[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_167":168,"_169":170},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_113":114,"_33":-7,"_115":-5,"_17":116,"_117":118,"_119":120,"_121":122,"_123":124,"_46":-5,"_125":-5,"_126":-5,"_127":24,"_128":129,"_130":75,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.history",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-5},"handle","soremo","name","Stundenplan","branchName","main","project",{"_27":64,"_13":14,"_31":65,"_66":-5,"_67":24,"_68":69,"_70":69,"_71":-5,"_72":-5,"_25":61,"_73":56,"_74":75,"_76":75,"_77":-5,"_78":79,"_34":35,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_44":93,"_94":95,"_96":97,"_98":24},"page",1,"history",[26],"hasNext",false,"userId",{"_27":28,"_29":30,"_31":32,"_33":20,"_34":35,"_36":-5,"_37":-5,"_38":-5,"_39":-5,"_40":-5,"_41":-5,"_42":-5,"_43":-5,"_44":45,"_46":47,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":53},"id","c3f5b892-b026-11f0-89c2-0224a6c84d84","branchId","c3ee8a9a-b026-11f0-89c2-0224a6c84d84","createdAt",["D",1761234099104],"version","orgId","c29954f2-52fb-4a15-9575-096b30301bff","parentId","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","clientLabel","user",{"_27":61,"_34":35,"_11":12,"_62":63},"file",{"_55":56,"_13":57,"_58":59,"_60":24},"pull","merge","revert","multiple","commits",[54],{"_27":28,"_29":30,"_31":32,"_33":20,"_34":35,"_36":-5,"_37":-5,"_38":-5,"_39":-5,"_40":-5,"_41":-5,"_42":-5,"_43":-5,"_44":45,"_46":47,"_48":-5,"_49":-5,"_50":-5},"fileId","c3f23e38-b026-11f0-89c2-0224a6c84d84","main.ts","fileType","script","deleted","5d48cd83-4af1-4c6d-bbb2-a55ca600b9b7","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJkWFlhZDJOamZwZmMzS1U0Y2dIM2RzSWxTVSJ9","c3edf2e2-b026-11f0-89c2-0224a6c84d84",["D",1761234099081],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_112":63},"org",{"_11":12,"_108":-5,"_62":63,"_25":61,"_109":110,"_111":24},"branch",{"_33":99,"_13":16,"_27":30,"_100":64,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned",33,"projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","tier","free","canRestrictVals","profileImageUrl","path","","adoptOrgId",{"_27":64,"_13":14,"_31":163,"_66":-5,"_67":24,"_68":69,"_70":69,"_71":-5,"_72":-5,"_25":61,"_73":56,"_74":75,"_76":75,"_77":-5,"_78":79,"_34":35,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_44":164,"_94":165,"_96":166,"_98":24},"tree",[158],"files",[158],"counts",{"_147":79,"_148":20,"_149":79,"_150":151,"_152":153},"contents",[135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_27":136,"_13":57,"_55":56,"_36":-5,"_29":30,"_137":99,"_138":75,"_31":139,"_33":140,"_58":141,"_142":143,"_60":24,"_144":145,"_113":146},"4f5eb241-98b9-4f30-b340-26499dce2da8","branchVersion","latest",["D",1789369559602],32,"http","content","import { Hono } from \"npm:hono@3\";\nimport ical from \"npm:ical-generator@9\";\n\n// ── Konfiguration ──────────────────────────────────────────────\nconst SCHOOL = Deno.env.get(\"untis_school\")!;\nconst USER = Deno.env.get(\"untis_user\")!;\nconst PASSWORD = Deno.env.get(\"untis_password\")!;\nconst BASEURL = Deno.env.get(\"untis_baseurl\")!;\nconst ACCESS_TOKEN = Deno.env.get(\"untis_access_token\") ?? \"\";\n\nconst ORIGIN = `https://${BASEURL}`;\n\n// WebUntis element types (durchgängig verwendete Konvention)\nconst TYPE = { CLASS: 1, TEACHER: 2, SUBJECT: 3, ROOM: 4, STUDENT: 5 } as const;\n\n// ── Zugriffsschutz ────────────────────────────────────────────\n// Gilt für ALLE Endpunkte inkl. /calendar.ics - die Daten dahinter\n// sind personenbezogen, nicht nur die Debug-Routen.