[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_261":262,"_263":264},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_72":196,"_40":-7,"_197":-5,"_17":198,"_199":200,"_201":202,"_203":204,"_205":206,"_145":-5,"_207":208,"_209":210,"_211":48,"_212":213,"_214":26,"_215":-5,"_216":-5,"_217":218},"routes/_app.x.$handle.$name.compare.$branch",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":-5},"handle","benrobo","name","ascend-waitlist","branchName","main","project",{"_32":57,"_13":14,"_34":155,"_46":-5,"_156":48,"_49":50,"_157":50,"_158":159,"_160":-5,"_161":162,"_163":125,"_164":26,"_165":-5,"_166":-5,"_167":101,"_52":53,"_168":169,"_170":171,"_172":173,"_174":-5,"_175":176,"_177":176,"_178":179,"_180":179,"_181":179,"_182":176,"_183":176,"_184":185,"_186":187,"_188":28,"_47":48},"ahead",12,"behind",5,"diff",{"_62":63,"_64":65,"_66":67},"hasChanges",true,"sourceBranch",{"_40":41,"_13":16,"_32":56,"_38":57,"_42":33,"_43":58,"_59":50,"_60":39,"_61":53,"_54":14,"_51":12},"targetBranch",{"_32":33,"_34":35,"_36":37,"_13":16,"_38":39,"_40":41,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":12,"_52":53,"_54":55},"pull","id","14771000-57b5-11f1-a5ca-ee650bb23af1","createdAt",["D",1779657066923],"updatedAt",["D",1787135001191],"projectId","14765f02-57b5-11f1-a5ca-ee650bb23af1","version",13,"forkedBranchId","forkedBranchVersion","lockfileKey","1787135001439-esm.town_v_benrobo_elorah-waitlist@13-main","deletedAt","isOwned",false,"privacy","public","userHandle","orgId","380b02c7-e14d-481a-8a10-e7eff18a2a54","projectName","elorah-waitlist","113de6af-f85a-4089-bdde-1d0e4cfb0bcd","5f8556ca-fe8d-4586-b971-9d0968404fa9",8,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","added",[],"deleted",[],"modified",[68,69,70,71],{"_72":138,"_74":139,"_76":140},{"_72":121,"_74":122,"_76":123},{"_72":105,"_74":106,"_76":107},{"_72":73,"_74":75,"_76":77},"path","validation.ts","targetFile",{"_32":97,"_13":73,"_79":98,"_81":-5,"_82":33,"_83":99,"_85":48,"_34":100,"_40":101,"_88":89,"_90":102,"_64":48,"_92":-5,"_93":-7,"_72":103,"_95":104},"sourceFile",{"_32":78,"_13":73,"_79":80,"_81":-5,"_82":56,"_83":84,"_85":26,"_34":86,"_40":87,"_88":89,"_90":91,"_64":48,"_92":-5,"_93":-7,"_72":94,"_95":96},"efc84eb9-c3b7-4818-81e7-83b1872b6515","fileId","019f5d16-90e0-701c-aca1-17ea73a456f2","parentId","branchId","branchVersion",3,"latest",["D",1783973359483],2,"fileType","script","content","// Disposable/temporary email domains to block\nconst DISPOSABLE_DOMAINS = new Set([\n \"mailinator.com\",\n \"guerrillamail.com\",\n \"tempmail.com\",\n \"throwaway.email\",\n \"yopmail.com\",\n \"sharklasers.com\",\n \"guerrillamailblock.com\",\n \"grr.la\",\n \"guerrillamail.info\",\n \"guerrillamail.net\",\n \"guerrillamail.org\",\n \"guerrillamail.de\",\n \"10minutemail.com\",\n \"trashmail.com\",\n \"trashmail.me\",\n \"trashmail.net\",\n \"fakeinbox.com\",\n \"mailnesia.com\",\n \"maildrop.cc\",\n \"dispostable.com\",\n \"tempr.email\",\n \"temp-mail.org\",\n \"tempail.com\",\n \"emailondeck.com\",\n \"33mail.com\",\n \"getnada.com\",\n \"mohmal.com\",\n \"burnermail.io\",\n \"mailcatch.com\",\n \"meltmail.com\",\n \"harakirimail.com\",\n \"trbvm.com\",\n \"discard.email\",\n \"discardmail.com\",\n \"discardmail.de\",\n \"spamgourmet.com\",\n \"mytemp.email\",\n \"mailsac.com\",\n \"inboxbear.com\",\n \"crazymailing.com\",\n \"deadfake.com\",\n \"einrot.com\",\n \"fakemailgenerator.com\",\n \"filzmail.com\",\n \"getairmail.com\",\n \"jetable.org\",\n \"kasmail.com\",\n \"mailexpire.com\",\n \"mailforspam.com\",\n \"mailinator2.com\",\n \"mailmoat.com\",\n \"mailnator.com\",\n \"mailshell.com\",\n \"mailzilla.com\",\n \"nomail.xl.cx\",\n \"nowmymail.com\",\n \"pookmail.com\",\n \"spamavert.com\",\n \"spamfree24.org\",\n \"tempomail.fr\",\n \"thankyou2010.com\",\n \"trash-mail.at\",\n \"trashymail.com\",\n \"trashymail.net\",\n \"mailhub.pw\",\n \"mailinbox.co\",\n \"test.com\",\n \"example.com\",\n]);\n\n// Valid interests from the form\nexport const VALID_INTERESTS = [\n \"Consistency\",\n \"Deeper understanding\",\n \"Reconnecting\",\n \"Spiritual habits\",\n \"Quiet\",\n] as const;\n\n// Valid referral sources from the form\nexport const VALID_REFERRALS = [\n \"A friend\",\n \"X / Twitter\",\n \"Instagram\",\n \"YouTube\",\n \"My church\",\n \"Search\",\n \"Somewhere else\",\n] as const;\n\nexport type Interest = typeof VALID_INTERESTS[number];\nexport type Referral = typeof VALID_REFERRALS[number];\n\ninterface ValidationResult {\n valid: boolean;\n error?: string;\n}\n\n/**\n * Check if a string looks like gibberish/keyboard smash.