[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_152":153,"_154":155},"routes/_app.x.$handle.$name",{"_94":93,"_32":45,"_103":84,"_27":36,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":25,"_120":-5,"_121":-5,"_122":123},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":36,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":77,"_78":79,"_80":81,"_82":25},"version",2,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","a8851b9a-6352-11f1-8c73-1607ee4eb77e","name","fileType","script","content","","/**\n * valtown-webhook.js — Cloud half of the SMS Daily Protocol.\n *\n * Deploy as a Val Town HTTP val. This is the conversation engine: it receives\n * inbound SMS from Twilio, runs the morning/evening question flow as a state\n * machine, replies with the next question in the SAME response (so the back-\n * and-forth feels like real texting), and when a flow completes it parks the\n * collected answers in Val Town's blob store for Nic's Mac to pull.\n *\n * The Mac NEVER appears here. This code cannot see Nic's vault. Its only outputs\n * are (a) reply SMS and (b) a JSON answer-bundle left in the blob store.\n *\n * ───────────────────────────────────────────────────────────────────────────\n * WHAT YOU SET IN VAL TOWN ENVIRONMENT VARIABLES (Settings → Environment):\n * TWILIO_AUTH_TOKEN - from Twilio console (used to validate request signature)\n * ALLOWED_PHONE - Nic's mobile in E.164, e.g. \"+1303...\" (sender allowlist)\n * SHARED_SECRET - any long random string; the Mac uses the same value\n * TWILIO_ACCOUNT_SID - from Twilio console (for the trigger endpoint reply, optional)\n *\n * BLOB KEYS used (Val Town std/blob):\n * sms_state - current conversation state (which phase + step + answers)\n * sms_pending_bundles - array of completed answer-bundles waiting for the Mac\n * sms_trigger_flag - set by the Mac: { morning: bool, evening: bool, date }\n * ───────────────────────────────────────────────────────────────────────────\n *\n * ENDPOINTS (single HTTP val, routed by method + path):\n * POST / ← Twilio inbound SMS webhook (set this URL on the number)\n * POST /trigger ← Mac pushes \"run morning/evening?\" flag (auth: SHARED_SECRET)\n * GET /pull ← Mac pulls pending answer-bundles (auth: SHARED_SECRET)\n * POST /kickoff ← Mac/cron asks the cloud to SEND the opener text (auth)\n */\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n// ====================== FLOW DEFINITIONS ======================\n// Each step: key (where the answer goes in the bundle), the prompt text, and a\n// parse() that turns Nic's free reply into a stored value (or null = reject).\n\nconst YES = (s) =>\n /^(y|yes|yeah|yep|yup|done|did|sure|affirm|✓|☑)/i.test(s.trim());\n\nconst MORNING = {\n phase: \"morning\",\n opener:\n \"Morning Nic — your Startup isn't done yet. Ready to begin? (reply YES)\",\n closer:\n \"Startup complete. Go get after it. ☀️ (Remember your Week's Focus — and timeblock your day.)\",\n steps: [\n {\n key: \"bedtime\",\n prompt: \"Let's start with sleep — what time did you go to bed?\",\n parse: (s) => s.trim(),\n },\n {\n key: \"waketime\",\n prompt: \"And what time did you wake up?\",\n parse: (s) => s.trim(),\n },\n { key: \"sleepscore\", prompt: \"Rate your sleep, 1–5?\", parse: parse15 },\n {\n key: \"am_feeling\",\n prompt: \"How are you feeling this morning?\",\n parse: (s) => s.trim(),\n },\n {\n key: \"morning_protocol\",\n prompt: \"Did you complete your morning standards?\",\n parse: (s) => YES(s),\n },\n {\n key: \"spiritual_alignment\",\n prompt: \"Did you meditate?\",\n parse: (s) => YES(s),\n },\n { key: \"body_training\", prompt: \"Did you work out?\", parse: (s) => YES(s) },\n ],\n};\n\nconst EVENING = {\n phase: \"evening\",\n opener: \"Ready for your shutdown? (reply YES)\",\n closer:\n \"Shutdown complete. Rest well. 🌙 Journal if you have time. Evening offerings: music · read · meditate · no-tech/no-decisions · walk in nature · stretch · write yourself a letter.\",\n steps: [\n {\n key: \"pm_accomplish\",\n prompt: \"What did you accomplish today?\",\n parse: (s) => s.trim(),\n },\n {\n key: \"pm_improve\",\n prompt: \"Where can you improve?\",\n parse: (s) => s.trim(),\n },\n {\n key: \"reading\",\n prompt: \"Have you / will you read today?\",\n parse: (s) => YES(s),\n },\n {\n key: \"writing\",\n prompt: \"Have you / will you write today?