\nfunction requireToken(c: any): Response | null {\n if (ACCESS_TOKEN && c.req.query(\"token\") !== ACCESS_TOKEN) {\n return c.text(\"forbidden\", 403);\n }\n return null;\n}\n\n// ── Cookie-Jar ────────────────────────────────────────────────\nclass CookieJar {\n private jar = new Map();\n\n absorb(res: Response) {\n const raw = typeof res.headers.getSetCookie === \"function\"\n ? res.headers.getSetCookie()\n : (res.headers.get(\"set-cookie\") ? [res.headers.get(\"set-cookie\")!] : []);\n for (const line of raw) {\n const [pair] = line.split(\";\");\n const idx = pair.indexOf(\"=\");\n if (idx > -1) {\n this.jar.set(pair.slice(0, idx).trim(), pair.slice(idx + 1).trim());\n }\n }\n }\n\n get(name: string): string | undefined {\n return this.jar.get(name);\n }\n\n keys(): string[] {\n return [...this.jar.keys()];\n }\n\n header(): string {\n return [...this.jar.entries()].map(([k, v]) => `${k}=${v}`).join(\"; \");\n }\n}\n\n// ── WebUntis REST Client ─────────────────────────────────────\n// Nur Cookie-Login (JSESSIONID) - kein JWT/tenant-id nötig, da sowohl\n// /api/app/config als auch /api/public/timetable/weekly/data mit\n// Session-Cookies auskommen.\nclass WebUntisRest {\n private jar = new CookieJar();\n\n async login() {\n const priming = await fetch(`${ORIGIN}/WebUntis/api/app/config`);\n this.jar.absorb(priming);\n const csrfToken = this.jar.get(\"XSRF-TOKEN\") ??\n this.jar.get(\"Authorization\");\n\n const loginRes = await fetch(`${ORIGIN}/WebUntis/j_spring_security_check`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Cookie\": this.jar.header(),\n },\n body: new URLSearchParams({\n j_username: USER,\n j_password: PASSWORD,\n school: SCHOOL,\n ...(csrfToken ? { token: csrfToken } : {}),\n }),\n redirect: \"manual\",\n });\n this.jar.absorb(loginRes);\n\n // JSESSIONID existiert schon vor dem Login (anonyme Session) - taugt\n // nicht als Erfolgskriterium. Stattdessen das Redirect-Ziel prüfen:\n // Erfolg -> \"/WebUntis/index.do\", Fehlschlag -> zurück zu webuntis.com\n // mit einem \"hint=...\"-Parameter.\n const location = loginRes.headers.get(\"location\") ?? \"\";\n if (\n loginRes.status !== 302 || location.includes(\"hint=\") ||\n location.includes(\"webuntis.com\")\n ) {\n throw new Error(\n `Login fehlgeschlagen (Status ${loginRes.status}, Redirect: ${\n location || \"keiner\"\n })`,\n );\n }\n }\n\n // Liste der zugänglichen Personen (Kinder). Quelle: webuntis-api-docs, GET /api/app/config\n async getPersons(): Promise<{ id: number; type: number }[]> {\n const res = await fetch(`${ORIGIN}/WebUntis/api/app/config`, {\n headers: { \"Cookie\": this.jar.header() },\n });\n if (!res.ok) {\n throw new Error(`app/config -> ${res.status} ${await res.text()}`);\n }\n const json = await res.json();\n return json?.data?.loginServiceConfig?.user?.persons ?? [];\n }\n\n // Eine einzelne Woche abrufen. date = Montag der Woche, ISO-Format (yyyy-MM-dd) -\n // dieser Endpunkt weicht damit vom sonst üblichen yyyyMMdd-Format ab.\n async getWeek(\n elementType: number,\n elementId: string,\n mondayIso: string,\n formatId = 1,\n ) {\n const params = new URLSearchParams({\n elementType: String(elementType),\n elementId,\n date: mondayIso,\n formatId: String(formatId),\n });\n const res = await fetch(\n `${ORIGIN}/WebUntis/api/public/timetable/weekly/data?