[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_201":202,"_203":204},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_95":-7,"_96":97,"_29":-7,"_98":-5,"_15":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":-5,"_109":110,"_111":112,"_113":40,"_114":115,"_116":52,"_117":-5,"_118":-5,"_119":120},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","benrobo","name","ascend-waitlist","project",{"_20":28,"_13":14,"_22":38,"_37":-5,"_39":40,"_41":42,"_43":42,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":52,"_53":-5,"_54":-5,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":76,"_77":78,"_79":80,"_81":40},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":-5},"id","113de6af-f85a-4089-bdde-1d0e4cfb0bcd","createdAt",["D",1783973187726],"updatedAt",["D",1783973862580],"main","projectId","5f8556ca-fe8d-4586-b971-9d0968404fa9","version",13,"forkedBranchId","14771000-57b5-11f1-a5ca-ee650bb23af1","forkedBranchVersion",8,"lockfileKey","1783973862697-esm.town_v_benrobo_ascend-waitlist@13-main","deletedAt",["D",1783973187726],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","Waitlist API for Elorah with email validation","imageUrl","userId","c9ad4c4f-0ce1-4f18-8c66-10ee36a1d6a2","pinnedFileId","019f5d16-90e0-701c-aca1-0f1a2b9c1610","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","380b02c7-e14d-481a-8a10-e7eff18a2a54","tursoName","5f8556cafe8d4586b9719d0968404fa9","tursoHostname","5f8556cafe8d4586b9719d0968404fa9-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789473046147],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_94":90},"org",{"_11":12,"_88":-5,"_89":90,"_47":48,"_91":92,"_93":40},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":32,"_33":34,"_82":42,"_83":84,"_85":58,"_86":14,"_87":12},"isOwned","forkedProjectPrivacy","forkedProjectId","14765f02-57b5-11f1-a5ca-ee650bb23af1","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yaW5rUWxSZjNBNEltemFVRDhvWG5SWTREdW4ifQ","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_20":28,"_13":14,"_22":196,"_37":-5,"_39":40,"_41":42,"_43":42,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":52,"_53":-5,"_54":-5,"_55":56,"_57":58,"_59":60,"_61":62,"_63":197,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":198,"_77":199,"_79":200,"_81":40},"tree",[179,180,181,182],"files",[179,180,181,182],"counts",{"_170":56,"_17":159,"_171":56,"_172":173,"_174":175},"contents",[126,127,128,129],"file","upstreamProject",{"_20":84,"_13":124,"_44":45,"_46":-5,"_41":42,"_75":125},"upstreamBranch",{"_20":32,"_22":121,"_24":122,"_13":26,"_27":84,"_29":30,"_31":-5,"_33":-5,"_35":123,"_37":-5,"_81":40,"_41":42,"_87":12,"_57":58,"_86":124},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1779657066923],["D",1787135001191],"1787135001439-esm.town_v_benrobo_elorah-waitlist@13-main","elorah-waitlist",{"_11":12,"_94":90},{"_20":163,"_13":164,"_132":165,"_134":-5,"_135":21,"_136":30,"_138":52,"_22":166,"_29":167,"_141":108,"_143":168,"_145":40,"_146":-5,"_96":169},{"_20":155,"_13":156,"_132":50,"_134":-5,"_135":21,"_136":157,"_138":52,"_22":158,"_29":159,"_141":160,"_143":161,"_145":40,"_146":-5,"_96":162},{"_20":148,"_13":149,"_132":150,"_134":-5,"_135":21,"_136":151,"_138":52,"_22":152,"_29":140,"_141":142,"_143":153,"_145":40,"_146":-5,"_96":154},{"_20":130,"_13":131,"_132":133,"_134":-5,"_135":21,"_136":137,"_138":52,"_22":139,"_29":140,"_141":142,"_143":144,"_145":40,"_146":-5,"_96":147},"efc84eb9-c3b7-4818-81e7-83b1872b6515","validation.ts","fileId","019f5d16-90e0-701c-aca1-17ea73a456f2","parentId","branchId","branchVersion",3,"latest",["D",1783973359483],2,"fileType","script","content","// Disposable/temporary