[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_172":173,"_174":175},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":125,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",7,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","496ba7dc-68e3-11f1-b401-1607ee4eb77e","name","fileType","http","content","import { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { dashboardPage, loadSheetPage, type RoutePayload, type RouteRow } from \"./views.ts\";\n\nconst TABLE = \"routific_routes\";\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE} (\n uuid TEXT PRIMARY KEY,\n payload TEXT NOT NULL,\n received_at TEXT NOT NULL\n)`);\n\n/** Verify the Routific HMAC-SHA256 signature against the raw body. */\nasync function verifySignature(rawBody: string, header: string | null, secret: string): Promise {\n if (!header?.startsWith(\"v0=\")) return false;\n const signatures = header.slice(3).split(\",\").map((s) => s.trim());\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(rawBody));\n const expected = [...new Uint8Array(mac)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n // constant-time-ish comparison\n return signatures.some((sig) => sig.length === expected.length && timingSafeEqual(sig, expected));\n}\n\nfunction timingSafeEqual(a: string, b: string): boolean {\n let mismatch = a.length === b.length ? 0 : 1;\n const len = Math.max(a.length, b.length);\n for (let i = 0; i < len; i++) mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);\n return mismatch === 0;\n}\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\n// --- Webhook receiver: route.published ---\napp.post(\"/webhook\", async (c) => {\n const rawBody = await c.req.text();\n const topic = c.req.header(\"x-routific-topic\");\n const secret = Deno.env.get(\"ROUTIFIC_WEBHOOK_SECRET\");\n\n // Verify signature only if a secret is configured (keeps the demo plug-and-play).\n if (secret) {\n const sigHeader = c.req.header(\"x-routific-signature\") ?? null;\n const ok = await verifySignature(rawBody, sigHeader, secret);\n if (!ok) {\n // Temporary diagnostic — tries every common signing scheme to find Routific's.\n const ts = c.req.header(\"x-routific-timestamp\") ?? \"\";\n const id = c.req.header(\"x-routific-event-id\") ?? \"\";\n const enc = new TextEncoder();\n\n const toHex = (buf: ArrayBuffer) =>\n [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n const toB64 = (buf: ArrayBuffer) => btoa(String.fromCharCode(...new Uint8Array(buf)));\n\n // Candidate HMAC keys: secret as utf-8, and secret base64-decoded (with/without whsec_ prefix).\n const keyVariants: Record = { \"utf8-secret\": enc.encode(secret) };\n try {\n const stripped = secret.startsWith(\"whsec_\") ? secret.slice(6) : secret;\n keyVariants[\"base64-decoded\"] = Uint8Array.from(atob(stripped), (ch) => ch.charCodeAt(0));\n } catch { /* not base64 */ }\n\n // Candidate signed payloads.\n const payloads: Record = {\n \"body\": rawBody,\n \"ts.body\": `${ts}.${rawBody}`,\n \"id.ts.body\": `${id}.${ts}.${rawBody}`,\n \"ts.id.body\": `${ts}.${id}.${rawBody}`,\n };\n\n const results: Record = {};\n for (const [keyName, keyBytes] of Object.entries(keyVariants)) {\n const key = await crypto.subtle.importKey(\"raw\", keyBytes, { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n for (const [pName, payload] of Object.entries(payloads)) {\n const mac = await crypto.subtle.sign(\"HMAC\", key, enc.encode(payload));\n results[`${keyName} | ${pName} | hex`] = \"v0=\" + toHex(mac);\n results[`${keyName} | ${pName} | b64`] = \"v0=\" + toB64(mac);\n }\n }\n\n console.log(\"SIG DIAGNOSTIC\", {\n receivedHeader: sigHeader,\n timestamp: ts,\n eventId: id,\n bodyLength: rawBody.length,\n secretLength: secret.length,\n candidates: results,\n });\n return c.text(\"invalid signature\", 401);\n }\n }\n\n let body: { type?: string; data?: RoutePayload };\n try {\n body = JSON.parse(rawBody);\n } catch {\n return c.text(\"invalid json\", 400);\n }\n\n if (body.type !== \"route.published\" || !body.data?.route?.uuid) {\n // Acknowledge other topics so Routific doesn't retry; we only act on route.published.\n return c.json({ ok: true, ignored: topic ?? body.type ?? \"unknown\" });\n }\n\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE} (uuid, payload, received_at) VALUES (?, ?, ?)