Marx${activeTag ? ` – ${activeTag}` : \"\"}

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_184":185,"_186":187},"routes/_app.x.$handle.$name",{"_102":101,"_32":45,"_110":88,"_27":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_20":-5,"_122":123,"_124":125,"_126":25,"_127":128,"_129":130,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",3,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","019d3acc-a928-773a-93c5-3ca155f3ddbf","name","fileType","http","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// --- Auth helpers ---\n\nconst SESSION_COOKIE = \"marx_session\";\nconst SESSION_MAX_AGE = 60 * 60 * 24 * 30; // 30 days\n\nasync function createSessionToken(pw: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(pw + \":marx-session\");\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function isAuthenticated(req: Request): Promise {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const match = cookie.match(new RegExp(`${SESSION_COOKIE}=([^;]+)`));\n if (!match) return false;\n\n const pw = Deno.env.get(\"AUTH_PASSWORD\");\n if (!pw) return false;\n\n const expected = await createSessionToken(pw);\n return match[1] === expected;\n}\n\nfunction setSessionCookie(token: string): string {\n return `${SESSION_COOKIE}=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${SESSION_MAX_AGE}`;\n}\n\nfunction clearSessionCookie(): string {\n return `${SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`;\n}\n\n// --- Database helpers ---\n\nasync function getAllBookmarks() {\n const result = await sqlite.execute(`\n SELECT b.id, b.url, b.title, b.description, b.saved,\n GROUP_CONCAT(t.name) as tags\n FROM bookmarks b\n LEFT JOIN bookmark_tags bt ON b.id = bt.bookmark_id\n LEFT JOIN tags t ON bt.tag_id = t.id\n GROUP BY b.id\n ORDER BY b.saved DESC\n `);\n return result.rows.map(rowToBookmark);\n}\n\nasync function getBookmarksByTag(tagSlug: string) {\n const result = await sqlite.execute({\n sql: `\n SELECT b.id, b.url, b.title, b.description, b.saved,\n GROUP_CONCAT(t2.name) as tags\n FROM bookmarks b\n JOIN bookmark_tags bt ON b.id = bt.bookmark_id\n JOIN tags t ON bt.tag_id = t.id\n LEFT JOIN bookmark_tags bt2 ON b.id = bt2.bookmark_id\n LEFT JOIN tags t2 ON bt2.tag_id = t2.id\n WHERE LOWER(REPLACE(REPLACE(t.name, ' ', '-'), ':', '-')) = ?\n GROUP BY b.id\n ORDER BY b.saved DESC\n `,\n args: [tagSlug],\n });\n return result.rows.map(rowToBookmark);\n}\n\nasync function getAllTags() {\n const result = await sqlite.execute(`\n SELECT t.name, COUNT(bt.bookmark_id) as count\n FROM tags t\n JOIN bookmark_tags bt ON t.id = bt.tag_id\n GROUP BY t.id\n ORDER BY t.name COLLATE NOCASE\n `);\n return result.rows.map((row: any) => ({\n name: row.name,\n slug: slugify(row.name),\n count: row.count,\n }));\n}\n\nasync function renameTag(oldName: string, newName: string) {\n const trimmed = newName.trim();\n if (!trimmed) throw new Error(\"Tag name cannot be empty\");\n\n const existing = await sqlite.execute({\n sql: \"SELECT id FROM tags WHERE name = ?\",\n args: [trimmed],\n });\n\n if (existing.rows.length > 0) {\n const oldTag = await sqlite.execute({\n sql: \"SELECT id FROM tags WHERE name = ?\",\n args: [oldName],\n });\n if (oldTag.rows.length === 0) throw new Error(\"Original tag not found\");\n\n const oldId = (oldTag.rows[0] as any).id;\n const newId = (existing.rows[0] as any).id;\n\n // Move bookmark associations to the existing tag, ignoring duplicates\n await sqlite.execute({\n sql: `UPDATE OR IGNORE bookmark_tags SET tag_id = ? WHERE tag_id = ?