[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_103":85,"_27":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":121,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",4,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","08765710-755c-11f1-afed-1607ee4eb77e","name","fileType","http","content","import { importPKCS8, SignJWT } from \"npm:jose@5.9.6\";\n\n// ---------------------------------------------------------------------------\n// Shared proxy for Dust -> Google Maps Platform.\n// Two routes are exposed from this single Val:\n// POST / (alias: POST /optimize-tours) -> Google Route Optimization\n// POST /geocode -> Google Geocoding API\n// No secret value lives in this file. Runtime secrets are Val Town\n// environment variables (see ENV_DOC below).\n// ---------------------------------------------------------------------------\n\nconst ENV_DOC = {\n DUST_PROXY_SECRET: \"Shared secret required on every POST call (x-proxy-secret header or Authorization: Bearer ).\",\n GOOGLE_PROJECT_ID: \"Google Cloud project id. Required for /optimize-tours.\",\n GOOGLE_SA_EMAIL: \"Service account email. Required for /optimize-tours.\",\n GOOGLE_SA_PRIVATE_KEY: \"Service account private key (PEM, PKCS8). Required for /optimize-tours.\",\n GOOGLE_MAPS_API_KEY: \"Google Maps Platform API key. Required for /geocode.\",\n} as const;\n\ntype EnvName = keyof typeof ENV_DOC;\n\ntype TokenCache = {\n accessToken: string;\n expiresAtMs: number;\n};\n\nlet tokenCache: TokenCache | null = null;\n\nfunction env(name: EnvName): string | undefined {\n const value = Deno.env.get(name);\n return value && value.trim().length > 0 ? value : undefined;\n}\n\nfunction missingEnv(names: EnvName[]): EnvName[] {\n return names.filter((name) => !env(name));\n}\n\nfunction corsHeaders(): Record {\n return {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"authorization, content-type, x-proxy-secret\",\n };\n}\n\nfunction jsonResponse(body: unknown, init: ResponseInit = {}): Response {\n return new Response(JSON.stringify(body, null, 2), {\n ...init,\n headers: {\n \"Content-Type\": \"application/json; charset=utf-8\",\n ...corsHeaders(),\n ...(init.headers ?? {}),\n },\n });\n}\n\nfunction isAuthorized(req: Request): boolean {\n const expectedSecret = env(\"DUST_PROXY_SECRET\");\n if (!expectedSecret) return false;\n\n const headerSecret = req.headers.get(\"x-proxy-secret\");\n const authHeader = req.headers.get(\"authorization\");\n const bearerSecret = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(\"Bearer \".length).trim()\n : undefined;\n\n return headerSecret === expectedSecret || bearerSecret === expectedSecret;\n}\n\nasync function readJsonBody(req: Request): Promise {\n const contentLength = Number(req.headers.get(\"content-length\") ?? \"0\");\n if (contentLength > 1_000_000) {\n throw new Error(\"Request body is too large; limit is 1 MB\");\n }\n return await req.json();\n}\n\n// ---------------------------------------------------------------------------\n// Route Optimization (existing behaviour, unchanged)\n// ---------------------------------------------------------------------------\n\nfunction normalizePrivateKey(privateKey: string): string {\n return privateKey.includes(\"\\\\n\") ? privateKey.replace(/\\\\n/g, \"\\n\") : privateKey;\n}\n\nasync function getAccessToken(): Promise {\n const now = Date.now();\n if (tokenCache && tokenCache.expiresAtMs - 5 * 60_000 > now) {\n return tokenCache.accessToken;\n }\n\n const serviceAccountEmail = env(\"GOOGLE_SA_EMAIL\");\n const privateKeyRaw = env(\"GOOGLE_SA_PRIVATE_KEY\");\n\n if (!serviceAccountEmail || !privateKeyRaw) {\n throw new Error(\"Missing Google service account environment variables\");\n }\n\n const privateKey = await importPKCS8(normalizePrivateKey(privateKeyRaw), \"RS256\");\n\n const assertion = await new SignJWT({\n scope: \"https://www.googleapis.com/auth/cloud-platform\",\n })\n .setProtectedHeader({ alg: \"RS256\", typ: \"JWT\" })\n .setIssuer(serviceAccountEmail)\n .setAudience(\"https://oauth2.googleapis.com/token\")\n .setIssuedAt()\n .setExpirationTime(\"1h\")\n .sign(privateKey);\n\n const tokenResponse = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n grant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n assertion,\n }),\n });\n\n const tokenData = await tokenResponse.json().catch(() => ({}));\n\n if (!tokenResponse.ok || typeof tokenData.access_token !