[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_345":346,"_347":348},"routes/_app.x.$handle.$name",{"_96":95,"_32":46,"_104":86,"_27":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":25,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":-5,"_58":25,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",24,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","src/main.ts","latestPath","fileId","115fed5e-8aa7-11f1-8c4e-1607ee4eb77e","name","main.ts","fileType","script","content","import { buildDigest } from \"./digest.ts\";\nimport { render } from \"./render.ts\";\n\n/** Minimal --flag / --flag=value parser. Hand-rolled to keep the project free\n * of external dependencies, so files drop into Val Town unchanged. */\nfunction parseArgs(argv: string[]): Record {\n const out: Record = {};\n for (const arg of argv) {\n if (!arg.startsWith(\"--\")) continue;\n const [key, ...rest] = arg.slice(2).split(\"=\");\n out[key!] = rest.length > 0 ? rest.join(\"=\") : true;\n }\n return out;\n}\n\n/**\n * Wraps the email fragment in a real document for local inspection.\n *\n * The viewport meta is the point: without it a browser assumes a 980px virtual\n * viewport and device-mode emulation renders everything zoomed out, which looks\n * nothing like a mail client. This tag must NOT go in the email body itself —\n * clients embed the fragment in their own document and strip it anyway.\n */\nfunction previewPage(title: string, body: string): string {\n return `\n\n\n${title.replace(/[<&]/g, \"\")}\n${body}`;\n}\n\n/** CLI entrypoint. Defaults to the plain-text digest; other formats on request. */\nif (import.meta.main) {\n const args = parseArgs(Deno.args);\n\n if (args.help) {\n console.log(`Pull Google Calendar + Tasks and render a digest.\n\n --days=N window length in days, counting today (default 8)\n --start=YYYY-MM-DD first day (default today in --tz)\n --tz=ZONE IANA zone defining \"today\" (default DIGEST_TZ or America/Los_Angeles)\n --lookback=N days back to include completed tasks (default 7, 0 = none)\n --no-tasks skip the Tasks API\n\n --html emit HTML email body (fragment, as sent)\n --preview same, wrapped in a full page for browser/device-mode testing\n --json emit the raw normalized digest\n --subject emit just the subject line and notification preheader\n --summary print counts to stderr\n`);\n Deno.exit(0);\n }\n\n const digest = await buildDigest({\n days: typeof args.days === \"string\" ? Number(args.days) : undefined,\n start: typeof args.start === \"string\" ? args.start : undefined,\n timeZone: typeof args.tz === \"string\" ? args.tz : undefined,\n includeTasks: !args[\"no-tasks\"],\n completedLookbackDays: typeof args.lookback === \"string\" ? Number(args.lookback) : undefined,\n });\n\n // Warnings go to stderr so redirecting stdout keeps the payload clean.\n for (const warning of digest.warnings) console.error(`warning: ${warning}`);\n\n if (args.summary) {\n const pending = digest.tasks.filter((t) => t.status === \"needsAction\").length;\n console.error(\n `${digest.calendars.length} calendars, ${digest.events.length} events, ` +\n `${digest.tasks.length} tasks (${pending} pending) ` +\n `over ${digest.window.days}d from ${digest.window.startDay} [${digest.timeZone}]`,\n );\n } else if (args.json) {\n console.log(JSON.stringify(digest, null, 2));\n } else {\n const out = render(digest);\n if (args.subject) console.log(`${out.subject}\\n\\n${out.preheader}`);\n else if (args.html) console.log(out.html);\n else if (args.preview) console.log(previewPage(out.subject, out.html));\n else console.log(out.text);\n }\n}\n","import { buildDigest } from \"./digest.ts\";\nimport { render } from \"./render.ts\";\n\n/** Minimal --flag / --flag=value parser. Hand-rolled to keep the project free\n * of external dependencies, so files drop into Val Town unchanged. */\nfunction parseArgs(argv: string[]): Record {\n const out: Record = {};\n for (const arg of argv) {\n if (!arg.startsWith(\"--\")) continue;\n const [key, ...rest] = arg.slice(2).split(\"=\");\n out[key!] = rest.length > 0 ? rest.join(\"=\") : true;\n }\n return out;\n}\n\n/** CLI entrypoint. Defaults to the plain-text digest; other formats on request. */\nif (import.meta.main) {\n const args = parseArgs(Deno.args);\n\n if (args.help) {\n console.log(`Pull Google Calendar + Tasks and render a digest.\n\n --days=N window length in days, counting today (default 8)\n --start=YYYY-MM-DD first day (default today in --tz)\n --tz=ZONE IANA zone defining \"today\" (default DIGEST_TZ or America/Los_Angeles)\n --lookback=N days back to include completed tasks (default 7, 0 = none)\n --no-tasks skip the Tasks API\n\n --html emit the HTML email body (a complete document, as sent)\n --json emit the raw normalized digest\n --subject emit just the subject line and notification preheader\n --summary print counts to stderr\n`);\n Deno.exit(0);\n }\n\n const digest = await buildDigest({\n days: typeof args.days === \"string\" ? Number(args.days) : undefined,\n start: typeof args.start === \"string\" ? args.start : undefined,\n timeZone: typeof args.tz === \"string\" ? args.tz : undefined,\n includeTasks: !args[\"no-tasks\"],\n completedLookbackDays: typeof args.lookback === \"string\" ? Number(args.lookback) : undefined,\n });\n\n // Warnings go to stderr so redirecting stdout keeps the payload clean.\n for (const warning of digest.warnings) console.error(`warning: ${warning}`);\n\n if (args.summary) {\n const pending = digest.tasks.filter((t) => t.status === \"needsAction\").length;\n console.error(\n `${digest.calendars.length} calendars, ${digest.events.length} events, ` +\n `${digest.tasks.length} tasks (${pending} pending) ` +\n `over ${digest.window.days}d from ${digest.window.startDay} [${digest.timeZone}]`,\n );\n } else if (args.json) {\n console.log(JSON.stringify(digest, null, 2));\n } else {\n const out = render(digest);\n if (args.subject) console.log(`${out.subject}\\n\\n${out.preheader}`);\n else if (args.html) console.log(out.html);\n else console.log(out.text);\n }\n}\n","createdAt",["D",1785261721295],"branchVersion","branchId","eaa8c44a-162c-486b-afea-cc6223ed1188","id","14d04cb9-397b-43d2-ba16-6cb3dc7f9a73","calendar-digest",["D",1785258556623],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Daily Google Calendar + Tasks digest, emailed each morning","imageUrl","019bcf70-5321-758b-8dfa-2be50f1fc9fb","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019bcf70-5321-758b-8dfa-2ea07f250c13","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_103":99},"org",{"_96":95,"_97":-5,"_98":99,"_18":56,"_100":101,"_102":25},"branch",{"_13":85,"_32":86,"_44":43,"_87":45,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":46,"_94":95},"isOwned",63,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","herschelrs","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18zOFBxeE4yTklpRW16aUxzZzlSaTZRa3BWN0wifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":341,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":-5,"_58":25,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":342,"_80":343,"_82":344,"_84":25},"tree",[203,205,217,218,219,220,221,222],"files",[203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222],"counts",{"_193":62,"_194":150,"_195":62,"_196":197,"_198":199},"contents",[126,127,128,129,130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":188,"_32":189,"_30":190,"_137":-5,"_42":43,"_41":150,"_139":140,"_39":191,"_13":62,"_34":186,"_36":-5,"_24":25,"_143":-5,"_27":192},{"_44":181,"_32":182,"_30":183,"_137":-5,"_42":43,"_41":184,"_139":140,"_39":185,"_13":62,"_34":186,"_36":-5,"_24":25,"_143":-5,"_27":187},{"_44":174,"_32":175,"_30":176,"_137":-5,"_42":43,"_41":177,"_139":25,"_39":178,"_13":62,"_34":20,"_36":179,"_24":25,"_143":-5,"_27":180},{"_44":167,"_32":168,"_30":169,"_137":-5,"_42":43,"_41":170,"_139":140,"_39":171,"_13":62,"_34":20,"_36":172,"_24":25,"_143":-5,"_27":173},{"_44":160,"_32":161,"_30":162,"_137":-5,"_42":43,"_41":163,"_139":140,"_39":164,"_13":62,"_34":20,"_36":165,"_24":25,"_143":-5,"_27":166},{"_44":153,"_32":154,"_30":155,"_137":-5,"_42":43,"_41":156,"_139":25,"_39":157,"_13":62,"_34":20,"_36":158,"_24":25,"_143":-5,"_27":159},{"_44":145,"_32":146,"_30":147,"_137":-5,"_42":43,"_41":148,"_139":140,"_39":149,"_13":150,"_34":20,"_36":151,"_24":25,"_143":-5,"_27":152},{"_44":134,"_32":135,"_30":136,"_137":-5,"_42":43,"_41":138,"_139":140,"_39":141,"_13":62,"_34":20,"_36":142,"_24":25,"_143":-5,"_27":144},"b95e20bf-94b9-4965-bf21-2d1379c8690a","deno.lock","11de68aa-8aa7-11f1-a8cc-1607ee4eb77e","parentId",19,"latest",true,["D",1785258558862],"{\n \"version\": \"5\",\n \"redirects\": {\n \"https://esm.town/v/std/API_URL\": \"https://esm.town/v/std/API_URL?v=5\",\n \"https://esm.town/v/std/email\": \"https://esm.town/v/std/email?v=13\",\n \"https://esm.town/v/stevekrouse/parseSendGridEmail\": \"https://esm.town/v/stevekrouse/parseSendGridEmail?v=8\"\n },\n \"remote\": {\n \"https://esm.town/v/std/API_URL?v=5\": \"46109f905a50e32281d3ffbe7b9c8209a778290c5274d83d131fba2d26c4974d\",\n \"https://esm.town/v/std/email?v=13\": \"50b8aac43f216be9c18a39c7699f240894b971132d6c6cb265430a59a72f2a9f\",\n \"https://esm.town/v/stevekrouse/parseSendGridEmail?v=8\": \"2337ac8d8e26df3e500e33005e2a4db38ef74c0b4afd9741745382b1abceeca1\",\n \"https://esm.town/v/stevekrouse/parseSendGridEmails?v=10\": \"0e385dcfaef9231f67f894d1684cb28e6635015e4890783fccace21118671aaa\"\n }\n}\n","label",[135],"b820ba8f-f902-4873-8d5a-e0f11995224e","deno.json","11cc472e-8aa7-11f1-97cf-1607ee4eb77e",22,["D",1785261721283],1,"{\n \"tasks\": {\n \"auth\": \"deno run --allow-net --allow-env --allow-read --env-file=.env scripts/authorize.ts\",\n \"start\": \"deno run --allow-net --allow-env --allow-read --env-file=.env src/main.ts\",\n \"preview\": \"deno run --allow-net --allow-env --allow-read --env-file=.env src/main.ts --html\",\n \"check\": \"deno check --allow-import=esm.town:443 src/main.ts src/val.ts scripts/authorize.ts\",\n \"fmt\": \"deno fmt\",\n \"lint\": \"deno lint\"\n },\n \"fmt\": {\n \"lineWidth\": 100\n },\n \"compilerOptions\": {\n \"strict\": true,\n \"noUncheckedIndexedAccess\": true\n }\n}\n",[146],"7db7ba8b-3e5f-4dad-b68e-fa48bcffaadb","README.md","115269f4-8aa7-11f1-89b5-1607ee4eb77e",5,["D",1785258557792],"# calendar-val\n\nPulls Google Calendar events and Google Tasks for a date window and emits normalized JSON.\nLocal-first Deno script, structured so the pipeline drops into a Val Town cron val unchanged.\n\nNo external dependencies.\n\n## One-time setup\n\n### 1. Google Cloud\n\n1. Create (or pick) a project at .\n2. **APIs & Services → Library** — enable **Google Calendar API** and **Google Tasks API**. Both\n must be enabled explicitly; the token will 403 otherwise.