\n * Heuristics:\n * - Too many consonants in a row (5+)\n * - Too many repeated characters (4+)\n * - No vowels at all in the local part\n * - Excessive length of local part with no real structure\n */\nfunction isGibberish(localPart: string): boolean {\n const lower = localPart.toLowerCase().replace(/[^a-z]/g, \"\");\n if (lower.length === 0) return true;\n\n // Check for 5+ consecutive consonants\n if (/[bcdfghjklmnpqrstvwxyz]{5,}/i.test(lower)) return true;\n\n // Check for 4+ repeated characters\n if (/(.)\\1{3,}/.test(lower)) return true;\n\n // No vowels at all in a local part longer than 3 chars\n if (lower.length > 3 && !/[aeiou]/.test(lower)) return true;\n\n // Extremely high ratio of unique bigrams to length (random strings)\n // If the local part is long but every 2-char pair is unique, it's likely random\n if (lower.length > 10) {\n const bigrams = new Set();\n for (let i = 0; i < lower.length - 1; i++) {\n bigrams.add(lower.slice(i, i + 2));\n }\n const ratio = bigrams.size / (lower.length - 1);\n // Very high uniqueness in a long string suggests randomness\n if (ratio > 0.95 && lower.length > 15) return true;\n }\n\n return false;\n}\n\n/**\n * Validate email address with multiple layers of protection\n */\nexport function validateEmail(email: string): ValidationResult {\n if (!email || typeof email !== \"string\") {\n return { valid: false, error: \"Email is required\" };\n }\n\n const trimmed = email.trim().toLowerCase();\n\n // Basic format check\n const emailRegex = /^[a-zA-Z0-9._%+\\-]+@[a-zA-Z0-9.\\-]+\\.[a-zA-Z]{2,}$/;\n if (!emailRegex.test(trimmed)) {\n return { valid: false, error: \"Invalid email format\" };\n }\n\n // Length checks\n if (trimmed.length > 254) {\n return { valid: false, error: \"Email is too long\" };\n }\n\n const [localPart, domain] = trimmed.split(\"@\");\n\n if (localPart.length > 64) {\n return { valid: false, error: \"Email local part is too long\" };\n }\n\n // Block disposable email domains\n if (DISPOSABLE_DOMAINS.has(domain)) {\n return {\n valid: false,\n error: \"Disposable email addresses are not allowed\",\n };\n }\n\n // Block gibberish local parts\n if (isGibberish(localPart)) {\n return { valid: false, error: \"Please use a valid email address\" };\n }\n\n // Block obviously fake TLDs or very short domains\n const domainParts = domain.split(\".\");\n if (domainParts.some((p) => p.length < 1)) {\n return { valid: false, error: \"Invalid email domain\" };\n }\n\n return { valid: true };\n}\n\n/**\n * Validate the full waitlist submission\n */\nexport function validateSubmission(body: unknown): ValidationResult & {\n data?: {\n email: string;\n };\n} {\n if (!body || typeof body !== \"object\") {\n return { valid: false, error: \"Invalid request body\" };\n }\n\n const { email } = body as Record;\n\n // Validate email\n const emailResult = validateEmail(email as string);\n if (!emailResult.valid) {\n return emailResult;\n }\n\n return {\n valid: true,\n data: {\n email: (email as string).trim().toLowerCase(),\n },\n };\n}","label","children",[73],"contentHash","6c9ce3e85c3d01bcd853abdb21b4a39c5444ede0772b600488ba02c84fc736e2","2667d7fe-57b5-11f1-a5ca-ee650bb23af1","2667d894-57b5-11f1-a5ca-ee650bb23af1",1,["D",1779657097008],0,"// Disposable/temporary email domains to block\nconst DISPOSABLE_DOMAINS = new Set([\n \"mailinator.com\", \"guerrillamail.com\", \"tempmail.com\", \"throwaway.email\",\n \"yopmail.com\", \"sharklasers.com\", \"guerrillamailblock.com\", \"grr.la\",\n \"guerrillamail.info\", \"guerrillamail.net\", \"guerrillamail.org\", \"guerrillamail.de\",\n \"10minutemail.com\", \"trashmail.com\", \"trashmail.me\", \"trashmail.net\",\n \"fakeinbox.com\", \"mailnesia.com\", \"maildrop.cc\", \"dispostable.com\",\n \"tempr.email\", \"temp-mail.org\", \"tempail.com\", \"emailondeck.com\",\n \"33mail.com\", \"getnada.com\", \"mohmal.com\", \"burnermail.io\",\n \"mailcatch.com\", \"meltmail.com\", \"harakirimail.com\", \"trbvm.com\",\n \"discard.email\", \"discardmail.com\", \"discardmail.de\", \"spamgourmet.com\",\n \"mytemp.email\", \"mailsac.com\", \"inboxbear.com\", \"crazymailing.com\",\n \"deadfake.com\", \"einrot.com\", \"fakemailgenerator.com\", \"filzmail.com\",\n \"getairmail.com\", \"jetable.org\", \"kasmail.com\", \"mailexpire.com\",\n \"mailforspam.com\", \"mailinator2.com\", \"mailmoat.com\", \"mailnator.com\",\n \"mailshell.com\", \"mailzilla.com\", \"nomail.xl.cx\", \"nowmymail.com\",\n \"pookmail.com\", \"spamavert.com\", \"spamfree24.org\", \"tempomail.fr\",\n \"thankyou2010.com\", \"trash-mail.at\", \"trashymail.com\", \"trashymail.net\",\n \"mailhub.pw\", \"mailinbox.co\", \"test.com\", \"example.com\",\n]);\n\n// Valid interests from the form\nexport const VALID_INTERESTS = [\n \"Consistency\",\n \"Deeper understanding\",\n \"Reconnecting\",\n \"Spiritual habits\",\n \"Quiet\",\n] as const;\n\n// Valid referral sources from the form\nexport const VALID_REFERRALS = [\n \"A friend\",\n \"X / Twitter\",\n \"Instagram\",\n \"YouTube\",\n \"My church\",\n \"Search\",\n \"Somewhere else\",\n] as const;\n\nexport type Interest = typeof VALID_INTERESTS[number];\nexport type Referral = typeof VALID_REFERRALS[number];\n\ninterface ValidationResult {\n valid: boolean;\n error?: string;\n}\n\n/**\n * Check if a string looks like gibberish/keyboard smash.\n * Heuristics:\n * - Too many consonants in a row (5+)\n * - Too many repeated characters (4+)\n * - No vowels at all in the local part\n * - Excessive length of local part with no real structure\n */\nfunction isGibberish(localPart: string): boolean {\n const lower = localPart.toLowerCase().replace(/[^a-z]/g, \"\");\n if (lower.length === 0) return true;\n\n // Check for 5+ consecutive consonants\n if (/[bcdfghjklmnpqrstvwxyz]{5,}/i.test(lower)) return true;\n\n // Check for 4+ repeated characters\n if (/(.)\\1{3,}/.test(lower)) return true;\n\n // No vowels at all in a local part longer than 3 chars\n if (lower.length > 3 && !/[aeiou]/.test(lower)) return true;\n\n // Extremely high ratio of unique bigrams to length (random strings)\n // If the local part is long but every 2-char pair is unique, it's likely random\n if (lower.length > 10) {\n const bigrams = new Set();\n for (let i = 0; i < lower.length - 1; i++) {\n bigrams.add(lower.slice(i, i + 2));\n }\n const ratio = bigrams.size / (lower.length - 1);\n // Very high uniqueness in a long string suggests randomness\n if (ratio > 0.95 && lower.length > 15) return true;\n }\n\n return false;\n}\n\n/**\n * Validate email address with multiple layers of protection\n */\nexport function validateEmail(email: string): ValidationResult {\n if (!email || typeof email !== \"string\") {\n return { valid: false, error: \"Email is required\" };\n }\n\n const trimmed = email.trim().toLowerCase();\n\n // Basic format check\n const emailRegex = /^[a-zA-Z0-9._%+\\-]+@[a-zA-Z0-9.\\-]+\\.[a-zA-Z]{2,}$/;\n if (!emailRegex.test(trimmed)) {\n return { valid: false, error: \"Invalid email format\" };\n }\n\n // Length checks\n if (trimmed.length > 254) {\n return { valid: false, error: \"Email is too long\" };\n }\n\n const [localPart, domain] = trimmed.split(\"@\");\n\n if (localPart.length > 64) {\n return { valid: false, error: \"Email local part is too long\" };\n }\n\n // Block disposable email domains\n if (DISPOSABLE_DOMAINS.has(domain)) {\n return { valid: false, error: \"Disposable email addresses are not allowed\" };\n }\n\n // Block gibberish local parts\n if (isGibberish(localPart)) {\n return { valid: false, error: \"Please use a valid email address\" };\n }\n\n // Block obviously fake TLDs or very short domains\n const domainParts = domain.split(\".