`,\n args: [newId, oldId],\n });\n // Delete any remaining associations (duplicates that couldn't be moved)\n await sqlite.execute({\n sql: \"DELETE FROM bookmark_tags WHERE tag_id = ?\",\n args: [oldId],\n });\n // Delete the old tag\n await sqlite.execute({\n sql: \"DELETE FROM tags WHERE id = ?\",\n args: [oldId],\n });\n } else {\n await sqlite.execute({\n sql: \"UPDATE tags SET name = ? WHERE name = ?\",\n args: [trimmed, oldName],\n });\n }\n}\n\nasync function deleteTag(name: string) {\n const tag = await sqlite.execute({\n sql: \"SELECT id FROM tags WHERE name = ?\",\n args: [name],\n });\n if (tag.rows.length === 0) throw new Error(\"Tag not found\");\n\n const tagId = (tag.rows[0] as any).id;\n await sqlite.execute({\n sql: \"DELETE FROM bookmark_tags WHERE tag_id = ?\",\n args: [tagId],\n });\n await sqlite.execute({\n sql: \"DELETE FROM tags WHERE id = ?\",\n args: [tagId],\n });\n}\n\nasync function updateBookmark(id: number, url: string, title: string, description: string, tags: string[]) {\n await sqlite.execute({\n sql: \"UPDATE bookmarks SET url = ?, title = ?, description = ? WHERE id = ?\",\n args: [url, title, description, id],\n });\n\n // Remove existing tag associations\n await sqlite.execute({\n sql: \"DELETE FROM bookmark_tags WHERE bookmark_id = ?\",\n args: [id],\n });\n\n // Add new tags\n for (const tagName of tags) {\n const trimmed = tagName.trim();\n if (!trimmed) continue;\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO tags (name) VALUES (?)\",\n args: [trimmed],\n });\n const tagResult = await sqlite.execute({\n sql: \"SELECT id FROM tags WHERE name = ?\",\n args: [trimmed],\n });\n if (tagResult.rows.length > 0) {\n const tagId = (tagResult.rows[0] as any).id;\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO bookmark_tags (bookmark_id, tag_id) VALUES (?, ?)\",\n args: [id, tagId],\n });\n }\n }\n}\n\nasync function deleteBookmark(id: number) {\n await sqlite.execute({\n sql: \"DELETE FROM bookmark_tags WHERE bookmark_id = ?\",\n args: [id],\n });\n await sqlite.execute({\n sql: \"DELETE FROM bookmarks WHERE id = ?\",\n args: [id],\n });\n}\n\nfunction rowToBookmark(row: any) {\n return {\n id: row.id,\n url: row.url,\n title: row.title,\n description: row.description,\n saved: row.saved,\n tags: row.tags ? row.tags.split(\",\") : [],\n };\n}\n\nfunction slugify(tag: string): string {\n return tag.toLowerCase().replace(/[^a-z0-9]+/g, \"-\").replace(/(^-|-$)/g, \"\");\n}\n\nfunction formatDate(isoDate: string): string {\n const d = new Date(isoDate);\n const day = d.getUTCDate();\n const month = d.toLocaleDateString(\"en-US\", { month: \"short\", timeZone: \"UTC\" });\n const year = d.getUTCFullYear();\n return `${day} ${month} ${year}`;\n}\n\n// --- Tag grouping (by first letter) ---\n\nfunction groupTagsByLetter(tags: { name: string; slug: string; count: number }[]) {\n const groups: Record = {};\n for (const tag of tags) {\n const letter = tag.name.charAt(0).toUpperCase();\n if (!groups[letter]) groups[letter] = [];\n groups[letter].push(tag);\n }\n return Object.keys(groups).sort().map((letter) => ({ letter, tags: groups[letter] }));\n}\n\n// --- HTML rendering ---\n\nfunction renderPage(bookmarks: any[], tags: any[], activeTag?: string, authenticated = false) {\n const tagGroups = groupTagsByLetter(tags);\n\n return `\n\n\n \n \n Marx${activeTag ? ` – ${activeTag}` : \"\"}\n \n \n\n\n \n\n

