[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_103":86,"_27":53,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":58,"_120":-5,"_121":-5,"_122":123},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",12,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","542d956e-aaf0-11f1-bf78-1607ee4eb77e","name","fileType","http","content","/**\n * Good Maid Cleaning — payment + booking relay\n * --------------------------------------------------\n * This is your original Stripe payment relay, grown to also handle the\n * first-clean discount, the referral program, saving a real record of each\n * booking, cancellations — both self-serve (§5-6) and automatic from\n * Jobber (§9) — and follow-up \"add-on\" charges. Refunds are always a\n * manual step in every path, on purpose — nothing in this file ever calls\n * Stripe's refund endpoint on its own. Same val, same address — nothing\n * you've already wired up to this URL needs to change.\n *\n * What it does, in order, on a normal booking:\n * 1. Checkout asks this file \"what would this actually cost?\" — it asks\n * the Jobber relay whether this person's email/phone/address already\n * exists as a client (returning customer = no discount), then starts\n * a real Stripe charge for the real final amount. The card is\n * captured immediately once confirmed — never held-and-authorized.\n * 2. Once Stripe confirms the charge succeeded, checkout calls this file\n * again to \"finalize\": only now does the job actually get created in\n * Jobber, a permanent record of the booking gets saved here, and the\n * confirmation email (with the cancel link) goes out.\n * 3. The manage/cancel page on your site calls back here to look up a\n * booking and, if asked, cancel it — this just pulls the job from\n * Jobber and marks it cancelled. It never refunds automatically.\n * Refunds are a manual call: if a cancelled customer follows up\n * asking for their money back, refund them by hand from the Stripe\n * dashboard (Payments → find the charge → Refund).\n * 4. Referrals: every booking's own reference doubles as that customer's\n * referral code. If a NEW customer checks out using someone else's\n * code, they get $20 off (step 1, same Jobber \"genuinely new\" check\n * as FIRST20) — and the moment their booking is finalized (step 2),\n * the referrer automatically gets emailed a one-time $20 reward code\n * for their own next clean. See the \"referral program\" block below.\n * 5. NEW — if YOU cancel or remove a job directly in Jobber instead of\n * the customer using the site, the Jobber relay's webhook receiver\n * calls back here automatically: the booking gets marked cancelled\n * and the customer gets the same cancellation email as a self-serve\n * cancel — no admin page, no manual step for either of those. The\n * refund itself is ALWAYS a manual step, same as every other\n * cancellation in this file (Henry's explicit preference) — this\n * just tells you, in the alert email, whether the 24-hour window was\n * met so you know whether one's owed. See §9.\n *\n * You should not need to understand this file. Paste it in over your\n * existing Stripe relay val, add the two new Env Variables listed below,\n * and you're done — the address stays the same.\n *\n * ───────────────────────── Env Variables to add ─────────────────────────\n * STRIPE_SECRET_KEY — already set from before, leave as-is.\n * EMAILJS_PRIVATE_KEY — EmailJS → Account → API Keys → \"Private Key\".\n * You'll need to turn on \"Allow API calls from\n * non-browser applications\" there too — EmailJS\n * blocks server-to-server sends without it.\n * ADMIN_KEY — make up any private password-like string.\n * This is what protects the add-on-charge\n * endpoint (§7) so a stranger can't charge\n * people's cards. Keep it somewhere safe — you\n * paste it into the little admin page whenever\n * you need to add a charge.\n *\n * ─────────────────── One more EmailJS template to create ───────────────────\n * You'll need a THIRD EmailJS template (in addition to your confirmation\n * and cancellation ones) for the \"your friend just booked — here's your\n * reward\" email. Create it in EmailJS, copy its Template ID, and paste it\n * in as EMAILJS_REFERRAL_TEMPLATE_ID below (replacing the placeholder\n * \"template_referral_reward\"). It needs these merge fields: {{first_name}},\n * {{friend_name}}, {{reward_code}}, {{reward_amount}}, {{to_email}}.\n */\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nconst STRIPE_SECRET_KEY = Deno.env.get(\"STRIPE_SECRET_KEY\") || \"\";\nconst EMAILJS_PRIVATE_KEY = Deno.env.get(\"EMAILJS_PRIVATE_KEY\") || \"\";\nconst ADMIN_KEY = Deno.env.get(\"ADMIN_KEY\") || \"\";\n\n// Your Jobber relay val — this file calls it server-to-server for the\n// discount check and for creating/cancelling jobs, so the Jobber token\n// never has to touch the browser.\nconst JOBBER_RELAY_URL =\n \"https://goodmaidcleaning--ff4c00a8abf811f1941b1607ee4eb77e.web.val.run\";\n\n// Same EmailJS account/templates the site already uses client-side.\nconst EMAILJS_SERVICE_ID = \"service_cyo16xr\";\nconst EMAILJS_PUBLIC_KEY = \"DL65duWxLjOFYthmI\";\nconst EMAILJS_CONFIRM_TEMPLATE_ID = \"template_8mnm8mm\"; // your existing confirmation template — add {{cancel_url}} and {{discount_line}} to it, see checklist\nconst EMAILJS_CANCEL_TEMPLATE_ID = \"template_pr5rcah\"; // NEW template you'll create — see checklist for the exact fields it needs\n\nconst SITE_URL = \"https://goodmaidcleaning.com\";\nconst DISCOUNT_DOLLARS = 20; // first-clean discount, via the FIRST20 code\n\n// The promo code customers type in on the payment page. Change this\n// anytime you want a new code — just paste the updated file back in.\nconst PROMO_CODE = \"FIRST20\";\n\n// ───────────────────────── referral program ─────────────────────────\n// Every confirmed booking's own reference (e.g. \"GM-AB3XZ9\") doubles as\n// that customer's personal referral code — nothing extra to generate or\n// look up. A friend enters it as their promo code at checkout (or follows\n// a ?ref=GM-AB3XZ9 link, which the site auto-fills for them): they get\n// REFERRAL_FRIEND_DOLLARS off, checked against Jobber exactly like FIRST20\n// so it only ever works for a genuinely new customer. The moment that\n// friend's booking is finalized, the referrer gets a one-time reward code\n// emailed to them automatically, worth REFERRAL_REWARD_DOLLARS off their\n// next clean — see genRewardCode()/saveRewardCode() below.\nconst REFERRAL_FRIEND_DOLLARS = 20;\nconst REFERRAL_REWARD_DOLLARS = 20;\n// NEW template you'll create in EmailJS for the \"your friend just booked —\n// here's your reward code\" email — see checklist for the exact fields it\n// needs ({{first_name}}, {{friend_name}}, {{reward_code}}, {{reward_amount}}).\nconst EMAILJS_REFERRAL_TEMPLATE_ID = \"template_referral_reward\";\n\nconst CORS_HEADERS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\nfunction json(data: any, status = 200) {\n return Response.json(data, { status, headers: CORS_HEADERS });\n}\n\n// ───────────────────────── booking storage (blob) ─────────────────────────\n// Each booking is saved as its own blob keyed by reference, plus a tiny\n// index blob mapping the private cancel token to that reference so the\n// cancel link never has to expose or guess a reference number.\nfunction bookingKey(reference: string) {\n return `booking:${reference}`;\n}\nfunction tokenKey(token: string) {\n return `token:${token}`;\n}\n// Reverse index so the Jobber webhook (which only ever hands us a Jobber\n// job ID, never our own reference) can find the matching booking in one\n// lookup instead of scanning everything. jobberJobId itself has already\n// been stored right on the booking record since this file's very first\n// version (see handleFinalize below) — this just adds a fast way in from\n// the other direction.\nfunction jobberJobKey(jobberJobId: string) {\n return `jobberjob:${jobberJobId}`;\n}\n\nasync function saveBooking(b: Record) {\n await blob.setJSON(bookingKey(b.reference), b);\n await blob.setJSON(tokenKey(b.cancelToken), b.reference);\n if (b.jobberJobId) {\n await blob.setJSON(jobberJobKey(b.jobberJobId), b.reference);\n }\n}\nasync function getBookingByReference(reference: string) {\n return await blob.getJSON(bookingKey(reference));\n}\nasync function getBookingByToken(token: string) {\n const reference = await blob.getJSON(tokenKey(token));\n if (!reference) return null;\n return await getBookingByReference(reference);\n}\nasync function getBookingByJobberJobId(jobberJobId: string) {\n const reference = await blob.getJSON(jobberJobKey(jobberJobId));\n if (!reference) return null;\n return await getBookingByReference(reference);\n}\nfunction randomToken() {\n const bytes = new Uint8Array(24);\n crypto.getRandomValues(bytes);\n return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction genReference() {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let ref = \"GM-\";\n for (let i = 0; i < 6; i++) {\n ref += chars[Math.floor(Math.random() * chars.length)];\n }\n return ref;\n}\n\n// A referrer's earned reward — one-time use, worth REFERRAL_REWARD_DOLLARS\n// off their next clean. Deliberately a different prefix (\"THANKS-\") than\n// booking references (\"GM-\") so the two code types can never collide or be\n// confused with each other when someone types one in at checkout.\nfunction rewardKey(code: string) {\n return `reward:${code}`;\n}\nasync function saveRewardCode(code: string, data: Record) {\n await blob.setJSON(rewardKey(code), data);\n}\nasync function getRewardCode(code: string) {\n return await blob.getJSON(rewardKey(code));\n}\nfunction genRewardCode() {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let code = \"THANKS-\";\n for (let i = 0; i < 6; i++) {\n code += chars[Math.floor(Math.random() * chars.length)];\n }\n return code;\n}\n\n// ───────────────────────── Vancouver-local time math ─────────────────────────\n// Booking dates/times are always Metro Vancouver local time. This compares\n// \"now\" and \"the scheduled visit\" as plain Vancouver wall-clock, which\n// sidesteps PST/PDT daylight-saving math entirely rather than getting it\n// subtly wrong twice a year.