\n3. **APIs & Services → OAuth consent screen** — External, fill in the required fields. Add yourself\n as a test user.\n4. Add the two scopes: `.../auth/calendar.readonly` and `.../auth/tasks.readonly`.\n5. **Set publishing status to \"In production.\"** While the app sits in _Testing_, Google expires\n refresh tokens after 7 days. Using only these read-only scopes, going to production needs no\n verification review — it's one button.\n6. **Credentials → Create credentials → OAuth client ID → Application type: Desktop app.** Desktop\n app is what permits the loopback (`http://127.0.0.1:…`) redirect the auth script uses. Copy the\n client ID and secret.\n\n### 2. Local\n\n```sh\ncp .env.example .env # paste in the client ID and secret\ndeno task auth # opens consent, prints GOOGLE_REFRESH_TOKEN\n```\n\n`deno task auth` prints a URL, waits on `127.0.0.1:8976` for Google to redirect back, and exchanges\nthe code for a refresh token. Paste that into `.env` and you're done — the consent flow never runs\nagain.\n\n## Use\n\n```sh\ndeno task start # next 7 days as JSON on stdout\ndeno task start --days=14\ndeno task start --start=2026-08-01 --days=3\ndeno task start --no-tasks\ndeno task start --summary # just counts, to stderr\ndeno task start > out.json\n```\n\nWarnings go to stderr so stdout stays valid JSON.\n\n## Layout\n\n| File | |\n| ---------------------- | ------------------------------------------------------------- |\n| `src/digest.ts` | `buildDigest()` — the whole pipeline, the thing a val imports |\n| `src/auth.ts` | refresh token → access token |\n| `src/google.ts` | authed fetch, retry/backoff, pagination, bounded concurrency |\n| `src/calendar.ts` | calendar list + event fetch/normalize |\n| `src/tasks.ts` | task list + task fetch/normalize |\n| `src/types.ts` | normalized shapes |\n| `src/main.ts` | CLI wrapper — the only file a val does _not_ need |\n| `scripts/authorize.ts` | one-time consent flow (setup only, never runs in prod) |\n\n## Notes on the APIs\n\nThings that bite, encoded in the source but worth knowing:\n\n- `singleEvents=true` expands recurring series into real instances. Without it you get RRULEs and\n have to expand them yourself.\n- `timeMin` / `timeMax` must be RFC3339 with an offset. A bare `2026-07-27` is rejected.\n- Tasks' `maxResults` defaults to **20** and truncates silently.\n- Completed tasks are also flagged hidden, so `showCompleted=true` does nothing without\n `showHidden=true`.\n- Tasks come back in manual drag `position` order and there is no `orderBy` — sorting is ours.\n- Task `due` is date-only. It's _formatted_ as RFC3339, so it looks like it has a time, but the time\n component isn't meaningful.\n- Task recurrence isn't exposed at all; repeating tasks appear as independent items.\n- Events carry `start.date` (all-day) **or** `start.dateTime` (timed), never both.\n\n## Deploying to Val Town\n\n`src/val.ts` is the cron entrypoint: it builds the digest, renders it, and sends it via `std/email`\nto the account's own address.\n\n```sh\ndeno install -gAf jsr:@valtown/vt # one-time, if vt isn't installed\nvt create calendar-digest # or `vt clone` into an existing project\nvt push\n```\n\nThen in the val's settings set the environment variables:\n\n| var | |\n| ---------------------- | --------------------------------------------- |\n| `GOOGLE_CLIENT_ID` | same values as `.env` |\n| `GOOGLE_CLIENT_SECRET` | |\n| `GOOGLE_REFRESH_TOKEN` | |\n| `DIGEST_TZ` | e.g. `America/Los_Angeles` |\n| `SEND_HOUR` | delivery hour, local, default `6` |\n| `FORCE` | set to `1` to send on every run while testing |\n\nThe refresh token is a static credential that doesn't rotate — env vars are the right home for it,\nnot blob or sqlite. The hourly access token is minted per run; for a daily job there's nothing worth\ncaching.\n\n### Why the cron runs hourly\n\nVal Town evaluates cron expressions in **UTC**, so a fixed daily expression drifts by an hour across\neach DST boundary — a \"6am\" digest would silently become 5am or 7am twice a year. Instead the val is\nscheduled hourly (`0 * * * *`) and returns immediately unless the local hour in `DIGEST_TZ` matches\n`SEND_HOUR`. The 23 no-op runs cost one comparison each and make no API calls.\n\n### Deliberately not an HTTP val\n\nA cron val has no public endpoint. An HTTP val would expose your calendar contents to anyone holding\nthe URL, which is a much worse leak than the source being public. Nothing personal is baked into the\nsource — calendar names, IDs, and colours all arrive from the API at runtime, and credentials live\nonly in env vars.\n",[154],"c8856801-cf6f-4bd5-9016-0ef48d7d2ffb",".vtignore","11bec68a-8aa7-11f1-a56d-1607ee4eb77e",16,["D",1785258558683],"# Never sync to Val Town. .env holds a live Google refresh token — on the free\n# plan val source is public, so a leak here is a real credential leak.\n# Belt-and-braces alongside .gitignore, which vt also appears to honour.\n.env\n*.local\n\n# Local build artifacts, no reason to ship them.\ndigest.html\nout.json\n\n.git/\n",[161],"f358e293-261c-49ed-b3be-e81881ded553",".gitignore","11ae25e6-8aa7-11f1-8c4e-1607ee4eb77e",13,["D",1785258558586],".env\n*.local\nout.json\ndigest.html\n.vt/\n",[168],"38f63d6d-da8f-4800-b1ba-d3f4b3110129",".env.example","11d10d18-8aa7-11f1-8654-1607ee4eb77e",18,["D",1785258558801],"# From the OAuth 2.0 Client ID you create in Google Cloud Console.\n# Application type must be \"Desktop app\" — that's what allows the localhost\n# redirect the one-time `deno task auth` step uses.\nGOOGLE_CLIENT_ID=xxxxxxxx.apps.googleusercontent.com\nGOOGLE_CLIENT_SECRET=GOCSPX-xxxxxxxx\n\n# Produced by `deno task auth`. Long-lived and does not rotate on use.\nGOOGLE_REFRESH_TOKEN=\n",[175],"cd859004-5d58-467e-aa48-50960871476f","src","11150c6c-8aa7-11f1-b668-1607ee4eb77e",2,["D",1785258557589],"directory",[182],"3471696a-78aa-4bcd-b830-3a1cffcd1e4d","scripts","10fd932a-8aa7-11f1-8c4e-1607ee4eb77e",["D",1785258557429],[189],"pulls","branches","forks","envVars",{"_200":156,"_202":62},"connections",{"_200":62,"_201":62},"count","unfilledCount","emptyCount",{"_44":188,"_32":189,"_30":190,"_137":-5,"_42":43,"_41":150,"_139":140,"_39":338,"_13":62,"_34":186,"_36":-5,"_24":25,"_143":-5,"_224":339,"_27":340},{"_44":330,"_32":331,"_30":332,"_137":190,"_42":43,"_41":333,"_139":140,"_39":334,"_13":62,"_34":35,"_36":335,"_24":25,"_143":-5,"_224":336,"_27":337},{"_44":181,"_32":182,"_30":183,"_137":-5,"_42":43,"_41":184,"_139":140,"_39":327,"_13":62,"_34":186,"_36":-5,"_24":25,"_143":-5,"_224":328,"_27":329},{"_44":319,"_32":320,"_30":321,"_137":183,"_42":43,"_41":322,"_139":140,"_39":323,"_13":62,"_34":35,"_36":324,"_24":25,"_143":-5,"_224":325,"_27":326},{"_44":311,"_32":312,"_30":313,"_137":183,"_42":43,"_41":314,"_139":25,"_39":315,"_13":62,"_34":35,"_36":316,"_24":25,"_143":-5,"_224":317,"_27":318},{"_44":303,"_32":304,"_30":305,"_137":183,"_42":43,"_41":306,"_139":25,"_39":307,"_13":62,"_34":35,"_36":308,"_24":25,"_143":-5,"_224":309,"_27":310},{"_44":295,"_32":296,"_30":297,"_137":183,"_42":43,"_41":298,"_139":140,"_39":299,"_13":62,"_34":35,"_36":300,"_24":25,"_143":-5,"_224":301,"_27":302},{"_44":287,"_32":288,"_30":289,"_137":183,"_42":43,"_41":290,"_139":140,"_39":291,"_13":62,"_34":35,"_36":292,"_24":25,"_143":-5,"_224":293,"_27":294},{"_44":283,"_32":33,"_30":31,"_137":183,"_42":43,"_41":14,"_139":25,"_39":284,"_13":150,"_34":35,"_36":38,"_24":25,"_143":-5,"_224":285,"_27":286},{"_44":275,"_32":276,"_30":277,"_137":183,"_42":43,"_41":278,"_139":25,"_39":279,"_13":150,"_34":35,"_36":280,"_24":25,"_143":-5,"_224":281,"_27":282},{"_44":267,"_32":268,"_30":269,"_137":183,"_42":43,"_41":270,"_139":25,"_39":271,"_13":62,"_34":35,"_36":272,"_24":25,"_143":-5,"_224":273,"_27":274},{"_44":259,"_32":260,"_30":261,"_137":183,"_42":43,"_41":262,"_139":25,"_39":263,"_13":62,"_34":35,"_36":264,"_24":25,"_143":-5,"_224":265,"_27":266},{"_44":251,"_32":252,"_30":253,"_137":183,"_42":43,"_41":254,"_139":140,"_39":255,"_13":62,"_34":35,"_36":256,"_24":25,"_143":-5,"_224":257,"_27":258},{"_44":242,"_32":243,"_30":244,"_137":183,"_42":43,"_41":245,"_139":140,"_39":246,"_13":150,"_34":247,"_36":248,"_24":25,"_143":-5,"_224":249,"_27":250},{"_44":174,"_32":175,"_30":176,"_137":-5,"_42":43,"_41":177,"_139":25,"_39":239,"_13":62,"_34":20,"_36":179,"_24":25,"_143":-5,"_224":240,"_27":241},{"_44":167,"_32":168,"_30":169,"_137":-5,"_42":43,"_41":170,"_139":140,"_39":236,"_13":62,"_34":20,"_36":172,"_24":25,"_143":-5,"_224":237,"_27":238},{"_44":160,"_32":161,"_30":162,"_137":-5,"_42":43,"_41":163,"_139":140,"_39":233,"_13":62,"_34":20,"_36":165,"_24":25,"_143":-5,"_224":234,"_27":235},{"_44":153,"_32":154,"_30":155,"_137":-5,"_42":43,"_41":156,"_139":25,"_39":230,"_13":62,"_34":20,"_36":158,"_24":25,"_143":-5,"_224":231,"_27":232},{"_44":145,"_32":146,"_30":147,"_137":-5,"_42":43,"_41":148,"_139":140,"_39":227,"_13":150,"_34":20,"_36":151,"_24":25,"_143":-5,"_224":228,"_27":229},{"_44":134,"_32":135,"_30":136,"_137":-5,"_42":43,"_41":138,"_139":140,"_39":223,"_13":62,"_34":20,"_36":142,"_24":25,"_143":-5,"_224":225,"_27":226},["D",1785258558862],"children",[],[135],["D",1785261721283],[],[146],["D",1785258557792],[],[154],["D",1785258558683],[],[161],["D",1785258558586],[],[168],["D",1785258558801],[],[175],"0323e225-5e02-4547-946c-3c23462bd783","val.ts","117f333a-8aa7-11f1-b718-1607ee4eb77e",21,["D",1785261313784],"interval","// deno-lint-ignore-file no-import-prefix -- Val Town's std library is only\n// distributed from esm.town; there is no bare specifier to point at.\nimport { email } from \"https://esm.town/v/std/email\";\nimport { buildDigest } from \"./digest.ts\";\nimport { optional } from \"./env.ts\";\nimport { render } from \"./render.ts\";\n\n/**\n * Val Town cron entrypoint.\n *\n * Scheduled hourly rather than once a day, and gated on the local hour. Val\n * Town cron expressions are evaluated in UTC, so a fixed daily expression\n * drifts by an hour across a DST boundary — \"6am\" would silently become 5am or\n * 7am twice a year. Checking the wall-clock hour in DIGEST_TZ instead keeps it\n * pinned. The 23 skipped runs cost one comparison each and no API calls.\n *\n * Set SEND_HOUR to change the delivery hour (0-23, local). Set FORCE=1 to send\n * on every invocation, which is what you want while testing.\n */\nasync function sendDigest() {\n const timeZone = optional(\"DIGEST_TZ\", \"America/Los_Angeles\");\n const sendHour = Number(optional(\"SEND_HOUR\", \"6\"));\n\n const hourNow = Number(\n new Intl.DateTimeFormat(\"en-US\", { timeZone, hour: \"numeric\", hour12: false })\n .format(new Date())\n .replace(\"24\", \"0\"),\n );\n\n if (optional(\"FORCE\", \"\") !