[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_212":213,"_214":215},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_108":89,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",12,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","01a06851-302f-749c-af36-42279acb0805","name","fileType","http","content","/** @jsxImportSource npm:hono/jsx */\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { email } from \"https://esm.town/v/std/email\";\nimport { Hono } from \"npm:hono\";\nimport LeadsPage from \"./components/LeadsPage.tsx\";\nimport { addLead, listLeads } from \"./db.ts\";\n\nconst app = new Hono();\n\n// Only these sites may post here. Keeps this from being usable as an open\n// mail relay by anyone who finds the URL, and pins the /thank-you/ redirect\n// target to a known-good domain.\nconst ALLOWED_SITES = new Set([\n \"jerseywaterdeliverypros.com\",\n \"manhattanwaterdeliverypros.com\",\n \"miamiwaterdeliverypros.com\",\n]);\n\n// std/email on a free-tier Val Town account can only deliver to the\n// account owner's own address — sending to info@tribecabeverage.com\n// directly fails silently unless this account is on Pro. Omitting `to`\n// makes std/email default to the owner's address, which free tier allows.\n\n// Forward each lead into Salesforce as a Lead, via the WordPress snippet\n// #131 (\"Tribeca - Water Delivery Pros lead receiver\") on tribecabeverage.com.\n// That snippet borrows the CF7-Salesforce plugin's own connection — the\n// license-blocked tribeca-salesforce-agent integration user was never\n// involved, and this never touches CF7's Turnstile-gated form either, since\n// it's a dedicated signed REST route with no CAPTCHA on it at all.\n//\n// WRITTEN WITHOUT A JWT LIBRARY on purpose, same reasoning as the WordPress\n// side: this is four lines of HMAC, not worth a dependency. Deno's Web\n// Crypto (crypto.subtle) does the signing natively, no npm import needed.\n//\n// Best-effort, same rule as the notification email just above: a lead that's\n// already durably stored via addLead() must not be lost or delayed by a\n// problem on this side. Every failure here is caught and logged, never\n// thrown, so it can't affect the visitor's redirect or the email that also\n// fires alongside it.\nfunction b64url(bytes: Uint8Array): string {\n let str = \"\";\n for (const b of bytes) str += String.fromCharCode(b);\n return btoa(str).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function sha256Hex(text: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(text));\n return Array.from(new Uint8Array(digest)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function signWdpJws(body: string, secret: string): Promise {\n const header = b64url(new TextEncoder().encode(JSON.stringify({ alg: \"HS256\", typ: \"JWT\" })));\n const payload = b64url(new TextEncoder().encode(JSON.stringify({ sha256: await sha256Hex(body) })));\n const signingInput = `${header}.${payload}`;\n\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const sig = new Uint8Array(\n await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(signingInput)),\n );\n\n return `${signingInput}.${b64url(sig)}`;\n}\n\n// `fields` is whatever the calling form actually submitted — shape varies\n// by site/form (quote form vs. lead form vs. chat widget). name/email/phone\n// are lifted out for Salesforce's own columns; everything else left over\n// becomes Description, the same \"dump every remaining k: v\" approach the\n// notification email above already uses, so nothing submitted is silently\n// dropped even if a field name here was never anticipated.\nasync function forwardToSalesforce(site: string, form: string, fields: Record) {\n const secret = Deno.env.get(\"WDP_WEBHOOK_SECRET\");\n if (!secret) {\n console.error(\"Salesforce forward skipped: WDP_WEBHOOK_SECRET not set on this val.\");\n return;\n }\n\n const details = Object.entries(fields)\n .filter(([k]) => k !== \"name\" && k !== \"email\" && k !