[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_277":278,"_279":280},"routes/_app.x.$handle.$name",{"_94":93,"_31":43,"_103":84,"_26":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":24,"_118":119,"_120":121,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":-5,"_51":-5,"_18":52,"_53":-5,"_54":24,"_55":-5,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":24},"version",68,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":20,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","docs/label_overdue.md","latestPath","fileId","b4e9e90e-50d5-11f1-a37b-ee650bb23af1","name","label_overdue.md","fileType","content","# `label_overdue.ts` internals\n\nMarks tasks whose `Due` date is in the past and whose `Status` is still in a\n\"not started\" or \"in progress\" flavor as `Overdue`. Runs over every DS in\n`NOTION_TASK_DATA_SOURCE_IDS`.\n\n## Trigger model\n\nDefault export is wrapped in `asTrigger`, so the same file works as either:\n\n- **Cron** — Val Town calls it with no `Request`; result is logged as JSON.\n- **HTTP** — Val Town passes a `Request`; result is returned as a JSON `Response`.\n\nNo authentication. Intended for cron; HTTP entrypoint exists for manual runs.\n\n## Status categorization\n\n`Status` option names vary across data sources, so the util classifies each\noption name (lowercased) against three variation arrays:\n\n- `NOT_STARTED_VARIATIONS` — `not started`, `todo`, `backlog`, `on hold`, etc.\n- `IN_PROGRESS_VARIATIONS` — `in progress`, `doing`, `active`, etc.\n- `DONE_VARIATIONS` — `done`, `complete`, `cancelled`, `archived`, etc.\n\nThe literal `Overdue` value is treated as `done` (so re-running is idempotent).\nAny option not matching a known variation is logged as a warning and skipped —\nadd it to the appropriate array to onboard a new DS dialect.\n\nThe filter sent to Notion includes only the options that classify as\n`notStarted` or `inProgress`, so the query stays scoped.\n\n## Date filter\n\nToday's date is computed in `America/Chicago` via `Intl.DateTimeFormat` with\n`en-CA` locale (yields `YYYY-MM-DD`). The Notion filter uses `date.before`\nagainst this string. A second client-side date check (`pageDate >= todayLocal`)\nguards against edge-of-day timezone slippage on the Notion side.\n\n## Per-DS error handling\n\nEach DS is processed in sequence with a `sleep()` between DSes. If one DS\nthrows (auth error, missing `Status` property, all-unknown options), the error\nis logged with DS ID context and re-thrown — the whole run fails fast rather\nthan silently skipping a DS.\n\n## Required Notion setup\n\n- Every Tasks DS in `NOTION_TASK_DATA_SOURCE_IDS` has a `Status` status\n property with at least one option matching a `notStarted` or `inProgress`\n variation, plus an `Overdue` option.\n- A `Due` date property exists on each DS.\n- The integration is shared into every Tasks DS.\n","createdAt",["D",1778901421844],"branchVersion","branchId","4a40a52a-f342-11f0-91a6-42dde27851f2","id","4a406718-f342-11f0-91a6-42dde27851f2","notion-boyfriend",["D",1768612648758],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","a5b8fb7d-21dd-4391-9e7f-f978928b84b1","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","b8c6ab11-9ba1-4b1d-9c73-811c08658cd9","tursoName","4a406718f34211f091a642dde27851f2","tursoHostname","4a406718f34211f091a642dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789527031073],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_94":93,"_102":98},"org",{"_94":93,"_95":96,"_97":98,"_18":52,"_99":100,"_101":24},"branch",{"_13":14,"_31":84,"_41":40,"_85":42,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":43,"_92":93},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","winnie","handle","displayName","gwyneth windflower","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/32762059-e695-4627-e5a0-de97717e8c00/square512?exp=1789534799&sig=1c9212202e74ca1a0ec1c832c87d8c4be0b7b51db36bc3a2f4dc1140d9ed065d","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":272,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":-5,"_51":-5,"_18":52,"_53":-5,"_54":24,"_55":-5,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":64,"_65":273,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":274,"_79":275,"_81":276,"_83":24},"tree",[201,206,208,209,210,211,212],"files",[201,202,203,204,205,206,207,208,209,210,211,212],"counts",{"_191":58,"_192":150,"_193":58,"_194":195,"_196":197},"contents",[126,127,128,129,130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_41":185,"_31":186,"_29":187,"_136":-5,"_39":40,"_38":188,"_138":121,"_36":189,"_13":58,"_33":183,"_34":-5,"_23":24,"_143":-5,"_26":190},{"_41":178,"_31":179,"_29":180,"_136":-5,"_39":40,"_38":181,"_138":121,"_36":182,"_13":58,"_33":183,"_34":-5,"_23":24,"_143":-5,"_26":184},{"_41":170,"_31":171,"_29":172,"_136":-5,"_39":40,"_38":173,"_138":121,"_36":174,"_13":175,"_33":20,"_34":176,"_23":24,"_143":-5,"_26":177},{"_41":162,"_31":163,"_29":164,"_136":-5,"_39":40,"_38":165,"_138":121,"_36":166,"_13":167,"_33":20,"_34":168,"_23":24,"_143":-5,"_26":169},{"_41":153,"_31":154,"_29":155,"_136":-5,"_39":40,"_38":156,"_138":121,"_36":157,"_13":158,"_33":159,"_34":160,"_23":24,"_143":-5,"_26":161},{"_41":145,"_31":146,"_29":147,"_136":-5,"_39":40,"_38":148,"_138":121,"_36":149,"_13":150,"_33":20,"_34":151,"_23":24,"_143":-5,"_26":152},{"_41":133,"_31":134,"_29":135,"_136":-5,"_39":40,"_38":137,"_138":121,"_36":139,"_13":140,"_33":141,"_34":142,"_23":24,"_143":-5,"_26":144},"3756a69e-501c-11f1-87d4-ee650bb23af1","label_overdue.ts","4a429b14-f342-11f0-91a6-42dde27851f2","parentId",53,"latest",["D",1778821754224],42,"interval","import {\n APIResponseError,\n isFullPage,\n iteratePaginatedAPI,\n} from \"npm:@notionhq/client@5.21.0\";\nimport type { PageObjectResponse } from \"npm:@notionhq/client@5.21.0\";\n\nimport {\n asTrigger,\n makeNotionClient,\n requireEnvList,\n sleep,\n} from \"./shared/notion.ts\";\n\nconst notion = makeNotionClient();\n\nconst DUE_PROPERTY_NAME = \"Due\";\nconst STATUS_PROPERTY_NAME = \"Status\";\n// Set up conditional formatting in Notion on this value to highlight rows in red.