\n \n\n

\n ${bookmarks.map((b) => renderBookmarkItem(b, authenticated)).join(\"\\n\")}\n

\n${authenticated ? managementScript(tags.map(t => t.name)) : \"\"}\n\n`;\n}\n\nfunction renderBookmarkItem(bookmark: any, authenticated = false): string {\n const tagsHtml = bookmark.tags.length\n ? `${bookmark.tags\n .map((t: string) => `#${t}`)\n .join(\" \")}`\n : \"\";\n\n const separator = bookmark.tags.length && bookmark.description ? ` | ` : \"\";\n const descHtml = bookmark.description ? `${escapeHtml(bookmark.description)}` : \"\";\n\n const metaLine = tagsHtml || descHtml\n ? `

${tagsHtml}${separator}${descHtml}

`\n : \"\";\n\n const id = bookmark.id;\n const jsData = escapeAttr(JSON.stringify({ id, url: bookmark.url, title: bookmark.title, description: bookmark.description, tags: bookmark.tags }));\n\n const actionsHtml = authenticated\n ? `\n \n \n `\n : \"\";\n\n const editFormHtml = authenticated\n ? ``\n : \"\";\n\n return `

\n \n $\"\"$ \n ${escapeHtml(bookmark.title || bookmark.url)}\n \n ${actionsHtml}\n

\n ${metaLine}\n

${formatDate(bookmark.saved)}

\n ${editFormHtml}\n

`;\n}\n\nfunction renderTagSidebar(tagGroups: any[], activeTag?: string, authenticated = false): string {\n if (activeTag) {\n const tagActions = authenticated\n ? `

\n \n \n

`\n : \"\";\n return `

Tags

\n ${escapeHtml(activeTag)} ×\n

\n ${tagActions}\n

`;\n }\n\n const groupsHtml = tagGroups\n .map(\n (g) =>\n `

${g.tags\n .map((t: any) => `${escapeHtml(t.name)}`)\n .join(\"\")}

`,\n )\n .join(\"\");\n\n return `

Tags

${groupsHtml}

`;\n}\n\nfunction managementScript(allTagNames: string[]): string {\n return ``;\n}\n\nfunction escapeHtml(str: string): string {\n return str.replace(/&/g, \"&\").replace(//g, \">\").replace(/\"/g, \""\");\n}\n\nfunction escapeAttr(str: string): string {\n return str.replace(/&/g, \"&\").replace(/\"/g, \""\").replace(/'/g, \"'\").replace(//g, \">\");\n}\n\n// --- Login page ---\n\nfunction renderLoginPage(error?: string): string {\n return `\n\n\n \n \n Marx – Login\n \n \n\n\n \n