== \"string\") {\n throw new Error(\n `Google OAuth token exchange failed (${tokenResponse.status}): ${JSON.stringify(tokenData)}`,\n );\n }\n\n const expiresInSeconds = typeof tokenData.expires_in === \"number\"\n ? tokenData.expires_in\n : 3600;\n\n tokenCache = {\n accessToken: tokenData.access_token,\n expiresAtMs: now + expiresInSeconds * 1000,\n };\n\n return tokenCache.accessToken;\n}\n\nasync function handleOptimizeTours(req: Request): Promise {\n const missing = missingEnv([\"GOOGLE_PROJECT_ID\", \"GOOGLE_SA_EMAIL\", \"GOOGLE_SA_PRIVATE_KEY\"]);\n if (missing.length > 0) {\n return jsonResponse({ error: \"Route optimization is not configured\", missingEnv: missing }, { status: 503 });\n }\n\n const projectId = env(\"GOOGLE_PROJECT_ID\")!;\n const body = await readJsonBody(req);\n const token = await getAccessToken();\n\n const url = `https://routeoptimization.googleapis.com/v1/projects/${encodeURIComponent(projectId)}:optimizeTours`;\n\n const upstreamResponse = await fetch(url, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json; charset=utf-8\",\n },\n body: JSON.stringify(body),\n });\n\n return await relayUpstream(upstreamResponse);\n}\n\n// ---------------------------------------------------------------------------\n// Geocoding\n// ---------------------------------------------------------------------------\n\nasync function handleGeocode(req: Request): Promise {\n const missing = missingEnv([\"GOOGLE_MAPS_API_KEY\"]);\n if (missing.length > 0) {\n return jsonResponse({ error: \"Geocoding is not configured\", missingEnv: missing }, { status: 503 });\n }\n\n const body = await readJsonBody(req) as { address?: unknown; components?: unknown; region?: unknown };\n\n if (typeof body.address !== \"string\" || body.address.trim().length === 0) {\n return jsonResponse({ error: \"Body must include a non-empty string field 'address'\" }, { status: 400 });\n }\n\n const apiKey = env(\"GOOGLE_MAPS_API_KEY\")!;\n const params = new URLSearchParams({ address: body.address, key: apiKey });\n\n if (typeof body.region === \"string\" && body.region.trim().length > 0) {\n params.set(\"region\", body.region);\n }\n if (typeof body.components === \"string\" && body.components.trim().length > 0) {\n params.set(\"components\", body.components);\n }\n\n const upstreamResponse = await fetch(\n `https://maps.googleapis.com/maps/api/geocode/json?${params.toString()}`,\n );\n\n return await relayUpstream(upstreamResponse);\n}\n\nasync function relayUpstream(upstreamResponse: Response): Promise {\n const upstreamText = await upstreamResponse.text();\n let upstreamBody: unknown;\n try {\n upstreamBody = JSON.parse(upstreamText);\n } catch {\n upstreamBody = { raw: upstreamText };\n }\n\n return jsonResponse(upstreamBody, {\n status: upstreamResponse.status,\n headers: { \"X-Upstream-Status\": String(upstreamResponse.status) },\n });\n}\n\n// ---------------------------------------------------------------------------\n// Router\n// ---------------------------------------------------------------------------\n\nexport default async function handler(req: Request): Promise {\n const { pathname } = new URL(req.url);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders() });\n }\n\n if (req.method === \"GET\") {\n return jsonResponse({\n service: \"google-maps-proxy\",\n routes: {\n \"POST /geocode\": \"Google Geocoding API. Body: { address: string, region?: string, components?: string }\",\n \"POST / or POST /optimize-tours\": \"Google Route Optimization API optimizeTours. Body: full optimizeTours request payload.