\n ON CONFLICT(uuid) DO UPDATE SET payload = excluded.payload, received_at = excluded.received_at`,\n args: [body.data.route.uuid, JSON.stringify(body.data), new Date().toISOString()],\n });\n\n return c.json({ ok: true, stored: body.data.route.uuid });\n});\n\nasync function loadRows(): Promise {\n const res = await sqlite.execute(`SELECT uuid, payload, received_at FROM ${TABLE} ORDER BY received_at DESC`);\n return res.rows.map((row) => ({\n uuid: row.uuid as string,\n payload: JSON.parse(row.payload as string) as RoutePayload,\n received_at: new Date(row.received_at as string).toLocaleString(),\n }));\n}\n\n// --- Warehouse dashboard ---\napp.get(\"/\", async (c) => c.html(dashboardPage(await loadRows()).toString()));\n\n// --- Load & pick sheet for one route ---\napp.get(\"/route/:uuid\", async (c) => {\n const res = await sqlite.execute({\n sql: `SELECT uuid, payload, received_at FROM ${TABLE} WHERE uuid = ?`,\n args: [c.req.param(\"uuid\")],\n });\n if (res.rows.length === 0) return c.text(\"Route not found\", 404);\n const row = res.rows[0];\n const data: RouteRow = {\n uuid: row.uuid as string,\n payload: JSON.parse(row.payload as string) as RoutePayload,\n received_at: new Date(row.received_at as string).toLocaleString(),\n };\n return c.html(loadSheetPage(data).toString());\n});\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\nexport default app.fetch;\n","import { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { dashboardPage, loadSheetPage, type RoutePayload, type RouteRow } from \"./views.ts\";\n\nconst TABLE = \"routific_routes\";\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE} (\n uuid TEXT PRIMARY KEY,\n payload TEXT NOT NULL,\n received_at TEXT NOT NULL\n)`);\n\n/** Verify the Routific HMAC-SHA256 signature against the raw body. */\nasync function verifySignature(rawBody: string, header: string | null, secret: string): Promise {\n if (!header?.startsWith(\"v0=\")) return false;\n const signatures = header.slice(3).split(\",\").map((s) => s.trim());\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(rawBody));\n const expected = [...new Uint8Array(mac)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n // constant-time-ish comparison\n return signatures.some((sig) => sig.length === expected.length && timingSafeEqual(sig, expected));\n}\n\nfunction timingSafeEqual(a: string, b: string): boolean {\n let mismatch = a.length === b.length ? 0 : 1;\n const len = Math.max(a.length, b.length);\n for (let i = 0; i < len; i++) mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);\n return mismatch === 0;\n}\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\n// --- Webhook receiver: route.published ---\napp.post(\"/webhook\", async (c) => {\n const rawBody = await c.req.text();\n const topic = c.req.header(\"x-routific-topic\");\n const secret = Deno.env.get(\"ROUTIFIC_WEBHOOK_SECRET\");\n\n // Verify signature only if a secret is configured (keeps the demo plug-and-play).\n if (secret) {\n const ok = await verifySignature(rawBody, c.req.header(\"x-routific-signature\") ?? null, secret);\n if (!ok) return c.text(\"invalid signature\", 401);\n }\n\n let body: { type?: string; data?: RoutePayload };\n try {\n body = JSON.parse(rawBody);\n } catch {\n return c.text(\"invalid json\", 400);\n }\n\n if (body.type !== \"route.published\" || !body.data?.route?.uuid) {\n // Acknowledge other topics so Routific doesn't retry; we only act on route.published.\n return c.json({ ok: true, ignored: topic ?? body.type ?? \"unknown\" });\n }\n\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE} (uuid, payload, received_at) VALUES (?, ?, ?)\n ON CONFLICT(uuid) DO UPDATE SET payload = excluded.payload, received_at = excluded.received_at`,\n args: [body.data.route.uuid, JSON.stringify(body.data), new Date().toISOString()],\n });\n\n return c.json({ ok: true, stored: body.data.route.uuid });\n});\n\nasync function loadRows(): Promise {\n const res = await sqlite.execute(`SELECT uuid, payload, received_at FROM ${TABLE} ORDER BY received_at DESC`);\n return res.rows.map((row) => ({\n uuid: row.uuid as string,\n payload: JSON.parse(row.payload as string) as RoutePayload,\n received_at: new Date(row.received_at as string).toLocaleString(),\n }));\n}\n\n// --- Warehouse dashboard ---\napp.get(\"/\", async (c) => c.html(dashboardPage(await loadRows()).toString()));\n\n// --- Load & pick sheet for one route ---\napp.get(\"/route/:uuid\", async (c) => {\n const res = await sqlite.execute({\n sql: `SELECT uuid, payload, received_at FROM ${TABLE} WHERE uuid = ?