\n \n

\n\n`;\n}\n\nfunction unauthorizedResponse(): Response {\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n}\n\n// --- Import endpoint ---\n\nasync function handleImport(req: Request): Promise {\n const bookmarks: any[] = await req.json();\n\n // Collect unique tags\n const tagSet = new Set();\n for (const b of bookmarks) {\n for (const t of b.tags || []) tagSet.add(t);\n }\n\n // Insert tags\n for (const tag of tagSet) {\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO tags (name) VALUES (?)\",\n args: [tag],\n });\n }\n\n // Get tag ID map\n const tagResult = await sqlite.execute(\"SELECT id, name FROM tags\");\n const tagIdMap = new Map();\n for (const row of tagResult.rows as any[]) {\n tagIdMap.set(row.name, row.id);\n }\n\n // Insert bookmarks\n for (const b of bookmarks) {\n const result = await sqlite.execute({\n sql: \"INSERT INTO bookmarks (url, title, description, saved) VALUES (?, ?, ?, ?)\",\n args: [b.url, b.title || \"\", b.description || \"\", b.saved],\n });\n const bookmarkId = result.lastInsertRowid;\n\n for (const tag of b.tags || []) {\n const tagId = tagIdMap.get(tag);\n if (tagId && bookmarkId) {\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO bookmark_tags (bookmark_id, tag_id) VALUES (?, ?)\",\n args: [Number(bookmarkId), tagId],\n });\n }\n }\n }\n\n return new Response(JSON.stringify({ imported: bookmarks.length }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\n// --- Router ---\n\nexport default async function(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n const authenticated = await isAuthenticated(req);\n\n // Login page\n if (path === \"/login\" && req.method === \"GET\") {\n if (authenticated) return Response.redirect(new URL(\"/\", req.url), 302);\n return new Response(renderLoginPage(), { headers: { \"Content-Type\": \"text/html\" } });\n }\n\n // Login form submission\n if (path === \"/login\" && req.method === \"POST\") {\n const formData = await req.formData();\n const pw = formData.get(\"password\") as string;\n const expected = Deno.env.get(\"AUTH_PASSWORD\");\n\n if (!expected || pw !== expected) {\n return new Response(renderLoginPage(\"Incorrect password\"), {\n status: 401,\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n const token = await createSessionToken(pw);\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/\",\n \"Set-Cookie\": setSessionCookie(token),\n },\n });\n }\n\n // Logout\n if (path === \"/logout\") {\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/\",\n \"Set-Cookie\": clearSessionCookie(),\n },\n });\n }\n\n // --- Protected mutation endpoints (require auth) ---\n\n // Import API\n if (path === \"/api/import\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n return handleImport(req);\n }\n\n // Rename tag API\n if (path === \"/api/tags/rename\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { oldName, newName } = await req.json();\n await renameTag(oldName, newName);\n return Response.json({ ok: true, slug: slugify(newName.trim()) });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Delete tag API\n if (path === \"/api/tags/delete\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { name } = await req.json();\n await deleteTag(name);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Update bookmark API\n if (path === \"/api/bookmarks/update\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { id, url, title, description, tags } = await req.json();\n await updateBookmark(id, url, title, description, tags || []);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Delete bookmark API\n if (path === \"/api/bookmarks/delete\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { id } = await req.json();\n await deleteBookmark(id);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Tag page: /tags/{slug}/\n const tagMatch = path.match(/^\\/tags\\/([^/]+)\\/?$/);\n if (tagMatch) {\n const tagSlug = tagMatch[1];\n const [bookmarks, tags] = await Promise.all([getBookmarksByTag(tagSlug), getAllTags()]);\n const activeTag = tags.find((t) => t.slug === tagSlug)?.name || tagSlug;\n return new Response(renderPage(bookmarks, tags, activeTag, authenticated), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // Home page\n if (path === \"/\" || path === \"\") {\n const [bookmarks, tags] = await Promise.all([getAllBookmarks(), getAllTags()]);\n return new Response(renderPage(bookmarks, tags, undefined, authenticated), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}\n","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// --- Auth helpers ---\n\nconst SESSION_COOKIE = \"marx_session\";\nconst SESSION_MAX_AGE = 60 * 60 * 24 * 30; // 30 days\n\nasync function createSessionToken(pw: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(pw + \":marx-session\");\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function isAuthenticated(req: Request): Promise {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const match = cookie.match(new RegExp(`${SESSION_COOKIE}=([^;]+)`));\n if (!match) return false;\n\n const pw = Deno.env.get(\"AUTH_PASSWORD\");\n if (!pw) return false;\n\n const expected = await createSessionToken(pw);\n return match[1] === expected;\n}\n\nfunction setSessionCookie(token: string): string {\n return `${SESSION_COOKIE}=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${SESSION_MAX_AGE}`;\n}\n\nfunction clearSessionCookie(): string {\n return `${SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`;\n}\n\n// --- Database helpers ---\n\nasync function getAllBookmarks() {\n const result = await sqlite.execute(`\n SELECT b.id, b.url, b.title, b.description, b.saved,\n GROUP_CONCAT(t.name) as tags\n FROM bookmarks b\n LEFT JOIN bookmark_tags bt ON b.id = bt.bookmark_id\n LEFT JOIN tags t ON bt.tag_id = t.id\n GROUP BY b.id\n ORDER BY b.saved DESC\n `);\n return result.rows.map(rowToBookmark);\n}\n\nasync function getBookmarksByTag(tagSlug: string) {\n const result = await sqlite.execute({\n sql: `\n SELECT b.id, b.url, b.title, b.description, b.saved,\n GROUP_CONCAT(t2.name) as tags\n FROM bookmarks b\n JOIN bookmark_tags bt ON b.id = bt.bookmark_id\n JOIN tags t ON bt.tag_id = t.id\n LEFT JOIN bookmark_tags bt2 ON b.id = bt2.bookmark_id\n LEFT JOIN tags t2 ON bt2.tag_id = t2.id\n WHERE LOWER(REPLACE(REPLACE(t.name, ' ', '-'), ':', '-')) = ?