[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":53,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":121,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",3,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","9b29a852-72f8-11f1-a12d-1607ee4eb77e","name","fileType","http","content","// LeadPulse — gateway-sms (HTTP val)\n// ---------------------------------------------------------------------------\n// A \"mobile gateway\" SMS channel, like Traccar's SMS Gateway: instead of paying\n// Telnyx per message, an Android phone running the \"SMS Gateway for Android\" app\n// (sms-gate.app) sends/receives over its own SIM. Val.town can't reach a phone\n// on a home network directly, so we use sms-gate.app's CLOUD relay:\n// - SEND: POST https://api.sms-gate.app/3rdparty/v1/messages (Basic auth)\n// - RECEIVE: the phone's app calls our /inbound webhook on every received SMS\n//\n// This val is SEPARATE from webhook-receiver but SHARES the same Val.town SQLite\n// DB, so leads/messages it writes show up in the LeadPulse dashboard exactly\n// like Telnyx traffic. On inbound it captures the reply, does STOP/opt-out, and\n// (when the lead is in AI mode) hands off to webhook-receiver's AI reply endpoint\n// so gateway threads auto-reply just like Telnyx ones.\n//\n// Routes:\n// GET / health (counts + config status)\n// POST /send send an SMS via the phone (needs APP_SECRET bearer)\n// POST /inbound sms-gate.app webhook target (HMAC-verified, public)\n//\n// Env vars to set ON THIS VAL (Val.town env vars are per-val):\n// SMSGATE_USER, SMSGATE_PASS - cloud credentials shown in the app's\n// \"Cloud Server\" section after it connects.\n// SMSGATE_DEFAULT_NUMBER - the phone's own E.164 number (e.g.\n// +447700900123). Used to route inbound to the\n// right client when the app doesn't report the\n// receiving number. Add this number in the\n// LeadPulse Numbers tab and assign it to a\n// client so replies land in that workspace.\n// APP_SECRET - same shared secret as webhook-receiver;\n// protects /send. Fails CLOSED if unset.\n// SMSGATE_WEBHOOK_SECRET - (optional) the app's Webhook Signing Key.\n// When set, /inbound rejects unsigned/forged\n// calls. Fails OPEN if unset (so you can wire\n// it up first, then turn on verification).\n// SMSGATE_API_URL - (optional) override the cloud base URL, e.g.\n// your self-hosted server's /3rdparty/v1 path.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst DEFAULT_CLIENT_ID = 1;\nconst API_BASE =\n (Deno.env.get(\"SMSGATE_API_URL\") || \"https://api.sms-gate.app/3rdparty/v1\")\n .replace(/\\/+$/, \"\");\n\n// webhook-receiver = the AI brain. Gateway inbound calls its on-demand reply\n// endpoint so messages arriving on a gateway number get the SAME AI auto-reply\n// as Telnyx numbers (respecting the conversation's pinned bot). Override via env.\nconst WEBHOOK_RECEIVER_URL =\n (Deno.env.get(\"WEBHOOK_RECEIVER_URL\") ||\n \"https://jamesayres--4881354c657f11f190a51607ee4eb77e.web.val.run\")\n .replace(/\\/+$/, \"\");\n\nconst STOP_KEYWORDS = new Set([\n \"STOP\",\n \"STOPALL\",\n \"UNSUBSCRIBE\",\n \"CANCEL\",\n \"END\",\n \"QUIT\",\n \"OPTOUT\",\n \"OPT OUT\",\n \"REMOVE\",\n]);\nconst OPT_OUT_CONFIRMATION =\n \"You've been removed from our list. Sorry to bother you!