== \"1\" && hourNow !== sendHour) {\n console.log(`skipping: ${hourNow}:00 in ${timeZone}, sending at ${sendHour}:00`);\n return;\n }\n\n const digest = await buildDigest({ timeZone });\n const out = render(digest);\n\n await email({ subject: out.subject, html: out.html, text: out.text });\n\n console.log(\n `sent — ${digest.events.length} events, ${\n digest.tasks.filter((t) => t.status === \"needsAction\").length\n } open tasks${digest.warnings.length ? `, ${digest.warnings.length} warnings` : \"\"}`,\n );\n}\n\n// Val Town's starter template uses a named `scheduledHandler` export for crons,\n// while other examples use a default export. Exporting both means the trigger\n// fires regardless of which convention this account's runtime expects.\nexport default sendDigest;\nexport const scheduledHandler = sendDigest;\n",[],[182,243],"c98ffee1-6368-4b99-8c12-16de30df3921","tz.ts","117812bc-8aa7-11f1-a0ab-1607ee4eb77e",8,["D",1785258558226],"/**\n * Timezone helpers.\n *\n * Everything here takes an explicit IANA zone rather than using the host's\n * local time. That's deliberate: this runs locally in Pacific but on Val Town\n * in UTC, and \"today\" has to mean the same day in both places. Using ambient\n * local time would silently shift the whole window by 7-8 hours in production.\n */\n\n/** Milliseconds to add to a UTC instant to get wall-clock time in `tz`. */\nfunction offsetMs(instant: Date, tz: string): number {\n const parts = new Intl.DateTimeFormat(\"en-US\", {\n timeZone: tz,\n hour12: false,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n second: \"2-digit\",\n }).formatToParts(instant);\n\n const get = (type: string) => Number(parts.find((p) => p.type === type)?.value ?? 0);\n // hour can come back as \"24\" at midnight in some ICU versions.\n const asIfUtc = Date.UTC(\n get(\"year\"),\n get(\"month\") - 1,\n get(\"day\"),\n get(\"hour\") % 24,\n get(\"minute\"),\n get(\"second\"),\n );\n return asIfUtc - instant.getTime();\n}\n\n/** The UTC instant at which a given calendar day begins in `tz`. */\nexport function startOfDay(day: string, tz: string): Date {\n const naive = new Date(`${day}T00:00:00Z`);\n // Subtract the zone offset to convert wall-clock midnight into an instant.\n // Applied twice because the offset itself can differ across a DST boundary.\n const once = new Date(naive.getTime() - offsetMs(naive, tz));\n return new Date(naive.getTime() - offsetMs(once, tz));\n}\n\n/** Today's calendar date in `tz`, as YYYY-MM-DD. */\nexport function todayIn(tz: string): string {\n return dayKey(new Date(), tz);\n}\n\n/** The YYYY-MM-DD an instant falls on, in `tz`. en-CA formats as ISO. */\nexport function dayKey(instant: Date, tz: string): string {\n return new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: tz,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n }).format(instant);\n}\n\n/** Advance a YYYY-MM-DD by n days without touching timezones. */\nexport function addDays(day: string, n: number): string {\n const d = new Date(`${day}T00:00:00Z`);\n d.setUTCDate(d.getUTCDate() + n);\n return d.toISOString().slice(0, 10);\n}\n\n/**\n * The day an event belongs to. All-day events already carry a bare date and\n * must NOT be reinterpreted through a timezone — doing so is what shifts them\n * onto the wrong day.\n */\nexport function eventDay(start: string, allDay: boolean, tz: string): string {\n return allDay ? start.slice(0, 10) : dayKey(new Date(start), tz);\n}\n\nexport function formatTime(iso: string, tz: string): string {\n const s = new Intl.DateTimeFormat(\"en-US\", {\n timeZone: tz,\n hour: \"numeric\",\n minute: \"2-digit\",\n hour12: true,\n }).format(new Date(iso));\n return s.replace(\" AM\", \"am\").replace(\" PM\", \"pm\");\n}\n\n/** Compact form for dense contexts: \"1p\", \"12:30p\", \"9a\". */\nexport function formatTimeTerse(iso: string, tz: string): string {\n const parts = new Intl.DateTimeFormat(\"en-US\", {\n timeZone: tz,\n hour: \"numeric\",\n minute: \"2-digit\",\n hour12: true,\n }).formatToParts(new Date(iso));\n const hour = parts.find((p) => p.type === \"hour\")?.value ?? \"\";\n const minute = parts.find((p) => p.type === \"minute\")?.value ?? \"00\";\n const period = (parts.find((p) => p.type === \"dayPeriod\")?.value ?? \"\").toLowerCase()[0] ?? \"\";\n return minute === \"00\" ? `${hour}${period}` : `${hour}:${minute}${period}`;\n}\n\nexport function formatDayLong(day: string, tz: string): string {\n return new Intl.DateTimeFormat(\"en-US\", {\n timeZone: tz,\n weekday: \"long\",\n month: \"long\",\n day: \"numeric\",\n }).format(startOfDay(day, tz));\n}\n\nexport function formatDayShort(day: string, tz: string): string {\n return new Intl.DateTimeFormat(\"en-US\", {\n timeZone: tz,\n weekday: \"short\",\n month: \"short\",\n day: \"numeric\",\n }).format(startOfDay(day, tz));\n}\n",[],[182,252],"820a9b0c-c62a-4447-991e-4062f6badc2e","types.ts","116cd384-8aa7-11f1-a0ab-1607ee4eb77e",7,["D",1785258557798],"/** Normalized shapes. Google's raw payloads are wide and awkward (start times\n * live under either `date` or `dateTime`, attendee self-status is buried in an\n * array); everything downstream should consume these instead. */\n\nexport interface Calendar {\n id: string;\n name: string;\n description?: string;\n timeZone?: string;\n /** The calendar the user considers their own. */\n primary: boolean;\n accessRole: string;\n backgroundColor?: string;\n}\n\nexport type Rsvp = \"accepted\" | \"declined\" | \"tentative\" | \"needsAction\" | \"unknown\";\n\nexport interface CalendarEvent {\n id: string;\n calendarId: string;\n calendarName: string;\n title: string;\n description?: string;\n location?: string;\n /** RFC3339 instant, or a bare YYYY-MM-DD when `allDay` is true. */\n start: string;\n end: string;\n allDay: boolean;\n /**\n * False when the event is marked \"Free\" (`transparency: transparent`) rather\n * than blocking time. In practice this is the signal that separates real\n * appointments from all-day notes-to-self, which is a distinction the digest\n * cares about far more than Google's own field name suggests.\n */\n busy: boolean;\n /** DEFAULT, BIRTHDAY, OUT_OF_OFFICE, FOCUS_TIME, WORKING_LOCATION, FROM_GMAIL. */\n eventType?: string;\n status?: string;\n htmlLink?: string;\n hangoutLink?: string;\n organizer?: string;\n /** How *you* replied, not the room's aggregate state. */\n selfResponse: Rsvp;\n attendeeCount: number;\n /** Present when this is one instance expanded out of a recurring series. */\n recurringEventId?: string;\n}\n\nexport interface TaskList {\n id: string;\n name: string;\n}\n\nexport interface Task {\n id: string;\n listId: string;\n listName: string;\n title: string;\n notes?: string;\n /** Date-only in practice. Google formats it as RFC3339 so it looks like it\n * carries a time, but the time component is not meaningful. */\n due?: string;\n status: \"needsAction\" | \"completed\";\n completedAt?: string;\n /** Set when this is a subtask; nesting is only one level deep. */\n parent?: string;\n updated?: string;\n webViewLink?: string;\n}\n\nexport interface Digest {\n generatedAt: string;\n timeZone: string;\n window: {\n start: string;\n end: string;\n days: number;\n /** First day of the window, YYYY-MM-DD in `timeZone`. */\n startDay: string;\n /** Exclusive end, YYYY-MM-DD in `timeZone`. */\n endDay: string;\n /** Lower bound used for completed tasks; absent when they weren't fetched. */\n completedSince?: string;\n };\n calendars: Calendar[];\n events: CalendarEvent[];\n tasks: Task[];\n /** Non-fatal problems — e.g. one calendar 403s but the rest succeeded. */\n warnings: string[];\n}\n",[],[182,260],"d870b9d5-55f3-46d5-a74e-d973913e384f","tasks.ts","11b962e4-8aa7-11f1-84de-1607ee4eb77e",15,["D",1785258557997],"import { mapWithConcurrency, paginate } from \"./google.ts\";\nimport type { Task, TaskList } from \"./types.ts\";\n\nconst BASE = \"https://tasks.googleapis.com/tasks/v1\";\n\ninterface RawTaskList {\n id: string;\n title?: string;\n}\n\ninterface RawTask {\n id: string;\n title?: string;\n notes?: string;\n due?: string;\n status?: string;\n completed?: string;\n parent?: string;\n updated?: string;\n webViewLink?: string;\n deleted?: boolean;\n hidden?: boolean;\n}\n\nexport async function listTaskLists(): Promise {\n const raw = await paginate(`${BASE}/users/@me/lists`, { maxResults: \"100\" });\n return raw.map((l) => ({ id: l.id, name: l.title ?? l.id }));\n}\n\n/**\n * Pending and recently-completed tasks for one list, as two narrow queries.\n *\n * Asking for everything (showCompleted + showHidden with no bound) means\n * paginating the list's entire history — a long-lived list can hold thousands\n * of finished tasks, which is ~100x the traffic for the handful that a digest\n * actually mentions. So: one query for open tasks, one bounded by completedMin.\n */\nasync function listTasksForList(list: TaskList, completedSince?: string): Promise {\n const endpoint = `${BASE}/lists/${encodeURIComponent(list.id)}/tasks`;\n const common = { maxResults: \"100\", showDeleted: \"false\" };\n\n const queries = [\n // Open tasks. Cheap — this is the part a digest is mostly about.\n paginate(endpoint, { ...common, showCompleted: \"false\", showHidden: \"true\" }),\n ];\n\n if (completedSince) {\n queries.push(\n paginate(endpoint, {\n ...common,\n showCompleted: \"true\",\n // Completed tasks are *also* flagged hidden, so showCompleted alone is\n // a no-op without this. Both are required to see finished work.\n showHidden: \"true\",\n completedMin: completedSince,\n }),\n );\n }\n\n const raw = (await Promise.all(queries)).flat();\n\n return raw\n .filter((t) => !t.deleted)\n .map((t) => ({\n id: t.id,\n listId: list.id,\n listName: list.name,\n title: t.title ?? \"(untitled)\",\n notes: t.notes,\n due: t.due,\n status: t.status === \"completed\" ? \"completed\" as const : \"needsAction\" as const,\n completedAt: t.completed,\n parent: t.parent,\n updated: t.updated,\n webViewLink: t.webViewLink,\n }));\n}\n\n/**\n * Every open task plus anything completed since `completedSince`, across all lists.\n *\n * Deliberately unfiltered by *due* date: the API's dueMin/dueMax drop undated\n * tasks entirely, which for a digest is usually the wrong default. Due-date\n * filtering happens downstream where the intent is known.\n *\n * Note the API returns tasks in `position` order — the manual drag-order from\n * the UI — and offers no orderBy, so any date ordering has to be done here.