DDRP Applications

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_179":180,"_181":182},"routes/_app.x.$handle.$name",{"_105":104,"_38":50,"_114":95,"_33":115,"_13":14,"_116":-5,"_11":117,"_118":119,"_120":121,"_122":123,"_124":125,"_26":-5,"_126":-5,"_127":-5,"_128":31,"_129":130,"_131":64,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_38":50,"_43":51,"_52":-5,"_53":31,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":72,"_73":74,"_75":76,"_77":-5,"_78":79,"_80":79,"_81":82,"_83":82,"_84":82,"_85":79,"_86":79,"_87":88,"_89":90,"_91":92,"_93":31},"version",41,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","daed42ef-d247-4ad0-bc4d-8e8bad553a55","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":34,"_39":26,"_40":42,"_43":44,"_45":14,"_46":47,"_30":31},"previous",{"_36":37,"_38":34,"_39":26,"_40":41},"deleted",false,"deletedHere","path","index.html","latestPath","fileId","ec846668-8f42-11f1-b3e6-1607ee4eb77e","name","fileType","content","\n\n\n \n \n DDRP Applications\n \n \n \n \n \n\n\n

\n \n \n

❦

\n\n \n

Open Applications

\n \n

Loading applications…

\n\n \n

\n \n

✦

\n Discord Connection *\n \n

You must connect your Discord account to submit an application.

\n \n

\n\n \n

My Applications

\n \n

\n Your Discord Name\n \n

\n \n

\n\n \n \n\n \n

📋 Owner Dashboard

\n \n \n

\n \n

Loading…

\n\n

\n \n

\n\n \n \n\n \n\n\n","\n\n\n \n \n DDRP Applications\n \n \n \n \n \n\n\n

\n \n \n

❦

\n\n \n

Open Applications

\n \n

Loading applications…

\n\n \n

\n \n

✦

\n Discord Connection *\n \n

You must connect your Discord account to submit an application.