\n GROUP BY b.id\n ORDER BY b.saved DESC\n `,\n args: [tagSlug],\n });\n return result.rows.map(rowToBookmark);\n}\n\nasync function getAllTags() {\n const result = await sqlite.execute(`\n SELECT t.name, COUNT(bt.bookmark_id) as count\n FROM tags t\n JOIN bookmark_tags bt ON t.id = bt.tag_id\n GROUP BY t.id\n ORDER BY t.name COLLATE NOCASE\n `);\n return result.rows.map((row: any) => ({\n name: row.name,\n slug: slugify(row.name),\n count: row.count,\n }));\n}\n\nasync function renameTag(oldName: string, newName: string) {\n const trimmed = newName.trim();\n if (!trimmed) throw new Error(\"Tag name cannot be empty\");\n\n const existing = await sqlite.execute({\n sql: \"SELECT id FROM tags WHERE name = ?\",\n args: [trimmed],\n });\n\n if (existing.rows.length > 0) {\n const oldTag = await sqlite.execute({\n sql: \"SELECT id FROM tags WHERE name = ?\",\n args: [oldName],\n });\n if (oldTag.rows.length === 0) throw new Error(\"Original tag not found\");\n\n const oldId = (oldTag.rows[0] as any).id;\n const newId = (existing.rows[0] as any).id;\n\n // Move bookmark associations to the existing tag, ignoring duplicates\n await sqlite.execute({\n sql: `UPDATE OR IGNORE bookmark_tags SET tag_id = ? WHERE tag_id = ?`,\n args: [newId, oldId],\n });\n // Delete any remaining associations (duplicates that couldn't be moved)\n await sqlite.execute({\n sql: \"DELETE FROM bookmark_tags WHERE tag_id = ?\",\n args: [oldId],\n });\n // Delete the old tag\n await sqlite.execute({\n sql: \"DELETE FROM tags WHERE id = ?\",\n args: [oldId],\n });\n } else {\n await sqlite.execute({\n sql: \"UPDATE tags SET name = ? WHERE name = ?\",\n args: [trimmed, oldName],\n });\n }\n}\n\nasync function deleteTag(name: string) {\n const tag = await sqlite.execute({\n sql: \"SELECT id FROM tags WHERE name = ?\",\n args: [name],\n });\n if (tag.rows.length === 0) throw new Error(\"Tag not found\");\n\n const tagId = (tag.rows[0] as any).id;\n await sqlite.execute({\n sql: \"DELETE FROM bookmark_tags WHERE tag_id = ?\",\n args: [tagId],\n });\n await sqlite.execute({\n sql: \"DELETE FROM tags WHERE id = ?\",\n args: [tagId],\n });\n}\n\nasync function updateBookmark(\n id: number,\n url: string,\n title: string,\n description: string,\n tags: string[],\n) {\n await sqlite.execute({\n sql:\n \"UPDATE bookmarks SET url = ?, title = ?, description = ? WHERE id = ?\",\n args: [url, title, description, id],\n });\n\n // Remove existing tag associations\n await sqlite.execute({\n sql: \"DELETE FROM bookmark_tags WHERE bookmark_id = ?\",\n args: [id],\n });\n\n // Add new tags\n for (const tagName of tags) {\n const trimmed = tagName.trim();\n if (!trimmed) continue;\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO tags (name) VALUES (?)\",\n args: [trimmed],\n });\n const tagResult = await sqlite.execute({\n sql: \"SELECT id FROM tags WHERE name = ?\",\n args: [trimmed],\n });\n if (tagResult.rows.length > 0) {\n const tagId = (tagResult.rows[0] as any).id;\n await sqlite.execute({\n sql:\n \"INSERT OR IGNORE INTO bookmark_tags (bookmark_id, tag_id) VALUES (?, ?)\",\n args: [id, tagId],\n });\n }\n }\n}\n\nasync function deleteBookmark(id: number) {\n await sqlite.execute({\n sql: \"DELETE FROM bookmark_tags WHERE bookmark_id = ?\",\n args: [id],\n });\n await sqlite.execute({\n sql: \"DELETE FROM bookmarks WHERE id = ?\",\n args: [id],\n });\n}\n\nfunction rowToBookmark(row: any) {\n return {\n id: row.id,\n url: row.url,\n title: row.title,\n description: row.description,\n saved: row.saved,\n tags: row.tags ? row.tags.split(\",\") : [],\n };\n}\n\nfunction slugify(tag: string): string {\n return tag.toLowerCase().replace(/[^a-z0-9]+/g, \"-\").replace(/(^-|-$)/g, \"\");\n}\n\nfunction formatDate(isoDate: string): string {\n const d = new Date(isoDate);\n const day = d.getUTCDate();\n const month = d.toLocaleDateString(\"en-US\", {\n month: \"short\",\n timeZone: \"UTC\",\n });\n const year = d.getUTCFullYear();\n return `${day} ${month} ${year}`;\n}\n\n// --- Tag grouping (by first letter) ---\n\nfunction groupTagsByLetter(\n tags: { name: string; slug: string; count: number }[],\n) {\n const groups: Record = {};\n for (const tag of tags) {\n const letter = tag.name.charAt(0).toUpperCase();\n if (!groups[letter]) groups[letter] = [];\n groups[letter].push(tag);\n }\n return Object.keys(groups).sort().map((letter) => ({\n letter,\n tags: groups[letter],\n }));\n}\n\n// --- HTML rendering ---\n\nfunction renderPage(\n bookmarks: any[],\n tags: any[],\n activeTag?: string,\n authenticated = false,\n) {\n const tagGroups = groupTagsByLetter(tags);\n\n return `\n\n\n \n \n Marx${activeTag ? ` – ${activeTag}` : \"\"}\n \n \n\n\n \n\n

