[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_235":236,"_237":238},"routes/_app.x.$handle.$name",{"_109":108,"_38":56,"_117":99,"_33":118,"_13":14,"_119":-5,"_11":120,"_121":122,"_123":124,"_125":126,"_127":128,"_27":-5,"_129":-5,"_130":-5,"_131":31,"_132":133,"_134":135,"_136":-5,"_137":-5,"_138":139},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_54":55,"_38":56,"_44":57,"_58":-5,"_59":31,"_60":61,"_62":61,"_63":64,"_65":-5,"_19":66,"_67":-5,"_68":31,"_69":-5,"_70":-5,"_71":72,"_73":74,"_75":76,"_77":78,"_79":80,"_81":-5,"_82":83,"_84":83,"_85":86,"_87":86,"_88":86,"_89":83,"_90":83,"_91":92,"_93":94,"_95":96,"_97":31},"version",20,"changes",[25,26],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","f3e53391-110a-4420-b972-27b749c4c5c1","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_27":49,"_29":-7,"_30":31,"_32":31,"_33":50,"_35":50},{"_27":28,"_29":-7,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":14,"_47":48,"_30":31},"previous","deleted",false,"deletedHere","path","admin/Layout.tsx","latestPath","fileId","dd81d7ce-9af8-11f1-8710-1607ee4eb77e","name","Layout.tsx","fileType","script","content","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\n\nexport interface FlashMessage {\n kind: \"ok\" | \"error\";\n text: string;\n}\n\nexport function Layout(\n { title, user, flash, children }: {\n title: string;\n user: { username: string | null; profileImageUrl?: string | null };\n flash?: FlashMessage | null;\n children: React.ReactNode;\n },\n) {\n return (\n \n \n \n \n {title}\n \n \n \n \n

📬 Newsletter Signups

\n Review submissions and configure ntfy.sh receivers\n

\n @{user.username ?? \"unknown\"}\n

\n\n {flash && (\n \n {flash.text}\n

\n )}\n\n {children}\n\n \n \n \n \n );\n}\n\nexport function Card(\n { title, subtitle, children }: {\n title: string;\n subtitle?: string;\n children: React.ReactNode;\n },\n) {\n return (\n

{title}

\n {subtitle &&

{subtitle}

}\n

{children}

\n );\n}\n","createdAt",["D",1787052908390],"branchVersion","branchId","d72d2544-fed2-11f0-a1dd-42dde27851f2",{"_36":51,"_38":50,"_40":52,"_42":-5,"_44":53,"_46":14,"_47":48,"_30":31},"admin","5bf3d673-b10d-4ac0-be56-a32e248add93","directory",["D",1787052908390],"id","d72cb6b8-fed2-11f0-a1dd-42dde27851f2","newsletter-signup",["D",1769884195507],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Signup API with ntfy push alerts and an admin dashboard","imageUrl","c821e8f7-4cc4-4c23-96f1-319b8f33d4b7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","6b193d60-e165-45a9-869c-c3f886455f3e","tursoName","d72cb6b8fed211f0a1dd42dde27851f2","tursoHostname","d72cb6b8fed211f0a1dd42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789534231467],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_109":108,"_116":112},"org",{"_109":108,"_110":-5,"_111":112,"_19":66,"_113":114,"_115":31},"branch",{"_13":98,"_38":99,"_54":48,"_100":55,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":56,"_107":108},"isOwned",51,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","colel","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ6RVZCOExVNXBIT3FrVDh5a0VZQTNRRG5ycCJ9","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_54":55,"_38":56,"_44":230,"_58":-5,"_59":31,"_60":61,"_62":61,"_63":64,"_65":-5,"_19":66,"_67":-5,"_68":31,"_69":-5,"_70":-5,"_71":72,"_73":74,"_75":76,"_77":78,"_79":231,"_81":-5,"_82":83,"_84":83,"_85":86,"_87":86,"_88":86,"_89":83,"_90":83,"_91":232,"_93":233,"_95":234,"_97":31},"tree",[200,202,203,204,205,206],"files",[200,201,202,203,204,205,206],"counts",{"_189":72,"_190":191,"_192":72,"_193":194,"_195":196},"contents",[140,141,142,143,144,145],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_54":186,"_38":50,"_36":51,"_149":-5,"_47":48,"_46":14,"_151":135,"_44":187,"_13":72,"_40":52,"_42":-5,"_30":31,"_154":-5,"_33":188},{"_54":179,"_38":180,"_36":181,"_149":-5,"_47":48,"_46":182,"_151":31,"_44":183,"_13":72,"_40":27,"_42":184,"_30":31,"_154":-5,"_33":185},{"_54":172,"_38":173,"_36":174,"_149":-5,"_47":48,"_46":175,"_151":135,"_44":176,"_13":72,"_40":41,"_42":177,"_30":31,"_154":-5,"_33":178},{"_54":165,"_38":166,"_36":167,"_149":-5,"_47":48,"_46":168,"_151":31,"_44":169,"_13":72,"_40":41,"_42":170,"_30":31,"_154":-5,"_33":171},{"_54":156,"_38":157,"_36":158,"_149":-5,"_47":48,"_46":159,"_151":31,"_44":160,"_13":161,"_40":162,"_42":163,"_30":31,"_154":56,"_33":164},{"_54":146,"_38":147,"_36":148,"_149":-5,"_47":48,"_46":150,"_151":31,"_44":152,"_13":72,"_40":41,"_42":153,"_30":31,"_154":-5,"_33":155},"57e39e18-14b2-498a-add6-3e2db1aa84a9","ntfy.ts","c9b89cf0-9af8-11f1-9164-1607ee4eb77e","parentId",18,"latest",["D",1787052875199],"/**\n * ntfy.sh publishing.