\nfunction vancouverNowMs() {\n const parts = new Intl.DateTimeFormat(\"en-US\", {\n timeZone: \"America/Vancouver\",\n hour12: false,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n second: \"2-digit\",\n }).formatToParts(new Date()).reduce((acc: any, p) => {\n acc[p.type] = p.value;\n return acc;\n }, {});\n return Date.UTC(\n +parts.year,\n +parts.month - 1,\n +parts.day,\n +parts.hour,\n +parts.minute,\n +parts.second,\n );\n}\nfunction scheduledWallClockMs(scheduledDate: string, scheduledTime24h: string) {\n const [y, m, d] = scheduledDate.split(\"-\").map(Number);\n const [hh, mm] = (scheduledTime24h || \"09:00\").split(\":\").map(Number);\n return Date.UTC(y, m - 1, d, hh, mm, 0);\n}\nfunction hoursUntil(scheduledDate: string, scheduledTime24h: string) {\n return (scheduledWallClockMs(scheduledDate, scheduledTime24h) -\n vancouverNowMs()) / 3600000;\n}\n\n// ───────────────────────── Stripe (raw REST) ─────────────────────────\nasync function stripeRequest(\n method: string,\n path: string,\n body?: Record,\n) {\n const form = body\n ? Object.entries(body).map(([k, v]) =>\n `${encodeURIComponent(k)}=${encodeURIComponent(String(v))}`\n ).join(\"&\")\n : undefined;\n const res = await fetch(`https://api.stripe.com/v1/${path}`, {\n method,\n headers: {\n Authorization: `Bearer ${STRIPE_SECRET_KEY}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: form,\n });\n const data = await res.json();\n if (!res.ok) {\n throw new Error(\n data.error?.message || `Stripe ${path} failed (${res.status})`,\n );\n }\n return data;\n}\nasync function findOrCreateStripeCustomer(email: string, name: string) {\n if (email) {\n const list = await stripeRequest(\n \"GET\",\n `customers?email=${encodeURIComponent(email)}&limit=1`,\n );\n if (list.data?.length) return list.data[0].id;\n }\n const created = await stripeRequest(\"POST\", \"customers\", {\n email: email || \"\",\n name: name || \"\",\n });\n return created.id;\n}\n// Note: there is deliberately no automatic refund function anywhere in\n// this file. Every cancellation path — self-serve (§5-6) and the\n// Jobber-triggered one (§9) — only ever marks a booking cancelled and\n// tells Henry whether a refund is owed. Issuing it is always a manual\n// step from the Stripe dashboard (Payments → find the charge → Refund).\n\n// ───────────────────────── Jobber relay (server-to-server) ─────────────────────────\nasync function checkJobberEligibility(\n email: string,\n phone: string,\n address: string,\n): Promise {\n const res = await fetch(JOBBER_RELAY_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ action: \"checkClient\", email, phone, address }),\n });\n const data = await res.json();\n // isReturning defaults true (= no discount) on any failure — see the\n // relay's checkClient handler.\n return !data.isReturning;\n}\nasync function createJobberJob(jobberPayload: Record) {\n const res = await fetch(JOBBER_RELAY_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(jobberPayload),\n });\n const data = await res.json().catch(() => ({}));\n return { ok: res.ok && data.ok !== false, data };\n}\nasync function cancelJobberJob(jobberJobId: string) {\n if (!jobberJobId) return { ok: true, skipped: true };\n const res = await fetch(JOBBER_RELAY_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ action: \"cancelJob\", jobberJobId }),\n });\n const data = await res.json().catch(() => ({}));\n return { ok: res.ok && data.ok !== false, data };\n}\n\n// ───────────────────────── Email (EmailJS REST) ─────────────────────────\nasync function sendEmail(\n templateId: string,\n toEmail: string,\n params: Record,\n) {\n if (!toEmail) return;\n try {\n const res = await fetch(\"https://api.emailjs.com/api/v1.0/email/send\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n service_id: EMAILJS_SERVICE_ID,\n template_id: templateId,\n user_id: EMAILJS_PUBLIC_KEY,\n accessToken: EMAILJS_PRIVATE_KEY,\n template_params: { to_email: toEmail, ...params },\n }),\n });\n if (!res.ok) {\n console.log(\"EmailJS send failed:\", res.status, await res.text());\n }\n } catch (err: any) {\n console.log(\"EmailJS send threw:\", err.message || String(err));\n }\n}\n\n// A plain-text fallback straight to Henry — reuses the same FormSubmit pipe\n// the site already uses for its own Jobber-failure alerts, so it's proven\n// to reach his inbox even if this is the very first time this code runs.\nasync function alertHenry(subject: string, lines: Record) {\n try {\n const fd = new FormData();\n fd.set(\"_subject\", subject);\n Object.entries(lines).forEach(([k, v]) => fd.set(k, v));\n await fetch(\"https://formsubmit.co/ajax/ee6b06d638357bffe3e89c2579084290\", {\n method: \"POST\",\n headers: { Accept: \"application/json\" },\n body: fd,\n });\n } catch (err: any) {\n console.log(\"alertHenry failed:\", err.message || String(err));\n }\n}\n\n// ───────────────────────── §1–3: price + charge ─────────────────────────\n// Default POST body: { basePrice, name, email, phone, address, reference?, promoCode? }\n//\n// The discount is NEVER automatic anymore. It only applies when a promo\n// code is sent here as `promoCode` — either the customer typed one in, or\n// the site auto-filled it from a referral link. There are three kinds of\n// code, told apart by their shape:\n// FIRST20 — the general first-clean code, requires a genuinely\n// new customer (checked with Jobber server-side, same\n// as always — the browser can't skip or fake this).\n// GM-XXXXXX — someone's own booking reference, shared as a referral\n// code/link. Same \"must be a genuinely new customer\"\n// check as FIRST20 — which also means the referrer\n// can't just reuse their own code on themselves.\n// THANKS-XXXXXX — a reward code a referrer already earned (see\n// handleFinalize below). No new-customer check here —\n// by definition they're already a customer — it just\n// has to be a real, unused reward.\nasync function handlePrice(req: Request) {\n const body = await req.json();\n const basePrice = Math.round(Number(body.basePrice) * 100) / 100;\n if (!basePrice || basePrice <= 0) {\n return json({ error: \"Missing or invalid amount.\" }, 400);\n }\n\n const promoCode = String(body.promoCode || \"\").trim();\n const upper = promoCode.toUpperCase();\n let discount = 0;\n let promoApplied = false;\n let promoError = \"\";\n let referralCode = \"\"; // set when a FRIEND is redeeming someone else's referral code\n let rewardCode = \"\"; // set when a REFERRER is redeeming their own earned reward\n\n async function checkNewCustomer(): Promise {\n try {\n // Never let a slow/unreachable Jobber lookup hang checkout.\n return await Promise.race([\n checkJobberEligibility(\n body.email || \"\",\n body.phone || \"\",\n body.address || \"\",\n ),\n new Promise((resolve) =>\n setTimeout(() => resolve(false), 6000)\n ),\n ]);\n } catch (err: any) {\n console.log(\n \"Eligibility check failed, defaulting to no discount:\",\n err.message || String(err),\n );\n return false;\n }\n }\n const NOT_FIRST_TIME_ERROR =\n \"This code is for first-time customers only — looks like you've already got a booking with us on file.\";\n\n if (promoCode) {\n if (upper === PROMO_CODE.toUpperCase()) {\n if (await checkNewCustomer()) {\n discount = DISCOUNT_DOLLARS;\n promoApplied = true;\n } else promoError = NOT_FIRST_TIME_ERROR;\n } else if (upper.startsWith(\"THANKS-\")) {\n const reward = await getRewardCode(upper);\n if (!reward) promoError = \"That code isn't valid.\";\n else if (reward.used) promoError = \"That code has already been used.\";\n else {\n discount = Number(reward.amount) || REFERRAL_REWARD_DOLLARS;\n promoApplied = true;\n rewardCode = upper;\n }\n } else if (upper.startsWith(\"GM-\")) {\n const referrerBooking = await getBookingByReference(upper);\n if (!referrerBooking || referrerBooking.status === \"cancelled\") {\n promoError = \"That code isn't valid.\";\n } else if (await checkNewCustomer()) {\n discount = REFERRAL_FRIEND_DOLLARS;\n promoApplied = true;\n referralCode = upper;\n } else {\n promoError = NOT_FIRST_TIME_ERROR;\n }\n } else {\n promoError = \"That code isn't valid.\";\n }\n }\n\n const finalPrice = Math.max(0, basePrice - discount);\n const reference = body.reference || genReference();\n\n const customerId = await findOrCreateStripeCustomer(\n body.email || \"\",\n body.name || \"\",\n );\n const intent = await stripeRequest(\"POST\", \"payment_intents\", {\n amount: String(Math.round(finalPrice * 100)),\n currency: \"cad\",\n customer: customerId,\n \"payment_method_types[]\": \"card\",\n setup_future_usage: \"off_session\", // keeps the card on file for a possible add-on charge later (§7)\n description: `Good Maid Cleaning booking ${reference}`,\n receipt_email: body.email || \"\",\n \"metadata[reference]\": reference,\n \"metadata[discount]\": String(discount),\n \"metadata[referralCode]\": referralCode,\n \"metadata[rewardCode]\": rewardCode,\n });\n\n return json({\n clientSecret: intent.client_secret,\n reference,\n basePrice,\n discount,\n finalPrice,\n promoApplied,\n promoError,\n });\n}\n\n// ───────────────────────── §1–4: finalize after a successful charge ─────────────────────────\n// Body: { paymentIntentId, reference, booking: { ...contact + service details, jobberPayload } }\nasync function handleFinalize(req: Request) {\n const body = await req.json();\n const { paymentIntentId, booking } = body;\n if (!paymentIntentId || !booking) {\n return json({ error: \"Missing paymentIntentId or booking.\" }, 400);\n }\n\n // Never trust the browser's word that a charge went through — ask Stripe.\n const intent = await stripeRequest(\n \"GET\",\n `payment_intents/${paymentIntentId}`,\n );\n if (intent.status !== \"succeeded\") {\n return json({\n error: \"Payment has not succeeded — booking was not created.\",\n }, 402);\n }\n\n const reference = intent.metadata?.reference || body.reference ||\n genReference();\n const discount = Number(intent.metadata?.discount || 0);\n const referralCode = intent.metadata?.referralCode || \"\";\n const rewardCode = intent.metadata?.rewardCode || \"\";\n const finalPrice = intent.amount_received / 100;\n const cancelToken = randomToken();\n\n const jobberResult = await createJobberJob(booking.jobberPayload).catch((\n err,\n ) => ({ ok: false, data: { error: err.message } }));\n const jobberJobId = jobberResult.data?.job?.id || null;\n\n if (!jobberResult.ok) {\n await alertHenry(\n `⚠️ Booking ${reference} may be MISSING from Jobber — action needed`,\n {\n \"What happened\":\n \"This customer WAS charged successfully, but the booking failed to reach Jobber. Please add this job to Jobber manually.