\n */\nexport async function listAllTasks(\n lists: TaskList[],\n warnings: string[],\n completedSince?: string,\n): Promise {\n const perList = await mapWithConcurrency(lists, 5, async (list) => {\n try {\n return await listTasksForList(list, completedSince);\n } catch (err) {\n warnings.push(\n `Task list \"${list.name}\" (${list.id}) failed: ${\n err instanceof Error ? err.message : String(err)\n }`,\n );\n return [] as Task[];\n }\n });\n\n return perList.flat().sort((a, b) => {\n // Undated tasks sort last rather than pretending to be due at epoch.\n if (a.due && b.due) return a.due.localeCompare(b.due);\n if (a.due) return -1;\n if (b.due) return 1;\n return a.title.localeCompare(b.title);\n });\n}\n",[],[182,268],"c090beca-8cd6-4f5a-9d75-8ddba2dae58c","render.ts","119e2db2-8aa7-11f1-a4e4-1607ee4eb77e",23,["D",1785261721359],"import {\n addDays,\n eventDay,\n formatDayLong,\n formatDayShort,\n formatTime,\n formatTimeTerse,\n} from \"./tz.ts\";\nimport type { CalendarEvent, Digest, Task } from \"./types.ts\";\n\n/**\n * Renders a Digest into a subject line, a notification preheader, plain text,\n * and HTML email.\n *\n * Three size tiers, biggest first: today in full, the next 2 days at medium\n * weight, the rest compact. All-day items are split into `T `-prefixed ones (a\n * personal shorthand for \"handle today\") and everything else.\n */\n\n/** Personal shorthand: an all-day event titled `T …` is a today-list item. */\nconst T_PREFIX = /^T\\s+/;\n/** Self-authored date stamps like \"2026-07-21 \" that open many note titles. */\nconst STAMP = /^(\\d{4}-\\d{2}-\\d{2})\\s+/;\n\nconst NEAR_DAYS = 2;\n\nexport interface Rendered {\n subject: string;\n preheader: string;\n text: string;\n html: string;\n}\n\ninterface DayBucket {\n day: string;\n scheduled: CalendarEvent[];\n tItems: CalendarEvent[];\n otherAllDay: CalendarEvent[];\n}\n\n/** Separates a leading self-authored date stamp from the title body. */\nfunction splitTitle(title: string): { stamp?: string; body: string } {\n const withoutT = title.replace(T_PREFIX, \"\");\n const match = STAMP.exec(withoutT);\n return match ? { stamp: match[1], body: withoutT.slice(match[0].length) } : { body: withoutT };\n}\n\n/** Trimmed to fit dense contexts — subject lines, notification previews. */\nfunction shortTitle(title: string, max = 30): string {\n let t = splitTitle(title).body.replace(/\\s+/g, \" \").trim();\n if (t.length <= max) return t;\n\n // Titles often carry trailing detail after a sentence break — prefer cutting\n // there over mid-sentence, but only if enough of the title survives. A short\n // lead like \"[CANCELLED] -- …\" must not collapse to just the marker.\n const cut = t.search(/[.;]\\s|\\s[-—]{1,2}\\s/);\n if (cut >= max * 0.6) t = t.slice(0, cut);\n if (t.length <= max) return t;\n\n // Break on a word boundary — mid-word cuts are hard to read at a glance.\n const clipped = t.slice(0, max);\n const lastSpace = clipped.lastIndexOf(\" \");\n return `${(lastSpace > max * 0.6 ? clipped.slice(0, lastSpace) : clipped).trimEnd()}…`;\n}\n\nfunction bucketize(digest: Digest): DayBucket[] {\n const { timeZone, window } = digest;\n const byDay = new Map();\n\n for (let i = 0; i < window.days; i++) {\n const day = addDays(window.startDay, i);\n byDay.set(day, { day, scheduled: [], tItems: [], otherAllDay: [] });\n }\n\n for (const event of digest.events) {\n const day = eventDay(event.start, event.allDay, timeZone);\n // An event can start before the window and span into it; clamp to day one.\n const target = byDay.get(day) ?? byDay.get(window.startDay);\n if (!target) continue;\n\n if (!event.allDay) target.scheduled.push(event);\n else if (T_PREFIX.test(event.title)) target.tItems.push(event);\n else target.otherAllDay.push(event);\n }\n\n for (const bucket of byDay.values()) {\n bucket.scheduled.sort((a, b) => a.start.localeCompare(b.start));\n }\n return [...byDay.values()];\n}\n\n/** Due date as YYYY-MM-DD. Google formats `due` as RFC3339 but the time part\n * is not meaningful, so the date prefix is the whole story. */\nconst dueDay = (task: Task): string | undefined => task.due?.slice(0, 10);\n\n/**\n * Buckets tasks under date headings, in date order, with undated last.\n *\n * Grouping is by date rather than by list because the digest is a time-ordered\n * document — which list something lives in is secondary, and rides along as a\n * tag on each row.\n */\nfunction groupTasksByDay(tasks: Task[], dateOf: (t: Task) => string | undefined) {\n const grouped = new Map();\n for (const task of tasks) {\n const key = dateOf(task) ?? \"\";\n const bucket = grouped.get(key) ?? [];\n bucket.push(task);\n grouped.set(key, bucket);\n }\n return [...grouped.entries()].sort(([a], [b]) => {\n if (!a) return 1;\n if (!b) return -1;\n return a.localeCompare(b);\n });\n}\n\n/** Dense one-liner of today's timed events, for the phone notification preview. */\nfunction terseAgenda(bucket: DayBucket, tz: string, max = 8): string {\n if (bucket.scheduled.length === 0) return \"nothing scheduled\";\n return bucket.scheduled\n .slice(0, max)\n .map((e) => `${formatTimeTerse(e.start, tz)} ${shortTitle(e.title, 24)}`)\n .join(\" · \");\n}\n\n// ---------------------------------------------------------------- plain text\n\nconst taskLine = (t: Task) => `○ ${t.title}`;\n\nfunction textSection(label: string, lines: string[]): string[] {\n if (lines.length === 0) return [];\n return [` ${label}`, ...lines.map((l) => ` ${l}`), \"\"];\n}\n\nfunction renderText(digest: Digest, buckets: DayBucket[]): string {\n const tz = digest.timeZone;\n const out: string[] = [];\n const [today, ...rest] = buckets;\n if (!today) return \"(empty window)\";\n\n out.push(formatDayLong(today.day, tz).toUpperCase(), \"\");\n out.push(\n ...textSection(\n \"scheduled\",\n today.scheduled.map((e) =>\n `${formatTime(e.start, tz).padEnd(8)} ${splitTitle(e.title).body}`\n ),\n ),\n );\n out.push(\n ...textSection(\"today's list\", today.tItems.map((e) => `· ${splitTitle(e.title).body}`)),\n );\n out.push(\n ...textSection(\"other all-day\", today.otherAllDay.map((e) => `· ${splitTitle(e.title).body}`)),\n );\n out.push(\n ...textSection(\n \"tasks due today\",\n digest.tasks\n .filter((t) => t.status === \"needsAction\" && dueDay(t) === today.day)\n .map(taskLine),\n ),\n );\n\n const near = rest.slice(0, NEAR_DAYS);\n const far = rest.slice(NEAR_DAYS);\n\n if (near.length) {\n out.push(\"─\".repeat(52), `NEXT ${near.length} DAYS`, \"\");\n for (const b of near) {\n out.push(` ${formatDayShort(b.day, tz)}`);\n for (const e of b.scheduled) {\n out.push(` ${formatTime(e.start, tz).padEnd(8)} ${shortTitle(e.title, 52)}`);\n }\n for (const e of [...b.tItems, ...b.otherAllDay]) {\n out.push(` ${\"—\".padEnd(8)} ${shortTitle(e.title, 52)}`);\n }\n if (!b.scheduled.length && !b.tItems.length && !b.otherAllDay.length) out.push(\" (clear)\");\n out.push(\"\");\n }\n }\n\n if (far.length) {\n out.push(\"─\".repeat(52), `FOLLOWING ${far.length} DAYS`, \"\");\n for (const b of far) {\n const timed = b.scheduled\n .map((e) => `${formatTimeTerse(e.start, tz)} ${shortTitle(e.title, 26)}`)\n .join(\" · \");\n const allDay = [...b.tItems, ...b.otherAllDay];\n out.push(\n ` ${formatDayShort(b.day, tz).padEnd(12)} ${timed || (allDay.length ? \"\" : \"(clear)\")}`,\n );\n for (const e of allDay) out.push(` ${\" \".repeat(12)} ${shortTitle(e.title, 60)}`);\n }\n out.push(\"\");\n }\n\n const pending = digest.tasks.filter((t) => t.status === \"needsAction\");\n const done = digest.tasks.filter((t) => t.status === \"completed\");\n const overdue = pending.filter((t) => t.due && (dueDay(t) ?? \"\") < today.day);\n const later = pending.filter((t) => !t.due || (dueDay(t) ?? \"\") > today.day);\n\n if (overdue.length || later.length) {\n out.push(\"─\".repeat(52), `TASKS — ${overdue.length + later.length} open`, \"\");\n if (overdue.length) {\n out.push(...textSection(`overdue (${overdue.length})`, overdue.map(taskLine)));\n }\n for (const [day, items] of groupTasksByDay(later, dueDay)) {\n const heading = day ? formatDayShort(day, tz) : \"no due date\";\n out.push(...textSection(`${heading} (${items.length})`, items.map(taskLine)));\n }\n }\n\n if (done.length) {\n out.push(\"─\".repeat(52), `COMPLETED — ${done.length}`, \"\");\n for (\n const [day, items] of groupTasksByDay(done, (t) => t.completedAt?.slice(0, 10)).reverse()\n ) {\n const heading = day ? formatDayShort(day, tz) : \"completed\";\n out.push(...textSection(`${heading} (${items.length})`, items.map((t) => `✓ ${t.title}`)));\n }\n }\n\n if (digest.warnings.length) {\n out.push(\"─\".repeat(52), \"WARNINGS\", ...digest.warnings.map((w) => ` ${w}`));\n }\n\n return out.join(\"\\n\");\n}\n\n// ---------------------------------------------------------------------- html\n\nconst esc = (s: string) =>\n s.replace(/&/g, \"&\").replace(//g, \">\").replace(/\"/g, \""\");\n\n/**\n * Styles live in one `.replace(/\\n/g, \"\");\n\n/** Blend a hex colour toward a target, 0 = unchanged, 1 = fully the target. */\nfunction blend(hex: string, toward: [number, number, number], amount: number): string {\n const m = /^#?([\\da-f]{6})$/i.exec(hex.trim());\n if (!m) return hex;\n const n = parseInt(m[1]!, 16);\n const rgb = [(n >> 16) & 255, (n >> 8) & 255, n & 255];\n return `#${\n rgb\n .map((c, i) => Math.round(c + (toward[i]! - c) * amount).toString(16).padStart(2, \"0\"))\n .join(\"\")\n }`;\n}\n\n/**\n * One CSS class per calendar, so events carry their Google Calendar colour.\n *\n * The raw colour is too saturated to sit behind body text, so it's blended\n * most of the way to the page background and kept at full strength only on the\n * left border — the same trick Google Calendar uses in agenda view.\n */\nfunction calendarStyles(\n digest: Digest,\n): { css: string; cls: Map; inline: Map } {\n const cls = new Map();\n const inline = new Map();\n const rules: string[] = [];\n const dark: string[] = [];\n\n digest.calendars.forEach((calendar, i) => {\n const name = `k${i}`;\n cls.set(calendar.id, name);\n const base = calendar.backgroundColor ?? \"#1a73e8\";\n rules.push(\n `.${name}{background:${blend(base, [255, 255, 255], 0.80)};border-left-color:${base}}`,\n );\n dark.push(`.${name}{background:${blend(base, [31, 31, 31], 0.78)};border-left-color:${base}}`);\n });\n\n return {\n css: `${rules.join(\"\")}@media (prefers-color-scheme:dark){${dark.join(\"\")}}`,\n cls,\n inline,\n };\n}\n\nfunction link(href: string | undefined, inner: string): string {\n return href ? `${inner}` : inner;\n}\n\n/** The right-hand cell of an event row: title in its calendar's colour block. */\nfunction evCell(event: CalendarEvent, cls: Map): string {\n // Class *and* inline style: the class carries padding/sizing per tier, the\n // inline copy keeps the colour block if a client drops the stylesheet.\n return `