\n *\n * Uses ntfy's \"publish as JSON\" API: POST the message object (including `topic`)\n * to the server ROOT url — not the topic url.\n * https://docs.ntfy.sh/publish/#publish-as-json\n *\n * Auth (https://docs.ntfy.sh/publish/#authentication):\n * - access token -> Authorization: Bearer tk_…\n * - user:password -> Authorization: Basic base64(user:password)\n */\n\nimport {\n logDelivery,\n type NtfyEvent,\n type Receiver,\n receiversForEvent,\n type Subscriber,\n} from \"./db.ts\";\n\nexport interface NtfyMessage {\n topic: string;\n message: string;\n title?: string;\n tags?: string[];\n priority?: number;\n click?: string;\n markdown?: boolean;\n actions?: Array<{ action: string; label: string; url?: string; clear?: boolean }>;\n}\n\nexport interface PublishResult {\n ok: boolean;\n status: number | null;\n error: string | null;\n}\n\nfunction authHeader(auth: string | null): Record {\n const value = auth?.trim();\n if (!value) return {};\n // Access tokens are prefixed tk_; anything with a colon is user:password.\n if (value.startsWith(\"tk_\") || !value.includes(\":\")) {\n return { Authorization: `Bearer ${value}` };\n }\n return { Authorization: `Basic ${btoa(value)}` };\n}\n\nexport function normalizeServer(server: string): string {\n const trimmed = (server || \"https://ntfy.sh\").trim().replace(/\\/+$/, \"\");\n return /^https?:\\/\\//.test(trimmed) ? trimmed : `https://${trimmed}`;\n}\n\n/** Publish a single message to one receiver's server + topic. */\nexport async function publish(\n receiver: Pick,\n message: Omit & { tags?: string[] },\n): Promise {\n const body: NtfyMessage = {\n topic: receiver.topic.trim(),\n priority: receiver.priority,\n tags: message.tags ?? receiver.tags?.split(\",\").map(t => t.trim()).filter(Boolean),\n ...message,\n };\n\n try {\n const res = await fetch(normalizeServer(receiver.server) + \"/\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", ...authHeader(receiver.auth) },\n body: JSON.stringify(body),\n signal: AbortSignal.timeout(10_000),\n });\n if (!res.ok) {\n const text = (await res.text().catch(() => \"\")).slice(0, 300);\n return { ok: false, status: res.status, error: text || res.statusText };\n }\n await res.body?.cancel();\n return { ok: true, status: res.status, error: null };\n } catch (err: any) {\n return { ok: false, status: null, error: err?.message ?? String(err) };\n }\n}\n\nfunction formatDetails(details: Record | null): string {\n if (!details || !Object.keys(details).length) return \"\";\n return Object.entries(details)\n .map(([k, v]) => `- **${k}:** ${typeof v === \"object\" ? JSON.stringify(v) : String(v)}`)\n .join(\"\\n\");\n}\n\nfunction buildMessage(event: NtfyEvent, subscriber: Subscriber, adminUrl?: string) {\n const detailLines = formatDetails(subscriber.details);\n const title = event === \"signup\"\n ? \"New newsletter signup\"\n : `Signup details updated (#${subscriber.id})`;\n const lines = [\n subscriber.email,\n detailLines,\n `_#${subscriber.id} · ${subscriber.created_at} UTC_`,\n ].filter(Boolean);\n return {\n title,\n message: lines.join(\"\\n\"),\n markdown: true,\n click: adminUrl,\n actions: adminUrl\n ? [{ action: \"view\", label: \"Open admin\", url: adminUrl, clear: false }]\n : undefined,\n };\n}\n\n/**\n * Fan a signup event out to every enabled receiver listening for it.\n * Never throws — failures are logged to ntfy_deliveries so the admin page can show them.\n */\nexport async function notify(\n event: NtfyEvent,\n subscriber: Subscriber,\n origin?: string,\n): Promise {\n const receivers = await receiversForEvent(event).catch(() => []);\n if (!receivers.length) return [];\n\n const adminUrl = origin ? `${origin.replace(/\\/+$/, \"\")}/admin` : undefined;\n const payload = buildMessage(event, subscriber, adminUrl);\n\n const results = await Promise.all(receivers.map(async (receiver) => {\n const result = await publish(receiver, payload);\n if (!result.ok) {\n console.error(`ntfy: ${receiver.name} (${receiver.topic}) failed:`, result.status, result.error);\n }\n await logDelivery({\n receiver_id: receiver.id,\n receiver_name: receiver.name,\n subscriber_id: subscriber.id,\n event,\n ok: result.ok,\n status: result.status,\n error: result.error,\n }).catch(() => {});\n return result;\n }));\n\n return results;\n}\n\n/** Send a \"does this config work?