\",\n },\n auth: \"Every POST must include header x-proxy-secret or Authorization: Bearer .\",\n privacyNote: \"This public Val contains no secret values. Runtime secrets must be set as Val Town environment variables.\",\n env: ENV_DOC,\n missingEnv: {\n geocode: missingEnv([\"GOOGLE_MAPS_API_KEY\"]),\n optimizeTours: missingEnv([\"GOOGLE_PROJECT_ID\", \"GOOGLE_SA_EMAIL\", \"GOOGLE_SA_PRIVATE_KEY\"]),\n auth: missingEnv([\"DUST_PROXY_SECRET\"]),\n },\n });\n }\n\n if (req.method !== \"POST\") {\n return jsonResponse({ error: \"Method not allowed\" }, { status: 405 });\n }\n\n if (!isAuthorized(req)) {\n return jsonResponse({ error: \"Unauthorized\" }, { status: 401 });\n }\n\n try {\n if (pathname === \"/geocode\") {\n return await handleGeocode(req);\n }\n if (pathname === \"/\" || pathname === \"/optimize-tours\") {\n return await handleOptimizeTours(req);\n }\n return jsonResponse({ error: `Unknown route ${pathname}` }, { status: 404 });\n } catch (error) {\n return jsonResponse({\n error: error instanceof Error ? error.message : \"Unknown error\",\n }, { status: 500 });\n }\n}\n","import { importPKCS8, SignJWT } from \"npm:jose@5.9.6\";\n\n// ---------------------------------------------------------------------------\n// Shared proxy for Dust -> Google Maps Platform.\n// Two routes are exposed from this single Val:\n// POST / (alias: POST /optimize-tours) -> Google Route Optimization\n// POST /geocode -> Google Geocoding API\n// No secret value lives in this file. Runtime secrets are Val Town\n// environment variables (see ENV_DOC below).\n// ---------------------------------------------------------------------------\n\nconst ENV_DOC = {\n DUST_PROXY_SECRET: \"Shared secret required on every POST call (x-proxy-secret header or Authorization: Bearer ).\",\n GOOGLE_PROJECT_ID: \"Google Cloud project id. Required for /optimize-tours.\",\n GOOGLE_SA_EMAIL: \"Service account email. Required for /optimize-tours unless GOOGLE_SERVICE_ACCOUNT_JSON is set.\",\n GOOGLE_SA_PRIVATE_KEY: \"Service account private key (PEM, PKCS#8) or, temporarily, the full service-account JSON. Required for /optimize-tours unless GOOGLE_SERVICE_ACCOUNT_JSON is set.\",\n GOOGLE_SERVICE_ACCOUNT_JSON: \"Optional full Google service-account JSON. Recommended because JSON.parse preserves private_key newlines correctly.\",\n GOOGLE_MAPS_API_KEY: \"Google Maps Platform API key. Required for /geocode.\",\n} as const;\n\ntype EnvName = keyof typeof ENV_DOC;\n\ntype TokenCache = {\n accessToken: string;\n expiresAtMs: number;\n};\n\ntype ServiceAccountCredentials = {\n client_email?: unknown;\n private_key?: unknown;\n};\n\nlet tokenCache: TokenCache | null = null;\n\nfunction env(name: EnvName): string | undefined {\n const value = Deno.env.get(name);\n return value && value.trim().length > 0 ? value : undefined;\n}\n\nfunction missingEnv(names: EnvName[]): EnvName[] {\n return names.filter((name) => !env(name));\n}\n\nfunction corsHeaders(): Record {\n return {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"authorization, content-type, x-proxy-secret\",\n };\n}\n\nfunction jsonResponse(body: unknown, init: ResponseInit = {}): Response {\n return new Response(JSON.stringify(body, null, 2), {\n ...init,\n headers: {\n \"Content-Type\": \"application/json; charset=utf-8\",\n ...corsHeaders(),\n ...