${titleHtml(event)}

`;\n}\n\n/** Populated per render; module-scoped so evCell doesn't need threading. */\nlet INLINE = new Map();\n\nfunction titleHtml(event: CalendarEvent): string {\n const { stamp, body } = splitTitle(event.title);\n const stampHtml = stamp ? `${esc(stamp)} ` : \"\";\n const meta: string[] = [];\n if (event.location) meta.push(esc(event.location));\n if (event.hangoutLink) meta.push(`meet`);\n const metaHtml = meta.length ? `

${meta.join(\" · \")}

` : \"\";\n return `${link(event.htmlLink, `${stampHtml}${esc(body)}`)}${metaHtml}`;\n}\n\nfunction eventRows(bucket: DayBucket, tz: string, cls: Map): string {\n return [\n scheduledRows(bucket.scheduled, tz, cls),\n ...[...bucket.tItems, ...bucket.otherAllDay].map((e) =>\n `•${evCell(e, cls)}`\n ),\n ].join(\"\");\n}\n\nconst label = (text: string, count: number) =>\n `

${esc(text)} ${count}

`;\n\nfunction todayHtml(\n bucket: DayBucket,\n tz: string,\n tasksToday: Task[],\n cls: Map,\n): string {\n const parts = [`

${esc(formatDayLong(bucket.day, tz))}

`];\n\n if (bucket.scheduled.length) {\n parts.push(label(\"scheduled\", bucket.scheduled.length));\n parts.push(\n `${scheduledRows(bucket.scheduled, tz, cls)}

`,\n );\n } else {\n parts.push(`

nothing scheduled

`);\n }\n\n for (\n const [text, items] of [\n [\"today's list\", bucket.tItems],\n [\"other all-day\", bucket.otherAllDay],\n ] as const\n ) {\n if (!items.length) continue;\n parts.push(label(text, items.length));\n parts.push(\n `${\n items.map((e) => `${evCell(e, cls)}`).join(\"\")\n }

•

`,\n );\n }\n\n if (tasksToday.length) {\n parts.push(label(\"tasks due today\", tasksToday.length));\n parts.push(taskRows(tasksToday, false));\n }\n return `

${parts.join(\"\")}

`;\n}\n\nfunction nearHtml(bucket: DayBucket, tz: string, cls: Map): string {\n const rows = eventRows(bucket, tz, cls);\n return `

${esc(formatDayShort(bucket.day, tz))}

${\n rows ? `${rows}

` : `

Clear.