\");\n if (domainParts.some((p) => p.length < 1)) {\n return { valid: false, error: \"Invalid email domain\" };\n }\n\n return { valid: true };\n}\n\n/**\n * Validate the full waitlist submission\n */\nexport function validateSubmission(body: unknown): ValidationResult & { data?: {\n email: string;\n interests: string[];\n referral: string | null;\n} } {\n if (!body || typeof body !== \"object\") {\n return { valid: false, error: \"Invalid request body\" };\n }\n\n const { email, interests, referral } = body as Record;\n\n // Validate email\n const emailResult = validateEmail(email as string);\n if (!emailResult.valid) {\n return emailResult;\n }\n\n // Validate interests\n if (!Array.isArray(interests) || interests.length === 0) {\n return { valid: false, error: \"Please select at least one interest\" };\n }\n\n if (interests.length > VALID_INTERESTS.length) {\n return { valid: false, error: \"Too many interests selected\" };\n }\n\n for (const interest of interests) {\n if (!VALID_INTERESTS.includes(interest as Interest)) {\n return { valid: false, error: `Invalid interest: ${interest}` };\n }\n }\n\n // Check for duplicate interests\n if (new Set(interests).size !== interests.length) {\n return { valid: false, error: \"Duplicate interests are not allowed\" };\n }\n\n // Validate referral (optional)\n let validatedReferral: string | null = null;\n if (referral !== undefined && referral !== null && referral !== \"\") {\n if (!VALID_REFERRALS.includes(referral as Referral)) {\n return { valid: false, error: `Invalid referral source: ${referral}` };\n }\n validatedReferral = referral as string;\n }\n\n return {\n valid: true,\n data: {\n email: (email as string).trim().toLowerCase(),\n interests: interests as string[],\n referral: validatedReferral,\n },\n };\n}\n",[73],"2a852428b1a590457c4233bdbfeb593000a75e61b02dea99b838c30a8dffd9b6","db.ts",{"_32":115,"_13":105,"_79":116,"_81":-5,"_82":33,"_83":87,"_85":48,"_34":117,"_40":101,"_88":89,"_90":118,"_64":48,"_92":-5,"_93":-7,"_72":119,"_95":120},{"_32":108,"_13":105,"_79":109,"_81":-5,"_82":56,"_83":110,"_85":26,"_34":111,"_40":87,"_88":89,"_90":112,"_64":48,"_92":-5,"_93":-7,"_72":113,"_95":114},"d5b41013-8eef-4463-85fb-239e46570cca","019f5d16-90e0-701c-aca1-1043cd6d7a85",6,["D",1783973708379],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function initDB() {\n await sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS waitlist (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT UNIQUE NOT NULL,\n ip_hash TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS rate_limits (\n ip_hash TEXT PRIMARY KEY,\n attempts INTEGER DEFAULT 1,\n first_attempt TEXT DEFAULT (datetime('now')),\n last_attempt TEXT DEFAULT (datetime('now'))\n )`,\n },\n ]);\n}\n\n/**\n * Hash an IP address for rate limiting (privacy-preserving)\n */\nasync function hashIP(ip: string): Promise {\n const encoder = new TextEncoder();\n // Use a static salt — not secret, just for differentiation\n const data = encoder.encode(`elorah-waitlist-salt:${ip}`);\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/**\n * Check rate limit: max 5 submissions per IP per hour\n */\nexport async function checkRateLimit(\n ip: string,\n): Promise<{ allowed: boolean; error?: string }> {\n const ipHash = await hashIP(ip);\n\n const result = await sqlite.execute({\n sql: `SELECT attempts, first_attempt FROM rate_limits WHERE ip_hash = ?`,\n args: [ipHash],\n });\n\n if (result.rows.length > 0) {\n const row = result.rows[0] as Record;\n const attempts = row.attempts as number;\n const firstAttempt = new Date(row.first_attempt as string);\n const now = new Date();\n const hourAgo = new Date(now.getTime() - 60 * 60 * 1000);\n\n if (firstAttempt > hourAgo && attempts >= 5) {\n return {\n allowed: false,\n error: \"Too many submissions. Please try again later.\",\n };\n }\n\n // Reset if window has passed\n if (firstAttempt <= hourAgo) {\n await sqlite.execute({\n sql:\n `UPDATE rate_limits SET attempts = 1, first_attempt = datetime('now'), last_attempt = datetime('now') WHERE ip_hash = ?`,\n args: [ipHash],\n });\n } else {\n await sqlite.execute({\n sql:\n `UPDATE rate_limits SET attempts = attempts + 1, last_attempt = datetime('now') WHERE ip_hash = ?