[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_170":171,"_172":173},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_128":-5,"_20":129,"_22":130,"_131":132,"_133":134,"_25":135,"_24":-5,"_136":-5,"_137":-5,"_138":54,"_139":140,"_141":45,"_142":-5,"_143":-5,"_144":145},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","NOBODYHOME","name","Inboxbouncer-app","branchName","main","version","path","","project",{"_34":75,"_13":14,"_46":76,"_77":-5,"_78":54,"_79":80,"_81":80,"_82":83,"_84":-5,"_85":86,"_87":38,"_88":45,"_89":-5,"_90":-5,"_91":62,"_92":93,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":99,"_100":99,"_101":102,"_103":102,"_104":102,"_105":99,"_106":99,"_107":108,"_109":110,"_111":112,"_113":54},"tree",[66,67],"file","contents",[32,33],"upstream","pull","ahead","behind","envVars",{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":61,"_17":62,"_49":63,"_51":64,"_53":54,"_55":-5,"_18":65},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":56},"id","e5c51a3d-ae39-4c6b-a52e-a7f905c860fb","main.ts","fileId","28d31136-7ef0-11f1-8bf9-1607ee4eb77e","parentId","branchId","c6c00935-5ffe-41e9-af50-04d7cc6b1f01","branchVersion",9,"latest",true,"createdAt",["D",1783970996385],3,"fileType","http","content","// ═════════════════════════════════════════════════════════════════════════\n// INBOXBOUNCER — LIVE (Val Town edition) — FILE 1 of 2: main.ts\n// HTTP trigger → your dashboard.\n// File 2 (inbound.ts) gets an EMAIL trigger → your bouncer's email address.\n// Set env var ANTHROPIC_API_KEY (you already have it) for smarter replies.\n// ═════════════════════════════════════════════════════════════════════════\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n// ─────────────────────────── shared classifier ───────────────────────────\n// Ported 1:1 from Johnny's final classifier.js. GOLDEN RULE: fail OPEN.\nconst DISPOSABLE_TLDS = [\".biz\", \".info\", \".click\", \".top\", \".xyz\", \".icu\", \".rest\"];\nconst PITCH_PHRASES = [\n \"10x your\", \"boost your traffic\", \"increase your sales\", \"seo audit\",\n \"seo errors\", \"guest post\", \"backlink\", \"dofollow\", \"link building\",\n \"quick call\", \"hop on a call\", \"schedule a call\", \"book a demo\",\n \"limited slots\", \"limited time offer\", \"we build shopify\",\n \"app development services\", \"web design services\", \"digital marketing agency\",\n \"grow your instagram\", \"influencer marketing\", \"virtual assistant services\",\n \"dear store owner\", \"dear website owner\", \"act now\", \"don't miss out\",\n];\nconst SCAM_PHRASES = [\n \"your website has been infected\", \"malware detected\", \"site has a virus\",\n \"google blacklist\", \"your account will be suspended\", \"verify your account\",\n \"wire transfer\", \"western union\", \"inheritance\", \"beneficiary\",\n \"friends and family\", \"gift card\", \"overpayment\", \"shipping agent\",\n];\nconst BAIT_MOVES = [\n { rx: /\\b(bit\\.ly|tinyurl|t\\.co|is\\.gd|cutt\\.ly|rb\\.gy)\\b/i, why: \"Shortened/sketchy link\" },\n { rx: /\\b(screenshot|eror|error).{0,30}(here|link|click)/i, why: \"Link disguised as an error screenshot\" },\n { rx: /\\b(whatsapp|telegram|signal me|text me at)\\b/i, why: \"Tries to move chat off email\" },\n { rx: /\\b(money'?s? (gone|missing)|i (was )?charged but|paid but no)\\b/i, why: \"Payment-panic bait with no order on file\" },\n { rx: /\\.(html|zip|exe|scr)\\b/i, why: \"Dangerous attachment type\" },\n { rx: /\\b(urgent+|plss+|pls\\b).