[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_235":236,"_237":238},"routes/_app.x.$handle.$name",{"_103":102,"_32":45,"_111":89,"_27":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_20":-5,"_123":124,"_125":126,"_127":25,"_128":129,"_130":58,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",11,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","01a040c2-fcfe-75fb-af2e-14ff40ae8fc5","name","fileType","http","content","import { Hono } from \"npm:hono\";\nimport { email } from \"https://esm.town/v/std/email\";\nimport { readMessage } from \"npm:openpgp@6.3.1\";\nimport {\n MAX_CIPHERTEXT_LENGTH,\n MAX_REQUEST_BYTES,\n StoredMessage,\n isMessageId,\n normalizeName,\n} from \"./shared.ts\";\nimport {\n deleteMessage,\n getMessage,\n listMessages,\n markMessageRead,\n reserveSubmissionSlot,\n storeMessage,\n} from \"./storage.ts\";\n\nconst app = new Hono();\n\napp.get(\"/\", (c) => c.json({ ok: true, service: \"secure-message\" }));\napp.get(\"/health\", (c) => c.json({ ok: true }));\n\napp.options(\"/submit\", (c) => {\n const origin = getAllowedOrigin(c.req.raw);\n if (!origin) return c.json({ error: \"Origin not allowed.\" }, 403);\n return new Response(null, { status: 204, headers: corsHeaders(origin) });\n});\n\napp.post(\"/submit\", async (c) => {\n const origin = getAllowedOrigin(c.req.raw);\n if (!origin) return c.json({ error: \"Origin not allowed.\" }, 403);\n\n const headers = corsHeaders(origin);\n const contentType = c.req.header(\"Content-Type\") ?? \"\";\n if (!contentType.toLowerCase().startsWith(\"application/json\")) {\n return Response.json({ error: \"Content-Type must be application/json.\" }, { status: 415, headers });\n }\n\n const declaredLength = Number.parseInt(c.req.header(\"Content-Length\") ?? \"0\", 10);\n if (declaredLength > MAX_REQUEST_BYTES) {\n return Response.json({ error: \"Encrypted message is too large.\" }, { status: 413, headers });\n }\n\n const bodyBytes = new Uint8Array(await c.req.raw.arrayBuffer());\n if (bodyBytes.byteLength > MAX_REQUEST_BYTES) {\n return Response.json({ error: \"Encrypted message is too large.\" }, { status: 413, headers });\n }\n\n let body: Record;\n try {\n body = JSON.parse(new TextDecoder().decode(bodyBytes));\n } catch {\n return Response.json({ error: \"Request body is not valid JSON.\" }, { status: 400, headers });\n }\n\n if (body.version !== 1 || typeof body.ciphertext !== \"string\") {\n return Response.json({ error: \"Encrypted message format is invalid.\" }, { status: 400, headers });\n }\n\n const ciphertext = body.ciphertext.trim();\n if (\n ciphertext.length < 100 ||\n ciphertext.length > MAX_CIPHERTEXT_LENGTH ||\n !ciphertext.startsWith(\"-----BEGIN PGP MESSAGE-----\") ||\n !ciphertext.endsWith(\"-----END PGP MESSAGE-----\")\n ) {\n return Response.json({ error: \"Encrypted message format is invalid.\" }, { status: 400, headers });\n }\n\n const expectedKeyId = requiredEnv(\"EXPECTED_KEY_ID\").replace(/\\s/g, \"\").toUpperCase();\n try {\n const parsedMessage = await readMessage({ armoredMessage: ciphertext });\n const recipientIds = parsedMessage.getEncryptionKeyIDs().map((keyId) => keyId.toHex().toUpperCase());\n if (!recipientIds.includes(expectedKeyId)) {\n return Response.json({ error: \"Message was not encrypted to the expected key.\" }, { status: 400, headers });\n }\n } catch {\n return Response.json({ error: \"Encrypted message could not be parsed.\" }, { status: 400, headers });\n }\n\n const submissionLimit = positiveIntegerEnv(\"SUBMISSION_LIMIT_PER_10_MINUTES\", 10);\n if (!