[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_185":186,"_187":188},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_89":-7,"_90":91,"_29":-7,"_92":-5,"_15":93,"_94":95,"_96":97,"_98":99,"_100":101,"_102":-5,"_103":104,"_105":106,"_107":40,"_108":109,"_110":111,"_112":-5,"_113":-5,"_114":115},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","jowood94","name","notifyCompletion","project",{"_20":28,"_13":14,"_22":38,"_37":-5,"_39":40,"_41":42,"_43":42,"_44":-5,"_45":-5,"_46":47,"_48":-5,"_49":40,"_50":-5,"_51":-5,"_52":53,"_54":55,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":61,"_63":64,"_65":64,"_66":64,"_67":61,"_68":61,"_69":70,"_71":72,"_73":74,"_75":40},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":-5},"id","b2fd158a-399c-11f1-8224-42b51c65c3df","createdAt",["D",1776348060532],"updatedAt",["D",1776355622851],"main","projectId","b2f7a1c2-399c-11f1-8224-42b51c65c3df","version",44,"forkedBranchId","775d8550-399c-11f1-9019-42b51c65c3df","forkedBranchVersion",1,"lockfileKey","1776355635902-esm.town_v_jowood94_notifyCompletion@44-main","deletedAt",["D",1776348060532],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","imageUrl","userId","be2d4e89-1497-47a1-9051-1fee95fe0b49","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019d9692-976f-76db-bd3a-758011d08db5","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_88":84},"org",{"_11":12,"_82":-5,"_83":84,"_46":47,"_85":86,"_87":40},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":32,"_33":34,"_76":42,"_77":78,"_79":55,"_80":14,"_81":12},"isOwned","forkedProjectPrivacy","forkedProjectId","775cbc1a-399c-11f1-9019-42b51c65c3df","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://avatars.githubusercontent.com/u/34335418?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_20":28,"_13":14,"_22":181,"_37":-5,"_39":40,"_41":42,"_43":42,"_44":-5,"_45":-5,"_46":47,"_48":-5,"_49":40,"_50":-5,"_51":-5,"_52":53,"_54":55,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":61,"_63":64,"_65":64,"_66":64,"_67":61,"_68":61,"_69":182,"_71":183,"_73":184,"_75":40},"tree",[168,169,170],"files",[168,169,170],"counts",{"_158":53,"_17":34,"_159":53,"_160":161,"_162":163},"contents",[121,122,123],"file","upstreamProject",{"_20":78,"_13":119,"_44":-5,"_45":-5,"_41":42,"_69":120},"upstreamBranch",{"_20":32,"_22":116,"_24":117,"_13":26,"_27":78,"_29":34,"_31":-5,"_33":-5,"_35":118,"_37":-5,"_75":40,"_41":42,"_81":12,"_54":55,"_80":119},"emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},["D",1776347960549],["D",1776347960557],"1776348004832-esm.town_v_jowood94_untitled-8326@1-main","untitled-8326",{"_11":12,"_88":84},{"_20":151,"_13":152,"_126":153,"_128":-5,"_129":21,"_130":30,"_132":111,"_22":154,"_29":155,"_135":148,"_137":156,"_139":40,"_140":-5,"_90":157},{"_20":142,"_13":143,"_126":144,"_128":-5,"_129":21,"_130":145,"_132":111,"_22":146,"_29":147,"_135":148,"_137":149,"_139":40,"_140":-5,"_90":150},{"_20":124,"_13":125,"_126":127,"_128":-5,"_129":21,"_130":131,"_132":111,"_22":133,"_29":134,"_135":136,"_137":138,"_139":40,"_140":-5,"_90":141},"b81966e2-399f-11f1-903c-42b51c65c3df","scheduled.ts","fileId","9a450e50-399f-11f1-8c6c-42b51c65c3df","parentId","branchId","branchVersion",10,"latest",["D",1776349357617],3,"fileType","interval","content","// punto! — scheduled reminder delivery (val.town Cron trigger, every 1 min)\n//\n// Port del cron GitHub Actions (server/index.js) con granularità 1 min invece di 5.\n//\n// Deploy:\n// - Nuovo file nel Project \"notifyCompletion\" (o val separato)\n// - Trigger: Cron → \"* * * * *\" (ogni minuto)\n// - Env vars condivise col val HTTP: FIREBASE_PROJECT_ID, FIREBASE_SERVICE_ACCOUNT\n//\n// Funzioni:\n// 1. checkAndSendReminders() — query reminderStatus=pending, invia FCM,\n// gestisce ricorrenze e snooze, aggiorna reminderTime/reminderStatus e blocks[]\n// 2. checkAndSendCompletions() — cleanup di flag completionNotifyPending residui\n// (rete di sicurezza: il val HTTP è il path primario, questo pulisce i lost event)\n\nimport { SignJWT } from \"npm:jose@5\";\n\nconst FIREBASE_PROJECT_ID = Deno.env.get(\"FIREBASE_PROJECT_ID\")!;\nconst SERVICE_ACCOUNT = JSON.parse(Deno.env.get(\"FIREBASE_SERVICE_ACCOUNT\")!);\n\nlet cachedGcpToken: { token: string; exp: number } | null = null;\n\nconst NOTIF_STRINGS: Record string;\n bodyNoDate: string;\n}> = {\n it: {\n defaultTitle: \"punto! — Promemoria\",\n bodyWithDate: (d) => `Hai un promemoria per il ${d}`,\n bodyNoDate: \"Hai un promemoria in scadenza!\",\n },\n en: {\n defaultTitle: \"punto! — Reminder\",\n bodyWithDate: (d) => `You have a reminder for ${d}`,\n bodyNoDate: \"You have an upcoming reminder!