\n \n

\n\n \n

My Applications

\n \n

\n Your Discord Name\n \n

\n \n

\n\n \n \n\n \n

📋 Owner Dashboard

\n \n \n

\n \n

Loading…

\n\n

\n \n

\n\n \n \n\n \n\n\n","createdAt",["D",1785790289816],"branchVersion","branchId","7b024f84-3b2a-414c-89f3-477c9295512c","id","27364832-fccf-4c11-8f35-775bd18313bd","DDRP-Applications",["D",1785765120442],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Multi-type application forms with Discord webhook relay","imageUrl","12cf16a3-2a6a-421b-b356-b38cc8b42700","pinnedFileId","80155564-8f42-11f1-ad9a-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019fc4cd-f05d-7068-b194-b5dea919cc29","tursoName","27364832fccf4c118f35775bd18313bd","tursoHostname","27364832fccf4c118f35775bd18313bd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789690828256],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_105":104,"_113":109},"org",{"_105":104,"_106":107,"_108":109,"_19":60,"_110":111,"_112":31},"branch",{"_13":94,"_38":95,"_48":47,"_96":49,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":50,"_103":104},"isOwned",44,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","ASHxo","handle","displayName","Chevelle Ezell","avatar","https://lh3.googleusercontent.com/a/ACg8ocJD2GClHcBju4Xwk2TYAuiheZvOXV2UmcqQ4cPAYsoXDR0zeg=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_38":50,"_43":174,"_52":-5,"_53":31,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":72,"_73":74,"_75":175,"_77":-5,"_78":79,"_80":79,"_81":82,"_83":82,"_84":82,"_85":79,"_86":79,"_87":176,"_89":177,"_91":178,"_93":31},"tree",[165,166],"files",[165,166],"counts",{"_154":68,"_155":156,"_157":68,"_158":159,"_160":161},"contents",[136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_48":150,"_38":34,"_36":37,"_140":-5,"_46":47,"_45":14,"_142":31,"_43":151,"_13":152,"_39":26,"_40":42,"_30":31,"_147":-5,"_33":153},{"_48":138,"_38":139,"_36":62,"_140":-5,"_46":47,"_45":141,"_142":64,"_43":143,"_13":144,"_39":145,"_40":146,"_30":31,"_147":148,"_33":149},"7737f112-e6c7-4012-ac7d-d30b5b3c23fb","main.ts","parentId",35,"latest",["D",1785790024987],11,"http","import { staticHTTPServer, parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono\";\n\nconst OWNER_PIN = Deno.env.get(\"OWNER_PIN\") ?? \"4947\";\nconst DISCORD_WEBHOOK = Deno.env.get(\"DISCORD_WEBHOOK\") ?? \"\";\n\n// ─── Database Schema ───────────────────────────────────────────────\nawait sqlite.batch([\n { sql: `CREATE TABLE IF NOT EXISTS application_types (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n description TEXT DEFAULT '',\n status TEXT DEFAULT 'active',\n questions TEXT NOT NULL DEFAULT '[]',\n created_at TEXT DEFAULT (datetime('now'))\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS applications (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n type_id INTEGER NOT NULL,\n applicant_name TEXT NOT NULL,\n applicant_id TEXT NOT NULL,\n answers TEXT NOT NULL DEFAULT '{}',\n status TEXT DEFAULT 'pending',\n reviewer_name TEXT DEFAULT '',\n created_at TEXT DEFAULT (datetime('now'))\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS owner_sessions (\n token TEXT PRIMARY KEY,\n created_at TEXT DEFAULT (datetime('now')),\n expires_at TEXT NOT NULL\n )` },\n]);\n\n// ─── Helpers ───────────────────────────────────────────────────────\n\nasync function isAuthed(req: Request): Promise {\n const auth = req.headers.get(\"Authorization\");\n if (!auth?.startsWith(\"Bearer \")) return false;\n const token = auth.slice(7);\n const result = await sqlite.execute({\n sql: \"SELECT 1 FROM owner_sessions WHERE token = ? AND expires_at > datetime('now')\",\n args: [token],\n });\n return result.rows.length > 0;\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data, (_key, value) =>\n typeof value === \"bigint\" ? Number(value) : value\n ), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nfunction normalizeType(row: Record) {\n return {\n id: Number(row.id),\n name: row.name,\n description: row.description ?? \"\",\n