\n \n\n

\n ${bookmarks.map((b) => renderBookmarkItem(b, authenticated)).join(\"\\n\")}\n

\n${authenticated ? managementScript(tags.map((t) => t.name)) : \"\"}\n\n`;\n}\n\nfunction renderBookmarkItem(bookmark: any, authenticated = false): string {\n const tagsHtml = bookmark.tags.length\n ? `${\n bookmark.tags\n .map((t: string) =>\n `#${t}`\n )\n .join(\" \")\n }`\n : \"\";\n\n const separator = bookmark.tags.length && bookmark.description\n ? ` | `\n : \"\";\n const descHtml = bookmark.description\n ? `${escapeHtml(bookmark.description)}`\n : \"\";\n\n const metaLine = tagsHtml || descHtml\n ? `

${tagsHtml}${separator}${descHtml}

`\n : \"\";\n\n const id = bookmark.id;\n const jsData = escapeAttr(\n JSON.stringify({\n id,\n url: bookmark.url,\n title: bookmark.title,\n description: bookmark.description,\n tags: bookmark.tags,\n }),\n );\n\n const actionsHtml = authenticated\n ? `\n \n \n `\n : \"\";\n\n const editFormHtml = authenticated\n ? ``\n : \"\";\n\n return `

\n \n $\"\"$ \n ${escapeHtml(bookmark.title || bookmark.url)}\n \n ${actionsHtml}\n

\n ${metaLine}\n

${formatDate(bookmark.saved)}

\n ${editFormHtml}\n

`;\n}\n\nfunction renderTagSidebar(\n tagGroups: any[],\n activeTag?: string,\n authenticated = false,\n): string {\n if (activeTag) {\n const tagActions = authenticated\n ? `

\n \n \n

`\n : \"\";\n return `

Tags

\n ${\n escapeHtml(activeTag)\n } ×\n

\n ${tagActions}\n

`;\n }\n\n const groupsHtml = tagGroups\n .map(\n (g) =>\n `

${\n g.tags\n .map((t: any) =>\n `${\n escapeHtml(t.name)\n }`\n )\n .join(\"\")\n }

`,\n )\n .join(\"\");\n\n return `

Tags

${groupsHtml}

`;\n}\n\nfunction managementScript(allTagNames: string[]): string {\n return ``;\n}\n\nfunction escapeHtml(str: string): string {\n return str.replace(/&/g, \"&\").replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\nfunction escapeAttr(str: string): string {\n return str.replace(/&/g, \"&\").replace(/\"/g, \""\").replace(\n /'/g,\n \"'\",\n ).replace(//g, \">\");\n}\n\n// --- Login page ---\n\nfunction renderLoginPage(error?: string): string {\n return `\n\n\n \n \n KMan – Login\n \n \n\n\n \n

