[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_149":150,"_151":152},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_87":-7,"_88":89,"_29":-7,"_90":-5,"_15":91,"_92":93,"_94":95,"_96":97,"_98":99,"_100":-5,"_101":-5,"_102":-5,"_103":38,"_104":105,"_106":38,"_107":-5,"_108":-5,"_109":110},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","beFlow","name","googleMapsGatewayDust","project",{"_20":28,"_13":14,"_22":36,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":43,"_44":-5,"_45":46,"_47":-5,"_48":38,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":60,"_61":60,"_62":63,"_64":63,"_65":63,"_66":60,"_67":60,"_68":69,"_70":71,"_72":73,"_74":38},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":-5,"_32":-5,"_33":34,"_35":-5},"id","42be4023-e0d3-4c2c-9142-838a6a79ee9f","createdAt",["D",1782917322252],"updatedAt",["D",1785315382881],"main","projectId","1206c0db-f565-42de-b31b-1f05777f848d","version",5,"forkedBranchId","forkedBranchVersion","lockfileKey","1785315383100-esm.town_v_beFlow_googleMapsGatewayDust@5-main","deletedAt",["D",1782917322237],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","Proxy Dust vers Google Route Optimization","imageUrl","userId","019a1669-b237-742d-9576-26bd8101a3da","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019a1669-b237-742d-9576-2af7ebcdd860","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_86":82},"org",{"_11":12,"_80":-5,"_81":82,"_45":46,"_83":84,"_85":38},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_75":-5,"_76":-5,"_77":-5,"_78":14,"_79":12},"isOwned","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzM0VnhaV2Y1amtBRnpzSkUzWE1GRFB2ZVpUcSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_20":28,"_13":14,"_22":145,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":43,"_44":-5,"_45":46,"_47":-5,"_48":38,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":60,"_61":60,"_62":63,"_64":63,"_65":63,"_66":60,"_67":60,"_68":146,"_70":147,"_72":148,"_74":38},"tree",[140],"files",[140],"counts",{"_130":52,"_17":131,"_132":52,"_133":134,"_135":136},"contents",[111],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_20":112,"_13":113,"_114":115,"_116":-5,"_117":21,"_118":30,"_119":120,"_22":121,"_29":122,"_123":124,"_125":126,"_127":38,"_128":-5,"_88":129},"7bc8174d-0afd-4325-b987-ec23ee036326","main.ts","fileId","08765710-755c-11f1-afed-1607ee4eb77e","parentId","branchId","branchVersion","latest",true,["D",1785315382881],4,"fileType","script","content","import { importPKCS8, SignJWT } from \"npm:jose@5.9.6\";\n\n// ---------------------------------------------------------------------------\n// Shared proxy for Dust -> Google Maps Platform.\n// Two routes are exposed from this single Val:\n// POST / (alias: POST /optimize-tours) -> Google Route Optimization\n// POST /geocode -> Google Geocoding API\n// No secret value lives in this file. Runtime secrets are Val Town\n// environment variables (see ENV_DOC below).\n// ---------------------------------------------------------------------------\n\nconst ENV_DOC = {\n DUST_PROXY_SECRET: \"Shared secret required on every POST call (x-proxy-secret header or Authorization: Bearer ).\",\n GOOGLE_PROJECT_ID: \"Google Cloud project id. Required for /optimize-tours.\",\n GOOGLE_SA_EMAIL: \"Service account email. Required for /optimize-tours unless GOOGLE_SERVICE_ACCOUNT_JSON is set.\",\n GOOGLE_SA_PRIVATE_KEY: \"Service account private key (PEM, PKCS#8) or, temporarily, the full service-account JSON. Required for /optimize-tours unless GOOGLE_SERVICE_ACCOUNT_JSON is set.\",\n GOOGLE_SERVICE_ACCOUNT_JSON: \"Optional full Google service-account JSON. Recommended because JSON.parse preserves private_key newlines correctly.\",\n GOOGLE_MAPS_API_KEY: \"Google Maps Platform API key. Required for /geocode.