[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_238":239,"_240":241},"routes/_app.x.$handle.$name",{"_92":91,"_32":44,"_100":82,"_27":101,"_13":14,"_102":-5,"_11":103,"_104":105,"_106":107,"_108":109,"_110":111,"_20":-5,"_112":-5,"_113":-5,"_114":25,"_115":116,"_117":118,"_119":-5,"_120":-5,"_121":122},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":-5,"_55":25,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":76,"_77":78,"_79":80,"_81":25},"version",50,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","MFlowStatus.ts","latestPath","fileId","c780babe-1acc-11f1-a55f-42dde27851f2","name","fileType","http","content","// @valtown/http\n// MortgageFlow — Application State Store\n// Tracks full mortgage application lifecycle stage by stage\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst KEY = \"mortgageflow_applications\";\n\ntype Stage = {\n stage_number: number;\n stage_name?: string;\n status: \"pending\" | \"in_progress\" | \"completed\" | \"failed\";\n started_at?: string;\n completed_at?: string;\n data: any;\n};\n\ntype Application = {\n application_id: string;\n applicant_name: string;\n current_stage: number;\n overall_status:\n | \"submitted\"\n | \"validating\"\n | \"resolving\"\n | \"ready_for_underwriter\"\n | \"escalated\"\n | \"rejected\"\n | \"closed\";\n discrepancies: Discrepancy[];\n resolutions: Resolution[];\n created_at: string;\n updated_at: string;\n stages: Stage[];\n};\n\ntype Discrepancy = {\n discrepancy_id: string;\n stage: string;\n field: string;\n submitted_value: string;\n expected_value: string;\n type: \"mismatch\" | \"missing\" | \"format_error\" | \"inconsistency\";\n severity: \"auto_resolvable\" | \"escalate\";\n resolved: boolean;\n};\n\ntype Resolution = {\n discrepancy_id: string;\n field: string;\n original_value: string;\n resolved_value: string;\n resolution_source: \"crm\" | \"llm_inference\" | \"manual\";\n resolved_at: string;\n resolved_by: \"auto\" | \"analyst\";\n};\n\nasync function getApplications(): Promise {\n const raw = await blob.getJSON(KEY);\n return Array.isArray(raw) ? raw : [];\n}\n\nasync function saveApplications(apps: Application[]): Promise {\n await blob.setJSON(KEY, apps);\n}\n\nexport default async function handler(req: Request) {\n const url = new URL(req.url);\n const path = url.pathname;\n const parts = path.split(\"/\").filter(Boolean);\n\n // ─────────────────────────────────────────\n // GET / — list all applications\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && parts.length === 0) {\n const apps = await getApplications();\n return json({ count: apps.length, applications: apps });\n }\n\n // ─────────────────────────────────────────\n // GET /:application_id\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && parts.length === 1) {\n const apps = await getApplications();\n const app = apps.find((a) => a.application_id === parts[0]);\n if (!app) {\n return json(\n { error: \"Application not found\", application_id: parts[0] },\n 404,\n );\n }\n return json(app);\n }\n\n // ─────────────────────────────────────────\n // POST / — create new application\n // Body: { application_id, applicant_name, ...form data }\n // ─────────────────────────────────────────\n if (req.method === \"POST\" && parts.length === 0) {\n try {\n const body = await req.json();\n if (!body.application_id) {\n return json({ error: \"Missing required field: application_id\" }, 400);\n }\n\n const apps = await getApplications();\n if (apps.find((a) => a.application_id === body.application_id)) {\n return json({\n error: \"Application already exists\",\n application_id: body.application_id,\n }, 409);\n }\n\n const newApp: Application = {\n application_id: body.application_id,\n applicant_name: body.applicant_name,\n current_stage: 1,\n overall_status: \"submitted\",\n discrepancies: [],\n resolutions: [],\n created_at: new Date().toISOString(),\n updated_at: new Date().toISOString(),\n stages: [\n {\n stage_number: 1,\n stage_name: \"Application Submitted\",\n status: \"completed\",\n started_at: new Date().toISOString(),\n completed_at: new Date().toISOString(),\n data: body,\n },\n ],\n };\n\n apps.push(newApp);\n await saveApplications(apps);\n return json({ status: \"created\", application: newApp }, 201);\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // PATCH /:application_id/stage — add or update a stage\n // Body: { stage_number, stage_name?, status, data, overall_status? }\n // ─────────────────────────────────────────\n if (req.method === \"PATCH\" && parts.length === 2 && parts[1] === \"stage\") {\n try {\n const application_id = parts[0];\n const body = await req.json();\n\n if (!body.stage_number || !body.status || !body.data) {\n return json({\n error: \"Missing required fields: stage_number, status, data\",\n }, 400);\n }\n\n const apps = await getApplications();\n const index = apps.findIndex((a) => a.application_id === application_id);\n if (index === -1) {\n return json({ error: \"Application not found\", application_id }, 404);\n }\n\n const app = apps[index];\n const stageIndex = app.stages.findIndex((s) =>\n s.stage_number === body.stage_number\n );\n\n const updatedStage: Stage = {\n stage_number: body.stage_number,\n stage_name: body.stage_name,\n status: body.status,\n started_at: body.status === \"in_progress\"\n ? new Date().toISOString()\n : app.stages[stageIndex]?.started_at,\n completed_at: body.status === \"completed\" || body.status === \"failed\"\n ? new Date().toISOString()\n : undefined,\n data: body.data,\n };\n\n if (stageIndex === -1) {\n app.stages.push(updatedStage);\n } else {\n app.stages[stageIndex] = {\n ...app.stages[stageIndex],\n ...updatedStage,\n data: { ...app.stages[stageIndex].data, ...body.data },\n };\n }\n\n app.current_stage = body.stage_number;\n if (body.overall_status) app.overall_status = body.overall_status;\n app.updated_at = new Date().toISOString();\n apps[index] = app;\n await saveApplications(apps);\n\n return json({ status: \"updated\", application: app });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // PATCH /:application_id/discrepancies — log discrepancies\n // Body: { discrepancies: Discrepancy[] }\n // ─────────────────────────────────────────\n if (\n req.method === \"PATCH\" && parts.length === 2 && parts[1] === \"discrepancies\"\n ) {\n try {\n const application_id = parts[0];\n const body = await req.json();\n\n if (!Array.isArray(body.discrepancies)) {\n return json(\n { error: \"Missing required field: discrepancies (array)\" },\n 400,\n );\n }\n\n const apps = await getApplications();\n const index = apps.findIndex((a) => a.application_id === application_id);\n if (index === -1) {\n return json({ error: \"Application not found\", application_id }, 404);\n }\n\n apps[index].discrepancies = [\n ...apps[index].discrepancies,\n ...body.discrepancies,\n ];\n apps[index].updated_at = new Date().toISOString();\n await saveApplications(apps);\n\n return json({\n status: \"updated\",\n discrepancy_count: apps[index].discrepancies.length,\n discrepancies: apps[index].discrepancies,\n });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // PATCH /:application_id/resolutions — log auto-resolutions\n // Body: { resolutions: Resolution[] }\n // ─────────────────────────────────────────\n if (\n req.method === \"PATCH\" && parts.length === 2 && parts[1] === \"resolutions\"\n ) {\n try {\n const application_id = parts[0];\n const body = await req.json();\n\n if (!Array.isArray(body.resolutions)) {\n return json(\n { error: \"Missing required field: resolutions (array)\" },\n 400,\n );\n }\n\n const apps = await getApplications();\n const index = apps.findIndex((a) => a.application_id === application_id);\n if (index === -1) {\n return json({ error: \"Application not found\", application_id }, 404);\n }\n\n // Mark matching discrepancies as resolved\n body.resolutions.forEach((res: Resolution) => {\n const discIndex = apps[index].discrepancies.findIndex(\n (d) => d.discrepancy_id === res.discrepancy_id,\n );\n if (discIndex !== -1) {\n apps[index].discrepancies[discIndex].resolved = true;\n }\n });\n\n apps[index].resolutions = [\n ...apps[index].resolutions,\n ...body.resolutions,\n ];\n apps[index].updated_at = new Date().toISOString();\n await saveApplications(apps);\n\n return json({\n status: \"updated\",\n resolution_count: apps[index].resolutions.length,\n resolutions: apps[index].resolutions,\n });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // PATCH /:application_id — update top-level fields\n // ─────────────────────────────────────────\n if (req.method === \"PATCH\" && parts.length === 1) {\n try {\n const application_id = parts[0];\n const body = await req.json();\n\n const apps = await getApplications();\n const index = apps.findIndex((a) => a.application_id === application_id);\n if (index === -1) {\n return json({ error: \"Application not found\", application_id }, 404);\n }\n\n apps[index] = {\n ...apps[index],\n ...body,\n application_id: apps[index].application_id,\n stages: apps[index].stages,\n discrepancies: apps[index].discrepancies,\n resolutions: apps[index].resolutions,\n created_at: apps[index].created_at,\n updated_at: new Date().toISOString(),\n };\n\n await saveApplications(apps);\n return json({ status: \"updated\", application: apps[index] });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // DELETE /:application_id\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && parts.length === 1) {\n const apps = await getApplications();\n const filtered = apps.filter((a) => a.application_id !