(await reserveSubmissionSlot(submissionLimit, 10 * 60 * 1000))) {\n return Response.json({ error: \"Too many messages have been submitted. Try again later.\" }, { status: 429, headers });\n }\n\n const id = crypto.randomUUID();\n const name = normalizeName(body.name);\n const receivedAt = new Date().toISOString();\n const storedMessage: StoredMessage = {\n version: 1,\n id,\n name,\n ciphertext,\n receivedAt,\n readAt: null,\n origin,\n recipientKeyId: expectedKeyId,\n };\n\n await storeMessage(storedMessage);\n\n let notificationSent = true;\n try {\n await email({\n to: requiredEnv(\"NOTIFICATION_EMAIL\"),\n subject: name ? `New encrypted message from ${name}` : \"New encrypted message\",\n text: [\n \"A new encrypted message has been received.\",\n `Receipt: ${id}`,\n `Received: ${receivedAt}`,\n \"\",\n \"Use the local secure-message reader to decrypt it.\",\n ].join(\"\\n\"),\n });\n } catch (error) {\n notificationSent = false;\n console.error(`Notification failed for secure-message receipt ${id}:`, error instanceof Error ? error.message : \"Unknown error\");\n }\n\n return Response.json({ ok: true, receipt: id, notificationSent }, { status: 201, headers });\n});\n\napp.get(\"/messages\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const includeRead = c.req.query(\"includeRead\") === \"1\";\n const messages = await listMessages(includeRead);\n\n return c.json({\n messages: messages.map(({ id, name, receivedAt, readAt, origin, recipientKeyId }) => ({\n id,\n name,\n receivedAt,\n readAt,\n origin,\n recipientKeyId,\n })),\n });\n});\n\napp.get(\"/messages/:id\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const id = c.req.param(\"id\");\n if (!isMessageId(id)) return c.json({ error: \"Not found.\" }, 404);\n const message = await getMessage(id);\n return message ? c.json(message) : c.json({ error: \"Not found.\" }, 404);\n});\n\napp.patch(\"/messages/:id/read\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const id = c.req.param(\"id\");\n if (!isMessageId(id)) return c.json({ error: \"Not found.\" }, 404);\n const message = await getMessage(id);\n if (!message) return c.json({ error: \"Not found.\" }, 404);\n const updated = await markMessageRead(message);\n return c.json({ ok: true, readAt: updated.readAt });\n});\n\napp.delete(\"/messages/:id\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const id = c.req.param(\"id\");\n if (!isMessageId(id)) return c.json({ error: \"Not found.\" }, 404);\n const message = await getMessage(id);\n if (!message) return c.json({ error: \"Not found.\" }, 404);\n await deleteMessage(id);\n return c.json({ ok: true });\n});\n\napp.onError((error) => Promise.reject(error));\n\nfunction getAllowedOrigin(request: Request): string | null {\n const origin = request.headers.get(\"Origin\");\n if (!origin) return null;\n\n const allowed = (Deno.env.get(\"ALLOWED_ORIGINS\") ?? \"\")\n .split(\",\")\n .map((value) => value.trim())\n .filter(Boolean);\n\n return allowed.includes(origin) ? origin : null;\n}\n\nfunction corsHeaders(origin: string): Headers {\n return new Headers({\n \"Access-Control-Allow-Origin\": origin,\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Access-Control-Max-Age\": \"86400\",\n \"Cache-Control\": \"no-store\",\n \"Content-Type\": \"application/json; charset=UTF-8\",\n \"Vary\": \"Origin\",\n });\n}\n\nfunction isAuthorized(request: Request): boolean {\n const token = Deno.env.get(\"INBOX_TOKEN\");\n return Boolean(token && request.headers.get(\"Authorization\") === `Bearer ${token}`);\n}\n\nfunction requiredEnv(name: string): string {\n const