email domains to block\nconst DISPOSABLE_DOMAINS = new Set([\n \"mailinator.com\",\n \"guerrillamail.com\",\n \"tempmail.com\",\n \"throwaway.email\",\n \"yopmail.com\",\n \"sharklasers.com\",\n \"guerrillamailblock.com\",\n \"grr.la\",\n \"guerrillamail.info\",\n \"guerrillamail.net\",\n \"guerrillamail.org\",\n \"guerrillamail.de\",\n \"10minutemail.com\",\n \"trashmail.com\",\n \"trashmail.me\",\n \"trashmail.net\",\n \"fakeinbox.com\",\n \"mailnesia.com\",\n \"maildrop.cc\",\n \"dispostable.com\",\n \"tempr.email\",\n \"temp-mail.org\",\n \"tempail.com\",\n \"emailondeck.com\",\n \"33mail.com\",\n \"getnada.com\",\n \"mohmal.com\",\n \"burnermail.io\",\n \"mailcatch.com\",\n \"meltmail.com\",\n \"harakirimail.com\",\n \"trbvm.com\",\n \"discard.email\",\n \"discardmail.com\",\n \"discardmail.de\",\n \"spamgourmet.com\",\n \"mytemp.email\",\n \"mailsac.com\",\n \"inboxbear.com\",\n \"crazymailing.com\",\n \"deadfake.com\",\n \"einrot.com\",\n \"fakemailgenerator.com\",\n \"filzmail.com\",\n \"getairmail.com\",\n \"jetable.org\",\n \"kasmail.com\",\n \"mailexpire.com\",\n \"mailforspam.com\",\n \"mailinator2.com\",\n \"mailmoat.com\",\n \"mailnator.com\",\n \"mailshell.com\",\n \"mailzilla.com\",\n \"nomail.xl.cx\",\n \"nowmymail.com\",\n \"pookmail.com\",\n \"spamavert.com\",\n \"spamfree24.org\",\n \"tempomail.fr\",\n \"thankyou2010.com\",\n \"trash-mail.at\",\n \"trashymail.com\",\n \"trashymail.net\",\n \"mailhub.pw\",\n \"mailinbox.co\",\n \"test.com\",\n \"example.com\",\n]);\n\n// Valid interests from the form\nexport const VALID_INTERESTS = [\n \"Consistency\",\n \"Deeper understanding\",\n \"Reconnecting\",\n \"Spiritual habits\",\n \"Quiet\",\n] as const;\n\n// Valid referral sources from the form\nexport const VALID_REFERRALS = [\n \"A friend\",\n \"X / Twitter\",\n \"Instagram\",\n \"YouTube\",\n \"My church\",\n \"Search\",\n \"Somewhere else\",\n] as const;\n\nexport type Interest = typeof VALID_INTERESTS[number];\nexport type Referral = typeof VALID_REFERRALS[number];\n\ninterface ValidationResult {\n valid: boolean;\n error?: string;\n}\n\n/**\n * Check if a string looks like gibberish/keyboard smash.\n * Heuristics:\n * - Too many consonants in a row (5+)\n * - Too many repeated characters (4+)\n * - No vowels at all in the local part\n * - Excessive length of local part with no real structure\n */\nfunction isGibberish(localPart: string): boolean {\n const lower = localPart.toLowerCase().replace(/[^a-z]/g, \"\");\n if (lower.length === 0) return true;\n\n // Check for 5+ consecutive consonants\n if (/[bcdfghjklmnpqrstvwxyz]{5,}/i.test(lower)) return true;\n\n // Check for 4+ repeated characters\n if (/(.)\\1{3,}/.test(lower)) return true;\n\n // No vowels at all in a local part longer than 3 chars\n if (lower.length > 3 && !