`,\n args: [c.req.param(\"uuid\")],\n });\n if (res.rows.length === 0) return c.text(\"Route not found\", 404);\n const row = res.rows[0];\n const data: RouteRow = {\n uuid: row.uuid as string,\n payload: JSON.parse(row.payload as string) as RoutePayload,\n received_at: new Date(row.received_at as string).toLocaleString(),\n };\n return c.html(loadSheetPage(data).toString());\n});\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\nexport default app.fetch;\n","createdAt",["D",1781546629603],"branchVersion","branchId","416699fb-87bb-4947-837e-8684a1943bac","id","0bff063f-f596-462d-9c4d-f1e73dcec5f6","routific-load-sheet",["D",1781545960614],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Warehouse Load & Pick Sheet — route.published webhook demo","imageUrl","544882c0-c67e-4d71-bc1f-ed58e07f7c7e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019ecc2b-2b10-749b-8dc9-2ec5893d17c5","tursoName","0bff063ff596462d9c4df1e73dcec5f6","tursoHostname","0bff063ff596462d9c4df1e73dcec5f6-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789498239291],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",26,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","jamilwahid","handle","displayName","Jamil Wahid","avatar","https://lh3.googleusercontent.com/a/ACg8ocKQ0SrZl5L7F-fqeqL30bOiCiV80k3F2YGlLzXS20GmhceNGk4d=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":167,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":168,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":169,"_82":170,"_84":171,"_86":25},"tree",[158,159],"files",[158,159],"counts",{"_148":61,"_149":139,"_150":61,"_151":152,"_153":154},"contents",[130,131],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":144,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_137":25,"_38":145,"_13":146,"_33":34,"_35":37,"_24":25,"_142":-5,"_27":147},{"_43":132,"_32":133,"_30":134,"_135":-5,"_41":42,"_40":136,"_137":25,"_38":138,"_13":139,"_33":140,"_35":141,"_24":25,"_142":-5,"_27":143},"b0e6348b-f20a-4ab4-9801-1d42ec485600","views.ts","1cb325ee-68e3-11f1-909c-1607ee4eb77e","parentId",2,"latest",["D",1781546059749],1,"script","import { html, raw } from \"npm:hono/html\";\n\n// ---- Types mirroring the route.published payload ----\nexport interface Order {\n uuid: string;\n status: string;\n uri: string;\n customerOrderNumber: string;\n routificOrderNumber: string;\n}\nexport interface TimelineEntry {\n sequence: number;\n type: \"start_location\" | \"delivering_stop\" | \"end_location\" | \"idling\";\n stopUuid: string;\n plannedArrivalTime?: string;\n plannedDepartureTime?: string;\n actualArrivalTime?: string;\n actualDepartureTime?: string;\n distanceFromPreviousStopInKilometers?: number;\n orders?: Order[];\n}\nexport interface RoutePayload {\n route: {\n uuid: string;\n name: string;\n date: string;\n status: string;\n workspaceId: number;\n workingTimeInSeconds: number;\n distanceInKilometers: number;\n ordersCount: number;\n driver: { uuid: string; name: string | null; email: string } | null;\n };\n timeline: TimelineEntry[];\n}\n\nexport interface RouteRow {\n uuid: string;\n payload: RoutePayload;\n received_at: string;\n}\n\n// ---- Helpers ----\nconst fmtTime = (iso?: string) =>\n iso ? new Date(iso).toLocaleTimeString([], { hour: \"numeric\", minute: \"2-digit\" }) : \"—\";\n\nconst fmtDuration = (secs: number) => {\n const h = Math.floor(secs / 3600);\n const m = Math.round((secs % 3600) / 60);\n return h ? `${h}h ${m}m` : `${m}m`;\n};\n\nconst statusBadge = (status: string) => {\n const colors: Record = {\n planned: \"bg-slate-100 text-slate-700\",\n published: \"bg-blue-100 text-blue-700\",\n executing: \"bg-amber-100 text-amber-700\",\n completed: \"bg-emerald-100 text-emerald-700\",\n };\n return html`${status}`;\n};\n\n// ---- Shared HTML shell ----\nfunction shell(title: string, body: unknown) {\n return html`\n \n \n \n \n ${title}\n \n \n \n \n \n