== \"phone\")\n .map(([k, v]) => `${k}: ${v}`)\n .join(\"\\n\");\n\n const body = JSON.stringify({\n name: fields.name ?? \"\",\n email: fields.email ?? \"\",\n phone: fields.phone ?? \"\",\n site,\n form,\n details,\n });\n\n try {\n const token = await signWdpJws(body, secret);\n const res = await fetch(\"https://tribecabeverage.com/wp-json/tribeca/v1/water-delivery-lead\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", \"X-Webhook-Signature\": token },\n body,\n });\n if (!res.ok) {\n console.error(\"Salesforce forward rejected:\", res.status, await res.text().catch(() => \"\"));\n }\n } catch (err) {\n console.error(\"Salesforce forward errored:\", err);\n }\n}\n\napp.get(\"/\", (c) => c.redirect(\"/leads\"));\n\napp.post(\"/submit\", async (c) => {\n const form = await c.req.formData();\n\n const site = String(form.get(\"site\") ?? \"\").trim().toLowerCase();\n const formName = String(form.get(\"form-name\") ?? \"unknown\").trim();\n\n if (!ALLOWED_SITES.has(site)) {\n return c.text(\"Unrecognized site.\", 400);\n }\n\n // Honeypot: real visitors never fill this in. Bots that blindly fill every\n // field will. Redirect to the real thank-you page either way so a bot\n // gets no signal that it was caught, but skip storage and the email.\n if (String(form.get(\"bot-field\") ?? \"\").trim()) {\n return new Response(null, {\n status: 302,\n headers: { Location: `https://${site}/thank-you/` },\n });\n }\n\n const fields: Record = {};\n for (const [key, value] of form.entries()) {\n if (key === \"site\" || key === \"form-name\" || key === \"bot-field\") continue;\n fields[key] = String(value);\n }\n\n // Require at least one way to reach the person who submitted this.\n if (!fields.email && !fields.phone) {\n return c.text(\"An email or phone number is required.\", 400);\n }\n\n await addLead(site, formName, fields);\n\n const lines = Object.entries(fields)\n .map(([k, v]) => `${k}: ${v}`)\n .join(\"\\n\");\n\n try {\n await email({\n subject: `New ${formName} lead — ${site}`,\n text: `New submission from ${site} (${formName} form)\\n\\n${lines}`,\n });\n } catch (err) {\n // Don't fail the user's submission just because the notification email\n // had a problem — it's already durably stored above.\n console.error(\"notification email failed:\", err);\n }\n\n return new Response(null, {\n status: 302,\n headers: { Location: `https://${site}/thank-you/` },\n });\n});\n\n// The chat widget's own lead capture, on the sites with no online ordering\n// at all behind them. Same storage and same email notification as /submit\n// above — same \"netlify forms replacement\" this val already is — just JSON\n// in, JSON out, and keyed rather than public+honeypot, since this is called\n// server-to-server from tribeca-chat rather than submitted by a browser.\napp.post(\"/api/chat-lead\", async (c) => {\n const expected = Deno.env.get(\"CHAT_LEAD_KEY\");\n if (!expected) return c.json({ error: \"CHAT_LEAD_KEY not set on this val\" }, 500);\n const supplied = c.req.header(\"x-api-key\");\n if (supplied !== expected) {\n console.warn(supplied === null ? \"chat-lead REJECTED: no x-api-key header\" : \"chat-lead REJECTED: wrong key\");\n return c.json({ error: \"Unauthorized\" }, 401);\n }\n\n const body = await c.req.json().catch(() => ({}));\n const site = String(body.site ?? \"\").trim().toLowerCase();\n const name = String(body.name ?? \"\").trim();\n const phone = String(body.phone ?? \"\").trim();\n\n if (!ALLOWED_SITES.has(site)) return c.json({ ok: false, reason: \"bad_site\" }, 400);\n if (!name || !phone) return c.json({ ok: false, reason: \"missing_fields\" }, 400);\n\n await addLead(site, \"chat\", { name, phone });\n\n try {\n await email({\n subject: `New chat lead — ${site}`,\n text: `New lead from the chat widget on ${site}\\n\\nName: ${name}\\nPhone: ${phone}`,\n });\n } catch (err) {\n // Same rule as /submit: a notification hiccup must not look like the\n // lead itself failed — it is already durably stored above.\n console.error(\"chat-lead notification email failed:\", err);\n }\n\n return c.json({ ok: true });\n});\n\napp.get(\"/leads\", async (c) => {\n const leads = await listLeads();\n return c.html();\n});\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","/** @jsxImportSource npm:hono/jsx */\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { email } from \"https://esm.town/v/std/email\";\nimport { Hono } from \"npm:hono\";\nimport LeadsPage from \"./components/LeadsPage.tsx\";\nimport { addLead, listLeads } from \"./db.ts\";\n\nconst app = new Hono();\n\n// Only these sites may post here. Keeps this from being usable as an open\n// mail relay by anyone who finds the URL, and pins the /thank-you/ redirect\n// target to a known-good domain.