\n \n \n\n\n",1,"b4737d56-3513-11f1-bc2f-42b51c65c3df",["D",1775849765673],"branchVersion","label",[164,65],"frontend","pulls","branches","forks","envVars",{"_172":26,"_174":26},"connections",{"_172":26,"_173":26},"count","unfilledCount","emptyCount",{"_33":228,"_13":164,"_63":159,"_43":-5,"_35":36,"_161":197,"_186":94,"_37":229,"_39":26,"_66":230,"_156":-5,"_67":24,"_162":-5,"_190":231,"_17":232},{"_33":155,"_13":65,"_63":64,"_43":159,"_35":36,"_161":73,"_186":94,"_37":225,"_39":158,"_66":21,"_156":157,"_67":24,"_162":-5,"_190":226,"_17":227},{"_33":218,"_13":219,"_63":220,"_43":159,"_35":36,"_161":120,"_186":94,"_37":221,"_39":158,"_66":21,"_156":222,"_67":24,"_162":-5,"_190":223,"_17":224},{"_33":210,"_13":211,"_63":212,"_43":159,"_35":36,"_161":213,"_186":94,"_37":214,"_39":26,"_66":21,"_156":215,"_67":24,"_162":-5,"_190":216,"_17":217},{"_33":202,"_13":203,"_63":204,"_43":-5,"_35":36,"_161":205,"_186":94,"_37":206,"_39":26,"_66":21,"_156":207,"_67":24,"_162":-5,"_190":208,"_17":209},{"_33":193,"_13":194,"_63":92,"_43":-5,"_35":36,"_161":195,"_186":94,"_37":196,"_39":197,"_66":198,"_156":199,"_67":24,"_162":-5,"_190":200,"_17":201},{"_33":182,"_13":183,"_63":184,"_43":-5,"_35":36,"_161":185,"_186":94,"_37":187,"_39":158,"_66":188,"_156":189,"_67":24,"_162":-5,"_190":191,"_17":192},"b6d57ac2-3513-11f1-b978-42b51c65c3df","main.ts","1aecfe46-3513-11f1-9d9f-42b51c65c3df",3,"latest",["D",1775849421295],"script","// This file is intentionally left as a placeholder.\n// The HTTP entrypoint is index.ts.\n","children",[],[183],"90d6034a-3514-11f1-ba50-42b51c65c3df","index.ts",11,["D",1775849787055],2,"http","import { Hono } from \"npm:hono\";\nimport { serveFile, parseVal } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\n// ──────────────────────────────────────────────────\n// MOCK DATA — In a real template, these would be live\n// ──────────────────────────────────────────────────\nconst MOCK_GITHUB_USER = {\n login: \"octocat\",\n avatar_url: \"https://avatars.githubusercontent.com/u/583231?v=4\",\n name: \"The Octocat\",\n repos: [\"my-cool-project\", \"startup-integration\", \"hello-world\"],\n};\n\nconst MOCK_STARTUP_USER = {\n id: \"usr_abc123\",\n email: \"octocat@example.com\",\n plan: \"pro\",\n workspace: \"Octocat's Workspace\",\n};\n\nconst DEMO_EVENTS = [\n {\n id: 1,\n type: \"issue_created\",\n title: \"Fix auth redirect loop\",\n description: \"Users report being stuck in a redirect loop after OAuth\",\n repo: \"my-cool-project\",\n status: \"pending\",\n },\n {\n id: 2,\n type: \"deploy_triggered\",\n title: \"Deploy v2.3.1 to production\",\n description: \"Auto-deploy triggered by merged PR #142\",\n repo: \"startup-integration\",\n status: \"pending\",\n },\n {\n id: 3,\n type: \"file_sync\",\n title: \"Sync config.yaml to repo\",\n description: \"Push latest config from startup dashboard to GitHub\",\n repo: \"my-cool-project\",\n status: \"pending\",\n },\n];\n\n// ──────────────────────────────────────────────────\n// API ROUTES\n// ──────────────────────────────────────────────────\n\n// Auth status (mocked)\napp.get(\"/api/auth/status\", (c) => {\n return c.json({\n github: {\n connected: true,\n user: MOCK_GITHUB_USER,\n note: \"🎭 DEMO: In production, this uses GitHub OAuth to get a real token\",\n },\n startup: {\n connected: true,\n user: MOCK_STARTUP_USER,\n note: \"🎭 DEMO: In production, user provides their API key or goes through startup's OAuth\",\n },\n });\n});\n\n// List pending actions from the startup\napp.get(\"/api/events\", (c) => {\n return c.json({\n events: DEMO_EVENTS,\n note: \"🎭 DEMO: These would come from the startup's API using the stored auth token\",\n });\n});\n\n// \"Push to GitHub\" — the core action\napp.post(\"/api/push/:eventId\", async (c) => {\n const eventId = parseInt(c.req.param(\"eventId\"));\n const event = DEMO_EVENTS.find((e) => e.id === eventId);\n\n if (!event) return c.json({ error: \"Event not found\" }, 404);\n\n // In production, this is where the magic happens:\n // 1. Use startup API token to fetch full event details\n // 2. Use GitHub token to create issue/commit/PR/etc.