\" message to one receiver. */\nexport async function sendTest(receiver: Receiver, origin?: string): Promise {\n const adminUrl = origin ? `${origin.replace(/\\/+$/, \"\")}/admin` : undefined;\n const result = await publish(receiver, {\n title: \"Newsletter signup test\",\n message: `Test notification for receiver **${receiver.name}**. If you can read this, alerts work. 🎉`,\n markdown: true,\n click: adminUrl,\n });\n await logDelivery({\n receiver_id: receiver.id,\n receiver_name: receiver.name,\n subscriber_id: null,\n event: \"test\",\n ok: result.ok,\n status: result.status,\n error: result.error,\n }).catch(() => {});\n return result;\n}\n","label",[147],"c6212ed6-1830-11f1-bd77-42dde27851f2","main.ts","d73071ea-fed2-11f0-a1dd-42dde27851f2",16,["D",1772673318659],14,"http","/**\n * Newsletter Signup API\n *\n * A simple HTTP endpoint for collecting email signups with flexible metadata storage.\n *\n * Features:\n * - Public signup endpoint (POST /subscribe) — returns subscriber id\n * - Public details endpoint (PUT /subscribe/:id/details) — merge additional info after signup\n * - Admin endpoints protected by API key (GET, PUT, DELETE /subscribers)\n * - Flexible JSON metadata field for arbitrary subscriber data\n * - Developer notes field for internal annotations\n * - SQLite storage with timestamps\n * - Duplicate emails allowed (de-duplicate downstream as needed)\n * - CORS enabled\n *\n * Environment Variables:\n * - ADMIN_API_KEY: Required for admin endpoints (passed via X-API-Key header)\n *\n * Schema:\n * - id: auto-incrementing primary key\n * - email: subscriber email (not unique)\n * - details: JSON blob for any metadata\n * - developer_notes: internal notes\n * - created_at, updated_at: timestamps\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite@14-main/main.ts\";\n\n// Simple auth check for admin endpoints\nfunction isAuthorized(req: Request): boolean {\n const apiKey = req.headers.get(\"X-API-Key\");\n const adminKey = Deno.env.get(\"ADMIN_API_KEY\");\n return !!adminKey && apiKey === adminKey;\n}\n\nfunction unauthorizedResponse(corsHeaders: Record): Response {\n return new Response(JSON.stringify({ error: \"Unauthorized\" }), {\n status: 401,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n}\n\n// Initialize the database table (no unique constraint on email - duplicates allowed, de-dupe later)\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS newsletter_subscribers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT NOT NULL,\n details TEXT,\n developer_notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nexport default async function(req: Request): Promise {\n const url = new URL(req.url);\n const corsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PUT, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-API-Key\",\n };\n\n // Handle CORS preflight\n if (req.method === \"OPTIONS\") {\n return new Response(null, { headers: corsHeaders });\n }\n\n try {\n // POST /subscribe - Sign up for newsletter\n if (req.method === \"POST\" && url.pathname === \"/subscribe\") {\n const body = await req.json();\n const { email, details } = body;\n\n if (!email || typeof email !== \"string\") {\n return new Response(JSON.stringify({ error: \"Email is required\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // Basic email validation\n const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n if (!emailRegex.test(email)) {\n return new Response(JSON.stringify({ error: \"Invalid email format\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n const insertResult = await sqlite.execute({\n sql: \"INSERT INTO newsletter_subscribers (email, details) VALUES (?, ?)\",\n args: [email.toLowerCase().trim(), details ? JSON.stringify(details) : null],\n });\n\n return new Response(JSON.stringify({\n success: true,\n message: \"Successfully subscribed!\",\n id: Number(insertResult.lastInsertRowid),\n }), {\n status: 201,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // PUT /subscribe/:id/details - Add/merge details for an existing subscription (public)\n if (req.method === \"PUT\" && url.pathname.match(/^\\/subscribe\\/\\d+\\/details$/)) {\n const id = url.pathname.split(\"/\")[2];\n const body = await req.json();\n const { details } = body;\n\n if (details === undefined || details === null || typeof details !