\nconst ALLOWED_SITES = new Set([\n \"jerseywaterdeliverypros.com\",\n \"manhattanwaterdeliverypros.com\",\n \"miamiwaterdeliverypros.com\",\n]);\n\n// std/email on a free-tier Val Town account can only deliver to the\n// account owner's own address — sending to info@tribecabeverage.com\n// directly fails silently unless this account is on Pro. Omitting `to`\n// makes std/email default to the owner's address, which free tier allows.\n\n// Forward each lead into Salesforce as a Lead, via the WordPress snippet\n// #131 (\"Tribeca - Water Delivery Pros lead receiver\") on tribecabeverage.com.\n// That snippet borrows the CF7-Salesforce plugin's own connection — the\n// license-blocked tribeca-salesforce-agent integration user was never\n// involved, and this never touches CF7's Turnstile-gated form either, since\n// it's a dedicated signed REST route with no CAPTCHA on it at all.\n//\n// WRITTEN WITHOUT A JWT LIBRARY on purpose, same reasoning as the WordPress\n// side: this is four lines of HMAC, not worth a dependency. Deno's Web\n// Crypto (crypto.subtle) does the signing natively, no npm import needed.\n//\n// Best-effort, same rule as the notification email just above: a lead that's\n// already durably stored via addLead() must not be lost or delayed by a\n// problem on this side. Every failure here is caught and logged, never\n// thrown, so it can't affect the visitor's redirect or the email that also\n// fires alongside it.\nfunction b64url(bytes: Uint8Array): string {\n let str = \"\";\n for (const b of bytes) str += String.fromCharCode(b);\n return btoa(str).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function sha256Hex(text: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(text));\n return Array.from(new Uint8Array(digest)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function signWdpJws(body: string, secret: string): Promise {\n const header = b64url(new TextEncoder().encode(JSON.stringify({ alg: \"HS256\", typ: \"JWT\" })));\n const payload = b64url(new TextEncoder().encode(JSON.stringify({ sha256: await sha256Hex(body) })));\n const signingInput = `${header}.${payload}`;\n\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const sig = new Uint8Array(\n await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(signingInput)),\n );\n\n return `${signingInput}.${b64url(sig)}`;\n}\n\n// `fields` is whatever the calling form actually submitted — shape varies\n// by site/form (quote form vs. lead form vs. chat widget). name/email/phone\n// are lifted out for Salesforce's own columns; everything else left over\n// becomes Description, the same \"dump every remaining k: v\" approach the\n// notification email above already uses, so nothing submitted is silently\n// dropped even if a field name here was never anticipated.\nasync function forwardToSalesforce(site: string, form: string, fields: Record) {\n const secret = Deno.env.get(\"WDP_WEBHOOK_SECRET\");\n if (!secret) {\n console.error(\"Salesforce forward skipped: WDP_WEBHOOK_SECRET not set on this val.\");\n return;\n }\n\n const details = Object.entries(fields)\n .filter(([k]) => k !== \"name\" && k !== \"email\" && k !== \"phone\")\n .map(([k, v]) => `${k}: ${v}`)\n .join(\"\\n\");\n\n const body = JSON.stringify({\n name: fields.name ?? \"\",\n email: fields.email ?? \"\",\n phone: fields.phone ?? \"\",\n site,\n form,\n details,\n });\n\n try {\n const token = await signWdpJws(body, secret);\n const res = await fetch(\"https://tribecabeverage.com/wp-json/tribeca/v1/water-delivery-lead\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", \"X-Webhook-Signature\": token },\n body,\n });\n if (!res.ok) {\n console.error(\"Salesforce forward rejected:\", res.status, await res.text().catch(() => \"\"));\n }\n } catch (err) {\n console.error(\"Salesforce forward errored:\", err);\n }\n}\n\napp.get(\"/\", (c) => c.redirect(\"/leads\"));\n\napp.post(\"/submit\", async (c) => {\n const form = await c.req.formData();\n\n const site = String(form.get(\"site\") ?? \"\").trim().toLowerCase();\n const formName = String(form.get(\"form-name\") ?? \"unknown\").trim();\n\n if (!ALLOWED_SITES.has(site)) {\n return c.text(\"Unrecognized site.\", 400);\n }\n\n // Honeypot: real visitors never fill this in. Bots that blindly fill every\n // field will. Redirect to the real thank-you page either way so a bot\n // gets no signal that it was caught, but skip storage and the email.