${body}

\n \n `;\n}\n\n// ---- Dashboard: all published routes ----\nexport function dashboardPage(rows: RouteRow[]) {\n const cards = rows.length\n ? rows.map((row) => {\n const r = row.payload.route;\n const stops = row.payload.timeline.filter((t) => t.type === \"delivering_stop\").length;\n return html`\n

${r.name}

${r.date}

\n ${statusBadge(r.status)}\n

\n \n ${(r.driver?.name ?? \"—\").slice(0, 1).toUpperCase()}\n \n ${r.driver?.name ?? \"Unassigned\"}\n

${stops}

stops

${r.ordersCount}

orders

${r.distanceInKilometers}

\n `;\n })\n : html`

📦

No routes yet

Publish a route in Routific and it'll appear here.

`;\n\n return shell(\n \"Warehouse — Load & Pick Sheets\",\n html`\n

Warehouse Ops

Load & Pick Sheets

\n Auto-generated the moment a dispatcher publishes a route in Routific.\n

${cards}

\n Powered by the route.published webhook · view source\n

\n `,\n );\n}\n\n// ---- Load & Pick sheet for one route (reverse-loading order) ----\nexport function loadSheetPage(row: RouteRow) {\n const r = row.payload.route;\n const stops = row.payload.timeline\n .filter((t) => t.type === \"delivering_stop\")\n .sort((a, b) => a.sequence - b.sequence);\n\n // Loading order = reverse of delivery order: last drop loaded first (front/bottom of van),\n // first drop loaded last (at the doors).\n const loadingOrder = [...stops].reverse();\n\n const rowsHtml = loadingOrder.map((stop, i) => {\n const orders = stop.orders ?? [];\n return html`\n \n \n \n \n

\n ${i + 1}\n

\n \n \n

Delivery stop #${stop.sequence}

ETA ${fmtTime(stop.plannedArrivalTime)}

\n \n \n ${orders.map(\n (o) => html`

\n ${o.customerOrderNumber}\n ${o.routificOrderNumber}\n

`,\n )}\n \n \n ${orders.length} item${orders.length === 1 ? \"\" : \"s\"}\n \n `;\n });\n\n return shell(\n `Load Sheet — ${r.name}`,\n html`\n

\n ← All routes\n

\n\n

${r.name}

\n ${statusBadge(r.status)}\n

${r.date}

\n \n ${(r.driver?.name ?? \"—\").slice(0, 1).toUpperCase()}\n \n ${r.driver?.name ?? \"Unassigned\"}\n ${r.driver?.email ?? \"\"}\n

${stops.length}

stops

${r.ordersCount}

orders

${fmtDuration(r.workingTimeInSeconds)}

est. time

\n \n 🖨️ Print\n \n

\n\n

\n Reverse-loading order. Load item #1 first (deepest in the van) and\n finish with the last row — so the first delivery is right at the doors. No digging at every stop.\n

\n\n

\n \n \n \n \n \n \n \n \n \n \n ${rowsHtml}\n

✓	Load #	Drop sequence	Order #	Items

\n\n

\n Generated from the route.published webhook · received ${row.received_at} ·\n view source\n

\n `,\n );\n}\n\nexport { raw };\n","label",[133],"d0d53eaf-20b1-433d-ac67-05c4c01b6930",["D",1781546629603],4,[28],"pulls","branches","forks","envVars",{"_155":139,"_157":61},"connections",{"_155":61,"_156":61},"count","unfilledCount","emptyCount",{"_43":144,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_137":25,"_38":164,"_13":146,"_33":34,"_35":37,"_24":25,"_142":-5,"_161":165,"_27":166},{"_43":132,"_32":133,"_30":134,"_135":-5,"_41":42,"_40":136,"_137":25,"_38":160,"_13":139,"_33":140,"_35":141,"_24":25,"_142":-5,"_161":162,"_27":163},["D",1781546059749],"children",[],[133],["D",1781546629603],[],[28],["D",1781545960614],["D",1789498239291],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_127":205,"_206":207,"_208":209,"_210":25,"_211":25,"_212":25,"_213":125,"_214":-5,"_215":-7,"_216":-7,"_217":61,"_218":25,"_219":25,"_220":-5,"_221":25,"_222":25,"_223":25,"_224":-5},"ENV",{"_176":177,"_178":179,"_180":88,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v7