[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":53,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":121,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",13,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","43f1ed74-7bdb-11f1-b4f0-1607ee4eb77e","name","fileType","http","content","// Endpoint del WhatsApp Flow \"Escoger entradas\" - versión FINAL corregida\n\nfunction base64ToArrayBuffer(base64: string): ArrayBuffer {\n const binary = atob(base64);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes.buffer;\n}\n\nfunction arrayBufferToBase64(buffer: ArrayBuffer): string {\n const bytes = new Uint8Array(buffer);\n let binary = \"\";\n for (let i = 0; i < bytes.byteLength; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n return btoa(binary);\n}\n\nfunction pemToArrayBuffer(pem: string): ArrayBuffer {\n const b64 = pem.replace(/-----BEGIN PRIVATE KEY-----/, \"\").replace(\n /-----END PRIVATE KEY-----/,\n \"\",\n ).replace(/\\s/g, \"\");\n return base64ToArrayBuffer(b64);\n}\n\nasync function importPrivateKey(pem: string): Promise {\n return await crypto.subtle.importKey(\n \"pkcs8\",\n pemToArrayBuffer(pem),\n { name: \"RSA-OAEP\", hash: \"SHA-256\" },\n false,\n [\"decrypt\"],\n );\n}\n\nasync function decryptRequest(\n body: {\n encrypted_flow_data: string;\n encrypted_aes_key: string;\n initial_vector: string;\n },\n) {\n const privateKey = await importPrivateKey(Deno.env.get(\"FLOW_PRIVATE_KEY\")!);\n const aesKeyBuffer = await crypto.subtle.decrypt(\n { name: \"RSA-OAEP\" },\n privateKey,\n base64ToArrayBuffer(body.encrypted_aes_key),\n );\n const aesKey = await crypto.subtle.importKey(\n \"raw\",\n aesKeyBuffer,\n { name: \"AES-GCM\" },\n false,\n [\"decrypt\", \"encrypt\"],\n );\n const iv = base64ToArrayBuffer(body.initial_vector);\n const encryptedFlowDataBuffer = base64ToArrayBuffer(body.encrypted_flow_data);\n\n // Meta envía: ciphertext + auth_tag (16 bytes al final)\n const ciphertext = encryptedFlowDataBuffer.slice(0, -16);\n const authTag = encryptedFlowDataBuffer.slice(-16);\n\n // Web Crypto necesita: auth_tag + ciphertext (al revés de como lo envía Meta)\n const combined = new Uint8Array(authTag.byteLength + ciphertext.byteLength);\n combined.set(new Uint8Array(authTag), 0);\n combined.set(new Uint8Array(ciphertext), authTag.byteLength);\n\n const decrypted = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv },\n aesKey,\n combined,\n );\n return {\n decryptedBody: JSON.parse(new TextDecoder().decode(decrypted)),\n aesKey,\n iv,\n };\n}\n\nasync function encryptResponse(\n responseObj: unknown,\n aesKey: CryptoKey,\n iv: ArrayBuffer,\n): Promise {\n const flippedIv = new Uint8Array(iv).map((b) => b ^ 0xff);\n const encoded = new TextEncoder().encode(JSON.stringify(responseObj));\n\n // Encriptar - Web Crypto devuelve: ciphertext + auth_tag (al final)\n const encrypted = await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv: flippedIv },\n aesKey,\n encoded,\n );\n\n // Meta espera: ciphertext + auth_tag (igual que como lo envía)\n // Web Crypto ya lo devuelve en ese formato, así que solo convertimos a base64\n return arrayBufferToBase64(encrypted);\n}\n\nasync function obtenerEntradasDeHoy() {\n const SUPABASE_URL = Deno.env.get(\"SUPABASE_URL\")!;\n const SUPABASE_KEY = Deno.env.get(\"SUPABASE_KEY\")!;\n const hoy = new Date().toISOString().slice(0, 10);\n const res = await fetch(\n `${SUPABASE_URL}/rest/v1/menu_diario?fecha=eq.${hoy}&activo=eq.true&select=entrada1,entrada2,entrada3`,\n {\n headers: {\n apikey: SUPABASE_KEY,\n Authorization: `Bearer ${SUPABASE_KEY}`,\n },\n },\n );\n if (!res.ok) return null;\n const rows = await res.json();\n return rows && rows.length > 0 ? rows[0] : null;\n}\n\nexport default async function (req: Request): Promise {\n try {\n if (req.method === \"GET\") {\n return new Response(JSON.stringify({ status: \"active\" }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const body = await req.json();\n\n if (!body.encrypted_flow_data) {\n return new Response(JSON.stringify({ status: \"active\" }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const { decryptedBody, aesKey, iv } = await decryptRequest(body);\n console.log(\"🔥 REQUEST:\", JSON.stringify(decryptedBody));\n\n const { action, screen } = decryptedBody;\n\n if (action === \"ping\") {\n const encrypted = await encryptResponse(\n { data: { status: \"active\" } },\n aesKey,\n iv,\n );\n return new Response(encrypted, { status: 200 });\n }\n\n let responsePayload;\n\n if (\n screen === \"ENTRADAS\" || action === \"INIT\" || action === \"data_exchange\"\n ) {\n const menu = await obtenerEntradasDeHoy();\n\n if (!menu) {\n responsePayload = {\n screen: \"ENTRADAS\",\n data: {\n entrada1_label: \"😕 No hay entradas disponibles hoy\",\n entrada2_label: \"Vuelve a intentarlo más tarde\",\n entrada3_label: \"-\",\n },\n data_api_version: \"3.0\",\n };\n } else {\n responsePayload = {\n screen: \"ENTRADAS\",\n data: {\n entrada1_label: `🥣 ${menu.entrada1}`,\n entrada2_label: `🍮 ${menu.entrada2}`,\n entrada3_label: `🍎 ${menu.entrada3}`,\n },\n data_api_version: \"3.0\",\n };\n }\n } else {\n responsePayload = {\n screen: \"ENTRADAS\",\n data: {\n entrada1_label: \"🥣 Cargando...\",\n entrada2_label: \"🍮 Cargando...\",\n entrada3_label: \"🍎 Cargando...\",\n },\n };\n }\n\n console.log(\"📤 RESPONSE:\", JSON.stringify(responsePayload));\n\n const encrypted = await encryptResponse(responsePayload, aesKey, iv);\n return new Response(encrypted, { status: 200 });\n } catch (err) {\n console.error(\"❌ Error:\", err);\n return new Response(\"Error\", { status: 421 });\n }\n}","// Endpoint del WhatsApp Flow \"Escoger entradas\" - versión ORIGINAL restaurada\n\nfunction base64ToArrayBuffer(base64: string): ArrayBuffer {\n const binary = atob(base64);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes.buffer;\n}\n\nfunction arrayBufferToBase64(buffer: ArrayBuffer): string {\n const bytes = new Uint8Array(buffer);\n let binary = \"\";\n for (let i = 0; i < bytes.byteLength; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n return btoa(binary);\n}\n\nfunction pemToArrayBuffer(pem: string): ArrayBuffer {\n const b64 = pem.replace(/-----BEGIN PRIVATE KEY-----/, \"\").replace(\n /-----END PRIVATE KEY-----/,\n \"\",\n ).replace(/\\s/g, \"\");\n return base64ToArrayBuffer(b64);\n}\n\nasync function importPrivateKey(pem: string): Promise {\n return await crypto.subtle.importKey(\n \"pkcs8\",\n pemToArrayBuffer(pem),\n { name: \"RSA-OAEP\", hash: \"SHA-256\" },\n false,\n [\"decrypt\"],\n );\n}\n\nasync function decryptRequest(\n body: {\n encrypted_flow_data: string;\n encrypted_aes_key: string;\n initial_vector: string;\n },\n) {\n const privateKey = await importPrivateKey(Deno.env.get(\"FLOW_PRIVATE_KEY\")!);\n const aesKeyBuffer = await crypto.subtle.decrypt(\n { name: \"RSA-OAEP\" },\n privateKey,\n base64ToArrayBuffer(body.encrypted_aes_key),\n );\n const aesKey = await crypto.subtle.importKey(\n \"raw\",\n aesKeyBuffer,\n { name: \"AES-GCM\" },\n false,\n [\"decrypt\", \"encrypt\"],\n );\n const iv = base64ToArrayBuffer(body.initial_vector);\n const encryptedFlowDataBuffer = base64ToArrayBuffer(body.encrypted_flow_data);\n\n // Tu código original - ESTABA BIEN\n const dataBuffer = encryptedFlowDataBuffer.slice(0, -16);\n const tagBuffer = encryptedFlowDataBuffer.slice(-16);\n const combined = new Uint8Array(dataBuffer.byteLength + tagBuffer.byteLength);\n combined.set(new Uint8Array(dataBuffer), 0);\n combined.set(new Uint8Array(tagBuffer), dataBuffer.byteLength);\n\n const decrypted = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv },\n aesKey,\n combined,\n );\n return {\n decryptedBody: JSON.parse(new TextDecoder().decode(decrypted)),\n aesKey,\n iv,\n };\n}\n\nasync function encryptResponse(\n responseObj: unknown,\n aesKey: CryptoKey,\n iv: ArrayBuffer,\n): Promise {\n const flippedIv = new Uint8Array(iv).map((b) => b ^ 0xff);\n const encoded = new TextEncoder().encode(JSON.stringify(responseObj));\n const encrypted = await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv: flippedIv },\n aesKey,\n encoded,\n );\n return arrayBufferToBase64(encrypted);\n}\n\nasync function obtenerEntradasDeHoy() {\n const SUPABASE_URL = Deno.env.get(\"SUPABASE_URL\")!;\n const SUPABASE_KEY = Deno.env.get(\"SUPABASE_KEY\")!;\n const hoy = new Date().toISOString().slice(0, 10);\n const res = await fetch(\n `${SUPABASE_URL}/rest/v1/menu_diario?fecha=eq.