\n \n

\n\n`;\n}\n\nfunction unauthorizedResponse(): Response {\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n}\n\n// --- Import endpoint ---\n\nasync function handleImport(req: Request): Promise {\n const bookmarks: any[] = await req.json();\n\n // Collect unique tags\n const tagSet = new Set();\n for (const b of bookmarks) {\n for (const t of b.tags || []) tagSet.add(t);\n }\n\n // Insert tags\n for (const tag of tagSet) {\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO tags (name) VALUES (?)\",\n args: [tag],\n });\n }\n\n // Get tag ID map\n const tagResult = await sqlite.execute(\"SELECT id, name FROM tags\");\n const tagIdMap = new Map();\n for (const row of tagResult.rows as any[]) {\n tagIdMap.set(row.name, row.id);\n }\n\n // Insert bookmarks\n for (const b of bookmarks) {\n const result = await sqlite.execute({\n sql:\n \"INSERT INTO bookmarks (url, title, description, saved) VALUES (?, ?, ?, ?)\",\n args: [b.url, b.title || \"\", b.description || \"\", b.saved],\n });\n const bookmarkId = result.lastInsertRowid;\n\n for (const tag of b.tags || []) {\n const tagId = tagIdMap.get(tag);\n if (tagId && bookmarkId) {\n await sqlite.execute({\n sql:\n \"INSERT OR IGNORE INTO bookmark_tags (bookmark_id, tag_id) VALUES (?, ?)\",\n args: [Number(bookmarkId), tagId],\n });\n }\n }\n }\n\n return new Response(JSON.stringify({ imported: bookmarks.length }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\n// --- Router ---\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n const authenticated = await isAuthenticated(req);\n\n // Login page\n if (path === \"/login\" && req.method === \"GET\") {\n if (authenticated) return Response.redirect(new URL(\"/\", req.url), 302);\n return new Response(renderLoginPage(), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // Login form submission\n if (path === \"/login\" && req.method === \"POST\") {\n const formData = await req.formData();\n const pw = formData.get(\"password\") as string;\n const expected = Deno.env.get(\"AUTH_PASSWORD\");\n\n if (!expected || pw !== expected) {\n return new Response(renderLoginPage(\"Incorrect password\"), {\n status: 401,\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n const token = await createSessionToken(pw);\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/\",\n \"Set-Cookie\": setSessionCookie(token),\n },\n });\n }\n\n // Logout\n if (path === \"/logout\") {\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/\",\n \"Set-Cookie\": clearSessionCookie(),\n },\n });\n }\n\n // --- Protected mutation endpoints (require auth) ---\n\n // Import API\n if (path === \"/api/import\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n return handleImport(req);\n }\n\n // Rename tag API\n if (path === \"/api/tags/rename\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { oldName, newName } = await req.json();\n await renameTag(oldName, newName);\n return Response.json({ ok: true, slug: slugify(newName.trim()) });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Delete tag API\n if (path === \"/api/tags/delete\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { name } = await req.json();\n await deleteTag(name);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Update bookmark API\n if (path === \"/api/bookmarks/update\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { id, url, title, description, tags } = await req.json();\n await updateBookmark(id, url, title, description, tags || []);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Delete bookmark API\n if (path === \"/api/bookmarks/delete\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { id } = await req.json();\n await deleteBookmark(id);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Tag page: /tags/{slug}/\n const tagMatch = path.match(/^\\/tags\\/([^/]+)\\/?