== \"object\") {\n return new Response(JSON.stringify({ error: \"details object is required\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // Fetch existing subscriber\n const existing = await sqlite.execute({\n sql: \"SELECT id, details FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n\n if (existing.rows.length === 0) {\n return new Response(JSON.stringify({ error: \"Subscriber not found\" }), {\n status: 404,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // Merge new details into existing details (shallow merge)\n const existingDetails = existing.rows[0].details\n ? JSON.parse(existing.rows[0].details as string)\n : {};\n const mergedDetails = { ...existingDetails, ...details };\n\n await sqlite.execute({\n sql: \"UPDATE newsletter_subscribers SET details = ?, updated_at = datetime('now') WHERE id = ?\",\n args: [JSON.stringify(mergedDetails), id],\n });\n\n return new Response(JSON.stringify({\n success: true,\n message: \"Details updated\",\n details: mergedDetails,\n }), {\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // GET /subscribers - List all subscribers (admin endpoint)\n if (req.method === \"GET\" && url.pathname === \"/subscribers\") {\n if (!isAuthorized(req)) return unauthorizedResponse(corsHeaders);\n \n const result = await sqlite.execute(\"SELECT * FROM newsletter_subscribers ORDER BY created_at DESC\");\n const subscribers = result.rows.map(row => ({\n id: row.id,\n email: row.email,\n details: row.details ? JSON.parse(row.details as string) : null,\n developer_notes: row.developer_notes,\n created_at: row.created_at,\n updated_at: row.updated_at,\n }));\n\n return new Response(JSON.stringify({ subscribers }), {\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // PUT /subscribers/:id - Update subscriber (for developer notes)\n if (req.method === \"PUT\" && url.pathname.startsWith(\"/subscribers/\")) {\n if (!isAuthorized(req)) return unauthorizedResponse(corsHeaders);\n \n const id = url.pathname.split(\"/\")[2];\n const body = await req.json();\n const { details, developer_notes } = body;\n\n const updates: string[] = [];\n const args: any[] = [];\n\n if (details !== undefined) {\n updates.push(\"details = ?\");\n args.push(details ? JSON.stringify(details) : null);\n }\n if (developer_notes !== undefined) {\n updates.push(\"developer_notes = ?\");\n args.push(developer_notes);\n }\n\n if (updates.length === 0) {\n return new Response(JSON.stringify({ error: \"No fields to update\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n\n await sqlite.execute({\n sql: `UPDATE newsletter_subscribers SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n\n return new Response(JSON.stringify({ success: true, message: \"Subscriber updated\" }), {\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // DELETE /subscribers/:id - Unsubscribe\n if (req.method === \"DELETE\" && url.pathname.startsWith(\"/subscribers/\")) {\n if (!isAuthorized(req)) return unauthorizedResponse(corsHeaders);\n \n const id = url.pathname.split(\"/\")[2];\n\n await sqlite.execute({\n sql: \"DELETE FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n\n return new Response(JSON.stringify({ success: true, message: \"Subscriber removed\" }), {\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // Default: show API documentation\n return new Response(JSON.stringify({\n name: \"Newsletter Signup API\",\n endpoints: {\n \"POST /subscribe\": {\n description: \"Subscribe to the newsletter. Returns subscriber id for follow-up calls.\",\n body: { email: \"string (required)\", details: \"object (optional metadata)\" },\n response: { success: \"boolean\", message: \"string\", id: \"number\" },\n },\n \"PUT /subscribe/:id/details\": {\n description: \"Add or update details for an existing subscriber (public, no auth). Shallow-merges with existing details.\",\n body: { details: \"object (required)\" },\n },\n \"GET /subscribers\": {\n description: \"List all subscribers (admin)\",\n },\n \"PUT /subscribers/:id\": {\n description: \"Update subscriber details or developer notes\",\n body: { details: \"object (optional)\", developer_notes: \"string (optional)\" },\n },\n \"DELETE /subscribers/:id\": {\n description: \"Remove a subscriber\",\n },\n },\n }), {\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n\n } catch (error: any) {\n console.error(\"Error:\", error);\n return new Response(JSON.stringify({ error: \"Internal server error\", message: error.message }), {\n status: 500,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n}\n",[157],"c50b37d2-7a79-4c51-a698-277f271e418f","db.ts","bddbfe22-9af8-11f1-9164-1607ee4eb77e",17,["D",1787052855294],"/**\n * Database schema + queries.