\n // 3. Mark event as processed in startup's API\n\n return c.json({\n success: true,\n message: `✅ Would push \"${event.title}\" to github.com/${MOCK_GITHUB_USER.login}/${event.repo}`,\n whatWouldHappen: {\n step1: `GET startup-api.com/events/${eventId} (using STARTUP_API_TOKEN)`,\n step2: `POST api.github.com/repos/${MOCK_GITHUB_USER.login}/${event.repo}/issues (using GitHub OAuth token)`,\n step3: `PATCH startup-api.com/events/${eventId}/mark-synced (using STARTUP_API_TOKEN)`,\n },\n note: \"🎭 DEMO: No actual API calls were made. In production, this creates real GitHub issues/PRs/commits.\",\n });\n});\n\n// Architecture diagram data\napp.get(\"/api/architecture\", (c) => {\n return c.json({\n flow: [\n \"1. User remixes this template on Val Town\",\n \"2. User connects GitHub (OAuth → stores token in Val Town env vars)\",\n \"3. User adds their Startup API key (env var: STARTUP_API_TOKEN)\",\n \"4. Startup product has a 'Sync to GitHub' button → hits this val's webhook\",\n \"5. Val uses both tokens to bridge the two services\",\n \"6. GitHub repo gets updated (issues, PRs, files, etc.)\",\n ],\n envVarsNeeded: [\n { key: \"GITHUB_CLIENT_ID\", description: \"OAuth App client ID (provided by startup)\" },\n { key: \"GITHUB_CLIENT_SECRET\", description: \"OAuth App client secret (provided by startup)\" },\n { key: \"STARTUP_API_TOKEN\", description: \"User's API token from the startup product\" },\n ],\n });\n});\n\n// View source\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ──────────────────────────────────────────────────\n// STATIC FILES\n// ──────────────────────────────────────────────────\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\n\n// Serve the frontend\napp.get(\"/\", (c) => serveFile(\"/frontend/index.html\"));\n\nexport default app.fetch;\n",[],[194],"207d42a2-3514-11f1-8436-42b51c65c3df","README.md","207d4342-3514-11f1-8436-42b51c65c3df",8,["D",1775849598571],"# 🔀 Remixable Integration Template Demo\n\n**A tour of the pattern**: how a startup can ship a Val Town template that bridges their product with a user's GitHub repos.\n\n> ⚠️ This is a **demo with mock data** — no real API calls are made. It shows the architecture, UX flow, and code patterns that a real integration would use.\n\n## The Idea\n\nA startup (\"AcmeStartup\") wants users to be able to push events from their product to GitHub (issues, PRs, file syncs, etc). Instead of building a full GitHub integration into their backend, they ship a **remixable Val Town template**.\n\nThe user remixes it, adds their tokens, and the val acts as a personal bridge between the two services.\n\n## Architecture\n\n```mermaid\nsequenceDiagram\n participant User\n participant AcmeStartup\n participant ValTown as This Val (user's remix)\n participant GitHub\n\n User->>ValTown: 1. Remix template\n User->>ValTown: 2. Add GITHUB_TOKEN env var\n User->>ValTown: 3. Add STARTUP_API_TOKEN env var\n User->>AcmeStartup: 4. Set webhook URL → val endpoint\n\n Note over AcmeStartup,GitHub: Later, when an event happens...