status: row.status ?? \"active\",\n questions: JSON.parse(row.questions as string) as { label: string; type: string; required: boolean; placeholder?: string }[],\n created_at: row.created_at,\n };\n}\n\nasync function sendDiscordWebhook(embed: Record) {\n if (!DISCORD_WEBHOOK) return;\n try {\n await fetch(DISCORD_WEBHOOK, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ embeds: [embed] }),\n });\n } catch (e) {\n console.error(\"Discord webhook failed:\", e);\n }\n}\n\n// Discord allows max 25 fields per embed, max 10 embeds per webhook\nasync function sendDiscordApplicationWebhook(appTypeName: string, applicantName: string, applicantId: string, appId: unknown, questions: { label: string }[], answers: Record) {\n if (!DISCORD_WEBHOOK) return;\n\n // Build all fields\n const allFields: { name: string; value: string; inline: boolean }[] = [\n { name: \"Applicant\", value: `${applicantName} (\\`${applicantId}\\`)`, inline: false },\n { name: \"Application ID\", value: `#${appId}`, inline: true },\n { name: \"Submitted\", value: new Date().toISOString().replace(\"T\", \" \").slice(0, 19) + \" UTC\", inline: true },\n ];\n\n for (let i = 0; i < questions.length; i++) {\n const q = questions[i];\n const ans = answers[String(i)];\n const displayVal = ans ? String(ans) : \"*(not answered)*\";\n allFields.push({\n name: `Q${i + 1}. ${q.label}`,\n value: displayVal.length > 1024 ? displayVal.slice(0, 1021) + \"...\" : displayVal,\n inline: false,\n });\n }\n\n // Split into embeds of max 25 fields each\n const embeds: Record[] = [];\n for (let i = 0; i < allFields.length; i += 25) {\n const chunk = allFields.slice(i, i + 25);\n const isFirst = i === 0;\n const isLast = i + 25 >= allFields.length;\n embeds.push({\n title: isFirst ? `📋 New ${appTypeName} Application` : undefined,\n color: 0xc41e3a,\n fields: chunk,\n footer: isLast ? { text: `DDRP Applications — #${appId} (${Math.ceil((i + 25) / 25)}/${Math.ceil(allFields.length / 25)})` } : { text: `DDRP Applications — Part ${Math.ceil((i + 25) / 25)}/${Math.ceil(allFields.length / 25)}` },\n timestamp: isFirst ? new Date().toISOString() : undefined,\n });\n }\n\n // Discord allows max 10 embeds per webhook call\n for (let i = 0; i < embeds.length; i += 10) {\n const chunk = embeds.slice(i, i + 10);\n try {\n await fetch(DISCORD_WEBHOOK, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ embeds: chunk }),\n });\n } catch (e) {\n console.error(\"Discord webhook failed:\", e);\n }\n }\n}\n\n// ─── Hono API ──────────────────────────────────────────────────────\n\nconst api = new Hono();\napi.onError((err) => Promise.reject(err));\n\n// ─── PUBLIC ROUTES ──────────────────────────────────────────────────\n\n// List active application types\napi.get(\"/api/types\", async (c) => {\n const result = await sqlite.execute(\n \"SELECT * FROM application_types WHERE status = 'active' ORDER BY created_at DESC\",\n );\n return json(result.rows.map(normalizeType));\n});\n\n// Get application type details\napi.get(\"/api/types/:id\", async (c) => {\n const id = parseInt(c.req.param(\"id\"));\n const result = await sqlite.execute({\n sql: \"SELECT * FROM application_types WHERE id = ?\",\n args: [id],\n });\n if (result.rows.length === 0) return json({ error: \"Application type not found\" }, 404);\n return json(normalizeType(result.rows[0]));\n});\n\n// Submit an application\napi.post(\"/api/types/:id/apply\", async (c) => {\n const id = parseInt(c.req.param(\"id\"));\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n\n // Validate application type\n const typeResult = await sqlite.execute({\n sql: \"SELECT * FROM application_types WHERE id = ? AND status = 'active'\",\n args: [id],\n });\n if (typeResult.rows.length === 0) return json({ error: \"Application type not found or inactive\" }, 404);\n const appType = normalizeType(typeResult.rows[0]);\n\n // Validate applicant info\n const applicantName = typeof body.applicantName === \"string\" ? body.applicantName.trim() : \"\";\n const applicantId = typeof body.applicantId === \"string\" ? body.applicantId.trim() : \"\";\n if (!applicantName) return json({ error: \"Discord connection is required\" }, 400);\n if (!applicantId) return json({ error: \"Discord connection is required\" }, 400);\n if (!