\",\n \"Reference\": reference,\n \"Customer name\": booking.name || \"\",\n \"Customer email\": booking.email || \"\",\n \"Customer phone\": booking.phone || \"\",\n \"Address\": `${booking.address || \"\"}${\n booking.unit ? \" #\" + booking.unit : \"\"\n }, ${booking.city || \"\"}`,\n \"Date\": booking.dateLabel || \"\",\n \"Time\": booking.timeLabel || \"\",\n \"Price charged\": `$${finalPrice.toFixed(2)}`,\n \"Technical detail\": JSON.stringify(jobberResult.data || {}).slice(\n 0,\n 500,\n ),\n },\n );\n }\n\n const record = {\n reference,\n cancelToken,\n status: \"confirmed\",\n customerName: booking.name || \"\",\n customerEmail: booking.email || \"\",\n customerPhone: booking.phone || \"\",\n address: booking.address || \"\",\n unit: booking.unit || \"\",\n city: booking.city || \"\",\n postal: booking.postal || \"\",\n serviceLabel: booking.serviceLabel || \"\",\n dateLabel: booking.dateLabel || \"\",\n timeLabel: booking.timeLabel || \"\",\n scheduledDate: booking.scheduledDate,\n scheduledTime24h: booking.scheduledTime24h,\n basePriceCents: intent.amount_received + Math.round(discount * 100),\n discountCents: Math.round(discount * 100),\n finalPriceCents: intent.amount_received,\n stripePaymentIntentId: paymentIntentId,\n stripeCustomerId: intent.customer,\n stripePaymentMethodId: intent.payment_method,\n jobberJobId,\n refunded: false,\n referredBy: referralCode || null, // the referrer's code, if this booking came from one — just for your own records\n createdAt: new Date().toISOString(),\n cancelledAt: null,\n };\n await saveBooking(record);\n\n // A reward code just got spent (a referrer redeeming their own earned\n // discount) — mark it used right here, only once payment is genuinely\n // confirmed, so it can never be redeemed a second time.\n if (rewardCode) {\n const reward = await getRewardCode(rewardCode);\n if (reward) {\n reward.used = true;\n reward.usedAt = new Date().toISOString();\n reward.usedByReference = reference;\n await saveRewardCode(rewardCode, reward);\n }\n }\n\n // This booking was made using someone ELSE's referral code — a real,\n // verified new customer just booked because of them. Mint that referrer\n // a fresh one-time reward code for their own next clean and email it to\n // them automatically, no action needed from Henry.\n if (referralCode) {\n const referrerBooking = await getBookingByReference(referralCode);\n if (referrerBooking?.customerEmail) {\n const newReward = genRewardCode();\n await saveRewardCode(newReward, {\n email: referrerBooking.customerEmail,\n amount: REFERRAL_REWARD_DOLLARS,\n used: false,\n earnedFromReference: reference,\n createdAt: new Date().toISOString(),\n });\n await sendEmail(\n EMAILJS_REFERRAL_TEMPLATE_ID,\n referrerBooking.customerEmail,\n {\n first_name:\n (referrerBooking.customerName || \"\").trim().split(/\\s+/)[0] ||\n \"there\",\n friend_name: (booking.name || \"\").trim().split(/\\s+/)[0] ||\n \"Your friend\",\n reward_code: newReward,\n reward_amount: REFERRAL_REWARD_DOLLARS.toFixed(2),\n },\n );\n }\n }\n\n const discountLine = discount <= 0\n ? \"\"\n : referralCode\n ? `Includes a $${discount.toFixed(2)} referral discount.`\n : rewardCode\n ? `Includes a $${discount.toFixed(2)} referral reward.`\n : `Includes a $${discount.toFixed(2)} first-clean discount.`;\n\n const cancelUrl = `${SITE_URL}/manage.html?t=${cancelToken}`;\n await sendEmail(EMAILJS_CONFIRM_TEMPLATE_ID, booking.email, {\n first_name: (booking.name || \"\").trim().split(/\\s+/)[0] || \"there\",\n reference,\n service: booking.serviceLabel,\n date: booking.dateLabel,\n time: booking.timeLabel,\n address: `${booking.address || \"\"}${\n booking.unit ? \" #\" + booking.unit : \"\"\n }, ${booking.city || \"\"}`,\n price: finalPrice.toFixed(2),\n discount_line: discountLine,\n referral_code: reference,\n cancel_url: cancelUrl,\n });\n\n return json({ reference, cancelUrl, jobberJobId });\n}\n\n// ───────────────────────── §5–6: look up a booking — by its cancel link, or by Henry looking up a reference ─────────────────────────\n// Two ways in, same response shape: the customer's self-serve link supplies\n// ?t= (proves it's their booking without any login); Henry's admin\n// tools page supplies ?ref=&adminKey= instead, so he can\n// pull up a caller's exact booking by their confirmation number before\n// cancelling it or adding a charge (§6/§7).\nasync function handleManage(req: Request) {\n const params = new URL(req.url).searchParams;\n const token = params.get(\"t\");\n const reference = params.get(\"ref\");\n const adminKey = params.get(\"adminKey\");\n\n let b: Record | null = null;\n if (token) {\n b = await getBookingByToken(token);\n } else if (reference && adminKey) {\n if (adminKey !== ADMIN_KEY) return json({ error: \"Not authorized.\" }, 401);\n b = await getBookingByReference(reference);\n } else {\n return json({ error: \"Provide a token, or a reference + adminKey.\" }, 400);\n }\n if (!b) return json({ error: \"We couldn't find that booking.\" }, 404);\n\n const hrs = hoursUntil(b.scheduledDate, b.scheduledTime24h);\n return json({\n reference: b.reference,\n status: b.status,\n customerName: b.customerName,\n customerEmail: b.customerEmail,\n customerPhone: b.customerPhone,\n serviceLabel: b.serviceLabel,\n dateLabel: b.dateLabel,\n timeLabel: b.timeLabel,\n address: `${b.address}${b.unit ? \" #\" + b.unit : \"\"}, ${b.city}`,\n price: (b.finalPriceCents / 100).toFixed(2),\n refunded: !!b.refunded,\n hoursUntil: hrs,\n hasCardOnFile: !!(b.stripeCustomerId && b.stripePaymentMethodId),\n });\n}\n\n// ───────────────────────── §5–6: cancellation — the ONE shared code path ─────────────────────────\n// Used by both the customer's self-serve link and Henry's phone/email\n// fallback. Cancelling just pulls the job from Jobber and marks the\n// booking cancelled — it never touches Stripe. Refunds are a deliberate,\n// manual decision: if a customer follows up asking for their money back,\n// refund them by hand from the Stripe dashboard (Payments → find the\n// charge → Refund), then optionally mark them refunded with the admin\n// tools page so the record here matches.\nasync function performCancellation(b: Record) {\n if (b.status === \"cancelled\") {\n return { alreadyCancelled: true, refunded: !!b.refunded };\n }\n\n const jobberResult = await cancelJobberJob(b.jobberJobId).catch((err) => ({\n ok: false,\n data: { error: err.message },\n }));\n if (!jobberResult.ok) {\n await alertHenry(\n `⚠️ Booking ${b.reference} cancelled but may still be on your Jobber calendar`,\n {\n \"What happened\":\n \"This booking was cancelled on the website, but removing the job from Jobber failed automatically. Please remove/reschedule it in Jobber by hand so a cleaner doesn't show up.\",\n \"Reference\": b.reference,\n \"Customer\": b.customerName || \"\",\n \"Date\": b.dateLabel || \"\",\n \"Time\": b.timeLabel || \"\",\n \"Technical detail\": JSON.stringify(jobberResult.data || {}).slice(\n 0,\n 500,\n ),\n },\n );\n }\n\n b.status = \"cancelled\";\n b.cancelledAt = new Date().toISOString();\n await saveBooking(b);\n\n await sendEmail(EMAILJS_CANCEL_TEMPLATE_ID, b.customerEmail, {\n first_name: (b.customerName || \"\").trim().split(/\\s+/)[0] || \"there\",\n reference: b.reference,\n service: b.serviceLabel,\n date: b.dateLabel,\n time: b.timeLabel,\n price: (b.finalPriceCents / 100).toFixed(2),\n });\n\n return { alreadyCancelled: false, refunded: !!b.refunded };\n}\n\n// Body: EITHER { token } for the self-serve link, OR\n// { reference, adminKey } for Henry's phone/email fallback (§6).\nasync function handleCancel(req: Request) {\n const body = await req.json();\n let b: Record | null = null;\n\n if (body.token) {\n b = await getBookingByToken(body.token);\n } else if (body.reference && body.adminKey) {\n if (body.adminKey !== ADMIN_KEY) {\n return json({ error: \"Not authorized.\" }, 401);\n }\n b = await getBookingByReference(body.reference);\n } else {\n return json({ error: \"Provide a token, or a reference + adminKey.\" }, 400);\n }\n if (!b) return json({ error: \"We couldn't find that booking.\" }, 404);\n\n const outcome = await performCancellation(b);\n return json(outcome);\n}\n\n// ───────────────────────── §9: automatic cancellation triggered FROM Jobber ─────────────────────────\n// The mirror image of performCancellation() above. That one runs when the\n// CUSTOMER (or Henry, by phone) cancels through the site, and it reaches\n// OUT to Jobber to close the job. This one runs the other way: Henry\n// closes/cancels the job directly in Jobber, Jobber's webhook tells the\n// Jobber relay val, and the relay calls in here (see\n// jobber-relay-updated.ts, \"§ webhook: job closed/destroyed\").\n//\n// Refunds are ALWAYS manual, on purpose — Henry asked for this explicitly\n// (2026-09-13): this never calls Stripe, no matter how far out the booking\n// was. So the only two things this path does automatically are marking the\n// booking cancelled and sending the same cancellation email as a\n// self-serve cancel — exactly like performCancellation() above, just\n// triggered from Jobber's side instead of the site's. It still works out\n// and reports whether the 24-hour window was met, so the alert below tells\n// Henry whether he owes a refund — he just has to actually issue it\n// himself from the Stripe dashboard (Payments → find the charge → Refund),\n// same as every other refund in this system.\n// - It NEVER calls back into Jobber — the job is already closed there,\n// that's what triggered this in the first place. Calling cancelJobberJob\n// again would be pointless at best and could throw at worst.\n// - It ALWAYS emails Henry a short summary of what happened and whether\n// a refund is owed, so a real customer's booking never changes state\n// silently.\n// - The relay only calls this at all once it's already decided (by\n// checking the job's visits) that this looked like a genuine\n// cancellation rather than Henry just marking a finished job done —\n// see that file for why \"closing a job\" in Jobber means both things\n// and how it tells them apart. If you ever see this fire for a job\n// you actually completed, that's the thing to double-check first.