[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_191":192,"_193":194},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_87":-7,"_88":89,"_29":-7,"_90":-5,"_15":91,"_92":93,"_94":95,"_96":97,"_98":99,"_100":-5,"_101":-5,"_102":-5,"_103":38,"_104":105,"_106":107,"_108":-5,"_109":-5,"_110":111},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","miqcie","name","cal-attio","project",{"_20":28,"_13":14,"_22":36,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":43,"_44":-5,"_45":46,"_47":-5,"_48":38,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":60,"_61":60,"_62":63,"_64":63,"_65":63,"_66":60,"_67":60,"_68":69,"_70":71,"_72":73,"_74":38},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":-5,"_32":-5,"_33":34,"_35":-5},"id","3813b537-00d6-49ad-8dc8-45aa8e174181","createdAt",["D",1783374967361],"updatedAt",["D",1783380274396],"main","projectId","6e760029-3884-49b4-b564-873895aaed16","version",10,"forkedBranchId","forkedBranchVersion","lockfileKey","1783380274470-esm.town_v_miqcie_cal-attio@10-main","deletedAt",["D",1783374967355],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","Cal.com + Attio sync","imageUrl","userId","2ec4cce0-4d2a-11f0-babe-cd8177b6b491","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",1,"orgId","eed9ac8a-c8ea-4d9e-a39f-ed0984426885","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_86":82},"org",{"_11":12,"_80":-5,"_81":82,"_45":46,"_83":84,"_85":38},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_75":-5,"_76":-5,"_77":-5,"_78":14,"_79":12},"isOwned","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yeWphTXZFeXFJWTNOMkt6WXdZNWRkbElNdzMifQ","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_20":28,"_13":14,"_22":187,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":43,"_44":-5,"_45":46,"_47":-5,"_48":38,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":60,"_61":60,"_62":63,"_64":63,"_65":63,"_66":60,"_67":60,"_68":188,"_70":189,"_72":190,"_74":38},"tree",[155,158,159],"files",[155,156,157,158,159],"counts",{"_146":143,"_17":52,"_147":143,"_148":149,"_150":151},"contents",[112,113,114],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_20":139,"_13":140,"_117":141,"_119":-5,"_120":21,"_121":125,"_123":107,"_22":142,"_29":143,"_126":144,"_128":-5,"_130":38,"_131":-5,"_88":145},{"_20":133,"_13":134,"_117":135,"_119":-5,"_120":21,"_121":30,"_123":107,"_22":136,"_29":52,"_126":100,"_128":137,"_130":38,"_131":-5,"_88":138},{"_20":115,"_13":116,"_117":118,"_119":-5,"_120":21,"_121":122,"_123":107,"_22":124,"_29":125,"_126":127,"_128":129,"_130":38,"_131":-5,"_88":132},"fc10ace9-8f0f-4a7f-9e31-4748c57e7182","main.ts","fileId","7dd3b5f2-7985-11f1-848a-1607ee4eb77e","parentId","branchId","branchVersion",6,"latest",["D",1783375694999],2,"fileType","http","content","// Val.town HTTP entry. Set ATTIO_API_KEY and CAL_WEBHOOK_SECRET in the val's environment variables.\nimport { handleRequest } from \"./src/core.ts\";\n\nexport default async function (req: Request): Promise {\n return handleRequest(req, {\n ATTIO_API_KEY: Deno.env.get(\"ATTIO_API_KEY\") ?? \"\",\n CAL_WEBHOOK_SECRET: Deno.env.get(\"CAL_WEBHOOK_SECRET\") ?? \"\",\n });\n}\n","deleted","label",[116],"8728281d-c994-49de-9001-bb758caf75a8","README.md","9e6bc4a6-7991-11f1-8aa8-1607ee4eb77e",["D",1783380274396],"# cal-attio\n\nFree, self-hosted **Cal.com → Attio** booking sync. When someone books, reschedules, cancels, or no-shows a meeting, this val:\n\n1. verifies the webhook signature (HMAC-SHA256, fails closed),\n2. finds or creates the Attio **person** by attendee email,\n3. writes the booking to a **Bookings list** parented to People — one entry per booking, keyed on the Cal.com booking UID, so lifecycle events update the same entry instead of duplicating it.