${params}`,\n { headers: { \"Cookie\": this.jar.header() } },\n );\n if (!res.ok) {\n throw new Error(`weekly/data -> ${res.status} ${await res.text()}`);\n }\n const json = await res.json();\n if (json?.data?.result?.data?.isSessionTimeout) {\n throw new Error(\n \"Session abgelaufen (isSessionTimeout) - Login erneut nötig\",\n );\n }\n return json?.data?.result?.data;\n }\n}\n\n// ── Zeit-Helper ───────────────────────────────────────────────\nfunction berlinLocalToDate(\n y: number,\n m: number,\n d: number,\n hhmm: number,\n): Date {\n const hh = Math.floor(hhmm / 100);\n const mm = hhmm % 100;\n return new Date(Date.UTC(y, m - 1, d, hh, mm));\n}\n\nfunction parseUntisDate(yyyymmdd: number): [number, number, number] {\n const s = String(yyyymmdd);\n return [Number(s.slice(0, 4)), Number(s.slice(4, 6)), Number(s.slice(6, 8))];\n}\n\n// UTC-konsistent, damit die Berechnung unabhängig von der Zeitzone des\n// Deno-Prozesses immer denselben Montag liefert wie isoDate().\nfunction mondayOf(date: Date): Date {\n const day = date.getUTCDay();\n const diff = day === 0 ? -6 : 1 - day;\n const d = new Date(\n Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate()),\n );\n d.setUTCDate(d.getUTCDate() + diff);\n return d;\n}\n\nfunction isoDate(d: Date) {\n return d.toISOString().slice(0, 10);\n}\n\n// ── Mapping: Period + Elements-Lookup -> iCal-Event ─────────────\nfunction buildElementLookup(elements: any[]) {\n const map = new Map();\n for (const el of elements ?? []) map.set(`${el.type}-${el.id}`, el);\n return map;\n}\n\nfunction resolveElement(\n period: any,\n lookup: Map,\n type: number,\n): string {\n const match = period.elements?.find((e: any) => e.type === type);\n if (!match) return \"\";\n const def = lookup.get(`${type}-${match.id}`);\n const name = def?.longName || def?.displayname || def?.name || \"\";\n if (match.orgId && match.orgId !== match.id) {\n const orgDef = lookup.get(`${type}-${match.orgId}`);\n const orgName = orgDef?.longName || orgDef?.displayname || orgDef?.name ||\n \"\";\n if (orgName && orgName !== name) return `${orgName} → ${name}`;\n }\n return name;\n}\n\nfunction mapPeriodToEvent(period: any, lookup: Map) {\n const [y, m, d] = parseUntisDate(period.date);\n const start = berlinLocalToDate(y, m, d, period.startTime);\n const end = berlinLocalToDate(y, m, d, period.endTime);\n\n const subject = resolveElement(period, lookup, TYPE.SUBJECT) ||\n period.lessonText || \"Unterricht\";\n const teacher = resolveElement(period, lookup, TYPE.TEACHER);\n const room = resolveElement(period, lookup, TYPE.ROOM);\n\n const cellState: string = period.cellState ?? \"STANDARD\";\n const prefix = cellState.includes(\"CANCEL\")\n ? \"❌ \"\n : cellState.includes(\"SUBSTITUTION\")\n ? \"🔄 \"\n : cellState === \"EXAM\"\n ? \"📝 \"\n : \"\";\n\n return {\n start,\n end,\n summary: `${prefix}${subject}`,\n location: room || \"Unbekannter Ort\",\n description: [\n teacher ? `Lehrer: ${teacher}` : null,\n period.substText ? `Info: ${period.substText}` : null,\n period.periodInfo ? `Hinweis: ${period.periodInfo}` : null,\n period.periodText ? `Text: ${period.periodText}` : null,\n ].filter(Boolean).join(\"\\n\"),\n };\n}\n\n// ── HTTP-App ──────────────────────────────────────────────────\nconst app = new Hono();\n\napp.get(\"/students\", async (c) => {\n const denied = requireToken(c);\n if (denied) return denied;\n\n const client = new WebUntisRest();\n await client.login();\n return c.json({ persons: await client.getPersons() });\n});\n\napp.get(\"/calendar.ics\", async (c) => {\n const denied = requireToken(c);\n if (denied) return denied;\n\n const studentId = c.req.query(\"student\");\n const classId = c.req.query(\"class\");\n const label = c.req.query(\"name\") ?? \"WebUntis\";\n const weeks = parseInt(c.req.query(\"weeks\") ?? \"3\", 10);\n\n if (!studentId && !classId) {\n return c.json({\n error:\n \"Bitte ?student= oder ?class= angeben. IDs via /students finden.