\";\n\n// ---- Pure helpers (kept identical to webhook-receiver so writes match) -------\nfunction cors(\n body: string | object,\n status = 200,\n contentType = \"application/json\",\n) {\n const headers = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n \"Content-Type\": contentType,\n };\n const noBody = status === 204 || status === 304;\n const bodyStr = noBody\n ? null\n : (typeof body === \"string\" ? body : JSON.stringify(body));\n return new Response(bodyStr, { status, headers });\n}\n\n// Normalise UK numbers to E.164 (mirrors webhook-receiver/lib.ts).\nfunction normalizePhone(raw: string): string {\n let p = String(raw).replace(/[\\s()-]/g, \"\");\n if (p.startsWith(\"07\")) p = \"+44\" + p.slice(1);\n else if (p.startsWith(\"447\")) p = \"+\" + p;\n else if (p.startsWith(\"0\")) p = \"+44\" + p.slice(1);\n return p;\n}\n\n// GSM-7 sanitiser so outbound stays 1 segment / 160 chars (mirrors lib.ts).\nconst GSM_EXT = \"^{}\\\\[~]|€\";\nconst GSM_BASE =\n \"@£$¥èéùìòÇ\\nØø\\rÅåΔ_ΦΓΛΩΠΨΣΘΞ ÆæßÉ !\\\"#¤%&'()*+,-./0123456789:;<=>?¡ABCDEFGHIJKLMNOPQRSTUVWXYZÄÖÑÜ§¿abcdefghijklmnopqrstuvwxyzäöñüà\";\nconst GSM_CHARS = new Set((GSM_BASE + GSM_EXT).split(\"\"));\nfunction gsmify(text: string): string {\n if (!text) return text;\n let t = String(text)\n .replace(/[‘’‚′‵]/g, \"'\").replace(/[“”„″]/g, '\"').replace(/[–—―]/g, \"-\")\n .replace(/…/g, \"...\")\n .replace(/[ ]/g, \" \").replace(/[•·]/g, \"-\").replace(/™/g, \"(TM)\").replace(\n /®/g,\n \"(R)\",\n ).replace(/©/g, \"(C)\");\n t = Array.from(t).filter((ch) => GSM_CHARS.has(ch)).join(\"\");\n return t.replace(/[ \\t]{2,}/g, \" \").replace(/ +\\n/g, \"\\n\").trim();\n}\n\nasync function logMessage(\n clientId: number,\n phone: string,\n direction: string,\n text: string,\n channelNumber?: string | null,\n) {\n await sqlite.execute({\n sql:\n `INSERT INTO messages (client_id, phone_number, direction, text, timestamp, channel_number) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [\n clientId,\n phone,\n direction,\n gsmify(text),\n new Date().toISOString(),\n channelNumber ?? null,\n ],\n });\n}\n\n// ---- sms-gate.app cloud send -------------------------------------------------\n// Sends through the phone over its SIM. The phone IS the sender; there is no\n// arbitrary `from` on the wire (the SIM's number sends it). Returns true on OK.\nasync function sendViaGateway(to: string, text: string): Promise {\n const user = Deno.env.get(\"SMSGATE_USER\");\n const pass = Deno.env.get(\"SMSGATE_PASS\");\n if (!user || !pass) {\n console.error(\"sendViaGateway: missing SMSGATE_USER / SMSGATE_PASS\");\n return false;\n }\n try {\n const res = await fetch(`${API_BASE}/messages`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": \"Basic \" + btoa(`${user}:${pass}`),\n },\n body: JSON.stringify({\n textMessage: { text: gsmify(text) },\n phoneNumbers: [to],\n }),\n });\n if (!res.ok) {\n console.error(\"sms-gate send failed\", res.status, await res.text());\n return false;\n }\n return true;\n } catch (e) {\n console.error(\"sms-gate send error\", e);\n return false;\n }\n}\n\n// ---- AI auto-reply trigger ---------------------------------------------------\n// Ask webhook-receiver (the AI brain) to reply to this thread now. It resolves\n// the conversation's pinned/campaign/default bot, generates the reply, and sends\n// it — passing `from` = this gateway number so the reply routes back out through\n// the phone (webhook-receiver's sendSMS routes by the from-number's channel).\n// Needs APP_SECRET (shared with webhook-receiver); no-ops if it isn't set.