== parts[0]);\n if (filtered.length === apps.length) {\n return json({ error: \"Application not found\" }, 404);\n }\n await saveApplications(filtered);\n return json({ status: \"deleted\", application_id: parts[0] });\n }\n\n // ─────────────────────────────────────────\n // DELETE / — clear all\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && parts.length === 0) {\n await saveApplications([]);\n return json({ status: \"cleared\" });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data, null, 2), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}","createdAt",["D",1772995226572],"branchVersion","branchId","c937468e-18ba-11f1-84fb-42dde27851f2","id","c936de06-18ba-11f1-84fb-42dde27851f2","RetailFlow",["D",1772732594353],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","019be3ee-b210-72df-b0b7-1c63b5f83da1","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019be3ee-b210-72df-b0b7-20f942b1694c","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_92":91,"_99":95},"org",{"_92":91,"_93":-5,"_94":95,"_18":53,"_96":97,"_98":25},"branch",{"_13":14,"_32":82,"_42":41,"_83":43,"_84":-5,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":44,"_90":91},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","gflow","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzM4YjVwUVVEZWJ2b0RPYVpYSHBhNXRUQmEwdSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":234,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":-5,"_55":25,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":235,"_77":236,"_79":237,"_81":25},"tree",[201,202,203,204,205,206,207,208],"files",[201,202,203,204,205,206,207,208],"counts",{"_190":59,"_191":192,"_193":59,"_194":195,"_196":197},"contents",[123,124,125,126,127,128,129,130],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_42":187,"_32":28,"_30":31,"_134":-5,"_40":41,"_39":14,"_136":118,"_37":188,"_13":155,"_33":34,"_35":36,"_24":25,"_140":-5,"_27":189},{"_42":179,"_32":180,"_30":181,"_134":-5,"_40":41,"_39":182,"_136":118,"_37":183,"_13":184,"_33":34,"_35":185,"_24":25,"_140":-5,"_27":186},{"_42":172,"_32":173,"_30":174,"_134":-5,"_40":41,"_39":175,"_136":118,"_37":176,"_13":147,"_33":34,"_35":177,"_24":25,"_140":-5,"_27":178},{"_42":165,"_32":166,"_30":167,"_134":-5,"_40":41,"_39":168,"_136":118,"_37":169,"_13":147,"_33":34,"_35":170,"_24":25,"_140":-5,"_27":171},{"_42":158,"_32":159,"_30":160,"_134":-5,"_40":41,"_39":161,"_136":118,"_37":162,"_13":147,"_33":34,"_35":163,"_24":25,"_140":-5,"_27":164},{"_42":150,"_32":151,"_30":152,"_134":-5,"_40":41,"_39":153,"_136":118,"_37":154,"_13":155,"_33":34,"_35":156,"_24":25,"_140":-5,"_27":157},{"_42":142,"_32":143,"_30":144,"_134":-5,"_40":41,"_39":145,"_136":118,"_37":146,"_13":147,"_33":34,"_35":148,"_24":25,"_140":-5,"_27":149},{"_42":131,"_32":132,"_30":133,"_134":-5,"_40":41,"_39":135,"_136":118,"_37":137,"_13":138,"_33":34,"_35":139,"_24":25,"_140":-5,"_27":141},"d218f43e-1a20-11f1-8f69-42dde27851f2","wfStatus.ts","024a6c80-18bb-11f1-84fb-42dde27851f2","parentId",37,"latest",["D",1772886369118],7,"// @valtown/http\n// Val Server 2 — Application State Store\n// Lumina Energia Demo | Tracks full application lifecycle stage by stage\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst KEY = \"lumina_applications\";\n\ntype Stage = {\n stage_number: any;\n stage_name?: string;\n status: \"pending\" | \"in_progress\" | \"completed\" | \"failed\";\n started_at?: string;\n completed_at?: string;\n data: any;\n};\n\ntype Application = {\n application_id: string;\n current_stage: number;\n overall_status:\n | \"submitted\"\n | \"validating\"\n | \"awaiting_info\"\n | \"awaiting_decision\"\n | \"accepted\"\n | \"rejected\"\n | \"activating\"\n | \"activated\"\n | \"closed\";\n created_at: string;\n updated_at: string;\n stages: Stage[];\n};\n\nasync function getApplications(): Promise {\n const raw = await blob.getJSON(KEY);\n return Array.isArray(raw) ? raw : [];\n}\n\nasync function saveApplications(apps: Application[]): Promise {\n await blob.setJSON(KEY, apps);\n}\n\nexport default async function handler(req: Request) {\n const url = new URL(req.url);\n const path = url.pathname;\n const parts = path.split(\"/\").filter(Boolean);\n\n // ─────────────────────────────────────────\n // GET / — list all applications\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && parts.length === 0) {\n const apps = await getApplications();\n return json({ count: apps.length, applications: apps });\n }\n\n // ─────────────────────────────────────────\n // GET /:application_id — get single application\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && parts.length === 1) {\n const application_id = parts[0];\n const apps = await getApplications();\n const app = apps.find((a) => a.application_id === application_id);\n if (!app) {\n return json({ error: \"Application not found\", application_id }, 404);\n }\n return json(app);\n }\n\n // ─────────────────────────────────────────\n // POST / — create new application\n // ─────────────────────────────────────────\n if (req.method === \"POST\" && parts.length === 0) {\n try {\n const body = await req.json();\n if (!body.application_id) {\n return json({ error: \"Missing required field: application_id\" }, 400);\n }\n\n const apps = await getApplications();\n if (apps.find((a) => a.application_id === body.application_id)) {\n return json({\n error: \"Application already exists\",\n application_id: body.application_id,\n }, 409);\n }\n\n const newApp: Application = {\n application_id: body.application_id,\n current_stage: 1,\n overall_status: \"submitted\",\n created_at: new Date().toISOString(),\n updated_at: new Date().toISOString(),\n stages: [\n {\n stage_number: 1,\n stage_name: \"Form Submission\",\n status: \"completed\",\n started_at: new Date().toISOString(),\n completed_at: new Date().toISOString(),\n data: body,\n },\n ],\n };\n\n apps.push(newApp);\n await saveApplications(apps);\n return json({ status: \"created\", application: newApp }, 201);\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // PATCH /:application_id/stage — add or update a stage\n // Body: { stage_number, stage_name?, status, data, overall_status? }\n // ─────────────────────────────────────────\n if (req.method === \"PATCH\" && parts.length === 2 && parts[1] === \"stage\") {\n try {\n const application_id = parts[0];\n const body = await req.json();\n\n if (!body.stage_number || !body.status || !body.data) {\n return json({\n error: \"Missing required fields: stage_number, status, data\",\n }, 400);\n }\n\n const apps = await getApplications();\n const index = apps.findIndex((a) => a.application_id === application_id);\n if (index === -1) {\n return json({ error: \"Application not found\", application_id }, 404);\n }\n\n const app = apps[index];\n const stageIndex = app.stages.findIndex((s) =>\n s.stage_number === body.stage_number\n );\n\n const updatedStage: Stage = {\n stage_number: body.stage_number,\n stage_name: body.stage_name,\n status: body.status,\n started_at: body.status === \"in_progress\"\n ? new Date().toISOString()\n : app.stages[stageIndex]?.started_at,\n completed_at: body.status === \"completed\" || body.status === \"failed\"\n ? new Date().toISOString()\n : undefined,\n data: body.data,\n };\n\n if (stageIndex === -1) {\n app.stages.push(updatedStage);\n } else {\n app.stages[stageIndex] = {\n ...app.stages[stageIndex],\n ...updatedStage,\n data: { ...app.stages[stageIndex].data, ...body.data },\n };\n }\n\n app.current_stage = body.stage_number;\n if (body.overall_status) app.overall_status = body.overall_status;\n app.updated_at = new Date().toISOString();\n apps[index] = app;\n await saveApplications(apps);\n\n return json({ status: \"updated\", application: app });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // PATCH /:application_id — update top-level fields only\n // ─────────────────────────────────────────\n if (req.method === \"PATCH\" && parts.length === 1) {\n try {\n const application_id = parts[0];\n const body = await req.json();\n\n const apps = await getApplications();\n const index = apps.findIndex((a) => a.application_id === application_id);\n if (index === -1) {\n return json({ error: \"Application not found\", application_id }, 404);\n }\n\n apps[index] = {\n ...apps[index],\n ...body,\n application_id: apps[index].application_id,\n stages: apps[index].stages,\n created_at: apps[index].created_at,\n updated_at: new Date().toISOString(),\n };\n\n await saveApplications(apps);\n return json({ status: \"updated\", application: apps[index] });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // DELETE /:application_id — delete single\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && parts.length === 1) {\n const application_id = parts[0];\n const apps = await getApplications();\n const filtered = apps.filter((a) => a.application_id !