\n\nNo database. Attio is the store. Terminal statuses (`cancelled` / `completed` / `no_show`) never regress to `confirmed`, so Cal.com's unordered webhook retries can't resurrect a dead booking.\n\n## Use it yourself\n\nFull setup guide, Attio schema script, tests, and a Cloudflare Workers variant live in the GitHub repo: **[miqcie/cal-attio-sync](https://github.com/miqcie/cal-attio-sync)**\n\nShort version — remix this val, then:\n\n1. Get an Attio API key: [app.attio.com → Workspace settings → Developers](https://app.attio.com/settings/developers) (needs record read-write and list read-write scopes).\n2. Run `scripts/setup-attio.ts` from the repo to create the Bookings list in your Attio workspace.\n3. Set two environment variables on your val (left sidebar): `ATTIO_API_KEY` and `CAL_WEBHOOK_SECRET` (any random string).\n4. In Cal.com, create a webhook at [app.cal.com/settings/developer/webhooks](https://app.cal.com/settings/developer/webhooks) pointing at this val's HTTP endpoint with that secret, and enable the `BOOKING_CREATED`, `BOOKING_RESCHEDULED`, `BOOKING_CANCELLED`, `BOOKING_NO_SHOW_UPDATED`, and `MEETING_ENDED` triggers. (Scripting it instead? Grab an API key at [app.cal.com/settings/developer/api-keys](https://app.cal.com/settings/developer/api-keys) and use the repo's `scripts/setup-cal.ts`.)\n\nBook a test meeting; the booking appears in Attio within seconds, linked to the attendee's person record.\n\n## Files\n\n- `main.ts` — HTTP entry (thin wrapper)\n- `src/core.ts` — signature verification, payload normalization, event → status routing\n- `src/attio.ts` — minimal Attio v2 client (query + PATCH/POST; deliberately not the assert endpoint, which matches on parent and would overwrite a repeat booker's earlier booking)\n\nMIT licensed.\n",[134],"f7e2a644-c4b1-4111-a31d-ea2b01b23930","src","2ad3e14a-7987-11f1-aeed-1607ee4eb77e",["D",1783375687006],0,"directory",[140],"pulls","forks","envVars",{"_152":125,"_154":143},"connections",{"_152":143,"_153":143},"count","unfilledCount","emptyCount",{"_20":139,"_13":140,"_117":141,"_119":-5,"_120":21,"_121":125,"_123":107,"_22":184,"_29":143,"_126":144,"_128":-5,"_130":38,"_131":-5,"_161":185,"_88":186},{"_20":176,"_13":177,"_117":178,"_119":141,"_120":21,"_121":179,"_123":107,"_22":180,"_29":125,"_126":172,"_128":181,"_130":38,"_131":-5,"_161":182,"_88":183},{"_20":167,"_13":168,"_117":169,"_119":141,"_120":21,"_121":170,"_123":107,"_22":171,"_29":143,"_126":172,"_128":173,"_130":38,"_131":-5,"_161":174,"_88":175},{"_20":133,"_13":134,"_117":135,"_119":-5,"_120":21,"_121":30,"_123":107,"_22":164,"_29":52,"_126":100,"_128":137,"_130":38,"_131":-5,"_161":165,"_88":166},{"_20":115,"_13":116,"_117":118,"_119":-5,"_120":21,"_121":122,"_123":107,"_22":160,"_29":125,"_126":127,"_128":129,"_130":38,"_131":-5,"_161":162,"_88":163},["D",1783375694999],"children",[],[116],["D",1783380274396],[],[134],"37876997-1d74-4552-bf72-7736d2c770ea","core.ts","2b531974-7987-11f1-aeed-1607ee4eb77e",4,["D",1783375687892],"script","// Platform-agnostic Cal.com → Attio webhook handler.\n// Entry points (Val.town main.tsx, Cloudflare worker.ts) just call handleRequest().