\n *\n * Tables:\n * - newsletter_subscribers: signups (email + flexible JSON details + notes)\n * - ntfy_receivers: configurable ntfy.sh destinations for new-submission alerts\n * - ntfy_deliveries: audit log of notification attempts\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type NtfyEvent = \"signup\" | \"details\";\n\nexport interface Subscriber {\n id: number;\n email: string;\n details: Record | null;\n developer_notes: string | null;\n created_at: string;\n updated_at: string;\n}\n\nexport interface Receiver {\n id: number;\n name: string;\n server: string;\n topic: string;\n priority: number;\n tags: string | null;\n /** ntfy access token (tk_…) or \"user:password\" for basic auth. */\n auth: string | null;\n /** Comma-separated list of NtfyEvent values. */\n events: string;\n enabled: number;\n created_at: string;\n updated_at: string;\n}\n\nexport interface Delivery {\n id: number;\n receiver_id: number | null;\n receiver_name: string;\n subscriber_id: number | null;\n event: string;\n ok: number;\n status: number | null;\n error: string | null;\n created_at: string;\n}\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS newsletter_subscribers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT NOT NULL,\n details TEXT,\n developer_notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ntfy_receivers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n server TEXT NOT NULL DEFAULT 'https://ntfy.sh',\n topic TEXT NOT NULL,\n priority INTEGER NOT NULL DEFAULT 3,\n tags TEXT,\n auth TEXT,\n events TEXT NOT NULL DEFAULT 'signup',\n enabled INTEGER NOT NULL DEFAULT 1,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ntfy_deliveries (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n receiver_id INTEGER,\n receiver_name TEXT NOT NULL,\n subscriber_id INTEGER,\n event TEXT NOT NULL,\n ok INTEGER NOT NULL,\n status INTEGER,\n error TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nfunction parseDetails(raw: unknown): Record | null {\n if (!raw || typeof raw !== \"string\") return null;\n try {\n return JSON.parse(raw);\n } catch {\n return { _unparsed: raw };\n }\n}\n\nfunction toSubscriber(row: any): Subscriber {\n return {\n id: Number(row.id),\n email: String(row.email),\n details: parseDetails(row.details),\n developer_notes: row.developer_notes ?? null,\n created_at: String(row.created_at),\n updated_at: String(row.updated_at),\n };\n}\n\n/* ---------------------------------- subscribers --------------------------------- */\n\nexport async function insertSubscriber(email: string, details: unknown): Promise {\n const res = await sqlite.execute({\n sql: \"INSERT INTO newsletter_subscribers (email, details) VALUES (?, ?)\",\n args: [email, details ? JSON.stringify(details) : null],\n });\n return Number(res.lastInsertRowid);\n}\n\nexport async function getSubscriber(id: number | string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n return res.rows.length ? toSubscriber(res.rows[0]) : null;\n}\n\nexport async function listSubscribers(limit = 500): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM newsletter_subscribers ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return res.rows.map(toSubscriber);\n}\n\nexport async function countSubscribers(): Promise {\n const res = await sqlite.execute(\"SELECT COUNT(*) AS n FROM newsletter_subscribers\");\n return Number((res.rows[0] as any).n);\n}\n\n/** Shallow-merges `details` into the subscriber's existing details. */\nexport async function mergeSubscriberDetails(\n id: number | string,\n details: Record,\n): Promise | null> {\n const existing = await getSubscriber(id);\n if (!existing) return null;\n const merged = { ...(existing.details ?? {}), ...details };\n await sqlite.execute({\n sql: \"UPDATE newsletter_subscribers SET details = ?, updated_at = datetime('now') WHERE id = ?\",\n args: [JSON.stringify(merged), id],\n });\n return merged;\n}\n\nexport async function updateSubscriber(\n id: number | string,\n fields: { details?: unknown; developer_notes?: string },\n): Promise {\n const updates: string[] = [];\n const args: any[] = [];\n if (fields.details !