\n\n AcmeStartup->>ValTown: POST /api/webhook (event payload)\n ValTown->>ValTown: Verify webhook signature\n ValTown->>AcmeStartup: GET /api/events/:id (full details)\n ValTown->>GitHub: POST /repos/:owner/:repo/issues\n ValTown->>AcmeStartup: PATCH /events/:id/mark-synced\n ValTown->>AcmeStartup: 200 OK { synced: true }\n```\n\n## Why This Pattern Works\n\n| For the Startup | For the User |\n|---|---|\n| No GitHub integration to build/maintain | Full control over the code |\n| No user tokens to store | Can customize behavior, add filters |\n| Ship a template, not infrastructure | Tokens stay in their own account |\n| Users self-serve setup | Can inspect and audit everything |\n\n## Files\n\n- `index.ts` — Hono HTTP backend with mock API routes\n- `frontend/index.html` — Shell HTML\n- `frontend/index.tsx` — React app with 3 tabs: Demo, Architecture, How It Works\n- `frontend/style.css` — Dark theme GitHub-inspired styles\n\n## Try It\n\nVisit the live demo and click through the three tabs. Hit \"Push to GitHub\" to see the step-by-step API calls that would happen in production.\n",[],[203],"de5e1004-3513-11f1-8436-42b51c65c3df","style.css","de5e10ae-3513-11f1-8436-42b51c65c3df",6,["D",1775849487646],":root {\n --bg: #0d1117;\n --surface: #161b22;\n --surface-raised: #1c2129;\n --border: #30363d;\n --border-active: #58a6ff;\n --text: #e6edf3;\n --text-muted: #8b949e;\n --accent: #58a6ff;\n --accent-hover: #79c0ff;\n --green: #3fb950;\n --green-bg: rgba(63, 185, 80, 0.1);\n --orange: #d29922;\n --orange-bg: rgba(210, 153, 34, 0.1);\n --purple: #bc8cff;\n --purple-bg: rgba(188, 140, 255, 0.1);\n --red: #f85149;\n --radius: 8px;\n --radius-lg: 12px;\n}\n\n* { margin: 0; padding: 0; box-sizing: border-box; }\n\nbody {\n font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif;\n background: var(--bg);\n color: var(--text);\n line-height: 1.6;\n min-height: 100vh;\n}\n\n.app {\n max-width: 960px;\n margin: 0 auto;\n padding: 2rem 1.5rem;\n}\n\n/* Header */\n.header {\n text-align: center;\n margin-bottom: 2.5rem;\n padding-bottom: 2rem;\n border-bottom: 1px solid var(--border);\n}\n\n.header h1 {\n font-size: 1.8rem;\n font-weight: 700;\n margin-bottom: 0.5rem;\n background: linear-gradient(135deg, var(--accent), var(--purple));\n -webkit-background-clip: text;\n -webkit-text-fill-color: transparent;\n}\n\n.header p {\n color: var(--text-muted);\n font-size: 1rem;\n}\n\n.demo-badge {\n display: inline-flex;\n align-items: center;\n gap: 0.4rem;\n background: var(--orange-bg);\n color: var(--orange);\n padding: 0.3rem 0.8rem;\n border-radius: 999px;\n font-size: 0.8rem;\n font-weight: 600;\n margin-top: 1rem;\n border: 1px solid rgba(210, 153, 34, 0.3);\n}\n\n/* Tabs */\n.tabs {\n display: flex;\n gap: 0;\n border-bottom: 1px solid var(--border);\n margin-bottom: 2rem;\n overflow-x: auto;\n}\n\n.tab {\n padding: 0.75rem 1.25rem;\n background: none;\n border: none;\n color: var(--text-muted);\n font-size: 0.9rem;\n cursor: pointer;\n border-bottom: 2px solid transparent;\n white-space: nowrap;\n transition: all 0.15s;\n font-family: inherit;\n}\n\n.tab:hover {\n color: var(--text);\n}\n\n.tab.active {\n color: var(--accent);\n border-bottom-color: var(--accent);\n}\n\n/* Cards */\n.card {\n background: var(--surface);\n border: 1px solid var(--border);\n border-radius: var(--radius-lg);\n padding: 1.5rem;\n margin-bottom: 1.25rem;\n}\n\n.card-header {\n display: flex;\n align-items: center;\n gap: 0.75rem;\n margin-bottom: 1rem;\n}\n\n.card-header h3 {\n font-size: 1rem;\n font-weight: 600;\n}\n\n.card-header .icon {\n width: 36px;\n height: 36px;\n border-radius: 8px;\n display: flex;\n align-items: center;\n justify-content: center;\n font-size: 1.1rem;\n flex-shrink: 