\",\n }, 400);\n }\n const elementType = studentId ? TYPE.STUDENT : TYPE.CLASS;\n const elementId = studentId ?? classId!;\n\n const client = new WebUntisRest();\n try {\n await client.login();\n\n const calendar = ical({\n name: `Stundenplan ${label}`,\n timezone: \"Europe/Berlin\",\n });\n const thisMonday = mondayOf(new Date());\n\n for (let i = 0; i < weeks; i++) {\n const monday = new Date(thisMonday);\n monday.setUTCDate(monday.getUTCDate() + i * 7);\n\n const weekData = await client.getWeek(\n elementType,\n elementId,\n isoDate(monday),\n );\n const lookup = buildElementLookup(weekData?.elements);\n const periods = weekData?.elementPeriods?.[elementId] ?? [];\n\n for (const period of periods) {\n calendar.createEvent(mapPeriodToEvent(period, lookup));\n }\n }\n\n return new Response(calendar.toString(), {\n headers: {\n \"Content-Type\": \"text/calendar; charset=utf-8\",\n \"Content-Disposition\": 'inline; filename=\"calendar.ics\"',\n },\n });\n } catch (err) {\n console.error(err);\n return c.json({ error: String(err) }, 502);\n }\n});\n\napp.get(\"/debug/week\", async (c) => {\n const denied = requireToken(c);\n if (denied) return denied;\n\n const studentId = c.req.query(\"student\");\n const classId = c.req.query(\"class\");\n if (!studentId && !classId) {\n return c.json({ error: \"?student= oder ?class= nötig\" }, 400);\n }\n\n const client = new WebUntisRest();\n await client.login();\n const monday = isoDate(mondayOf(new Date()));\n const data = await client.getWeek(\n studentId ? TYPE.STUDENT : TYPE.CLASS,\n studentId ?? classId!,\n monday,\n );\n return c.json(data);\n});\n\napp.get(\"/debug/login\", async (c) => {\n const denied = requireToken(c);\n if (denied) return denied;\n\n const jar = new CookieJar();\n const steps: any[] = [];\n\n const priming = await fetch(`${ORIGIN}/WebUntis/api/app/config`);\n jar.absorb(priming);\n steps.push({\n step: \"priming GET /api/app/config\",\n status: priming.status,\n cookiesSoFar: jar.keys(),\n bodySnippet: (await priming.text()).slice(0, 300),\n });\n\n const csrfToken = jar.get(\"XSRF-TOKEN\") ?? jar.get(\"Authorization\");\n\n const loginRes = await fetch(`${ORIGIN}/WebUntis/j_spring_security_check`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Cookie\": jar.header(),\n },\n body: new URLSearchParams({\n j_username: USER,\n j_password: PASSWORD,\n school: SCHOOL,\n ...(csrfToken ? { token: csrfToken } : {}),\n }),\n redirect: \"manual\",\n });\n jar.absorb(loginRes);\n steps.push({\n step: \"POST /j_spring_security_check\",\n status: loginRes.status,\n location: loginRes.headers.get(\"location\"),\n cookiesSoFar: jar.keys(),\n bodySnippet: (await loginRes.text()).slice(0, 300),\n });\n\n return c.json({ csrfTokenFound: !!csrfToken, steps });\n});\n\nexport default app.fetch;","label","stundenplan",[57],"pulls","branches","forks","envVars",{"_154":156,"_157":79},"connections",{"_154":79,"_155":79},"count","unfilledCount",5,"emptyCount",{"_27":136,"_13":57,"_55":56,"_36":-5,"_29":30,"_137":99,"_138":75,"_31":159,"_33":140,"_58":141,"_142":143,"_60":24,"_144":145,"_160":161,"_113":162},["D",1789369559602],"children",[],[57],["D",1761234099081],{"_11":12,"_112":63},{"_11":12,"_108":-5,"_62":63,"_25":61,"_109":110,"_111":24},{"_33":99,"_13":16,"_27":30,"_100":64,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_44":-5,"_132":200,"_201":202,"_203":204,"_205":24,"_206":24,"_207":24,"_208":75,"_209":-5,"_210":-7,"_211":-7,"_212":79,"_213":24,"_214":24,"_215":-5,"_216":24,"_217":24,"_218":24,"_219":-5},"ENV",{"_171":172,"_173":174,"_175":16,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History