== undefined) {\n updates.push(\"details = ?\");\n args.push(fields.details ? JSON.stringify(fields.details) : null);\n }\n if (fields.developer_notes !== undefined) {\n updates.push(\"developer_notes = ?\");\n args.push(fields.developer_notes);\n }\n if (!updates.length) return false;\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n await sqlite.execute({\n sql: `UPDATE newsletter_subscribers SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n return true;\n}\n\nexport async function deleteSubscriber(id: number | string): Promise {\n await sqlite.execute({\n sql: \"DELETE FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n}\n\n/* ----------------------------------- receivers ---------------------------------- */\n\nfunction toReceiver(row: any): Receiver {\n return {\n id: Number(row.id),\n name: String(row.name),\n server: String(row.server),\n topic: String(row.topic),\n priority: Number(row.priority),\n tags: row.tags ?? null,\n auth: row.auth ?? null,\n events: String(row.events),\n enabled: Number(row.enabled),\n created_at: String(row.created_at),\n updated_at: String(row.updated_at),\n };\n}\n\nexport async function listReceivers(): Promise {\n const res = await sqlite.execute(\"SELECT * FROM ntfy_receivers ORDER BY id ASC\");\n return res.rows.map(toReceiver);\n}\n\nexport async function getReceiver(id: number | string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM ntfy_receivers WHERE id = ?\",\n args: [id],\n });\n return res.rows.length ? toReceiver(res.rows[0]) : null;\n}\n\n/** Enabled receivers subscribed to a given event. */\nexport async function receiversForEvent(event: NtfyEvent): Promise {\n const all = await listReceivers();\n return all.filter(r =>\n r.enabled && r.events.split(\",\").map(e => e.trim()).includes(event)\n );\n}\n\nexport type ReceiverInput = {\n name: string;\n server: string;\n topic: string;\n priority: number;\n tags: string | null;\n auth: string | null;\n events: string;\n enabled: number;\n};\n\nexport async function createReceiver(input: ReceiverInput): Promise {\n const res = await sqlite.execute({\n sql: `INSERT INTO ntfy_receivers (name, server, topic, priority, tags, auth, events, enabled)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n input.name,\n input.server,\n input.topic,\n input.priority,\n input.tags,\n input.auth,\n input.events,\n input.enabled,\n ],\n });\n return Number(res.lastInsertRowid);\n}\n\nexport async function updateReceiver(\n id: number | string,\n input: Partial,\n): Promise {\n const updates: string[] = [];\n const args: any[] = [];\n for (const [key, value] of Object.entries(input)) {\n if (value === undefined) continue;\n updates.push(`${key} = ?`);\n args.push(value as any);\n }\n if (!updates.length) return;\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n await sqlite.execute({\n sql: `UPDATE ntfy_receivers SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n}\n\nexport async function deleteReceiver(id: number | string): Promise {\n await sqlite.execute({ sql: \"DELETE FROM ntfy_receivers WHERE id = ?\", args: [id] });\n}\n\n/* ---------------------------------- deliveries ---------------------------------- */\n\nexport async function logDelivery(entry: {\n receiver_id: number | null;\n receiver_name: string;\n subscriber_id: number | null;\n event: string;\n ok: boolean;\n status: number | null;\n error: string | null;\n}): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ntfy_deliveries (receiver_id, receiver_name, subscriber_id, event, ok, status, error)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n entry.receiver_id,\n entry.receiver_name,\n entry.subscriber_id,\n entry.event,\n entry.ok ? 1 : 0,\n entry.status,\n entry.error,\n ],\n });\n}\n\nexport async function recentDeliveries(limit = 25): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM ntfy_deliveries ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return res.rows.map((row: any) => ({\n id: Number(row.id),\n receiver_id: row.receiver_id === null ? null : Number(row.receiver_id),\n receiver_name: String(row.receiver_name),\n subscriber_id: row.subscriber_id === null ? null : Number(row.subscriber_id),\n event: String(row.event),\n ok: Number(row.ok),\n status: row.status === null ? null : Number(row.status),\n error: row.error ?? null,\n created_at: String(row.created_at),\n }));\n}\n",[166],"3ba4ab03-e1a6-49e6-9561-a3bd02238abd","api.ts","d6ea0706-9af8-11f1-bee9-1607ee4eb77e",19,["D",1787052897308],"/**\n * Public + API-key protected JSON API.