[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_150":151,"_152":153},"routes/_app.x.$handle.$name",{"_93":92,"_31":43,"_101":83,"_26":51,"_13":14,"_102":-5,"_11":103,"_104":105,"_106":107,"_108":109,"_110":111,"_20":-5,"_112":-5,"_113":-5,"_114":24,"_115":116,"_117":118,"_119":-5,"_120":-5,"_121":122},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":76,"_77":78,"_79":80,"_81":24},"version",1,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","index.http.tsx","latestPath","fileId","59ffd488-f3bd-11f0-b0e5-42dde27851f2","name","fileType","http","content","const SLACK_SIGNING_SECRET = Deno.env.get(\"SLACK_SIGNING_SECRET\") ?? \"\";\nconst SLACK_BOT_TOKEN = Deno.env.get(\"SLACK_BOT_TOKEN\") ?? \"\";\nconst FREEPIK_API_KEY = Deno.env.get(\"FREEPIK_API_KEY\") ?? \"\";\nconst FREEPIK_WEBHOOK_SECRET = Deno.env.get(\"FREEPIK_WEBHOOK_SECRET\") ?? \"\";\nconst SLACK_ALLOWED_CHANNELS = (Deno.env.get(\"SLACK_ALLOWED_CHANNELS\") ?? \"\")\n .split(\",\")\n .map((value) => value.trim())\n .filter(Boolean);\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return new Response(\"ok\", { status: 200 });\n }\n\n if (url.pathname === \"/slack/events\" && req.method === \"POST\") {\n return await handleSlackEvents(req);\n }\n\n if (url.pathname === \"/freepik/webhook\" && req.method === \"POST\") {\n return await handleFreepikWebhook(req);\n }\n\n return new Response(\"not found\", { status: 404 });\n}\n\nasync function handleSlackEvents(req: Request): Promise {\n if (!SLACK_SIGNING_SECRET || !SLACK_BOT_TOKEN || !FREEPIK_API_KEY) {\n return new Response(\"Missing required secrets\", { status: 500 });\n }\n\n const rawBody = await req.text();\n const isValid = await verifySlackSignature(req, rawBody);\n if (!isValid) {\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n // Avoid duplicate processing on Slack retries\n if (req.headers.get(\"x-slack-retry-num\")) {\n return new Response(\"Retry ignored\", { status: 200 });\n }\n\n const payload = safeJsonParse(rawBody);\n if (!payload) {\n return new Response(\"Invalid JSON\", { status: 400 });\n }\n\n if (payload.type === \"url_verification\") {\n return Response.json({ challenge: payload.challenge });\n }\n\n if (payload.type !== \"event_callback\") {\n return new Response(\"ok\", { status: 200 });\n }\n\n const event = payload.event ?? {};\n if (event.type !== \"message\") {\n return new Response(\"ok\", { status: 200 });\n }\n\n if (event.subtype || event.bot_id) {\n return new Response(\"ok\", { status: 200 });\n }\n\n const channel = event.channel as string | undefined;\n const threadTs = (event.thread_ts ?? event.ts) as string | undefined;\n\n if (!channel || !threadTs) {\n return new Response(\"ok\", { status: 200 });\n }\n\n if (SLACK_ALLOWED_CHANNELS.length > 0 && !SLACK_ALLOWED_CHANNELS.includes(channel)) {\n return new Response(\"ok\", { status: 200 });\n }\n\n const files = Array.isArray(event.files) ? event.files : [];\n const imageFile = files.find((file: Record) => {\n const mimetype = String(file.mimetype ?? \"\");\n const filetype = String(file.filetype ?? \"\");\n return mimetype.startsWith(\"image/\") || filetype.startsWith(\"image\");\n });\n\n if (!imageFile) {\n return new Response(\"ok\", { status: 200 });\n }\n\n const origin = new URL(req.url).origin;\n\n queueMicrotask(() => {\n processImageFile({\n file: imageFile as SlackFile,\n channel,\n threadTs,\n origin,\n }).catch((error) => {\n console.error(\"Processing failed\", error);\n });\n });\n\n return new Response(\"ok\", { status: 200 });\n}\n\nasync function handleFreepikWebhook(req: Request): Promise {\n const url = new URL(req.url);\n const token = url.searchParams.get(\"token\") ?? \"\";\n if (FREEPIK_WEBHOOK_SECRET && token !== FREEPIK_WEBHOOK_SECRET) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n\n const payload = await req.json().catch(() => null);\n if (!payload) {\n return new Response(\"Invalid JSON\", { status: 400 });\n }\n\n const data = payload.data ?? payload;\n const status = data.status as string | undefined;\n const generated = data.generated as string[] | undefined;\n\n if (status !== \"COMPLETED\" || !generated || generated.length === 0) {\n if (status === \"FAILED\") {\n await postSlackMessage({\n channel: url.searchParams.get(\"channel\") ?? \"\",\n threadTs: url.searchParams.get(\"thread_ts\") ?? undefined,\n text: \"Skin enhancer failed to process the image.