`\n }

`;\n}\n\n/**\n * Groups timed events into runs that overlap in wall-clock time.\n *\n * Uses parsed instants rather than string comparison: events from different\n * calendars can carry different UTC offsets, so the ISO strings don't order\n * reliably.\n */\nfunction overlapClusters(events: CalendarEvent[]): CalendarEvent[][] {\n const sorted = [...events].sort((a, b) => Date.parse(a.start) - Date.parse(b.start));\n const clusters: CalendarEvent[][] = [];\n let current: CalendarEvent[] = [];\n let clusterEnd = -Infinity;\n\n for (const event of sorted) {\n const start = Date.parse(event.start);\n const end = Date.parse(event.end);\n // Touching events (one ends exactly as the next starts) are not a clash.\n if (current.length && start < clusterEnd) {\n current.push(event);\n clusterEnd = Math.max(clusterEnd, end);\n } else {\n if (current.length) clusters.push(current);\n current = [event];\n clusterEnd = end;\n }\n }\n if (current.length) clusters.push(current);\n return clusters;\n}\n\n/**\n * Timed events as table rows. A run of overlapping events renders side by side\n * in one row, so a double-booked slot looks crowded rather than reading as two\n * unrelated entries stacked in sequence.\n */\nfunction scheduledRows(events: CalendarEvent[], tz: string, cls: Map): string {\n return overlapClusters(events)\n .map((cluster) => {\n const first = cluster[0]!;\n const time = `${esc(formatTime(first.start, tz))}`;\n if (cluster.length === 1) return `${time}${evCell(first, cls)}`;\n\n const columns = cluster\n .map((e) =>\n `

${\n esc(formatTime(e.start, tz))\n }${titleHtml(e)}

`\n )\n .join(\"\");\n\n return `${time}

${cluster.length} overlapping

${columns}

`;\n })\n .join(\"\");\n}\n\n/** Stamp kept in its own colour, then the title trimmed for a single line. */\nfunction stampedShort(event: CalendarEvent, max: number): string {\n const { stamp } = splitTitle(event.title);\n const lead = stamp ? `${esc(stamp)} ` : \"\";\n return `${lead}${esc(shortTitle(event.title, max))}`;\n}\n\n/**\n * Compact tier. Timed events stay inline on the day's line — they're short and\n * read well as a run. All-day items get one indented line each, clipped to the\n * column width rather than wrapped, so the block stays scannable at this size.\n */\nfunction farHtml(bucket: DayBucket, tz: string): string {\n const timed = bucket.scheduled\n .map((e) =>\n `${esc(formatTimeTerse(e.start, tz))} ${esc(shortTitle(e.title, 34))}`\n )\n .join(` · `);\n\n const allDay = [...bucket.tItems, ...bucket.otherAllDay]\n .map((e) => `

${stampedShort(e, 64)}

`)\n .join(\"\");\n\n const body = timed || allDay\n ? `${timed ? `

${timed}

` : \"\"}${allDay}`\n : `clear`;\n\n return `${\n esc(formatDayShort(bucket.day, tz))\n }${body}`;\n}\n\nfunction taskRows(tasks: Task[], done: boolean): string {\n return tasks\n .map((t) => {\n const body = done ? `${esc(t.title)}` : esc(t.title);\n // Open circle for outstanding, check for done — matching how Google\n // Calendar draws tasks. Literal markup rather than a ::before, which\n // Gmail strips, and plain Unicode rather than an image, so there's no\n // asset to host and nothing that can fail to load.\n const chip = done\n ? \"background:#f1f3f4;border-radius:4px;padding:3px 9px;margin:2px 0;font-size:13px\"\n : \"background:#e8f0fe;border-radius:4px;padding:3px 9px;margin:2px 0;font-size:13px\";\n return `

${done ? \"✓\" : \"○\"}${\n link(t.webViewLink, body)\n }

`;\n })\n .join(\"\");\n}\n\nconst taskGroup = (heading: string, tasks: Task[], done: boolean, cls = \"\") =>\n tasks.length\n ? `

${esc(heading)} ${tasks.length}

${\n taskRows(tasks, done)\n }

`\n : \"\";\n\n/**\n * Open tasks under date headings: overdue first, then one section per due date.\n * Tasks due today are omitted here — they render inside the today block.\n */\nfunction openTasksHtml(tasks: Task[], today: string, tz: string): string {\n const overdue = tasks.filter((t) => (dueDay(t) ?? \"\") < today && t.due);\n const later = tasks.filter((t) => !t.due || (dueDay(t) ?? \"\") > today);\n if (!overdue.length && !later.length) return \"\";\n\n const groups = groupTasksByDay(later, dueDay)\n .map(([day, items]) => taskGroup(day ? formatDayShort(day, tz) : \"no due date\", items, false))\n .join(\"\");\n\n return `${label(\"tasks — open\", overdue.length + later.length)}${\n taskGroup(\"overdue\", overdue, false, \"over\")\n }${groups}`;\n}\n\n/** Completed work, under the date it was finished. */\nfunction doneTasksHtml(tasks: Task[], tz: string): string {\n if (!tasks.length) return \"\";\n const groups = groupTasksByDay(tasks, (t) => t.completedAt?.slice(0, 10))\n .reverse()\n .map(([day, items]) => taskGroup(day ? formatDayShort(day, tz) : \"completed\", items, true))\n .join(\"\");\n return `${label(\"completed\", tasks.length)}${groups}`;\n}\n\nfunction renderHtml(digest: Digest, buckets: DayBucket[], preheader: string): string {\n const tz = digest.timeZone;\n const [today, ...rest] = buckets;\n if (!today) return \"

Empty window.

\";\n\n const near = rest.slice(0, NEAR_DAYS);\n const far = rest.slice(NEAR_DAYS);\n const pending = digest.tasks.filter((t) => t.status === \"needsAction\");\n const done = digest.tasks.filter((t) => t.status === \"completed\");\n const dueToday = pending.filter((t) => dueDay(t) === today.day);\n const { css, cls, inline } = calendarStyles(digest);\n INLINE = inline;\n const hr = `

`;\n\n // Zero-width joiners stop the client from pulling body text into the preview\n // after the preheader ends.\n const pre = `

${esc(preheader)}${\" ‌\".repeat(30)}

`;\n\n const sections = [\n todayHtml(today, tz, dueToday, cls),\n near.length &&\n `${hr}

next ${near.length} days

${\n near.map((b) => nearHtml(b, tz, cls)).join(\"\")\n }`,\n far.length &&\n `${hr}

following ${far.length} days

${\n far.map((b) => farHtml(b, tz)).join(\"\")\n }

`,\n (pending.length > dueToday.length || done.length) && hr,\n openTasksHtml(pending, today.day, tz),\n doneTasksHtml(done, tz),\n digest.warnings.length &&\n `${hr}

${digest.warnings.map(esc).join(\"
\")}

`,\n ].filter(Boolean).join(\"\");\n\n // A complete document, not a fragment: Gmail strips ` +\n `