\",\n },\n};\n\nconst COMPLETION_STRINGS: Record<\n string,\n { title: string; body: (name: string) => string }\n> = {\n it: {\n title: \"punto! — Promemoria evaso\",\n body: (name) => `${name} ha evaso un promemoria condiviso`,\n },\n en: {\n title: \"punto! — Reminder completed\",\n body: (name) => `${name} completed a shared reminder`,\n },\n};\n\n// ── GCP OAuth ───────────────────────────────────────────────────────────────\n\nasync function getGcpAccessToken(): Promise {\n const now = Math.floor(Date.now() / 1000);\n if (cachedGcpToken && cachedGcpToken.exp > now + 60) {\n return cachedGcpToken.token;\n }\n\n const pem = (SERVICE_ACCOUNT.private_key as string)\n .replace(/-----BEGIN PRIVATE KEY-----/g, \"\")\n .replace(/-----END PRIVATE KEY-----/g, \"\")\n .replace(/\\s+/g, \"\");\n const der = Uint8Array.from(atob(pem), (c) => c.charCodeAt(0));\n const key = await crypto.subtle.importKey(\n \"pkcs8\",\n der,\n { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n\n const jwt = await new SignJWT({\n scope:\n \"https://www.googleapis.com/auth/datastore https://www.googleapis.com/auth/firebase.messaging\",\n })\n .setProtectedHeader({ alg: \"RS256\", typ: \"JWT\" })\n .setIssuer(SERVICE_ACCOUNT.client_email)\n .setAudience(\"https://oauth2.googleapis.com/token\")\n .setIssuedAt(now)\n .setExpirationTime(now + 3600)\n .sign(key);\n\n const resp = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n grant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n assertion: jwt,\n }),\n });\n if (!resp.ok) {\n throw new Error(`GCP token exchange failed: ${await resp.text()}`);\n }\n const { access_token, expires_in } = await resp.json();\n cachedGcpToken = { token: access_token, exp: now + expires_in };\n return access_token;\n}\n\n// ── Firestore Value encoder/decoder ─────────────────────────────────────────\n\nfunction fsFromJs(v: any): any {\n if (v === null || v === undefined) return { nullValue: null };\n if (typeof v === \"boolean\") return { booleanValue: v };\n if (typeof v === \"number\") {\n return Number.isInteger(v)\n ? { integerValue: String(v) }\n : { doubleValue: v };\n }\n if (typeof v === \"string\") return { stringValue: v };\n if (Array.isArray(v)) return { arrayValue: { values: v.map(fsFromJs) } };\n if (typeof v === \"object\") {\n const fields: any = {};\n for (const [k, val] of Object.entries(v)) fields[k] = fsFromJs(val);\n return { mapValue: { fields } };\n }\n return { nullValue: null };\n}\n\nfunction fsToJs(v: any): any {\n if (!v) return null;\n if (\"stringValue\" in v) return v.stringValue;\n if (\"integerValue\" in v) return Number(v.integerValue);\n if (\"doubleValue\" in v) return v.doubleValue;\n if (\"booleanValue\" in v) return v.booleanValue;\n if (\"nullValue\" in v) return null;\n if (\"timestampValue\" in v) return new Date(v.timestampValue).getTime();\n if (\"arrayValue\" in v) return (v.arrayValue.values ?? []).map(fsToJs);\n if (\"mapValue\" in v) {\n const out: any = {};\n for (const [k, val] of Object.entries(v.mapValue.fields ?? {})) {\n out[k] = fsToJs(val);\n }\n return out;\n }\n return null;\n}\n\nfunction fsDocToObj(doc: any): any {\n const out: any = { _id: doc.name.split(\"/\").pop(), _path: doc.name };\n for (const [k, v] of Object.entries(doc.fields ?? {})) out[k] = fsToJs(v);\n return out;\n}\n\n// ── Firestore REST ──────────────────────────────────────────────────────────\n\nconst FS_BASE =\n `https://firestore.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents`;\n\nasync function fsGet(token: string, path: string): Promise {\n const resp = await fetch(`${FS_BASE}/${path}`, {\n headers: { Authorization: `Bearer ${token}` },\n });\n if (resp.status === 404) return null;\n if (!resp.ok) {\n throw new Error(`fsGet ${path}: ${resp.status} ${await resp.text()}`);\n }\n return fsDocToObj(await resp.json());\n}\n\ntype Filter =\n | { fieldFilter: { field: { fieldPath: string }; op: string; value: any } }\n | { compositeFilter: { op: \"AND\"; filters: Filter[] } };\n\nasync function fsRunQuery(\n token: string,\n parent: string | null, // path della collection padre, o null per root\n collectionId: string,\n allDescendants: boolean,\n filter: Filter | null,\n): Promise {\n const url = parent ? `${FS_BASE}/${parent}:runQuery` : `${FS_BASE}:runQuery`;\n const query: any = {\n structuredQuery: {\n from: [{ collectionId, allDescendants }],\n },\n };\n if (filter) query.structuredQuery.where = filter;\n const resp = await fetch(url, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(query),\n });\n if (!resp.ok) {\n throw new Error(\n `fsRunQuery ${collectionId}: ${resp.status} ${await resp.text()}`,\n );\n }\n const results = await resp.json();\n const docs: any[] = [];\n for (const r of results) {\n if (r.document) docs.push(fsDocToObj(r.document));\n }\n return docs;\n}\n\n// PATCH con updateMask — aggiorna solo i field elencati, altri preservati\nasync function fsPatch(\n token: string,\n path: string,\n fields: Record,\n deleteFields: string[] = [],\n): Promise {\n const maskFields = [...Object.keys(fields), ...deleteFields];\n const qs = maskFields.map((m) =>\n `updateMask.fieldPaths=${encodeURIComponent(m)}`\n ).join(\"&\");\n const body = { fields: {} as any };\n for (const [k, v] of Object.entries(fields)) body.fields[k] = fsFromJs(v);\n // deleteFields omessi dal body → cancellati dal doc per come funziona updateMask\n const resp = await fetch(`${FS_BASE}/${path}?${qs}`, {\n method: \"PATCH\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(body),\n });\n if (!resp.ok) {\n throw new Error(`fsPatch ${path}: ${resp.status} ${await resp.text()}`);\n }\n}\n\nasync function fsDelete(token: string, path: string): Promise {\n const resp = await fetch(`${FS_BASE}/${path}`, {\n method: \"DELETE\",\n headers: { Authorization: `Bearer ${token}` },\n });\n if (!resp.ok && resp.status !