== application_id);\n if (filtered.length === apps.length) {\n return json({ error: \"Application not found\" }, 404);\n }\n await saveApplications(filtered);\n return json({ status: \"deleted\", application_id });\n }\n\n // ─────────────────────────────────────────\n // DELETE / — clear all\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && parts.length === 0) {\n await saveApplications([]);\n return json({ status: \"cleared\" });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data, null, 2), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}","label",[132],"4073ef7c-18bb-11f1-b406-42dde27851f2","validationServer.ts","31ef94ec-18bb-11f1-87b8-42dde27851f2",22,["D",1772732794437],4,"// @valtown/http\n// Val Server 4 — Validation (DNI/NIE/Passport + SEPA/IBAN)\n// Lumina Energia Demo | Stateless — no blob storage\n\nexport default async function handler(req: Request) {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // ─────────────────────────────────────────\n // GET / — service info\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && (path === \"/\" || path === \"\")) {\n return json({\n service: \"Lumina Energia — Validation Service\",\n endpoints: [\n \"GET /dni/validate?id=52847163K\",\n \"GET /sepa/validate?iban=ES9121000418450200051332\",\n ],\n });\n }\n\n // ─────────────────────────────────────────\n // GET /dni/validate?id=52847163K\n // Validates Spanish DNI, NIE or Passport\n // Demo: 52847163K → VALID DNI\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/dni/validate\")) {\n const raw = url.searchParams.get(\"id\");\n if (!raw) return json({ error: \"Missing required parameter: id\" }, 400);\n\n const id = raw.toUpperCase().trim();\n const type = detectIDType(id);\n\n if (type === \"UNKNOWN\") {\n return json({\n status: \"INVALID\",\n id,\n type: \"UNKNOWN\",\n reason: \"Format not recognised as DNI, NIE or Passport\",\n });\n }\n\n const valid = type === \"DNI\"\n ? validateDNI(id)\n : type === \"NIE\"\n ? validateNIE(id)\n : validatePassport(id);\n\n return json({\n status: valid ? \"VALID\" : \"INVALID\",\n id,\n type,\n reason: valid\n ? `${type} format and checksum verified`\n : `${type} checksum failed — control letter does not match number sequence`,\n });\n }\n\n // ─────────────────────────────────────────\n // GET /sepa/validate?iban=ES9121000418450200051332\n // Validates IBAN checksum (MOD97) + SEPA country\n // Demo: ES9121000418450200051332 → VALID\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/sepa/validate\")) {\n const raw = url.searchParams.get(\"iban\");\n if (!raw) return json({ error: \"Missing required parameter: iban\" }, 400);\n\n const iban = raw.replace(/\\s+/g, \"\").toUpperCase();\n const country = iban.slice(0, 2);\n const lengthValid = validateIBANLength(iban);\n const checksumValid = validateMOD97(iban);\n const sepaCountry = isSepaCountry(country);\n const valid = lengthValid && checksumValid && sepaCountry;\n\n return json({\n status: valid ? \"VALID\" : \"INVALID\",\n iban,\n masked: maskIBAN(iban),\n country,\n sepa_country: sepaCountry,\n length_valid: lengthValid,\n checksum_valid: checksumValid,\n reason: !sepaCountry\n ? `Country ${country} is not in the SEPA zone`\n : !lengthValid\n ? `IBAN length invalid for country ${country}`\n : !checksumValid\n ? \"MOD97 checksum failed — IBAN number is incorrect\"\n : \"IBAN is valid and SEPA-compliant\",\n });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n\n// ─────────────────────────────────────────\n// DNI / NIE Helpers\n// ─────────────────────────────────────────\nconst DNI_LETTERS = \"TRWAGMYFPDXBNJZSQVHLCKE\";\n\nfunction detectIDType(id: string): \"DNI\" | \"NIE\" | \"PASSPORT\" | \"UNKNOWN\" {\n if (/^\\d{8}[A-Z]$/.test(id)) return \"DNI\";\n if (/^[XYZ]\\d{7}[A-Z]$/.test(id)) return \"NIE\";\n if (/^[A-Z]{3}\\d{6}[A-Z]?$/.test(id)) return \"PASSPORT\";\n return \"UNKNOWN\";\n}\n\nfunction validateDNI(dni: string): boolean {\n const number = parseInt(dni.slice(0, 8), 10);\n const letter = dni.slice(-1);\n return DNI_LETTERS[number % 23] === letter;\n}\n\nfunction validateNIE(nie: string): boolean {\n const prefixMap: Record = { X: \"0\", Y: \"1\", Z: \"2\" };\n const normalized = prefixMap[nie[0]] + nie.slice(1, -1);\n const number = parseInt(normalized, 10);\n const letter = nie.slice(-1);\n return DNI_LETTERS[number % 23] === letter;\n}\n\nfunction validatePassport(passport: string): boolean {\n return /^[A-Z]{3}\\d{6}[A-Z]?$/.test(passport);\n}\n\n// ─────────────────────────────────────────\n// IBAN / SEPA Helpers\n// ─────────────────────────────────────────\nconst IBAN_LENGTHS: Record = {\n ES: 24,\n DE: 22,\n FR: 27,\n IT: 27,\n NL: 18,\n PT: 25,\n BE: 16,\n AT: 20,\n CH: 21,\n GB: 22,\n PL: 28,\n SE: 24,\n};\n\nconst SEPA_COUNTRIES = new Set([\n \"AT\",\n \"BE\",\n \"BG\",\n \"CH\",\n \"CY\",\n \"CZ\",\n \"DE\",\n \"DK\",\n \"EE\",\n \"ES\",\n \"FI\",\n \"FR\",\n \"GB\",\n \"GR\",\n \"HR\",\n \"HU\",\n \"IE\",\n \"IS\",\n \"IT\",\n \"LI\",\n \"LT\",\n \"LU\",\n \"LV\",\n \"MC\",\n \"MT\",\n \"NL\",\n \"NO\",\n \"PL\",\n \"PT\",\n \"RO\",\n \"SE\",\n \"SI\",\n \"SK\",\n \"SM\",\n \"VA\",\n]);\n\nfunction validateIBANLength(iban: string): boolean {\n const expected = IBAN_LENGTHS[iban.slice(0, 2)];\n return expected ? iban.length === expected : iban.length >= 15;\n}\n\nfunction validateMOD97(iban: string): boolean {\n const rearranged = iban.slice(4) + iban.slice(0, 4);\n const numeric = rearranged\n .split(\"\")\n .map((c) => {\n const code = c.charCodeAt(0);\n return code >= 65 ? (code - 55).toString() : c;\n })\n .join(\"\");\n\n let remainder = 0;\n for (const chunk of numeric.match(/.{1,9}/g) || []) {\n remainder = parseInt(`${remainder}${chunk}`, 10) % 97;\n }\n return remainder === 1;\n}\n\nfunction isSepaCountry(country: string): boolean {\n return SEPA_COUNTRIES.has(country);\n}\n\nfunction maskIBAN(iban: string): string {\n return iban.slice(0, 4) + \" **** **** \" + iban.slice(-4);\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data, null, 2), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}",[143],"478c0928-1a0c-11f1-8f29-42dde27851f2","registryServer.ts","d2d24ba8-18ba-11f1-84fb-42dde27851f2",36,["D",1772877546734],6,"// @valtown/http\n// Val Server 1 — Registry (SIPS + CAU)\n// Lumina Energia Demo | Customer: Carlos Garcia Martinez\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst SIPS_KEY = \"retailflow_sips_records\";\nconst CAU_KEY = \"retailflow_cau_records\";\n\ntype SIPSRecord = {\n cups: string;\n holder_id: string;\n holder_name: string;\n connection_point_status: string;\n pv_rooftop_attributes_allowed: boolean;\n contracted_capacity_kw: number;\n supply_voltage: string;\n supply_frequency: string;\n tariff: string;\n municipality: string;\n address: string;\n postcode: string;\n meter_type: string;\n meter_no: string;\n meter_remote_configurable: boolean;\n existing_pv_rooftop: boolean;\n retailer_id: string;\n retailer_name: string;\n retailer_email: string;\n distributor: string;\n distribution_zone: string;\n cnmc_license: string;\n};\n\ntype CAURecord = {\n cau: string;\n cups: string;\n holder_id: string;\n generation_technology: string;\n installed_capacity_kw: number;\n modality: string;\n issued_at: string;\n valid_until: string;\n status: string;\n};\n\n// ─────────────────────────────────────────\n// SEED DATA\n// Correct CUPS: ES0031406000045001JN0F (from bill)\n// Wrong CUPS submitted by customer: ES0031406000045001JN0G (last char G vs F)\n// ─────────────────────────────────────────\nconst SEED_SIPS: SIPSRecord[] = [\n {\n cups: \"ES0031406000045001JN0F\",\n holder_id: \"52847163V\",\n holder_name: \"Carlos Garcia Martinez\",\n connection_point_status: \"active\",\n pv_rooftop_attributes_allowed: true,\n contracted_capacity_kw: 3.45,\n supply_voltage: \"230 V AC, Single Phase\",\n supply_frequency: \"50 Hz\",\n tariff: \"2.0TD\",\n municipality: \"Madrid\",\n address: \"Calle Gran Via, 32, 4B\",\n postcode: \"28013\",\n meter_type: \"bidirectional_smart\",\n meter_no: \"MTR-20250100347\",\n meter_remote_configurable: true,\n existing_pv_rooftop: false,\n retailer_id: \"RET-00471\",\n retailer_name: \"Lumina Energia S.A.\",\n retailer_email: \"facturacion@luminaenergia.es\",\n distributor: \"Iberdrola Distribucion Electrica S.A.U.\",\n distribution_zone: \"Zone 3 - Madrid Metropolitan Area\",\n cnmc_license: \"COR-2018-00471\",\n },\n // ES0031406000045001JN0G (wrong CUPS) intentionally NOT in list → INEXISTENT\n];\n\nconst SEED_CAU: CAURecord[] = [\n {\n cau: \"CAU-2024-00142\",\n cups: \"ES0031406000045001JN0F\",\n holder_id: \"52847163K\",\n generation_technology: \"Photovoltaic\",\n installed_capacity_kw: 3.0,\n modality: \"SinCompensacion\",\n issued_at: \"2024-06-01\",\n valid_until: \"2034-06-01\",\n status: \"active\",\n },\n];\n\nasync function getSIPS(): Promise {\n const raw = await blob.getJSON(SIPS_KEY);\n return Array.isArray(raw) && raw.length > 0 ? raw : SEED_SIPS;\n}\n\nasync function getCAU(): Promise {\n const raw = await blob.getJSON(CAU_KEY);\n return Array.isArray(raw) && raw.length > 0 ? raw : SEED_CAU;\n}\n\nexport default async function handler(req: Request) {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // ─────────────────────────────────────────\n // GET / — list all SIPS records\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && (path === \"/\" || path === \"\")) {\n const records = await getSIPS();\n return json({ count: records.length, records });\n }\n\n // ─────────────────────────────────────────\n // GET /sips/lookup?cups=\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/sips/lookup\")) {\n const cups = url.searchParams.get(\"cups\");\n if (!cups) return json({ error: \"Missing required parameter: cups\" }, 400);\n\n const records = await getSIPS();\n const record = records.find((r) => r.cups === cups);\n\n if (!record) {\n return json({\n status: \"INEXISTENT\",\n cups,\n message: \"CUPS not found in SIPS database\",\n });\n }\n return json({ status: \"EXISTS\", cups, record });\n }\n\n // ─────────────────────────────────────────\n // GET /sips/match?cups=&holder_id=\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/sips/match\")) {\n const cups = url.searchParams.get(\"cups\");\n const holder_id = url.searchParams.get(\"holder_id\");\n if (!cups || !holder_id) {\n return json(\n { error: \"Missing required parameters: cups, holder_id\" },\n 400,\n );\n }\n\n const records = await getSIPS();\n const record = records.find((r) => r.cups === cups);\n\n if (!record) {\n return json({\n status: \"INEXISTENT\",\n cups,\n message: \"CUPS not found in SIPS database\",\n });\n }\n\n const match = record.holder_id === holder_id;\n return json({\n status: match ? \"MATCH\" : \"MISMATCH\",\n cups,\n holder_id_submitted: holder_id,\n holder_id_registered: record.holder_id,\n });\n }\n\n // ─────────────────────────────────────────\n // GET /sips/status?cups=\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/sips/status\")) {\n const cups = url.searchParams.get(\"cups\");\n if (!cups) return json({ error: \"Missing required parameter: cups\" }, 400);\n\n const records = await getSIPS();\n const record = records.find((r) => r.cups === cups);\n\n if (!record) {\n return json({\n status: \"INEXISTENT\",\n cups,\n message: \"CUPS not found in SIPS database\",\n });\n }\n\n return json({\n status: \"EXISTS\",\n cups,\n connection_point_status: record.connection_point_status,\n pv_rooftop_attributes_allowed: record.pv_rooftop_attributes_allowed,\n existing_pv_rooftop: record.existing_pv_rooftop,\n meter_type: record.meter_type,\n meter_remote_configurable: record.meter_remote_configurable,\n });\n }\n\n // ─────────────────────────────────────────\n // POST /sips/update — write activation data\n // ─────────────────────────────────────────\n if (req.method === \"POST\" && path.endsWith(\"/sips/update\")) {\n try {\n const body = await req.json();\n const { cups, ...updates } = body;\n if (!cups) return json({ error: \"Missing required field: cups\" }, 400);\n\n const records = await getSIPS();\n const index = records.findIndex((r) => r.cups === cups);\n if (index === -1) return json({ status: \"INEXISTENT\", cups }, 404);\n\n records[index] = { ...records[index], ...updates };\n await blob.setJSON(SIPS_KEY, records);\n return json({\n status: \"UPDATED\",\n cups,\n updatedFields: Object.keys(updates),\n record: records[index],\n });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // GET /cau/lookup?cau= OR ?cups=\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/cau/lookup\")) {\n const cau = url.searchParams.get(\"cau\");\n const cups = url.searchParams.get(\"cups\");\n if (!cau && !cups) {\n return json({ error: \"Missing required parameter: cau or cups\" }, 400);\n }\n\n const records = await getCAU();\n const record = cau\n ? records.find((r) => r.cau === cau)\n : records.find((r) => r.cups === cups);\n\n if (!record) {\n return json({ status: \"INEXISTENT\", message: \"CAU record not found\" });\n }\n return json({ status: \"EXISTS\", record });\n }\n\n // ─────────────────────────────────────────\n // POST /cau/issue — register new CAU\n // ─────────────────────────────────────────\n if (req.method === \"POST\" && path.endsWith(\"/cau/issue\")) {\n try {\n const body = await req.json();\n const records = await getCAU();\n records.push({ ...body, issued_at: new Date().toISOString() });\n await blob.setJSON(CAU_KEY, records);\n return json({ status: \"ISSUED\", record: body }, 201);\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // DELETE /sips/reset\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && path.endsWith(\"/sips/reset\")) {\n await blob.setJSON(SIPS_KEY, SEED_SIPS);\n return json({ status: \"reset\", count: SEED_SIPS.length });\n }\n\n // ─────────────────────────────────────────\n // DELETE /cau/reset\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && path.endsWith(\"/cau/reset\")) {\n await blob.setJSON(CAU_KEY, SEED_CAU);\n return json({ status: \"reset\", count: SEED_CAU.length });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data, null, 2), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}",[151],"8157e3ea-18bb-11f1-a1e9-42dde27851f2","operations.ts","7a6f58f6-18bb-11f1-a785-42dde27851f2",27,["D",1772732903301],"// @valtown/http\n// Val Server 6 — Operations (Meter Activation + Field Scheduler + Case Management)\n// Lumina Energia Demo | Post-approval execution actions\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst METER_KEY = \"lumina_meter_activations\";\nconst SCHEDULER_KEY = \"lumina_field_jobs\";\nconst CASE_KEY = \"lumina_cases\";\n\ntype MeterActivation = {\n activation_id: string;\n application_id: string;\n cups: string;\n meter_no: string;\n activation_type: \"remote\" | \"onsite\";\n status: \"pending\" | \"in_progress\" | \"completed\" | \"failed\";\n requested_at: string;\n completed_at: string | null;\n effective_date: string | null;\n notes: string;\n};\n\ntype FieldJob = {\n job_id: string;\n application_id: string;\n cups: string;\n job_type: string;\n address: string;\n scheduled_date: string;\n technician: string | null;\n status: \"scheduled\" | \"in_progress\" | \"completed\" | \"cancelled\";\n created_at: string;\n completed_at: string | null;\n activities: { name: string; status: \"pending\" | \"completed\" }[];\n};\n\ntype Case = {\n case_id: string;\n application_id: string;\n cups: string;\n opened_at: string;\n closed_at: string | null;\n status: \"open\" | \"closed\";\n resolution: string | null;\n};\n\nasync function get(key: string): Promise {\n const raw = await blob.getJSON(key);\n return Array.isArray(raw) ? raw : [];\n}\n\nasync function save(key: string, data: T[]): Promise {\n await blob.setJSON(key, data);\n}\n\nexport default async function handler(req: Request) {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // ─────────────────────────────────────────\n // GET / — service overview\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && (path === \"/\" || path === \"\")) {\n const meters = await get(METER_KEY);\n const jobs = await get(SCHEDULER_KEY);\n const cases = await get(CASE_KEY);\n return json({\n service: \"Lumina Energia — Operations Service\",\n counts: {\n meter_activations: meters.length,\n field_jobs: jobs.length,\n cases: cases.length,\n },\n });\n }\n\n // ═══════════════════════════════════════════\n // METER ACTIVATION\n // ═══════════════════════════════════════════\n\n // POST /meter/activate\n // Body: { application_id, cups, meter_no, activation_type, effective_date }\n if (req.method === \"POST\" && path.endsWith(\"/meter/activate\")) {\n try {\n const body = await req.json();\n const {\n application_id,\n cups,\n meter_no,\n activation_type,\n effective_date,\n } = body;\n\n if (!application_id || !cups || !activation_type) {\n return json({\n error:\n \"Missing required fields: application_id, cups, activation_type\",\n }, 400);\n }\n\n const records = await get(METER_KEY);\n const activation_id = `ACT-${application_id}-${Date.now()}`;\n\n const newRecord: MeterActivation = {\n activation_id,\n application_id,\n cups,\n meter_no: meter_no || \"MTR-20250100347\",\n activation_type,\n status: activation_type === \"remote\" ? \"completed\" : \"scheduled\",\n requested_at: new Date().toISOString(),\n completed_at: activation_type === \"remote\"\n ? new Date().toISOString()\n : null,\n effective_date: effective_date || null,\n notes: activation_type === \"remote\"\n ? \"Remote activation completed via smart meter\"\n : \"On-site activation — field job scheduled\",\n };\n\n records.push(newRecord);\n await save(METER_KEY, records);\n\n return json({ status: \"ACTIVATED\", activation: newRecord }, 201);\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // GET /meter/status?application_id=\n if (req.method === \"GET\" && path.endsWith(\"/meter/status\")) {\n const application_id = url.searchParams.get(\"application_id\");\n if (!application_id) {\n return json({ error: \"Missing required parameter: application_id\" }, 400);\n }\n\n const records = await get(METER_KEY);\n const record = records.find((r) => r.application_id === application_id);\n if (!record) return json({ status: \"NOT_FOUND\" }, 404);\n return json(record);\n }\n\n // ═══════════════════════════════════════════\n // FIELD SCHEDULER\n // ═══════════════════════════════════════════\n\n // POST /scheduler/create\n // Body: { application_id, cups, job_type, address, scheduled_date, activities[] }\n if (req.method === \"POST\" && path.endsWith(\"/scheduler/create\")) {\n try {\n const body = await req.json();\n const {\n application_id,\n cups,\n job_type,\n address,\n scheduled_date,\n activities,\n } = body;\n\n if (!application_id || !cups || !job_type || !scheduled_date) {\n return json({\n error:\n \"Missing required fields: application_id, cups, job_type, scheduled_date\",\n }, 400);\n }\n\n const jobs = await get(SCHEDULER_KEY);\n const job_id = `JOB-${application_id}-${Date.now()}`;\n\n const newJob: FieldJob = {\n job_id,\n application_id,\n cups,\n job_type,\n address: address || \"Calle Gran Via, 32, 4B, 28013 Madrid\",\n scheduled_date,\n technician: null,\n status: \"scheduled\",\n created_at: new Date().toISOString(),\n completed_at: null,\n activities: (activities || []).map((a: string) => ({\n name: a,\n status: \"pending\",\n })),\n };\n\n jobs.push(newJob);\n await save(SCHEDULER_KEY, jobs);\n\n return json({ status: \"SCHEDULED\", job: newJob }, 201);\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // PATCH /scheduler/update\n // Body: { job_id, status, technician?, completed_at?, activities? }\n if (req.method === \"PATCH\" && path.endsWith(\"/scheduler/update\")) {\n try {\n const body = await req.json();\n const { job_id, ...updates } = body;\n if (!job_id) {\n return json({ error: \"Missing required field: job_id\" }, 400);\n }\n\n const jobs = await get(SCHEDULER_KEY);\n const index = jobs.findIndex((j) => j.job_id === job_id);\n if (index === -1) return json({ error: \"Job