value = Deno.env.get(name)?.trim();\n if (!value) throw new Error(`Missing required environment variable: ${name}`);\n return value;\n}\n\nfunction positiveIntegerEnv(name: string, fallback: number): number {\n const parsed = Number.parseInt(Deno.env.get(name) ?? \"\", 10);\n return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;\n}\n\nexport default app.fetch;\n","import { Hono } from \"npm:hono\";\nimport { email } from \"https://esm.town/v/std/email\";\nimport { readMessage } from \"npm:openpgp@6.3.1\";\nimport {\n MAX_CIPHERTEXT_LENGTH,\n MAX_REQUEST_BYTES,\n StoredMessage,\n isMessageId,\n normalizeName,\n} from \"./shared.ts\";\nimport {\n deleteMessage,\n getMessage,\n listMessages,\n markMessageRead,\n reserveSubmissionSlot,\n storeMessage,\n} from \"./storage.ts\";\n\nconst app = new Hono();\n\napp.get(\"/\", (c) => c.json({ ok: true, service: \"secure-message\" }));\napp.get(\"/health\", (c) => c.json({ ok: true }));\n\napp.options(\"/submit\", (c) => {\n const origin = getAllowedOrigin(c.req.raw);\n if (!origin) return c.json({ error: \"Origin not allowed.\" }, 403);\n return new Response(null, { status: 204, headers: corsHeaders(origin) });\n});\n\napp.post(\"/submit\", async (c) => {\n const origin = getAllowedOrigin(c.req.raw);\n if (!origin) return c.json({ error: \"Origin not allowed.\" }, 403);\n\n const headers = corsHeaders(origin);\n const contentType = c.req.header(\"Content-Type\") ?? \"\";\n if (!contentType.toLowerCase().startsWith(\"application/json\")) {\n return Response.json({ error: \"Content-Type must be application/json.\" }, { status: 415, headers });\n }\n\n const declaredLength = Number.parseInt(c.req.header(\"Content-Length\") ?? \"0\", 10);\n if (declaredLength > MAX_REQUEST_BYTES) {\n return Response.json({ error: \"Encrypted message is too large.\" }, { status: 413, headers });\n }\n\n const bodyBytes = new Uint8Array(await c.req.raw.arrayBuffer());\n if (bodyBytes.byteLength > MAX_REQUEST_BYTES) {\n return Response.json({ error: \"Encrypted message is too large.\" }, { status: 413, headers });\n }\n\n let body: Record;\n try {\n body = JSON.parse(new TextDecoder().decode(bodyBytes));\n } catch {\n return Response.json({ error: \"Request body is not valid JSON.\" }, { status: 400, headers });\n }\n\n if (body.version !== 1 || typeof body.ciphertext !== \"string\") {\n return Response.json({ error: \"Encrypted message format is invalid.\" }, { status: 400, headers });\n }\n\n const ciphertext = body.ciphertext.trim();\n if (\n ciphertext.length < 100 ||\n ciphertext.length > MAX_CIPHERTEXT_LENGTH ||\n !ciphertext.startsWith(\"-----BEGIN PGP MESSAGE-----\") ||\n !ciphertext.endsWith(\"-----END PGP MESSAGE-----\")\n ) {\n return Response.json({ error: \"Encrypted message format is invalid.\" }, { status: 400, headers });\n }\n\n const expectedKeyId = requiredEnv(\"EXPECTED_KEY_ID\").replace(/\\s/g, \"\").toUpperCase();\n try {\n const parsedMessage = await readMessage({ armoredMessage: ciphertext });\n const recipientIds = parsedMessage.getEncryptionKeyIDs().map((keyId) => keyId.toHex().toUpperCase());\n if (!recipientIds.includes(expectedKeyId)) {\n return Response.json({ error: \"Message was not encrypted to the expected key.\" }, { status: 400, headers });\n }\n } catch {\n return Response.json({ error: \"Encrypted message could not be parsed.\" }, { status: 400, headers });\n }\n\n const submissionLimit = positiveIntegerEnv(\"SUBMISSION_LIMIT_PER_10_MINUTES\", 10);\n if (!(await reserveSubmissionSlot(submissionLimit, 10 * 60 * 1000))) {\n return Response.json({ error: \"Too many messages have been submitted. Try again later.