{0,40}(click|link|open)/i, why: \"Urgency push toward a link\" },\n];\nconst HELP_PHRASES = [\n \"order\", \"refund\", \"return\", \"exchange\", \"tracking\", \"shipping\",\n \"where is my\", \"hasn't arrived\", \"wrong size\", \"wrong item\", \"damaged\",\n \"cancel\", \"charged\", \"discount code\", \"restock\", \"size guide\", \"help\",\n];\nconst BULK_HEADER_HINTS = [\"list-unsubscribe\", \"x-mailer-campaign\", \"x-mc-user\", \"x-ses-outgoing\", \"precedence: bulk\"];\n\nexport function classify(email: any, ctx: any = {}) {\n const from = (email.from || \"\").toLowerCase();\n const body = `${email.subject || \"\"}\\n${email.text || \"\"}`.toLowerCase();\n const headers = (email.headers || \"\").toLowerCase();\n const reasons: string[] = [];\n let spam = 0, legit = 0;\n\n if (ctx.orderMatch) { legit += 4; reasons.push(\"✓ Matches a real order\"); }\n if (ctx.customerMatch) { legit += 3; reasons.push(\"✓ Sender is a known customer\"); }\n if (ctx.productMatch) { legit += 1.5; reasons.push(\"✓ Mentions one of your products\"); }\n\n const asksForHelp = HELP_PHRASES.some((p) => body.includes(p));\n if (asksForHelp) { legit += 1; reasons.push(\"Asks for help / support-shaped\"); }\n\n const pitchHits = PITCH_PHRASES.filter((p) => body.includes(p));\n if (pitchHits.length) { spam += 2 + pitchHits.length; reasons.push(`✗ Sales-pitch language (${pitchHits.slice(0, 3).join(\"; \")})`); }\n const scamHits = SCAM_PHRASES.filter((p) => body.includes(p));\n if (scamHits.length) { spam += 3 + scamHits.length; reasons.push(`✗ Known scam pattern (${scamHits.slice(0, 2).join(\"; \")})`); }\n\n if (!ctx.orderMatch && !ctx.customerMatch) {\n const baits = BAIT_MOVES.filter((b) => b.rx.test(body));\n if (baits.length && asksForHelp) {\n spam += 3 + baits.length * 1.5;\n reasons.push(`✗ Fake-customer scam: ${baits.map((b) => b.why).join(\"; \")}`);\n reasons.push(\"✗ No order or customer match to back the story up\");\n }\n }\n\n if (DISPOSABLE_TLDS.some((t) => from.endsWith(t) || from.includes(t + \">\")))\n { spam += 1.5; reasons.push(\"✗ Low-trust sender domain\"); }\n if (BULK_HEADER_HINTS.some((h) => headers.includes(h)))\n { spam += 2; reasons.push(\"✗ Bulk-mail campaign headers\"); }\n if (/no-?reply@|donotreply@/.test(from))\n { spam += 1; reasons.push(\"✗ No-reply sender\"); }\n\n const score = Math.max(0, Math.min(1, (spam - legit) / 8 + 0.5));\n let verdict: \"real\" | \"unsure\" | \"spam\";\n if (legit >= 3 && spam < 3) verdict = \"real\";\n else if (score >= 0.85) verdict = \"spam\";\n else if (score <= 0.35 && asksForHelp) verdict = \"real\";\n else verdict = \"unsure\"; // fail open → inbox\n\n if (verdict === \"unsure\") reasons.push(\"→ Not sure, delivering to inbox just in case\");\n return { verdict, score: Number(score.toFixed(2)), reasons };\n}\n\n// ─────────────────────────── runaround drafting ───────────────────────────\n// Guardrails preserved: no-reply/bulk senders never engaged; hard caps;\n// human-in-the-loop ALWAYS on this deployment (you copy + send drafts\n// yourself from a separate decoy address — never your real one).\nconst MAX_EXCHANGES = 8;\nconst CANNED = [\n \"Thanks so much for reaching out!! Quick thing before we proceed — could you resend that as a Word document? Our printer doesn't believe in PDFs.\",\n \"This sounds VERY promising. My business partner Gary handles all decisions of this type and he's on a silent retreat. Could you re-explain everything from the top, but for Gary?\",\n \"So sorry — the attachment opened sideways on my machine. Could you resend it as a PDF after all? Also, do you validate parking?\",\n \"Great news, I'm ready to move forward! Our accountant only accepts invoices by fax. Do you have a fax machine? Ours is 1-800-NICE-TRY.