\nasync function triggerAIReply(\n clientId: number,\n phone: string,\n from: string | null,\n): Promise {\n const secret = Deno.env.get(\"APP_SECRET\");\n if (!secret) return;\n try {\n await fetch(`${WEBHOOK_RECEIVER_URL}/api/lead/ai-reply`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${secret}`,\n },\n body: JSON.stringify({ phone_number: phone, client_id: clientId, from }),\n });\n } catch (e) {\n console.error(\"gateway -> AI reply trigger failed\", e);\n }\n}\n\n// ---- Webhook signature: HEX(HMAC_SHA256(rawBody + X-Timestamp, signingKey)) --\nasync function verifyWebhookSignature(\n secret: string,\n signatureHex: string,\n timestamp: string,\n rawBody: string,\n): Promise {\n try {\n if (!signatureHex || !timestamp) return false;\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(rawBody + timestamp),\n );\n const hex = Array.from(new Uint8Array(mac)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n const a = hex.toLowerCase();\n const b = signatureHex.trim().toLowerCase();\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) {\n diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n return diff === 0;\n } catch (e) {\n console.error(\"webhook sig verify error\", e);\n return false;\n }\n}\n\n// ---- Per-number channel ('telnyx' | 'gateway') ------------------------------\n// Adds the `channel` column to the shared `numbers` table (gateway-sms owns this\n// migration so webhook-receiver's maxed-out main.ts stays untouched). Runs once\n// per warm instance. webhook-receiver/lib.ts + the cron READ this column to\n// decide whether a given from-number sends via Telnyx or via this phone.\nlet channelReady = false;\nasync function ensureChannelColumn(): Promise {\n if (channelReady) return;\n try {\n await sqlite.execute(\n `ALTER TABLE numbers ADD COLUMN channel TEXT DEFAULT 'telnyx'`,\n );\n } catch { /* column already exists */ }\n channelReady = true;\n}\n\n// ============================================================================\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"OPTIONS\") return cors(\"\", 204);\n\n await ensureChannelColumn();\n\n // --- Tag a number's channel: 'gateway' (this phone) or 'telnyx' -------------\n // Protected by APP_SECRET. Upserts the number row so a single call is enough;\n // assign it to a client in the LeadPulse Numbers tab so inbound routes there.\n if (req.method === \"POST\" && url.pathname === \"/number/channel\") {\n const secret = Deno.env.get(\"APP_SECRET\");\n if (!secret) {\n return cors({ ok: false, error: \"Server not configured (APP_SECRET)\" }, 503);\n }\n const auth = req.headers.get(\"authorization\") || \"\";\n if ((auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\") !== secret) {\n return cors({ ok: false, error: \"Unauthorized\" }, 401);\n }\n let body: any = {};\n try {\n body = await req.json();\n } catch {\n return cors({ ok: false, error: \"Invalid JSON\" }, 400);\n }\n const phone = body.phone_number ? normalizePhone(body.phone_number) : \"\";\n const channel = body.channel === \"gateway\" ? \"gateway\" : \"telnyx\";\n if (!phone) return cors({ ok: false, error: \"phone_number required\" }, 400);\n await sqlite.execute({\n sql:\n `INSERT INTO numbers (phone_number, label, created_at, channel) VALUES (?, ?, ?, ?)\n ON CONFLICT(phone_number) DO UPDATE SET channel = excluded.channel`,\n args: [phone, body.label ?? null, new Date().toISOString(), channel],\n });\n const r = await sqlite.execute({\n sql: `SELECT phone_number, channel, client_id FROM numbers WHERE phone_number = ?