\nconst OVERDUE_STATUS_NAME = \"Overdue\";\nconst TIMEZONE = \"America/Chicago\";\n\n// Status name variations across data sources. Matching is case-insensitive.\nconst NOT_STARTED_VARIATIONS = [\n \"not started\",\n \"todo\",\n \"to-do\",\n \"to do\",\n \"backlog\",\n \"waiting\",\n \"hold\",\n \"on hold\",\n];\nconst IN_PROGRESS_VARIATIONS = [\"in progress\", \"doing\", \"working\", \"active\"];\nconst DONE_VARIATIONS = [\n \"done\",\n \"complete\",\n \"completed\",\n \"cancelled\",\n \"canceled\",\n \"archived\",\n];\n\nfunction formatDateInTimeZoneYYYYMMDD(date: Date, timeZone: string): string {\n const dtf = new Intl.DateTimeFormat(\"en-CA\", {\n timeZone,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n });\n return dtf.format(date);\n}\n\nfunction categorizeStatus(\n name: string,\n): \"notStarted\" | \"inProgress\" | \"done\" | \"unknown\" {\n const lower = name.toLowerCase();\n if (NOT_STARTED_VARIATIONS.includes(lower)) return \"notStarted\";\n if (IN_PROGRESS_VARIATIONS.includes(lower)) return \"inProgress\";\n if (DONE_VARIATIONS.includes(lower)) return \"done\";\n if (lower === OVERDUE_STATUS_NAME.toLowerCase()) return \"done\";\n return \"unknown\";\n}\n\nasync function getTargetStatusesForDataSource(\n dataSourceId: string,\n): Promise {\n const dataSource = await notion.dataSources.retrieve({\n data_source_id: dataSourceId,\n });\n\n // deno-lint-ignore no-explicit-any\n const properties = (dataSource as any).properties ?? {};\n const statusProp = properties[STATUS_PROPERTY_NAME];\n if (!statusProp || statusProp.type !== \"status\") {\n throw new Error(\n `Data source ${dataSourceId} has no \"${STATUS_PROPERTY_NAME}\" status property. ` +\n `Available properties: ${Object.keys(properties).join(\", \")}`,\n );\n }\n\n const options: { name: string }[] = statusProp.status?.options ?? [];\n if (options.length === 0) {\n throw new Error(\n `Data source ${dataSourceId}: \"${STATUS_PROPERTY_NAME}\" property has no status options configured.`,\n );\n }\n\n const targetStatuses: string[] = [];\n const unknownStatuses: string[] = [];\n\n for (const option of options) {\n const category = categorizeStatus(option.name);\n if (category === \"notStarted\" || category === \"inProgress\") {\n targetStatuses.push(option.name);\n } else if (category === \"unknown\") {\n unknownStatuses.push(option.name);\n }\n }\n\n if (unknownStatuses.length > 0) {\n console.warn(\n `Data source ${dataSourceId}: unrecognized status option(s): ${\n unknownStatuses.map((s) => `\"${s}\"`).join(\", \")\n }. Add them to the variation arrays so they can be properly categorized.`,\n );\n }\n\n if (targetStatuses.length === 0) {\n throw new Error(\n `Data source ${dataSourceId}: none of the status options match a \"not started\" or \"in progress\" variation. ` +\n `Options found: ${options.map((o) => `\"${o.name}\"`).join(\", \")}.`,\n );\n }\n\n return targetStatuses;\n}\n\nfunction buildStatusFilter(targetStatuses: string[]) {\n return {\n or: targetStatuses.map((status) => ({\n property: STATUS_PROPERTY_NAME,\n status: { equals: status },\n })),\n };\n}\n\nasync function labelOverdueInDataSource(\n dataSourceId: string,\n): Promise<{ updated: number }> {\n const targetStatuses = await getTargetStatusesForDataSource(dataSourceId);\n console.log(\n `Data source ${dataSourceId}: filtering for statuses: ${\n targetStatuses.map((s) => `\"${s}\"`).join(\", \")\n }`,\n );\n\n const todayLocal = formatDateInTimeZoneYYYYMMDD(new Date(), TIMEZONE);\n let updated = 0;\n\n const queryParams = {\n data_source_id: dataSourceId,\n filter: {\n and: [\n { property: DUE_PROPERTY_NAME, date: { before: todayLocal } },\n buildStatusFilter(targetStatuses),\n ],\n },\n page_size: 100,\n };\n\n for await (\n const result of iteratePaginatedAPI(notion.dataSources.query, queryParams)\n ) {\n if (!isFullPage(result)) continue;\n const page = result as PageObjectResponse;\n\n const prop = page.properties[DUE_PROPERTY_NAME];\n if (prop?.type !== \"date\" || !prop.date?.start) continue;\n const pageDate = prop.date.start.slice(0, 10);\n if (pageDate >= todayLocal) continue;\n\n await notion.pages.update({\n page_id: page.id,\n properties: {\n [STATUS_PROPERTY_NAME]: { status: { name: OVERDUE_STATUS_NAME } },\n },\n });\n updated += 1;\n\n await sleep();\n }\n\n return { updated };\n}\n\nexport async function markNotionOverdueTasks(): Promise<\n { totalUpdated: number; perDataSource: Record }\n> {\n const taskDataSources = requireEnvList(\"NOTION_TASK_DATA_SOURCE_IDS\");\n\n let totalUpdated = 0;\n const perDataSource: Record = {};\n\n for (const dataSourceId of taskDataSources) {\n try {\n const { updated } = await labelOverdueInDataSource(dataSourceId);\n console.log(\n `Data source ${dataSourceId}: updated ${updated} page(s) to '${OVERDUE_STATUS_NAME}'.