\n * Response shapes are unchanged from the original version, so existing clients keep working.\n */\n\nimport { Hono } from \"npm:hono\";\nimport { cors } from \"npm:hono/cors\";\nimport * as db from \"./db.ts\";\nimport { notify } from \"./ntfy.ts\";\n\nconst EMAIL_RE = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n\nfunction isAuthorized(req: Request): boolean {\n const adminKey = Deno.env.get(\"ADMIN_API_KEY\");\n return !!adminKey && req.headers.get(\"X-API-Key\") === adminKey;\n}\n\nexport const api = new Hono();\n\napi.use(\n \"*\",\n cors({\n origin: \"*\",\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"OPTIONS\"],\n allowHeaders: [\"Content-Type\", \"X-API-Key\"],\n }),\n);\n\n/* -------------------------------- public routes -------------------------------- */\n\n// POST /subscribe — sign up, then alert every enabled ntfy receiver\napi.post(\"/subscribe\", async (c) => {\n const body = await c.req.json().catch(() => ({} as any));\n const { email, details } = body ?? {};\n\n if (!email || typeof email !== \"string\") {\n return c.json({ error: \"Email is required\" }, 400);\n }\n if (!EMAIL_RE.test(email)) {\n return c.json({ error: \"Invalid email format\" }, 400);\n }\n\n const id = await db.insertSubscriber(email.toLowerCase().trim(), details);\n\n // Notify receivers. Failures are logged, never surfaced to the subscriber.\n const subscriber = await db.getSubscriber(id);\n if (subscriber) {\n await notify(\"signup\", subscriber, new URL(c.req.url).origin).catch((err) =>\n console.error(\"ntfy notify failed:\", err)\n );\n }\n\n return c.json({ success: true, message: \"Successfully subscribed!\", id }, 201);\n});\n\n// PUT /subscribe/:id/details — merge extra info collected after signup\napi.put(\"/subscribe/:id/details\", async (c) => {\n const id = c.req.param(\"id\");\n if (!/^\\d+$/.test(id)) return c.json({ error: \"Invalid id\" }, 400);\n\n const body = await c.req.json().catch(() => ({} as any));\n const { details } = body ?? {};\n if (details === undefined || details === null || typeof details !== \"object\") {\n return c.json({ error: \"details object is required\" }, 400);\n }\n\n const merged = await db.mergeSubscriberDetails(id, details);\n if (!merged) return c.json({ error: \"Subscriber not found\" }, 404);\n\n const subscriber = await db.getSubscriber(id);\n if (subscriber) {\n await notify(\"details\", subscriber, new URL(c.req.url).origin).catch((err) =>\n console.error(\"ntfy notify failed:\", err)\n );\n }\n\n return c.json({ success: true, message: \"Details updated\", details: merged });\n});\n\n/* ------------------------- API-key protected admin routes ----------------------- */\n\napi.use(\"/subscribers/*\", async (c, next) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized\" }, 401);\n await next();\n});\napi.use(\"/subscribers\", async (c, next) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized\" }, 401);\n await next();\n});\n\napi.get(\"/subscribers\", async (c) => {\n const subscribers = await db.listSubscribers();\n return c.json({ subscribers });\n});\n\napi.put(\"/subscribers/:id\", async (c) => {\n const body = await c.req.json().catch(() => ({} as any));\n const { details, developer_notes } = body ?? {};\n const updated = await db.updateSubscriber(c.req.param(\"id\"), { details, developer_notes });\n if (!updated) return c.json({ error: \"No fields to update\" }, 400);\n return c.json({ success: true, message: \"Subscriber updated\" });\n});\n\napi.delete(\"/subscribers/:id\", async (c) => {\n await db.deleteSubscriber(c.req.param(\"id\"));\n return c.json({ success: true, message: \"Subscriber removed\" });\n});\n\n/* ------------------------------------ docs ------------------------------------- */\n\napi.get(\"/\", (c) =>\n c.json({\n name: \"Newsletter Signup API\",\n admin: new URL(\"/admin\", c.req.url).toString(),\n endpoints: {\n \"POST /subscribe\": {\n description:\n \"Subscribe to the newsletter. Notifies all enabled ntfy receivers. Returns subscriber id.\",\n body: { email: \"string (required)\", details: \"object (optional metadata)\" },\n response: { success: \"boolean\", message: \"string\", id: \"number\" },\n },\n \"PUT /subscribe/:id/details\": {\n description:\n \"Add or update details for an existing subscriber (public, no auth). Shallow-merges with existing details.