\n\nimport { assertBooking, assertPerson, getBookingStatus, type BookingValues } from \"./attio.ts\";\n\nexport interface Env {\n ATTIO_API_KEY: string;\n CAL_WEBHOOK_SECRET: string;\n}\n\nconst STATUS_BY_EVENT: Record = {\n BOOKING_CREATED: \"confirmed\",\n BOOKING_RESCHEDULED: \"confirmed\", // the new booking is the active one; the old uid gets cancelled below\n BOOKING_CANCELLED: \"cancelled\",\n MEETING_ENDED: \"completed\",\n // BOOKING_NO_SHOW_UPDATED handled specially (payload says who no-showed)\n};\n\n// Terminal states never regress to \"confirmed\" — webhook deliveries are unordered and retried.\nconst TERMINAL = new Set([\"cancelled\", \"completed\", \"no_show\"]);\n\n/** Timing-safe HMAC-SHA256 verification of Cal.com's X-Cal-Signature-256 header. Fails closed on a missing secret. */\nexport async function verifySignature(\n secret: string,\n rawBody: string,\n signature: string | null,\n): Promise {\n if (!secret || !signature || !/^[0-9a-f]{64}$/i.test(signature)) return false;\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"verify\"],\n );\n const sigBytes = Uint8Array.from(\n signature.match(/../g)!.map((h) => parseInt(h, 16)),\n );\n return crypto.subtle.verify(\"HMAC\", key, sigBytes, new TextEncoder().encode(rawBody));\n}\n\ninterface Attendee {\n email: string;\n name?: string;\n noShow?: boolean;\n}\n\ninterface NormalizedBooking {\n uid: string;\n title?: string;\n startTime?: string;\n endTime?: string;\n attendees: Attendee[];\n organizerEmail?: string;\n location?: string;\n cancellationReason?: string;\n formResponses?: string;\n rescheduleUid?: string;\n}\n\n/**\n * Cal.com uses a nested payload for BOOKING_* events but a flat one for\n * MEETING_STARTED/MEETING_ENDED (booking fields at top level).\n */\nexport function normalizePayload(body: any): NormalizedBooking | null {\n const p = body?.payload;\n if (!p) return null;\n const uid = p.uid ?? p.bookingUid ?? p.bookingId?.toString();\n if (!uid) return null;\n const attendees: Attendee[] = (p.attendees ?? [])\n .filter((a: any) => a?.email)\n .map((a: any) => ({ email: a.email, name: a.name, noShow: a.noShow }));\n const responses = p.responses ?? p.userFieldsResponses;\n return {\n uid,\n title: p.title ?? p.eventTitle,\n startTime: p.startTime,\n endTime: p.endTime,\n attendees,\n organizerEmail: p.organizer?.email,\n location: p.location,\n cancellationReason: p.cancellationReason,\n formResponses: responses ? JSON.stringify(responses) : undefined,\n rescheduleUid: p.rescheduleUid,\n };\n}\n\nexport async function handleWebhook(body: any, env: Env): Promise {\n const event: string = body?.triggerEvent;\n const booking = normalizePayload(body);\n if (!event || !booking) return \"ignored: no event or booking uid\";\n\n let status = STATUS_BY_EVENT[event];\n if (event === \"BOOKING_NO_SHOW_UPDATED\") {\n // Payload carries per-attendee noShow flags; without a positive flag, don't guess a status.\n if (!booking.attendees.some((a) => a.noShow)) return \"ignored: no-show update without noShow flag\";\n status = \"no_show\";\n }\n if (!status) return `ignored: unhandled event ${event}`;\n\n // Unordered/retried deliveries must not resurrect a finished booking\n // (e.g. a retried BOOKING_CREATED landing after BOOKING_CANCELLED).\n if (status === \"confirmed\") {\n const current = await getBookingStatus(env.ATTIO_API_KEY, booking.uid);\n if (current && TERMINAL.has(current)) {\n return `ignored: ${booking.uid} already ${current}`;\n }\n }\n\n // Assert person records for all attendees; link the first as the booking's attendee.