`,\n );\n perDataSource[dataSourceId] = updated;\n totalUpdated += updated;\n } catch (err) {\n if (err instanceof APIResponseError) {\n console.error(\n `Data source ${dataSourceId}: Notion API error ${err.code} - ${err.message}`,\n );\n } else {\n console.error(\n `Data source ${dataSourceId}: ${\n err instanceof Error ? err.message : String(err)\n }`,\n );\n }\n throw err;\n }\n await sleep();\n }\n\n console.log(`Done. Total pages updated: ${totalUpdated}`);\n return { totalUpdated, perDataSource };\n}\n\nexport default asTrigger(markNotionOverdueTasks);\n","label",[134],"374f3f4e-501c-11f1-b202-ee650bb23af1","deno.json","5a3c8d84-fb46-11f0-a900-42dde27851f2",52,["D",1778821754197],1,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/98f62cee78e85bfc47c62ed703777c6bc8794f1c/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": true,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"include\": [\"deno:/https/esm.town/**/*\"],\n \"rules\": {\n \"exclude\": [\"no-explicit-any\"]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}\n",[146],"b4e3b9e4-50d5-11f1-96ff-ee650bb23af1","cascade_access.ts","37804666-501c-11f1-a08b-ee650bb23af1",67,["D",1778901421772],5,"http","import { APIResponseError } from \"npm:@notionhq/client@5.21.0\";\nimport type { PageObjectResponse } from \"npm:@notionhq/client@5.21.0\";\n\nimport { makeNotionClient, requireEnv, sleep } from \"./shared/notion.ts\";\n\nconst notion = makeNotionClient();\n\nconst TEAM_PROPERTY_NAME = \"Team\";\nconst ORG_TO_PROJECTS_RELATION = \"Projects\";\nconst PROJECT_TO_ORG_RELATION = \"Organization\";\nconst PROJECT_TO_TASKS_RELATION = \"Tasks\";\nconst TASK_TO_PROJECT_RELATION = \"Project\";\n\ntype DSId = string;\ntype PageId = string;\ntype UserId = string;\ntype Level = \"organization\" | \"project\" | \"task\";\ntype Outcome = \"updated\" | \"skipped\" | \"orphaned\";\n\nfunction readPeopleIds(page: PageObjectResponse, name: string): UserId[] {\n const prop = page.properties[name];\n if (!prop || prop.type !== \"people\") return [];\n // deno-lint-ignore no-explicit-any\n if ((prop as any).has_more) {\n throw new Error(\n `Page ${page.id}: \"${name}\" people property exceeds 25 entries (has_more=true). ` +\n `Util doesn't yet handle paginated property values.`,\n );\n }\n return prop.people.map((p: { id: string }) => p.id);\n}\n\nfunction readRelationIds(page: PageObjectResponse, name: string): PageId[] {\n const prop = page.properties[name];\n if (!prop || prop.type !== \"relation\") return [];\n // deno-lint-ignore no-explicit-any\n if ((prop as any).has_more) {\n throw new Error(\n `Page ${page.id}: \"${name}\" relation property exceeds 25 entries (has_more=true). ` +\n `Util doesn't yet handle paginated property values.`,\n );\n }\n return prop.relation.map((r: { id: string }) => r.id);\n}\n\nfunction setsEqual(a: Set, b: Set): boolean {\n if (a.size !== b.size) return false;\n for (const v of a) if (!b.has(v)) return false;\n return true;\n}\n\nfunction normalizeDsId(id: DSId): string {\n return id.replace(/-/g, \"\");\n}\n\nfunction makePageCache() {\n const cache = new Map();\n return async (id: PageId): Promise => {\n const hit = cache.get(id);\n if (hit) return hit;\n const fresh = await notion.pages.retrieve({ page_id: id }) as PageObjectResponse;\n cache.set(id, fresh);\n return fresh;\n };\n}\n\nasync function updateTeamFromParents(opts: {\n pageId: PageId;\n parentRelationName: string;\n label: string;\n getPage: (id: PageId) => Promise;\n}): Promise {\n const page = await opts.getPage(opts.pageId);\n const parentIds = readRelationIds(page, opts.parentRelationName);\n\n if (parentIds.length === 0) {\n console.warn(\n `${opts.label} ${opts.pageId}: no \"${opts.parentRelationName}\" relation set; ` +\n `Team will be cleared (no parent to inherit from).`,\n );\n }\n\n const desired = new Set();\n for (const pid of parentIds) {\n const parent = await opts.getPage(pid);\n for (const u of readPeopleIds(parent, TEAM_PROPERTY_NAME)) desired.add(u);\n }\n\n const current = new Set(readPeopleIds(page, TEAM_PROPERTY_NAME));\n if (setsEqual(current, desired)) return \"skipped\";\n\n await notion.pages.update({\n page_id: opts.pageId,\n properties: {\n [TEAM_PROPERTY_NAME]: {\n people: [...desired].map((id) => ({ object: \"user\", id })),\n },\n },\n });\n await sleep();\n return parentIds.length === 0 ? \"orphaned\" : \"updated\";\n}\n\ninterface ScopedCascadeResult {\n trigger: { level: Level; pageId: PageId };\n projects: { id: PageId; outcome: Outcome }[];\n tasks: { id: PageId; outcome: Outcome }[];\n}\n\nexport async function cascadeFromTrigger(\n triggerPageId: PageId,\n triggerDsId: DSId,\n): Promise {\n const orgDs = requireEnv(\"NOTION_ORGANIZATION_DATASOURCE_ID\");\n const projectDs = requireEnv(\"NOTION_PROJECT_DATASOURCE_ID\");\n const taskDs = requireEnv(\"NOTION_TASK_DATASOURCE_ID\");\n\n const trig = normalizeDsId(triggerDsId);\n let level: Level;\n if (trig === normalizeDsId(orgDs)) level = \"organization\";\n else if (trig === normalizeDsId(projectDs)) level = \"project\";\n else if (trig === normalizeDsId(taskDs)) level = \"task\";\n else {\n throw new Error(\n `Trigger from unknown data source ${triggerDsId}; expected one of ` +\n `${orgDs} (Organization), ${projectDs} (Project), ${taskDs} (Task).