${pre}${sections}

`;\n}\n\n// --------------------------------------------------------------------- entry\n\nexport function render(digest: Digest): Rendered {\n const buckets = bucketize(digest);\n const today = buckets[0];\n const tz = digest.timeZone;\n\n const agenda = today ? terseAgenda(today, tz) : \"nothing scheduled\";\n const dayLabel = today ? formatDayShort(today.day, tz) : \"\";\n\n // Subject and preheader both surface in a phone notification, so front-load\n // the real schedule into each rather than repeating a generic title.\n const counts = [\n today?.tItems.length ? `${today.tItems.length} on today's list` : \"\",\n today?.otherAllDay.length ? `${today.otherAllDay.length} other all-day` : \"\",\n `${digest.tasks.filter((t) => t.status === \"needsAction\").length} open`,\n ].filter(Boolean).join(\" · \");\n\n const preheader = `${agenda} — ${counts}`;\n\n return {\n subject: `${dayLabel} · ${agenda}`,\n preheader,\n text: renderText(digest, buckets),\n html: renderHtml(digest, buckets, preheader),\n };\n}\n",[],[182,276],"eea108c9-f118-4dd1-b2bf-fd7f776d61b0",["D",1785261721295],[],[182,33],"5ffe7ca9-7ced-47ec-b6df-8063ebbc3c48","google.ts","1188f064-8aa7-11f1-a0ab-1607ee4eb77e",10,["D",1785258558316],"import { getAccessToken } from \"./auth.ts\";\n\n/** Retryable transient statuses. 403 is deliberately excluded — from Google it's\n * usually a permissions/quota-project problem that retrying won't fix. */\nconst RETRY_STATUSES = new Set([429, 500, 502, 503, 504]);\nconst MAX_ATTEMPTS = 4;\n\nconst sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\nexport class GoogleApiError extends Error {\n constructor(readonly status: number, readonly url: string, readonly body: string) {\n super(`Google API ${status} for ${url}: ${body}`);\n this.name = \"GoogleApiError\";\n }\n}\n\nasync function authedFetch(url: string, attempt = 1): Promise {\n const token = await getAccessToken();\n const res = await fetch(url, {\n headers: { authorization: `Bearer ${token}`, accept: \"application/json\" },\n });\n\n if (res.ok) return res;\n\n // A 401 mid-run means the cached access token went stale. Re-mint once and\n // retry; if it happens twice the credential itself is bad, so let it throw.\n if (res.status === 401 && attempt === 1) {\n await res.body?.cancel();\n await getAccessToken(true);\n return authedFetch(url, attempt + 1);\n }\n\n if (RETRY_STATUSES.has(res.status) && attempt < MAX_ATTEMPTS) {\n await res.body?.cancel();\n // Exponential backoff with jitter: ~500ms, 1s, 2s.\n await sleep(2 ** (attempt - 1) * 500 + Math.random() * 250);\n return authedFetch(url, attempt + 1);\n }\n\n throw new GoogleApiError(res.status, url, await res.text());\n}\n\n/**\n * Walk a paginated Google list endpoint to exhaustion.\n *\n * Both APIs silently truncate to a small default page size (Tasks defaults to\n * 20), so callers must always paginate rather than trusting a single response.\n */\nexport async function paginate(\n baseUrl: string,\n params: Record,\n itemsKey = \"items\",\n): Promise {\n const out: T[] = [];\n let pageToken: string | undefined;\n\n do {\n const url = new URL(baseUrl);\n for (const [k, v] of Object.entries(params)) url.searchParams.set(k, v);\n if (pageToken) url.searchParams.set(\"pageToken\", pageToken);\n\n const res = await authedFetch(url.toString());\n const json = await res.json() as Record;\n\n const items = json[itemsKey];\n if (Array.isArray(items)) out.push(...items as T[]);\n\n pageToken = typeof json.nextPageToken === \"string\" ? json.nextPageToken : undefined;\n } while (pageToken);\n\n return out;\n}\n\n/** Run tasks with bounded concurrency so fanning out over calendars doesn't\n * open dozens of sockets at once (and trip rate limits). */\nexport async function mapWithConcurrency(\n items: T[],\n limit: number,\n fn: (item: T) => Promise,\n): Promise {\n const results: R[] = new Array(items.length);\n let cursor = 0;\n\n const workers = Array.from({ length: Math.min(limit, items.length) }, async () => {\n while (cursor < items.length) {\n const index = cursor++;\n results[index] = await fn(items[index]!);\n }\n });\n\n await Promise.all(workers);\n return results;\n}\n",[],[182,288],"fe8d830a-b1d7-4b0d-ada1-39c1547a9153","env.ts","11442c4a-8aa7-11f1-a4e4-1607ee4eb77e",4,["D",1785258557895],"/**\n * Env access that works identically under local Deno (via --env-file=.env)\n * and on Val Town (via its env var UI). No dotenv dependency either way.\n */\n\nexport function required(name: string): string {\n const value = Deno.env.get(name);\n if (!value) {\n throw new Error(\n `Missing required env var ${name}. ` +\n `Locally: add it to .env (see .env.example). On Val Town: set it in the val's env vars.`,\n );\n }\n return value;\n}\n\nexport function optional(name: string, fallback: string): string {\n return Deno.env.get(name) ?? fallback;\n}\n",[],[182,296],"71462ce7-34bd-4b52-b5c6-13857b69961a","digest.ts","11922fbc-8aa7-11f1-8c0e-1607ee4eb77e",11,["D",1785258558393],"import { listAllEvents, listCalendars } from \"./calendar.ts\";\nimport { optional } from \"./env.ts\";\nimport { listAllTasks, listTaskLists } from \"./tasks.ts\";\nimport { addDays, startOfDay, todayIn } from \"./tz.ts\";\nimport type { Digest } from \"./types.ts\";\n\n/** Fallback when DIGEST_TZ isn't set. Never the host's zone — see src/tz.ts. */\nconst DEFAULT_TZ = \"America/Los_Angeles\";\n\nexport interface DigestOptions {\n /**\n * Days in the window, counting today. Defaults to 8: today, the next 2 days,\n * and the 5 after that — the three tiers the digest renders.\n */\n days?: number;\n /** Calendar date (YYYY-MM-DD) to start from. Defaults to today in `timeZone`. */\n start?: string;\n /** IANA zone that defines \"today\" and day boundaries. Defaults to DIGEST_TZ. */\n timeZone?: string;\n /** Skip the Tasks API entirely. */\n includeTasks?: boolean;\n /**\n * How far back to look for *completed* tasks, so the digest can show finished\n * work alongside outstanding. Set to 0 to fetch only open tasks.\n */\n completedLookbackDays?: number;\n}\n\n/**\n * Pull the full window of calendar events and tasks and return it normalized.\n *\n * Deliberately free of formatting and delivery concerns so it can be dropped\n * into a Val Town cron val unchanged.\n */\nexport async function buildDigest(options: DigestOptions = {}): Promise {\n const {\n days = 8,\n start,\n timeZone = optional(\"DIGEST_TZ\", DEFAULT_TZ),\n includeTasks = true,\n completedLookbackDays = 7,\n } = options;\n\n if (!Number.isInteger(days) || days < 1) {\n throw new Error(`days must be a positive integer, got ${days}`);\n }\n if (!Number.isInteger(completedLookbackDays) || completedLookbackDays < 0) {\n throw new Error(\n `completedLookbackDays must be a non-negative integer, got ${completedLookbackDays}`,\n );\n }\n if (start && !/^\\d{4}-\\d{2}-\\d{2}$/.test(start)) {\n throw new Error(`Invalid start date \"${start}\" — expected YYYY-MM-DD`);\n }\n\n const startDay = start ?? todayIn(timeZone);\n const endDay = addDays(startDay, days);\n\n // RFC3339 with an offset; a bare YYYY-MM-DD is rejected by the API.\n const timeMin = startOfDay(startDay, timeZone).toISOString();\n const timeMax = startOfDay(endDay, timeZone).toISOString();\n\n const completedSince = completedLookbackDays > 0\n ? startOfDay(addDays(startDay, -completedLookbackDays), timeZone).toISOString()\n : undefined;\n\n const warnings: string[] = [];\n\n const [calendars, taskLists] = await Promise.all([\n listCalendars(),\n includeTasks ? listTaskLists() : Promise.resolve([]),\n ]);\n\n const [events, tasks] = await Promise.all([\n listAllEvents(calendars, timeMin, timeMax, warnings),\n includeTasks ? listAllTasks(taskLists, warnings, completedSince) : Promise.resolve([]),\n ]);\n\n return {\n generatedAt: new Date().toISOString(),\n timeZone,\n window: { start: timeMin, end: timeMax, days, startDay, endDay, completedSince },\n calendars,\n events,\n tasks,\n warnings,\n };\n}\n",[],[182,304],"b92ae599-c96c-44fb-9d1d-5306464de0f8","calendar.ts","11b2b070-8aa7-11f1-b718-1607ee4eb77e",14,["D",1785258558599],"import { mapWithConcurrency, paginate } from \"./google.ts\";\nimport type { Calendar, CalendarEvent, Rsvp } from \"./types.ts\";\n\nconst BASE = \"https://www.googleapis.com/calendar/v3\";\n\ninterface RawCalendarListEntry {\n id: string;\n summary?: string;\n summaryOverride?: string;\n description?: string;\n timeZone?: string;\n primary?: boolean;\n accessRole: string;\n backgroundColor?: string;\n deleted?: boolean;\n selected?: boolean;\n}\n\ninterface RawEventDate {\n date?: string;\n dateTime?: string;\n timeZone?: string;\n}\n\ninterface RawAttendee {\n email?: string;\n self?: boolean;\n responseStatus?: string;\n resource?: boolean;\n}\n\ninterface RawEvent {\n id: string;\n summary?: string;\n description?: string;\n location?: string;\n start?: RawEventDate;\n end?: RawEventDate;\n status?: string;\n htmlLink?: string;\n hangoutLink?: string;\n organizer?: { email?: string; displayName?: string; self?: boolean };\n attendees?: RawAttendee[];\n recurringEventId?: string;\n transparency?: string;\n eventType?: string;\n}\n\nexport async function listCalendars(): Promise {\n const raw = await paginate(`${BASE}/users/me/calendarList`, {\n maxResults: \"250\",\n minAccessRole: \"reader\",\n showDeleted: \"false\",\n });\n\n return raw\n .filter((c) => !c.deleted)\n .map((c) => ({\n id: c.id,\n // summaryOverride is the name *you* gave a calendar someone shared with\n // you, and should win over the owner's own title.\n name: c.summaryOverride ?? c.summary ?? c.id,\n description: c.description,\n timeZone: c.timeZone,\n primary: c.primary === true,\n accessRole: c.accessRole,\n backgroundColor: c.backgroundColor,\n }));\n}\n\nfunction normalizeEvent(raw: RawEvent, calendar: Calendar): CalendarEvent {\n // All-day events carry `date`; timed events carry `dateTime`.\n const allDay = Boolean(raw.start?.date);\n const start = raw.start?.dateTime ?? raw.start?.date ?? \"\";\n const end = raw.end?.dateTime ?? raw.end?.date ?? \"\";\n\n const self = raw.attendees?.find((a) => a.self);\n const selfResponse = (self?.responseStatus ?? \"unknown\") as Rsvp;\n\n return {\n id: raw.id,\n calendarId: calendar.id,\n calendarName: calendar.name,\n title: raw.summary ?? \"(no title)\",\n description: raw.description,\n location: raw.location,\n start,\n end,\n allDay,\n // The field is omitted entirely for busy events, so absence means busy.\n busy: raw.transparency !== \"transparent\",\n eventType: raw.eventType,\n status: raw.status,\n htmlLink: raw.htmlLink,\n hangoutLink: raw.hangoutLink,\n organizer: raw.organizer?.email,\n selfResponse,\n // Rooms and equipment are attendees too; they shouldn't inflate the count.\n attendeeCount: raw.attendees?.filter((a) => !a.resource).length ?? 0,\n recurringEventId: raw.recurringEventId,\n };\n}\n\nasync function listEventsForCalendar(\n calendar: Calendar,\n timeMin: string,\n timeMax: string,\n): Promise {\n const raw = await paginate(\n `${BASE}/calendars/${encodeURIComponent(calendar.id)}/events`,\n {\n timeMin,\n timeMax,\n // Expands recurring series into concrete instances. Without this you get\n // RRULEs back and have to interpret them yourself.\n singleEvents: \"true\",\n orderBy: \"startTime\",\n maxResults: \"2500\",\n },\n );\n\n return raw\n .filter((e) => e.status !== \"cancelled\")\n .map((e) => normalizeEvent(e, calendar));\n}\n\n/**\n * Fetch events across every readable calendar and merge into one time-ordered\n * list. A single calendar failing (deleted, permissions changed) degrades to a\n * warning rather than sinking the whole run.\n */\nexport async function listAllEvents(\n calendars: Calendar[],\n timeMin: string,\n timeMax: string,\n warnings: string[],\n): Promise {\n const perCalendar = await mapWithConcurrency(calendars, 5, async (calendar) => {\n try {\n return await listEventsForCalendar(calendar, timeMin, timeMax);\n } catch (err) {\n warnings.push(\n `Calendar \"${calendar.name}\" (${calendar.id}) failed: ${\n err instanceof Error ? err.message : String(err)\n }`,\n );\n return [] as CalendarEvent[];\n }\n });\n\n return perCalendar.flat().sort((a, b) =>\n sortKey(a) - sortKey(b) || a.title.localeCompare(b.title)\n );\n}\n\n/** Comparable instant for merge-sorting across calendars. Timed events from\n * different calendars can carry different UTC offsets, so string comparison\n * isn't reliably chronological. All-day events anchor to local midnight, which\n * lands them ahead of that day's timed events. */\nfunction sortKey(event: CalendarEvent): number {\n const parsed = Date.parse(event.allDay ? `${event.start}T00:00:00` : event.start);\n return Number.isNaN(parsed) ? Infinity : parsed;\n}\n",[],[182,312],"128b4b7b-59ad-423a-87ab-4f2c0f79d3c2","auth.ts","120122f0-8aa7-11f1-98ee-1607ee4eb77e",20,["D",1785258557793],"import { required } from \"./env.ts\";\n\nconst TOKEN_ENDPOINT = \"https://oauth2.googleapis.com/token\";\n\n/**\n * Scopes requested at consent time. Read-only on both APIs: a leaked token\n * can't mutate anything. Adding a scope later means redoing the consent flow,\n * so both are requested up front.\n */\nexport const SCOPES = [\n \"https://www.googleapis.com/auth/calendar.readonly\",\n \"https://www.googleapis.com/auth/tasks.readonly\",\n];\n\ninterface TokenResponse {\n access_token: string;\n expires_in: number;\n refresh_token?: string;\n scope?: string;\n token_type: string;\n}\n\nlet cached: { token: string; expiresAt: number } | null = null;\n\n/**\n * Exchange the long-lived refresh token for a short-lived access token.\n *\n * The refresh token is a static credential — it does not rotate on use, so it\n * lives in env vars and never needs to be written back anywhere. The access\n * token it mints lasts ~1h; we memoize it per-process purely so that a single\n * run fanning out across many calendars doesn't re-mint on every request.\n */\nexport async function getAccessToken(forceRefresh = false): Promise {\n // 60s of slack so we never hand out a token that expires mid-flight.\n if (!forceRefresh && cached && Date.now() < cached.expiresAt - 60_000) {\n return cached.token;\n }\n\n const body = new URLSearchParams({\n client_id: required(\"GOOGLE_CLIENT_ID\"),\n client_secret: required(\"GOOGLE_CLIENT_SECRET\"),\n refresh_token: required(\"GOOGLE_REFRESH_TOKEN\"),\n grant_type: \"refresh_token\",\n });\n\n const res = await fetch(TOKEN_ENDPOINT, {\n method: \"POST\",\n headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\n body,\n });\n\n if (!res.ok) {\n const detail = await res.text();\n throw new Error(\n `Token refresh failed (${res.status}): ${detail}\\n\\n` +\n `If this says \"invalid_grant\", the refresh token was revoked or expired. ` +\n `Most common cause: the Google Cloud app is still in \"Testing\" publishing status, ` +\n `which expires refresh tokens after 7 days. Set it to \"In production\", ` +\n `then re-run \\`deno task auth\\`.`,\n );\n }\n\n const json: TokenResponse = await res.json();\n cached = {\n token: json.access_token,\n expiresAt: Date.now() + json.expires_in * 1000,\n };\n return cached.token;\n}\n",[],[182,320],["D",1785258557589],[206,207,208,209,210,211,212,213,214,215,216],[182],"d5677b89-74f4-4dfe-89f1-9a1296fb66e9","authorize.ts","1139a090-8aa7-11f1-b668-1607ee4eb77e",3,["D",1785258557792],"/**\n * One-time OAuth consent, run locally, to mint a refresh token.\n *\n * This is setup tooling — it is NOT part of the runtime. The digest itself\n * never performs a browser redirect; it only ever exchanges the refresh token\n * this script produces for a short-lived access token.\n *\n * Uses the loopback flow, which Google permits for \"Desktop app\" OAuth clients:\n * we listen on localhost, Google redirects the browser back to us with a code,\n * and we trade that code for tokens. No public URL or tunnel required.\n *\n * deno task auth\n */\nimport { SCOPES } from \"../src/auth.ts\";\nimport { required } from \"../src/env.ts\";\n\nconst PORT = 8976;\n// 127.0.0.1 rather than localhost: on dual-stack machines `localhost` can\n// resolve to ::1, which would miss a server bound to the v4 loopback. Google\n// accepts either form for Desktop app clients, and the redirect URI has to\n// match what we actually listen on exactly.\nconst HOST = \"127.0.0.1\";\nconst REDIRECT_URI = `http://${HOST}:${PORT}`;\n\nfunction base64url(bytes: ArrayBuffer): string {\n return btoa(String.fromCharCode(...new Uint8Array(bytes)))\n .replace(/\\+/g, \"-\")\n .replace(/\\//g, \"_\")\n .replace(/=+$/, \"\");\n}\n\nfunction randomToken(): string {\n return base64url(crypto.getRandomValues(new Uint8Array(32)).buffer);\n}\n\nfunction page(title: string, detail: string): Response {\n return new Response(\n `${title}\n \n