\",\n} as const;\n\ntype EnvName = keyof typeof ENV_DOC;\n\ntype TokenCache = {\n accessToken: string;\n expiresAtMs: number;\n};\n\ntype ServiceAccountCredentials = {\n client_email?: unknown;\n private_key?: unknown;\n};\n\nlet tokenCache: TokenCache | null = null;\n\nfunction env(name: EnvName): string | undefined {\n const value = Deno.env.get(name);\n return value && value.trim().length > 0 ? value : undefined;\n}\n\nfunction missingEnv(names: EnvName[]): EnvName[] {\n return names.filter((name) => !env(name));\n}\n\nfunction corsHeaders(): Record {\n return {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"authorization, content-type, x-proxy-secret\",\n };\n}\n\nfunction jsonResponse(body: unknown, init: ResponseInit = {}): Response {\n return new Response(JSON.stringify(body, null, 2), {\n ...init,\n headers: {\n \"Content-Type\": \"application/json; charset=utf-8\",\n ...corsHeaders(),\n ...(init.headers ?? {}),\n },\n });\n}\n\nfunction isAuthorized(req: Request): boolean {\n const expectedSecret = env(\"DUST_PROXY_SECRET\");\n if (!expectedSecret) return false;\n\n const headerSecret = req.headers.get(\"x-proxy-secret\");\n const authHeader = req.headers.get(\"authorization\");\n const bearerSecret = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(\"Bearer \".length).trim()\n : undefined;\n\n return headerSecret === expectedSecret || bearerSecret === expectedSecret;\n}\n\nasync function readJsonBody(req: Request): Promise {\n const contentLength = Number(req.headers.get(\"content-length\") ?? \"0\");\n if (contentLength > 1_000_000) {\n throw new Error(\"Request body is too large; limit is 1 MB\");\n }\n return await req.json();\n}\n\n// ---------------------------------------------------------------------------\n// Route Optimization\n// ---------------------------------------------------------------------------\n\nfunction parseJsonObject(raw: string | undefined): ServiceAccountCredentials | undefined {\n if (!raw) return undefined;\n\n let value = raw.trim();\n\n for (let attempt = 0; attempt < 2; attempt++) {\n try {\n const parsed = JSON.parse(value);\n\n if (typeof parsed === \"string\") {\n value = parsed.trim();\n continue;\n }\n\n if (parsed && typeof parsed === \"object\") {\n return parsed as ServiceAccountCredentials;\n }\n\n return undefined;\n } catch {\n return undefined;\n }\n }\n\n return undefined;\n}\n\nfunction normalizePrivateKey(privateKey: string): string {\n let value = privateKey.trim();\n\n // Handles values pasted as a JSON string, e.g. \"-----BEGIN PRIVATE KEY-----\\\\n...\".\n for (let attempt = 0; attempt < 2; attempt++) {\n if (!(value.startsWith('\"') && value.endsWith('\"'))) break;\n try {\n const parsed = JSON.parse(value);\n if (typeof parsed !== \"string\") break;\n value = parsed.trim();\n } catch {\n value = value.slice(1, -1).trim();\n break;\n }\n }\n\n return value\n .replace(/\\r\\n/g, \"\\n\")\n .replace(/\\\\r\\\\n/g, \"\\n\")\n .replace(/\\\\n/g, \"\\n\")\n .trim();\n}\n\nfunction routeOptimizationMissingEnv(): EnvName[] {\n const jsonCredentials = parseJsonObject(env(\"GOOGLE_SERVICE_ACCOUNT_JSON\"));\n const privateKeyEnvAsJson = parseJsonObject(env(\"GOOGLE_SA_PRIVATE_KEY\"));\n\n const hasServiceAccountEmail = Boolean(\n env(\"GOOGLE_SA_EMAIL\") ||\n jsonCredentials?.client_email ||\n privateKeyEnvAsJson?.client_email\n );\n const hasPrivateKey = Boolean(\n env(\"GOOGLE_SA_PRIVATE_KEY\") ||\n jsonCredentials?.private_key\n );\n\n const missing: EnvName[] = [];\n if (!env(\"GOOGLE_PROJECT_ID\")) missing.push(\"GOOGLE_PROJECT_ID\");\n if (!hasServiceAccountEmail) missing.push(\"GOOGLE_SA_EMAIL\");\n if (!hasPrivateKey) missing.push(\"GOOGLE_SA_PRIVATE_KEY\");\n return missing;\n}\n\nfunction getServiceAccountCredentials(): { serviceAccountEmail: string; privateKeyPem: string } {\n const jsonCredentials = parseJsonObject(env(\"GOOGLE_SERVICE_ACCOUNT_JSON\"));\n const privateKeyEnvAsJson = parseJsonObject(env(\"GOOGLE_SA_PRIVATE_KEY\"));\n\n const serviceAccountEmail =\n env(\"GOOGLE_SA_EMAIL\") ||\n (typeof