== 404) {\n throw new Error(`fsDelete ${path}: ${resp.status} ${await resp.text()}`);\n }\n}\n\n// arrayRemove via commit API con transforms\nasync function fsArrayRemove(\n token: string,\n path: string,\n field: string,\n values: string[],\n): Promise {\n if (values.length === 0) return;\n const body = {\n writes: [\n {\n transform: {\n document:\n `projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents/${path}`,\n fieldTransforms: [\n {\n fieldPath: field,\n removeAllFromArray: {\n values: values.map((v) => ({ stringValue: v })),\n },\n },\n ],\n },\n },\n ],\n };\n const resp = await fetch(\n `https://firestore.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents:commit`,\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(body),\n },\n );\n if (!resp.ok) {\n throw new Error(\n `fsArrayRemove ${path}.${field}: ${resp.status} ${await resp.text()}`,\n );\n }\n}\n\n// ── FCM ─────────────────────────────────────────────────────────────────────\n\ninterface FcmSendResult {\n ok: boolean;\n invalidToken: boolean;\n}\n\nasync function fcmSend(\n token: string,\n registrationToken: string,\n title: string,\n body: string,\n noteId: string,\n kind: \"reminder\" | \"completion\" = \"reminder\",\n): Promise {\n const url =\n `https://fcm.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/messages:send`;\n const message = {\n message: {\n token: registrationToken,\n webpush: {\n notification: {\n title,\n body,\n icon: \"/icons/icon-192x192.png\",\n tag: kind === \"completion\" ? `completion-${noteId}` : noteId,\n data: { noteId, kind },\n },\n data: { title, body, noteId, kind },\n },\n },\n };\n const resp = await fetch(url, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(message),\n });\n if (resp.ok) return { ok: true, invalidToken: false };\n const errText = await resp.text();\n const invalid = resp.status === 404 || resp.status === 400 ||\n errText.includes(\"UNREGISTERED\") || errText.includes(\"INVALID_ARGUMENT\");\n return { ok: false, invalidToken: invalid };\n}\n\n// ── Business logic ──────────────────────────────────────────────────────────\n\nfunction calculateNextReminder(\n currentTime: number,\n recurrence: string,\n): number {\n const d = new Date(currentTime);\n switch (recurrence) {\n case \"daily\":\n d.setDate(d.getDate() + 1);\n break;\n case \"weekly\":\n d.setDate(d.getDate() + 7);\n break;\n case \"monthly\":\n d.setMonth(d.getMonth() + 1);\n break;\n case \"yearly\":\n d.setFullYear(d.getFullYear() + 1);\n break;\n }\n return d.getTime();\n}\n\nconst PGP_MARKER = \"-----BEGIN PGP MESSAGE-----\";\nconst isEncrypted = (val: any) =>\n typeof val === \"string\" && val.startsWith(PGP_MARKER);\n\nasync function loadUser(\n token: string,\n cache: Record<\n string,\n { tokens: string[]; notifTitleEnabled: boolean; language: string }\n >,\n uid: string,\n): Promise {\n if (cache[uid]) return;\n const userData = await fsGet(token, `users/${uid}`);\n cache[uid] = {\n tokens: userData?.fcmTokens ?? [],\n notifTitleEnabled: userData?.notifTitleEnabled === true,\n language: userData?.language ?? \"it\",\n };\n}\n\nasync function checkAndSendReminders(\n gcpToken: string,\n): Promise<{ sent: number; processed: number }> {\n const now = Date.now();\n\n // Query reminderStatus == 'pending'\n const pendingNotes = await fsRunQuery(gcpToken, null, \"notes\", false, {\n fieldFilter: {\n field: { fieldPath: \"reminderStatus\" },\n op: \"EQUAL\",\n value: { stringValue: \"pending\" },\n },\n });\n\n if (pendingNotes.length === 0) return { sent: 0, processed: 0 };\n\n // Snoozes attivi via collectionGroup\n const snoozeMap = new Map>();\n try {\n const snoozes = await fsRunQuery(gcpToken, null, \"reminderSnoozes\", true, {\n fieldFilter: {\n field: { fieldPath: \"snoozedUntil\" },\n op: \"GREATER_THAN\",\n value: { integerValue: String(now) },\n },\n });\n for (const s of snoozes) {\n // _path: projects/.../documents/notes/{noteId}/reminderSnoozes/{uid}\n const parts = s._path.split(\"/\");\n const noteIdx = parts.indexOf(\"notes\");\n const noteId = parts[noteIdx + 1];\n const uid = s._id;\n if (!snoozeMap.has(noteId)) snoozeMap.set(noteId, new Set());\n snoozeMap.get(noteId)!.add(uid);\n }\n } catch (e) {\n console.warn(\n \"[snooze] collectionGroup query failed, proceeding senza filter:\",\n (e as Error).message,\n );\n }\n\n const tokensCache: Record<\n string,\n { tokens: string[]; notifTitleEnabled: boolean; language: string }\n > = {};\n let sentCount = 0;\n let processed = 0;\n\n for (const note of pendingNotes) {\n const reminderMs = typeof note.reminderTime === \"number\"\n ? note.reminderTime\n : Number(note.reminderTime);\n if (!reminderMs || reminderMs > now) continue;\n processed++;\n\n const noteId = note._id;\n const ownerUid = note.uid;\n const snoozedUids = snoozeMap.get(noteId) ?? new Set();\n\n await loadUser(gcpToken, tokensCache, ownerUid);\n\n // Collaborators con editReminders:true (filtro lato client, REST non gestisce facilmente nested map filter)\n const collabUidTokenPairs: {\n uid: string;\n token: string;\n language: string;\n notifTitleEnabled: boolean;\n }[] = [];\n try {\n const collaborators = await fsRunQuery(\n gcpToken,\n `notes/${noteId}`,\n \"collaborators\",\n false,\n null,\n );\n for (const collab of collaborators) {\n const perms = collab.permissions ?? {};\n if (perms.editReminders !