\n let firstPersonId: string | undefined;\n for (const [i, a] of booking.attendees.entries()) {\n const id = await assertPerson(env.ATTIO_API_KEY, a);\n if (i === 0) firstPersonId = id;\n }\n\n const values: BookingValues = {\n booking_uid: booking.uid,\n title: booking.title,\n starts_at: booking.startTime,\n ends_at: booking.endTime,\n status,\n attendee: firstPersonId,\n organizer_email: booking.organizerEmail,\n location: booking.location,\n cancellation_reason: booking.cancellationReason,\n form_responses: booking.formResponses,\n };\n await assertBooking(env.ATTIO_API_KEY, values);\n\n // A reschedule that minted a new uid leaves the old booking dangling — mark it cancelled.\n if (event === \"BOOKING_RESCHEDULED\" && booking.rescheduleUid && booking.rescheduleUid !== booking.uid) {\n await assertBooking(env.ATTIO_API_KEY, {\n booking_uid: booking.rescheduleUid,\n status: \"cancelled\",\n cancellation_reason: `rescheduled to ${booking.uid}`,\n });\n }\n\n return `ok: ${event} → ${booking.uid} (${status})`;\n}\n\n/** Full HTTP handler: verify signature, parse, sync. Shared by all entry points. */\nexport async function handleRequest(req: Request, env: Env): Promise {\n if (req.method !== \"POST\") return new Response(\"cal-attio-sync\", { status: 200 });\n const rawBody = await req.text();\n const ok = await verifySignature(\n env.CAL_WEBHOOK_SECRET,\n rawBody,\n req.headers.get(\"x-cal-signature-256\"),\n );\n if (!ok) return new Response(\"invalid signature\", { status: 401 });\n\n let body: any;\n try {\n body = JSON.parse(rawBody);\n } catch {\n return new Response(\"bad json\", { status: 400 });\n }\n\n try {\n const result = await handleWebhook(body, env);\n console.log(result);\n return new Response(result, { status: 200 });\n } catch (e) {\n // Non-2xx makes Cal.com retry the delivery — desired for transient Attio failures.\n console.error(e);\n return new Response(String(e), { status: 500 });\n }\n}\n",[],[140,168],"4b556ab3-d9f8-494a-ac8a-2eeeacc2c2a1","attio.ts","2b662e56-7987-11f1-800c-1607ee4eb77e",8,["D",1783379554894],"// Minimal Attio v2 API client using Web-standard fetch (runs on Val.town, Workers, Bun).\n\nconst BASE = \"https://api.attio.com/v2\";\n\nexport class AttioError extends Error {\n constructor(public status: number, body: string) {\n super(`Attio ${status}: ${body}`);\n }\n}\n\nasync function attio(apiKey: string, method: string, path: string, body?: unknown) {\n const res = await fetch(`${BASE}${path}`, {\n method,\n headers: {\n authorization: `Bearer ${apiKey}`,\n \"content-type\": \"application/json\",\n },\n body: body === undefined ? undefined : JSON.stringify(body),\n });\n const text = await res.text();\n if (!res.ok) throw new AttioError(res.status, text);\n return text ? JSON.parse(text) : null;\n}\n\n/** Find-or-create a person by email. Returns the person's record_id. */\nexport async function assertPerson(\n apiKey: string,\n attendee: { email: string; name?: string },\n): Promise {\n const values: Record = { email_addresses: [attendee.email] };\n if (attendee.name) {\n // Attio's people.name is a personal-name type: structured, not a bare string.\n const [first, ...rest] = attendee.name.trim().split(/\\s+/);\n values.name = [{\n first_name: first,\n last_name: rest.join(\" \") || undefined,\n full_name: attendee.name,\n }];\n }\n const res = await attio(\n apiKey,\n \"PUT\",\n \"/objects/people/records?matching_attribute=email_addresses\",\n { data: { values } },\n );\n return res.data.id.record_id;\n}\n\nexport interface BookingValues {\n booking_uid: string;\n title?: string;\n starts_at?: string;\n ends_at?: string;\n status?: string;\n attendee?: string; // person record_id — becomes the list entry's parent record\n organizer_email?: string;\n location?: string;\n cancellation_reason?: string;\n form_responses?: string;\n}\n\n/**\n * Idempotent upsert of a booking, stored as an entry in the \"bookings\" list\n * (parented to People — Attio's free plan doesn't allow custom objects).