(init.headers ?? {}),\n },\n });\n}\n\nfunction isAuthorized(req: Request): boolean {\n const expectedSecret = env(\"DUST_PROXY_SECRET\");\n if (!expectedSecret) return false;\n\n const headerSecret = req.headers.get(\"x-proxy-secret\");\n const authHeader = req.headers.get(\"authorization\");\n const bearerSecret = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(\"Bearer \".length).trim()\n : undefined;\n\n return headerSecret === expectedSecret || bearerSecret === expectedSecret;\n}\n\nasync function readJsonBody(req: Request): Promise {\n const contentLength = Number(req.headers.get(\"content-length\") ?? \"0\");\n if (contentLength > 1_000_000) {\n throw new Error(\"Request body is too large; limit is 1 MB\");\n }\n return await req.json();\n}\n\n// ---------------------------------------------------------------------------\n// Route Optimization\n// ---------------------------------------------------------------------------\n\nfunction parseJsonObject(raw: string | undefined): ServiceAccountCredentials | undefined {\n if (!raw) return undefined;\n\n let value = raw.trim();\n\n for (let attempt = 0; attempt < 2; attempt++) {\n try {\n const parsed = JSON.parse(value);\n\n if (typeof parsed === \"string\") {\n value = parsed.trim();\n continue;\n }\n\n if (parsed && typeof parsed === \"object\") {\n return parsed as ServiceAccountCredentials;\n }\n\n return undefined;\n } catch {\n return undefined;\n }\n }\n\n return undefined;\n}\n\nfunction normalizePrivateKey(privateKey: string): string {\n let value = privateKey.trim();\n\n // Handles values pasted as a JSON string, e.g. \"-----BEGIN PRIVATE KEY-----\\\\n...\".\n for (let attempt = 0; attempt < 2; attempt++) {\n if (!(value.startsWith('\"') && value.endsWith('\"'))) break;\n try {\n const parsed = JSON.parse(value);\n if (typeof parsed !== \"string\") break;\n value = parsed.trim();\n } catch {\n value = value.slice(1, -1).trim();\n break;\n }\n }\n\n return value\n .replace(/\\r\\n/g, \"\\n\")\n .replace(/\\\\r\\\\n/g, \"\\n\")\n .replace(/\\\\n/g, \"\\n\")\n .trim();\n}\n\nfunction routeOptimizationMissingEnv(): EnvName[] {\n const jsonCredentials = parseJsonObject(env(\"GOOGLE_SERVICE_ACCOUNT_JSON\"));\n const privateKeyEnvAsJson = parseJsonObject(env(\"GOOGLE_SA_PRIVATE_KEY\"));\n\n const hasServiceAccountEmail = Boolean(\n env(\"GOOGLE_SA_EMAIL\") ||\n jsonCredentials?.client_email ||\n privateKeyEnvAsJson?.client_email\n );\n const hasPrivateKey = Boolean(\n env(\"GOOGLE_SA_PRIVATE_KEY\") ||\n jsonCredentials?.private_key\n );\n\n const missing: EnvName[] = [];\n if (!env(\"GOOGLE_PROJECT_ID\")) missing.push(\"GOOGLE_PROJECT_ID\");\n if (!hasServiceAccountEmail) missing.push(\"GOOGLE_SA_EMAIL\");\n if (!hasPrivateKey) missing.push(\"GOOGLE_SA_PRIVATE_KEY\");\n return missing;\n}\n\nfunction getServiceAccountCredentials(): { serviceAccountEmail: string; privateKeyPem: string } {\n const jsonCredentials = parseJsonObject(env(\"GOOGLE_SERVICE_ACCOUNT_JSON\"));\n const privateKeyEnvAsJson = parseJsonObject(env(\"GOOGLE_SA_PRIVATE_KEY\"));\n\n const serviceAccountEmail =\n env(\"GOOGLE_SA_EMAIL\") ||\n (typeof jsonCredentials?.client_email === \"string\" ? jsonCredentials.client_email : undefined) ||\n (typeof privateKeyEnvAsJson?.client_email === \"string\" ? privateKeyEnvAsJson.client_email : undefined);\n\n const privateKeyRaw =\n (typeof jsonCredentials?.private_key === \"string\" ? jsonCredentials.private_key : undefined) ||\n (typeof privateKeyEnvAsJson?.private_key === \"string\" ? privateKeyEnvAsJson.private_key : undefined) ||\n env(\"GOOGLE_SA_PRIVATE_KEY\");\n\n if (!serviceAccountEmail || !privateKeyRaw) {\n throw new Error(\n \"Missing Google service account credentials. Set either GOOGLE_SERVICE_ACCOUNT_JSON, or GOOGLE_SA_EMAIL + GOOGLE_SA_PRIVATE_KEY.\",\n );\n }\n\n const privateKeyPem = normalizePrivateKey(privateKeyRaw);\n\n if (\n !privateKeyPem.includes(\"-----BEGIN PRIVATE KEY-----\") ||\n !privateKeyPem.includes(\"-----END PRIVATE KEY-----\")\n ) {\n throw new Error(\n \"Invalid Google service account private key format: expected a PKCS#8 PEM block beginning with -----BEGIN PRIVATE KEY----- and ending with -----END PRIVATE KEY-----. Prefer setting GOOGLE_SERVICE_ACCOUNT_JSON to the full service-account JSON.