== true) continue;\n const collabUid = collab._id;\n if (snoozedUids.has(collabUid)) continue;\n await loadUser(gcpToken, tokensCache, collabUid);\n for (const t of tokensCache[collabUid].tokens) {\n collabUidTokenPairs.push({\n uid: collabUid,\n token: t,\n language: tokensCache[collabUid].language,\n notifTitleEnabled: tokensCache[collabUid].notifTitleEnabled,\n });\n }\n }\n } catch (e) {\n console.error(\n `[note ${noteId}] collab fetch failed:`,\n (e as Error).message,\n );\n }\n\n // Owner tokens se non snoozato\n const ownerPairs = snoozedUids.has(ownerUid)\n ? []\n : tokensCache[ownerUid].tokens.map((t) => ({\n uid: ownerUid,\n token: t,\n language: tokensCache[ownerUid].language,\n notifTitleEnabled: tokensCache[ownerUid].notifTitleEnabled,\n }));\n\n const allPairs = [...ownerPairs, ...collabUidTokenPairs];\n\n if (allPairs.length > 0) {\n const reminderDate = new Date(reminderMs).toLocaleString(\"it-IT\", {\n day: \"2-digit\",\n month: \"2-digit\",\n year: \"numeric\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n timeZone: \"Europe/Rome\",\n });\n const rawTitle = note.title;\n\n // Invia un messaggio per destinatario (FCM v1 è 1:1, no multicast)\n const failedByUid: Record = {};\n const sends = allPairs.map(async (p) => {\n const strings = NOTIF_STRINGS[p.language] ?? NOTIF_STRINGS[\"it\"];\n const msgTitle =\n (p.notifTitleEnabled && rawTitle && !isEncrypted(rawTitle))\n ? rawTitle\n : strings.defaultTitle;\n const bodyText = strings.bodyWithDate(reminderDate);\n const result = await fcmSend(\n gcpToken,\n p.token,\n msgTitle,\n bodyText,\n noteId,\n \"reminder\",\n );\n if (!result.ok && result.invalidToken) {\n if (!failedByUid[p.uid]) failedByUid[p.uid] = [];\n failedByUid[p.uid].push(p.token);\n }\n return result.ok;\n });\n const results = await Promise.all(sends);\n if (results.some(Boolean)) sentCount++;\n\n // Cleanup token invalidi\n for (const [failUid, failTokens] of Object.entries(failedByUid)) {\n try {\n await fsArrayRemove(\n gcpToken,\n `users/${failUid}`,\n \"fcmTokens\",\n failTokens,\n );\n } catch (e) {\n console.error(\n `[cleanup] arrayRemove users/${failUid}:`,\n (e as Error).message,\n );\n }\n }\n }\n\n // Recurrence / sent transition\n const recurrence = note.recurrence ?? \"none\";\n const endDate = typeof note.recurrenceEndDate === \"number\"\n ? note.recurrenceEndDate\n : null;\n\n let updatedBlocks = note.blocks;\n if (Array.isArray(note.blocks)) {\n // Aggiorna reminder block se presente\n const nextTime = (recurrence !== \"none\")\n ? calculateNextReminder(reminderMs, recurrence)\n : null;\n const expired = nextTime !== null && endDate !== null &&\n nextTime > endDate;\n\n updatedBlocks = note.blocks.map((b: any) => {\n if (b.type !== \"reminder\") return b;\n if (recurrence === \"none\" || expired) return { ...b, status: \"sent\" };\n return { ...b, time: nextTime, status: \"pending\" };\n });\n }\n\n const patch: Record = { blocks: updatedBlocks };\n if (recurrence !== \"none\") {\n const nextTime = calculateNextReminder(reminderMs, recurrence);\n const expired = endDate !== null && nextTime > endDate;\n if (expired) {\n patch.reminderStatus = \"sent\";\n } else {\n patch.reminderStatus = \"pending\";\n patch.reminderTime = nextTime;\n }\n } else {\n patch.reminderStatus = \"sent\";\n }\n\n try {\n await fsPatch(gcpToken, `notes/${noteId}`, patch);\n } catch (e) {\n console.error(`[note ${noteId}] patch failed:`, (e as Error).message);\n }\n\n // Cleanup snoozes per questa istanza di reminder\n for (const snoozedUid of snoozedUids) {\n try {\n await fsDelete(\n gcpToken,\n `notes/${noteId}/reminderSnoozes/${snoozedUid}`,\n );\n } catch { /* best effort */ }\n }\n }\n\n return { sent: sentCount, processed };\n}\n\nasync function checkAndSendCompletions(\n gcpToken: string,\n): Promise<{ sent: number }> {\n const pending = await fsRunQuery(gcpToken, null, \"notes\", false, {\n fieldFilter: {\n field: { fieldPath: \"completionNotifyPending\" },\n op: \"EQUAL\",\n value: { booleanValue: true },\n },\n });\n\n if (pending.length === 0) return { sent: 0 };\n\n const userCache: Record = {};\n let sent = 0;\n\n for (const note of pending) {\n const noteId = note._id;\n const byUid: string = note.completionNotifyBy;\n const byName: string = note.completionNotifyByName || \"A collaborator\";\n const ownerUid: string = note.uid;\n const recipients = new Set([\n ownerUid,\n ...((note.collaboratorUids ?? []) as string[]),\n ]);\n recipients.delete(byUid);\n\n const sends: Promise[] = [];\n for (const uid of recipients) {\n if (!userCache[uid]) {\n const u = await fsGet(gcpToken, `users/${uid}`);\n userCache[uid] = {\n tokens: u?.fcmTokens ?? [],\n language: u?.language ?? \"it\",\n };\n }\n const strings = COMPLETION_STRINGS[userCache[uid].language] ??\n COMPLETION_STRINGS[\"it\"];\n for (const t of userCache[uid].tokens) {\n sends.push(\n fcmSend(\n gcpToken,\n t,\n strings.title,\n strings.body(byName),\n noteId,\n \"completion\",\n ),\n );\n }\n }\n await Promise.all(sends);\n if (sends.length > 0) sent++;\n\n // Reset flag\n try {\n await fsPatch(gcpToken, `notes/${noteId}`, {\n completionNotifyPending: false,\n }, [\n \"completionNotifyBy\",\n \"completionNotifyByName\",\n \"completionNotifyAt\",\n ]);\n } catch (e) {\n console.error(\n `[completion ${noteId}] reset failed:`,\n (e as Error).message,\n );\n }\n }\n\n return { sent };\n}\n\n// ── Scheduled entry point ──────────────────────────────────────────────────\n\nexport default async function () {\n const t0 = Date.now();\n console.log(`[${new Date().toISOString()}] scheduledReminders run`);\n try {\n const gcpToken = await getGcpAccessToken();\n const [rem, comp] = await Promise.all([\n checkAndSendReminders(gcpToken).catch((e) => {\n