jsonCredentials?.client_email === \"string\" ? jsonCredentials.client_email : undefined) ||\n (typeof privateKeyEnvAsJson?.client_email === \"string\" ? privateKeyEnvAsJson.client_email : undefined);\n\n const privateKeyRaw =\n (typeof jsonCredentials?.private_key === \"string\" ? jsonCredentials.private_key : undefined) ||\n (typeof privateKeyEnvAsJson?.private_key === \"string\" ? privateKeyEnvAsJson.private_key : undefined) ||\n env(\"GOOGLE_SA_PRIVATE_KEY\");\n\n if (!serviceAccountEmail || !privateKeyRaw) {\n throw new Error(\n \"Missing Google service account credentials. Set either GOOGLE_SERVICE_ACCOUNT_JSON, or GOOGLE_SA_EMAIL + GOOGLE_SA_PRIVATE_KEY.\",\n );\n }\n\n const privateKeyPem = normalizePrivateKey(privateKeyRaw);\n\n if (\n !privateKeyPem.includes(\"-----BEGIN PRIVATE KEY-----\") ||\n !privateKeyPem.includes(\"-----END PRIVATE KEY-----\")\n ) {\n throw new Error(\n \"Invalid Google service account private key format: expected a PKCS#8 PEM block beginning with -----BEGIN PRIVATE KEY----- and ending with -----END PRIVATE KEY-----. Prefer setting GOOGLE_SERVICE_ACCOUNT_JSON to the full service-account JSON.\",\n );\n }\n\n return { serviceAccountEmail, privateKeyPem };\n}\n\nasync function getAccessToken(): Promise {\n const now = Date.now();\n if (tokenCache && tokenCache.expiresAtMs - 5 * 60_000 > now) {\n return tokenCache.accessToken;\n }\n\n const { serviceAccountEmail, privateKeyPem } = getServiceAccountCredentials();\n\n let privateKey: CryptoKey;\n try {\n privateKey = await importPKCS8(privateKeyPem, \"RS256\");\n } catch (error) {\n throw new Error(\n `Invalid Google service account private key after normalization: ${error instanceof Error ? error.message : \"unknown PKCS#8 import error\"}. Prefer setting GOOGLE_SERVICE_ACCOUNT_JSON to the full service-account JSON downloaded from Google Cloud.`,\n );\n }\n\n const assertion = await new SignJWT({\n scope: \"https://www.googleapis.com/auth/cloud-platform\",\n })\n .setProtectedHeader({ alg: \"RS256\", typ: \"JWT\" })\n .setIssuer(serviceAccountEmail)\n .setAudience(\"https://oauth2.googleapis.com/token\")\n .setIssuedAt()\n .setExpirationTime(\"1h\")\n .sign(privateKey);\n\n const tokenResponse = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n grant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n assertion,\n }),\n });\n\n const tokenData = await tokenResponse.json().catch(() => ({}));\n\n if (!tokenResponse.ok || typeof tokenData.access_token !== \"string\") {\n throw new Error(\n `Google OAuth token exchange failed (${tokenResponse.status}): ${JSON.stringify(tokenData)}`,\n );\n }\n\n const expiresInSeconds = typeof tokenData.expires_in === \"number\"\n ? tokenData.expires_in\n : 3600;\n\n tokenCache = {\n accessToken: tokenData.access_token,\n expiresAtMs: now + expiresInSeconds * 1000,\n };\n\n return tokenCache.accessToken;\n}\n\nasync function handleOptimizeTours(req: Request): Promise {\n const missing = routeOptimizationMissingEnv();\n if (missing.length > 0) {\n return jsonResponse({ error: \"Route optimization is not configured\", missingEnv: missing }, { status: 503 });\n }\n\n const projectId = env(\"GOOGLE_PROJECT_ID\")!;\n const body = await readJsonBody(req);\n const token = await getAccessToken();\n\n const url = `https://routeoptimization.googleapis.com/v1/projects/${encodeURIComponent(projectId)}:optimizeTours`;\n\n const upstreamResponse = await fetch(url, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json; charset=utf-8\",\n },\n body: JSON.stringify(body),\n });\n\n return await relayUpstream(upstreamResponse);\n}\n\n// ---------------------------------------------------------------------------\n// Geocoding\n// ---------------------------------------------------------------------------\n\nasync function handleGeocode(req: Request): Promise {\n const missing = missingEnv([\"GOOGLE_MAPS_API_KEY\"]);\n if (missing.length > 0) {\n return jsonResponse({ error: \"Geocoding is not configured\", missingEnv: missing }, { status: 503 });\n }\n\n const body = await readJsonBody(req) as { address?: unknown; components?: unknown; region?: unknown };\n\n if (typeof body.address !