hubspotFetch(`/crm/v3/objects/2-171708164/${arId}`, \"PATCH\", {\n properties: { community_subscription_state: \"deleted\" },\n });\n await fireCommunityEvent(arId, \"opt_out\", { ...member, state: \"deleted\" }, slug, clientId);\n return { ok: true, action: \"deleted\", arId };\n}\n\n// Verify Community's Stripe-style webhook signature.\n// Header: `community-signature: t=,v1=.\">`.\nfunction timingSafeEqual(a, b) {\n if (a.length !== b.length) return false;\n let out = 0;\n for (let i = 0; i < a.length; i++) out |= a.charCodeAt(i) ^ b.charCodeAt(i);\n return out === 0;\n}\nasync function verifyCommunitySignature(rawBody, header, secret) {\n if (!header || !secret) return false;\n const parts = Object.fromEntries(header.split(\",\").map((kv) => kv.split(\"=\").map((s) => s.trim())));\n const t = parts.t, v1 = parts.v1;\n if (!t || !v1) return false;\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const mac = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(`${t}.${rawBody}`));\n const hex = [...new Uint8Array(mac)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n return timingSafeEqual(hex, v1);\n}\n\n// Main webhook dispatcher — routed via embed.anotherland.com/community/webhook → here.\nasync function handleCommunityWebhook(req) {\n const rawBody = await req.text();\n let body;\n try {\n body = JSON.parse(rawBody);\n } catch {\n return corsResponse({ error: \"Invalid JSON body\" }, 400);\n }\n\n // Community webhook envelope (verified from a LIVE capture 2026-06-12):\n // { type: \"member.created|member.updated|member.deleted\", object: \"member\", created, api_version,\n // data: { object: { id, client_id, communication_channel_id (digits, no +), email,\n // given_name, surname, active (bool), state_or_province, ... } } }\n const eventType = body.type || body.event_type;\n const raw = body.data?.object || body.member || body;\n const clientId = raw.client_id || body.client_id || body.leader_id;\n\n if (!eventType || !clientId) {\n return corsResponse({ error: \"Missing event_type or client_id\", got: { eventType, clientId } }, 400);\n }\n const slug = CLIENT_ID_TO_SLUG[clientId];\n if (!slug) {\n return corsResponse({ error: `Unknown client_id: ${clientId} (not in ARTISTS config)` }, 400);\n }\n\n // Signature verification — ENFORCED per-artist once its secret is wired into the\n // COMMUNITY_WEBHOOK_SECRETS env map ({client_id: signing_secret}). Artists not yet\n // migrated are accept-but-log (graceful rollout). Bad signature for a configured\n // artist → 401 reject.\n let secrets = {};\n try { secrets = JSON.parse(Deno.env.get(\"COMMUNITY_WEBHOOK_SECRETS\") || \"{}\"); } catch { /* malformed → treat as none */ }\n const secret = secrets[clientId];\n const sigHeader = req.headers.get(\"community-signature\") || req.headers.get(\"x-community-signature\") || null;\n if (secret) {\n const ok = await verifyCommunitySignature(rawBody, sigHeader, secret);\n if (!ok) {\n console.warn(`Community webhook signature FAILED for ${slug} (${clientId})`);\n return corsResponse({ error: \"Invalid signature\" }, 401);\n }\n } else {\n console.warn(`No webhook secret configured for ${slug} (${clientId}) — accepting unverified`);\n }\n\n const config = ARTISTS[slug];\n\n // Normalize Community's field names → the shape the member handlers expect.\n const member = {\n ...raw,\n fan_id: raw.fan_id || raw.id,\n first_name: raw.first_name || raw.given_name || \"\",\n last_name: raw.last_name || raw.surname || \"\",\n phone_number: raw.communication_channel_id || raw.phone_number,\n state: raw.state || raw.subscription_state || (raw.active === false ? \"opted_out\" : \"live\"),\n first_activated_at: raw.first_activated_at || raw.activated_on || raw.joined_at || raw.timestamp || body.created,\n gender: raw.gender || raw.gender_identity || \"\",\n };\n\n console.log(`Community webhook: ${eventType} for ${slug} member_id=${member.fan_id}`);\n\n // ★ Durable capture to D1 FIRST — the source of truth now that HubSpot has lapsed. Never throws.