\" }, { status: 429, headers });\n }\n\n const id = crypto.randomUUID();\n const name = normalizeName(body.name);\n const receivedAt = new Date().toISOString();\n const storedMessage: StoredMessage = {\n version: 1,\n id,\n name,\n ciphertext,\n receivedAt,\n readAt: null,\n origin,\n recipientKeyId: expectedKeyId,\n };\n\n await storeMessage(storedMessage);\n\n let notificationSent = true;\n try {\n const notification = {\n subject: name ? `New encrypted message from ${name}` : \"New encrypted message\",\n text: [\n \"A new encrypted message has been received.\",\n `Receipt: ${id}`,\n `Received: ${receivedAt}`,\n \"\",\n \"Use the local secure-message reader to decrypt it.\",\n ].join(\"\\n\"),\n };\n const sendToSelf = Deno.env.get(\"EMAIL_TO_SELF\")?.trim().toLowerCase() === \"true\";\n await email(sendToSelf ? notification : { ...notification, to: requiredEnv(\"NOTIFICATION_EMAIL\") });\n } catch (error) {\n notificationSent = false;\n console.error(`Notification failed for secure-message receipt ${id}:`, error instanceof Error ? error.message : \"Unknown error\");\n }\n\n return Response.json({ ok: true, receipt: id, notificationSent }, { status: 201, headers });\n});\n\napp.get(\"/messages\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const includeRead = c.req.query(\"includeRead\") === \"1\";\n const messages = await listMessages(includeRead);\n\n return c.json({\n messages: messages.map(({ id, name, receivedAt, readAt, origin, recipientKeyId }) => ({\n id,\n name,\n receivedAt,\n readAt,\n origin,\n recipientKeyId,\n })),\n });\n});\n\napp.get(\"/messages/:id\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const id = c.req.param(\"id\");\n if (!isMessageId(id)) return c.json({ error: \"Not found.\" }, 404);\n const message = await getMessage(id);\n return message ? c.json(message) : c.json({ error: \"Not found.\" }, 404);\n});\n\napp.patch(\"/messages/:id/read\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const id = c.req.param(\"id\");\n if (!isMessageId(id)) return c.json({ error: \"Not found.\" }, 404);\n const message = await getMessage(id);\n if (!message) return c.json({ error: \"Not found.\" }, 404);\n const updated = await markMessageRead(message);\n return c.json({ ok: true, readAt: updated.readAt });\n});\n\napp.delete(\"/messages/:id\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const id = c.req.param(\"id\");\n if (!isMessageId(id)) return c.json({ error: \"Not found.\" }, 404);\n const message = await getMessage(id);\n if (!message) return c.json({ error: \"Not found.\" }, 404);\n await deleteMessage(id);\n return c.json({ ok: true });\n});\n\napp.onError((error) => Promise.reject(error));\n\nfunction getAllowedOrigin(request: Request): string | null {\n const origin = request.headers.get(\"Origin\");\n if (!origin) return null;\n\n const allowed = (Deno.env.get(\"ALLOWED_ORIGINS\") ?? \"\")\n .split(\",\")\n .map((value) => value.trim())\n .filter(Boolean);\n\n return allowed.includes(origin) ? origin : null;\n}\n\nfunction corsHeaders(origin: string): Headers {\n return new Headers({\n \"Access-Control-Allow-Origin\": origin,\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Access-Control-Max-Age\": \"86400\",\n \"Cache-Control\": \"no-store\",\n \"Content-Type\": \"application/json; charset=UTF-8\",\n \"Vary\": \"Origin\",\n });\n}\n\nfunction isAuthorized(request: Request): boolean {\n const token = Deno.env.get(\"INBOX_TOKEN\");\n return Boolean(token && request.headers.get(\"Authorization\") === `Bearer ${token}`);\n}\n\nfunction requiredEnv(name: string): string {\n const value = Deno.env.get(name)?.trim();\n if (!value) throw new Error(`Missing required environment variable: ${name}`);\n return value;\n}\n\nfunction positiveIntegerEnv(name: string, fallback: number): number {\n const parsed = Number.parseInt(Deno.env.get(name) ?? \"\", 10);\n return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;\n}\n\nexport default app.fetch;\n","createdAt",["D",1787793443339],"branchVersion","branchId","25502506-8acf-4fc8-80a2-965452dc3efd","id","364210a3-ad88-442e-a2ab-4cc980bfeca2","secure-message-relay",["D",1787792915355],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Ciphertext relay and private local-reader inbox","imageUrl","4cdce967-3214-4f01-a3ad-621feefd7c79","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","dc5a7ebe-7841-4930-908a-6990859a8fe8","tursoName","364210a3ad88442ea2ab4cc980bfeca2","tursoHostname","364210a3ad88442ea2ab4cc980bfeca2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789533091345],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_103":102,"_110":106},"org",{"_103":102,"_104":-5,"_105":106,"_18":55,"_107":108,"_109":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":92,"_93":94,"_95":50,"_96":97,"_98":99,"_100":45,"_101":102},"isOwned",15,"main","projectId","forkedBranchId","fb141f8d-047d-43b3-b09c-7fd59d8ddcfe","forkedBranchVersion",1,"forkedProjectPrivacy","forkedProjectId","a35fc79f-ccd4-4375-94dc-260d312636c6","forkedProjectOrgId","019aa807-52c2-709c-928b-2029bae9a558","projectName","userHandle","Pete5x5","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ybWltR3dZU01TR1VmellwVExiaHNINUtnZlIifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":230,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":231,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":232,"_83":233,"_85":234,"_87":25},"tree",[205,206,207,208,209,210],"files",[205,206,207,208,209,210],"counts",{"_194":62,"_195":94,"_196":62,"_197":198,"_199":200},"contents",[145,146,147,148,149,150],"upstreamProject",{"_43":97,"_32":141,"_52":142,"_54":-5,"_49":50,"_81":143},"upstreamBranch",{"_43":92,"_38":135,"_136":137,"_32":89,"_90":97,"_13":94,"_91":-5,"_93":-5,"_138":139,"_47":-5,"_87":25,"_49":50,"_101":140,"_63":99,"_100":141},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1781134761362],"updatedAt",["D",1781134761362],"lockfileKey","1781135021367-esm.town_v_templates_form-to-sqlite@1-main","templates","form-to-sqlite","Put a form online and save submissions to SQLite",{"_103":140,"_110":144},"https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789563599&sig=a969511699ef574c42d646a130422bcd8ffa020e1e59bd8fb5bde6db2cea72c1",{"_43":188,"_32":189,"_30":190,"_154":-5,"_41":42,"_40":94,"_156":25,"_38":191,"_13":62,"_33":192,"_35":-5,"_24":25,"_160":-5,"_27":193},{"_43":181,"_32":182,"_30":183,"_154":-5,"_41":42,"_40":184,"_156":25,"_38":185,"_13":94,"_33":20,"_35":186,"_24":25,"_160":-5,"_27":187},{"_43":173,"_32":174,"_30":175,"_154":-5,"_41":42,"_40":176,"_156":58,"_38":177,"_13":62,"_33":178,"_35":179,"_24":25,"_160":-5,"_27":180},{"_43":169,"_32":28,"_30":31,"_154":-5,"_41":42,"_40":14,"_156":25,"_38":170,"_13":171,"_33":34,"_35":37,"_24":25,"_160":-5,"_27":172},{"_43":162,"_32":163,"_30":164,"_154":-5,"_41":42,"_40":165,"_156":58,"_38":166,"_13":62,"_33":158,"_35":167,"_24":25,"_160":-5,"_27":168},{"_43":151,"_32":152,"_30":153,"_154":-5,"_41":42,"_40":155,"_156":58,"_38":157,"_13":62,"_33":158,"_35":159,"_24":25,"_160":-5,"_27":161},"85298da7-4357-4319-b1ec-7b1bfc3a22a8","storage.ts","0f7aa4d8-a1b4-11f1-ab7e-1607ee4eb77e","parentId",6,"latest",["D",1787793015101],"script","import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { MESSAGE_PREFIX, StoredMessage, messageKey } from \"./shared.ts\";\n\nconst RATE_LIMIT_KEY = \"secure-message-rate-limit\";\n\nexport async function storeMessage(message: StoredMessage): Promise {\n await blob.setJSON(messageKey(message.id), message);\n}\n\nexport async function getMessage(id: string): Promise {\n return await blob.getJSON(messageKey(id)) as StoredMessage | undefined;\n}\n\nexport async function listMessages(includeRead = false): Promise {\n const entries = await blob.list(MESSAGE_PREFIX);\n const messages = await Promise.all(entries.map(({ key }) => blob.getJSON(key) as Promise));\n\n return messages\n .filter((message): message is StoredMessage => Boolean(message))\n .filter((message) => includeRead || !message.readAt)\n .sort((a, b) => b.receivedAt.localeCompare(a.receivedAt));\n}\n\nexport async function markMessageRead(message: StoredMessage): Promise {\n const updated = { ...message, readAt: message.readAt ?? new Date().toISOString() };\n await storeMessage(updated);\n return updated;\n}\n\nexport async function deleteMessage(id: string): Promise {\n await blob.delete(messageKey(id));\n}\n\nexport async function deleteExpiredMessages(retentionDays: number): Promise {\n const cutoff = Date.now() - retentionDays * 24 * 60 * 60 * 1000;\n const entries = await blob.list(MESSAGE_PREFIX);\n let deleted = 0;\n\n for (const { key } of entries) {\n const message = await blob.getJSON(key) as StoredMessage | undefined;\n const receivedAt = message ? Date.parse(message.receivedAt) : Number.NaN;\n\n if (!message || !Number.isFinite(receivedAt) || receivedAt < cutoff) {\n await blob.delete(key);\n deleted += 1;\n }\n }\n\n return deleted;\n}\n\nexport async function reserveSubmissionSlot(limit: number, windowMilliseconds: number): Promise {\n const now = Date.now();\n const cutoff = now - windowMilliseconds;\n const stored = await blob.getJSON(RATE_LIMIT_KEY) as { timestamps?: unknown } | undefined;\n const timestamps = Array.isArray(stored?.timestamps)\n ? stored.timestamps.filter((value): value is number => typeof value === \"number\" && value >= cutoff && value <= now)\n : [];\n\n if (timestamps.length >= limit) return false;\n timestamps.push(now);\n await blob.setJSON(RATE_LIMIT_KEY, { timestamps });\n return true;\n}\n","label",[152],"6a0fd014-fe2e-4c53-b068-c281d7d79033","shared.ts","09590892-a1b4-11f1-b03b-1607ee4eb77e",3,["D",1787793004813],"export const MESSAGE_PREFIX = \"secure-message:\";\nexport const MAX_REQUEST_BYTES = 24_000;\nexport const MAX_CIPHERTEXT_LENGTH = 20_000;\nexport const MAX_NAME_LENGTH = 80;\n\nexport interface StoredMessage {\n version: 1;\n id: string;\n name: string;\n ciphertext: string;\n receivedAt: string;\n readAt: string | null;\n origin: string;\n recipientKeyId: string;\n}\n\nexport function normalizeName(value: unknown): string {\n if (typeof value !