`,\n args: [ipHash],\n });\n }\n } else {\n await sqlite.execute({\n sql: `INSERT INTO rate_limits (ip_hash) VALUES (?)`,\n args: [ipHash],\n });\n }\n\n return { allowed: true };\n}\n\n/**\n * Insert a waitlist entry. Returns success or duplicate error.\n */\nexport async function insertWaitlistEntry(\n email: string,\n ip: string,\n): Promise<{ success: boolean; error?: string }> {\n const ipHash = await hashIP(ip);\n\n try {\n await sqlite.execute({\n sql: `INSERT INTO waitlist (email, ip_hash) VALUES (?, ?)`,\n args: [email, ipHash],\n });\n return { success: true };\n } catch (e: unknown) {\n const error = e as Error;\n if (error.message?.includes(\"UNIQUE constraint failed\")) {\n return { success: false, error: \"This email is already on the waitlist\" };\n }\n throw e;\n }\n}\n\n/**\n * Get waitlist count\n */\nexport async function getWaitlistCount(): Promise {\n const result = await sqlite.execute(\"SELECT COUNT(*) as count FROM waitlist\");\n return (result.rows[0] as Record).count as number;\n}",[105],"8a2d07bdba622f349beacf927654c7d731fbdd081e2a1cd74f2644e1baa774dd","2ecd9320-57b5-11f1-a5ca-ee650bb23af1","2ecd93d4-57b5-11f1-a5ca-ee650bb23af1",["D",1779657111094],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function initDB() {\n await sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS waitlist (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT UNIQUE NOT NULL,\n interests TEXT NOT NULL,\n referral TEXT,\n ip_hash TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS rate_limits (\n ip_hash TEXT PRIMARY KEY,\n attempts INTEGER DEFAULT 1,\n first_attempt TEXT DEFAULT (datetime('now')),\n last_attempt TEXT DEFAULT (datetime('now'))\n )`,\n },\n ]);\n}\n\n/**\n * Hash an IP address for rate limiting (privacy-preserving)\n */\nasync function hashIP(ip: string): Promise {\n const encoder = new TextEncoder();\n // Use a static salt — not secret, just for differentiation\n const data = encoder.encode(`elorah-waitlist-salt:${ip}`);\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/**\n * Check rate limit: max 5 submissions per IP per hour\n */\nexport async function checkRateLimit(ip: string): Promise<{ allowed: boolean; error?: string }> {\n const ipHash = await hashIP(ip);\n\n const result = await sqlite.execute({\n sql: `SELECT attempts, first_attempt FROM rate_limits WHERE ip_hash = ?`,\n args: [ipHash],\n });\n\n if (result.rows.length > 0) {\n const row = result.rows[0] as Record;\n const attempts = row.attempts as number;\n const firstAttempt = new Date(row.first_attempt as string);\n const now = new Date();\n const hourAgo = new Date(now.getTime() - 60 * 60 * 1000);\n\n if (firstAttempt > hourAgo && attempts >= 5) {\n return { allowed: false, error: \"Too many submissions. Please try again later.\" };\n }\n\n // Reset if window has passed\n if (firstAttempt <= hourAgo) {\n await sqlite.execute({\n sql: `UPDATE rate_limits SET attempts = 1, first_attempt = datetime('now'), last_attempt = datetime('now') WHERE ip_hash = ?`,\n args: [ipHash],\n });\n } else {\n await sqlite.execute({\n sql: `UPDATE rate_limits SET attempts = attempts + 1, last_attempt = datetime('now') WHERE ip_hash = ?`,\n args: [ipHash],\n });\n }\n } else {\n await sqlite.execute({\n sql: `INSERT INTO rate_limits (ip_hash) VALUES (?)`,\n args: [ipHash],\n });\n }\n\n return { allowed: true };\n}\n\n/**\n * Insert a waitlist entry. Returns success or duplicate error.\n */\nexport async function insertWaitlistEntry(\n email: string,\n interests: string[],\n referral: string | null,\n ip: string,\n): Promise<{ success: boolean; error?: string }> {\n const ipHash = await hashIP(ip);\n\n try {\n await sqlite.execute({\n sql: `INSERT INTO waitlist (email, interests, referral, ip_hash) VALUES (?, ?, ?, ?)