0;\n}\n\n.icon-github { background: #fff; color: #000; }\n.icon-startup { background: var(--purple-bg); color: var(--purple); }\n.icon-connected { background: var(--green-bg); color: var(--green); }\n\n/* Connection status */\n.connection-row {\n display: flex;\n align-items: center;\n justify-content: space-between;\n padding: 0.75rem 1rem;\n background: var(--surface-raised);\n border-radius: var(--radius);\n margin-bottom: 0.5rem;\n}\n\n.connection-info {\n display: flex;\n align-items: center;\n gap: 0.75rem;\n}\n\n.connection-info img {\n width: 32px;\n height: 32px;\n border-radius: 50%;\n}\n\n.connection-info .name {\n font-weight: 600;\n font-size: 0.9rem;\n}\n\n.connection-info .detail {\n color: var(--text-muted);\n font-size: 0.8rem;\n}\n\n.status-badge {\n display: inline-flex;\n align-items: center;\n gap: 0.3rem;\n padding: 0.25rem 0.6rem;\n border-radius: 999px;\n font-size: 0.75rem;\n font-weight: 600;\n}\n\n.status-connected {\n background: var(--green-bg);\n color: var(--green);\n}\n\n/* Events */\n.event-card {\n background: var(--surface-raised);\n border: 1px solid var(--border);\n border-radius: var(--radius);\n padding: 1rem 1.25rem;\n margin-bottom: 0.75rem;\n display: flex;\n align-items: center;\n justify-content: space-between;\n gap: 1rem;\n}\n\n.event-info { flex: 1; }\n\n.event-type {\n font-size: 0.7rem;\n text-transform: uppercase;\n font-weight: 700;\n letter-spacing: 0.05em;\n color: var(--purple);\n margin-bottom: 0.2rem;\n}\n\n.event-title {\n font-weight: 600;\n font-size: 0.95rem;\n margin-bottom: 0.2rem;\n}\n\n.event-desc {\n color: var(--text-muted);\n font-size: 0.8rem;\n}\n\n.event-repo {\n color: var(--accent);\n font-size: 0.8rem;\n font-family: 'SFMono-Regular', Consolas, monospace;\n}\n\n.push-btn {\n display: inline-flex;\n align-items: center;\n gap: 0.4rem;\n padding: 0.5rem 1rem;\n background: var(--green);\n color: #000;\n border: none;\n border-radius: var(--radius);\n font-size: 0.85rem;\n font-weight: 600;\n cursor: pointer;\n white-space: nowrap;\n transition: all 0.15s;\n font-family: inherit;\n}\n\n.push-btn:hover {\n filter: brightness(1.1);\n transform: translateY(-1px);\n}\n\n.push-btn:disabled {\n opacity: 0.5;\n cursor: default;\n transform: none;\n}\n\n.push-btn.success {\n background: var(--surface);\n color: var(--green);\n border: 1px solid var(--green);\n}\n\n/* Response modal */\n.response-card {\n background: var(--surface);\n border: 1px solid var(--green);\n border-radius: var(--radius-lg);\n padding: 1.25rem;\n margin-top: 0.75rem;\n animation: slideDown 0.2s ease;\n}\n\n@keyframes slideDown {\n from { opacity: 0; transform: translateY(-8px); }\n to { opacity: 1; transform: translateY(0); }\n}\n\n.response-card h4 {\n color: var(--green);\n font-size: 0.9rem;\n margin-bottom: 0.75rem;\n}\n\n.step {\n display: flex;\n align-items: flex-start;\n gap: 0.75rem;\n padding: 0.5rem 0;\n}\n\n.step-num {\n width: 22px;\n height: 22px;\n border-radius: 50%;\n background: var(--accent);\n color: #000;\n display: flex;\n align-items: center;\n justify-content: center;\n font-size: 0.7rem;\n font-weight: 700;\n flex-shrink: 0;\n margin-top: 0.1rem;\n}\n\n.step-text {\n font-family: 'SFMono-Regular', Consolas, monospace;\n font-size: 0.8rem;\n color: var(--text-muted);\n word-break: break-all;\n}\n\n/* Architecture */\n.arch-flow {\n position: relative;\n padding-left: 2rem;\n}\n\n.arch-step {\n position: relative;\n padding: 0.75rem 0 0.75rem 1.25rem;\n border-left: 2px solid var(--border);\n}\n\n.arch-step:last-child {\n border-left-color: transparent;\n}\n\n.arch-step::before {\n content: '';\n position: absolute;\n