`,\n );\n }\n\n const getPage = makePageCache();\n const affectedProjects: PageId[] = [];\n const affectedTasks: PageId[] = [];\n\n if (level === \"organization\") {\n const org = await getPage(triggerPageId);\n const projectIds = readRelationIds(org, ORG_TO_PROJECTS_RELATION);\n affectedProjects.push(...projectIds);\n for (const pid of projectIds) {\n const proj = await getPage(pid);\n affectedTasks.push(...readRelationIds(proj, PROJECT_TO_TASKS_RELATION));\n }\n } else if (level === \"project\") {\n affectedProjects.push(triggerPageId);\n const proj = await getPage(triggerPageId);\n affectedTasks.push(...readRelationIds(proj, PROJECT_TO_TASKS_RELATION));\n } else {\n affectedTasks.push(triggerPageId);\n }\n\n console.log(\n `Trigger: ${level} ${triggerPageId} → ` +\n `${affectedProjects.length} project(s), ${affectedTasks.length} task(s)`,\n );\n\n const projects: { id: PageId; outcome: Outcome }[] = [];\n for (const pid of affectedProjects) {\n projects.push({\n id: pid,\n outcome: await updateTeamFromParents({\n pageId: pid,\n parentRelationName: PROJECT_TO_ORG_RELATION,\n label: \"Project\",\n getPage,\n }),\n });\n }\n\n const tasks: { id: PageId; outcome: Outcome }[] = [];\n for (const tid of affectedTasks) {\n tasks.push({\n id: tid,\n outcome: await updateTeamFromParents({\n pageId: tid,\n parentRelationName: TASK_TO_PROJECT_RELATION,\n label: \"Task\",\n getPage,\n }),\n });\n }\n\n return { trigger: { level, pageId: triggerPageId }, projects, tasks };\n}\n\n// ---------------------------------------------------------------------------\n// Webhook authentication\n// ---------------------------------------------------------------------------\n\n/** Constant-time string equality — avoids leaking the secret byte-by-byte via timing. */\nfunction safeEqual(a: string, b: string): boolean {\n const enc = new TextEncoder();\n const ab = enc.encode(a);\n const bb = enc.encode(b);\n if (ab.length !== bb.length) return false;\n let diff = 0;\n for (let i = 0; i < ab.length; i++) diff |= ab[i] ^ bb[i];\n return diff === 0;\n}\n\nfunction authorized(req: Request): boolean {\n const expected = requireEnv(\"NOTION_WEBHOOK_SECRET\");\n const received = req.headers.get(\"X-Notion-Webhook-Secret\");\n if (!received) return false;\n return safeEqual(received, expected);\n}\n\n/** Opaque 404 — no body, no signal that anything lives at this URL. */\nconst reject = () => new Response(null, { status: 404 });\n\n// ---------------------------------------------------------------------------\n// HTTP handler — accepts Notion \"Send webhook\" POSTs\n// ---------------------------------------------------------------------------\n\nexport default async function handler(req: Request): Promise {\n // Pre-screen: only POSTs with JSON bodies look like webhook traffic.\n // Everything else gets a bare 404 — scanners and stray GETs see nothing.\n if (req.method !== \"POST\") return reject();\n const contentType = req.headers.get(\"content-type\")?.split(\";\")[0].trim();\n if (contentType !== \"application/json\") return reject();\n\n if (!authorized(req)) return reject();\n\n const started = Date.now();\n\n try {\n const body = await req.json();\n const pageId: string | undefined = body?.data?.id;\n const dsId: string | undefined = body?.data?.parent?.data_source_id;\n if (!pageId || !dsId) {\n throw new Error(\n `Webhook payload missing data.id or data.parent.data_source_id`,\n );\n }\n\n const result = await cascadeFromTrigger(pageId, dsId);\n\n return new Response(\n JSON.stringify({\n ok: true,\n durationMs: Date.now() - started,\n result,\n }, null, 2),\n { headers: { \"content-type\": \"application/json; charset=utf-8\" } },\n );\n } catch (err) {\n const message = err instanceof APIResponseError\n ? `Notion API error ${err.code} - ${err.message}`\n : err instanceof Error\n ? err.message\n : String(err);\n console.error(message);\n return new Response(\n JSON.stringify({ ok: false, error: message }, null, 2),\n {\n status: 500,\n headers: { \"content-type\": \"application/json; charset=utf-8\" },\n },\n );\n }\n}\n",[154],"b4c4e26c-50d5-11f1-8846-ee650bb23af1","README.md","4e72bfec-f348-11f0-a98b-42dde27851f2",63,["D",1778901421609],6,"# 💁🏻‍♀️ Notion Boyfriend\n\nIf you're relatively new to programming, there's some helpful, more detailed\nexplainer stuff at the end of the README, so if anything's confusing you may\nfind answers there before you have to search around or talk to an LLM.\n\n## My boyfriend's back\n\nOne thing I enjoy in life is getting guys to do stuff for me. Hang this TV,\nbuild these shelves. It makes me feel like Galadriel when she bugs out in\nFellowship.\n\n

\n\nAnd I thought, why am I here manually marking this task overdue? Why am _I_\nmanually doing _anything_? Manual is for mans. So I'm building Notion Boyfriend\nto automate this kind of stuff for me. A handsome little set of Deno scripts in\na nice jacket to whom I can say, \"Baby can you email a list of my 3 highest\npriority tasks organized by [xyz] criteria\" while I kick back and sip an ice\ncold Diet Coke.\n\nThe best part about Notion Boyfriend is you can make your own, then make him\nyour own, the sky's the limit. Really there's no limit. _Unlimited boyfriend_,\nthat's the power of Deno and Val Town.\n\n## Utilities\n\nEach util lives in its own top-level file with a default export that wires up\nits trigger (cron, HTTP, or webhook). In Val Town, point the configured trigger\ntype at the file.\n\n### `label_overdue.ts`\n\nWalks every configured Tasks data source, finds pages whose `Due` date is before\ntoday (in `America/Chicago`) and whose `Status` is \"not started\" or \"in\nprogress\" flavored, and flips them to the `Overdue` status. Set conditional\nformatting on the `Overdue` value in Notion to make rows pop red.\n\n**Trigger:** cron (or HTTP for manual runs). Set around 2:30am\n`America/Chicago` — Val Town crons run UTC, so use `30 7 * * *` during CDT or\n`30 8 * * *` during CST.\n\n**Required env vars:**\n\n- `NOTION_TOKEN` — internal integration token from developers.notion.com\n- `NOTION_TASK_DATA_SOURCE_IDS` — comma-separated bare data source IDs (no\n quotes)\n\nSee [`docs/label_overdue.md`](docs/label_overdue.md) for status-variation\nextension points and internals.\n\n### `cascade_access.ts`\n\nNotion guests get database-wide access by default — there's no built-in way to\ngate visibility down a relation chain. This util fakes row-level inheritance by\ncascading a `Team` people-property from `Organization` → `Project` → `Task`.