\n await captureCommunityMember(member, slug, eventType, clientId).catch(() => {});\n\n // HubSpot reverse-sync RETIRED 2026-07-14 (HubSpot lapsed 2026-07-09). D1 is the source of truth;\n // captureCommunityMember above already persisted this event. No HubSpot write.\n return corsResponse({ success: true, d1_captured: true, hubspot: \"retired\" });\n}\n\nexport default async function (req) {\n const url = new URL(req.url);\n\n // Community.com webhook endpoint (member.created/.updated/.deleted)\n // Routed here via embed.anotherland.com/community/webhook\n if (url.pathname === \"/community-webhook\") {\n if (req.method !== \"POST\") {\n return corsResponse({ success: false, error: \"Method not allowed\" }, 405);\n }\n return await handleCommunityWebhook(req);\n }\n\n // Health check. GET /health -> { ok, misconfigured:[...], reverseSyncMisconfigured:[...] }.\n // misconfigured = forward push: Community-configured artist missing an API token (silent-403 guard)\n // reverseSyncMisconfigured = reverse webhook: Community-configured artist missing a COMMUNITY_WEBHOOK_SECRETS secret\n // 503 when either list is non-empty, so `curl -f` flags it. Polled by the daily claude-audit.\n if (url.pathname === \"/health\") {\n const misconfigured = communityTokenHealth();\n const reverseSyncMisconfigured = communityWebhookHealth();\n const ok = misconfigured.length === 0 && reverseSyncMisconfigured.length === 0;\n return corsResponse({ ok, misconfigured, reverseSyncMisconfigured }, ok ? 200 : 503);\n }\n\n // === Existing signup pipeline (POST / from artist sites + modal) ===\n // Handle CORS preflight\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n if (req.method !== \"POST\") {\n return corsResponse({ success: false, error: \"Method not allowed\" }, 405);\n }\n let body;\n try {\n body = await req.json();\n }\n catch {\n return corsResponse({ success: false, error: \"Invalid JSON body\" }, 400);\n }\n const { email } = body;\n const firstName = body.firstName || \"\";\n const lastName = body.lastName || \"\";\n // Allow email-only signups (e.g. newsletter forms on anotherland.com).\n // firstName remains optional; AR creation falls back to email-as-name.\n if (!email || !body.artists?.length) {\n return corsResponse({ success: false, error: \"Missing required fields: email, artists\" }, 400);\n }\n // Project fanout: expand any project slugs in the input to their child artist slugs.\n // Existing artist slugs pass through unchanged. Order preserved, duplicates removed.\n const artists = expandArtists(body.artists);\n // ★ Capture-first: durably record this signup in Cloudflare D1 BEFORE any HubSpot\n // call, so a HubSpot outage/lapse can never lose the fan. Non-fatal; never blocks.\n // Attach the FAN's device/geo from this inbound request so the capture worker\n // records the fan's data (not the worker's or the val's). UA is reliable;\n // geo headers are best-effort (present when the request transits Cloudflare).\n try {\n body.fan_ua = req.headers.get(\"user-agent\") || null;\n body.fan_country = req.headers.get(\"cf-ipcountry\") || req.headers.get(\"x-vercel-ip-country\") || null;\n body.fan_region = req.headers.get(\"cf-region-code\") || req.headers.get(\"x-vercel-ip-country-region\") || null;\n body.fan_city = req.headers.get(\"cf-ipcity\") || req.headers.get(\"x-vercel-ip-city\") || null;\n } catch (_e) { /* non-fatal */ }\n try { await captureSignup(body, artists); } catch (err) { console.error(\"captureSignup wrapper:\", err); }\n try {\n // HubSpot RETIRED 2026-07-14 (lapsed 2026-07-09). Signups persist to D1 (captureSignup above)\n // + Community below. No HubSpot contact/AR/note/subscribe write.