\",\n );\n }\n\n return { serviceAccountEmail, privateKeyPem };\n}\n\nasync function getAccessToken(): Promise {\n const now = Date.now();\n if (tokenCache && tokenCache.expiresAtMs - 5 * 60_000 > now) {\n return tokenCache.accessToken;\n }\n\n const { serviceAccountEmail, privateKeyPem } = getServiceAccountCredentials();\n\n let privateKey: CryptoKey;\n try {\n privateKey = await importPKCS8(privateKeyPem, \"RS256\");\n } catch (error) {\n throw new Error(\n `Invalid Google service account private key after normalization: ${error instanceof Error ? error.message : \"unknown PKCS#8 import error\"}. Prefer setting GOOGLE_SERVICE_ACCOUNT_JSON to the full service-account JSON downloaded from Google Cloud.`,\n );\n }\n\n const assertion = await new SignJWT({\n scope: \"https://www.googleapis.com/auth/cloud-platform\",\n })\n .setProtectedHeader({ alg: \"RS256\", typ: \"JWT\" })\n .setIssuer(serviceAccountEmail)\n .setAudience(\"https://oauth2.googleapis.com/token\")\n .setIssuedAt()\n .setExpirationTime(\"1h\")\n .sign(privateKey);\n\n const tokenResponse = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n grant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n assertion,\n }),\n });\n\n const tokenData = await tokenResponse.json().catch(() => ({}));\n\n if (!tokenResponse.ok || typeof tokenData.access_token !== \"string\") {\n throw new Error(\n `Google OAuth token exchange failed (${tokenResponse.status}): ${JSON.stringify(tokenData)}`,\n );\n }\n\n const expiresInSeconds = typeof tokenData.expires_in === \"number\"\n ? tokenData.expires_in\n : 3600;\n\n tokenCache = {\n accessToken: tokenData.access_token,\n expiresAtMs: now + expiresInSeconds * 1000,\n };\n\n return tokenCache.accessToken;\n}\n\nasync function handleOptimizeTours(req: Request): Promise {\n const missing = routeOptimizationMissingEnv();\n if (missing.length > 0) {\n return jsonResponse({ error: \"Route optimization is not configured\", missingEnv: missing }, { status: 503 });\n }\n\n const projectId = env(\"GOOGLE_PROJECT_ID\")!;\n const body = await readJsonBody(req);\n const token = await getAccessToken();\n\n const url = `https://routeoptimization.googleapis.com/v1/projects/${encodeURIComponent(projectId)}:optimizeTours`;\n\n const upstreamResponse = await fetch(url, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json; charset=utf-8\",\n },\n body: JSON.stringify(body),\n });\n\n return await relayUpstream(upstreamResponse);\n}\n\n// ---------------------------------------------------------------------------\n// Geocoding\n// ---------------------------------------------------------------------------\n\nasync function handleGeocode(req: Request): Promise {\n const missing = missingEnv([\"GOOGLE_MAPS_API_KEY\"]);\n if (missing.length > 0) {\n return jsonResponse({ error: \"Geocoding is not configured\", missingEnv: missing }, { status: 503 });\n }\n\n const body = await readJsonBody(req) as { address?: unknown; components?: unknown; region?: unknown };\n\n if (typeof body.address !== \"string\" || body.address.trim().length === 0) {\n return jsonResponse({ error: \"Body must include a non-empty string field 'address'\" }, { status: 400 });\n }\n\n const apiKey = env(\"GOOGLE_MAPS_API_KEY\")!;\n const params = new URLSearchParams({ address: body.address, key: apiKey });\n\n if (typeof body.region === \"string\" && body.region.trim().length > 0) {\n params.set(\"region\", body.region);\n }\n if (typeof body.components === \"string\" && body.components.trim().length > 0) {\n params.set(\"components\", body.components);\n }\n\n const upstreamResponse = await fetch(\n `https://maps.googleapis.com/maps/api/geocode/json?