/[aeiou]/.test(lower)) return true;\n\n // Extremely high ratio of unique bigrams to length (random strings)\n // If the local part is long but every 2-char pair is unique, it's likely random\n if (lower.length > 10) {\n const bigrams = new Set();\n for (let i = 0; i < lower.length - 1; i++) {\n bigrams.add(lower.slice(i, i + 2));\n }\n const ratio = bigrams.size / (lower.length - 1);\n // Very high uniqueness in a long string suggests randomness\n if (ratio > 0.95 && lower.length > 15) return true;\n }\n\n return false;\n}\n\n/**\n * Validate email address with multiple layers of protection\n */\nexport function validateEmail(email: string): ValidationResult {\n if (!email || typeof email !== \"string\") {\n return { valid: false, error: \"Email is required\" };\n }\n\n const trimmed = email.trim().toLowerCase();\n\n // Basic format check\n const emailRegex = /^[a-zA-Z0-9._%+\\-]+@[a-zA-Z0-9.\\-]+\\.[a-zA-Z]{2,}$/;\n if (!emailRegex.test(trimmed)) {\n return { valid: false, error: \"Invalid email format\" };\n }\n\n // Length checks\n if (trimmed.length > 254) {\n return { valid: false, error: \"Email is too long\" };\n }\n\n const [localPart, domain] = trimmed.split(\"@\");\n\n if (localPart.length > 64) {\n return { valid: false, error: \"Email local part is too long\" };\n }\n\n // Block disposable email domains\n if (DISPOSABLE_DOMAINS.has(domain)) {\n return {\n valid: false,\n error: \"Disposable email addresses are not allowed\",\n };\n }\n\n // Block gibberish local parts\n if (isGibberish(localPart)) {\n return { valid: false, error: \"Please use a valid email address\" };\n }\n\n // Block obviously fake TLDs or very short domains\n const domainParts = domain.split(\".\");\n if (domainParts.some((p) => p.length < 1)) {\n return { valid: false, error: \"Invalid email domain\" };\n }\n\n return { valid: true };\n}\n\n/**\n * Validate the full waitlist submission\n */\nexport function validateSubmission(body: unknown): ValidationResult & {\n data?: {\n email: string;\n };\n} {\n if (!body || typeof body !== \"object\") {\n return { valid: false, error: \"Invalid request body\" };\n }\n\n const { email } = body as Record;\n\n // Validate email\n const emailResult = validateEmail(email as string);\n if (!emailResult.valid) {\n return emailResult;\n }\n\n return {\n valid: true,\n data: {\n email: (email as string).trim().toLowerCase(),\n },\n };\n}","deleted","label",[131],"d5b41013-8eef-4463-85fb-239e46570cca","db.ts","019f5d16-90e0-701c-aca1-1043cd6d7a85",6,["D",1783973708379],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function initDB() {\n await sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS waitlist (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT UNIQUE NOT NULL,\n ip_hash TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS rate_limits (\n ip_hash TEXT PRIMARY KEY,\n attempts INTEGER DEFAULT 1,\n first_attempt TEXT DEFAULT (datetime('now')),\n last_attempt TEXT DEFAULT (datetime('now'))\n )`,\n },\n ]);\n}\n\n/**\n * Hash an IP address for rate limiting (privacy-preserving)\n */\nasync function hashIP(ip: string): Promise {\n const encoder = new TextEncoder();\n // Use a static salt — not secret, just for differentiation\n const data = encoder.encode(`elorah-waitlist-salt:${ip}`);\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/**\n * Check rate limit: max 5 submissions per IP per hour\n */\nexport async function checkRateLimit(\n ip: string,\n): Promise<{ allowed: boolean; error?: string }> {\n const ipHash = await hashIP(ip);\n\n const result = await sqlite.execute({\n sql: `SELECT attempts, first_attempt FROM rate_limits WHERE ip_hash = ?