[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","piyatat726","name","chitien-inquiry","path","main.tsx","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/piyatat726/chitien-inquiry/code/main.tsx","extension","id","044e36b1-4d4b-4ec4-9882-aad3f02b99d6","fileId","01a080e1-be0d-720f-a0a0-9bf8a8e4498f","parentId","branchId","4bb477fd-f17c-45e1-8c45-9ac232bb7f1e","branchVersion",5,"latest",true,"createdAt",["D",1788868821249],"version",1,"fileType","http","content","/** @jsxImportSource npm:hono/jsx */\nimport { Hono } from \"npm:hono\";\nimport { email } from \"https://esm.town/v/std/email\";\nimport { addInquiry, countRecentByIp, listInquiries } from \"./db.ts\";\n\n// 齊天旅行社網站詢問表單後端\n// POST /inquiry (body: JSON sent as text/plain to avoid CORS preflight)\n// GET /admin?key=INQUIRY_ADMIN_KEY -> 詢問列表\n// GET /health\n\nconst app = new Hono();\n\nconst LIMIT = { name: 80, email: 160, phone: 60, month: 40, party: 40, message: 4000, dest: 40 };\n\nasync function sha256(s: string): Promise {\n const buf = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n// strip ASCII control characters (keep tab/newline), trim, cap length\nconst CONTROL_RE = new RegExp(\"[\\\\x00-\\\\x08\\\\x0B\\\\x0C\\\\x0E-\\\\x1F]\", \"g\");\nfunction clean(v: unknown, max: number): string {\n return String(v ?? \"\").replace(CONTROL_RE, \"\").trim().slice(0, max);\n}\n\nfunction fmtDate(iso: string): string {\n // created_at is UTC from sqlite; show Taipei time\n const d = new Date(iso.replace(\" \", \"T\") + \"Z\");\n return d.toLocaleString(\"zh-TW\", { timeZone: \"Asia/Taipei\", hour12: false });\n}\n\napp.get(\"/\", (c) => c.json({ service: \"chitien-inquiry\", ok: true }));\napp.get(\"/health\", (c) => c.text(\"ok\"));\n\napp.post(\"/inquiry\", async (c) => {\n let body: any = {};\n try {\n body = JSON.parse(await c.req.text());\n } catch {\n return c.json({ ok: false, error: \"bad_json\" }, 400);\n }\n\n // Honeypot: real users never fill this. Pretend success so bots move on.\n if (clean(body.website, 200)) return c.json({ ok: true, id: 0 });\n\n const name = clean(body.name, LIMIT.name);\n const emailAddr = clean(body.email, LIMIT.email);\n const phone = clean(body.phone, LIMIT.phone);\n const dests: string[] = Array.isArray(body.destinations)\n ? body.destinations.map((d: unknown) => clean(d, LIMIT.dest)).filter(Boolean).slice(0, 20)\n : [];\n const month = clean(body.month, LIMIT.month);\n const party = clean(body.party, LIMIT.party);\n const message = clean(body.message, LIMIT.message);\n const lang = clean(body.lang, 5) || \"zh\";\n\n if (name.length < 1) return c.json({ ok: false, error: \"name_required\" }, 400);\n if (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(emailAddr)) return c.json({ ok: false, error: \"email_invalid\" }, 400);\n if (!message && dests.length === 0) return c.json({ ok: false, error: \"empty\" }, 400);\n\n const ip = c.req.header(\"x-forwarded-for\")?.split(\",\")[0].trim() || \"unknown\";\n const ipHash = (await sha256(ip)).slice(0, 24);\n if ((await countRecentByIp(ipHash, 15)) >= 5) {\n return c.json({ ok: false, error: \"rate_limited\" }, 429);\n }\n\n const id = await addInquiry({\n name,\n email: emailAddr,\n phone,\n destinations: dests.join(\"、\"),\n month,\n party,\n message,\n lang,\n ip_hash: ipHash,\n user_agent: clean(c.req.header(\"user-agent\"), 200),\n });\n\n const lines = [\n `齊天旅行社網站新詢問 #${id}`,\n \"\",\n `姓名：${name}`,\n `Email：${emailAddr}`,\n `電話 / LINE：${phone || \"未填\"}`,\n `想去的地方：${dests.join(\"、\") || \"未指定\"}`,\n `預計出發：${month || \"未填\"}`,\n `人數：${party || \"未填\"}`,\n `語言：${lang}`,\n \"\",\n \"留言：\",\n message || \"（無）\",\n \"\",\n \"直接回覆此信即可回信給客人。\",\n ];\n\n try {\n await email({\n subject: `【齊天旅行社網站詢問】${name}｜${dests.join(\"、\") || \"未指定目的地\"}`,\n text: lines.join(\"\\n\"),\n replyTo: emailAddr,\n });\n } catch (e) {\n console.error(\"email notification failed\", e);\n }\n\n return c.json({ ok: true, id });\n});\n\napp.get(\"/admin\", async (c) => {\n const key = c.req.query(\"key\") ?? \"\";\n const expected = Deno.env.get(\"INQUIRY_ADMIN_KEY\") ?? \"\";\n if (!expected || key !== expected) return c.text(\"Unauthorized\", 401);\n const rows = await listInquiries(300);\n return c.html(\n \n \n \n \n \n 齊天旅行社網站詢問\n \n \n \n

網站詢問（共 {rows.length} 筆，最新在上）

\n {rows.length === 0 &&

目前還沒有詢問。

}\n {rows.map((r) => (\n

#{r.id}・{fmtDate(r.created_at)}・{r.lang}

{r.name}　{r.email}　電話/LINE：{r.phone || \"未填\"}

目的地：{r.destinations || \"未指定\"}　出發：{r.month || \"未填\"}　人數：{r.party || \"未填\"}

{r.message || \"（無留言）\"}

\n ))}\n \n ,\n );\n});\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","deleted",false,"label",[14],"2e9fda9f-c072-4ae0-a75e-c7ccaadd31aa",["D",1788868672868],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","齊天旅行社網站詢問表單後端: 存 SQLite + email 通知","imageUrl","userId","04d840cc-4bfb-411e-9b63-ee625b96a32a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019edd59-7b3e-722d-a9c9-2bb34b53ed67","tursoName","2e9fda9fc0724ae0a75ec7ccaadd31aa","tursoHostname","2e9fda9fc0724ae0a75ec7ccaadd31aa-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789651264012],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",7,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","哲齊許","avatar","https://lh3.googleusercontent.com/a/ACg8ocL--LqhYafFVZniKIfsTcCNAYb_-LmvuCWSdg_tAqidOaXRAHs=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":62,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]