\",\n \"Almost there!! Our editorial board (me, my dog, and a laminated photo of the mall) meets quarterly. Could you resubmit the proposal in iambic pentameter for the ceremony? It's tradition.\",\n \"One more step: my screen only shows odd numbers. Could you list your pricing again, but only the odd parts?\",\n \"I've looped in our IT department (a laminated sign that says NO). They have concerns. Could you address the sign directly?\",\n \"Wonderful! Before the call, please confirm which of these you offer: (a) the thing, (b) the other thing, or (c) the thing you said, but slower.\",\n];\n\nexport function canEngage(email: any) {\n const from = (email.from || \"\").toLowerCase();\n if (/no-?reply@|donotreply@|mailer-daemon@|postmaster@/.test(from))\n return { ok: false, why: \"guardrail: no-reply/bounce sender\" };\n const headers = (email.headers || \"\").toLowerCase();\n if (headers.includes(\"precedence: bulk\"))\n return { ok: false, why: \"guardrail: bulk blast — likely spoofed\" };\n return { ok: true, why: \"\" };\n}\n\nexport async function draftReply(email: any, priorExchanges: number) {\n if (priorExchanges >= MAX_EXCHANGES) return null;\n const apiKey = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!apiKey) return CANNED[priorExchanges % CANNED.length];\n try {\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: { \"x-api-key\": apiKey, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({\n model: \"claude-3-5-haiku-20241022\",\n max_tokens: 300,\n system:\n \"You are 'Terry from the Fulfillment Dept', a decoy persona replying to a spammer/scammer. \" +\n \"Be cheerfully useless: ask endless clarifying questions, request re-sends in absurd formats, \" +\n \"invoke Gary (silent retreat) and the fax machine (1-800-NICE-TRY). Never share real info, \" +\n \"never click/acknowledge links, never agree to pay, never be abusive — just waste time politely. 2-4 sentences.\",\n messages: [{ role: \"user\", content: `${email.subject || \"\"}\\n\\n${email.text || \"\"}`.slice(0, 2000) }],\n }),\n });\n const json = await res.json();\n if (!res.ok) console.error(\"Anthropic API error:\", res.status, JSON.stringify(json));\n return json.content?.[0]?.text || CANNED[priorExchanges % CANNED.length];\n } catch (err) {\n console.error(\"draftReply error:\", err);\n return CANNED[priorExchanges % CANNED.length];\n }\n}\n\n// ─────────────────────────── shared processing ───────────────────────────\nexport async function processEmail(email: any) {\n const state = (await blob.getJSON(\"ib-state\").catch(() => null)) ?? { items: [], stats: { real: 0, unsure: 0, spam: 0, saved: 0 } };\n const { verdict, score, reasons } = classify(email);\n const entry: any = {\n id: Date.now() + \"-\" + Math.random().toString(36).slice(2, 7),\n at: new Date().toISOString(),\n from: email.from || \"unknown\", subject: email.subject || \"(no subject)\",\n text: (email.text || \"\").slice(0, 1500),\n verdict, score, reasons,\n };\n if (verdict === \"spam\") {\n state.stats.saved += 4;\n const gate = canEngage(email);\n if (gate.ok) {\n const draft = await draftReply(email, 0);\n entry.draft = draft?.text ?? draft ?? CANNED[0];\n if (draft?.debug) entry._debug = draft.debug;\n }\n else entry.draftBlocked = gate.why;\n }\n state.stats[verdict]++;\n state.items.unshift(entry);\n state.items = state.items.slice(0, 200);\n await blob.setJSON(\"ib-state\", state);\n return entry;\n}\n\n// ─────────────────────────── dashboard ───────────────────────────\nconst DASH = `\n\nInboxBouncer — Live\n