\n *\n * Deliberately NOT Attio's assert endpoint: PUT /lists/{list}/entries matches\n * on the PARENT record regardless of matching_attribute, so a person's second\n * booking would overwrite their first. Instead: query by booking_uid, then\n * PATCH the match or POST a fresh entry. Retries stay idempotent via the\n * query, and booking_uid's uniqueness constraint backstops the rare race.\n */\nexport async function assertBooking(apiKey: string, booking: BookingValues) {\n const { attendee, ...rest } = booking;\n const entry_values: Record = Object.fromEntries(\n // != null drops both null and undefined — Cal.com sends explicit nulls (e.g. cancellationReason).\n Object.entries(rest).filter(([, v]) => v != null && v !== \"\"),\n );\n const existing = await findBookingEntry(apiKey, booking.booking_uid);\n if (existing) {\n return attio(apiKey, \"PATCH\", `/lists/bookings/entries/${existing.entryId}`, {\n data: { entry_values },\n });\n }\n // A list entry needs a parent record; without an attendee there's nothing to create.\n if (!attendee) return null;\n return attio(apiKey, \"POST\", \"/lists/bookings/entries\", {\n data: { parent_record_id: attendee, parent_object: \"people\", entry_values },\n });\n}\n\nasync function findBookingEntry(\n apiKey: string,\n bookingUid: string,\n): Promise<{ entryId: string; status: string | null } | null> {\n const res = await attio(apiKey, \"POST\", \"/lists/bookings/entries/query\", {\n filter: { booking_uid: bookingUid },\n limit: 1,\n });\n const entry = res?.data?.[0];\n if (!entry) return null;\n return {\n entryId: entry.id.entry_id,\n status: entry.entry_values?.status?.[0]?.option?.title ?? null,\n };\n}\n\n/** Current status of a booking entry, or null if it doesn't exist. */\nexport async function getBookingStatus(apiKey: string, bookingUid: string): Promise {\n return (await findBookingEntry(apiKey, bookingUid))?.status ?? null;\n}\n\n// --- setup helpers (used by scripts/setup-attio.ts) ---\n\nexport async function createList(apiKey: string) {\n return attio(apiKey, \"POST\", \"/lists\", {\n data: {\n name: \"Bookings\",\n api_slug: \"bookings\",\n parent_object: \"people\",\n workspace_access: \"full-access\",\n workspace_member_access: [],\n },\n });\n}\n\nexport async function createAttribute(apiKey: string, attr: Record) {\n return attio(apiKey, \"POST\", \"/lists/bookings/attributes\", { data: attr });\n}\n\nexport async function createSelectOption(apiKey: string, attribute: string, title: string) {\n return attio(apiKey, \"POST\", `/lists/bookings/attributes/${attribute}/options`, {\n data: { title },\n });\n}\n\nexport async function getList(apiKey: string): Promise {\n try {\n return await attio(apiKey, \"GET\", \"/lists/bookings\");\n } catch (e) {\n if (e instanceof AttioError && e.status === 404) return null;\n throw e;\n }\n}\n",[],[140,177],["D",1783375687006],[156,157],[140],["D",1783374967355],{"_11":12,"_86":82},{"_11":12,"_80":-5,"_81":82,"_45":46,"_83":84,"_85":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_75":-5,"_76":-5,"_77":-5,"_78":14,"_79":12},"ctx",{"_68":-5,"_109":224,"_225":226,"_227":228,"_229":38,"_230":38,"_231":38,"_232":107,"_233":-5,"_234":-7,"_235":-7,"_236":143,"_237":38,"_238":38,"_239":-5,"_240":38,"_241":38,"_242":38,"_243":-5},"ENV",{"_195":196,"_197":198,"_199":26,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1