console.error(\"checkAndSendReminders error:\", e);\n return { sent: 0, processed: 0 };\n }),\n checkAndSendCompletions(gcpToken).catch((e) => {\n console.error(\"checkAndSendCompletions error:\", e);\n return { sent: 0 };\n }),\n ]);\n console.log(\n `done in ${\n Date.now() - t0\n }ms — reminders sent=${rem.sent} processed=${rem.processed}, ` +\n `completions sent=${comp.sent}`,\n );\n } catch (e) {\n console.error(\"scheduledReminders fatal:\", e);\n throw e;\n }\n}","deleted","label",[125],"c31e7822-399d-11f1-ac39-42b51c65c3df","main.ts","019d9698-5bb5-765b-aa25-4e05f1f46d61",6,["D",1776348517122],5,"http","// punto! — real-time completion notification proxy\n// Deploy as HTTP val on val.town. Requires env vars:\n// - FIREBASE_PROJECT_ID es. \"punto-staging\" o \"punto-84646\"\n// - FIREBASE_SERVICE_ACCOUNT JSON completo della service account (stesso usato dal cron)\n//\n// Endpoint: POST /\n// Auth: Authorization: Bearer \n// Body: { noteId: string }\n//\n// Contract con client:\n// 1. Client scrive sul doc nota: completionNotifyPending=true + By/ByName/At\n// 2. Client chiama questo val (fire-and-forget)\n// 3. Val legge la nota, valida che l'utente autenticato == completionNotifyBy,\n// invia FCM ai destinatari, resetta i flag\n// 4. Fallback: se il val fallisce, il cron GHA (ogni 5min) pulisce l'arretrato\n\nimport { createRemoteJWKSet, jwtVerify, SignJWT } from \"npm:jose@5\";\n\nconst COMPLETION_STRINGS: Record<\n string,\n { title: string; body: (name: string) => string }\n> = {\n it: {\n title: \"punto! — Promemoria evaso\",\n body: (name) => `${name} ha evaso un promemoria condiviso`,\n },\n en: {\n title: \"punto! — Reminder completed\",\n body: (name) => `${name} completed a shared reminder`,\n },\n};\n\nlet cachedGcpToken: { token: string; exp: number } | null = null;\nconst FIREBASE_PROJECT_ID = Deno.env.get(\"FIREBASE_PROJECT_ID\")!;\nconst SERVICE_ACCOUNT = JSON.parse(Deno.env.get(\"FIREBASE_SERVICE_ACCOUNT\")!);\n\nconst firebaseJwks = createRemoteJWKSet(\n new URL(\n \"https://www.googleapis.com/robot/v1/metadata/x509/securetoken@system.gserviceaccount.com\",\n ),\n { cacheMaxAge: 60 * 60 * 1000 },\n);\n\nasync function verifyFirebaseIdToken(idToken: string): Promise {\n // Firebase usa cert pubblici in formato X509 sull'endpoint sopra. jose JWKS parser\n // non gestisce X509 direttamente → usiamo l'endpoint JWKS-compatibile alternativo:\n const jwksUrl = new URL(\n \"https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com\",\n );\n const jwks = createRemoteJWKSet(jwksUrl, { cacheMaxAge: 60 * 60 * 1000 });\n const { payload } = await jwtVerify(idToken, jwks, {\n issuer: `https://securetoken.google.com/${FIREBASE_PROJECT_ID}`,\n audience: FIREBASE_PROJECT_ID,\n });\n if (!payload.sub) throw new Error(\"ID token without sub\");\n return payload.sub as string;\n}\n\nasync function getGcpAccessToken(): Promise {\n const now = Math.floor(Date.now() / 1000);\n if (cachedGcpToken && cachedGcpToken.exp > now + 60) {\n return cachedGcpToken.token;\n }\n\n // Import PEM private key → CryptoKey\n const pem = (SERVICE_ACCOUNT.private_key as string)\n .replace(/-----BEGIN PRIVATE KEY-----/g, \"\")\n .replace(/-----END PRIVATE KEY-----/g, \"\")\n .replace(/\\s+/g, \"\");\n const der = Uint8Array.from(atob(pem), (c) => c.charCodeAt(0));\n const key = await crypto.subtle.importKey(\n \"pkcs8\",\n der,\n { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n\n const jwt = await new SignJWT({\n scope:\n \"https://www.googleapis.com/auth/datastore https://www.googleapis.com/auth/firebase.messaging\",\n })\n .setProtectedHeader({ alg: \"RS256\", typ: \"JWT\" })\n .setIssuer(SERVICE_ACCOUNT.client_email)\n .setAudience(\"https://oauth2.googleapis.com/token\")\n .setIssuedAt(now)\n .setExpirationTime(now + 3600)\n .sign(key);\n\n const resp = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n grant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n assertion: jwt,\n }),\n });\n if (!resp.ok) {\n throw new Error(`GCP token exchange failed: ${await resp.text()}`);\n }\n const { access_token, expires_in } = await resp.json();\n cachedGcpToken = { token: access_token, exp: now + expires_in };\n return access_token;\n}\n\ntype FirestoreValue = any;\n\nfunction firestoreToJs(v: FirestoreValue): any {\n if (!v) return null;\n if (\"stringValue\" in v) return v.stringValue;\n if (\"integerValue\" in v) return Number(v.integerValue);\n if (\"doubleValue\" in v) return v.doubleValue;\n if (\"booleanValue\" in v) return v.booleanValue;\n if (\"arrayValue\" in v) return (v.arrayValue.values ?? []).map(firestoreToJs);\n if (\"mapValue\" in v) {\n const out: any = {};\n for (const [k, val] of Object.entries(v.mapValue.fields ?? {})) {\n out[k] = firestoreToJs(val);\n }\n return out;\n }\n if (\"nullValue\" in v) return null;\n if (\"timestampValue\" in v) return new Date(v.timestampValue).getTime();\n return null;\n}\n\nasync function firestoreGet(token: string, path: string): Promise {\n const url =\n `https://firestore.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents/${path}`;\n const resp = await fetch(url, {\n headers: { Authorization: `Bearer ${token}` },\n });\n if (resp.status === 404) return null;\n if (!resp.ok) {\n throw new Error(\n `firestoreGet ${path}: ${resp.status} ${await resp.text()}`,\n );\n }\n const doc = await resp.json();\n const out: any = {};\n for (const [k, v] of Object.entries(doc.fields ?? {})) {\n out[k] = firestoreToJs(v);\n }\n return out;\n}\n\nasync function firestoreResetCompletion(\n token: string,\n noteId: string,\n): Promise {\n // PATCH con updateMask che include i 4 campi → quelli omessi dal body vengono cancellati.