/^\\d{17,19}$/.test(applicantId)) {\n return json({ error: \"Invalid Discord ID. Please connect your Discord account.\" }, 400);\n }\n\n // Validate answers against questions\n const answers = body.answers ?? {};\n if (typeof answers !== \"object\" || Array.isArray(answers)) {\n return json({ error: \"Answers must be an object\" }, 400);\n }\n\n for (let i = 0; i < appType.questions.length; i++) {\n const q = appType.questions[i];\n const ans = answers[String(i)];\n if (q.required) {\n const val = typeof ans === \"string\" ? ans.trim() : \"\";\n if (!val) return json({ error: `\"${q.label}\" is required` }, 400);\n }\n }\n\n // Insert application\n const result = await sqlite.execute({\n sql: \"INSERT INTO applications (type_id, applicant_name, applicant_id, answers) VALUES (?, ?, ?, ?)\",\n args: [id, applicantName, applicantId, JSON.stringify(answers)],\n });\n\n const appId = result.lastInsertRowid;\n\n // Send Discord notification (simple alert, full app in owner dashboard)\n await sendDiscordWebhook({\n title: `📋 New ${appType.name}`,\n description: `**${applicantName}** (\\`${applicantId}\\`) just submitted an application.\\n\\n👉 Review it in the Owner Dashboard: https://ddrp-applications.val.run\\n\\n<@&1462179730923982941>`,\n color: 0xc41e3a,\n fields: [\n { name: \"Application ID\", value: `#${appId}`, inline: true },\n { name: \"Submitted\", value: new Date().toISOString().replace(\"T\", \" \").slice(0, 19) + \" UTC\", inline: true },\n ],\n footer: { text: \"DDRP Applications\" },\n timestamp: new Date().toISOString(),\n });\n\n return json({ ok: true, id: appId, message: \"Application submitted successfully!\" }, 201);\n});\n\n// Check your applications\napi.get(\"/api/my-applications\", async (c) => {\n const applicantId = c.req.query(\"applicant_id\");\n if (!applicantId) return json({ error: \"applicant_id query parameter is required\" }, 400);\n\n const result = await sqlite.execute({\n sql: `SELECT a.*, t.name as type_name FROM applications a\n JOIN application_types t ON a.type_id = t.id\n WHERE a.applicant_id = ? ORDER BY a.created_at DESC`,\n args: [applicantId],\n });\n\n return json(result.rows.map((row) => ({\n id: Number(row.id),\n type_id: Number(row.type_id),\n type_name: row.type_name,\n applicant_name: row.applicant_name,\n applicant_id: row.applicant_id,\n status: row.status,\n created_at: row.created_at,\n })));\n});\n\n// ─── OWNER ROUTES ──────────────────────────────────────────────────\n\n// Login with PIN\napi.post(\"/api/owner/login\", async (c) => {\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n if (body.pin !== OWNER_PIN) return json({ error: \"Invalid PIN\" }, 401);\n\n await sqlite.execute(\"DELETE FROM owner_sessions WHERE expires_at < datetime('now')\");\n\n const token = crypto.randomUUID();\n const expires = new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString();\n await sqlite.execute({\n sql: \"INSERT INTO owner_sessions (token, expires_at) VALUES (?, ?)\",\n args: [token, expires],\n });\n\n return json({ token });\n});\n\n// Verify token\napi.post(\"/api/owner/verify\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n return json({ ok: true });\n});\n\n// Dashboard stats — pending/accepted/denied counts per type in one query\napi.get(\"/api/owner/stats\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const result = await sqlite.execute(\n `SELECT t.id as type_id, t.name as type_name, t.status as type_status,\n SUM(CASE WHEN a.status = 'pending' THEN 1 ELSE 0 END) as pending,\n SUM(CASE WHEN a.status = 'accepted' THEN 1 ELSE 0 END) as accepted,\n SUM(CASE WHEN a.status = 'denied' THEN 1 ELSE 0 END) as denied,\n COUNT(a.id) as total\n FROM application_types t\n LEFT JOIN