not found\", job_id }, 404);\n\n jobs[index] = { ...jobs[index], ...updates };\n if (updates.status === \"completed\") {\n jobs[index].completed_at = new Date().toISOString();\n }\n\n await save(SCHEDULER_KEY, jobs);\n return json({ status: \"UPDATED\", job: jobs[index] });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // GET /scheduler/status?application_id=\n if (req.method === \"GET\" && path.endsWith(\"/scheduler/status\")) {\n const application_id = url.searchParams.get(\"application_id\");\n if (!application_id) {\n return json({ error: \"Missing required parameter: application_id\" }, 400);\n }\n\n const jobs = await get(SCHEDULER_KEY);\n const job = jobs.find((j) => j.application_id === application_id);\n if (!job) return json({ status: \"NOT_FOUND\" }, 404);\n return json(job);\n }\n\n // ═══════════════════════════════════════════\n // CASE MANAGEMENT\n // ═══════════════════════════════════════════\n\n // POST /case/create\n // Body: { application_id, cups }\n if (req.method === \"POST\" && path.endsWith(\"/case/create\")) {\n try {\n const body = await req.json();\n const { application_id, cups } = body;\n if (!application_id || !cups) {\n return json(\n { error: \"Missing required fields: application_id, cups\" },\n 400,\n );\n }\n\n const cases = await get(CASE_KEY);\n const case_id = `CASE-${application_id}-${Date.now()}`;\n\n const newCase: Case = {\n case_id,\n application_id,\n cups,\n opened_at: new Date().toISOString(),\n closed_at: null,\n status: \"open\",\n resolution: null,\n };\n\n cases.push(newCase);\n await save(CASE_KEY, cases);\n\n return json({ status: \"CREATED\", case: newCase }, 201);\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // PATCH /case/close\n // Body: { application_id, resolution }\n if (req.method === \"PATCH\" && path.endsWith(\"/case/close\")) {\n try {\n const body = await req.json();\n const { application_id, resolution } = body;\n if (!application_id) {\n return json({ error: \"Missing required field: application_id\" }, 400);\n }\n\n const cases = await get(CASE_KEY);\n const index = cases.findIndex((c) => c.application_id === application_id);\n if (index === -1) {\n return json({ error: \"Case not found\", application_id }, 404);\n }\n\n cases[index].status = \"closed\";\n cases[index].closed_at = new Date().toISOString();\n cases[index].resolution = resolution || \"Resolved\";\n\n await save(CASE_KEY, cases);\n return json({ status: \"CLOSED\", case: cases[index] });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // GET /case/status?application_id=\n if (req.method === \"GET\" && path.endsWith(\"/case/status\")) {\n const application_id = url.searchParams.get(\"application_id\");\n if (!application_id) {\n return json({ error: \"Missing required parameter: application_id\" }, 400);\n }\n\n const cases = await get(CASE_KEY);\n const c = cases.find((x) => x.application_id === application_id);\n if (!c) return json({ status: \"NOT_FOUND\" }, 404);\n return json(c);\n }\n\n // ─────────────────────────────────────────\n // DELETE /reset — clear all operations data\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && path.endsWith(\"/reset\")) {\n await save(METER_KEY, []);\n await save(SCHEDULER_KEY, []);\n await save(CASE_KEY, []);\n return json({\n status: \"reset\",\n cleared: [\"meter_activations\", \"field_jobs\", \"cases\"],\n });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data, null, 2), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}",[159],"287f78e6-18bb-11f1-8211-42dde27851f2","customerService.ts","1c8259fa-18bb-11f1-b775-42dde27851f2",17,["D",1772732754244],"// @valtown/http\n// Val Server 3 — Customer Services (CRM + OTP)\n// Lumina Energia Demo | Customer: Carlos Garcia Martinez\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst CRM_KEY = \"lumina_crm_customers\";\nconst OTP_KEY = \"lumina_otp_sessions\";\n\ntype Contract = {\n contract_id: string;\n cups: string;\n supply_type: string;\n tariff: string;\n contracted_power_kw: number;\n status: string;\n start_date: string;\n end_date: string | null;\n};\n\ntype Customer = {\n customer_id: string;\n customer_name: string;\n email: string;\n phone: string;\n type: \"existing\" | \"new\";\n since: string;\n contracts: Contract[];\n payment_history: {\n total_invoices: number;\n paid_on_time: number;\n late_payments: number;\n unpaid: number;\n unpaid_amount_eur: number;\n credit_score: string;\n };\n billing: {\n account_holder: string;\n iban: string;\n billing_address: string;\n };\n vulnerable_customer: boolean;\n notes: string;\n};\n\ntype OTPSession = {\n session_id: string;\n application_id: string;\n phone: string;\n otp: string;\n created_at: string;\n expires_at: string;\n verified: boolean;\n verified_at: string | null;\n};\n\n// ─────────────────────────────────────────\n// SEED DATA — Carlos Garcia Martinez\n// From Lumina Energia electricity bill LUM-2025-038471\n// ─────────────────────────────────────────\nconst SEED_CUSTOMERS: Customer[] = [\n {\n customer_id: \"52847163K\",\n customer_name: \"Carlos Garcia Martinez\",\n email: \"carlos.garcia@gmail.com\",\n phone: \"+34612345678\",\n type: \"existing\",\n since: \"2022-01-01\",\n contracts: [\n {\n contract_id: \"LUM-CTR-2022-00291\",\n cups: \"ES0031406000045001JN0F\",\n supply_type: \"Electricity\",\n tariff: \"2.0TD\",\n contracted_power_kw: 3.45,\n status: \"active\",\n start_date: \"2022-01-01\",\n end_date: null,\n },\n ],\n payment_history: {\n total_invoices: 38,\n paid_on_time: 38,\n late_payments: 0,\n unpaid: 0,\n unpaid_amount_eur: 0,\n credit_score: \"excellent\",\n },\n billing: {\n account_holder: \"Carlos Garcia Martinez\",\n iban: \"ES9121000418450200051332\",\n billing_address: \"Calle Gran Via, 32, 4B, 28013 Madrid\",\n },\n vulnerable_customer: false,\n notes:\n \"Existing Lumina Energia customer since 2022. Perfect payment record.\",\n },\n];\n\nasync function getCustomers(): Promise {\n const raw = await blob.getJSON(CRM_KEY);\n return Array.isArray(raw) && raw.length > 0 ? raw : SEED_CUSTOMERS;\n}\n\nasync function getOTPSessions(): Promise {\n const raw = await blob.getJSON(OTP_KEY);\n return Array.isArray(raw) ? raw : [];\n}\n\nfunction generateOTP(): string {\n return Math.floor(1000 + Math.random() * 9000).toString();\n}\n\nexport default async function handler(req: Request) {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // ─────────────────────────────────────────\n // GET / — list all customers\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && (path === \"/\" || path === \"\")) {\n const customers = await getCustomers();\n return json({ count: customers.length, customers });\n }\n\n // ─────────────────────────────────────────\n // GET /crm/lookup?customer_id=52847163K\n // Full customer profile + history\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/crm/lookup\")) {\n const customer_id = url.searchParams.get(\"customer_id\");\n if (!customer_id) {\n return json({ error: \"Missing required parameter: customer_id\" }, 400);\n }\n\n const customers = await getCustomers();\n const customer = customers.find((c) => c.customer_id === customer_id);\n\n if (!customer) {\n return json({\n status: \"NEW_CUSTOMER\",\n customer_id,\n message: \"No records found — customer is new\",\n });\n }\n\n return json({ status: \"EXISTING_CUSTOMER\", customer_id, customer });\n }\n\n // ─────────────────────────────────────────\n // GET /crm/debts?customer_id=52847163K\n // Unpaid debt summary only\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/crm/debts\")) {\n const customer_id = url.searchParams.get(\"customer_id\");\n if (!customer_id) {\n return json({ error: \"Missing required parameter: customer_id\" }, 400);\n }\n\n const customers = await getCustomers();\n const customer = customers.find((c) => c.customer_id === customer_id);\n\n if (!customer) {\n return json({\n status: \"NEW_CUSTOMER\",\n customer_id,\n unpaid: 0,\n unpaid_amount_eur: 0,\n });\n }\n\n return json({\n status: \"FOUND\",\n customer_id,\n unpaid: customer.payment_history.unpaid,\n unpaid_amount_eur: customer.payment_history.unpaid_amount_eur,\n credit_score: customer.payment_history.credit_score,\n has_debt: customer.payment_history.unpaid > 0,\n });\n }\n\n // ─────────────────────────────────────────\n // POST /otp/send\n // Body: { application_id, phone }\n // Generates and stores OTP session (mock — logs OTP in response for demo)\n // ─────────────────────────────────────────\n if (req.method === \"POST\" && path.endsWith(\"/otp/send\")) {\n try {\n const body = await req.json();\n const { application_id, phone } = body;\n if (!application_id || !phone) {\n return json(\n { error: \"Missing required fields: application_id, phone\" },\n 400,\n );\n }\n\n const otp = generateOTP();\n const now = new Date();\n const expires = new Date(now.getTime() + 10 * 60 * 1000); // 10 min\n\n const session: OTPSession = {\n session_id: `OTP-${application_id}-${now.getTime()}`,\n application_id,\n phone,\n otp,\n created_at: now.toISOString(),\n expires_at: expires.toISOString(),\n verified: false,\n verified_at: null,\n };\n\n const sessions = await getOTPSessions();\n sessions.push(session);\n await blob.setJSON(OTP_KEY, sessions);\n\n return json({\n status: \"SENT\",\n session_id: session.session_id,\n phone,\n expires_at: session.expires_at,\n // Exposed for demo purposes only — remove in production\n demo_otp: otp,\n message: `OTP sent to ${phone}. Valid for 10 minutes.