\n const mask = [\n \"completionNotifyPending\",\n \"completionNotifyBy\",\n \"completionNotifyByName\",\n \"completionNotifyAt\",\n ];\n const qs = mask.map((m) => `updateMask.fieldPaths=${encodeURIComponent(m)}`)\n .join(\"&\");\n const url =\n `https://firestore.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents/notes/${noteId}?${qs}`;\n const body = {\n fields: {\n completionNotifyPending: { booleanValue: false },\n },\n };\n const resp = await fetch(url, {\n method: \"PATCH\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(body),\n });\n if (!resp.ok) {\n throw new Error(\n `firestoreResetCompletion: ${resp.status} ${await resp.text()}`,\n );\n }\n}\n\nasync function fcmSend(\n token: string,\n registrationToken: string,\n title: string,\n body: string,\n noteId: string,\n): Promise {\n const url =\n `https://fcm.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/messages:send`;\n const message = {\n message: {\n token: registrationToken,\n webpush: {\n notification: {\n title,\n body,\n icon: \"/icons/icon-192x192.png\",\n tag: `completion-${noteId}`,\n },\n data: { title, body, noteId, kind: \"completion\" },\n },\n },\n };\n const resp = await fetch(url, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(message),\n });\n return resp.ok;\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"method not allowed\", { status: 405 });\n }\n\n const auth = req.headers.get(\"authorization\") ?? \"\";\n if (!auth.startsWith(\"Bearer \")) {\n return new Response(\"missing token\", { status: 401 });\n }\n const idToken = auth.slice(7);\n\n let callerUid: string;\n try {\n callerUid = await verifyFirebaseIdToken(idToken);\n } catch (e) {\n return new Response(`invalid token: ${(e as Error).message}`, {\n status: 401,\n });\n }\n\n let noteId: string;\n try {\n const body = await req.json();\n noteId = body.noteId;\n if (!noteId || typeof noteId !== \"string\") {\n throw new Error(\"noteId required\");\n }\n } catch {\n return new Response(\"invalid body\", { status: 400 });\n }\n\n const gcpToken = await getGcpAccessToken();\n const note = await firestoreGet(gcpToken, `notes/${noteId}`);\n if (!note) return new Response(\"note not found\", { status: 404 });\n\n if (!note.completionNotifyPending) {\n return Response.json({ ok: true, noop: true, reason: \"no pending flag\" });\n }\n if (note.completionNotifyBy !== callerUid) {\n return new Response(\"caller not the completer\", { status: 403 });\n }\n\n const ownerUid: string = note.uid;\n const collabUids: string[] = note.collaboratorUids ?? [];\n const recipients = new Set([ownerUid, ...collabUids]);\n recipients.delete(callerUid);\n\n const byName: string = note.completionNotifyByName || \"A collaborator\";\n\n if (recipients.size === 0) {\n await firestoreResetCompletion(gcpToken, noteId);\n return Response.json({ ok: true, sent: 0, reason: \"no recipients\" });\n }\n\n const userDocs = await Promise.all(\n [...recipients].map(async (uid) => ({\n uid,\n data: await firestoreGet(gcpToken, `users/${uid}`),\n })),\n );\n\n const sends: Promise[] = [];\n for (const { data } of userDocs) {\n if (!data) continue;\n const tokens: string[] = data.fcmTokens ?? [];\n const lang = (data.language && data.language in COMPLETION_STRINGS\n ? data.language\n : \"it\") as \"it\" | \"en\";\n const strings = COMPLETION_STRINGS[lang];\n for (const t of tokens) {\n sends.push(\n fcmSend(gcpToken, t, strings.title, strings.body(byName), noteId),\n );\n }\n }\n\n const results = await Promise.all(sends);\n const sent = results.filter(Boolean).length;\n\n await firestoreResetCompletion(gcpToken, noteId);\n\n return Response.json({ ok: true, sent, total: sends.length });\n}",[143],"4e791728-39ae-11f1-9f3f-42b51c65c3df","icalFeed.ts","11af7472-39a9-11f1-9b9f-42b51c65c3df",["D",1776355622851],33,"// punto! — iCal subscription feed (val.town HTTP trigger)\n//\n// Permette di sottoscrivere i reminder di punto! in Apple Calendar / Google Calendar\n// come feed .ics in sola lettura. Il feed si auto-aggiorna (le app calendar\n// rifetchano ogni 5-60 min a seconda del client).\n//\n// Deploy:\n// - HTTP val su val.town (stesso Project di notifyCompletion)\n// - Env vars condivise: FIREBASE_PROJECT_ID, FIREBASE_SERVICE_ACCOUNT\n//\n// Endpoint: GET /?t=\n// Auth: il token in URL È la credenziale. Va generato dal client con crypto-random\n// e salvato su users/{uid}.calendarFeedToken. Revocare = cambiare/cancellare\n// quel campo → il feed si disattiva (404).\n// Response: text/calendar; charset=utf-8 (VCALENDAR con VEVENT + RRULE + VALARM)\n//\n// Privacy: se title/content sono cifrati PGP (prefisso \"-----BEGIN PGP MESSAGE-----\")\n// il val NON può decifrarli → SUMMARY fallback a \"punto! reminder\".