applications a ON a.type_id = t.id\n GROUP BY t.id, t.name, t.status\n ORDER BY t.created_at DESC`,\n );\n const rows = result.rows.map((row) => ({\n type_id: Number(row.type_id),\n type_name: row.type_name,\n type_status: row.type_status,\n pending: Number(row.pending),\n accepted: Number(row.accepted),\n denied: Number(row.denied),\n total: Number(row.total),\n }));\n const totalPending = rows.reduce((sum, r) => sum + r.pending, 0);\n const totalAccepted = rows.reduce((sum, r) => sum + r.accepted, 0);\n const totalDenied = rows.reduce((sum, r) => sum + r.denied, 0);\n return json({ totalPending, totalAccepted, totalDenied, types: rows });\n});\n\n// List ALL application types (owner)\napi.get(\"/api/owner/types\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const result = await sqlite.execute(\"SELECT * FROM application_types ORDER BY created_at DESC\");\n\n const types = [];\n for (const row of result.rows) {\n const t = normalizeType(row);\n const countResult = await sqlite.execute({\n sql: \"SELECT COUNT(*) as count FROM applications WHERE type_id = ?\",\n args: [t.id],\n });\n types.push({ ...t, applicationCount: countResult.rows[0].count });\n }\n return json(types);\n});\n\n// Create application type\napi.post(\"/api/owner/types\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n\n const name = typeof body.name === \"string\" ? body.name.trim() : \"\";\n if (!name) return json({ error: \"Application name is required\" }, 400);\n\n // Validate questions\n const questions = Array.isArray(body.questions) ? body.questions : [];\n for (const q of questions) {\n if (typeof q.label !== \"string\" || !q.label.trim()) {\n return json({ error: \"Each question must have a label\" }, 400);\n }\n q.type = q.type === \"textarea\" ? \"textarea\" : \"text\";\n q.required = !!q.required;\n q.placeholder = typeof q.placeholder === \"string\" ? q.placeholder : \"\";\n }\n\n const result = await sqlite.execute({\n sql: \"INSERT INTO application_types (name, description, status, questions) VALUES (?, ?, ?, ?)\",\n args: [\n name,\n typeof body.description === \"string\" ? body.description.trim() : \"\",\n body.status ?? \"active\",\n JSON.stringify(questions),\n ],\n });\n\n return json({ id: result.lastInsertRowid, ok: true }, 201);\n});\n\n// Update application type\napi.put(\"/api/owner/types/:id\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n\n const updates: string[] = [];\n const args: (string | number)[] = [];\n\n if (body.name !== undefined) { updates.push(\"name = ?\"); args.push(body.name.trim()); }\n if (body.description !== undefined) { updates.push(\"description = ?\"); args.push(body.description.trim()); }\n if (body.status !== undefined) { updates.push(\"status = ?\"); args.push(body.status); }\n if (body.questions !== undefined) {\n const questions = Array.isArray(body.questions) ? body.questions : [];\n for (const q of questions) {\n q.type = q.type === \"textarea\" ? \"textarea\" : \"text\";\n q.required = !!q.required;\n q.placeholder = typeof q.placeholder === \"string\" ? q.placeholder : \"\";\n }\n updates.push(\"questions = ?\"); args.push(JSON.stringify(questions));\n }\n\n if (updates.length === 0) return json({ error: \"No fields to update\" }, 400);\n args.push(id);\n\n await sqlite.execute({\n sql: `UPDATE application_types SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n\n return json({ ok: true });\n});\n\n// Delete application type\napi.delete(\"/api/owner/types/:id\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n await sqlite.batch([\n { sql: \"DELETE FROM applications WHERE type_id = ?\", args: [id] },\n { sql: \"DELETE FROM application_types WHERE id = ?\", args: [id] },\n ]);\n return json({ ok: true });\n});\n\n// List all applications for a type (owner)\napi.get(\"/api/owner/types/:id/applications\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n const status = c.req.query(\"status\");\n let sql = \"SELECT * FROM applications WHERE type_id = ?