`,\n }, 201);\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // POST /otp/verify\n // Body: { session_id, otp }\n // ─────────────────────────────────────────\n if (req.method === \"POST\" && path.endsWith(\"/otp/verify\")) {\n try {\n const body = await req.json();\n const { session_id, otp } = body;\n if (!session_id || !otp) {\n return json({ error: \"Missing required fields: session_id, otp\" }, 400);\n }\n\n const sessions = await getOTPSessions();\n const index = sessions.findIndex((s) => s.session_id === session_id);\n\n if (index === -1) {\n return json(\n { status: \"NOT_FOUND\", message: \"OTP session not found\" },\n 404,\n );\n }\n\n const session = sessions[index];\n\n if (session.verified) {\n return json({ status: \"ALREADY_VERIFIED\", session_id });\n }\n\n if (new Date() > new Date(session.expires_at)) {\n return json({\n status: \"EXPIRED\",\n session_id,\n message: \"OTP has expired\",\n }, 400);\n }\n\n if (session.otp !== otp) {\n return json(\n { status: \"INVALID\", session_id, message: \"Incorrect OTP\" },\n 400,\n );\n }\n\n sessions[index].verified = true;\n sessions[index].verified_at = new Date().toISOString();\n await blob.setJSON(OTP_KEY, sessions);\n\n return json({\n status: \"VERIFIED\",\n session_id,\n application_id: session.application_id,\n verified_at: sessions[index].verified_at,\n message: \"Contract signed successfully via OTP\",\n });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // DELETE /crm/reset\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && path.endsWith(\"/crm/reset\")) {\n await blob.setJSON(CRM_KEY, SEED_CUSTOMERS);\n return json({ status: \"reset\", count: SEED_CUSTOMERS.length });\n }\n\n // ─────────────────────────────────────────\n // DELETE /otp/reset\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && path.endsWith(\"/otp/reset\")) {\n await blob.setJSON(OTP_KEY, []);\n return json({ status: \"reset\", sessions_cleared: true });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data, null, 2), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}",[166],"291e9d4e-18c6-11f1-a1f5-42dde27851f2","atrServer.ts","18a85fae-18c6-11f1-b0f0-42dde27851f2",32,["D",1772737479754],"// @valtown/http\n// Val Server 5 — ATR Lifecycle (Store + Status)\n// Lumina Energia Demo | XML generated by LLM, stored and tracked here\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst ATR_KEY = \"lumina_atr_requests\";\n\ntype ATRRecord = {\n atr_id: string;\n application_id: string;\n cups: string;\n submitted_by: string;\n submitted_at: string;\n status: \"pending\" | \"under_review\" | \"approved\" | \"rejected\";\n dso_response_at: string | null;\n rejection_reasons: string[];\n effective_date: string | null;\n xml_content: string;\n xml_updated_at: string;\n};\n\nasync function getATRRecords(): Promise {\n const raw = await blob.getJSON(ATR_KEY);\n return Array.isArray(raw) ? raw : [];\n}\n\nasync function saveATRRecords(records: ATRRecord[]): Promise {\n await blob.setJSON(ATR_KEY, records);\n}\n\nexport default async function handler(req: Request) {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // ─────────────────────────────────────────\n // GET / — list all ATR requests\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && (path === \"/\" || path === \"\")) {\n const records = await getATRRecords();\n return json({ count: records.length, records });\n }\n\n // ─────────────────────────────────────────\n // GET /atr/status?application_id=\n // Returns status + elapsed time since submission\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/atr/status\")) {\n const application_id = url.searchParams.get(\"application_id\");\n const atr_id = url.searchParams.get(\"atr_id\");\n\n if (!application_id && !atr_id) {\n return json({\n error: \"Missing required parameter: application_id or atr_id\",\n }, 400);\n }\n\n const records = await getATRRecords();\n const record = application_id\n ? records.find((r) => r.application_id === application_id)\n : records.find((r) => r.atr_id === atr_id);\n\n if (!record) {\n return json(\n { status: \"NOT_FOUND\", message: \"ATR request not found\" },\n 404,\n );\n }\n\n return json({\n atr_id: record.atr_id,\n application_id: record.application_id,\n cups: record.cups,\n status: record.status,\n submitted_at: record.submitted_at,\n submitted_by: record.submitted_by,\n elapsed: getElapsed(record.submitted_at),\n dso_response_at: record.dso_response_at,\n effective_date: record.effective_date,\n rejection_reasons: record.rejection_reasons,\n });\n }\n\n // ─────────────────────────────────────────\n // GET /atr/xml?application_id=\n // Returns raw XML for display in analyst screen\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/atr/xml\")) {\n const application_id = url.searchParams.get(\"application_id\");\n if (!application_id) {\n return json({ error: \"Missing required parameter: application_id\" }, 400);\n }\n\n const records = await getATRRecords();\n const record = records.find((r) => r.application_id === application_id);\n if (!record) return json({ status: \"NOT_FOUND\" }, 404);\n\n return new Response(record.xml_content, {\n status: 200,\n headers: { \"Content-Type\": \"application/xml\" },\n });\n }\n\n // ─────────────────────────────────────────\n // POST /atr/submit\n // Retailer submits LLM-generated ATR XML to DSO\n // Body: { application_id, cups, submitted_by, xml_content }\n // ─────────────────────────────────────────\n if (req.method === \"POST\" && path.endsWith(\"/atr/submit\")) {\n try {\n const body = await req.json();\n const { application_id, cups, submitted_by, xml_content } = body;\n\n if (!application_id || !cups || !submitted_by || !xml_content) {\n return json({\n error:\n \"Missing required fields: application_id, cups, submitted_by, xml_content\",\n }, 400);\n }\n\n const records = await getATRRecords();\n const existing = records.find((r) => r.application_id === application_id);\n\n if (existing) {\n return json({\n error: \"ATR already submitted for this application\",\n atr_id: existing.atr_id,\n }, 409);\n }\n\n const atr_id = `ATR-${application_id}-${Date.now()}`;\n const now = new Date().toISOString();\n\n const newRecord: ATRRecord = {\n atr_id,\n application_id,\n cups,\n submitted_by,\n submitted_at: now,\n status: \"pending\",\n dso_response_at: null,\n rejection_reasons: [],\n effective_date: null,\n xml_content,\n xml_updated_at: now,\n };\n\n records.push(newRecord);\n await saveATRRecords(records);\n\n return json({ status: \"SUBMITTED\", atr_id, submitted_at: now }, 201);\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // PATCH /atr/respond\n // DSO approves or rejects ATR\n // Body: { atr_id, status, rejection_reasons?, effective_date? }\n // ─────────────────────────────────────────\n if (req.method === \"PATCH\" && path.endsWith(\"/atr/respond\")) {\n try {\n const body = await req.json();\n const { atr_id, status, rejection_reasons, effective_date } = body;\n\n if (!atr_id || !status) {\n return json({ error: \"Missing required fields: atr_id, status\" }, 400);\n }\n\n if (![\"approved\", \"rejected\", \"under_review\"].includes(status)) {\n return json({\n error: \"status must be approved, rejected or under_review\",\n }, 400);\n }\n\n const records = await getATRRecords();\n const index = records.findIndex((r) => r.atr_id === atr_id);\n if (index === -1) return json({ error: \"ATR not found\", atr_id }, 404);\n\n records[index].status = status;\n records[index].dso_response_at = new Date().toISOString();\n records[index].rejection_reasons = rejection_reasons || [];\n records[index].effective_date = effective_date || null;\n\n await saveATRRecords(records);\n\n return json({\n status: \"UPDATED\",\n atr_id,\n atr_status: records[index].status,\n dso_response_at: records[index].dso_response_at,\n effective_date: records[index].effective_date,\n rejection_reasons: records[index].rejection_reasons,\n });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // PATCH /atr/xml\n // Update XML after correction and resubmit\n // Body: { application_id, xml_content }\n // ─────────────────────────────────────────\n if (req.method === \"PATCH\" && path.endsWith(\"/atr/xml\")) {\n try {\n const body = await req.json();\n const { application_id, xml_content } = body;\n\n if (!application_id || !xml_content) {\n return json({\n error: \"Missing required fields: application_id, xml_content\",\n }, 400);\n }\n\n const records = await getATRRecords();\n const index = records.findIndex((r) =>\n r.application_id === application_id\n );\n if (index === -1) {\n return json({ error: \"ATR not found\", application_id }, 404);\n }\n\n records[index].xml_content = xml_content;\n records[index].xml_updated_at = new Date().toISOString();\n records[index].status = \"pending\";\n records[index].dso_response_at = null;\n records[index].rejection_reasons = [];\n\n await saveATRRecords(records);\n\n return json({\n status: \"UPDATED\",\n application_id,\n atr_id: records[index].atr_id,\n xml_updated_at: records[index].xml_updated_at,\n });\n } catch (err: any) {\n return json({ error: err.message || \"Invalid JSON\" }, 400);\n }\n }\n\n // ─────────────────────────────────────────\n // DELETE /atr/reset\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && path.endsWith(\"/atr/reset\")) {\n await saveATRRecords([]);\n return json({ status: \"reset\" });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n\n// ─────────────────────────────────────────\n// Helpers\n// ─────────────────────────────────────────\nfunction getElapsed(\n submittedAt: string,\n): { days: number; hours: number; label: string } {\n const totalHours = Math.floor(\n (Date.now() - new Date(submittedAt).getTime()) / (1000 * 60 * 60),\n );\n const days = Math.floor(totalHours / 24);\n const hours = totalHours % 24;\n return { days, hours, label: `${days}d ${hours}h since submission` };\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data, null, 2), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}",[173],"c2c0d7ac-1acc-11f1-b728-42dde27851f2","MFlowValidation.ts","7534fa3c-1acb-11f1-9434-42dde27851f2",43,["D",1772960216813],5,"// @valtown/http\n// MortgageFlow — CRM + Validation Server\n// Customer records (source of truth) + IBAN/SWIFT/ratio validation\n// Demo: Elena Navarro — IBAN/bank mismatch intentionally seeded\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst CRM_KEY = \"mortgageflow_crm\";\n\n// ─────────────────────────────────────────\n// DEMO INTENTIONAL ERROR:\n// Submitted IBAN: ES9121000418450200051332 → CaixaBank (bank code 2100)\n// Submitted bank_name: Banco Santander\n// Submitted SWIFT: BSCHESMMXXX → Santander ✅\n// CRM holds correct Santander IBAN → ES6000491500051234567892\n// Auto-resolution agent will detect mismatch and correct to CRM value\n// ─────────────────────────────────────────\n\ntype CRMRecord = {\n customer_id: string;\n full_name: string;\n date_of_birth: string;\n nationality: string;\n id_number: string;\n email: string;\n phone: string;\n address: {\n street: string;\n city: string;\n zipCode: string;\n country: string;\n };\n banking: {\n bank_name: string;\n iban: string;\n swift: string;\n };\n signature_hash: string;\n employment: {\n employer_name: string;\n job_title: string;\n years_employed: number;\n annual_gross_income: number;\n };\n credit_history: string;\n kyc_verified: boolean;\n kyc_date: string;\n existing_products: string[];\n};\n\nconst SEED_CRM: CRMRecord[] = [\n {\n customer_id: \"50123456Y\",\n full_name: \"Elena Navarro\",\n date_of_birth: \"1988-03-22\",\n nationality: \"Spanish\",\n id_number: \"50123456Y\",\n email: \"elena.navarro@email.es\",\n phone: \"+34612000001\",\n address: {\n street: \"Gran Vía 28\",\n city: \"Madrid\",\n zipCode: \"28013\",\n country: \"Spain\",\n },\n banking: {\n // Correct Santander IBAN — differs from what applicant submitted\n bank_name: \"Banco Santander\",\n iban: \"ES6000491500051234567892\",\n swift: \"BSCHESMMXXX\",\n },\n signature_hash: \"SIG-EN-2024-00892\",\n employment: {\n employer_name: \"Boston Consulting Group\",\n job_title: \"Product Manager\",\n years_employed: 5,\n annual_gross_income: 165000,\n },\n credit_history: \"clean\",\n kyc_verified: true,\n kyc_date: \"2024-01-10\",\n existing_products: [],\n },\n];\n\nasync function getCRMRecords(): Promise {\n const raw = await blob.getJSON(CRM_KEY);\n return Array.isArray(raw) && raw.length > 0 ? raw : SEED_CRM;\n}\n\n// ─────────────────────────────────────────\n// IBAN helpers\n// ─────────────────────────────────────────\nconst IBAN_LENGTHS: Record = {\n ES: 24,\n DE: 22,\n FR: 27,\n IT: 27,\n NL: 18,\n PT: 25,\n BE: 16,\n AT: 20,\n CH: 21,\n GB: 22,\n PL: 28,\n SE: 24,\n};\n\nconst SEPA_COUNTRIES = new Set([\n \"AT\",\n \"BE\",\n \"BG\",\n \"CH\",\n \"CY\",\n \"CZ\",\n \"DE\",\n \"DK\",\n \"EE\",\n \"ES\",\n \"FI\",\n \"FR\",\n \"GB\",\n \"GR\",\n \"HR\",\n \"HU\",\n \"IE\",\n \"IS\",\n \"IT\",\n \"LI\",\n \"LT\",\n \"LU\",\n \"LV\",\n \"MC\",\n \"MT\",\n \"NL\",\n \"NO\",\n \"PL\",\n \"PT\",\n \"RO\",\n \"SE\",\n \"SI\",\n \"SK\",\n \"SM\",\n \"VA\",\n]);\n\n// Spanish bank codes (partial — for demo mismatch detection)\nconst SPANISH_BANK_CODES: Record = {\n \"0049\": \"Banco Santander\",\n \"2100\": \"CaixaBank\",\n \"0182\": \"BBVA\",\n \"0081\": \"Banco Sabadell\",\n \"2038\": \"Bankia\",\n \"1465\": \"ING Direct\",\n \"0075\": \"Banco Popular\",\n};\n\n// SWIFT BIC to bank name mapping (partial)\nconst SWIFT_TO_BANK: Record = {\n \"BSCHESMMXXX\": \"Banco Santander\",\n \"CAIXESBBXXX\": \"CaixaBank\",\n \"BBVAESMMXXX\": \"BBVA\",\n \"BSABESBBXXX\": \"Banco Sabadell\",\n \"INGDESMAXXX\": \"ING Direct\",\n \"DEUTDEBBXXX\": \"Deutsche Bank\",\n \"COBADEFFXXX\": \"Commerzbank\",\n};\n\nfunction validateMOD97(iban: string): boolean {\n const rearranged = iban.slice(4) + iban.slice(0, 4);\n const numeric = rearranged.split(\"\").map((c) => {\n const code = c.charCodeAt(0);\n return code >= 65 ? (code - 55).toString() : c;\n }).join(\"\");\n let remainder = 0;\n for (const chunk of numeric.match(/.{1,9}/g) || []) {\n remainder = parseInt(`${remainder}${chunk}`, 10) % 97;\n }\n return remainder === 1;\n}\n\nfunction maskIBAN(iban: string): string {\n return iban.slice(0, 4) + \" **** **** \" + iban.slice(-4);\n}\n\nfunction extractBankCode(iban: string): string | null {\n // Spanish IBAN: ES + 2 check + 4 bank code + rest\n if (iban.startsWith(\"ES\") && iban.length === 24) {\n return iban.slice(4, 8);\n }\n return null;\n}\n\nexport default async function handler(req: Request) {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // ─────────────────────────────────────────\n // GET / — service overview\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && (path === \"/\" || path === \"\")) {\n return json({\n service: \"MortgageFlow — CRM + Validation Server\",\n endpoints: [\n \"GET /crm/lookup?customer_id=\",\n \"GET /crm/verify-iban?customer_id=&iban=\",\n \"GET /crm/verify-swift?customer_id=&swift=\",\n \"GET /crm/verify-signature?customer_id=&signature_hash=\",\n \"GET /crm/kyc?customer_id=\",\n \"GET /validate/iban?iban=\",\n \"GET /validate/swift?swift=\",\n \"GET /validate/iban-swift?iban=&swift=\",\n \"GET /validate/ltv?purchase_price=&mortgage_amount=\",\n \"GET /validate/dti?monthly_income=&monthly_debts=\",\n ],\n });\n }\n\n // ═══════════════════════════════════════════\n // CRM ENDPOINTS\n // ═══════════════════════════════════════════\n\n // ─────────────────────────────────────────\n // GET /crm/lookup?customer_id=50123456Y\n // Full CRM profile\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/crm/lookup\")) {\n const customer_id = url.searchParams.get(\"customer_id\");\n if (!customer_id) {\n return json({ error: \"Missing required parameter: customer_id\" }, 400);\n }\n\n const records = await getCRMRecords();\n const record = records.find((r) => r.customer_id === customer_id);\n\n if (!record) {\n return json({\n status: \"NOT_FOUND\",\n customer_id,\n message: \"No CRM record found\",\n });\n }\n\n return json({ status: \"FOUND\", customer_id, record });\n }\n\n // ─────────────────────────────────────────\n // GET /crm/verify-iban?customer_id=&iban=\n // Checks submitted IBAN against CRM record\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/crm/verify-iban\")) {\n const customer_id = url.searchParams.get(\"customer_id\");\n const iban = url.searchParams.get(\"iban\")?.replace(/\\s+/g, \"\")\n .toUpperCase();\n\n if (!customer_id || !iban) {\n return json(\n { error: \"Missing required parameters: customer_id, iban\" },\n 400,\n );\n }\n\n const records = await getCRMRecords();\n const record = records.find((r) => r.customer_id === customer_id);\n\n if (!record) {\n return json({ status: \"CUSTOMER_NOT_FOUND\", customer_id }, 404);\n }\n\n const crmIBAN = record.banking.iban.replace(/\\s+/g, \"\").toUpperCase();\n const match = crmIBAN === iban;\n\n return json({\n status: match ? \"MATCH\" : \"MISMATCH\",\n submitted_iban: maskIBAN(iban),\n crm_iban: maskIBAN(crmIBAN),\n crm_iban_raw: crmIBAN, // for auto-resolution\n crm_bank_name: record.banking.bank_name,\n match,\n message: match\n ? \"IBAN matches CRM record\"\n : \"IBAN does not match CRM — auto-resolution recommended\",\n });\n }\n\n // ─────────────────────────────────────────\n // GET /crm/verify-swift?customer_id=&swift=\n // Checks submitted SWIFT against CRM record\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/crm/verify-swift\")) {\n const customer_id = url.searchParams.get(\"customer_id\");\n const swift = url.searchParams.get(\"swift\")?.toUpperCase();\n\n if (!customer_id || !swift) {\n return json(\n { error: \"Missing required parameters: customer_id, swift\" },\n 400,\n );\n }\n\n const records = await getCRMRecords();\n const record = records.find((r) => r.customer_id === customer_id);\n\n if (!record) {\n return json({ status: \"CUSTOMER_NOT_FOUND\", customer_id }, 404);\n }\n\n const match = record.banking.swift.toUpperCase() === swift;\n\n return json({\n status: match ? \"MATCH\" : \"MISMATCH\",\n submitted_swift: swift,\n crm_swift: record.banking.swift,\n crm_bank_name: record.banking.bank_name,\n match,\n message: match\n ? \"SWIFT matches CRM record\"\n : \"SWIFT does not match CRM record\",\n });\n }\n\n // ─────────────────────────────────────────\n // GET /crm/verify-signature?customer_id=&signature_hash=\n // Checks signature hash against CRM record\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/crm/verify-signature\")) {\n const customer_id = url.searchParams.get(\"customer_id\");\n const signature_hash = url.searchParams.get(\"signature_hash\");\n\n if (!customer_id || !signature_hash) {\n return json({\n error: \"Missing required parameters: customer_id, signature_hash\",\n }, 400);\n }\n\n const records = await getCRMRecords();\n const record = records.find((r) => r.customer_id === customer_id);\n\n if (!record) {\n return json({ status: \"CUSTOMER_NOT_FOUND\", customer_id }, 404);\n }\n\n const match = record.signature_hash === signature_hash;\n\n return json({\n status: match ? \"MATCH\" : \"MISMATCH\",\n submitted_hash: signature_hash,\n match,\n message: match\n ? \"Signature matches CRM record\"\n : \"Signature does not match CRM — manual review required\",\n });\n }\n\n // ─────────────────────────────────────────\n // GET /crm/kyc?customer_id=\n // Returns KYC verification