\n\nimport { SignJWT } from \"npm:jose@5\";\n\nconst FIREBASE_PROJECT_ID = Deno.env.get(\"FIREBASE_PROJECT_ID\")!;\nconst SERVICE_ACCOUNT = JSON.parse(Deno.env.get(\"FIREBASE_SERVICE_ACCOUNT\")!);\n\nlet cachedGcpToken: { token: string; exp: number } | null = null;\nlet cachedTokenScope: string | null = null;\nconst ICAL_SCOPE = \"https://www.googleapis.com/auth/datastore\";\n\nasync function getGcpAccessToken(): Promise {\n const now = Math.floor(Date.now() / 1000);\n // Invalida cache se scope diverso (possibile se il val condivide state con altri val del Project)\n if (cachedGcpToken && cachedGcpToken.exp > now + 60 && cachedTokenScope === ICAL_SCOPE) {\n return cachedGcpToken.token;\n }\n\n const pem = (SERVICE_ACCOUNT.private_key as string)\n .replace(/-----BEGIN PRIVATE KEY-----/g, \"\")\n .replace(/-----END PRIVATE KEY-----/g, \"\")\n .replace(/\\s+/g, \"\");\n const der = Uint8Array.from(atob(pem), (c) => c.charCodeAt(0));\n const key = await crypto.subtle.importKey(\n \"pkcs8\",\n der,\n { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n\n const jwt = await new SignJWT({\n scope: ICAL_SCOPE,\n })\n .setProtectedHeader({ alg: \"RS256\", typ: \"JWT\" })\n .setIssuer(SERVICE_ACCOUNT.client_email)\n .setAudience(\"https://oauth2.googleapis.com/token\")\n .setIssuedAt(now)\n .setExpirationTime(now + 3600)\n .sign(key);\n\n const resp = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n grant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n assertion: jwt,\n }),\n });\n if (!resp.ok) throw new Error(`GCP token exchange failed: ${await resp.text()}`);\n const { access_token, expires_in } = await resp.json();\n cachedGcpToken = { token: access_token, exp: now + expires_in };\n cachedTokenScope = ICAL_SCOPE;\n return access_token;\n}\n\ntype FirestoreValue = any;\n\nfunction fsToJs(v: FirestoreValue): any {\n if (!v) return null;\n if (\"stringValue\" in v) return v.stringValue;\n if (\"integerValue\" in v) return Number(v.integerValue);\n if (\"doubleValue\" in v) return v.doubleValue;\n if (\"booleanValue\" in v) return v.booleanValue;\n if (\"arrayValue\" in v) return (v.arrayValue.values ?? []).map(fsToJs);\n if (\"mapValue\" in v) {\n const out: any = {};\n for (const [k, val] of Object.entries(v.mapValue.fields ?? {})) out[k] = fsToJs(val);\n return out;\n }\n if (\"nullValue\" in v) return null;\n if (\"timestampValue\" in v) return new Date(v.timestampValue).getTime();\n return null;\n}\n\nasync function fsGet(token: string, path: string): Promise {\n const url = `https://firestore.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents/${path}`;\n const resp = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });\n if (resp.status === 404) return null;\n if (!resp.ok) throw new Error(`fsGet ${path}: ${resp.status} ${await resp.text()}`);\n const doc = await resp.json();\n const out: any = {};\n for (const [k, v] of Object.entries(doc.fields ?? {})) out[k] = fsToJs(v);\n return out;\n}\n\nasync function loadFeedIndex(\n gcp: string,\n token: string,\n): Promise<{ uid: string; noteIds: string[] } | null> {\n // Schema: calendarFeeds/{token} = { uid, noteIds: string[], updatedAt }\n // Lookup diretto via doc id → solo fsGet (il service account ha `get` ma non\n // sempre `list/runQuery` → questo schema evita IAM list permission).\n const feed = await fsGet(gcp, `calendarFeeds/${encodeURIComponent(token)}`);\n if (!feed || typeof feed.uid !== \"string\") return null;\n const noteIds = Array.isArray(feed.noteIds) ? feed.noteIds.filter((x: any) => typeof x === \"string\") : [];\n return { uid: feed.uid, noteIds };\n}\n\nasync function fetchNotesByIds(gcp: string, noteIds: string[]): Promise {\n const docs = await Promise.all(\n noteIds.map((id) => fsGet(gcp, `notes/${id}`).then((n) => (n ? { ...n, _id: id } : null))),\n );\n return docs.filter((x): x is any => x !== null);\n}\n\nfunction isPgpEncrypted(s: unknown): boolean {\n return typeof s === \"string\" && s.includes(\"-----BEGIN PGP MESSAGE-----\");\n}\n\nfunction icsEscape(s: string): string {\n return s\n .replace(/\\\\/g, \"\\\\\\\\\")\n .replace(/\\n/g, \"\\\\n\")\n .replace(/,/g, \"\\\\,\")\n .replace(/;/g, \"\\\\;\");\n}\n\nfunction icsFold(line: string): string {\n // RFC 5545: linee >75 ottetti vanno foldate (CRLF + spazio)\n if (line.length <= 75) return line;\n const out: string[] = [];\n let i = 0;\n while (i < line.length) {\n const chunk = line.slice(i, i + 75);\n out.push(i === 0 ? chunk : \" \" + chunk);\n i += 75;\n }\n return out.join(\"\\r\\n\");\n}\n\nfunction icsDate(tsMs: number): string {\n // UTC: YYYYMMDDTHHMMSSZ\n const d = new Date(tsMs);\n const pad = (n: number) => n.toString().padStart(2, \"0\");\n return (\n d.getUTCFullYear().toString() +\n pad(d.getUTCMonth() + 1) +\n pad(d.getUTCDate()) +\n \"T\" +\n pad(d.getUTCHours()) +\n pad(d.getUTCMinutes()) +\n pad(d.getUTCSeconds()) +\n \"Z\"\n );\n}\n\nfunction rrule(recurrence: string | null): string | null {\n switch (recurrence) {\n case \"daily\": return \"FREQ=DAILY\";\n case \"weekly\": return \"FREQ=WEEKLY\";\n case \"monthly\": return \"FREQ=MONTHLY\";\n default: return null;\n }\n}\n\nfunction buildVCalendar(uid: string, notes: any[]): string {\n const now = Date.now();\n const cutoffMs = 30 * 24 * 3600 * 1000;\n const lines: string[] = [];\n lines.push(\"BEGIN:VCALENDAR\");\n lines.push(\"VERSION:2.0\");\n lines.push(\"PRODID:-//punto!