$/);\n if (tagMatch) {\n const tagSlug = tagMatch[1];\n const [bookmarks, tags] = await Promise.all([\n getBookmarksByTag(tagSlug),\n getAllTags(),\n ]);\n const activeTag = tags.find((t) => t.slug === tagSlug)?.name || tagSlug;\n return new Response(renderPage(bookmarks, tags, activeTag, authenticated), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // Home page\n if (path === \"/\" || path === \"\") {\n const [bookmarks, tags] = await Promise.all([\n getAllBookmarks(),\n getAllTags(),\n ]);\n return new Response(renderPage(bookmarks, tags, undefined, authenticated), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","createdAt",["D",1774808204311],"branchVersion","branchId","ee10519c-2b9a-11f1-8896-42dde27851f2","id","ee0becf6-2b9a-11f1-8896-42dde27851f2","marx",["D",1774807984346],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Bookmark manager with tag filtering, backed by SQLite","imageUrl","019d3acb-4266-73d5-b8a9-93ce4f16a9b3","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019d3acb-4266-73d5-b8a9-96af6d3b07cc","tursoName","ee0becf62b9a11f1889642dde27851f2","tursoHostname","ee0becf62b9a11f1889642dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789516253896],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_109":105},"org",{"_102":101,"_103":-5,"_104":105,"_18":55,"_106":107,"_108":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":91,"_92":93,"_94":50,"_95":96,"_97":98,"_99":45,"_100":101},"isOwned",4,"main","projectId","forkedBranchId","c018ddf0-1aff-11f1-bf64-42dde27851f2","forkedBranchVersion",28,"forkedProjectPrivacy","forkedProjectId","c0188634-1aff-11f1-bf64-42dde27851f2","forkedProjectOrgId","e32aedd8-e0da-4562-9eaa-0e87a5bf5ecc","projectName","userHandle","KMan","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzNCZDkxUG1lV2dqZEV1N1ljYXFxVUM1Ull2bSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":179,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":180,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":181,"_82":182,"_84":183,"_86":25},"tree",[170,171],"files",[170,171],"counts",{"_160":61,"_161":150,"_162":61,"_163":164,"_165":166},"contents",[144,145],"upstreamProject",{"_43":96,"_32":45,"_52":53,"_54":-5,"_49":50,"_80":142},"upstreamBranch",{"_43":91,"_38":135,"_136":137,"_32":88,"_89":96,"_13":138,"_90":-5,"_92":-5,"_139":140,"_47":-5,"_86":25,"_49":50,"_100":141,"_62":98,"_99":45},"emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},["D",1772982116698],"updatedAt",["D",1774983935664],29,"lockfileKey","1774983994732-esm.town_v_snptrs_marx@29-main","snptrs",{"_102":141,"_109":143},"https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ybGJINk9XVXlsZlFZSkFQdzBRRXpKYXFKMkUifQ",{"_43":153,"_32":154,"_30":155,"_147":-5,"_41":42,"_40":156,"_148":130,"_38":157,"_13":61,"_33":20,"_35":158,"_24":25,"_151":-5,"_27":159},{"_43":146,"_32":28,"_30":31,"_147":-5,"_41":42,"_40":14,"_148":25,"_38":149,"_13":150,"_33":34,"_35":37,"_24":25,"_151":-5,"_27":152},"7124e0a2-2b9b-11f1-9e9b-42dde27851f2","parentId","latest",["D",1774808204311],1,"label",[28],"08f30a0e-2b9b-11f1-abd1-42dde27851f2","README.md","08f30acc-2b9b-11f1-abd1-42dde27851f2",2,["D",1774808029516],"# marx",[154],"pulls","branches","forks","envVars",{"_167":150,"_169":61},"connections",{"_167":61,"_168":61},"count","unfilledCount","emptyCount",{"_43":153,"_32":154,"_30":155,"_147":-5,"_41":42,"_40":156,"_148":130,"_38":176,"_13":61,"_33":20,"_35":158,"_24":25,"_151":-5,"_173":177,"_27":178},{"_43":146,"_32":28,"_30":31,"_147":-5,"_41":42,"_40":14,"_148":25,"_38":172,"_13":150,"_33":34,"_35":37,"_24":25,"_151":-5,"_173":174,"_27":175},["D",1774808204311],"children",[],[28],["D",1774808029516],[],[154],["D",1774807984346],["D",1789516253896],{"_102":101,"_109":105},{"_102":101,"_103":-5,"_104":105,"_18":55,"_106":107,"_108":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":91,"_92":93,"_94":50,"_95":96,"_97":98,"_99":45,"_100":101},"ctx",{"_80":-5,"_132":217,"_218":219,"_220":221,"_222":25,"_223":25,"_224":25,"_225":130,"_226":-5,"_227":-7,"_228":-7,"_229":61,"_230":25,"_231":25,"_232":-5,"_233":25,"_234":25,"_235":25,"_236":-5},"ENV",{"_188":189,"_190":191,"_192":88,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v3