\n if (String(form.get(\"bot-field\") ?? \"\").trim()) {\n return new Response(null, {\n status: 302,\n headers: { Location: `https://${site}/thank-you/` },\n });\n }\n\n const fields: Record = {};\n for (const [key, value] of form.entries()) {\n if (key === \"site\" || key === \"form-name\" || key === \"bot-field\") continue;\n fields[key] = String(value);\n }\n\n // Require at least one way to reach the person who submitted this.\n if (!fields.email && !fields.phone) {\n return c.text(\"An email or phone number is required.\", 400);\n }\n\n await addLead(site, formName, fields);\n await forwardToSalesforce(site, formName, fields);\n\n const lines = Object.entries(fields)\n .map(([k, v]) => `${k}: ${v}`)\n .join(\"\\n\");\n\n try {\n await email({\n subject: `New ${formName} lead — ${site}`,\n text: `New submission from ${site} (${formName} form)\\n\\n${lines}`,\n });\n } catch (err) {\n // Don't fail the user's submission just because the notification email\n // had a problem — it's already durably stored above.\n console.error(\"notification email failed:\", err);\n }\n\n return new Response(null, {\n status: 302,\n headers: { Location: `https://${site}/thank-you/` },\n });\n});\n\n// The chat widget's own lead capture, on the sites with no online ordering\n// at all behind them. Same storage and same email notification as /submit\n// above — same \"netlify forms replacement\" this val already is — just JSON\n// in, JSON out, and keyed rather than public+honeypot, since this is called\n// server-to-server from tribeca-chat rather than submitted by a browser.\napp.post(\"/api/chat-lead\", async (c) => {\n const expected = Deno.env.get(\"CHAT_LEAD_KEY\");\n if (!expected) return c.json({ error: \"CHAT_LEAD_KEY not set on this val\" }, 500);\n const supplied = c.req.header(\"x-api-key\");\n if (supplied !== expected) {\n console.warn(supplied === null ? \"chat-lead REJECTED: no x-api-key header\" : \"chat-lead REJECTED: wrong key\");\n return c.json({ error: \"Unauthorized\" }, 401);\n }\n\n const body = await c.req.json().catch(() => ({}));\n const site = String(body.site ?? \"\").trim().toLowerCase();\n const name = String(body.name ?? \"\").trim();\n const phone = String(body.phone ?? \"\").trim();\n\n if (!ALLOWED_SITES.has(site)) return c.json({ ok: false, reason: \"bad_site\" }, 400);\n if (!name || !phone) return c.json({ ok: false, reason: \"missing_fields\" }, 400);\n\n await addLead(site, \"chat\", { name, phone });\n\n try {\n await email({\n subject: `New chat lead — ${site}`,\n text: `New lead from the chat widget on ${site}\\n\\nName: ${name}\\nPhone: ${phone}`,\n });\n } catch (err) {\n // Same rule as /submit: a notification hiccup must not look like the\n // lead itself failed — it is already durably stored above.\n console.error(\"chat-lead notification email failed:\", err);\n }\n\n return c.json({ ok: true });\n});\n\napp.get(\"/leads\", async (c) => {\n const leads = await listLeads();\n return c.html();\n});\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","createdAt",["D",1789154450203],"branchVersion","branchId","a3185ec6-ba1c-4b36-b86e-d84880f41daf","id","9f69e07f-cfcb-4caa-9929-255d912e2d33","tribeca-lead-relay",["D",1788456546221],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Netlify Forms replacement: emails + stores quote-form leads","imageUrl","c5acd3b3-60a7-4deb-bc6d-528f83012ea9","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8fe2-cdfc-775d-a845-a69af13d39cb","tursoName","9f69e07fcfcb4caa9929255d912e2d33","tursoHostname","9f69e07fcfcb4caa9929255d912e2d33-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789501263826],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",13,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","Tribeca_Rep","handle","displayName","M