left: -7px;\n top: 1rem;\n width: 12px;\n height: 12px;\n border-radius: 50%;\n background: var(--accent);\n}\n\n.arch-step .step-label {\n font-weight: 600;\n font-size: 0.9rem;\n margin-bottom: 0.2rem;\n}\n\n.arch-step .step-detail {\n color: var(--text-muted);\n font-size: 0.85rem;\n}\n\n/* Code block */\n.code-block {\n background: #0d1117;\n border: 1px solid var(--border);\n border-radius: var(--radius);\n padding: 1rem 1.25rem;\n font-family: 'SFMono-Regular', Consolas, monospace;\n font-size: 0.8rem;\n overflow-x: auto;\n line-height: 1.8;\n margin: 1rem 0;\n}\n\n.code-comment { color: #8b949e; }\n.code-keyword { color: #ff7b72; }\n.code-string { color: #a5d6ff; }\n.code-fn { color: #d2a8ff; }\n\n/* Env var table */\n.env-table {\n width: 100%;\n border-collapse: collapse;\n margin-top: 1rem;\n}\n\n.env-table th, .env-table td {\n text-align: left;\n padding: 0.6rem 0.75rem;\n border-bottom: 1px solid var(--border);\n font-size: 0.85rem;\n}\n\n.env-table th {\n color: var(--text-muted);\n font-weight: 600;\n font-size: 0.75rem;\n text-transform: uppercase;\n letter-spacing: 0.05em;\n}\n\n.env-table code {\n background: var(--surface-raised);\n padding: 0.15rem 0.4rem;\n border-radius: 4px;\n font-size: 0.8rem;\n color: var(--accent);\n}\n\n/* Footer */\n.footer {\n margin-top: 3rem;\n padding-top: 1.5rem;\n border-top: 1px solid var(--border);\n text-align: center;\n color: var(--text-muted);\n font-size: 0.85rem;\n}\n\n.footer a {\n color: var(--accent);\n text-decoration: none;\n}\n\n.footer a:hover {\n text-decoration: underline;\n}\n\n/* Diagram */\n.diagram {\n background: var(--surface-raised);\n border: 1px solid var(--border);\n border-radius: var(--radius-lg);\n padding: 2rem;\n margin: 1.5rem 0;\n text-align: center;\n font-family: 'SFMono-Regular', Consolas, monospace;\n font-size: 0.85rem;\n line-height: 2;\n overflow-x: auto;\n white-space: pre;\n}\n\n.diagram .box {\n display: inline-block;\n border: 2px solid var(--border);\n border-radius: var(--radius);\n padding: 0.5rem 1rem;\n margin: 0.25rem;\n}\n\n.diagram .box-github { border-color: #fff; }\n.diagram .box-val { border-color: var(--accent); }\n.diagram .box-startup { border-color: var(--purple); }\n\n/* Note banner */\n.note {\n background: rgba(88, 166, 255, 0.08);\n border: 1px solid rgba(88, 166, 255, 0.2);\n border-radius: var(--radius);\n padding: 0.75rem 1rem;\n font-size: 0.85rem;\n color: var(--accent);\n margin: 1rem 0;\n display: flex;\n align-items: flex-start;\n gap: 0.5rem;\n}\n\n/* Responsive */\n@media (max-width: 640px) {\n .event-card {\n flex-direction: column;\n align-items: flex-start;\n }\n .push-btn {\n align-self: flex-end;\n }\n}\n",[],[164,211],"b84e29e8-3514-11f1-b807-42b51c65c3df","index.tsx","0e5a0a60-3514-11f1-8857-42b51c65c3df",["D",1775849853254],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\n\nfunction App() {\n const [tab, setTab] = useState(\"demo\");\n const [authStatus, setAuthStatus] = useState(null);\n const [events, setEvents] = useState([]);\n const [pushResults, setPushResults] = useState({});\n const [pushing, setPushing] = useState({});\n\n useEffect(() => {\n fetch(\"/api/auth/status\").then((r) => r.json()).then(setAuthStatus);\n fetch(\"/api/events\").then((r) => r.json()).then((d) => setEvents(d.events));\n }, []);\n\n const handlePush = async (eventId) => {\n setPushing((p) => ({ ...p, [eventId]: true }));\n const res = await fetch(`/api/push/${eventId}`, { method: \"POST\" });\n const data = await res.json();\n setPushResults((r) => ({ ...r, [eventId]: data }));\n setPushing((p) => ({ ...p, [eventId]: false }));\n };\n\n return (\n