\";\n const args: (string | number)[] = [id];\n if (status && status !== \"all\") {\n sql += \" AND status = ?\";\n args.push(status);\n }\n sql += \" ORDER BY created_at DESC\";\n const result = await sqlite.execute({ sql, args });\n return json(result.rows.map((row) => ({\n id: Number(row.id),\n type_id: Number(row.type_id),\n applicant_name: row.applicant_name,\n applicant_id: row.applicant_id,\n answers: JSON.parse(row.answers as string),\n status: row.status,\n created_at: row.created_at,\n })));\n});\n\n// Review a specific application (owner)\napi.get(\"/api/owner/applications/:aid\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const aid = parseInt(c.req.param(\"aid\"));\n const result = await sqlite.execute({\n sql: `SELECT a.*, t.name as type_name, t.questions FROM applications a\n JOIN application_types t ON a.type_id = t.id\n WHERE a.id = ?`,\n args: [aid],\n });\n if (result.rows.length === 0) return json({ error: \"Application not found\" }, 404);\n const row = result.rows[0];\n return json({\n id: Number(row.id),\n type_id: Number(row.type_id),\n type_name: row.type_name,\n applicant_name: row.applicant_name,\n applicant_id: row.applicant_id,\n answers: JSON.parse(row.answers as string),\n questions: JSON.parse(row.questions as string),\n status: row.status,\n created_at: row.created_at,\n });\n});\n\n// Update application status (accept/deny)\napi.patch(\"/api/owner/applications/:aid\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const aid = parseInt(c.req.param(\"aid\"));\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n\n const newStatus = body.status;\n if (![\"pending\", \"accepted\", \"denied\"].includes(newStatus)) {\n return json({ error: \"Status must be pending, accepted, or denied\" }, 400);\n }\n\n // Require reviewer name for accept/deny\n let reviewerName = \"\";\n if (newStatus === \"accepted\" || newStatus === \"denied\") {\n reviewerName = typeof body.reviewerName === \"string\" ? body.reviewerName.trim() : \"\";\n if (!reviewerName) {\n return json({ error: \"Your name is required to accept or deny an application\" }, 400);\n }\n }\n\n // Get application details for Discord notification\n const appResult = await sqlite.execute({\n sql: `SELECT a.*, t.name as type_name FROM applications a\n JOIN application_types t ON a.type_id = t.id\n WHERE a.id = ?`,\n args: [aid],\n });\n if (appResult.rows.length === 0) return json({ error: \"Application not found\" }, 404);\n const app = appResult.rows[0];\n\n await sqlite.execute({\n sql: \"UPDATE applications SET status = ?, reviewer_name = ? WHERE id = ?\",\n args: [newStatus, reviewerName, aid],\n });\n\n // Discord webhook on status change (only for accept/deny)\n if (newStatus === \"accepted\" || newStatus === \"denied\") {\n const color = newStatus === \"accepted\" ? 0x2ecc71 : 0xe74c3c;\n const emoji = newStatus === \"accepted\" ? \"✅\" : \"❌\";\n await sendDiscordWebhook({\n title: `${emoji} Application ${newStatus.toUpperCase()}`,\n description: `**${app.type_name}** — \\`${app.applicant_name}\\` (\\`${app.applicant_id}\\`)`,\n color,\n fields: [\n { name: \"Application ID\", value: `#${aid}`, inline: true },\n { name: \"Decision\", value: newStatus === \"accepted\" ? \"Accepted ✅\" : \"Denied ❌\", inline: true },\n { name: \"Reviewed By\", value: reviewerName, inline: false },\n ],\n footer: { text: \"DDRP Applications\" },\n timestamp: new Date().toISOString(),\n });\n }\n\n return json({ ok: true });\n});\n\n// Delete an application\napi.delete(\"/api/owner/applications/:aid\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const aid = parseInt(c.req.param(\"aid\"));\n await sqlite.execute({ sql: \"DELETE FROM applications WHERE id = ?