`,\n args: [phone],\n });\n const row = (r.rows as any[])[0];\n return cors({\n ok: true,\n number: row\n ? { phone_number: row[0], channel: row[1] || \"telnyx\", client_id: row[2] ?? null }\n : null,\n });\n }\n\n // --- Health (open, counts only) ---\n if (req.method === \"GET\" && url.pathname === \"/\") {\n let msgs = 0, leads = 0;\n try {\n const m = await sqlite.execute(`SELECT COUNT(*) FROM messages`);\n const l = await sqlite.execute(`SELECT COUNT(*) FROM leads`);\n msgs = Number((m.rows as any[])[0][0]);\n leads = Number((l.rows as any[])[0][0]);\n } catch { /* shared DB not initialised yet */ }\n return cors({\n ok: true,\n service: \"gateway-sms\",\n messages: msgs,\n leads,\n configured: {\n send: !!(Deno.env.get(\"SMSGATE_USER\") && Deno.env.get(\"SMSGATE_PASS\")),\n app_secret: !!Deno.env.get(\"APP_SECRET\"),\n webhook_verification: !!Deno.env.get(\"SMSGATE_WEBHOOK_SECRET\"),\n default_number: Deno.env.get(\"SMSGATE_DEFAULT_NUMBER\") || null,\n api_base: API_BASE,\n },\n });\n }\n\n // --- Send via the phone (protected by APP_SECRET, same as webhook-receiver) -\n if (req.method === \"POST\" && url.pathname === \"/send\") {\n const secret = Deno.env.get(\"APP_SECRET\");\n if (!secret) {\n return cors(\n { ok: false, error: \"Server not configured (APP_SECRET)\" },\n 503,\n );\n }\n const auth = req.headers.get(\"authorization\") || \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (token !== secret) {\n return cors({ ok: false, error: \"Unauthorized\" }, 401);\n }\n\n let body: any = {};\n try {\n body = await req.json();\n } catch {\n return cors({ ok: false, error: \"Invalid JSON\" }, 400);\n }\n const clientId = Number(body.client_id) > 0\n ? Number(body.client_id)\n : DEFAULT_CLIENT_ID;\n const to = body.phone_number\n ? normalizePhone(body.phone_number)\n : (body.to ? normalizePhone(body.to) : \"\");\n const text = (body.text ?? \"\").toString();\n if (!to || !text.trim()) {\n return cors({ ok: false, error: \"phone_number and text required\" }, 400);\n }\n const direction = [\"manual\", \"ai\", \"campaign\"].includes(body.direction)\n ? body.direction\n : \"manual\";\n const channelNumber = body.from\n ? normalizePhone(body.from)\n : (Deno.env.get(\"SMSGATE_DEFAULT_NUMBER\") || null);\n\n const ok = await sendViaGateway(to, text.trim());\n if (ok) {\n // Make sure the lead exists, then log the outbound message.\n await sqlite.execute({\n sql:\n `INSERT INTO leads (client_id, phone_number, name, campaign, status, created_at, assigned_number)\n VALUES (?, ?, ?, ?, 'active', ?, ?)\n ON CONFLICT(client_id, phone_number) DO NOTHING`,\n args: [\n clientId,\n to,\n null,\n \"uncategorized\",\n new Date().toISOString(),\n channelNumber,\n ],\n });\n await logMessage(clientId, to, direction, text.trim(), channelNumber);\n }\n return cors({ ok });\n }\n\n // --- Inbound webhook from the phone (sms-gate.app sms:received) -------------\n if (req.method === \"POST\" && url.pathname === \"/inbound\") {\n const rawBody = await req.text();\n\n // Verify HMAC if a signing key is configured (fail-open when unset, so you\n // can wire the webhook first then switch verification on by setting the env).\n const webhookSecret = Deno.env.get(\"SMSGATE_WEBHOOK_SECRET\");\n if (webhookSecret) {\n const sig = req.headers.get(\"x-signature\") || \"\";\n const ts = req.headers.get(\"x-timestamp\") || \"\";\n const fresh = !!ts && Math.abs(Date.now() / 1000 - Number(ts)) < 300; // 5-min replay window\n const valid = fresh &&\n await verifyWebhookSignature(webhookSecret, sig, ts, rawBody);\n if (!valid) {\n console.error(\"gateway webhook signature failed\", {\n fresh,\n hasSig: !!sig,\n });\n return cors({ ok: false, error: \"Invalid signature\" }, 401);\n }\n }\n\n let payload: any = {};\n try {\n payload = rawBody ? JSON.parse(rawBody) : {};\n } catch {\n return cors({ ok: false, error: \"Invalid JSON\" }, 400);\n }\n\n const event = payload?.event;\n const p = payload?.payload;\n if (event !