\",\n });\n }\n return new Response(\"ok\", { status: 200 });\n }\n\n const channel = url.searchParams.get(\"channel\") ?? \"\";\n const threadTs = url.searchParams.get(\"thread_ts\") ?? undefined;\n if (!channel) {\n return new Response(\"Missing channel\", { status: 400 });\n }\n\n const imageUrl = generated[0];\n const imageResponse = await fetch(imageUrl);\n if (!imageResponse.ok) {\n await postSlackMessage({\n channel,\n threadTs,\n text: \"Skin enhancer completed, but the image download failed.\",\n });\n return new Response(\"ok\", { status: 200 });\n }\n\n const imageBytes = await imageResponse.arrayBuffer();\n const contentType = imageResponse.headers.get(\"content-type\") ?? \"image/png\";\n const extension = contentType.split(\"/\")[1] ?? \"png\";\n\n await uploadSlackFile({\n channel,\n threadTs,\n filename: `skin-enhanced.${extension}`,\n bytes: imageBytes,\n });\n\n return new Response(\"ok\", { status: 200 });\n}\n\nasync function processImageFile(params: {\n file: SlackFile;\n channel: string;\n threadTs: string;\n origin: string;\n}): Promise {\n const { file, channel, threadTs, origin } = params;\n\n await postSlackMessage({\n channel,\n threadTs,\n text: \"Processing image with Freepik Skin Enhancer...\",\n });\n\n const downloadUrl = file.url_private_download ?? file.url_private;\n if (!downloadUrl) {\n await postSlackMessage({\n channel,\n threadTs,\n text: \"No downloadable URL for this image.\",\n });\n return;\n }\n\n const slackResponse = await fetch(downloadUrl, {\n headers: {\n Authorization: `Bearer ${SLACK_BOT_TOKEN}`,\n },\n });\n\n if (!slackResponse.ok) {\n await postSlackMessage({\n channel,\n threadTs,\n text: \"Failed to download image from Slack.\",\n });\n return;\n }\n\n const imageBytes = await slackResponse.arrayBuffer();\n const imageBase64 = arrayBufferToBase64(imageBytes);\n\n const webhookUrl = new URL(\"/freepik/webhook\", origin);\n webhookUrl.searchParams.set(\"channel\", channel);\n webhookUrl.searchParams.set(\"thread_ts\", threadTs);\n if (FREEPIK_WEBHOOK_SECRET) {\n webhookUrl.searchParams.set(\"token\", FREEPIK_WEBHOOK_SECRET);\n }\n\n const createResponse = await fetch(\n \"https://api.freepik.com/v1/ai/skin-enhancer/faithful\",\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-freepik-api-key\": FREEPIK_API_KEY,\n },\n body: JSON.stringify({\n image: imageBase64,\n webhook_url: webhookUrl.toString(),\n }),\n },\n );\n\n if (!createResponse.ok) {\n const errorText = await createResponse.text().catch(() => \"\");\n await postSlackMessage({\n channel,\n threadTs,\n text: `Freepik request failed: ${createResponse.status} ${errorText}`,\n });\n return;\n }\n\n const createPayload = await createResponse.json().catch(() => null);\n const data = createPayload?.data ?? {};\n const status = data.status as string | undefined;\n const generated = data.generated as string[] | undefined;\n\n if (status === \"COMPLETED\" && generated && generated.length > 0) {\n const imageResponse = await fetch(generated[0]);\n if (imageResponse.ok) {\n const bytes = await imageResponse.arrayBuffer();\n await uploadSlackFile({\n channel,\n threadTs,\n filename: \"skin-enhanced.png\",\n bytes,\n });\n return;\n }\n }\n}\n\nasync function postSlackMessage(params: {\n channel: string;\n threadTs?: string;\n text: string;\n}): Promise {\n if (!params.channel) return;\n\n const response = await fetch(\"https://slack.com/api/chat.postMessage\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${SLACK_BOT_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n channel: params.channel,\n text: params.text,\n thread_ts: params.threadTs,\n }),\n });\n\n if (!response.ok) {\n console.error(\"Slack postMessage failed\", await response.text());\n }\n}\n\nasync function uploadSlackFile(params: {\n channel: string;\n threadTs?: string;\n filename: string;\n bytes: ArrayBuffer;\n}): Promise {\n const formData = new FormData();\n formData.append(\"channels\", params.channel);\n if (params.threadTs) {\n formData.append(\"thread_ts\", params.threadTs);\n }\n formData.append(\"filename\", params.filename);\n formData.append(\"file\", new