\", args: [aid] });\n return json({ ok: true });\n});\n\n// ─── DISCORD OAUTH2 ──────────────────────────────────────────────────\n\napi.get(\"/api/auth/discord\", (c) => {\n const clientId = Deno.env.get(\"DISCORD_CLIENT_ID\");\n if (!clientId) return json({ error: \"Discord OAuth not configured\" }, 500);\n const redirectUri = `https://ddrp-applications.val.run/api/auth/discord/callback`;\n const state = c.req.query(\"state\") || \"\";\n const params = new URLSearchParams({\n client_id: clientId,\n redirect_uri: redirectUri,\n response_type: \"code\",\n scope: \"identify\",\n state,\n });\n return Response.redirect(`https://discord.com/api/oauth2/authorize?${params}`, 302);\n});\n\napi.get(\"/api/auth/discord/callback\", async (c) => {\n const origin = \"https://ddrp-applications.val.run\";\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\") || \"\";\n const error = c.req.query(\"error\");\n if (error) return Response.redirect(`${origin}/?discord_error=${encodeURIComponent(error)}`, 302);\n if (!code) return json({ error: \"No authorization code provided\" }, 400);\n\n const clientId = Deno.env.get(\"DISCORD_CLIENT_ID\");\n const clientSecret = Deno.env.get(\"DISCORD_CLIENT_SECRET\");\n if (!clientId || !clientSecret) return json({ error: \"Discord OAuth not configured\" }, 500);\n\n const redirectUri = `${origin}/api/auth/discord/callback`;\n const tokenRes = await fetch(\"https://discord.com/api/oauth2/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ client_id: clientId, client_secret: clientSecret, grant_type: \"authorization_code\", code, redirect_uri: redirectUri }),\n });\n if (!tokenRes.ok) {\n console.error(\"Discord token exchange failed:\", await tokenRes.text());\n return Response.redirect(`${origin}/?discord_error=token_failed`, 302);\n }\n const tokenData = await tokenRes.json();\n const userRes = await fetch(\"https://discord.com/api/users/@me\", { headers: { Authorization: `Bearer ${tokenData.access_token}` } });\n if (!userRes.ok) return Response.redirect(`${origin}/?discord_error=user_fetch_failed`, 302);\n const userData = await userRes.json();\n\n const redirectUrl = state ? `${origin}/?apply=${encodeURIComponent(state)}` : `${origin}/`;\n const headers = new Headers();\n headers.set(\"Location\", redirectUrl);\n headers.append(\"Set-Cookie\", `discord_id=${userData.id}; Path=/; Max-Age=31536000; SameSite=Lax`);\n headers.append(\"Set-Cookie\", `discord_name=${encodeURIComponent(userData.username)}; Path=/; Max-Age=31536000; SameSite=Lax`);\n return new Response(null, { status: 302, headers });\n});\n\n// ─── Main Handler ──────────────────────────────────────────────────\n\nexport default staticHTTPServer(import.meta.url, async (req) => {\n const url = new URL(req.url);\n if (url.pathname.startsWith(\"/api/\")) return await api.fetch(req);\n if (url.pathname === \"/source\") return new Response(null, { status: 302, headers: { Location: parseVal().links.self.val } });\n return null;\n});\n","label","ddrp-applications",[139],"b5ba2565-b5b9-47c3-8015-3926c303cc5e",["D",1785790289816],28,[34],"pulls","branches",1,"forks","envVars",{"_162":156,"_164":68},"connections",{"_162":68,"_163":68},"count","unfilledCount","emptyCount",{"_48":150,"_38":34,"_36":37,"_140":-5,"_46":47,"_45":14,"_142":31,"_43":171,"_13":152,"_39":26,"_40":42,"_30":31,"_147":-5,"_168":172,"_33":173},{"_48":138,"_38":139,"_36":62,"_140":-5,"_46":47,"_45":141,"_142":64,"_43":167,"_13":144,"_39":145,"_40":146,"_30":31,"_147":148,"_168":169,"_33":170},["D",1785790024987],"children",[],[139],["D",1785790289816],[],[34],["D",1785765120442],["D",1789690828256],{"_105":104,"_113":109},{"_105":104,"_106":107,"_108":109,"_19":60,"_110":111,"_112":31},{"_13":94,"_38":95,"_48":47,"_96":49,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":50,"_103":104},"ctx",{"_87":-5,"_133":212,"_213":214,"_215":216,"_217":31,"_218":31,"_219":31,"_220":64,"_221":-5,"_222":-7,"_223":-7,"_224":68,"_225":31,"_226":31,"_227":-5,"_228":31,"_229":31,"_230":31,"_231":-5},"ENV",{"_183":184,"_185":186,"_187":95,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

DDRP Applications

Open Applications

My Applications

Owner Access

📋 Owner Dashboard

DDRP Applications

Open Applications

My Applications

Owner Access

📋 Owner Dashboard

Diff · v41