`,\n args: [ipHash],\n });\n\n if (result.rows.length > 0) {\n const row = result.rows[0] as Record;\n const attempts = row.attempts as number;\n const firstAttempt = new Date(row.first_attempt as string);\n const now = new Date();\n const hourAgo = new Date(now.getTime() - 60 * 60 * 1000);\n\n if (firstAttempt > hourAgo && attempts >= 5) {\n return {\n allowed: false,\n error: \"Too many submissions. Please try again later.\",\n };\n }\n\n // Reset if window has passed\n if (firstAttempt <= hourAgo) {\n await sqlite.execute({\n sql:\n `UPDATE rate_limits SET attempts = 1, first_attempt = datetime('now'), last_attempt = datetime('now') WHERE ip_hash = ?`,\n args: [ipHash],\n });\n } else {\n await sqlite.execute({\n sql:\n `UPDATE rate_limits SET attempts = attempts + 1, last_attempt = datetime('now') WHERE ip_hash = ?`,\n args: [ipHash],\n });\n }\n } else {\n await sqlite.execute({\n sql: `INSERT INTO rate_limits (ip_hash) VALUES (?)`,\n args: [ipHash],\n });\n }\n\n return { allowed: true };\n}\n\n/**\n * Insert a waitlist entry. Returns success or duplicate error.\n */\nexport async function insertWaitlistEntry(\n email: string,\n ip: string,\n): Promise<{ success: boolean; error?: string }> {\n const ipHash = await hashIP(ip);\n\n try {\n await sqlite.execute({\n sql: `INSERT INTO waitlist (email, ip_hash) VALUES (?, ?)`,\n args: [email, ipHash],\n });\n return { success: true };\n } catch (e: unknown) {\n const error = e as Error;\n if (error.message?.includes(\"UNIQUE constraint failed\")) {\n return { success: false, error: \"This email is already on the waitlist\" };\n }\n throw e;\n }\n}\n\n/**\n * Get waitlist count\n */\nexport async function getWaitlistCount(): Promise {\n const result = await sqlite.execute(\"SELECT COUNT(*) as count FROM waitlist\");\n return (result.rows[0] as Record).count as number;\n}",[149],"21c2140a-f10e-4193-b1d0-7a3b7c56b548","api.ts",5,["D",1783973697791],1,"http","import { Hono } from \"npm:hono@4\";\nimport {\n checkRateLimit,\n getWaitlistCount,\n initDB,\n insertWaitlistEntry,\n} from \"./db.ts\";\nimport { validateSubmission } from \"./validation.ts\";\n\nconst app = new Hono();\n\napp.onError((err) => Promise.reject(err));\n\n// Initialize DB on first request\nlet dbInitialized = false;\napp.use(\"*\", async (_c, next) => {\n if (!dbInitialized) {\n await initDB();\n dbInitialized = true;\n }\n await next();\n});\n\n// Health check / API info\napp.get(\"/\", (c) => {\n return c.json({\n name: \"Ascend Waitlist API\",\n endpoints: {\n \"POST /join\": \"Join the waitlist\",\n \"GET /count\": \"Get waitlist count\",\n },\n schema: {\n email: \"string (required)\",\n },\n });\n});\n\n// Join waitlist\napp.post(\"/join\", async (c) => {\n const ip = c.req.header(\"x-forwarded-for\") ??\n c.req.header(\"cf-connecting-ip\") ??\n \"unknown\";\n\n // Rate limit check\n const rateCheck = await checkRateLimit(ip);\n if (!rateCheck.allowed) {\n return c.json({ success: false, error: rateCheck.error }, 429);\n }\n\n // Parse body\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ success: false, error: \"Invalid JSON body\" }, 400);\n }\n\n // Validate submission\n const validation = validateSubmission(body);\n if (!validation.valid || !validation.data) {\n return c.json({ success: false, error: validation.error }, 400);\n }\n\n const { email } = validation.data;\n\n // Insert into DB\n const result = await insertWaitlistEntry(email, ip);\n if (!result.success) {\n return c.json({ success: false, error: result.error }, 409);\n }\n\n const count = await getWaitlistCount();\n\n return c.json({\n success: true,\n message:\n \"You're on the waitlist! We'll email you when your invite is ready.