\",\n parse: (s) => YES(s),\n },\n {\n key: \"piano\",\n prompt: \"Have you / will you play piano today?\",\n parse: (s) => YES(s),\n },\n { key: \"rate_mood\", prompt: \"Rate your mood today, 1–5?\", parse: parse15 },\n {\n key: \"productivity\",\n prompt: \"Rate your productivity today, 1–5?\",\n parse: parse15,\n },\n ],\n};\n\nfunction parse15(s) {\n const m = s.trim().match(/[1-5]/);\n return m ? Number(m[0]) : null;\n}\n\n// ====================== STATE HELPERS ======================\nasync function getState() {\n try {\n return await blob.getJSON(\"sms_state\");\n } catch {\n return null;\n }\n}\nasync function setState(st) {\n await blob.setJSON(\"sms_state\", st);\n}\nasync function clearState() {\n await blob.setJSON(\"sms_state\", null);\n}\n\nasync function pushBundle(bundle) {\n let arr = [];\n try {\n arr = (await blob.getJSON(\"sms_pending_bundles\")) || [];\n } catch {}\n arr.push({ ...bundle, complete: true, createdAt: new Date().toISOString() });\n await blob.setJSON(\"sms_pending_bundles\", arr);\n}\n\n// ====================== TWIML / SMS REPLY ======================\nfunction twiml(message) {\n const esc = message.replace(/&/g, \"&\").replace(//g,\n \">\",\n );\n return new Response(\n `${esc}`,\n { headers: { \"Content-Type\": \"text/xml\" } },\n );\n}\nfunction twimlSilent() {\n return new Response(\n ``,\n { headers: { \"Content-Type\": \"text/xml\" } },\n );\n}\n\n// ====================== SECURITY ======================\n// 1) sender allowlist; 2) Twilio signature validation.\nasync function validateTwilio(req, bodyParams, fullUrl) {\n const token = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n const sig = req.headers.get(\"X-Twilio-Signature\");\n if (!token || !sig) return false;\n // Twilio signature = base64( HMAC-SHA1( url + sorted(key+value) , authToken ) )\n const keys = Object.keys(bodyParams).sort();\n let data = fullUrl;\n for (const k of keys) data += k + bodyParams[k];\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(token),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\"HMAC\", key, enc.encode(data));\n const b64 = btoa(String.fromCharCode(...new Uint8Array(mac)));\n return b64 === sig;\n}\n\nfunction authOk(req) {\n const secret = Deno.env.get(\"SHARED_SECRET\");\n return secret && req.headers.get(\"X-Shared-Secret\") === secret;\n}\n\n// ====================== MAIN HANDLER ======================\nexport default async function (req) {\n const url = new URL(req.url);\n const pathName = url.pathname;\n\n // ---- Mac → cloud: set trigger flag (has Nic done startup/shutdown today?) ----\n if (req.method === \"POST\" && pathName.endsWith(\"/trigger\")) {\n if (!authOk(req)) return new Response(\"forbidden\", { status: 403 });\n const flag = await req.json();\n await blob.setJSON(\"sms_trigger_flag\", flag);\n return Response.json({ ok: true });\n }\n\n // ---- Mac → cloud: pull completed bundles, then clear them ----\n if (req.method === \"GET\" && pathName.endsWith(\"/pull\")) {\n if (!authOk(req)) return new Response(\"forbidden\", { status: 403 });\n let arr = [];\n try {\n arr = (await blob.getJSON(\"sms_pending_bundles\")) || [];\n } catch {}\n await blob.setJSON(\"sms_pending_bundles\", []);\n return Response.json({ bundles: arr });\n }\n\n // ---- cron/Mac → cloud: kick off a phase by texting Nic the opener ----\n // (Sends an outbound SMS via Twilio REST so the conversation can START.)\n if (req.method === \"POST\" && pathName.endsWith(\"/kickoff\")) {\n if (!authOk(req)) return new Response(\"forbidden\", { status: 403 });\n const { phase } = await req.json();\n const flow = phase === \"evening\" ? EVENING : MORNING;\n await setState({\n phase: flow.phase,\n step: -1,\n awaitingOpener: true,\n answers: {},\n });\n await sendSms(flow.opener);\n return Response.json({ ok: true, sent: flow.opener });\n }\n\n // ---- Twilio → cloud: inbound SMS (the conversation) ----\n if (req.method === \"POST\") {\n const form = await req.formData();\n const params = {};\n for (const [k, v] of form.entries()) params[k] = v;\n\n // SECURITY 1: signature\n const valid = await validateTwilio(req, params, req.url);\n if (!valid) return new Response(\"bad signature\", { status: 403 });\n // SECURITY 2: sender allowlist\n if (params.From !