status\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/crm/kyc\")) {\n const customer_id = url.searchParams.get(\"customer_id\");\n if (!customer_id) {\n return json({ error: \"Missing required parameter: customer_id\" }, 400);\n }\n\n const records = await getCRMRecords();\n const record = records.find((r) => r.customer_id === customer_id);\n\n if (!record) {\n return json({ status: \"CUSTOMER_NOT_FOUND\", customer_id }, 404);\n }\n\n return json({\n status: record.kyc_verified ? \"VERIFIED\" : \"NOT_VERIFIED\",\n customer_id,\n kyc_verified: record.kyc_verified,\n kyc_date: record.kyc_date,\n credit_history: record.credit_history,\n });\n }\n\n // ═══════════════════════════════════════════\n // VALIDATION ENDPOINTS\n // ═══════════════════════════════════════════\n\n // ─────────────────────────────────────────\n // GET /validate/iban?iban=ES6000491500051234567892\n // IBAN format + MOD97 + SEPA check\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/validate/iban\")) {\n const raw = url.searchParams.get(\"iban\");\n if (!raw) return json({ error: \"Missing required parameter: iban\" }, 400);\n\n const iban = raw.replace(/\\s+/g, \"\").toUpperCase();\n const country = iban.slice(0, 2);\n const lengthValid = IBAN_LENGTHS[country]\n ? iban.length === IBAN_LENGTHS[country]\n : iban.length >= 15;\n const checksumValid = validateMOD97(iban);\n const sepaCountry = SEPA_COUNTRIES.has(country);\n const valid = lengthValid && checksumValid && sepaCountry;\n\n const bankCode = extractBankCode(iban);\n const detectedBank = bankCode\n ? SPANISH_BANK_CODES[bankCode] || \"Unknown\"\n : null;\n\n return json({\n status: valid ? \"VALID\" : \"INVALID\",\n iban,\n masked: maskIBAN(iban),\n country,\n sepa_country: sepaCountry,\n length_valid: lengthValid,\n checksum_valid: checksumValid,\n detected_bank: detectedBank,\n bank_code: bankCode,\n reason: !sepaCountry\n ? `Country ${country} is not in the SEPA zone`\n : !lengthValid\n ? `IBAN length invalid for country ${country}`\n : !checksumValid\n ? \"MOD97 checksum failed\"\n : \"IBAN is valid and SEPA-compliant\",\n });\n }\n\n // ─────────────────────────────────────────\n // GET /validate/swift?swift=BSCHESMMXXX\n // SWIFT/BIC format validation\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/validate/swift\")) {\n const raw = url.searchParams.get(\"swift\");\n if (!raw) return json({ error: \"Missing required parameter: swift\" }, 400);\n\n const swift = raw.toUpperCase().trim();\n // BIC format: 4 letters (bank) + 2 letters (country) + 2 alphanumeric (location) + optional 3 (branch)\n const bicRegex = /^[A-Z]{4}[A-Z]{2}[A-Z0-9]{2}([A-Z0-9]{3})?$/;\n const valid = bicRegex.test(swift);\n const country = swift.slice(4, 6);\n const detectedBank = SWIFT_TO_BANK[swift] || null;\n\n return json({\n status: valid ? \"VALID\" : \"INVALID\",\n swift,\n country,\n detected_bank: detectedBank,\n reason: valid\n ? \"SWIFT/BIC format is valid\"\n : \"SWIFT/BIC format is invalid — expected 8 or 11 character BIC\",\n });\n }\n\n // ─────────────────────────────────────────\n // GET /validate/iban-swift?iban=&swift=\n // Cross-checks IBAN and SWIFT consistency\n // Key check: detected bank from IBAN matches bank from SWIFT\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/validate/iban-swift\")) {\n const rawIBAN = url.searchParams.get(\"iban\");\n const rawSWIFT = url.searchParams.get(\"swift\");\n\n if (!rawIBAN || !rawSWIFT) {\n return json({ error: \"Missing required parameters: iban, swift\" }, 400);\n }\n\n const iban = rawIBAN.replace(/\\s+/g, \"\").toUpperCase();\n const swift = rawSWIFT.toUpperCase().trim();\n\n const ibanCountry = iban.slice(0, 2);\n const swiftCountry = swift.slice(4, 6);\n const countryMatch = ibanCountry === swiftCountry;\n\n const bankCode = extractBankCode(iban);\n const ibanBank = bankCode ? SPANISH_BANK_CODES[bankCode] || null : null;\n const swiftBank = SWIFT_TO_BANK[swift] || null;\n\n const bankMatch = ibanBank && swiftBank ? ibanBank === swiftBank : null;\n\n return json({\n status: countryMatch && bankMatch !== false\n ? \"CONSISTENT\"\n : \"INCONSISTENT\",\n iban: maskIBAN(iban),\n swift,\n iban_country: ibanCountry,\n swift_country: swiftCountry,\n country_match: countryMatch,\n iban_detected_bank: ibanBank,\n swift_detected_bank: swiftBank,\n bank_match: bankMatch,\n reason: !countryMatch\n ? `Country mismatch — IBAN country (${ibanCountry}) does not match SWIFT country (${swiftCountry})`\n : bankMatch === false\n ? `Bank mismatch — IBAN belongs to ${ibanBank} but SWIFT belongs to ${swiftBank}`\n : bankMatch === null\n ? \"Bank consistency could not be fully determined — manual check recommended\"\n : \"IBAN and SWIFT are consistent\",\n });\n }\n\n // ─────────────────────────────────────────\n // GET /validate/ltv?purchase_price=&mortgage_amount=\n // Loan-to-Value ratio check (must be <= 80%)\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/validate/ltv\")) {\n const purchase_price = parseFloat(\n url.searchParams.get(\"purchase_price\") || \"\",\n );\n const mortgage_amount = parseFloat(\n url.searchParams.get(\"mortgage_amount\") || \"\",\n );\n\n if (isNaN(purchase_price) || isNaN(mortgage_amount)) {\n return json({\n error: \"Missing required parameters: purchase_price, mortgage_amount\",\n }, 400);\n }\n\n const ltv = (mortgage_amount / purchase_price) * 100;\n const valid = ltv <= 80;\n\n return json({\n status: valid ? \"PASS\" : \"FAIL\",\n purchase_price,\n mortgage_amount,\n ltv_percent: Math.round(ltv * 100) / 100,\n threshold_percent: 80,\n reason: valid\n ? `LTV of ${ltv.toFixed(2)}% is within the 80% threshold`\n : `LTV of ${ltv.toFixed(2)}% exceeds the maximum allowed 80%`,\n });\n }\n\n // ─────────────────────────────────────────\n // GET /validate/dti?annual_gross_income=&monthly_debts=&additional_income=\n // Debt-to-Income ratio check (must be <= 40%)\n // ─────────────────────────────────────────\n if (req.method === \"GET\" && path.endsWith(\"/validate/dti\")) {\n const annual_gross_income = parseFloat(\n url.searchParams.get(\"annual_gross_income\") || \"\",\n );\n const additional_income = parseFloat(\n url.searchParams.get(\"additional_income\") || \"0\",\n );\n const monthly_debts = parseFloat(\n url.searchParams.get(\"monthly_debts\") || \"\",\n );\n\n if (isNaN(annual_gross_income) || isNaN(monthly_debts)) {\n return json({\n error:\n \"Missing required parameters: annual_gross_income, monthly_debts\",\n }, 400);\n }\n\n const monthly_gross_income = (annual_gross_income + additional_income) / 12;\n const dti = (monthly_debts / monthly_gross_income) * 100;\n const valid = dti <= 40;\n\n return json({\n status: valid ? \"PASS\" : \"FAIL\",\n annual_gross_income,\n additional_income,\n monthly_gross_income: Math.round(monthly_gross_income * 100) / 100,\n monthly_debts,\n dti_percent: Math.round(dti * 100) / 100,\n threshold_percent: 40,\n reason: valid\n ? `DTI of ${dti.toFixed(2)}% is within the 40% threshold`\n : `DTI of ${dti.toFixed(2)}% exceeds the maximum allowed 40%`,\n });\n }\n\n // ─────────────────────────────────────────\n // DELETE /crm/reset\n // ─────────────────────────────────────────\n if (req.method === \"DELETE\" && path.endsWith(\"/crm/reset\")) {\n await blob.setJSON(CRM_KEY, SEED_CRM);\n return json({ status: \"reset\", count: SEED_CRM.length });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data, null, 2), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}",[180],"463231f2-1b1e-11f1-9b83-42dde27851f2",["D",1772995226572],[28],"pulls","branches",1,"forks","envVars",{"_198":59,"_200":59},"connections",{"_198":59,"_199":59},"count","unfilledCount","emptyCount",{"_42":187,"_32":28,"_30":31,"_134":-5,"_40":41,"_39":14,"_136":118,"_37":231,"_13":155,"_33":34,"_35":36,"_24":25,"_140":-5,"_210":232,"_27":233},{"_42":179,"_32":180,"_30":181,"_134":-5,"_40":41,"_39":182,"_136":118,"_37":228,"_13":184,"_33":34,"_35":185,"_24":25,"_140":-5,"_210":229,"_27":230},{"_42":172,"_32":173,"_30":174,"_134":-5,"_40":41,"_39":175,"_136":118,"_37":225,"_13":147,"_33":34,"_35":177,"_24":25,"_140":-5,"_210":226,"_27":227},{"_42":165,"_32":166,"_30":167,"_134":-5,"_40":41,"_39":168,"_136":118,"_37":222,"_13":147,"_33":34,"_35":170,"_24":25,"_140":-5,"_210":223,"_27":224},{"_42":158,"_32":159,"_30":160,"_134":-5,"_40":41,"_39":161,"_136":118,"_37":219,"_13":147,"_33":34,"_35":163,"_24":25,"_140":-5,"_210":220,"_27":221},{"_42":150,"_32":151,"_30":152,"_134":-5,"_40":41,"_39":153,"_136":118,"_37":216,"_13":155,"_33":34,"_35":156,"_24":25,"_140":-5,"_210":217,"_27":218},{"_42":142,"_32":143,"_30":144,"_134":-5,"_40":41,"_39":145,"_136":118,"_37":213,"_13":147,"_33":34,"_35":148,"_24":25,"_140":-5,"_210":214,"_27":215},{"_42":131,"_32":132,"_30":133,"_134":-5,"_40":41,"_39":135,"_136":118,"_37":209,"_13":138,"_33":34,"_35":139,"_24":25,"_140":-5,"_210":211,"_27":212},["D",1772886369118],"children",[],[132],["D",1772732794437],[],[143],["D",1772877546734],[],[151],["D",1772732903301],[],[159],["D",1772732754244],[],[166],["D",1772737479754],[],[173],["D",1772960216813],[],[180],["D",1772995226572],[],[28],["D",1772732594353],{"_92":91,"_99":95},{"_92":91,"_93":-5,"_94":95,"_18":53,"_96":97,"_98":25},{"_13":14,"_32":82,"_42":41,"_83":43,"_84":-5,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":44,"_90":91},"ctx",{"_75":-5,"_120":271,"_272":273,"_274":275,"_276":25,"_277":25,"_278":25,"_279":118,"_280":-5,"_281":-7,"_282":-7,"_283":59,"_284":25,"_285":25,"_286":-5,"_287":25,"_288":25,"_289":25,"_290":-5},"ENV",{"_242":243,"_244":245,"_246":82,"_247":248,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v50