\",\n count,\n }, 201);\n});\n\n// Get waitlist count\napp.get(\"/count\", async (c) => {\n const count = await getWaitlistCount();\n return c.json({ count });\n});\n\nexport default app.fetch;",[156],"12d3a5eb-038e-4a96-8e3f-049469d6cfc9","README.md","019f5d16-90dd-77a8-8277-597eee3a67b7",["D",1783973862580],7,"# Ascend Waitlist API\n\nCollects waitlist signups for Ascend with built-in fraud prevention.\n\n## Endpoints\n\n| Method | Path | Description |\n| ------ | --------- | ------------------------ |\n| `GET` | `/` | API info & schema |\n| `POST` | `/join` | Join the waitlist |\n| `GET` | `/count` | Get total waitlist count |\n| `GET` | `/source` | View source code |\n\n## POST /join\n\n```json\n{\n \"email\": \"you@somewhere.com\"\n}\n```\n\n### Fields\n\n- **email** (required) — must be a real email, not disposable or gibberish\n\n### Responses\n\n| Status | Meaning |\n| ------ | ------------------------- |\n| `201` | Successfully joined |\n| `400` | Validation error |\n| `409` | Email already on waitlist |\n| `429` | Rate limited |\n\n## Fraud Prevention\n\n- ✅ Disposable email domain blocking (50+ providers)\n- ✅ Gibberish/keyboard-smash detection\n- ✅ Email format validation (RFC-compliant)\n- ✅ Rate limiting (5 submissions/IP/hour)\n- ✅ Duplicate email prevention\n- ✅ Interest/referral enum validation\n- ✅ Privacy-preserving IP hashing\n\n## Architecture\n\n```mermaid\ngraph LR\n A[Client] -->|POST /join| B[api.ts]\n B --> C[validation.ts]\n C -->|validate email| B\n B --> D[db.ts]\n D -->|rate limit check| E[(SQLite)]\n D -->|insert entry| E\n```",[164],"pulls","forks","envVars",{"_176":56,"_178":56},"connections",{"_176":56,"_177":56},"count","unfilledCount","emptyCount",{"_20":163,"_13":164,"_132":165,"_134":-5,"_135":21,"_136":30,"_138":52,"_22":193,"_29":167,"_141":108,"_143":168,"_145":40,"_146":-5,"_184":194,"_96":195},{"_20":155,"_13":156,"_132":50,"_134":-5,"_135":21,"_136":157,"_138":52,"_22":190,"_29":159,"_141":160,"_143":161,"_145":40,"_146":-5,"_184":191,"_96":192},{"_20":148,"_13":149,"_132":150,"_134":-5,"_135":21,"_136":151,"_138":52,"_22":187,"_29":140,"_141":142,"_143":153,"_145":40,"_146":-5,"_184":188,"_96":189},{"_20":130,"_13":131,"_132":133,"_134":-5,"_135":21,"_136":137,"_138":52,"_22":183,"_29":140,"_141":142,"_143":144,"_145":40,"_146":-5,"_184":185,"_96":186},["D",1783973359483],"children",[],[131],["D",1783973708379],[],[149],["D",1783973697791],[],[156],["D",1783973862580],[],[164],["D",1783973187726],["D",1789473046147],{"_11":12,"_94":90},{"_11":12,"_88":-5,"_89":90,"_47":48,"_91":92,"_93":40},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":32,"_33":34,"_82":42,"_83":84,"_85":58,"_86":14,"_87":12},"ctx",{"_75":-5,"_118":234,"_235":236,"_237":238,"_239":40,"_240":40,"_241":40,"_242":52,"_243":-5,"_244":-7,"_245":-7,"_246":56,"_247":40,"_248":40,"_249":-5,"_250":40,"_251":40,"_252":40,"_253":-5},"ENV",{"_205":206,"_207":208,"_209":26,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1