A","avatar","https://lh3.googleusercontent.com/a/ACg8ocI9znhXn2hWp1wjjyWzeuOyoO_JrDgJo8aD0umFraR7bAG3UAmc=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":207,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":208,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":209,"_83":210,"_85":211,"_87":25},"tree",[172,175,176,177],"files",[172,173,174,175,176,177],"counts",{"_162":62,"_163":146,"_164":62,"_165":166,"_167":168},"contents",[130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":156,"_32":157,"_30":158,"_135":-5,"_41":42,"_40":146,"_136":58,"_38":159,"_13":62,"_33":160,"_35":-5,"_24":25,"_139":-5,"_27":161},{"_43":150,"_32":151,"_30":152,"_135":-5,"_41":42,"_40":146,"_136":58,"_38":153,"_13":62,"_33":20,"_35":154,"_24":25,"_139":-5,"_27":155},{"_43":141,"_32":142,"_30":143,"_135":-5,"_41":42,"_40":144,"_136":58,"_38":145,"_13":146,"_33":147,"_35":148,"_24":25,"_139":-5,"_27":149},{"_43":134,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_136":25,"_38":137,"_13":138,"_33":34,"_35":37,"_24":25,"_139":-5,"_27":140},"872a148c-145d-42a8-b1f0-83d5baabc92d","parentId","latest",["D",1789154450203],6,"label",[28],"3fa66a25-0714-4a5e-b0ed-ce482d46a5d6","db.ts","01a06851-302f-749c-af36-3c2a9b50d72f",2,["D",1788456602836],1,"script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport interface Lead {\n id: number;\n site: string;\n form_name: string;\n fields_json: string;\n created_at: string;\n}\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS leads (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n site TEXT NOT NULL,\n form_name TEXT NOT NULL,\n fields_json TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n)`);\n\nexport async function addLead(site: string, formName: string, fields: Record) {\n await sqlite.execute({\n sql: \"INSERT INTO leads (site, form_name, fields_json) VALUES (?, ?, ?)\",\n args: [site, formName, JSON.stringify(fields)],\n });\n}\n\nexport async function listLeads(): Promise {\n const result = await sqlite.execute(\n \"SELECT id, site, form_name, fields_json, created_at FROM leads ORDER BY id DESC LIMIT 200\",\n );\n return result.rows as unknown as Lead[];\n}\n",[142],"8cb63f41-8a7e-420a-bdd4-597ac50cb0cb","README.md","01a06851-302f-749c-af36-3b812047b4b4",["D",1788456546221],"# What's the easiest way to put a form online and save submissions?\n\nRemix this val. It serves a contact form (name, email, message) at `/`, saves every submission to the val's own SQLite database, and lists everything received at `/submissions`. No external services, no API keys, no env vars.\n\n## Setup\n\n1. Remix this val.\n2. Open the HTTP endpoint of `main.tsx` — that is your live form. Share the URL.\n3. Visit `/submissions` on the same URL to see what people sent.\n\nEach remix gets its own private SQLite database, so your submissions stay with your copy.\n\n## Files\n\n- `main.tsx` — Hono routes: GET `/` (form), POST `/submit` (save), GET `/submissions` (list)\n- `db.ts` — creates the `submissions` table and holds the two queries\n- `components/Layout.tsx` — shared page shell with Tailwind (via Twind)\n- `components/FormPage.tsx` — the form\n- `components/SubmissionsPage.tsx` — the list\n\n## Notes\n\n- `/submissions` is public by default. If your form collects anything sensitive, protect that route before sharing the form URL.\n- No client-side JavaScript: the form is a plain HTML POST.\n",[151],"a1138fe6-5441-4a00-9ea7-7ddf58060e0b","components","01a06851-302f-749c-af36-35a6166f97ac",["D",1788456546221],"directory",[157],"pulls","branches","forks","envVars",{"_169":144,"_171":62},"connections",{"_169":62,"_170":62},"count","unfilledCount","emptyCount",{"_43":156,"_32":157,"_30":158,"_135":-5,"_41":42,"_40":146,"_136":58,"_38":204,"_13":62,"_33":160,"_35":-5,"_24":25,"_139":-5,"_179":205,"_27":206},{"_43":196,"_32":197,"_30":198,"_135":158,"_41":42,"_40":199,"_136":58,"_38":200,"_13":146,"_33":147,"_35":201,"_24":25,"_139":-5,"_179":202,"_27":203},{"_43":188,"_32":189,"_30":190,"_135":158,"_41":42,"_40":191,"_136":58,"_38":192,"_13":62,"_33":147,"_35":193,"_24":25,"_139":-5,"_179":194,"_27":195},{"_43":150,"_32":151,"_30":152,"_135":-5,"_41":42,"_40":146,"_136":58,"_38":185,"_13":62,"_33":20,"_35":154,"_24":25,"_139":-5,"_179":186,"_27":187},{"_43":141,"_32":142,"_30":143,"_135":-5,"_41":42,"_40":144,"_136":58,"_38":182,"_13":146,"_33":147,"_35":148,"_24":25,"_139":-5,"_179":183,"_27":184},{"_43":134,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_136":25,"_38":178,"_13":138,"_33":34,"_35":37,"_24":25,"_139":-5,"_179":180,"_27":181},["D",1789154450203],"children",[],[28],["D",1788456602836],[],[142],["D",1788456546221],[],[151],"60cf02c9-6e37-4193-a53d-c40b623fea9d","LeadsPage.tsx","28d08204-a7bd-11f1-ba65-1607ee4eb77e",4,["D",1788456630046],"/** @jsxImportSource npm:hono/jsx */\nimport Layout from \"./Layout.tsx\";\nimport type { Lead } from \"../db.ts\";\n\nexport default function LeadsPage({ leads }: { leads: Lead[] }) {\n return (\n \n