== \"sms:received\" || !p) {\n return cors({ ok: true, ignored: true, event: event ?? null });\n }\n\n const fromNumber = normalizePhone(p.sender ?? \"unknown\"); // the lead who texted us\n // The phone's own number (which SIM received it). May be null — fall back to\n // the configured default so routing + threading still work.\n const toNumber = p.recipient\n ? normalizePhone(p.recipient)\n : (Deno.env.get(\"SMSGATE_DEFAULT_NUMBER\") || null);\n const text = p.message ?? \"\";\n const now = new Date().toISOString();\n\n // Route to the client that owns the receiving number (same rules as the\n // Telnyx inbound handler): known+unassigned -> park as unrouted; unknown\n // number -> Default so live inbound is never lost.\n let routedClientId: number | null = DEFAULT_CLIENT_ID;\n let numberKnown = false;\n if (toNumber) {\n const nr = await sqlite.execute({\n sql: `SELECT client_id FROM numbers WHERE phone_number = ?`,\n args: [toNumber],\n });\n const nrow = (nr.rows as any[])[0];\n if (nrow) {\n numberKnown = true;\n routedClientId = nrow[0] != null ? Number(nrow[0]) : null;\n }\n }\n if (numberKnown && routedClientId == null) {\n await sqlite.execute({\n sql:\n `INSERT INTO unrouted_messages (phone_number, to_number, text, timestamp) VALUES (?, ?, ?, ?)`,\n args: [fromNumber, toNumber, text, now],\n });\n return cors({ ok: true, stored: true, unrouted: true });\n }\n const clientId = routedClientId ?? DEFAULT_CLIENT_ID;\n\n // Capture the lead + the inbound message first (never lose inbound data).\n await sqlite.execute({\n sql:\n `INSERT INTO leads (client_id, phone_number, name, campaign, status, created_at, assigned_number)\n VALUES (?, ?, ?, ?, 'active', ?, ?)\n ON CONFLICT(client_id, phone_number) DO NOTHING`,\n args: [clientId, fromNumber, null, \"uncategorized\", now, toNumber],\n });\n await sqlite.execute({\n sql:\n `INSERT INTO messages (client_id, phone_number, direction, text, timestamp, channel_number) VALUES (?, ?, 'inbound', ?, ?, ?)`,\n args: [clientId, fromNumber, text, now, toNumber],\n });\n\n // Best-effort STOP/opt-out (compliance). v1 does NOT run the AI auto-reply;\n // gateway-number replies are answered manually in the dashboard for now.\n try {\n if (STOP_KEYWORDS.has(text.trim().toUpperCase())) {\n await sqlite.execute({\n sql:\n `UPDATE leads SET opted_out = 1, status = 'opted_out' WHERE client_id = ? AND phone_number = ?`,\n args: [clientId, fromNumber],\n });\n await sqlite.execute({\n sql:\n `UPDATE campaign_queue SET status = 'cancelled' WHERE client_id = ? AND phone_number = ? AND status = 'pending'`,\n args: [clientId, fromNumber],\n });\n const sent = await sendViaGateway(fromNumber, OPT_OUT_CONFIRMATION);\n if (sent) {\n await logMessage(\n clientId,\n fromNumber,\n \"ai\",\n OPT_OUT_CONFIRMATION,\n toNumber,\n );\n }\n return cors({ ok: true, stored: true, opted_out: true });\n }\n } catch (e) {\n console.error(\"post-inbound processing error\", e);\n }\n\n // AI auto-reply (parity with the Telnyx inbound handler): only when the lead\n // is in AI mode and hasn't opted out. The brain lives in webhook-receiver, so\n // we hand off to its reply endpoint, which respects the pinned bot and sends\n // back out through this phone. This is what makes gateway threads fully\n // automated instead of needing a manual \"let bot reply now\" click each time.