\nasync function performAutoCancellationFromJobber(b: Record) {\n if (b.status === \"cancelled\") {\n return { alreadyCancelled: true, refunded: !!b.refunded };\n }\n\n const hrs = hoursUntil(b.scheduledDate, b.scheduledTime24h);\n const refundOwed = hrs >= 24 && !b.refunded;\n\n b.status = \"cancelled\";\n b.cancelledAt = new Date().toISOString();\n b.cancelledVia = \"jobber\"; // distinguishes this from a self-serve site/phone cancellation, for your own records\n await saveBooking(b);\n\n await sendEmail(EMAILJS_CANCEL_TEMPLATE_ID, b.customerEmail, {\n first_name: (b.customerName || \"\").trim().split(/\\s+/)[0] || \"there\",\n reference: b.reference,\n service: b.serviceLabel,\n date: b.dateLabel,\n time: b.timeLabel,\n price: (b.finalPriceCents / 100).toFixed(2),\n });\n\n // Always a paper trail, so a real customer's booking never changes\n // state silently — and so Henry knows whether a refund is owed, since\n // this never issues one itself.\n await alertHenry(\n `Booking ${b.reference} auto-cancelled from Jobber${\n refundOwed ? \" — REFUND OWED\" : \"\"\n }`,\n {\n \"What happened\":\n `This job was cancelled/removed in Jobber, so the booking was automatically marked cancelled here and the customer was emailed a cancellation confirmation. No refund was issued automatically — refunds are always manual.${\n refundOwed\n ? \" This one was 24+ hours out at cancellation, so per the standard policy it's owed a refund — issue it from the Stripe dashboard (Payments → find the charge → Refund).\"\n : b.refunded\n ? \" It was already marked refunded.\"\n : \" It was inside the 24-hour window, so per the standard policy no refund is owed.\"\n }`,\n \"Reference\": b.reference,\n \"Customer\": b.customerName || \"\",\n \"Hours before appointment at cancellation\": hrs.toFixed(1),\n \"Amount\": `$${(b.finalPriceCents / 100).toFixed(2)}`,\n },\n );\n\n return { alreadyCancelled: false, refunded: !!b.refunded, refundOwed };\n}\n\n// Called server-to-server by the Jobber relay val, never by the browser.\n// Body: { jobberJobId, certainty } where certainty is one of:\n// \"completed\" — the relay found a genuinely completed visit on this job.\n// Ordinary finished job, not a cancellation — leave it alone.\n// \"cancelled\" — the relay is confident this was a real cancellation\n// (job destroyed outright, or closed with no completed\n// visit) — mark the booking cancelled and email the\n// customer. Never refunds — see performAutoCancellationFromJobber.\n// \"uncertain\" — the relay couldn't tell (e.g. Jobber's API didn't\n// answer) — this just emails Henry to check the booking\n// by hand rather than guess.\nasync function handleJobberJobClosed(req: Request) {\n const body = await req.json();\n const jobberJobId = body.jobberJobId;\n const certainty = body.certainty;\n if (!jobberJobId) {\n return json({ ok: false, error: \"Missing jobberJobId.\" }, 400);\n }\n\n const b = await getBookingByJobberJobId(jobberJobId);\n if (!b) {\n return json({\n ok: false,\n error: \"No booking found for that Jobber job ID.\",\n }, 404);\n }\n\n if (certainty === \"completed\") {\n // Logged but not emailed, so a normal finished job every week doesn't\n // clutter your inbox.\n console.log(\n `jobberJobClosed: ${b.reference} looked like a normal completion — leaving it alone.`,\n );\n return json({ ok: true, skipped: true, reason: \"completed\" });\n }\n\n if (certainty === \"uncertain\") {\n await alertHenry(\n `❓ Booking ${b.reference} — job closed in Jobber, couldn't confirm if it was a cancellation`,\n {\n \"What happened\":\n \"This job was closed or removed in Jobber, but we couldn't automatically confirm whether that was a real cancellation or you just marking a finished job done — so nothing was changed automatically (no refund, no status change, no email sent to the customer). Please check this booking and, if it really was cancelled, cancel it from the manage/admin tools page yourself.\",\n \"Reference\": b.reference,\n \"Customer\": b.customerName || \"\",\n \"Date\": b.dateLabel || \"\",\n \"Time\": b.timeLabel || \"\",\n },\n );\n return json({ ok: true, skipped: true, reason: \"uncertain\" });\n }\n\n const outcome = await performAutoCancellationFromJobber(b);\n return json({ ok: true, ...outcome });\n}\n\n// ───────────────────────── §7: add-on charge (Henry only) ─────────────────────────\n// Body: { reference, adminKey, amount, description }\nasync function handleAddon(req: Request) {\n const body = await req.json();\n if (body.adminKey !== ADMIN_KEY) {\n return json({ error: \"Not authorized.\" }, 401);\n }\n const amountCents = Math.round(Number(body.amount) * 100);\n if (!amountCents || amountCents <= 0) {\n return json({ error: \"Invalid amount.\" }, 400);\n }\n\n const b = await getBookingByReference(body.reference);\n if (!b) return json({ error: \"We couldn't find that booking.\" }, 404);\n if (!b.stripeCustomerId || !b.stripePaymentMethodId) {\n return json({\n error:\n \"No card on file for this booking — ask the customer for a new card instead.\",\n }, 400);\n }\n\n try {\n const intent = await stripeRequest(\"POST\", \"payment_intents\", {\n amount: String(amountCents),\n currency: \"cad\",\n customer: b.stripeCustomerId,\n payment_method: b.stripePaymentMethodId,\n off_session: \"true\",\n confirm: \"true\",\n description: body.description ||\n `Add-on charge for booking ${b.reference}`,\n });\n return json({\n success: intent.status === \"succeeded\",\n status: intent.status,\n });\n } catch (err: any) {\n return json({\n error:\n `Charge failed: ${err.message} — the card on file may need the customer to provide a new one.`,\n }, 402);\n }\n}\n\n// ───────────────────────── §8: mark a booking refunded (record-keeping only) ─────────────────────────\n// Cancelling never touches Stripe (see §5–6 above) — refunds are always a\n// manual decision made by hand in the Stripe dashboard. This endpoint does\n// NOT issue a refund; it just updates this booking's own record to say one\n// was given, once Henry has actually done it in Stripe, so the admin tools\n// page shows the right thing next time this booking is looked up.\n// Body: { reference, adminKey }\nasync function handleMarkRefunded(req: Request) {\n const body = await req.json();\n if (body.adminKey !== ADMIN_KEY) {\n return json({ error: \"Not authorized.\" }, 401);\n }\n const b = await getBookingByReference(body.reference);\n if (!b) return json({ error: \"We couldn't find that booking.\" }, 404);\n b.refunded = true;\n await saveBooking(b);\n return json({ success: true, refunded: true });\n}\n\n// ───────────────────────── router ─────────────────────────\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { headers: CORS_HEADERS });\n }\n if (!STRIPE_SECRET_KEY) {\n return json({\n error:\n \"STRIPE_SECRET_KEY isn't set. Add it under this val's Env Variables.\",\n }, 500);\n }\n\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/$/, \"\");\n\n try {\n if (req.method === \"GET\" && path === \"/manage\") {\n return await handleManage(req);\n }\n if (req.method === \"POST\") {\n const clone = req.clone();\n const body = await clone.json().catch(() => ({}));\n if (body.action === \"finalize\") return await handleFinalize(req);\n if (body.action === \"cancel\") return await handleCancel(req);\n if (body.action === \"jobberJobClosed\") {\n return await handleJobberJobClosed(req);\n }\n if (body.action === \"addon\") return await handleAddon(req);\n if (body.action === \"markRefunded\") return await handleMarkRefunded(req);\n // No action — this is the original \"start a payment\" behavior.\n return await handlePrice(req);\n }\n return new Response(\n \"Good Maid Cleaning — payment + booking relay. Your website POSTs booking details here.\",\n { headers: { \"Content-Type\": \"text/plain\", ...CORS_HEADERS } },\n );\n } catch (err: any) {\n console.log(\"Relay error:\", err.message || String(err));\n return json({ error: err.message || String(err) }, 500);\n }\n}","/**\n * Good Maid Cleaning — payment + booking relay\n * --------------------------------------------------\n * This is your original Stripe payment relay, grown to also handle the\n * first-clean discount, the referral program, saving a real record of each\n * booking, cancellations — both self-serve (§5-6) and automatic from\n * Jobber (§9) — and follow-up \"add-on\" charges. Refunds are always a\n * manual step in every path, on purpose — nothing in this file ever calls\n * Stripe's refund endpoint on its own. Same val, same address — nothing\n * you've already wired up to this URL needs to change.\n *\n * What it does, in order, on a normal booking:\n * 1. Checkout asks this file \"what would this actually cost?\" — it asks\n * the Jobber relay whether this person's email/phone/address already\n * exists as a client (returning customer = no discount), then starts\n * a real Stripe charge for the real final amount. The card is\n * captured immediately once confirmed — never held-and-authorized.\n * 2. Once Stripe confirms the charge succeeded, checkout calls this file\n * again to \"finalize\": only now does the job actually get created in\n * Jobber, a permanent record of the booking gets saved here, and the\n * confirmation email (with the cancel link) goes out.\n * 3. The manage/cancel page on your site calls back here to look up a\n * booking and, if asked, cancel it — this just pulls the job from\n * Jobber and marks it cancelled. It never refunds automatically.\n * Refunds are a manual call: if a cancelled customer follows up\n * asking for their money back, refund them by hand from the Stripe\n * dashboard (Payments → find the charge → Refund).\n * 4. Referrals: every booking's own reference doubles as that customer's\n * referral code. If a NEW customer checks out using someone else's\n * code, they get $20 off (step 1, same Jobber \"genuinely new\" check\n * as FIRST20) — and the moment their booking is finalized (step 2),\n * the referrer automatically gets emailed a one-time $20 reward code\n * for their own next clean. See the \"referral program\" block below.\n * 5. NEW — if YOU cancel or remove a job directly in Jobber instead of\n * the customer using the site, the Jobber relay's webhook receiver\n * calls back here automatically: the booking gets marked cancelled\n * and the customer gets the same cancellation email as a self-serve\n * cancel — no admin page, no manual step for either of those. The\n * refund itself is ALWAYS a manual step, same as every other\n * cancellation in this file (Henry's explicit preference) — this\n * just tells you, in the alert email, whether the 24-hour window was\n * met so you know whether one's owed. See §9.