== \"string\" || body.address.trim().length === 0) {\n return jsonResponse({ error: \"Body must include a non-empty string field 'address'\" }, { status: 400 });\n }\n\n const apiKey = env(\"GOOGLE_MAPS_API_KEY\")!;\n const params = new URLSearchParams({ address: body.address, key: apiKey });\n\n if (typeof body.region === \"string\" && body.region.trim().length > 0) {\n params.set(\"region\", body.region);\n }\n if (typeof body.components === \"string\" && body.components.trim().length > 0) {\n params.set(\"components\", body.components);\n }\n\n const upstreamResponse = await fetch(\n `https://maps.googleapis.com/maps/api/geocode/json?${params.toString()}`,\n );\n\n return await relayUpstream(upstreamResponse);\n}\n\nasync function relayUpstream(upstreamResponse: Response): Promise {\n const upstreamText = await upstreamResponse.text();\n let upstreamBody: unknown;\n try {\n upstreamBody = JSON.parse(upstreamText);\n } catch {\n upstreamBody = { raw: upstreamText };\n }\n\n return jsonResponse(upstreamBody, {\n status: upstreamResponse.status,\n headers: { \"X-Upstream-Status\": String(upstreamResponse.status) },\n });\n}\n\n// ---------------------------------------------------------------------------\n// Router\n// ---------------------------------------------------------------------------\n\nexport default async function handler(req: Request): Promise {\n const { pathname } = new URL(req.url);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders() });\n }\n\n if (req.method === \"GET\") {\n return jsonResponse({\n service: \"google-maps-proxy\",\n routes: {\n \"POST /geocode\": \"Google Geocoding API. Body: { address: string, region?: string, components?: string }\",\n \"POST / or POST /optimize-tours\": \"Google Route Optimization API optimizeTours. Body: full optimizeTours request payload.\",\n },\n auth: \"Every POST must include header x-proxy-secret or Authorization: Bearer .\",\n privacyNote: \"This public Val contains no secret values. Runtime secrets must be set as Val Town environment variables.\",\n env: ENV_DOC,\n missingEnv: {\n geocode: missingEnv([\"GOOGLE_MAPS_API_KEY\"]),\n optimizeTours: routeOptimizationMissingEnv(),\n auth: missingEnv([\"DUST_PROXY_SECRET\"]),\n },\n });\n }\n\n if (req.method !== \"POST\") {\n return jsonResponse({ error: \"Method not allowed\" }, { status: 405 });\n }\n\n if (!isAuthorized(req)) {\n return jsonResponse({ error: \"Unauthorized\" }, { status: 401 });\n }\n\n try {\n if (pathname === \"/geocode\") {\n return await handleGeocode(req);\n }\n if (pathname === \"/\" || pathname === \"/optimize-tours\") {\n return await handleOptimizeTours(req);\n }\n return jsonResponse({ error: `Unknown route ${pathname}` }, { status: 404 });\n } catch (error) {\n return jsonResponse({\n error: error instanceof Error ? error.message : \"Unknown error\",\n }, { status: 500 });\n }\n}\n","deleted","label",[113],"pulls",1,"forks","envVars",{"_137":30,"_139":52},"connections",{"_137":52,"_138":52},"count","unfilledCount","emptyCount",{"_20":112,"_13":113,"_114":115,"_116":-5,"_117":21,"_118":30,"_119":120,"_22":141,"_29":122,"_123":124,"_125":126,"_127":38,"_128":-5,"_142":143,"_88":144},["D",1785315382881],"children",[],[113],["D",1782917322237],{"_11":12,"_86":82},{"_11":12,"_80":-5,"_81":82,"_45":46,"_83":84,"_85":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_75":-5,"_76":-5,"_77":-5,"_78":14,"_79":12},"ctx",{"_68":-5,"_108":182,"_183":184,"_185":186,"_187":38,"_188":38,"_189":38,"_190":120,"_191":-5,"_192":-7,"_193":-7,"_194":52,"_195":38,"_196":38,"_197":-5,"_198":38,"_199":38,"_200":38,"_201":-5},"ENV",{"_153":154,"_155":156,"_157":26,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1