[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_108":109,"_110":111},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","colel","name","newsletter-signup","path","admin/routes.tsx","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":-5,"_61":44,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/colel/newsletter-signup/code/admin/routes.tsx","extension","id","279fca4e-0695-4afd-9c30-2638f167225c","routes.tsx","fileId","11bb59b6-9af9-11f1-984d-1607ee4eb77e","parentId","5bf3d673-b10d-4ac0-be56-a32e248add93","branchId","d72d2544-fed2-11f0-a1dd-42dde27851f2","branchVersion",46,"latest",true,"createdAt",["D",1787056304828],"version",3,"fileType","script","content","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport { renderToString } from \"https://esm.sh/react-dom@18.2.0/server\";\nimport { Hono } from \"npm:hono\";\nimport { getOAuthUserData } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport * as db from \"../db.ts\";\nimport type { MatchMode } from \"../filter.ts\";\nimport { decideForReceiver, normalizeServer, sendTest } from \"../ntfy.ts\";\nimport { loginAndReturnTo } from \"../post-login.ts\";\nimport { FilterTest, type FilterTestResult } from \"./FilterTest.tsx\";\nimport { type FlashMessage, Layout } from \"./Layout.tsx\";\nimport { Deliveries, Receivers } from \"./Receivers.tsx\";\nimport { Subscribers } from \"./Subscribers.tsx\";\n\ntype AdminUser = { username: string | null };\n\n/**\n * Admin access = logged in with Val Town AND (member of this val's org\n * OR listed in the optional ADMIN_USERNAMES env var, comma-separated).\n */\nasync function requireAdmin(req: Request): Promise {\n const session = await getOAuthUserData(req);\n if (!session?.user) return \"anonymous\";\n\n const allowlist = (Deno.env.get(\"ADMIN_USERNAMES\") ?? \"\")\n .split(\",\").map(s => s.trim().replace(/^@/, \"\")).filter(Boolean);\n\n const username = session.user.username ?? null;\n const allowed = session.isOrgMember === true ||\n (!!username && allowlist.includes(username));\n\n return allowed ? { username } : \"forbidden\";\n}\n\nfunction html(node: React.ReactNode, status = 200): Response {\n return new Response(\"\" + renderToString(<>{node}), {\n status,\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}\n\nfunction flashFrom(url: URL): FlashMessage | null {\n const ok = url.searchParams.get(\"ok\");\n if (ok) return { kind: \"ok\", text: ok };\n const err = url.searchParams.get(\"err\");\n if (err) return { kind: \"error\", text: err };\n return null;\n}\n\nfunction back(kind: \"ok\" | \"err\", text: string): Response {\n return new Response(null, {\n status: 302,\n headers: { Location: `/admin?${kind}=${encodeURIComponent(text)}` },\n });\n}\n\nconst str = (v: unknown): string => (typeof v === \"string\" ? v : \"\");\n\nfunction eventsFromBody(body: Record): string {\n const raw = body[\"events\"];\n const list = (Array.isArray(raw) ? raw : raw === undefined ? [] : [raw]).map(String);\n const events = list.filter(e => e === \"signup\" || e === \"details\");\n return (events.length ? events : [\"signup\"]).join(\",\");\n}\n\nfunction receiverFromBody(body: Record) {\n const priority = Math.min(5, Math.max(1, Number(body.priority) || 3));\n return {\n name: str(body.name).trim() || \"Receiver\",\n topic: str(body.topic).trim(),\n server: normalizeServer(str(body.server).trim() || \"https://ntfy.sh\"),\n priority,\n tags: str(body.tags).trim() || null,\n events: eventsFromBody(body),\n filter: str(body.filter).trim() || null,\n filter_mode: (str(body.filter_mode) === \"any\" ? \"any\" : \"all\") as MatchMode,\n enabled: body.enabled ? 1 : 0,\n };\n}\n\n/* ---------------------------------- dashboard ---------------------------------- */\n\nasync function renderDashboard(\n c: any,\n filterTest?: FilterTestResult,\n): Promise {\n const user = c.get(\"user\") as AdminUser;\n const [receivers, subscribers, total, deliveries] = await Promise.all([\n db.listReceivers(),\n db.listSubscribers(200),\n db.countSubscribers(),\n db.recentDeliveries(25),\n ]);\n\n // Prefill the filter tester with the most recent real signup, so it's useful immediately.\n const latest = subscribers[0];\n const defaults = {\n email: latest?.email ?? \"someone@example.com\",\n detailsText: JSON.stringify(latest?.details ?? { plan: \"enterprise\", company: \"Acme\" }, null, 2),\n };\n\n return html(\n \n \n \n \n \n ,\n );\n}\n\nexport const admin = new Hono();\n\nadmin.use(\"*\", async (c, next) => {\n const result = await requireAdmin(c.req.raw);\n if (result === \"anonymous\") {\n // Remember where they were headed — std/oauth always returns to \"/\".\n const url = new URL(c.req.url);\n return loginAndReturnTo(url.pathname + url.search);\n }\n if (result === \"forbidden\") {\n return html(\n \n

You don't have access to this dashboard.