\n *\n * You should not need to understand this file. Paste it in over your\n * existing Stripe relay val, add the two new Env Variables listed below,\n * and you're done — the address stays the same.\n *\n * ───────────────────────── Env Variables to add ─────────────────────────\n * STRIPE_SECRET_KEY — already set from before, leave as-is.\n * EMAILJS_PRIVATE_KEY — EmailJS → Account → API Keys → \"Private Key\".\n * You'll need to turn on \"Allow API calls from\n * non-browser applications\" there too — EmailJS\n * blocks server-to-server sends without it.\n * ADMIN_KEY — make up any private password-like string.\n * This is what protects the add-on-charge\n * endpoint (§7) so a stranger can't charge\n * people's cards. Keep it somewhere safe — you\n * paste it into the little admin page whenever\n * you need to add a charge.\n *\n * ─────────────────── One more EmailJS template to create ───────────────────\n * You'll need a THIRD EmailJS template (in addition to your confirmation\n * and cancellation ones) for the \"your friend just booked — here's your\n * reward\" email. Create it in EmailJS, copy its Template ID, and paste it\n * in as EMAILJS_REFERRAL_TEMPLATE_ID below (replacing the placeholder\n * \"template_referral_reward\"). It needs these merge fields: {{first_name}},\n * {{friend_name}}, {{reward_code}}, {{reward_amount}}, {{to_email}}.\n */\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nconst STRIPE_SECRET_KEY = Deno.env.get(\"STRIPE_SECRET_KEY\") || \"\";\nconst EMAILJS_PRIVATE_KEY = Deno.env.get(\"EMAILJS_PRIVATE_KEY\") || \"\";\nconst ADMIN_KEY = Deno.env.get(\"ADMIN_KEY\") || \"\";\n\n// Your Jobber relay val — this file calls it server-to-server for the\n// discount check and for creating/cancelling jobs, so the Jobber token\n// never has to touch the browser.\nconst JOBBER_RELAY_URL =\n \"https://goodmaidcleaning--ff4c00a8abf811f1941b1607ee4eb77e.web.val.run\";\n\n// Same EmailJS account/templates the site already uses client-side.\nconst EMAILJS_SERVICE_ID = \"service_cyo16xr\";\nconst EMAILJS_PUBLIC_KEY = \"DL65duWxLjOFYthmI\";\nconst EMAILJS_CONFIRM_TEMPLATE_ID = \"template_8mnm8mm\"; // your existing confirmation template — add {{cancel_url}} and {{discount_line}} to it, see checklist\nconst EMAILJS_CANCEL_TEMPLATE_ID = \"template_pr5rcah\"; // NEW template you'll create — see checklist for the exact fields it needs\n\nconst SITE_URL = \"https://goodmaidcleaning.com\";\nconst DISCOUNT_DOLLARS = 20; // first-clean discount, via the FIRST20 code\n\n// The promo code customers type in on the payment page. Change this\n// anytime you want a new code — just paste the updated file back in.\nconst PROMO_CODE = \"FIRST20\";\n\n// ───────────────────────── referral program ─────────────────────────\n// Every confirmed booking's own reference (e.g. \"GM-AB3XZ9\") doubles as\n// that customer's personal referral code — nothing extra to generate or\n// look up. A friend enters it as their promo code at checkout (or follows\n// a ?ref=GM-AB3XZ9 link, which the site auto-fills for them): they get\n// REFERRAL_FRIEND_DOLLARS off, checked against Jobber exactly like FIRST20\n// so it only ever works for a genuinely new customer. The moment that\n// friend's booking is finalized, the referrer gets a one-time reward code\n// emailed to them automatically, worth REFERRAL_REWARD_DOLLARS off their\n// next clean — see genRewardCode()/saveRewardCode() below.\nconst REFERRAL_FRIEND_DOLLARS = 20;\nconst REFERRAL_REWARD_DOLLARS = 20;\n// NEW template you'll create in EmailJS for the \"your friend just booked —\n// here's your reward code\" email — see checklist for the exact fields it\n// needs ({{first_name}}, {{friend_name}}, {{reward_code}}, {{reward_amount}}).\nconst EMAILJS_REFERRAL_TEMPLATE_ID = \"template_referral_reward\";\n\nconst CORS_HEADERS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\nfunction json(data: any, status = 200) {\n return Response.json(data, { status, headers: CORS_HEADERS });\n}\n\n// ───────────────────────── booking storage (blob) ─────────────────────────\n// Each booking is saved as its own blob keyed by reference, plus a tiny\n// index blob mapping the private cancel token to that reference so the\n// cancel link never has to expose or guess a reference number.\nfunction bookingKey(reference: string) {\n return `booking:${reference}`;\n}\nfunction tokenKey(token: string) {\n return `token:${token}`;\n}\n// Reverse index so the Jobber webhook (which only ever hands us a Jobber\n// job ID, never our own reference) can find the matching booking in one\n// lookup instead of scanning everything. jobberJobId itself has already\n// been stored right on the booking record since this file's very first\n// version (see handleFinalize below) — this just adds a fast way in from\n// the other direction.\nfunction jobberJobKey(jobberJobId: string) {\n return `jobberjob:${jobberJobId}`;\n}\n\nasync function saveBooking(b: Record) {\n await blob.setJSON(bookingKey(b.reference), b);\n await blob.setJSON(tokenKey(b.cancelToken), b.reference);\n if (b.jobberJobId) {\n await blob.setJSON(jobberJobKey(b.jobberJobId), b.reference);\n }\n}\nasync function getBookingByReference(reference: string) {\n return await blob.getJSON(bookingKey(reference));\n}\nasync function getBookingByToken(token: string) {\n const reference = await blob.getJSON(tokenKey(token));\n if (!reference) return null;\n return await getBookingByReference(reference);\n}\nasync function getBookingByJobberJobId(jobberJobId: string) {\n const reference = await blob.getJSON(jobberJobKey(jobberJobId));\n if (!reference) return null;\n return await getBookingByReference(reference);\n}\nfunction randomToken() {\n const bytes = new Uint8Array(24);\n crypto.getRandomValues(bytes);\n return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction genReference() {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let ref = \"GM-\";\n for (let i = 0; i < 6; i++) {\n ref += chars[Math.floor(Math.random() * chars.length)];\n }\n return ref;\n}\n\n// A referrer's earned reward — one-time use, worth REFERRAL_REWARD_DOLLARS\n// off their next clean. Deliberately a different prefix (\"THANKS-\") than\n// booking references (\"GM-\") so the two code types can never collide or be\n// confused with each other when someone types one in at checkout.\nfunction rewardKey(code: string) {\n return `reward:${code}`;\n}\nasync function saveRewardCode(code: string, data: Record) {\n await blob.setJSON(rewardKey(code), data);\n}\nasync function getRewardCode(code: string) {\n return await blob.getJSON(rewardKey(code));\n}\nfunction genRewardCode() {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let code = \"THANKS-\";\n for (let i = 0; i < 6; i++) {\n code += chars[Math.floor(Math.random() * chars.length)];\n }\n return code;\n}\n\n// ───────────────────────── Vancouver-local time math ─────────────────────────\n// Booking dates/times are always Metro Vancouver local time. This compares\n// \"now\" and \"the scheduled visit\" as plain Vancouver wall-clock, which\n// sidesteps PST/PDT daylight-saving math entirely rather than getting it\n// subtly wrong twice a year.\n// Converts any real timestamp (a Date) into \"Vancouver wall-clock, expressed\n// as if it were UTC\" — the same units scheduledWallClockMs() below uses for\n// a booking's date/time. Diffing two values in these units gives a correct\n// hour count without ever touching real UTC-offset math or DST by hand.\nfunction vancouverWallMs(d: Date) {\n const parts = new Intl.DateTimeFormat(\"en-US\", {\n timeZone: \"America/Vancouver\",\n hour12: false,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n second: \"2-digit\",\n }).formatToParts(d).reduce((acc: any, p) => {\n acc[p.type] = p.value;\n return acc;\n }, {});\n return Date.UTC(\n +parts.year,\n +parts.month - 1,\n +parts.day,\n +parts.hour,\n +parts.minute,\n +parts.second,\n );\n}\nfunction vancouverNowMs() {\n return vancouverWallMs(new Date());\n}\nfunction scheduledWallClockMs(scheduledDate: string, scheduledTime24h: string) {\n const [y, m, d] = scheduledDate.split(\"-\").map(Number);\n const [hh, mm] = (scheduledTime24h || \"09:00\").split(\":\").map(Number);\n return Date.UTC(y, m - 1, d, hh, mm, 0);\n}\nfunction hoursUntil(scheduledDate: string, scheduledTime24h: string) {\n return (scheduledWallClockMs(scheduledDate, scheduledTime24h) -\n vancouverNowMs()) / 3600000;\n}\n\n// ───────────────────────── Stripe (raw REST) ─────────────────────────\nasync function stripeRequest(\n method: string,\n path: string,\n body?: Record,\n) {\n const form = body\n ? Object.entries(body).map(([k, v]) =>\n `${encodeURIComponent(k)}=${encodeURIComponent(String(v))}`\n ).join(\"&\")\n : undefined;\n const res = await fetch(`https://api.stripe.com/v1/${path}`, {\n method,\n headers: {\n Authorization: `Bearer ${STRIPE_SECRET_KEY}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: form,\n });\n const data = await res.json();\n if (!res.ok) {\n throw new Error(\n data.error?.message || `Stripe ${path} failed (${res.status})`,\n );\n }\n return data;\n}\nasync function findOrCreateStripeCustomer(email: string, name: string) {\n if (email) {\n const list = await stripeRequest(\n \"GET\",\n `customers?email=${encodeURIComponent(email)}&limit=1`,\n );\n if (list.data?.length) return list.data[0].id;\n }\n const created = await stripeRequest(\"POST\", \"customers\", {\n email: email || \"\",\n name: name || \"\",\n });\n return created.id;\n}\n// Note: there is deliberately no automatic refund function anywhere in\n// this file. Every cancellation path — self-serve (§5-6) and the\n// Jobber-triggered one (§9) — only ever marks a booking cancelled and\n// tells Henry whether a refund is owed. Issuing it is always a manual\n// step from the Stripe dashboard (Payments → find the charge → Refund).\n\n// ───────────────────────── Jobber relay (server-to-server) ─────────────────────────\nasync function checkJobberEligibility(\n email: string,\n phone: string,\n address: string,\n): Promise {\n const res = await fetch(JOBBER_RELAY_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ action: \"checkClient\", email, phone, address }),\n });\n const data = await res.json();\n // isReturning defaults true (= no discount) on any failure — see the\n // relay's checkClient handler.