\nCombined with Notion's data-source-level access rules that key off the `Team`\nproperty, each client guest only sees their own Org and everything underneath\nit.\n\n**Trigger:** HTTP webhook from a Notion automation on the **Organization** data\nsource. Organization is the source of truth; the cascade only flows downward.\nManual additions to a Project's or Task's `Team` will be overwritten the next\ntime its parent Org fires the webhook.\n\n**Flow on each webhook:**\n\n1. Authenticate the request via the `X-Notion-Webhook-Secret` header (constant-\n time compare; rejection paths return a bare `404`).\n2. Read the triggering Org page; walk its `Projects` relation to find affected\n projects, and each project's `Tasks` relation to find affected tasks.\n3. For each affected project, set `Team` to the union of its parent Orgs'\n teams. Skip writes when already correct.\n4. For each affected task, set `Team` to the union of its parent Projects'\n teams (post-update). Same skip/warn behavior.\n\n**Required env vars:**\n\n- `NOTION_TOKEN`\n- `NOTION_WEBHOOK_SECRET` — shared secret sent by Notion as\n `X-Notion-Webhook-Secret`\n- `NOTION_ORGANIZATION_DATASOURCE_ID`\n- `NOTION_PROJECT_DATASOURCE_ID`\n- `NOTION_TASK_DATASOURCE_ID`\n\n**Required Notion setup:**\n\n- Every Org, Project, and Task data source has a property named `Team` of type\n `People`.\n- Org has a relation property named `Projects` pointing at the Project DS.\n- Project has a relation property named `Organization` pointing at the Org DS\n (the bi-directional reflection of `Projects`).\n- Project has a relation property named `Tasks` pointing at the Task DS.\n- Task has a relation property named `Project` pointing at the Project DS (the\n bi-directional reflection of `Tasks`).\n- The integration is shared into all three data sources.\n- A Notion automation on the Org DS triggers on `Team` changes (and any other\n field whose change should propagate) and sends a webhook to this util's URL\n with `X-Notion-Webhook-Secret` set to `NOTION_WEBHOOK_SECRET`.\n\nSee [`docs/cascade_access.md`](docs/cascade_access.md) for auth, dispatch, and\ncascade internals.\n\n## Project layout\n\n```text\nnotion-boyfriend/\n├── label_overdue.ts # overdue-labeling util (cron + http)\n├── cascade_access.ts # team-cascade util (webhook)\n├── shared/\n│ └── notion.ts # Notion client, env helpers, sleep, trigger wrapper\n├── docs/ # internal reference docs (see AGENTS.md index)\n├── deno.json\n├── README.md\n└── AGENTS.md\n```\n\n## Configuration\n\nAll configuration is via Val Town environment variables — never bake IDs or\ntokens into the source. Utils fail fast at startup if any required env var is\nmissing or empty.\n\n## For beginners\n\n(coming soon)\n",[163],"b4d7968c-50d5-11f1-94f3-ee650bb23af1","AGENTS.md","5a36d6c8-fb46-11f0-a3f7-42dde27851f2",65,["D",1778901421698],2,"You are an advanced assistant specialized in generating Val Town code.\n\n## Core Guidelines\n\n- Ask clarifying questions when requirements are ambiguous\n- Provide complete, functional solutions rather than skeleton implementations\n- Test your logic against edge cases before presenting the final solution\n- Ensure all code follows Val Town's specific platform requirements\n- If a section of code that you're working on is getting too complex, consider\n refactoring it into subcomponents\n\n## Code Standards\n\n- Generate code in TypeScript or TSX\n- Add appropriate TypeScript types and interfaces for all data structures\n- Prefer official SDKs or libraries than writing API calls directly\n- Ask the user to supply API or library documentation if you are at all unsure\n about it\n- **Never bake in secrets into the code** - always use environment variables\n- Include comments explaining complex logic (avoid commenting obvious\n operations)\n- Follow modern ES6+ conventions and functional programming practices if\n possible\n\n## Types of triggers\n\n### 1. HTTP Trigger\n\n- Create web APIs and endpoints\n- Handle HTTP requests and responses\n- Example structure:\n\n```ts\nexport default async function (req: Request) {\n return new Response(\"Hello World\");\n}\n```\n\nFiles that are HTTP triggers have http in their name like `foobar.http.tsx`\n\n### 2. Cron Triggers\n\n- Run on a schedule\n- Use cron expressions for timing\n- Example structure:\n\n```ts\nexport default async function () {\n // Scheduled task code\n}\n```\n\nFiles that are Cron triggers have cron in their name like `foobar.cron.tsx`\n\n### 3. Email Triggers\n\n- Process incoming emails\n- Handle email-based workflows\n- Example structure:\n\n```ts\nexport default async function (email: Email) {\n // Process email\n}\n```\n\nFiles that are Email triggers have email in their name like `foobar.email.tsx`\n\n## Val Town Standard Libraries\n\nVal Town provides several hosted services and utility functions.\n\n### Blob Storage\n\n```ts\nimport { blob } from \"https://esm.town/v/std/blob\";\nawait blob.setJSON(\"myKey\", { hello: \"world\" });\nlet blobDemo = await blob.getJSON(\"myKey\");\nlet appKeys = await blob.list(\"app_\");\nawait blob.delete(\"myKey\");\n```\n\n### SQLite\n\n```ts\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nconst TABLE_NAME = \"todo_app_users_2\";\n// Create table - do this before usage and change table name when modifying schema\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE_NAME} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL\n)`);\n// Query data\nconst result = await sqlite.execute(\n `SELECT * FROM ${TABLE_NAME} WHERE id = ?`,\n [1],\n);\n```\n\nNote: When changing a SQLite table's schema, change the table's name (e.g., add\n_2 or _3) to create a fresh table.\n\n### OpenAI\n\n```ts\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nconst openai = new OpenAI();\nconst completion = await openai.chat.completions.create({\n messages: [\n { role: \"user\", content: \"Say hello in a creative way\" },\n ],\n model: \"gpt-4o-mini\",\n max_tokens: 30,\n});\n```\n\n### Email\n\n```ts\nimport { email } from \"https://esm.town/v/std/email\";\n// By default emails the owner of the val\nawait email({\n subject: \"Hi\",\n text: \"Hi\",\n html: \"