Blob([params.bytes]), params.filename);\n\n const response = await fetch(\"https://slack.com/api/files.upload\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${SLACK_BOT_TOKEN}`,\n },\n body: formData,\n });\n\n if (!response.ok) {\n console.error(\"Slack files.upload failed\", await response.text());\n }\n}\n\nfunction safeJsonParse(input: string): Record | null {\n try {\n return JSON.parse(input);\n } catch {\n return null;\n }\n}\n\nasync function verifySlackSignature(req: Request, rawBody: string): Promise {\n const timestamp = req.headers.get(\"x-slack-request-timestamp\");\n const signature = req.headers.get(\"x-slack-signature\");\n if (!timestamp || !signature) {\n return false;\n }\n\n const now = Math.floor(Date.now() / 1000);\n const ts = Number(timestamp);\n if (!Number.isFinite(ts) || Math.abs(now - ts) > 60 * 5) {\n return false;\n }\n\n const baseString = `v0:${timestamp}:${rawBody}`;\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(SLACK_SIGNING_SECRET),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signatureBuffer = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(baseString),\n );\n const computedSignature = `v0=${toHex(signatureBuffer)}`;\n return timingSafeEqual(computedSignature, signature);\n}\n\nfunction toHex(buffer: ArrayBuffer): string {\n return Array.from(new Uint8Array(buffer))\n .map((byte) => byte.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nfunction timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n let result = 0;\n for (let i = 0; i < a.length; i += 1) {\n result |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n return result === 0;\n}\n\nfunction arrayBufferToBase64(buffer: ArrayBuffer): string {\n const bytes = new Uint8Array(buffer);\n const chunkSize = 0x8000;\n let binary = \"\";\n for (let i = 0; i < bytes.length; i += chunkSize) {\n binary += String.fromCharCode(...bytes.subarray(i, i + chunkSize));\n }\n return btoa(binary);\n}\n\ntype SlackFile = {\n id?: string;\n name?: string;\n mimetype?: string;\n filetype?: string;\n url_private?: string;\n url_private_download?: string;\n};\n","createdAt",["D",1768665503273],"branchVersion","branchId","0d4c9072-f3bd-11f0-b3c9-42dde27851f2","id","0d4c5008-f3bd-11f0-b3c9-42dde27851f2","slackSkinEnhancerBot",["D",1768665374593],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","1245e2ed-5890-473d-a1cc-2445c8f928de","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","fc158e6e-805a-4cd7-bd6f-7a6b90570267","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_93":92,"_100":96},"org",{"_93":92,"_94":-5,"_95":96,"_18":53,"_97":98,"_99":24},"branch",{"_13":82,"_31":83,"_41":40,"_84":42,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":43,"_91":92},"isOwned",9,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","kuririn","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ybUNEajQ1dm1ZZ2t0aElaUTdZRDVXVGY5a3kifQ","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_41":42,"_31":43,"_36":146,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":147,"_77":148,"_79":149,"_81":24},"tree",[141],"files",[141],"counts",{"_130":59,"_131":14,"_132":59,"_133":134,"_135":136},"contents",[123],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_41":124,"_31":27,"_29":30,"_125":-5,"_39":40,"_38":14,"_126":24,"_36":127,"_13":59,"_32":33,"_34":35,"_23":24,"_128":-5,"_26":129},"59ffd3de-f3bd-11f0-b0e5-42dde27851f2","parentId","latest",["D",1768665503273],"label",[27],"pulls","branches","forks","envVars",{"_137":139,"_140":59},"connections",{"_137":59,"_138":59},"count","unfilledCount",5,"emptyCount",{"_41":124,"_31":27,"_29":30,"_125":-5,"_39":40,"_38":14,"_126":24,"_36":142,"_13":59,"_32":33,"_34":35,"_23":24,"_128":-5,"_143":144,"_26":145},["D",1768665503273],"children",[],[27],["D",1768665374593],{"_93":92,"_100":96},{"_93":92,"_94":-5,"_95":96,"_18":53,"_97":98,"_99":24},{"_13":82,"_31":83,"_41":40,"_84":42,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":43,"_91":92},"ctx",{"_75":-5,"_120":183,"_184":185,"_186":187,"_188":24,"_189":24,"_190":24,"_191":118,"_192":-5,"_193":-7,"_194":-7,"_195":59,"_196":24,"_197":24,"_198":-5,"_199":24,"_200":24,"_201":24,"_202":-5},"ENV",{"_154":155,"_156":157,"_158":83,"_159":160,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v1