\n \n Remixable Integration Template\n

How a startup can ship a Val Town template that connects their product to GitHub

\n \n Interactive Demo — No real API calls\n

\n\n

\n \n \n \n

\n\n {tab === \"demo\" && }\n {tab === \"architecture\" && }\n {tab === \"code\" && }\n\n \n

\n );\n}\n\nfunction DemoTab({ authStatus, events, pushResults, pushing, onPush }) {\n return (\n <>\n

\n \n \n This is a simulated demo. In production, the user would connect real accounts.\n Click \"Push to GitHub\" to see what would happen.\n \n

\n\n {/* Connections */}\n

Connected Accounts

\n\n {authStatus && (\n <>\n

\n $\"avatar\"$ \n

{authStatus.github.user.login}

{authStatus.github.user.repos.length} repos accessible

\n \n Connected\n \n

\n\n

\n \n

AcmeStartup

{authStatus.startup.user.workspace} · {authStatus.startup.user.plan} plan

\n \n Connected\n \n

\n \n )}\n

\n\n {/* Events */}\n

Pending Actions from AcmeStartup

\n\n {events.map((event) => (\n

\n {event.type === \"issue_created\" && <> Issue}\n {event.type === \"deploy_triggered\" && <> Deploy}\n {event.type === \"file_sync\" && <> File Sync}\n

{event.title}

{event.description}

\n \n octocat/{event.repo}\n

\n onPush(event.id)}\n disabled={pushing[event.id] || !!pushResults[event.id]}\n >\n {pushing[event.id]\n ? <> Pushing...\n : pushResults[event.id]\n ? <> Pushed\n : <> Push to GitHub}\n \n

\n\n {pushResults[event.id] && (\n

{pushResults[event.id].message}

\n Here's what would happen with real API tokens:\n

\n {Object.entries(pushResults[event.id].whatWouldHappen).map(([key, value]) => (\n

{key.replace(\"step\", \"\")}

{value}

\n ))}\n

\n )}\n

\n ))}\n

\n \n );\n}\n\nfunction ArchitectureTab() {\n return (\n <>\n

\n \n

How the Pieces Fit Together

\n\n

{\n`┌─────────────────┐ ┌──────────────────┐ ┌─────────────────┐\n│ │ │ │ │ │\n│ AcmeStartup │────────▶│ This Val Town │────────▶│ GitHub API │\n│ (Product UI) │ webhook │ Template │ OAuth │ (User's Repos) │\n│ │ │ │ token │ │\n└─────────────────┘ └──────────────────┘ └─────────────────┘\n │\n User clicks \"Sync\" Uses BOTH tokens:\n in AcmeStartup UI • STARTUP_API_TOKEN → read event data\n • GITHUB_TOKEN → create issues/PRs/commits`\n }

\n\n

\n \n

User Journey

\n\n

\n {[\n { label: \"1. Remix the Template\", detail: \"User clicks \\\"Use this template\\\" from the startup's docs. Gets their own copy on Val Town.\" },\n { label: \"2. Connect GitHub\", detail: \"OAuth flow grants the val a token to act on the user's GitHub repos. Token stored as env var.\" },\n { label: \"3. Add Startup API Key\", detail: \"User grabs their API key from AcmeStartup's dashboard, pastes it as an env var.\" },\n { label: \"4. Configure Webhook\", detail: \"User copies this val's endpoint URL into AcmeStartup's webhook settings.\" },\n { label: \"5. It Just Works ✨\", detail: \"When events happen in AcmeStartup, this val bridges them to GitHub automatically.\" },\n ].map((s) => (\n

{s.label}

{s.detail}

\n ))}\n

\n\n

\n \n

Required Environment Variables

\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

Variable	Source	Purpose
`GITHUB_TOKEN`	GitHub OAuth flow	Create issues, PRs, commits on user's repos
`STARTUP_API_TOKEN`	AcmeStartup dashboard	Read events, mark as synced
`WEBHOOK_SECRET`	Generated at setup	Verify incoming webhooks are legit

\n \n );\n}\n\nfunction CodeTab() {\n return (\n <>\n

\n \n

Why This Pattern is Powerful

For the startup: You ship a template, not infrastructure. No need to build GitHub integration into your core product. Users remix the val and own their own integration — you just document the webhook format.