Hi

\",\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport {\n parseProject,\n readFile,\n serveFile,\n} from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", (c) => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\"\nurls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's _extremely importing_ to note that `parseProject` and other\nStandard Library utilities ONLY RUN ON THE SERVER. If you need access to this\ndata on the client, run it in the server and pass it to the client by splicing\nit into the HTML page or by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use\n `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})`\n instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode\n symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use:\n `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys)\n unless otherwise specified\n- **View Source:** Add a view source link by importing & using\n `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the\n client) and include `target=\"_top\"` attribute\n- **Error Debugging:** Add\n `` to HTML to capture\n client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local\n resolution; Avoid catches that merely log or return 500s. Let errors bubble up\n with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but\n generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure\n compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer\n simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with\n `?deps=react@18.2.0,react-dom@18.2.0` and start the file with\n `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same\n version\n- **Styling:** Default to using TailwindCSS via\n `` unless otherwise\n specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project\n files:\n ```ts\n import {\n readFile,\n serveFile,\n } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n\n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", (c) => serveFile(c.req.path, import.meta.url));\n\n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async (c) => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n\n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n\n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to\n see full stack traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:**\n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of\n React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with\n `export default app.fetch // This is the entry point for HTTP vals`\n\n## Project reference docs\n\nLoad on demand — these are not auto-imported.\n\ndocs/project-conventions.md\ndocs/cascade_access.md\ndocs/label_overdue.md\ndocs/shared-helpers.md\n",[171],"3730881a-501c-11f1-8aea-ee650bb23af1","shared","373088d8-501c-11f1-8aea-ee650bb23af1",50,["D",1778821754032],"directory",[179],"b4b07732-50d5-11f1-ac77-ee650bb23af1","docs","b4b0780e-50d5-11f1-ac77-ee650bb23af1",61,["D",1778901421483],[186],"pulls","branches","forks","envVars",{"_198":167,"_200":58},"connections",{"_198":58,"_199":58},"count","unfilledCount","emptyCount",{"_41":185,"_31":186,"_29":187,"_136":-5,"_39":40,"_38":188,"_138":121,"_36":269,"_13":58,"_33":183,"_34":-5,"_23":24,"_143":-5,"_214":270,"_26":271},{"_41":261,"_31":262,"_29":263,"_136":187,"_39":40,"_38":264,"_138":121,"_36":265,"_13":58,"_33":20,"_34":266,"_23":24,"_143":-5,"_214":267,"_26":268},{"_41":257,"_31":32,"_29":30,"_136":187,"_39":40,"_38":14,"_138":121,"_36":258,"_13":58,"_33":20,"_34":35,"_23":24,"_143":-5,"_214":259,"_26":260},{"_41":249,"_31":250,"_29":251,"_136":187,"_39":40,"_38":252,"_138":121,"_36":253,"_13":58,"_33":20,"_34":254,"_23":24,"_143":-5,"_214":255,"_26":256},{"_41":241,"_31":242,"_29":243,"_136":187,"_39":40,"_38":244,"_138":121,"_36":245,"_13":58,"_33":20,"_34":246,"_23":24,"_143":-5,"_214":247,"_26":248},{"_41":178,"_31":179,"_29":180,"_136":-5,"_39":40,"_38":181,"_138":121,"_36":238,"_13":58,"_33":183,"_34":-5,"_23":24,"_143":-5,"_214":239,"_26":240},{"_41":229,"_31":230,"_29":231,"_136":180,"_39":40,"_38":232,"_138":121,"_36":233,"_13":58,"_33":234,"_34":235,"_23":24,"_143":-5,"_214":236,"_26":237},{"_41":170,"_31":171,"_29":172,"_136":-5,"_39":40,"_38":173,"_138":121,"_36":226,"_13":175,"_33":20,"_34":176,"_23":24,"_143":-5,"_214":227,"_26":228},{"_41":162,"_31":163,"_29":164,"_136":-5,"_39":40,"_38":165,"_138":121,"_36":223,"_13":167,"_33":20,"_34":168,"_23":24,"_143":-5,"_214":224,"_26":225},{"_41":153,"_31":154,"_29":155,"_136":-5,"_39":40,"_38":156,"_138":121,"_36":220,"_13":158,"_33":159,"_34":160,"_23":24,"_143":-5,"_214":221,"_26":222},{"_41":145,"_31":146,"_29":147,"_136":-5,"_39":40,"_38":148,"_138":121,"_36":217,"_13":150,"_33":20,"_34":151,"_23":24,"_143":-5,"_214":218,"_26":219},{"_41":133,"_31":134,"_29":135,"_136":-5,"_39":40,"_38":137,"_138":121,"_36":213,"_13":140,"_33":141,"_34":142,"_23":24,"_143":-5,"_214":215,"_26":216},["D",1778821754224],"children",[],[134],["D",1778821754197],[],[146],["D",1778901421772],[],[154],["D",1778901421609],[],[163],["D",1778901421698],[],[171],"3746bee6-501c-11f1-8aea-ee650bb23af1","notion.ts","3746bfae-501c-11f1-8aea-ee650bb23af1",51,["D",1778821754180],"script","import { Client } from \"npm:@notionhq/client@5.21.0\";\n\nexport const NOTION_API_VERSION = \"5.21.0\";\n\nexport function requireEnv(name: string): string {\n const value = Deno.env.get(name);\n if (!value || !value.trim()) {\n throw new Error(\n `Missing required env var \"${name}\". Set it in your Val Town environment before running.