Leads

\n Most recent {leads.length} submission{leads.length === 1 ? \"\" : \"s\"} across all sites.\n

\n {leads.map((lead) => {\n const fields = JSON.parse(lead.fields_json) as Record;\n return (\n

\n \n {lead.site} · {lead.form_name}\n \n {lead.created_at}\n

{k}: {v}

\n );\n })}\n {leads.length === 0 &&

No leads yet.

}\n

\n \n );\n}\n",[],[157,189],"d6919c16-f63f-40b9-994b-a4936bfdb82a","Layout.tsx","01a06851-302f-749c-af36-2d631c7d892c",5,["D",1788456640220],"/** @jsxImportSource npm:hono/jsx */\n\nexport default function Layout({ title, children }: { title: string; children?: unknown }) {\n return (\n \n \n \n \n {title}\n \n \n \n \n

{children}

\n \n \n );\n}\n",[],[157,197],["D",1788456546221],[173,174],[157],["D",1788456546221],["D",1789501263826],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_127":245,"_246":247,"_248":249,"_250":25,"_251":25,"_252":25,"_253":58,"_254":-5,"_255":-7,"_256":-7,"_257":62,"_258":25,"_259":25,"_260":-5,"_261":25,"_262":25,"_263":25,"_264":-5},"ENV",{"_216":217,"_218":219,"_220":89,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240,"_241":242,"_243":244},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v12