\n return !data.isReturning;\n}\nasync function createJobberJob(jobberPayload: Record) {\n const res = await fetch(JOBBER_RELAY_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(jobberPayload),\n });\n const data = await res.json().catch(() => ({}));\n return { ok: res.ok && data.ok !== false, data };\n}\nasync function cancelJobberJob(jobberJobId: string) {\n if (!jobberJobId) return { ok: true, skipped: true };\n const res = await fetch(JOBBER_RELAY_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ action: \"cancelJob\", jobberJobId }),\n });\n const data = await res.json().catch(() => ({}));\n return { ok: res.ok && data.ok !== false, data };\n}\n\n// ───────────────────────── Email (EmailJS REST) ─────────────────────────\nasync function sendEmail(\n templateId: string,\n toEmail: string,\n params: Record,\n) {\n if (!toEmail) return;\n try {\n const res = await fetch(\"https://api.emailjs.com/api/v1.0/email/send\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n service_id: EMAILJS_SERVICE_ID,\n template_id: templateId,\n user_id: EMAILJS_PUBLIC_KEY,\n accessToken: EMAILJS_PRIVATE_KEY,\n template_params: { to_email: toEmail, ...params },\n }),\n });\n if (!res.ok) {\n console.log(\"EmailJS send failed:\", res.status, await res.text());\n }\n } catch (err: any) {\n console.log(\"EmailJS send threw:\", err.message || String(err));\n }\n}\n\n// A plain-text fallback straight to Henry — reuses the same FormSubmit pipe\n// the site already uses for its own Jobber-failure alerts, so it's proven\n// to reach his inbox even if this is the very first time this code runs.\nasync function alertHenry(subject: string, lines: Record) {\n try {\n const fd = new FormData();\n fd.set(\"_subject\", subject);\n Object.entries(lines).forEach(([k, v]) => fd.set(k, v));\n await fetch(\"https://formsubmit.co/ajax/ee6b06d638357bffe3e89c2579084290\", {\n method: \"POST\",\n headers: { Accept: \"application/json\" },\n body: fd,\n });\n } catch (err: any) {\n console.log(\"alertHenry failed:\", err.message || String(err));\n }\n}\n\n// ───────────────────────── §1–3: price + charge ─────────────────────────\n// Default POST body: { basePrice, name, email, phone, address, reference?, promoCode? }\n//\n// The discount is NEVER automatic anymore. It only applies when a promo\n// code is sent here as `promoCode` — either the customer typed one in, or\n// the site auto-filled it from a referral link. There are three kinds of\n// code, told apart by their shape:\n// FIRST20 — the general first-clean code, requires a genuinely\n// new customer (checked with Jobber server-side, same\n// as always — the browser can't skip or fake this).\n// GM-XXXXXX — someone's own booking reference, shared as a referral\n// code/link. Same \"must be a genuinely new customer\"\n// check as FIRST20 — which also means the referrer\n// can't just reuse their own code on themselves.\n// THANKS-XXXXXX — a reward code a referrer already earned (see\n// handleFinalize below). No new-customer check here —\n// by definition they're already a customer — it just\n// has to be a real, unused reward.\nasync function handlePrice(req: Request) {\n const body = await req.json();\n const basePrice = Math.round(Number(body.basePrice) * 100) / 100;\n if (!basePrice || basePrice <= 0) {\n return json({ error: \"Missing or invalid amount.\" }, 400);\n }\n\n const promoCode = String(body.promoCode || \"\").trim();\n const upper = promoCode.toUpperCase();\n let discount = 0;\n let promoApplied = false;\n let promoError = \"\";\n let referralCode = \"\"; // set when a FRIEND is redeeming someone else's referral code\n let rewardCode = \"\"; // set when a REFERRER is redeeming their own earned reward\n\n async function checkNewCustomer(): Promise {\n try {\n // Never let a slow/unreachable Jobber lookup hang checkout.\n return await Promise.race([\n checkJobberEligibility(\n body.email || \"\",\n body.phone || \"\",\n body.address || \"\",\n ),\n new Promise((resolve) =>\n setTimeout(() => resolve(false), 6000)\n ),\n ]);\n } catch (err: any) {\n console.log(\n \"Eligibility check failed, defaulting to no discount:\",\n err.message || String(err),\n );\n return false;\n }\n }\n const NOT_FIRST_TIME_ERROR =\n \"This code is for first-time customers only — looks like you've already got a booking with us on file.\";\n\n if (promoCode) {\n if (upper === PROMO_CODE.toUpperCase()) {\n if (await checkNewCustomer()) {\n discount = DISCOUNT_DOLLARS;\n promoApplied = true;\n } else promoError = NOT_FIRST_TIME_ERROR;\n } else if (upper.startsWith(\"THANKS-\")) {\n const reward = await getRewardCode(upper);\n if (!reward) promoError = \"That code isn't valid.\";\n else if (reward.used) promoError = \"That code has already been used.\";\n else {\n discount = Number(reward.amount) || REFERRAL_REWARD_DOLLARS;\n promoApplied = true;\n rewardCode = upper;\n }\n } else if (upper.startsWith(\"GM-\")) {\n const referrerBooking = await getBookingByReference(upper);\n if (!referrerBooking || referrerBooking.status === \"cancelled\") {\n promoError = \"That code isn't valid.\";\n } else if (await checkNewCustomer()) {\n discount = REFERRAL_FRIEND_DOLLARS;\n promoApplied = true;\n referralCode = upper;\n } else {\n promoError = NOT_FIRST_TIME_ERROR;\n }\n } else {\n promoError = \"That code isn't valid.\";\n }\n }\n\n const finalPrice = Math.max(0, basePrice - discount);\n const reference = body.reference || genReference();\n\n const customerId = await findOrCreateStripeCustomer(\n body.email || \"\",\n body.name || \"\",\n );\n const intent = await stripeRequest(\"POST\", \"payment_intents\", {\n amount: String(Math.round(finalPrice * 100)),\n currency: \"cad\",\n customer: customerId,\n \"payment_method_types[]\": \"card\",\n setup_future_usage: \"off_session\", // keeps the card on file for a possible add-on charge later (§7)\n description: `Good Maid Cleaning booking ${reference}`,\n receipt_email: body.email || \"\",\n \"metadata[reference]\": reference,\n \"metadata[discount]\": String(discount),\n \"metadata[referralCode]\": referralCode,\n \"metadata[rewardCode]\": rewardCode,\n });\n\n return json({\n clientSecret: intent.client_secret,\n reference,\n basePrice,\n discount,\n finalPrice,\n promoApplied,\n promoError,\n });\n}\n\n// ───────────────────────── §1–4: finalize after a successful charge ─────────────────────────\n// Body: { paymentIntentId, reference, booking: { ...contact + service details, jobberPayload } }\nasync function handleFinalize(req: Request) {\n const body = await req.json();\n const { paymentIntentId, booking } = body;\n if (!paymentIntentId || !booking) {\n return json({ error: \"Missing paymentIntentId or booking.\" }, 400);\n }\n\n // Never trust the browser's word that a charge went through — ask Stripe.\n const intent = await stripeRequest(\n \"GET\",\n `payment_intents/${paymentIntentId}`,\n );\n if (intent.status !== \"succeeded\") {\n return json({\n error: \"Payment has not succeeded — booking was not created.\",\n }, 402);\n }\n\n const reference = intent.metadata?.reference || body.reference ||\n genReference();\n const discount = Number(intent.metadata?.discount || 0);\n const referralCode = intent.metadata?.referralCode || \"\";\n const rewardCode = intent.metadata?.rewardCode || \"\";\n const finalPrice = intent.amount_received / 100;\n const cancelToken = randomToken();\n\n const jobberResult = await createJobberJob(booking.jobberPayload).catch((\n err,\n ) => ({ ok: false, data: { error: err.message } }));\n const jobberJobId = jobberResult.data?.job?.id || null;\n\n if (!jobberResult.ok) {\n await alertHenry(\n `⚠️ Booking ${reference} may be MISSING from Jobber — action needed`,\n {\n \"What happened\":\n \"This customer WAS charged successfully, but the booking failed to reach Jobber. Please add this job to Jobber manually.\",\n \"Reference\": reference,\n \"Customer name\": booking.name || \"\",\n \"Customer email\": booking.email || \"\",\n \"Customer phone\": booking.phone || \"\",\n \"Address\": `${booking.address || \"\"}${\n booking.unit ? \" #\" + booking.unit : \"\"\n }, ${booking.city || \"\"}`,\n \"Date\": booking.dateLabel || \"\",\n \"Time\": booking.timeLabel || \"\",\n \"Price charged\": `$${finalPrice.toFixed(2)}`,\n \"Technical detail\": JSON.stringify(jobberResult.data || {}).slice(\n 0,\n 500,\n ),\n },\n );\n }\n\n const record = {\n reference,\n cancelToken,\n status: \"confirmed\",\n customerName: booking.name || \"\",\n customerEmail: booking.email || \"\",\n customerPhone: booking.phone || \"\",\n address: booking.address || \"\",\n unit: booking.unit || \"\",\n city: booking.city || \"\",\n postal: booking.postal || \"\",\n serviceLabel: booking.serviceLabel || \"\",\n dateLabel: booking.dateLabel || \"\",\n timeLabel: booking.timeLabel || \"\",\n scheduledDate: booking.scheduledDate,\n scheduledTime24h: booking.scheduledTime24h,\n basePriceCents: intent.amount_received + Math.round(discount * 100),\n discountCents: Math.round(discount * 100),\n finalPriceCents: intent.amount_received,\n stripePaymentIntentId: paymentIntentId,\n stripeCustomerId: intent.customer,\n stripePaymentMethodId: intent.payment_method,\n jobberJobId,\n refunded: false,\n referredBy: referralCode || null, // the referrer's code, if this booking came from one — just for your own records\n createdAt: new Date().toISOString(),\n cancelledAt: null,\n };\n await saveBooking(record);\n\n // A reward code just got spent (a referrer redeeming their own earned\n // discount) — mark it used right here, only once payment is genuinely\n // confirmed, so it can never be redeemed a second time.\n if (rewardCode) {\n const reward = await getRewardCode(rewardCode);\n if (reward) {\n reward.used = true;\n reward.usedAt = new Date().toISOString();\n reward.usedByReference = reference;\n await saveRewardCode(rewardCode, reward);\n }\n }\n\n // This booking was made using someone ELSE's referral code — a real,\n // verified new customer just booked because of them. Mint that referrer\n // a fresh one-time reward code for their own next clean and email it to\n // them automatically, no action needed from Henry.