== Deno.env.get(\"ALLOWED_PHONE\")) return twimlSilent();\n\n const body = (params.Body || \"\").trim();\n let st = await getState();\n\n // No active conversation: only an opener-YES can start one, and only if the\n // Mac's trigger flag says this phase still needs doing.\n if (!st || st.step == null) {\n return twiml(\n \"No active check-in. (Your startup/shutdown texts will arrive at their scheduled times.)\",\n );\n }\n\n const flow = st.phase === \"evening\" ? EVENING : MORNING;\n\n // Waiting on the opener YES\n if (st.awaitingOpener) {\n if (!YES(body)) {\n return twiml(\n `No worries — reply YES when you're ready. ${flow.opener}`,\n );\n }\n st.awaitingOpener = false;\n st.step = 0;\n await setState(st);\n return twiml(flow.steps[0].prompt);\n }\n\n // Mid-conversation: parse the answer for the current step.\n const step = flow.steps[st.step];\n const value = step.parse(body);\n if (value === null || value === undefined) {\n return twiml(`Didn't catch that — ${step.prompt}`);\n }\n st.answers[step.key] = value;\n st.step += 1;\n\n // More steps?\n if (st.step < flow.steps.length) {\n await setState(st);\n return twiml(flow.steps[st.step].prompt);\n }\n\n // Flow complete: park the bundle, clear state, send closer.\n await pushBundle({ phase: flow.phase, ...st.answers });\n await clearState();\n return twiml(flow.closer);\n }\n\n return new Response(\"SMS Daily Protocol webhook is live.\", { status: 200 });\n}\n\n// ====================== OUTBOUND SMS (Twilio REST) ======================\nasync function sendSms(message) {\n const sid = Deno.env.get(\"TWILIO_ACCOUNT_SID\");\n const token = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n const from = Deno.env.get(\"TWILIO_FROM\"); // your Twilio number, E.164\n const to = Deno.env.get(\"ALLOWED_PHONE\");\n if (!sid || !token || !from || !to) return;\n const creds = btoa(`${sid}:${token}`);\n await fetch(\n `https://api.twilio.com/2010-04-01/Accounts/${sid}/Messages.json`,\n {\n method: \"POST\",\n headers: {\n Authorization: `Basic ${creds}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({ To: to, From: from, Body: message }),\n },\n );\n}","createdAt",["D",1780934332983],"branchVersion","branchId","cb79f119-9d4c-4dba-8bdb-0ae73c9b9b12","id","dcd76490-ee9b-45c1-bfe7-0f66db15598c","sms-daily-protocol",["D",1780934209072],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","5e8cb8a5-a894-4a81-803b-eea2d3b854c9","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019ea7f0-bb3d-7271-a236-f7facd998c26","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_94":93,"_102":98},"org",{"_94":93,"_95":96,"_97":98,"_18":54,"_99":100,"_101":25},"branch",{"_13":83,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"isOwned",19,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","npaige47","handle","displayName","Nic Paige","avatar","https://lh3.googleusercontent.com/a/ACg8ocKq30DkcGgxGQD9v62G06mbqhu1l5FS7wl9bQ3pKJkbdS1P5fs=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":148,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":36,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":149,"_78":150,"_80":151,"_82":25},"tree",[143],"files",[143],"counts",{"_132":60,"_133":129,"_134":60,"_135":136,"_137":138},"contents",[124],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":125,"_32":28,"_30":31,"_126":-5,"_41":42,"_40":14,"_127":25,"_38":128,"_13":129,"_33":34,"_35":37,"_24":25,"_130":-5,"_27":131},"fe179c76-1a67-49b7-a016-345290fee4f1","parentId","latest",["D",1780934332983],1,"label",[28],"pulls","branches","forks","envVars",{"_139":141,"_142":60},"connections",{"_139":60,"_140":60},"count","unfilledCount",6,"emptyCount",{"_43":125,"_32":28,"_30":31,"_126":-5,"_41":42,"_40":14,"_127":25,"_38":144,"_13":129,"_33":34,"_35":37,"_24":25,"_130":-5,"_145":146,"_27":147},["D",1780934332983],"children",[],[28],["D",1780934209072],{"_94":93,"_102":98},{"_94":93,"_95":96,"_97":98,"_18":54,"_99":100,"_101":25},{"_13":83,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"ctx",{"_76":-5,"_121":185,"_186":187,"_188":189,"_190":25,"_191":25,"_192":25,"_193":194,"_195":-5,"_196":-7,"_197":-7,"_198":60,"_199":25,"_200":25,"_201":-5,"_202":25,"_203":25,"_204":25,"_205":-5},"ENV",{"_156":157,"_158":159,"_160":84,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets",true,"preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2