`,\n );\n }\n return value.trim();\n}\n\nexport function requireEnvList(name: string): string[] {\n const raw = requireEnv(name);\n const ids = raw.split(\",\").map((id) => id.trim()).filter(Boolean);\n if (ids.length === 0) {\n throw new Error(`Env var \"${name}\" is set but contains no IDs.`);\n }\n return ids;\n}\n\nexport function makeNotionClient(): Client {\n return new Client({ auth: requireEnv(\"NOTION_TOKEN\") });\n}\n\n/** Polite pacing for Notion writes. ~3 req/s is the published rate limit. */\nexport const SLEEP_MS = 400;\n\nexport function sleep(ms: number = SLEEP_MS): Promise {\n return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Wrap a util so the same default export works for cron and HTTP triggers. */\nexport function asTrigger(\n run: () => Promise,\n): (req?: Request) => Promise {\n return async (req?: Request) => {\n const started = Date.now();\n try {\n const result = await run();\n const body = { ok: true, durationMs: Date.now() - started, result };\n if (req) {\n return new Response(JSON.stringify(body, null, 2), {\n headers: { \"content-type\": \"application/json; charset=utf-8\" },\n });\n }\n console.log(JSON.stringify(body));\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n console.error(message);\n if (req) {\n return new Response(\n JSON.stringify({ ok: false, error: message }, null, 2),\n {\n status: 500,\n headers: { \"content-type\": \"application/json; charset=utf-8\" },\n },\n );\n }\n throw err;\n }\n };\n}\n",[],[179,230],["D",1778821754032],[207],[179],"b4bf3d9e-50d5-11f1-8cff-ee650bb23af1","shared-helpers.md","b4bf3eb6-50d5-11f1-8cff-ee650bb23af1",62,["D",1778901421581],"# `shared/notion.ts` helpers\n\nTiny module of cross-util utilities. Keep it small — promote a helper here only\nwhen a second util needs it.\n\n## Exports\n\n| Symbol | Purpose |\n| --- | --- |\n| `NOTION_API_VERSION` | Version string for the pinned `@notionhq/client` (`5.21.0`). Update alongside the `npm:` specifiers in util files. |\n| `requireEnv(name)` | Reads a non-empty env var, trims whitespace, throws on missing/empty. Fail-fast at boot. |\n| `requireEnvList(name)` | `requireEnv` + split on `,` + trim + drop empties. Throws if the resulting list is empty. Used for `NOTION_TASK_DATA_SOURCE_IDS`. |\n| `makeNotionClient()` | Returns a `Client` authed with `NOTION_TOKEN`. One per module, called at module load. |\n| `SLEEP_MS` | `400` — sized to stay safely under Notion's published ~3 req/s write limit. |\n| `sleep(ms?)` | `setTimeout` promise; defaults to `SLEEP_MS`. Call after every Notion write. |\n| `asTrigger(run)` | Wraps an async function so the same default export serves cron (`Request === undefined`) and HTTP. Logs JSON on cron, returns JSON `Response` on HTTP. **Not used by `cascade_access.ts`** — that file has a custom handler for webhook auth. |\n\n## When NOT to use `asTrigger`\n\n`asTrigger` assumes the trigger is unauthenticated and the only output shape is\n`{ ok, durationMs, result }`. For webhooks needing header auth, pre-screening,\nor opaque rejection responses, write a custom `handler` directly (see\n`cascade_access.ts`).\n\n## Conventions\n\n- Notion SDK version pinned via the `npm:@notionhq/client@5.21.0` specifier at\n each util import site — keep in sync with `NOTION_API_VERSION` here.\n- All env-var reads go through `requireEnv` / `requireEnvList` so missing\n config produces a uniform, actionable error.\n- Polite pacing (`sleep()`) is the writer's responsibility, not the client's —\n call it after every page update or DS iteration.\n",[],[186,242],"b4ce2548-50d5-11f1-812b-ee650bb23af1","project-conventions.md","b4ce2624-50d5-11f1-812b-ee650bb23af1",64,["D",1778901421632],"# Project conventions\n\nPatterns that span the whole repo. Follow these when adding a new util.\n\n## One util per top-level file\n\nEach util is a single TS file at the project root with a default export wired\nto its Val Town trigger. No backend/frontend split — this is a serverless val,\nnot an app. Shared code lives in `shared/`.\n\n## Default export = trigger entry point\n\n- **Cron or HTTP** → wrap a plain async function with `asTrigger` from\n `shared/notion.ts`.\n- **Webhook with auth** → write a custom `handler(req: Request): Promise`\n directly. Don't use `asTrigger` — it has no place to do header validation or\n return opaque rejections.\n\n## Config via env vars, fail-fast\n\nAll configuration goes through `requireEnv` / `requireEnvList`. Never bake\ntokens, secrets, or IDs into source — Vals are world-readable, even though env\nvars are private. Missing or empty config throws at module load.\n\n## Notion SDK pinned per file\n\nEvery util imports from `npm:@notionhq/client@5.21.0`. When bumping, update all\nutil files and `NOTION_API_VERSION` in `shared/notion.ts` together.\n\n## Rate-limit politeness\n\nNotion publishes ~3 writes/second. Call `sleep()` (default `SLEEP_MS = 400`)\nafter every page update or DS-level iteration. Reads don't need pacing for our\nvolumes.\n\n## Logging\n\n`console.log` for normal progress, `console.warn` for recoverable surprises\n(unknown status name, missing relation), `console.error` for failures. Val Town\ncaptures all three.