${title}

${detail}

`,\n { status: 200, headers: { \"content-type\": \"text/html; charset=utf-8\" } },\n );\n}\n\nconst clientId = required(\"GOOGLE_CLIENT_ID\");\nconst clientSecret = required(\"GOOGLE_CLIENT_SECRET\");\n\n// PKCE: proves the code is being redeemed by whoever requested it.\nconst verifier = randomToken();\nconst challenge = base64url(\n await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(verifier)),\n);\nconst state = randomToken();\n\nconst authUrl = new URL(\"https://accounts.google.com/o/oauth2/v2/auth\");\nauthUrl.search = new URLSearchParams({\n client_id: clientId,\n redirect_uri: REDIRECT_URI,\n response_type: \"code\",\n scope: SCOPES.join(\" \"),\n // offline is what makes Google issue a refresh token at all...\n access_type: \"offline\",\n // ...and consent forces a fresh one even if you've approved this app before.\n // Without it, a repeat authorization returns only an access token.\n prompt: \"consent\",\n code_challenge: challenge,\n code_challenge_method: \"S256\",\n state,\n}).toString();\n\nconsole.error(\"\\nOpen this URL in your browser to authorize:\\n\");\nconsole.error(authUrl.toString());\nconsole.error(`\\nWaiting for the redirect back to ${REDIRECT_URI} ...\\n`);\n\nconst code = await new Promise((resolve, reject) => {\n const server = Deno.serve({ port: PORT, hostname: HOST, onListen: () => {} }, (req) => {\n const url = new URL(req.url);\n // Browsers also request /favicon.ico here; ignore anything without a result.\n // 204 must carry a null body.\n if (!url.searchParams.has(\"code\") && !url.searchParams.has(\"error\")) {\n return new Response(null, { status: 204 });\n }\n\n const error = url.searchParams.get(\"error\");\n if (error) {\n queueMicrotask(() => server.shutdown().then(() => reject(new Error(error))));\n return page(\"Authorization failed\", `Google returned: ${error}`);\n }\n\n if (url.searchParams.get(\"state\") !== state) {\n queueMicrotask(() => server.shutdown().then(() => reject(new Error(\"state mismatch\"))));\n return page(\"Authorization failed\", \"State parameter did not match.\");\n }\n\n const received = url.searchParams.get(\"code\")!;\n queueMicrotask(() => server.shutdown().then(() => resolve(received)));\n return page(\"Authorized\", \"You can close this tab and return to the terminal.\");\n });\n});\n\nconst res = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n client_id: clientId,\n client_secret: clientSecret,\n code,\n code_verifier: verifier,\n grant_type: \"authorization_code\",\n redirect_uri: REDIRECT_URI,\n }),\n});\n\nif (!res.ok) {\n console.error(`\\nToken exchange failed (${res.status}):\\n${await res.text()}`);\n Deno.exit(1);\n}\n\nconst token = await res.json();\n\nif (!token.refresh_token) {\n console.error(\n \"\\nGoogle did not return a refresh_token. This usually means the app was \" +\n \"already authorized and `prompt=consent` was dropped. Revoke access at \" +\n \"https://myaccount.google.com/permissions and re-run.\",\n );\n Deno.exit(1);\n}\n\nconsole.error(\"\\nSuccess. Add this line to your .env:\\n\");\nconsole.log(`GOOGLE_REFRESH_TOKEN=${token.refresh_token}`);\nconsole.error(`\\nGranted scopes: ${token.scope ?? \"(none reported)\"}`);\nconsole.error(\n '\\nReminder: while the Google Cloud app is in \"Testing\" publishing status, ' +\n 'this token expires in 7 days. Set it to \"In production\" to keep it.\\n',\n);\n",[],[189,331],["D",1785258557429],[204],[189],["D",1785258556623],{"_96":95,"_103":99},{"_96":95,"_97":-5,"_98":99,"_18":56,"_100":101,"_102":25},{"_13":85,"_32":86,"_44":43,"_87":45,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":46,"_94":95},"ctx",{"_78":-5,"_123":378,"_379":380,"_381":382,"_383":25,"_384":25,"_385":25,"_386":140,"_387":-5,"_388":-7,"_389":-7,"_390":62,"_391":25,"_392":25,"_393":-5,"_394":25,"_395":25,"_396":25,"_397":-5},"ENV",{"_349":350,"_351":352,"_353":86,"_354":355,"_356":357,"_358":359,"_360":361,"_362":363,"_364":365,"_366":367,"_368":369,"_370":371,"_372":373,"_374":375,"_376":377},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v24