\n Ask the owner to add your Val Town username to the{\" \"}\n ADMIN_USERNAMES environment variable.\n

\n \n

\n ,\n 403,\n );\n }\n c.set(\"user\", result);\n await next();\n});\n\nadmin.get(\"/\", c => renderDashboard(c));\n\n/* ---------------------------------- receivers ---------------------------------- */\n\nadmin.post(\"/receivers\", async (c) => {\n const body = await c.req.parseBody({ all: true });\n const input = receiverFromBody(body);\n if (!input.topic) return back(\"err\", \"A topic is required\");\n await db.createReceiver({ ...input, auth: str(body.auth).trim() || null });\n return back(\"ok\", `Receiver “${input.name}” added`);\n});\n\nadmin.post(\"/receivers/:id\", async (c) => {\n const id = c.req.param(\"id\");\n const body = await c.req.parseBody({ all: true });\n const action = str(body._action);\n\n const receiver = await db.getReceiver(id);\n if (!receiver) return back(\"err\", \"Receiver not found\");\n\n if (action === \"delete\") {\n await db.deleteReceiver(id);\n return back(\"ok\", `Receiver “${receiver.name}” deleted`);\n }\n\n if (action === \"test\") {\n const result = await sendTest(receiver, new URL(c.req.url).origin);\n return result.ok\n ? back(\"ok\", `Test sent to ${receiver.server}/${receiver.topic} (filters bypassed)`)\n : back(\"err\", `Test failed (${result.status ?? \"network\"}): ${result.error ?? \"unknown error\"}`);\n }\n\n const input = receiverFromBody(body);\n if (!input.topic) return back(\"err\", \"A topic is required\");\n\n // Auth: blank input keeps the stored secret, \"clear_auth\" removes it.\n const newAuth = str(body.auth).trim();\n const auth = body.clear_auth ? null : newAuth ? newAuth : undefined;\n\n await db.updateReceiver(id, { ...input, ...(auth === undefined ? {} : { auth }) });\n return back(\"ok\", `Receiver “${input.name}” saved`);\n});\n\n/* -------------------------------- filter tester -------------------------------- */\n\nadmin.post(\"/filter-test\", async (c) => {\n const body = await c.req.parseBody();\n const email = str(body.email).trim() || \"someone@example.com\";\n const detailsText = str(body.details);\n\n let details: Record | null = null;\n let parseError: string | undefined;\n const trimmed = detailsText.trim();\n if (trimmed) {\n try {\n const parsed = JSON.parse(trimmed);\n if (parsed === null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n parseError = \"expected a JSON object, e.g. {\\\"plan\\\": \\\"enterprise\\\"}\";\n } else {\n details = parsed as Record;\n }\n } catch (err: any) {\n parseError = err?.message ?? String(err);\n }\n }\n\n if (parseError) {\n return renderDashboard(c, { email, detailsText, parseError, rows: [] });\n }\n\n const receivers = await db.listReceivers();\n const sample: db.Subscriber = {\n id: 0,\n email,\n details,\n developer_notes: null,\n created_at: \"(dry run)\",\n updated_at: \"(dry run)\",\n };\n\n const rows = receivers.map((receiver) => {\n const decision = decideForReceiver(receiver, sample);\n return {\n receiver: receiver.name,\n enabled: !!receiver.enabled,\n events: receiver.events,\n listens: receiver.events.split(\",\").map(e => e.trim()).includes(\"signup\"),\n send: decision.send,\n outcome: decision.outcome,\n reason: decision.reason,\n };\n });\n\n return renderDashboard(c, { email, detailsText, rows });\n});\n\n/* --------------------------------- subscribers --------------------------------- */\n\nadmin.post(\"/subscribers/:id\", async (c) => {\n const id = c.req.param(\"id\");\n const body = await c.req.parseBody();\n const action = str(body._action);\n\n if (action === \"delete\") {\n await db.deleteSubscriber(id);\n return back(\"ok\", `Signup #${id} deleted`);\n }\n\n await db.updateSubscriber(id, { developer_notes: str(body.developer_notes) });\n return back(\"ok\", `Notes saved for #${id}`);\n});\n","deleted",false,"label",[47,24],"admin","d72cb6b8-fed2-11f0-a1dd-42dde27851f2",["D",1769884195507],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Signup API with ntfy push alerts and an admin dashboard","imageUrl","userId","c821e8f7-4cc4-4c23-96f1-319b8f33d4b7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","6b193d60-e165-45a9-869c-c3f886455f3e","tursoName","d72cb6b8fed211f0a1dd42dde27851f2","tursoHostname","d72cb6b8fed211f0a1dd42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789534231467],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_107":103},"org",{"_9":10,"_101":-5,"_102":103,"_58":59,"_104":105,"_106":44},"branch",{"_37":91,"_11":92,"_22":30,"_93":48,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":12,"_100":10},"isOwned",51,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ6RVZCOExVNXBIT3FrVDh5a0VZQTNRRG5ycCJ9","tier","pro","canRestrictVals","profileImageUrl","ctx",{"_84":-5,"_141":142,"_143":144,"_145":146,"_147":44,"_148":44,"_149":44,"_150":34,"_151":-5,"_152":-7,"_153":-7,"_154":65,"_155":44,"_156":44,"_157":-5,"_158":44,"_159":44,"_160":44,"_161":-5},"ENV",{"_112":113,"_114":115,"_116":92,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138,"_139":140},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]