🛡️

InboxBouncer

Real customers walk in. Spam gets Terry.

\n ● LIVE\n

Real customers through

Unsure → inbox anyway

Spam quarantined

0 min

Your time saved

📮 Your bouncer's email address is on the inbound.ts file's Email trigger in Val Town (looks like yourname.inboxbouncer@valtown.email). Forward your support mail there. Real + unsure messages land back in your own inbox automatically; spam stays quarantined here.

\n \n \n \n

🧪 TEST THE BOUNCER — paste any email here

\n \n \n \n \n

Runaround drafts are human-in-the-loop: copy a draft, send it from a separate throwaway/decoy address — never from your real one. Auto-sending needs the full Render deployment (that's stage 2). Guardrails active: no-reply and bulk-blast senders are never engaged, 8-exchange cap per thread.

\n`;\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/api/state\") {\n const state = (await blob.getJSON(\"ib-state\").catch(() => null)) ?? { items: [], stats: { real: 0, unsure: 0, spam: 0, saved: 0 } };\n return Response.json(state);\n }\n if (req.method === \"POST\" && url.pathname === \"/api/test\") {\n const email = await req.json().catch(() => ({}));\n const entry = await processEmail(email);\n return Response.json(entry);\n }\n return new Response(DASH, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n}","deleted",false,"label",[36],"bad506a3-703b-4955-865d-a2c529620e08","inbound.ts","28cb3fba-7ef0-11f1-81a6-1607ee4eb77e",5,["D",1783970536674],0,"email","// ═════════════════════════════════════════════════════════════════════════\n// INBOXBOUNCER — FILE 2 of 2: inbound.ts\n// Add an EMAIL trigger to THIS file. Val Town will give it its own email\n// address (like yourname.inboxbouncer@valtown.email).\n// Forward your support mail to that address. This handler:\n// ✅ real / 🤔 unsure → forwarded straight to YOUR inbox (fail-open)\n// 🚫 spam → quarantined on the dashboard + Terry drafts a reply\n// ═════════════════════════════════════════════════════════════════════════\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { processEmail } from \"./main.ts\";\n\nexport default async function (e: Email) {\n const msg = {\n from: e.from || \"unknown\",\n subject: e.subject || \"(no subject)\",\n text: e.text || \"\",\n headers: \"\",\n };\n\n const entry = await processEmail(msg);\n\n // GOLDEN RULE — fail open. Real and unsure both reach your inbox.\n if (entry.verdict !== \"spam\") {\n await sendEmail({\n subject: `[${entry.verdict === \"real\" ? \"✅ CUSTOMER\" : \"🤔 UNSURE\"}] ${msg.subject}`,\n text:\n `From: ${msg.from}\\n` +\n `Bouncer verdict: ${entry.verdict.toUpperCase()} (spam score ${entry.score})\\n` +\n `Reasons: ${entry.reasons.join(\" | \")}\\n` +\n `\\n────────────────────\\n\\n` +\n msg.text,\n });\n }\n // Spam stays quarantined — view it (and Terry's draft) on your dashboard.\n}",[58],{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":72,"_17":62,"_49":63,"_51":64,"_53":54,"_55":-5,"_69":73,"_18":74},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":68,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_69":70,"_18":71},["D",1783970996385],"children",[],[36],["D",1783970536674],[],[58],"4602eb64-c892-4df2-af67-13f3d8d5122b",["D",1783960890392],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Sorts out the bad emails when creating an new shopify account","imageUrl","userId","5fa08015-6569-48dd-9b8e-dde68bfdda1a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019f5a4f-6fb1-71dd-8ff4-e0de3612bf2c","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_127":19},"org",{"_11":12,"_122":19,"_123":19,"_85":86,"_124":125,"_126":54},"branch",{"_17":43,"_13":16,"_34":41,"_114":75,"_115":-5,"_116":-5,"_117":-5,"_118":-5,"_119":-5,"_120":14,"_121":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":75,"_13":14,"_46":166,"_77":-5,"_78":54,"_79":80,"_81":80,"_82":83,"_84":-5,"_85":86,"_87":38,"_88":45,"_89":-5,"_90":-5,"_91":62,"_92":93,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":99,"_100":99,"_101":102,"_103":102,"_104":102,"_105":99,"_106":99,"_107":167,"_109":168,"_111":169,"_113":54},[160,161],"files",[160,161],"counts",{"_150":62,"_151":152,"_153":62,"_31":154,"_155":156},[146,147],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":61,"_17":62,"_49":63,"_51":64,"_53":54,"_55":-5,"_18":149},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":148},[36],[58],"pulls","branches",1,"forks",{"_157":152,"_159":62},"connections",{"_157":62,"_158":62},"count","unfilledCount","emptyCount",{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":72,"_17":62,"_49":63,"_51":64,"_53":54,"_55":-5,"_69":164,"_18":165},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":68,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_69":162,"_18":163},[],[36],[],[58],["D",1783960890392],{"_11":12,"_127":19},{"_11":12,"_122":19,"_123":19,"_85":86,"_124":125,"_126":54},{"_17":43,"_13":16,"_34":41,"_114":75,"_115":-5,"_116":-5,"_117":-5,"_118":-5,"_119":-5,"_120":14,"_121":12},"ctx",{"_107":-5,"_143":203,"_204":205,"_206":207,"_208":54,"_209":54,"_210":54,"_211":45,"_212":-5,"_213":-7,"_214":-7,"_215":62,"_216":54,"_217":54,"_218":-5,"_219":54,"_220":54,"_221":54,"_222":-5},"ENV",{"_174":175,"_176":177,"_178":16,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code