\n try {\n const lr = await sqlite.execute({\n sql: `SELECT mode, opted_out FROM leads WHERE client_id = ? AND phone_number = ?`,\n args: [clientId, fromNumber],\n });\n const lrow = (lr.rows as any[])[0];\n const mode = lrow ? (lrow[0] || \"ai\") : \"ai\";\n const optedOut = lrow ? !!lrow[1] : false;\n if (mode !== \"manual\" && !optedOut) {\n await triggerAIReply(clientId, fromNumber, toNumber);\n }\n } catch (e) {\n console.error(\"gateway AI auto-reply error\", e);\n }\n\n return cors({ ok: true, stored: true });\n }\n\n return cors({ ok: false, error: \"Not found\" }, 404);\n}","// LeadPulse — booking-link redirect proxy (Layer 1: click tracking).\n// Deploy with `vt push`. Shares the account SQLite DB with webhook-receiver.\n//\n// Flow: the booking link in every SMS points here as\n// https:///r?t=\n// On click we stamp link_clicked_at on the matching campaign_queue row, email\n// James, then 302 the lead to the client's REAL booking URL — with the token\n// appended as utm_content so a booking webhook (Calendly etc.) can tie the\n// confirmed booking back to the exact lead. Platform-agnostic: the destination\n// can be Calendly, Cal.com, Acuity, a phone link, anything.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { email } from \"https://esm.town/v/std/email\";\n\n// A safe place to send a click we can't resolve (bad/expired token, no booking\n// link configured). Set LP_FALLBACK_URL on this val to your site; defaults to a\n// plain message so a lead is never left on an error page.\nconst FALLBACK_URL = Deno.env.get(\"LP_FALLBACK_URL\") || \"\";\n\n// Resolve the real booking URL for a campaign: the campaign's own booking_link,\n// falling back to its assigned agent's booking_link.\nasync function resolveBookingUrl(campaignId: number, clientId: number): Promise {\n const c = await sqlite.execute({\n sql: `SELECT booking_link, agent_id FROM campaigns WHERE id = ? AND client_id = ?`,\n args: [campaignId, clientId],\n });\n const row = (c.rows as any[])[0];\n if (!row) return null;\n if (row[0]) return String(row[0]);\n if (row[1]) {\n const a = await sqlite.execute({ sql: `SELECT booking_link FROM agents WHERE id = ?`, args: [row[1]] });\n const ar = (a.rows as any[])[0];\n if (ar && ar[0]) return String(ar[0]);\n }\n return null;\n}\n\n// Append LeadPulse tracking params so a downstream booking webhook can match the\n// exact lead. Calendly surfaces utm_content in invitee.created -> payload.tracking.\nfunction withTracking(dest: string, token: string, campaignId: number | null): string {\n try {\n const u = new URL(dest);\n u.searchParams.set(\"utm_source\", \"leadpulse\");\n u.searchParams.set(\"utm_content\", token);\n if (campaignId != null) u.searchParams.set(\"utm_campaign\", String(campaignId));\n return u.toString();\n } catch {\n return dest; // non-URL destination (e.g. tel:) — leave as-is\n }\n}\n\nfunction redirect(to: string): Response {\n return new Response(null, { status: 302, headers: { Location: to } });\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (url.pathname === \"/\") {\n return new Response(\"LeadPulse redirect proxy. Use /r?t=.\", { status: 200 });\n }\n if (url.pathname !== \"/r\") return new Response(\"Not found\", { status: 404 });\n\n const token = url.searchParams.get(\"t\");\n const destOverride = url.searchParams.get(\"dest\"); // optional explicit destination\n\n // No token: best-effort redirect if a dest was given, else fallback.