== \"string\") return \"\";\n\n return value\n .replace(/[\\u0000-\\u001F\\u007F]/g, \" \")\n .replace(/\\s+/g, \" \")\n .trim()\n .slice(0, MAX_NAME_LENGTH);\n}\n\nexport function parsePositiveInteger(value: string | undefined, fallback: number): number {\n const parsed = Number.parseInt(value ?? \"\", 10);\n return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;\n}\n\nexport function messageKey(id: string): string {\n return `${MESSAGE_PREFIX}${id}`;\n}\n\nexport function isMessageId(value: string): boolean {\n return /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);\n}\n",[163],"0ad0097c-c6f4-4433-909c-6c09256840ae",["D",1787793443339],2,[28],"8ac2e069-65a8-451f-9e6e-d4bb81309fe8","cleanup.ts","0b6dcb72-a1b4-11f1-b022-1607ee4eb77e",4,["D",1787793008306],"interval","import { deleteExpiredMessages } from \"./storage.ts\";\nimport { parsePositiveInteger } from \"./shared.ts\";\n\ninterface IntervalEvent {\n lastRunAt?: Date;\n}\n\nexport default async function (_interval: IntervalEvent) {\n const retentionDays = parsePositiveInteger(Deno.env.get(\"RETENTION_DAYS\"), 30);\n const deleted = await deleteExpiredMessages(retentionDays);\n console.log(`Secure-message cleanup removed ${deleted} expired record(s).`);\n}\n",[174],"4b4cf2cd-9f23-4950-8ec5-1edb5abe104f","README.md","01a040c2-fcfe-75fb-af2e-0d7f39a0bc88",5,["D",1787793011435],"# Secure Message Relay\n\nReceives OpenPGP ciphertext from approved website origins, stores only ciphertext in val-scoped blob storage, and sends a generic email notification. The optional sender name remains cleartext for the email subject. Message-management routes require a bearer token and are intended for the local GPG reader.\n\n## Files\n\n- `main.tsx` — public submission API and protected reader routes\n- `shared.ts` — validation and record types\n- `storage.ts` — val-scoped blob storage and retention logic\n- `cleanup.ts` — daily 30-day retention cleanup\n\n## Required environment variables\n\n- `NOTIFICATION_EMAIL`\n- `ALLOWED_ORIGINS`\n- `EXPECTED_KEY_ID`\n- `RETENTION_DAYS`\n- `SUBMISSION_LIMIT_PER_10_MINUTES`\n- `INBOX_TOKEN`\n\nThe private OpenPGP key is never uploaded to Val Town.\n\n[Health check](url:main.tsx/health)\n",[182],"ba9919e4-5ba2-4678-af1b-b1951fc9e9b7","components","01a040c2-fcfe-75fb-af2e-0bdb61cb6a38",["D",1787792915355],"directory",[189],"pulls","branches","forks","envVars",{"_201":203,"_204":62},"connections",{"_201":62,"_202":62},"count","unfilledCount",7,"emptyCount",{"_43":188,"_32":189,"_30":190,"_154":-5,"_41":42,"_40":94,"_156":25,"_38":227,"_13":62,"_33":192,"_35":-5,"_24":25,"_160":-5,"_212":228,"_27":229},{"_43":181,"_32":182,"_30":183,"_154":-5,"_41":42,"_40":184,"_156":25,"_38":224,"_13":94,"_33":20,"_35":186,"_24":25,"_160":-5,"_212":225,"_27":226},{"_43":173,"_32":174,"_30":175,"_154":-5,"_41":42,"_40":176,"_156":58,"_38":221,"_13":62,"_33":178,"_35":179,"_24":25,"_160":-5,"_212":222,"_27":223},{"_43":169,"_32":28,"_30":31,"_154":-5,"_41":42,"_40":14,"_156":25,"_38":218,"_13":171,"_33":34,"_35":37,"_24":25,"_160":-5,"_212":219,"_27":220},{"_43":162,"_32":163,"_30":164,"_154":-5,"_41":42,"_40":165,"_156":58,"_38":215,"_13":62,"_33":158,"_35":167,"_24":25,"_160":-5,"_212":216,"_27":217},{"_43":151,"_32":152,"_30":153,"_154":-5,"_41":42,"_40":155,"_156":58,"_38":211,"_13":62,"_33":158,"_35":159,"_24":25,"_160":-5,"_212":213,"_27":214},["D",1787793015101],"children",[],[152],["D",1787793004813],[],[163],["D",1787793443339],[],[28],["D",1787793008306],[],[174],["D",1787793011435],[],[182],["D",1787792915355],[],[189],["D",1787792915355],["D",1789533091345],{"_103":102,"_110":106},{"_103":102,"_104":-5,"_105":106,"_18":55,"_107":108,"_109":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":92,"_93":94,"_95":50,"_96":97,"_98":99,"_100":45,"_101":102},"ctx",{"_81":-5,"_132":268,"_269":270,"_271":272,"_273":25,"_274":25,"_275":25,"_276":58,"_277":-5,"_278":-7,"_279":-7,"_280":62,"_281":25,"_282":25,"_283":-5,"_284":25,"_285":25,"_286":25,"_287":-5},"ENV",{"_239":240,"_241":242,"_243":89,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v11