\n
\n

For the user: Full control. They can see the code, customize the behavior, add filtering logic, route different events to different repos. It's their code running in their Val Town account.

\n
\n

For everyone: Tokens stay with the user. The startup never sees the user's GitHub token. The user never gives the startup write access to their repos.

\n\n

GitHub Auth: Two Approaches

\n\n

\n Option A: GitHub OAuth App (Recommended)\n

\n The startup registers a GitHub OAuth App. Users go through the flow and the val stores the token.\n

{\n`// Hono route that kicks off GitHub OAuth\napp.get(\"/auth/github\", (c) => {\n  const url = \\`https://github.com/login/oauth/authorize\\`\n    + \\`?client_id=\\${Deno.env.get(\"GITHUB_CLIENT_ID\")}\\`\n    + \\`&scope=repo\\`\n  return c.redirect(url);\n});`}

\n\n

\n Option B: Personal Access Token (Simpler)\n

\n User generates a GitHub PAT and pastes it as an env var. Easier setup, less code.\n

{\n`// Just read it from env vars\nconst githubToken = Deno.env.get(\"GITHUB_TOKEN\");\n\n// Then use it to create an issue\nawait fetch(\\`https://api.github.com/repos/\\${owner}/\\${repo}/issues\\`, {\n  method: \"POST\",\n  headers: { Authorization: \\`Bearer \\${githubToken}\\` },\n  body: JSON.stringify({ title, body })\n});`}

\n\n

The Webhook Handler (Core Logic)

\n\n

\n This is the heart of the integration. The startup's product sends a webhook, and this val bridges it to GitHub.\n

\n\n

{\n`// POST /api/webhook — called by AcmeStartup\napp.post(\"/api/webhook\", async (c) => {\n  // 1. Verify the webhook signature\n  const sig = c.req.header(\"x-acme-signature\");\n  if (!verifySignature(sig, body))\n    return c.json({ error: \"Invalid\" }, 401);\n\n  // 2. Parse the event from the startup\n  const event = await c.req.json();\n\n  // 3. Use the GitHub token to create an issue\n  const ghToken = Deno.env.get(\"GITHUB_TOKEN\");\n  await fetch(\\`https://api.github.com/repos/...\\`, {\n    method: \"POST\",\n    headers: { Authorization: \\`Bearer \\${ghToken}\\` },\n    body: JSON.stringify({\n      title: event.title,\n      body: event.description,\n    })\n  });\n\n  // 4. Confirm back to the startup\n  return c.json({ synced: true });\n});`}

\n\n

\n \n

What the Startup Ships

The startup publishes this as a public Val Town template. Their docs say:

Go to val.town/x/acme/github-sync and click Remix
Set your STARTUP_API_TOKEN env var (find it in Settings → API)
Set your GITHUB_TOKEN env var (create a PAT at github.com/settings/tokens)
Copy your val's endpoint URL into AcmeStartup → Settings → Webhooks
Done! Events now sync automatically. Customize the code however you like.

\n \n );\n}\n\ncreateRoot(document.getElementById(\"root\")).render();\n",[],[154,194],"8416533a-3514-11f1-a0a4-42b51c65c3df","index.html","c86ea466-3513-11f1-8b46-42b51c65c3df",10,["D",1775849765673],"\n\n\n \n \n Remixable Integration Demo\n \n \n\n\n

\n \n \n\n\n",[],[154,201],["D",1775849417321],[169,170,171],[154],["D",1775849159730],["D",1789509672838],{"_11":12,"_91":87},{"_11":12,"_85":-5,"_86":87,"_45":46,"_88":89,"_90":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_80":-5,"_81":-5,"_82":-5,"_83":14,"_84":12},"ctx",{"_73":-5,"_113":249,"_250":251,"_252":253,"_254":38,"_255":38,"_256":38,"_257":50,"_258":-5,"_259":-7,"_260":-7,"_261":54,"_262":38,"_263":38,"_264":-5,"_265":38,"_266":38,"_267":38,"_268":-5},"ENV",{"_220":221,"_222":223,"_224":26,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240,"_241":242,"_243":244,"_245":246,"_247":248},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1