\n\n## Errors\n\nLet errors bubble. `asTrigger` and the webhook handler both convert thrown\nerrors to `500` JSON at the top level. Don't catch-and-log mid-flow unless\nthere's a real local recovery — per-DS loops in `label_overdue.ts` are the\nexception: they log DS context and re-throw, which is the right shape for a\nbatch operation.\n\n## Notion API quirks to remember\n\n- **DS IDs come in two forms.** Hyphenated (`213545fb-e522-4754-b5ee-32fc6ab7ef18`)\n and bare. Strip dashes before comparing — see `normalizeDsId` in\n `cascade_access.ts`.\n- **Property values cap at 25 entries** for `people` and `relation`. The page\n response sets `has_more: true` when truncated. Both utils throw on `has_more`\n rather than silently miss data; extend to paginated property reads if a real\n case hits the cap.\n- **`isFullPage` before treating a query result as a page.** Notion can return\n partial objects (e.g. data sources, blocks) in query results; the guard\n narrows the type.\n",[],[186,250],"b4e9e832-50d5-11f1-a37b-ee650bb23af1",["D",1778901421844],[],[186,32],"b4dc59a6-50d5-11f1-a71a-ee650bb23af1","cascade_access.md","b4dc5a6e-50d5-11f1-a71a-ee650bb23af1",66,["D",1778901421613],"# `cascade_access.ts` internals\n\nWebhook-driven downward cascade of the `Team` people-property from Organization\n→ Project → Task. Organization is the source of truth.\n\n## Trigger model\n\nA Notion automation on the **Organization** data source POSTs JSON to this val\nwhen an Org changes. The util dispatches on `data.parent.data_source_id` — the\nDS the changed page lives in — so the same handler would also work if\nautomations were later added to Project or Task DSes, but in current setup only\nOrg fires.\n\nThe webhook payload's `data.id` is the changed page; `data.parent.data_source_id`\nidentifies which level (Org / Project / Task) triggered.\n\n## Authentication\n\nThree-layer pre-screen before any work:\n\n1. **Method gate** — non-`POST` requests return bare `404` (no body).\n2. **Content-type gate** — non-`application/json` returns bare `404`.\n3. **Secret check** — `X-Notion-Webhook-Secret` header compared to\n `NOTION_WEBHOOK_SECRET` env var via `safeEqual` (constant-time XOR). Missing\n or mismatched header returns bare `404`.\n\nBare `404` on every rejection path means scanners, stray GETs, and brute-force\nattempts see no signal that an endpoint exists or what header name to target.\nThe val URL is public (Vals are world-readable), so the secret is the only\nboundary.\n\n## Dispatch by level\n\nOrg/Project/Task DS IDs are compared with dashes stripped (`normalizeDsId`)\nsince Notion mixes hyphenated and bare forms.\n\n| Trigger level | Affected projects | Affected tasks |\n| --- | --- | --- |\n| Organization | Org's `Projects` relation | Each project's `Tasks` relation |\n| Project | The project itself | Project's `Tasks` relation |\n| Task | — | The task itself |\n\nA trigger from an unknown DS throws — the handler returns `500` with the error\nmessage, surfacing misconfiguration loudly.\n\n## Relation names (hardcoded)\n\n| Source DS | Relation property | Target DS |\n| --- | --- | --- |\n| Organization | `Projects` | Project |\n| Project | `Organization` | Organization |\n| Project | `Tasks` | Task |\n| Task | `Project` | Project |\n\nThe two pairs are bi-directional reflections in Notion. If property names ever\nchange, update the constants at the top of `cascade_access.ts`.\n\n## Team computation\n\n`updateTeamFromParents` is the same shape at both levels:\n\n1. Read the page's parent-relation property (`Organization` for projects,\n `Project` for tasks).\n2. Fetch each parent (via per-request cache); union their `Team` people IDs.\n3. Compare to the page's current `Team` (set equality). Write only if\n different.\n4. Sleep `SLEEP_MS` after each write for Notion rate-limit politeness.\n\nA page with no parent relation logs a warning and clears its `Team` — there's\nnothing to inherit from. That state is reported as `orphaned` in the result.\n\n## Per-request page cache\n\n`makePageCache` memoizes `notion.pages.retrieve` for the duration of a single\nwebhook. When many tasks share the same project parent, the project is fetched\nonce instead of N times. The cache is per-request (not module-level), so each\nwebhook starts fresh — no stale-page hazard across invocations.\n\n## Limitations\n\n- **25-entry property cap.** People and relation properties with `has_more=true`\n throw rather than silently truncate. If a team or relation grows past 25,\n extend the readers to paginate property values.\n- **Self-triggering loops.** If automations are ever added on Project or Task\n DSes too, a write at one level will fire the next level's webhook. The second\n pass finds Team already correct (set-equal) and skips, but still walks\n children — bounded, idempotent, just extra work. Today only Org fires, so no\n loop concern.\n- **Full backfill.** The previous full-sweep `cascadeTeamAccess` is gone. To\n retroactively recompute the whole tree, iterate Org IDs and POST to the\n webhook URL once per Org (or restore a scoped iterator).\n",[],[186,262],["D",1778901421483],[202,203,204,205],[186],["D",1768612648758],["D",1789527031073],{"_94":93,"_102":98},{"_94":93,"_95":96,"_97":98,"_18":52,"_99":100,"_101":24},{"_13":14,"_31":84,"_41":40,"_85":42,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":43,"_92":93},"ctx",{"_77":-5,"_123":310,"_311":312,"_313":314,"_315":24,"_316":24,"_317":24,"_318":121,"_319":-5,"_320":-7,"_321":-7,"_322":58,"_323":24,"_324":24,"_325":-5,"_326":24,"_327":24,"_328":24,"_329":-5},"ENV",{"_281":282,"_283":284,"_285":84,"_286":287,"_288":289,"_290":291,"_292":293,"_294":295,"_296":297,"_298":299,"_300":301,"_302":303,"_304":305,"_306":307,"_308":309},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v68