\",\n body: { details: \"object (required)\" },\n },\n \"GET /subscribers\": { description: \"List all subscribers (X-API-Key)\" },\n \"PUT /subscribers/:id\": {\n description: \"Update subscriber details or developer notes (X-API-Key)\",\n body: { details: \"object (optional)\", developer_notes: \"string (optional)\" },\n },\n \"DELETE /subscribers/:id\": { description: \"Remove a subscriber (X-API-Key)\" },\n \"GET /admin\": {\n description: \"Admin dashboard — review signups and configure ntfy receivers (Val Town login)\",\n },\n },\n }));\n",[173],"be6f3280-fed3-11f0-bfa2-42dde27851f2","README.md","be6f332a-fed3-11f0-bfa2-42dde27851f2",11,["D",1769884583495],"# Newsletter Signup API\n\nEmail signup endpoint with flexible metadata storage and admin management.\n\n## Features\n\n- **Public signup endpoint** - `POST /subscribe`\n- **Protected admin endpoints** - List, update, and delete subscribers\n- **Flexible metadata** - `details` field accepts any JSON\n- **Developer notes** - Internal annotations per subscriber\n- **Duplicate emails allowed** - De-duplicate downstream as needed\n- **SQLite storage** - Timestamps for created/updated\n- **CORS enabled**\n\n## Setup\n\nSet the `ADMIN_API_KEY` environment variable to protect admin endpoints.\n\n## Endpoints\n\n| Method | Path | Auth | Description |\n|--------|------|------|-------------|\n| POST | `/subscribe` | Public | Submit a signup |\n| GET | `/subscribers` | API Key | List all subscribers |\n| PUT | `/subscribers/:id` | API Key | Update details or notes |\n| DELETE | `/subscribers/:id` | API Key | Remove a subscriber |\n\n## Usage\n\n**Subscribe (public):**\n```bash\ncurl -X POST https://YOUR_ENDPOINT/subscribe \\\n -H \"Content-Type: application/json\" \\\n -d '{\"email\": \"user@example.com\", \"details\": {\"any\": \"json\"}}'\n```\n\n**Admin requests:**\n```bash\ncurl https://YOUR_ENDPOINT/subscribers \\\n -H \"X-API-Key: your-admin-key\"\n```\n\n## Schema\n\n| Column | Type | Description |\n|--------|------|-------------|\n| `id` | INTEGER | Auto-incrementing primary key |\n| `email` | TEXT | Subscriber email |\n| `details` | TEXT | JSON metadata (flexible) |\n| `developer_notes` | TEXT | Internal notes |\n| `created_at` | TEXT | Submission timestamp |\n| `updated_at` | TEXT | Last update timestamp |\n",[180],"964d6db5-0871-412c-97ed-cb80b4512abb",["D",1787052908390],[50],"pulls","branches",1,"forks","envVars",{"_197":72,"_199":72},"connections",{"_197":72,"_198":72},"count","unfilledCount","emptyCount",{"_54":186,"_38":50,"_36":51,"_149":-5,"_47":48,"_46":14,"_151":135,"_44":227,"_13":72,"_40":52,"_42":-5,"_30":31,"_154":-5,"_208":228,"_33":229},{"_54":223,"_38":39,"_36":37,"_149":51,"_47":48,"_46":14,"_151":135,"_44":224,"_13":72,"_40":41,"_42":43,"_30":31,"_154":-5,"_208":225,"_33":226},{"_54":179,"_38":180,"_36":181,"_149":-5,"_47":48,"_46":182,"_151":31,"_44":220,"_13":72,"_40":27,"_42":184,"_30":31,"_154":-5,"_208":221,"_33":222},{"_54":172,"_38":173,"_36":174,"_149":-5,"_47":48,"_46":175,"_151":135,"_44":217,"_13":72,"_40":41,"_42":177,"_30":31,"_154":-5,"_208":218,"_33":219},{"_54":165,"_38":166,"_36":167,"_149":-5,"_47":48,"_46":168,"_151":31,"_44":214,"_13":72,"_40":41,"_42":170,"_30":31,"_154":-5,"_208":215,"_33":216},{"_54":156,"_38":157,"_36":158,"_149":-5,"_47":48,"_46":159,"_151":31,"_44":211,"_13":161,"_40":162,"_42":163,"_30":31,"_154":56,"_208":212,"_33":213},{"_54":146,"_38":147,"_36":148,"_149":-5,"_47":48,"_46":150,"_151":31,"_44":207,"_13":72,"_40":41,"_42":153,"_30":31,"_154":-5,"_208":209,"_33":210},["D",1787052875199],"children",[],[147],["D",1772673318659],[],[157],["D",1787052855294],[],[166],["D",1787052897308],[],[173],["D",1769884583495],[],[180],"246d6b1f-bdb2-46dc-aaa0-dfcdeb912df0",["D",1787052908390],[],[50,39],["D",1787052908390],[201],[50],["D",1769884195507],["D",1789534231467],{"_109":108,"_116":112},{"_109":108,"_110":-5,"_111":112,"_19":66,"_113":114,"_115":31},{"_13":98,"_38":99,"_54":48,"_100":55,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":56,"_107":108},"ctx",{"_91":-5,"_137":268,"_269":270,"_271":272,"_273":31,"_274":31,"_275":31,"_276":135,"_277":-5,"_278":-7,"_279":-7,"_280":72,"_281":31,"_282":31,"_283":-5,"_284":31,"_285":31,"_286":31,"_287":-5},"ENV",{"_239":240,"_241":242,"_243":99,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v20