${hoy}&activo=eq.true&select=entrada1,entrada2,entrada3`,\n {\n headers: {\n apikey: SUPABASE_KEY,\n Authorization: `Bearer ${SUPABASE_KEY}`,\n },\n },\n );\n if (!res.ok) return null;\n const rows = await res.json();\n return rows && rows.length > 0 ? rows[0] : null;\n}\n\nexport default async function (req: Request): Promise {\n try {\n if (req.method === \"GET\") {\n return new Response(JSON.stringify({ status: \"active\" }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const body = await req.json();\n\n if (!body.encrypted_flow_data) {\n return new Response(JSON.stringify({ status: \"active\" }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const { decryptedBody, aesKey, iv } = await decryptRequest(body);\n console.log(\"🔥 REQUEST:\", JSON.stringify(decryptedBody));\n\n const { action, screen } = decryptedBody;\n\n if (action === \"ping\") {\n const encrypted = await encryptResponse(\n { data: { status: \"active\" } },\n aesKey,\n iv,\n );\n return new Response(encrypted, {\n headers: { \"Content-Type\": \"text/plain\" },\n });\n }\n\n let responsePayload;\n\n if (\n screen === \"ENTRADAS\" || action === \"INIT\" || action === \"data_exchange\"\n ) {\n const menu = await obtenerEntradasDeHoy();\n\n if (!menu) {\n responsePayload = {\n screen: \"ENTRADAS\",\n data: {\n entrada1_label: \"😕 No hay entradas disponibles hoy\",\n entrada2_label: \"Vuelve a intentarlo más tarde\",\n entrada3_label: \"-\",\n },\n data_api_version: \"3.0\",\n };\n } else {\n responsePayload = {\n screen: \"ENTRADAS\",\n data: {\n entrada1_label: `🥣 ${menu.entrada1}`,\n entrada2_label: `🍮 ${menu.entrada2}`,\n entrada3_label: `🍎 ${menu.entrada3}`,\n },\n data_api_version: \"3.0\",\n };\n }\n } else {\n responsePayload = {\n screen: \"ENTRADAS\",\n data: {\n entrada1_label: \"🥣 Cargando...\",\n entrada2_label: \"🍮 Cargando...\",\n entrada3_label: \"🍎 Cargando...\",\n },\n };\n }\n\n console.log(\"📤 RESPONSE:\", JSON.stringify(responsePayload));\n\n const encrypted = await encryptResponse(responsePayload, aesKey, iv);\n return new Response(encrypted, {\n headers: { \"Content-Type\": \"text/plain\" },\n });\n } catch (err) {\n console.error(\"❌ Error:\", err);\n return new Response(\"Error\", { status: 421 });\n }\n}","createdAt",["D",1783704734367],"branchVersion","branchId","3465b9bd-272b-433b-beb9-d9be0f397987","id","9b96acf6-3a96-41c7-a884-fe4b16661405","flow-entradas",["D",1783631709281],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","3fba2269-3227-4b9f-ab8a-df547b148617","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f48ba-1bcb-738b-a9a9-63d21eff08c9","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",14,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","potrillosterraza","handle","displayName","Potrillos Terraza","avatar","https://lh3.googleusercontent.com/a/ACg8ocIxFafXi6EKZ4yhauun8NEwUOIBHVgUXpiMwS7GNW-t14KnEg=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":151,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":152,"_79":153,"_81":154,"_83":25},"tree",[146],"files",[146],"counts",{"_134":61,"_135":136,"_137":61,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"2403ed11-ece5-4faf-8054-0ad8ee79b1e9","parentId","latest",["D",1783704734367],12,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":144,"_145":61},"connections",{"_142":61,"_143":61},"count","unfilledCount",3,"emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":147,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_148":149,"_27":150},["D",1783704734367],"children",[],[28],["D",1783631709281],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_123":188,"_189":190,"_191":192,"_193":25,"_194":25,"_195":25,"_196":121,"_197":-5,"_198":-7,"_199":-7,"_200":61,"_201":25,"_202":25,"_203":-5,"_204":25,"_205":25,"_206":25,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":85,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v13