\n if (referralCode) {\n const referrerBooking = await getBookingByReference(referralCode);\n if (referrerBooking?.customerEmail) {\n const newReward = genRewardCode();\n await saveRewardCode(newReward, {\n email: referrerBooking.customerEmail,\n amount: REFERRAL_REWARD_DOLLARS,\n used: false,\n earnedFromReference: reference,\n createdAt: new Date().toISOString(),\n });\n await sendEmail(\n EMAILJS_REFERRAL_TEMPLATE_ID,\n referrerBooking.customerEmail,\n {\n first_name:\n (referrerBooking.customerName || \"\").trim().split(/\\s+/)[0] ||\n \"there\",\n friend_name: (booking.name || \"\").trim().split(/\\s+/)[0] ||\n \"Your friend\",\n reward_code: newReward,\n reward_amount: REFERRAL_REWARD_DOLLARS.toFixed(2),\n },\n );\n }\n }\n\n const discountLine = discount <= 0\n ? \"\"\n : referralCode\n ? `Includes a $${discount.toFixed(2)} referral discount.`\n : rewardCode\n ? `Includes a $${discount.toFixed(2)} referral reward.`\n : `Includes a $${discount.toFixed(2)} first-clean discount.`;\n\n const cancelUrl = `${SITE_URL}/manage.html?t=${cancelToken}`;\n await sendEmail(EMAILJS_CONFIRM_TEMPLATE_ID, booking.email, {\n first_name: (booking.name || \"\").trim().split(/\\s+/)[0] || \"there\",\n reference,\n service: booking.serviceLabel,\n date: booking.dateLabel,\n time: booking.timeLabel,\n address: `${booking.address || \"\"}${\n booking.unit ? \" #\" + booking.unit : \"\"\n }, ${booking.city || \"\"}`,\n price: finalPrice.toFixed(2),\n discount_line: discountLine,\n referral_code: reference,\n cancel_url: cancelUrl,\n });\n\n return json({ reference, cancelUrl, jobberJobId });\n}\n\n// ───────────────────────── §5–6: look up a booking — by its cancel link, or by Henry looking up a reference ─────────────────────────\n// Two ways in, same response shape: the customer's self-serve link supplies\n// ?t= (proves it's their booking without any login); Henry's admin\n// tools page supplies ?ref=&adminKey= instead, so he can\n// pull up a caller's exact booking by their confirmation number before\n// cancelling it or adding a charge (§6/§7).\nasync function handleManage(req: Request) {\n const params = new URL(req.url).searchParams;\n const token = params.get(\"t\");\n const reference = params.get(\"ref\");\n const adminKey = params.get(\"adminKey\");\n\n let b: Record | null = null;\n if (token) {\n b = await getBookingByToken(token);\n } else if (reference && adminKey) {\n if (adminKey !== ADMIN_KEY) return json({ error: \"Not authorized.\" }, 401);\n b = await getBookingByReference(reference);\n } else {\n return json({ error: \"Provide a token, or a reference + adminKey.\" }, 400);\n }\n if (!b) return json({ error: \"We couldn't find that booking.\" }, 404);\n\n const hrs = hoursUntil(b.scheduledDate, b.scheduledTime24h);\n return json({\n reference: b.reference,\n status: b.status,\n customerName: b.customerName,\n customerEmail: b.customerEmail,\n customerPhone: b.customerPhone,\n serviceLabel: b.serviceLabel,\n dateLabel: b.dateLabel,\n timeLabel: b.timeLabel,\n address: `${b.address}${b.unit ? \" #\" + b.unit : \"\"}, ${b.city}`,\n price: (b.finalPriceCents / 100).toFixed(2),\n refunded: !!b.refunded,\n hoursUntil: hrs,\n hasCardOnFile: !!(b.stripeCustomerId && b.stripePaymentMethodId),\n });\n}\n\n// ───────────────────────── §5–6: cancellation — the ONE shared code path ─────────────────────────\n// Used by both the customer's self-serve link and Henry's phone/email\n// fallback. Cancelling just pulls the job from Jobber and marks the\n// booking cancelled — it never touches Stripe. Refunds are a deliberate,\n// manual decision: if a customer follows up asking for their money back,\n// refund them by hand from the Stripe dashboard (Payments → find the\n// charge → Refund), then optionally mark them refunded with the admin\n// tools page so the record here matches.\nasync function performCancellation(b: Record) {\n if (b.status === \"cancelled\") {\n return { alreadyCancelled: true, refunded: !!b.refunded };\n }\n\n const jobberResult = await cancelJobberJob(b.jobberJobId).catch((err) => ({\n ok: false,\n data: { error: err.message },\n }));\n if (!jobberResult.ok) {\n await alertHenry(\n `⚠️ Booking ${b.reference} cancelled but may still be on your Jobber calendar`,\n {\n \"What happened\":\n \"This booking was cancelled on the website, but removing the job from Jobber failed automatically. Please remove/reschedule it in Jobber by hand so a cleaner doesn't show up.\",\n \"Reference\": b.reference,\n \"Customer\": b.customerName || \"\",\n \"Date\": b.dateLabel || \"\",\n \"Time\": b.timeLabel || \"\",\n \"Technical detail\": JSON.stringify(jobberResult.data || {}).slice(\n 0,\n 500,\n ),\n },\n );\n }\n\n b.status = \"cancelled\";\n b.cancelledAt = new Date().toISOString();\n await saveBooking(b);\n\n await sendEmail(EMAILJS_CANCEL_TEMPLATE_ID, b.customerEmail, {\n first_name: (b.customerName || \"\").trim().split(/\\s+/)[0] || \"there\",\n reference: b.reference,\n service: b.serviceLabel,\n date: b.dateLabel,\n time: b.timeLabel,\n price: (b.finalPriceCents / 100).toFixed(2),\n });\n\n return { alreadyCancelled: false, refunded: !!b.refunded };\n}\n\n// Body: EITHER { token } for the self-serve link, OR\n// { reference, adminKey } for Henry's phone/email fallback (§6).\nasync function handleCancel(req: Request) {\n const body = await req.json();\n let b: Record | null = null;\n\n if (body.token) {\n b = await getBookingByToken(body.token);\n } else if (body.reference && body.adminKey) {\n if (body.adminKey !== ADMIN_KEY) {\n return json({ error: \"Not authorized.\" }, 401);\n }\n b = await getBookingByReference(body.reference);\n } else {\n return json({ error: \"Provide a token, or a reference + adminKey.\" }, 400);\n }\n if (!b) return json({ error: \"We couldn't find that booking.\" }, 404);\n\n const outcome = await performCancellation(b);\n return json(outcome);\n}\n\n// ───────────────────────── §9: automatic cancellation triggered FROM Jobber ─────────────────────────\n// The mirror image of performCancellation() above. That one runs when the\n// CUSTOMER (or Henry, by phone) cancels through the site, and it reaches\n// OUT to Jobber to close the job. This one runs the other way: Henry\n// closes/cancels the job directly in Jobber, Jobber's webhook tells the\n// Jobber relay val, and the relay calls in here (see\n// jobber-relay-updated.ts, \"§ webhook: job closed/destroyed\").\n//\n// Refunds are ALWAYS manual, on purpose — Henry asked for this explicitly\n// (2026-09-13): this never calls Stripe, no matter how far out the booking\n// was. So the only two things this path does automatically are marking the\n// booking cancelled and sending the same cancellation email as a\n// self-serve cancel — exactly like performCancellation() above, just\n// triggered from Jobber's side instead of the site's. It still works out\n// and reports whether the 24-hour window was met, so the alert below tells\n// Henry whether he owes a refund — he just has to actually issue it\n// himself from the Stripe dashboard (Payments → find the charge → Refund),\n// same as every other refund in this system.\n// - It NEVER calls back into Jobber — the job is already closed there,\n// that's what triggered this in the first place. Calling cancelJobberJob\n// again would be pointless at best and could throw at worst.\n// - It ALWAYS emails Henry a short summary of what happened and whether\n// a refund is owed, so a real customer's booking never changes state\n// silently.\n// - The relay only calls this at all once it's already decided (by\n// checking the job's visits) that this looked like a genuine\n// cancellation rather than Henry just marking a finished job done —\n// see that file for why \"closing a job\" in Jobber means both things\n// and how it tells them apart. If you ever see this fire for a job\n// you actually completed, that's the thing to double-check first.\nasync function performAutoCancellationFromJobber(b: Record) {\n if (b.status === \"cancelled\") {\n return { alreadyCancelled: true, refunded: !!b.refunded };\n }\n\n const hrs = hoursUntil(b.scheduledDate, b.scheduledTime24h);\n const refundOwed = hrs >= 24 && !b.refunded;\n\n b.status = \"cancelled\";\n b.cancelledAt = new Date().toISOString();\n b.cancelledVia = \"jobber\"; // distinguishes this from a self-serve site/phone cancellation, for your own records\n await saveBooking(b);\n\n await sendEmail(EMAILJS_CANCEL_TEMPLATE_ID, b.customerEmail, {\n first_name: (b.customerName || \"\").trim().split(/\\s+/)[0] || \"there\",\n reference: b.reference,\n service: b.serviceLabel,\n date: b.dateLabel,\n time: b.timeLabel,\n price: (b.finalPriceCents / 100).toFixed(2),\n });\n\n // Always a paper trail, so a real customer's booking never changes\n // state silently — and so Henry knows whether a refund is owed, since\n // this never issues one itself.\n await alertHenry(\n `Booking ${b.reference} auto-cancelled from Jobber${\n refundOwed ? \" — REFUND OWED\" : \"\"\n }`,\n {\n \"What happened\":\n `This job was cancelled/removed in Jobber, so the booking was automatically marked cancelled here and the customer was emailed a cancellation confirmation. No refund was issued automatically — refunds are always manual.${\n refundOwed\n ? \" This one was 24+ hours out at cancellation, so per the standard policy it's owed a refund — issue it from the Stripe dashboard (Payments → find the charge → Refund).\"\n : b.refunded\n ? \" It was already marked refunded.\"\n : \" It was inside the 24-hour window, so per the standard policy no refund is owed.\"\n }`,\n \"Reference\": b.reference,\n \"Customer\": b.customerName || \"\",\n \"Hours before appointment at cancellation\": hrs.toFixed(1),\n \"Amount\": `$${(b.finalPriceCents / 100).toFixed(2)}`,\n },\n );\n\n return { alreadyCancelled: false, refunded: !!b.refunded, refundOwed };\n}\n\n// Called server-to-server by the Jobber relay val, never by the browser.\n// Body: { jobberJobId, certainty } where certainty is one of:\n// \"completed\" — the relay found a genuinely completed visit on this job.\n// Ordinary finished job, not a cancellation — leave it alone.\n// \"cancelled\" — the relay is confident this was a real cancellation\n// (job destroyed outright, or closed with no completed\n// visit) — mark the booking cancelled and email the\n// customer. Never refunds — see performAutoCancellationFromJobber.\n// \"uncertain\" — the relay couldn't tell (e.g. Jobber's API didn't\n// answer) — this just emails Henry to check the booking\n// by hand rather than guess.\nasync function handleJobberJobClosed(req: Request) {\n const body = await req.json();\n const jobberJobId = body.jobberJobId;\n const certainty = body.certainty;\n if (!jobberJobId) {\n return json({ ok: false, error: \"Missing jobberJobId.