\n let contactId = null;\n // Process each artist: AR creation, associations, notes, Community push\n const results = [];\n const teamSharesNeeded = new Set();\n // Map: artistSlug → { arId, alreadyExisted } — used for project-level events\n const arIdsBySlug = {};\n for (const artistSlug of artists) {\n const config = ARTISTS[artistSlug];\n if (config?.sharedTeamId)\n teamSharesNeeded.add(config.sharedTeamId);\n if (!config) {\n results.push({\n artist: artistSlug,\n formSubmitted: false,\n arCreated: false,\n communityPushed: false,\n error: `Unknown artist slug: ${artistSlug}`,\n });\n continue;\n }\n let arCreated = false;\n let communityPushed = false;\n let subscribed = false;\n let communityError = null;\n let hubspotError = null; // HubSpot leg RETIRED 2026-07-14 (lapsed) — no HubSpot contact/AR/note/subscribe write.\n // Community leg — ALWAYS runs, independent of the HubSpot leg, so the signup's\n // number reaches the Community text flow immediately even if HubSpot is down.\n if (config.communityClientId) {\n try {\n await pushToCommunity(config.communityClientId, body.firstName, body.lastName, body.email, body.phone, body.zipCode);\n communityPushed = true;\n }\n catch (err) {\n communityError = err?.message?.slice(0, 200) ?? String(err);\n console.error(`Community push failed for ${artistSlug}:`, err);\n }\n }\n results.push({\n artist: artistSlug,\n formSubmitted: false, // Form submission is handled client-side\n arCreated,\n communityPushed,\n subscribed,\n ...(hubspotError ? { hubspotError } : {}),\n ...(communityError ? { communityError } : {}),\n });\n }\n // Project-level custom events: for each input slug that is a project with a\n // customEvent config, fire the event on each fireOnSlug's AR — but only if\n // the AR was newly created this signup (no double-fire on re-submission).\n const inputProjectSlugs = (body.artists || []).filter((s) => PROJECTS[s]);\n for (const projectSlug of inputProjectSlugs) {\n const project = PROJECTS[projectSlug];\n if (!project?.customEvent) continue;\n const { eventName, fireOnSlugs, properties } = project.customEvent;\n for (const targetSlug of fireOnSlugs || []) {\n const target = arIdsBySlug[targetSlug];\n if (!target) {\n console.warn(`customEvent: no AR found for target slug \"${targetSlug}\" — skipping`);\n continue;\n }\n if (target.alreadyExisted) {\n // AR already existed before this signup, so event has already been\n // fired (on the original signup). Skip to avoid duplicates.\n continue;\n }\n try {\n await fireCustomEvent(target.arId, eventName, properties);\n }\n catch (err) {\n console.error(`customEvent fire failed for project=\"${projectSlug}\" slug=\"${targetSlug}\":`, err);\n }\n }\n }\n // (HubSpot team-share PATCH retired 2026-07-14.)\n return corsResponse({ success: true, contactId, results });\n }\n catch (err) {\n console.error(\"Top-level error:\", err);\n return corsResponse({ success: false, error: err instanceof Error ? err.message : String(err) }, 500);\n }\n}\n",[132],"pulls",1,"forks","envVars",{"_146":148,"_149":51},"connections",{"_146":51,"_147":51},"count","unfilledCount",18,"emptyCount",{"_20":131,"_13":132,"_115":133,"_117":-5,"_118":21,"_119":134,"_121":106,"_22":156,"_29":136,"_124":125,"_126":137,"_128":38,"_129":-5,"_153":157,"_87":158},{"_20":113,"_13":114,"_115":116,"_117":-5,"_118":21,"_119":120,"_121":106,"_22":152,"_29":123,"_124":125,"_126":127,"_128":38,"_129":-5,"_153":154,"_87":155},["D",1779601348315],"children",[],[114],["D",1783990105393],[],[132],["D",1773104895365],{"_11":12,"_85":81},{"_11":12,"_79":-5,"_80":81,"_44":45,"_82":83,"_84":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_74":-5,"_75":-5,"_76":-5,"_77":14,"_78":12},"ctx",{"_67":-5,"_108":196,"_197":198,"_199":200,"_201":38,"_202":38,"_203":38,"_204":106,"_205":-5,"_206":-7,"_207":-7,"_208":51,"_209":38,"_210":38,"_211":-5,"_212":38,"_213":38,"_214":38,"_215":-5},"ENV",{"_167":168,"_169":170,"_171":26,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1