\n \n Remixable Integration Template\n

How a startup can ship a Val Town template that connects their product to GitHub

\n \n Interactive Demo — No real API calls\n

\n\n

\n \n \n \n

\n\n {tab === \"demo\" && }\n {tab === \"architecture\" && }\n {tab === \"code\" && }\n\n \n

\n );\n}\n\nfunction DemoTab({ authStatus, events, pushResults, pushing, onPush }) {\n return (\n <>\n

\n \n \n This is a simulated demo. In production, the user would connect real accounts.\n Click \"Push to GitHub\" to see what would happen.\n \n

\n\n {/* Connections */}\n

Connected Accounts

\n\n {authStatus && (\n <>\n

\n $\"avatar\"$ \n

{authStatus.github.user.login}

{authStatus.github.user.repos.length} repos accessible

\n \n Connected\n \n

\n\n

\n \n

AcmeStartup

{authStatus.startup.user.workspace} · {authStatus.startup.user.plan} plan

\n \n Connected\n \n

\n \n )}\n

\n\n {/* Events */}\n

Pending Actions from AcmeStartup

\n\n {events.map((event) => (\n

\n {event.type === \"issue_created\" && <> Issue}\n {event.type === \"deploy_triggered\" && <> Deploy}\n {event.type === \"file_sync\" && <> File Sync}\n

{event.title}

{event.description}

\n \n octocat/{event.repo}\n

\n onPush(event.id)}\n disabled={pushing[event.id] || !!pushResults[event.id]}\n >\n {pushing[event.id]\n ? <> Pushing...\n : pushResults[event.id]\n ? <> Pushed\n : <> Push to GitHub}\n \n

\n\n {pushResults[event.id] && (\n

{pushResults[event.id].message}

\n Here's what would happen with real API tokens:\n

\n {Object.entries(pushResults[event.id].whatWouldHappen).map(([key, value]) => (\n

{key.replace(\"step\", \"\")}

{value}

\n ))}\n

\n )}\n

\n ))}\n

\n \n );\n}\n\nfunction ArchitectureTab() {\n return (\n <>\n

\n \n

How the Pieces Fit Together

\n\n

{\n`┌─────────────────┐ ┌──────────────────┐ ┌─────────────────┐\n│ │ │ │ │ │\n│ AcmeStartup │────────▶│ This Val Town │────────▶│ GitHub API │\n│ (Product UI) │ webhook │ Template │ OAuth │ (User's Repos) │\n│ │ │ │ token │ │\n└─────────────────┘ └──────────────────┘ └─────────────────┘\n │\n User clicks \"Sync\" Uses BOTH tokens:\n in AcmeStartup UI • STARTUP_API_TOKEN → read event data\n • GITHUB_TOKEN → create issues/PRs/commits`\n }

\n\n

\n \n

User Journey

\n\n

\n {[\n { label: \"1. Remix the Template\", detail: \"User clicks \\\"Use this template\\\" from the startup's docs. Gets their own copy on Val Town.\" },\n { label: \"2. Connect GitHub\", detail: \"OAuth flow grants the val a token to act on the user's GitHub repos. Token stored as env var.\" },\n { label: \"3. Add Startup API Key\", detail: \"User grabs their API key from AcmeStartup's dashboard, pastes it as an env var.\" },\n { label: \"4. Configure Webhook\", detail: \"User copies this val's endpoint URL into AcmeStartup's webhook settings.\" },\n { label: \"5. It Just Works ✨\", detail: \"When events happen in AcmeStartup, this val bridges them to GitHub automatically.\" },\n ].map((s) => (\n

{s.label}

{s.detail}

\n ))}\n

\n\n

\n \n

Required Environment Variables

\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

Variable	Source	Purpose
`GITHUB_TOKEN`	GitHub OAuth flow	Create issues, PRs, commits on user's repos
`STARTUP_API_TOKEN`	AcmeStartup dashboard	Read events, mark as synced
`WEBHOOK_SECRET`	Generated at setup	Verify incoming webhooks are legit

\n \n );\n}\n\nfunction CodeTab() {\n return (\n <>\n

\n \n

Why This Pattern is Powerful

For the startup: You ship a template, not infrastructure. No need to build GitHub integration into your core product. Users remix the val and own their own integration — you just document the webhook format.