`,\n args: [email, JSON.stringify(interests), referral, ipHash],\n });\n return { success: true };\n } catch (e: unknown) {\n const error = e as Error;\n if (error.message?.includes(\"UNIQUE constraint failed\")) {\n return { success: false, error: \"This email is already on the waitlist\" };\n }\n throw e;\n }\n}\n\n/**\n * Get waitlist count\n */\nexport async function getWaitlistCount(): Promise {\n const result = await sqlite.execute(\"SELECT COUNT(*) as count FROM waitlist\");\n return (result.rows[0] as Record).count as number;\n}\n",[105],"2912e37a49413b675f1a0cd8fdfc9f2b0a4481bb1e50c74541a6e83dd58f79d7","api.ts",{"_32":131,"_13":121,"_79":132,"_81":-5,"_82":33,"_83":58,"_85":48,"_34":133,"_40":134,"_88":127,"_90":135,"_64":48,"_92":-5,"_93":-7,"_72":136,"_95":137},{"_32":124,"_13":121,"_79":125,"_81":-5,"_82":56,"_83":22,"_85":26,"_34":126,"_40":99,"_88":127,"_90":128,"_64":48,"_92":-5,"_93":-7,"_72":129,"_95":130},"21c2140a-f10e-4193-b1d0-7a3b7c56b548","019f5d16-90e0-701c-aca1-0f1a2b9c1610",["D",1783973697791],"http","import { Hono } from \"npm:hono@4\";\nimport {\n checkRateLimit,\n getWaitlistCount,\n initDB,\n insertWaitlistEntry,\n} from \"./db.ts\";\nimport { validateSubmission } from \"./validation.ts\";\n\nconst app = new Hono();\n\napp.onError((err) => Promise.reject(err));\n\n// Initialize DB on first request\nlet dbInitialized = false;\napp.use(\"*\", async (_c, next) => {\n if (!dbInitialized) {\n await initDB();\n dbInitialized = true;\n }\n await next();\n});\n\n// Health check / API info\napp.get(\"/\", (c) => {\n return c.json({\n name: \"Ascend Waitlist API\",\n endpoints: {\n \"POST /join\": \"Join the waitlist\",\n \"GET /count\": \"Get waitlist count\",\n },\n schema: {\n email: \"string (required)\",\n },\n });\n});\n\n// Join waitlist\napp.post(\"/join\", async (c) => {\n const ip = c.req.header(\"x-forwarded-for\") ??\n c.req.header(\"cf-connecting-ip\") ??\n \"unknown\";\n\n // Rate limit check\n const rateCheck = await checkRateLimit(ip);\n if (!rateCheck.allowed) {\n return c.json({ success: false, error: rateCheck.error }, 429);\n }\n\n // Parse body\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ success: false, error: \"Invalid JSON body\" }, 400);\n }\n\n // Validate submission\n const validation = validateSubmission(body);\n if (!validation.valid || !validation.data) {\n return c.json({ success: false, error: validation.error }, 400);\n }\n\n const { email } = validation.data;\n\n // Insert into DB\n const result = await insertWaitlistEntry(email, ip);\n if (!result.success) {\n return c.json({ success: false, error: result.error }, 409);\n }\n\n const count = await getWaitlistCount();\n\n return c.json({\n success: true,\n message:\n \"You're on the waitlist! We'll email you when your invite is ready.\",\n count,\n }, 201);\n});\n\n// Get waitlist count\napp.get(\"/count\", async (c) => {\n const count = await getWaitlistCount();\n return c.json({ count });\n});\n\nexport default app.fetch;",[121],"a7038c3105cbdd8ed7bff71dc7e553518f2b7454d1c142395dc9e619204d3b44","6873e476-57b5-11f1-b796-ee650bb23af1","365fc680-57b5-11f1-ad48-ee650bb23af1",["D",1779657207820],4,"import { Hono } from \"npm:hono@4\";\nimport { initDB, checkRateLimit, insertWaitlistEntry, getWaitlistCount } from \"./db.ts\";\nimport { validateSubmission, VALID_INTERESTS, VALID_REFERRALS } from \"./validation.ts\";\n\nconst app = new Hono();\n\napp.onError((err) => Promise.reject(err));\n\n// Initialize DB on first request\nlet dbInitialized = false;\napp.use(\"*\", async (_c, next) => {\n if (!dbInitialized) {\n await initDB();\n dbInitialized = true;\n }\n await next();\n});\n\n// Health check / API info\napp.get(\"/\", (c) => {\n return c.json({\n name: \"Elorah Waitlist API\",\n endpoints: {\n \"POST /join\": \"Join the waitlist\",\n \"GET /count\": \"Get waitlist count\",\n },\n schema: {\n email: \"string (required)\",\n interests: `string[] (required, at least 1 from: ${VALID_INTERESTS.join(\", \")})`,\n referral: `string | null (optional, one of: ${VALID_REFERRALS.join(\", \")})`,\n },\n });\n});\n\n// Join waitlist\napp.post(\"/join\", async (c) => {\n const ip = c.req.header(\"x-forwarded-for\")\n ?? c.req.header(\"cf-connecting-ip\")\n ?? \"unknown\";\n\n // Rate limit check\n const rateCheck = await checkRateLimit(ip);\n if (!rateCheck.allowed) {\n return c.json({ success: false, error: rateCheck.error }, 429);\n }\n\n // Parse body\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ success: false, error: \"Invalid JSON body\" }, 400);\n }\n\n // Validate submission\n const validation = validateSubmission(body);\n if (!validation.valid || !validation.data) {\n return c.json({ success: false, error: validation.error }, 400);\n }\n\n const { email, interests, referral } = validation.data;\n\n // Insert into DB\n const result = await insertWaitlistEntry(email, interests, referral, ip);\n if (!result.success) {\n return c.json({ success: false, error: result.error }, 409);\n }\n\n const count = await getWaitlistCount();\n\n return c.json({\n success: true,\n message: \"You're on the waitlist! We'll email you when your invite is ready.\",\n count,\n }, 201);\n});\n\n// Get waitlist count\napp.get(\"/count\", async (c) => {\n const count = await getWaitlistCount();\n return c.json({ count });\n});\n\n\nexport default app.fetch;\n",[121],"b6bf21ea120da8df89e8f550b83e34361b14a9c1a0e40af0d5976cc3e5cf16cb","README.md",{"_32":149,"_13":138,"_79":150,"_81":-5,"_82":33,"_83":134,"_85":26,"_34":151,"_40":101,"_88":145,"_90":152,"_64":48,"_92":-5,"_93":-7,"_72":153,"_95":154},{"_32":141,"_13":138,"_79":142,"_81":-5,"_82":56,"_83":41,"_85":26,"_34":143,"_40":144,"_88":145,"_90":146,"_64":48,"_92":-5,"_93":-7,"_72":147,"_95":148},"12d3a5eb-038e-4a96-8e3f-049469d6cfc9","019f5d16-90dd-77a8-8277-597eee3a67b7",["D",1783973862580],7,"file","# Ascend Waitlist API\n\nCollects waitlist signups for Ascend with built-in fraud prevention.\n\n## Endpoints\n\n| Method | Path | Description |\n| ------ | --------- | ------------------------ |\n| `GET` | `/` | API info & schema |\n| `POST` | `/join` | Join the waitlist |\n| `GET` | `/count` | Get total waitlist count |\n| `GET` | `/source` | View source code |\n\n## POST /join\n\n```json\n{\n \"email\": \"you@somewhere.com\"\n}\n```\n\n### Fields\n\n- **email** (required) — must be a real email, not disposable or gibberish\n\n### Responses\n\n| Status | Meaning |\n| ------ | ------------------------- |\n| `201` | Successfully joined |\n| `400` | Validation error |\n| `409` | Email already on waitlist |\n| `429` | Rate limited |\n\n## Fraud Prevention\n\n- ✅ Disposable email domain blocking (50+ providers)\n- ✅ Gibberish/keyboard-smash detection\n- ✅ Email format validation (RFC-compliant)\n- ✅ Rate limiting (5 submissions/IP/hour)\n- ✅ Duplicate email prevention\n- ✅ Interest/referral enum validation\n- ✅ Privacy-preserving IP hashing\n\n## Architecture\n\n```mermaid\ngraph LR\n A[Client] -->|POST /join| B[api.ts]\n B --> C[validation.ts]\n C -->|validate email| B\n B --> D[db.ts]\n D -->|rate limit check| E[(SQLite)]\n D -->|insert entry| E\n```",[138],"1f08074a8b4e0a0255215c83bb7ac0bf45ad2960366398863cf8d7aa2298791f","496da17a-57b5-11f1-a5ca-ee650bb23af1","496da26a-57b5-11f1-a5ca-ee650bb23af1",["D",1779657155770],"# Elorah Waitlist API\n\nCollects waitlist signups for Elorah with built-in fraud prevention.\n\n## Endpoints\n\n| Method | Path | Description |\n|--------|------|-------------|\n| `GET` | `/` | API info & schema |\n| `POST` | `/join` | Join the waitlist |\n| `GET` | `/count` | Get total waitlist count |\n| `GET` | `/source` | View source code |\n\n## POST /join\n\n```json\n{\n \"email\": \"you@somewhere.com\",\n \"interests\": [\"Consistency\", \"Quiet\"],\n \"referral\": \"Instagram\"\n}\n```\n\n### Fields\n\n- **email** (required) — must be a real email, not disposable or gibberish\n- **interests** (required, array) — at least one of: `Consistency`, `Deeper understanding`, `Reconnecting`, `Spiritual habits`, `Quiet`\n- **referral** (optional) — one of: `A friend`, `X / Twitter`, `Instagram`, `YouTube`, `My church`, `Search`, `Somewhere else`\n\n### Responses\n\n| Status | Meaning |\n|--------|---------|\n| `201` | Successfully joined |\n| `400` | Validation error |\n| `409` | Email already on waitlist |\n| `429` | Rate limited |\n\n## Fraud Prevention\n\n- ✅ Disposable email domain blocking (50+ providers)\n- ✅ Gibberish/keyboard-smash detection\n- ✅ Email format validation (RFC-compliant)\n- ✅ Rate limiting (5 submissions/IP/hour)\n- ✅ Duplicate email prevention\n- ✅ Interest/referral enum validation\n- ✅ Privacy-preserving IP hashing\n\n## Architecture\n\n```mermaid\ngraph LR\n A[Client] -->|POST /join| B[api.ts]\n B --> C[validation.ts]\n C -->|validate email, interests, referral| B\n B --> D[db.ts]\n D -->|rate limit check| E[(SQLite)]\n D -->|insert entry| E\n```\n",[138],"8f567c77299cd2eac3626ef6c8c315ed97a5e9f4c6646c1307aaaa97e36b1cd3",["D",1783973187726],"legacyEnvVars","httpPrivacy","description","Waitlist API for Elorah with email validation","imageUrl","userId","c9ad4c4f-0ce1-4f18-8c66-10ee36a1d6a2","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","tursoName","5f8556cafe8d4586b9719d0968404fa9","tursoHostname","5f8556cafe8d4586b9719d0968404fa9-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789473046147],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_195":191},"org",{"_11":12,"_189":-5,"_190":191,"_161":162,"_192":193,"_194":48},"branch","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yaW5rUWxSZjNBNEltemFVRDhvWG5SWTREdW4ifQ","tier","free","canRestrictVals","profileImageUrl","","adoptOrgId",{"_32":57,"_13":14,"_34":256,"_46":-5,"_156":48,"_49":50,"_157":50,"_158":159,"_160":-5,"_161":162,"_163":125,"_164":26,"_165":-5,"_166":-5,"_167":101,"_52":53,"_168":169,"_170":171,"_172":257,"_174":-5,"_175":176,"_177":176,"_178":179,"_180":179,"_181":179,"_182":176,"_183":176,"_184":258,"_186":259,"_188":260,"_47":48},"tree",[244,245,246,247],"files",[244,245,246,247],"counts",{"_234":101,"_235":99,"_236":101,"_237":238,"_239":240},"contents",[222,223,224,225],"upstreamProject",{"_32":39,"_13":55,"_158":159,"_160":-5,"_49":50,"_184":221},"upstreamBranch",{"_32":33,"_34":219,"_36":220,"_13":16,"_38":39,"_40":41,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":12,"_52":53,"_54":55},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1779657066923],["D",1787135001191],{"_11":12,"_195":191},{"_32":141,"_13":138,"_79":142,"_81":-5,"_82":56,"_83":41,"_85":26,"_34":232,"_40":144,"_88":145,"_90":146,"_64":48,"_92":-5,"_72":233},{"_32":124,"_13":121,"_79":125,"_81":-5,"_82":56,"_83":22,"_85":26,"_34":230,"_40":99,"_88":127,"_90":128,"_64":48,"_92":-5,"_72":231},{"_32":108,"_13":105,"_79":109,"_81":-5,"_82":56,"_83":110,"_85":26,"_34":228,"_40":87,"_88":89,"_90":112,"_64":48,"_92":-5,"_72":229},{"_32":78,"_13":73,"_79":80,"_81":-5,"_82":56,"_83":84,"_85":26,"_34":226,"_40":87,"_88":89,"_90":91,"_64":48,"_92":-5,"_72":227},["D",1783973359483],[73],["D",1783973708379],[105],["D",1783973697791],[121],["D",1783973862580],[138],"pulls","branches","forks","envVars",{"_241":101,"_243":101},"connections",{"_241":101,"_242":101},"count","unfilledCount","emptyCount",{"_32":141,"_13":138,"_79":142,"_81":-5,"_82":56,"_83":41,"_85":26,"_34":143,"_40":144,"_88":145,"_90":146,"_64":48,"_92":-5,"_93":254,"_72":255},{"_32":124,"_13":121,"_79":125,"_81":-5,"_82":56,"_83":22,"_85":26,"_34":126,"_40":99,"_88":127,"_90":128,"_64":48,"_92":-5,"_93":252,"_72":253},{"_32":108,"_13":105,"_79":109,"_81":-5,"_82":56,"_83":110,"_85":26,"_34":111,"_40":87,"_88":89,"_90":112,"_64":48,"_92":-5,"_93":250,"_72":251},{"_32":78,"_13":73,"_79":80,"_81":-5,"_82":56,"_83":84,"_85":26,"_34":86,"_40":87,"_88":89,"_90":91,"_64":48,"_92":-5,"_93":248,"_72":249},[],[73],[],[105],[],[121],[],[138],["D",1783973187726],["D",1789473046147],{"_11":12,"_195":191},{"_11":12,"_189":-5,"_190":191,"_161":162,"_192":193,"_194":48},{"_40":41,"_13":16,"_32":56,"_38":57,"_42":33,"_43":58,"_59":50,"_60":39,"_61":53,"_54":14,"_51":12},"ctx",{"_184":-5,"_216":294,"_295":296,"_297":298,"_299":48,"_300":48,"_301":48,"_302":26,"_303":-5,"_304":-7,"_305":-7,"_306":101,"_307":48,"_308":48,"_309":-5,"_310":48,"_311":48,"_312":48,"_313":-5},"ENV",{"_265":266,"_267":268,"_269":16,"_270":271,"_272":273,"_274":275,"_276":277,"_278":279,"_280":281,"_282":283,"_284":285,"_286":287,"_288":289,"_290":291,"_292":293},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergeascend-waitlist/mainintoelorah-waitlist/main

README.md+17-21

Hapi.ts+16-13

db.ts+14-11

validation.ts+79-56