//Reminder Feed//EN\");\n lines.push(\"CALSCALE:GREGORIAN\");\n lines.push(\"METHOD:PUBLISH\");\n lines.push(\"X-WR-CALNAME:punto! — Promemoria\");\n lines.push(\"X-WR-TIMEZONE:Europe/Rome\");\n lines.push(\"NAME:punto! — Promemoria\");\n\n for (const n of notes) {\n const t: number | null = typeof n.reminderTime === \"number\" ? n.reminderTime : null;\n if (!t) continue;\n // Escludi reminder molto vecchi (solo se non ricorrenti)\n const rec = rrule(n.reminderRecurrence ?? null);\n if (!rec && t < now - cutoffMs) continue;\n\n const summary = isPgpEncrypted(n.title) || !n.title\n ? \"punto! reminder\"\n : String(n.title).slice(0, 200);\n\n const descParts: string[] = [];\n if (n.address && typeof n.address === \"string\") descParts.push(n.address);\n if (n.content && !isPgpEncrypted(n.content)) {\n const plain = String(n.content).replace(/<[^>]+>/g, \"\").slice(0, 500);\n if (plain.trim()) descParts.push(plain);\n }\n const description = descParts.join(\"\\n\");\n\n const dtstamp = icsDate(typeof n.updatedAt === \"number\" ? n.updatedAt : now);\n const dtstart = icsDate(t);\n const dtend = icsDate(t + 30 * 60 * 1000);\n\n lines.push(\"BEGIN:VEVENT\");\n lines.push(icsFold(`UID:${n._id}@punto-${FIREBASE_PROJECT_ID}`));\n lines.push(`DTSTAMP:${dtstamp}`);\n lines.push(`DTSTART:${dtstart}`);\n lines.push(`DTEND:${dtend}`);\n lines.push(icsFold(`SUMMARY:${icsEscape(summary)}`));\n if (description) lines.push(icsFold(`DESCRIPTION:${icsEscape(description)}`));\n if (typeof n.lat === \"number\" && typeof n.lon === \"number\") {\n lines.push(`GEO:${n.lat};${n.lon}`);\n if (n.address) lines.push(icsFold(`LOCATION:${icsEscape(String(n.address))}`));\n }\n if (rec) lines.push(`RRULE:${rec}`);\n lines.push(\"BEGIN:VALARM\");\n lines.push(\"ACTION:DISPLAY\");\n lines.push(\"DESCRIPTION:punto!\");\n lines.push(\"TRIGGER:PT0M\");\n lines.push(\"END:VALARM\");\n lines.push(\"END:VEVENT\");\n }\n\n lines.push(\"END:VCALENDAR\");\n return lines.join(\"\\r\\n\") + \"\\r\\n\";\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"GET\" && req.method !== \"HEAD\") {\n return new Response(\"method not allowed\", { status: 405 });\n }\n\n const url = new URL(req.url);\n const token = url.searchParams.get(\"t\") ?? \"\";\n const debugPath = url.searchParams.get(\"debug\") ?? \"\";\n if (!token || token.length < 16 || token.length > 128) {\n return new Response(\"invalid token\", { status: 400 });\n }\n\n try {\n const gcp = await getGcpAccessToken();\n\n // DEBUG: ?debug=notes/abc → prova fsGet su path arbitrario\n // DEBUG: ?debug=env → stampa diagnostica env vars (oscurata)\n if (debugPath === \"env\") {\n const rawSa = Deno.env.get(\"FIREBASE_SERVICE_ACCOUNT\") ?? \"\";\n const saKeys = SERVICE_ACCOUNT && typeof SERVICE_ACCOUNT === \"object\"\n ? Object.keys(SERVICE_ACCOUNT)\n : [];\n const ce: string = typeof SERVICE_ACCOUNT?.client_email === \"string\" ? SERVICE_ACCOUNT.client_email : \"\";\n const pk: string = typeof SERVICE_ACCOUNT?.private_key === \"string\" ? SERVICE_ACCOUNT.private_key : \"\";\n return Response.json({\n FIREBASE_PROJECT_ID: FIREBASE_PROJECT_ID ?? null,\n rawEnvLength: rawSa.length,\n rawStartsWith: rawSa.slice(0, 20),\n rawEndsWith: rawSa.slice(-20),\n saKeys,\n serviceAccountType: SERVICE_ACCOUNT?.type ?? null,\n serviceAccountProjectId: SERVICE_ACCOUNT?.project_id ?? null,\n clientEmailLength: ce.length,\n clientEmailDomain: ce.includes(\"@\") ? ce.split(\"@\")[1] : null,\n privateKeyLength: pk.length,\n privateKeyStartsWith: pk.slice(0, 30),\n tokenPrefix: gcp.slice(0, 16),\n });\n }\n if (debugPath) {\n try {\n const doc = await fsGet(gcp, debugPath);\n return Response.json({ debug: debugPath, found: doc !== null, doc });\n } catch (e) {\n return Response.json({ debug: debugPath, error: (e as Error).message }, { status: 200 });\n }\n }\n\n const index = await loadFeedIndex(gcp, token);\n if (!index) return new Response(\"feed not found\", { status: 404 });\n\n const notes = index.noteIds.length === 0 ? [] : await fetchNotesByIds(gcp, index.noteIds);\n // Filtro server-side: la nota deve appartenere all'uid del feed (anti-tamper).\n const owned = notes.filter(\n (n) => n.uid === index.uid || (Array.isArray(n.collaboratorUids) && n.collaboratorUids.includes(index.uid)),\n );\n const ics = buildVCalendar(index.uid, owned);\n\n return new Response(ics, {\n status: 200,\n headers: {\n \"Content-Type\": \"text/calendar; charset=utf-8\",\n \"Cache-Control\": \"public, max-age=300\",\n \"Content-Disposition\": 'inline; filename=\"punto-reminders.ics\"',\n },\n });\n } catch (e) {\n return new Response(`internal error: ${(e as Error).message}`, { status: 500 });\n }\n}",[152],"pulls","forks","envVars",{"_164":166,"_167":53},"connections",{"_164":53,"_165":53},"count","unfilledCount",2,"emptyCount",{"_20":151,"_13":152,"_126":153,"_128":-5,"_129":21,"_130":30,"_132":111,"_22":178,"_29":155,"_135":148,"_137":156,"_139":40,"_140":-5,"_172":179,"_90":180},{"_20":142,"_13":143,"_126":144,"_128":-5,"_129":21,"_130":145,"_132":111,"_22":175,"_29":147,"_135":148,"_137":149,"_139":40,"_140":-5,"_172":176,"_90":177},{"_20":124,"_13":125,"_126":127,"_128":-5,"_129":21,"_130":131,"_132":111,"_22":171,"_29":134,"_135":136,"_137":138,"_139":40,"_140":-5,"_172":173,"_90":174},["D",1776349357617],"children",[],[125],["D",1776348517122],[],[143],["D",1776355622851],[],[152],["D",1776348060532],{"_11":12,"_88":84},{"_11":12,"_82":-5,"_83":84,"_46":47,"_85":86,"_87":40},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":32,"_33":34,"_76":42,"_77":78,"_79":55,"_80":14,"_81":12},"ctx",{"_69":-5,"_113":218,"_219":220,"_221":222,"_223":40,"_224":40,"_225":40,"_226":111,"_227":-5,"_228":-7,"_229":-7,"_230":53,"_231":40,"_232":40,"_233":-5,"_234":40,"_235":40,"_236":40,"_237":-5},"ENV",{"_189":190,"_191":192,"_193":26,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1