\n
\n

For the user: Full control. They can see the code, customize the behavior, add filtering logic, route different events to different repos. It's their code running in their Val Town account.

\n
\n

For everyone: Tokens stay with the user. The startup never sees the user's GitHub token. The user never gives the startup write access to their repos.

\n\n

GitHub Auth: Two Approaches

\n\n

\n Option A: GitHub OAuth App (Recommended)\n

\n The startup registers a GitHub OAuth App. Users go through the flow and the val stores the token.\n

{\n`// Hono route that kicks off GitHub OAuth\napp.get(\"/auth/github\", (c) => {\n  const url = \\`https://github.com/login/oauth/authorize\\`\n    + \\`?client_id=\\${Deno.env.get(\"GITHUB_CLIENT_ID\")}\\`\n    + \\`&scope=repo\\`\n  return c.redirect(url);\n});`}

\n\n

\n Option B: Personal Access Token (Simpler)\n

\n User generates a GitHub PAT and pastes it as an env var. Easier setup, less code.\n

{\n`// Just read it from env vars\nconst githubToken = Deno.env.get(\"GITHUB_TOKEN\");\n\n// Then use it to create an issue\nawait fetch(\\`https://api.github.com/repos/\\${owner}/\\${repo}/issues\\`, {\n  method: \"POST\",\n  headers: { Authorization: \\`Bearer \\${githubToken}\\` },\n  body: JSON.stringify({ title, body })\n});`}

\n\n

The Webhook Handler (Core Logic)

\n\n

\n This is the heart of the integration. The startup's product sends a webhook, and this val bridges it to GitHub.\n

\n\n

{\n`// POST /api/webhook — called by AcmeStartup\napp.post(\"/api/webhook\", async (c) => {\n  // 1. Verify the webhook signature\n  const sig = c.req.header(\"x-acme-signature\");\n  if (!verifySignature(sig, body))\n    return c.json({ error: \"Invalid\" }, 401);\n\n  // 2. Parse the event from the startup\n  const event = await c.req.json();\n\n  // 3. Use the GitHub token to create an issue\n  const ghToken = Deno.env.get(\"GITHUB_TOKEN\");\n  await fetch(\\`https://api.github.com/repos/...\\`, {\n    method: \"POST\",\n    headers: { Authorization: \\`Bearer \\${ghToken}\\` },\n    body: JSON.stringify({\n      title: event.title,\n      body: event.description,\n    })\n  });\n\n  // 4. Confirm back to the startup\n  return c.json({ synced: true });\n});`}

\n\n

\n \n

What the Startup Ships

The startup publishes this as a public Val Town template. Their docs say:

Go to val.town/x/acme/github-sync and click Remix
Set your STARTUP_API_TOKEN env var (find it in Settings → API)
Set your GITHUB_TOKEN env var (create a PAT at github.com/settings/tokens)
Copy your val's endpoint URL into AcmeStartup → Settings → Webhooks
Done! Events now sync automatically. Customize the code however you like.

\n \n );\n}\n\ncreateRoot(document.getElementById(\"root\")).render();\n",[],[164,219],["D",1775849765673],[],[164,65],"b4737c66-3513-11f1-bc2f-42b51c65c3df",["D",1775849417321],"directory",[176,177,178],[164],["D",1775849159730],["D",1789509672838],{"_11":12,"_133":70},{"_11":12,"_129":-5,"_69":70,"_30":68,"_130":131,"_132":24},{"_39":120,"_13":16,"_33":36,"_121":81,"_122":-5,"_123":-5,"_124":-5,"_125":-5,"_126":-5,"_127":14,"_128":12},"ctx",{"_53":-5,"_152":271,"_272":273,"_274":275,"_276":24,"_277":24,"_278":24,"_279":94,"_280":-5,"_281":-7,"_282":-7,"_283":26,"_284":24,"_285":24,"_286":-5,"_287":24,"_288":24,"_289":24,"_290":-5},"ENV",{"_242":243,"_244":245,"_246":16,"_247":248,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · index.html