\n if (!token) {\n if (destOverride) return redirect(destOverride);\n return FALLBACK_URL ? redirect(FALLBACK_URL) : new Response(\"Missing tracking token.\", { status: 400 });\n }\n\n // Look up the send this token belongs to.\n const q = await sqlite.execute({\n sql: `SELECT campaign_id, client_id, phone_number, link_clicked_at FROM campaign_queue WHERE track_token = ?`,\n args: [token],\n });\n const row = (q.rows as any[])[0];\n\n if (!row) {\n // Unknown token — still get the lead where they wanted to go if we can.\n if (destOverride) return redirect(destOverride);\n return FALLBACK_URL ? redirect(FALLBACK_URL) : new Response(\"Unknown link.\", { status: 404 });\n }\n\n const [campaignId, clientId, phone, alreadyClicked] = row;\n\n // Stamp the first click only (so the email fires once, not on every open).\n let firstClick = false;\n if (!alreadyClicked) {\n firstClick = true;\n await sqlite.execute({\n sql: `UPDATE campaign_queue SET link_clicked_at = ? WHERE track_token = ?`,\n args: [new Date().toISOString(), token],\n });\n }\n\n // Work out where to send them.\n const dest = destOverride || (await resolveBookingUrl(campaignId, clientId));\n if (!dest) {\n return FALLBACK_URL ? redirect(FALLBACK_URL) : new Response(\"No booking link configured.\", { status: 404 });\n }\n\n // Notify James on the first click (best-effort — never block the redirect).\n if (firstClick) {\n try {\n await email({\n subject: `LeadPulse: booking link clicked (campaign ${campaignId})`,\n text: `A lead clicked the booking link.\\n\\nPhone: ${phone}\\nCampaign: ${campaignId}\\nClient: ${clientId}\\nWhen: ${new Date().toISOString()}`,\n });\n } catch (_e) { /* email is best-effort */ }\n }\n\n return redirect(withTracking(dest, token, campaignId));\n}\n","createdAt",["D",1782655413399],"branchVersion","branchId","35f9bf3a-0a2d-40b2-9276-a9b20d27fbc9","id","cd765d7f-89db-403c-974c-9332b384680b","lp-redirect",["D",1782654749461],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","479e4e9c-8457-43bf-9d25-06399436a4f4","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019eb632-84fe-70e4-9a7f-19a05e40a2f8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",4,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","jamesayres","handle","displayName","James Ayres","avatar","https://lh3.googleusercontent.com/a/ACg8ocJOBKkeJdcD8Vv48levfET0tNVodYvJRCFxAuAaNoagJBFNRYM=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":150,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":151,"_79":152,"_81":153,"_83":25},"tree",[145],"files",[145],"counts",{"_134":61,"_135":136,"_137":61,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"fc7a91ca-eb5d-4e7f-afaf-85f6e3a3a9f3","parentId","latest",["D",1782655413399],2,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":61,"_144":61},"connections",{"_142":61,"_143":61},"count","unfilledCount","emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":146,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_147":148,"_27":149},["D",1782655413399],"children",[],[28],["D",1782654749461],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_123":187,"_188":189,"_190":191,"_192":25,"_193":25,"_194":25,"_195":121,"_196":-5,"_197":-7,"_198":-7,"_199":61,"_200":25,"_201":25,"_202":-5,"_203":25,"_204":25,"_205":25,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":85,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v3