\" }, 400);\n }\n\n const b = await getBookingByJobberJobId(jobberJobId);\n if (!b) {\n // This used to fail completely silently — Henry would never know a\n // cancellation-from-Jobber didn't go through. Now it at least alerts\n // him, so a missed lookup is never a silent no-op. Most common reason\n // this happens: the job in Jobber was never linked to a booking record\n // here — either it's older than this feature, or it was created\n // directly in Jobber rather than through the website's checkout.\n await alertHenry(\n `❓ A job was closed/removed in Jobber, but no matching booking was found here`,\n {\n \"What happened\":\n \"Jobber told us a job was cancelled or removed, but we couldn't find any booking in our own records with that Jobber job ID — so nothing was changed automatically and the customer was NOT emailed. This usually means the job was created directly in Jobber (not through the website) or predates this automation. If this was a real customer, cancel their booking by hand from the admin tools page (or ask Claude for a workaround) so they get their cancellation email.\",\n \"Jobber job ID\": jobberJobId,\n },\n );\n return json({\n ok: false,\n error: \"No booking found for that Jobber job ID.\",\n }, 404);\n }\n\n if (certainty === \"completed\") {\n // Logged but not emailed, so a normal finished job every week doesn't\n // clutter your inbox.\n console.log(\n `jobberJobClosed: ${b.reference} looked like a normal completion — leaving it alone.`,\n );\n return json({ ok: true, skipped: true, reason: \"completed\" });\n }\n\n if (certainty === \"uncertain\") {\n await alertHenry(\n `❓ Booking ${b.reference} — job closed in Jobber, couldn't confirm if it was a cancellation`,\n {\n \"What happened\":\n \"This job was closed or removed in Jobber, but we couldn't automatically confirm whether that was a real cancellation or you just marking a finished job done — so nothing was changed automatically (no refund, no status change, no email sent to the customer). Please check this booking and, if it really was cancelled, cancel it from the manage/admin tools page yourself.\",\n \"Reference\": b.reference,\n \"Customer\": b.customerName || \"\",\n \"Date\": b.dateLabel || \"\",\n \"Time\": b.timeLabel || \"\",\n },\n );\n return json({ ok: true, skipped: true, reason: \"uncertain\" });\n }\n\n const outcome = await performAutoCancellationFromJobber(b);\n return json({ ok: true, ...outcome });\n}\n\n// ───────────────────────── §7: add-on charge (Henry only) ─────────────────────────\n// Body: { reference, adminKey, amount, description }\nasync function handleAddon(req: Request) {\n const body = await req.json();\n if (body.adminKey !== ADMIN_KEY) {\n return json({ error: \"Not authorized.\" }, 401);\n }\n const amountCents = Math.round(Number(body.amount) * 100);\n if (!amountCents || amountCents <= 0) {\n return json({ error: \"Invalid amount.\" }, 400);\n }\n\n const b = await getBookingByReference(body.reference);\n if (!b) return json({ error: \"We couldn't find that booking.\" }, 404);\n if (!b.stripeCustomerId || !b.stripePaymentMethodId) {\n return json({\n error:\n \"No card on file for this booking — ask the customer for a new card instead.\",\n }, 400);\n }\n\n try {\n const intent = await stripeRequest(\"POST\", \"payment_intents\", {\n amount: String(amountCents),\n currency: \"cad\",\n customer: b.stripeCustomerId,\n payment_method: b.stripePaymentMethodId,\n off_session: \"true\",\n confirm: \"true\",\n description: body.description ||\n `Add-on charge for booking ${b.reference}`,\n });\n return json({\n success: intent.status === \"succeeded\",\n status: intent.status,\n });\n } catch (err: any) {\n return json({\n error:\n `Charge failed: ${err.message} — the card on file may need the customer to provide a new one.`,\n }, 402);\n }\n}\n\n// ───────────────────────── §8: mark a booking refunded (record-keeping only) ─────────────────────────\n// Cancelling never touches Stripe (see §5–6 above) — refunds are always a\n// manual decision made by hand in the Stripe dashboard. This endpoint does\n// NOT issue a refund; it just updates this booking's own record to say one\n// was given, once Henry has actually done it in Stripe, so the admin tools\n// page shows the right thing next time this booking is looked up.\n// Body: { reference, adminKey }\nasync function handleMarkRefunded(req: Request) {\n const body = await req.json();\n if (body.adminKey !== ADMIN_KEY) {\n return json({ error: \"Not authorized.\" }, 401);\n }\n const b = await getBookingByReference(body.reference);\n if (!b) return json({ error: \"We couldn't find that booking.\" }, 404);\n b.refunded = true;\n await saveBooking(b);\n return json({ success: true, refunded: true });\n}\n\n// ───────────────────────── §9: list all bookings (admin) ─────────────────────────\n// Powers the \"All bookings\" view in admin tools — a read-only list of every\n// saved booking, newest first, so Henry can see everything at a glance\n// instead of looking each one up by reference number one at a time.\nasync function handleListBookings(req: Request) {\n const params = new URL(req.url).searchParams;\n const adminKey = params.get(\"adminKey\");\n if (adminKey !== ADMIN_KEY) return json({ error: \"Not authorized.\" }, 401);\n\n // Only \"booking:\" keys are real bookings — the \"token:\" and \"jobberjob:\"\n // blobs are just internal lookup indexes pointing at those same records,\n // so listing this one prefix is all that's needed.\n const keys = await blob.list(\"booking:\");\n const bookings = await Promise.all(keys.map((k: any) => blob.getJSON(k.key)));\n\n const list = bookings\n .filter(Boolean)\n .map((b: any) => {\n // Was this cancelled with 24+ hours' notice? Computed from the\n // moment it was actually cancelled, not \"now\" — a booking cancelled\n // last month for a visit that was scheduled next week still correctly\n // shows as \"refund owed\" today. Only meaningful for cancelled,\n // not-yet-refunded bookings.\n let refundOwed = false;\n if (\n b.status === \"cancelled\" && !b.refunded && b.scheduledDate &&\n b.cancelledAt\n ) {\n const scheduledMs = scheduledWallClockMs(\n b.scheduledDate,\n b.scheduledTime24h || \"09:00\",\n );\n const cancelledMs = vancouverWallMs(new Date(b.cancelledAt));\n refundOwed = (scheduledMs - cancelledMs) / 3600000 >= 24;\n }\n return {\n reference: b.reference,\n status: b.status,\n customerName: b.customerName || \"\",\n customerEmail: b.customerEmail || \"\",\n customerPhone: b.customerPhone || \"\",\n serviceLabel: b.serviceLabel || \"\",\n dateLabel: b.dateLabel || \"\",\n timeLabel: b.timeLabel || \"\",\n scheduledDate: b.scheduledDate || \"\",\n scheduledTime24h: b.scheduledTime24h || \"\",\n city: b.city || \"\",\n price: ((b.finalPriceCents || 0) / 100).toFixed(2),\n refunded: !!b.refunded,\n refundOwed,\n createdAt: b.createdAt || \"\",\n cancelledAt: b.cancelledAt || null,\n };\n })\n // Newest-created first.\n .sort((a, b) => (b.createdAt || \"\").localeCompare(a.createdAt || \"\"));\n\n return json({ bookings: list });\n}\n\n// ───────────────────────── router ─────────────────────────\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { headers: CORS_HEADERS });\n }\n if (!STRIPE_SECRET_KEY) {\n return json({\n error:\n \"STRIPE_SECRET_KEY isn't set. Add it under this val's Env Variables.\",\n }, 500);\n }\n\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/$/, \"\");\n\n try {\n if (req.method === \"GET\" && path === \"/manage\") {\n return await handleManage(req);\n }\n if (req.method === \"GET\" && path === \"/bookings\") {\n return await handleListBookings(req);\n }\n if (req.method === \"POST\") {\n const clone = req.clone();\n const body = await clone.json().catch(() => ({}));\n if (body.action === \"finalize\") return await handleFinalize(req);\n if (body.action === \"cancel\") return await handleCancel(req);\n if (body.action === \"jobberJobClosed\") {\n return await handleJobberJobClosed(req);\n }\n if (body.action === \"addon\") return await handleAddon(req);\n if (body.action === \"markRefunded\") return await handleMarkRefunded(req);\n // No action — this is the original \"start a payment\" behavior.\n return await handlePrice(req);\n }\n return new Response(\n \"Good Maid Cleaning — payment + booking relay. Your website POSTs booking details here.\",\n { headers: { \"Content-Type\": \"text/plain\", ...CORS_HEADERS } },\n );\n } catch (err: any) {\n console.log(\"Relay error:\", err.message || String(err));\n return json({ error: err.message || String(err) }, 500);\n }\n}","createdAt",["D",1789339023821],"branchVersion","branchId","048abbb8-4f23-4e25-9a2a-f303da251163","id","8404c8b3-4aa5-43b8-8583-ddc128d651ed","goodmaid-stripe",["D",1788808460593],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","2cd2bd26-9686-4dcd-a759-914e239335a0","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a07323-8ac8-72a9-899a-bc2445c41a3d","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_102":53},"org",{"_96":95,"_97":53,"_98":53,"_18":55,"_99":100,"_101":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",19,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","goodmaidcleaning","handle","displayName","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":149,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":150,"_80":151,"_82":152,"_84":25},"tree",[144],"files",[144],"counts",{"_132":62,"_133":134,"_135":62,"_136":137,"_138":139},"contents",[124],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":125,"_32":28,"_30":31,"_126":-5,"_41":42,"_40":14,"_127":25,"_38":128,"_13":129,"_33":34,"_35":37,"_24":25,"_130":-5,"_27":131},"705efe30-8712-4e1c-a4de-3d692bf65b1c","parentId","latest",["D",1789339023821],11,"label",[28],"pulls","branches",1,"forks","envVars",{"_140":142,"_143":62},"connections",{"_140":62,"_141":62},"count","unfilledCount",3,"emptyCount",{"_43":125,"_32":28,"_30":31,"_126":-5,"_41":42,"_40":14,"_127":25,"_38":145,"_13":129,"_33":34,"_35":37,"_24":25,"_130":-5,"_146":147,"_27":148},["D",1789339023821],"children",[],[28],["D",1788808460593],{"_96":95,"_102":53},{"_96":95,"_97":53,"_98":53,"_18":55,"_99":100,"_101":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_121":186,"_187":188,"_189":190,"_191":25,"_192":25,"_193":25,"_194":58,"_195":-5,"_196":-7,"_197":-7,"_198":62,"_199":25,"_200":25,"_201":-5,"_202":25,"_203":25,"_204":25,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":86,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v12