${params.toString()}`,\n );\n\n return await relayUpstream(upstreamResponse);\n}\n\nasync function relayUpstream(upstreamResponse: Response): Promise {\n const upstreamText = await upstreamResponse.text();\n let upstreamBody: unknown;\n try {\n upstreamBody = JSON.parse(upstreamText);\n } catch {\n upstreamBody = { raw: upstreamText };\n }\n\n return jsonResponse(upstreamBody, {\n status: upstreamResponse.status,\n headers: { \"X-Upstream-Status\": String(upstreamResponse.status) },\n });\n}\n\n// ---------------------------------------------------------------------------\n// Router\n// ---------------------------------------------------------------------------\n\nexport default async function handler(req: Request): Promise {\n const { pathname } = new URL(req.url);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders() });\n }\n\n if (req.method === \"GET\") {\n return jsonResponse({\n service: \"google-maps-proxy\",\n routes: {\n \"POST /geocode\": \"Google Geocoding API. Body: { address: string, region?: string, components?: string }\",\n \"POST / or POST /optimize-tours\": \"Google Route Optimization API optimizeTours. Body: full optimizeTours request payload.\",\n },\n auth: \"Every POST must include header x-proxy-secret or Authorization: Bearer .\",\n privacyNote: \"This public Val contains no secret values. Runtime secrets must be set as Val Town environment variables.\",\n env: ENV_DOC,\n missingEnv: {\n geocode: missingEnv([\"GOOGLE_MAPS_API_KEY\"]),\n optimizeTours: routeOptimizationMissingEnv(),\n auth: missingEnv([\"DUST_PROXY_SECRET\"]),\n },\n });\n }\n\n if (req.method !== \"POST\") {\n return jsonResponse({ error: \"Method not allowed\" }, { status: 405 });\n }\n\n if (!isAuthorized(req)) {\n return jsonResponse({ error: \"Unauthorized\" }, { status: 401 });\n }\n\n try {\n if (pathname === \"/geocode\") {\n return await handleGeocode(req);\n }\n if (pathname === \"/\" || pathname === \"/optimize-tours\") {\n return await handleOptimizeTours(req);\n }\n return jsonResponse({ error: `Unknown route ${pathname}` }, { status: 404 });\n } catch (error) {\n return jsonResponse({\n error: error instanceof Error ? error.message : \"Unknown error\",\n }, { status: 500 });\n }\n}\n","createdAt",["D",1782932590599],"branchVersion","branchId","42be4023-e0d3-4c2c-9142-838a6a79ee9f","id","1206c0db-f565-42de-b31b-1f05777f848d","googleMapsGatewayDust",["D",1782917322237],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Proxy Dust vers Google Route Optimization","imageUrl","019a1669-b237-742d-9576-26bd8101a3da","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019a1669-b237-742d-9576-2af7ebcdd860","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",5,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","beFlow","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzM0VnhaV2Y1amtBRnpzSkUzWE1GRFB2ZVpUcSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":150,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":151,"_79":152,"_81":153,"_83":25},"tree",[145],"files",[145],"counts",{"_134":61,"_135":136,"_137":61,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"df988564-0b5f-4f9b-829e-723acf67dff9","parentId","latest",["D",1782932590599],3,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":84,"_144":61},"connections",{"_142":61,"_143":61},"count","unfilledCount","emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":146,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_147":148,"_27":149},["D",1782932590599],"children",[],[28],["D",1782917322237],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_123":187,"_188":189,"_190":191,"_192":25,"_193":25,"_194":25,"_195":121,"_196":-5,"_197":-7,"_198":-7,"_199":61,"_200":25,"_201":25,"_202":-5,"_203":25,"_204":25,"_205":25,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":85,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v4