[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_241":242,"_243":244},"routes/_app.x.$handle.$name",{"_103":102,"_37":50,"_111":93,"_32":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_26":-5,"_123":-5,"_124":-5,"_125":30,"_126":127,"_128":129,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_37":50,"_43":51,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":-5,"_62":30,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_75":-5,"_76":77,"_78":77,"_79":80,"_81":80,"_82":80,"_83":77,"_84":77,"_85":86,"_87":88,"_89":90,"_91":30},"version",21,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","f3e53391-110a-4420-b972-27b749c4c5c1","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":14,"_46":47,"_29":30},"previous","deleted",false,"deletedHere","path","admin/Receivers.tsx","latestPath","fileId","f55367e6-9af8-11f1-9164-1607ee4eb77e","name","Receivers.tsx","fileType","script","content","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport type { Delivery, Receiver } from \"../db.ts\";\nimport { Card } from \"./Layout.tsx\";\n\nconst PRIORITIES = [\n [1, \"1 · min\"],\n [2, \"2 · low\"],\n [3, \"3 · default\"],\n [4, \"4 · high\"],\n [5, \"5 · max\"],\n] as const;\n\nconst input =\n \"w-full px-2.5 py-1.5 rounded-md border border-slate-300 text-sm focus:outline-none focus:ring-2 focus:ring-slate-400\";\nconst label = \"block text-xs font-medium text-slate-500 mb-1\";\n\nfunction Field(\n { name, title, defaultValue, placeholder, type = \"text\", hint, required, className = \"\" }: {\n name: string;\n title: string;\n defaultValue?: string | number | null;\n placeholder?: string;\n type?: string;\n hint?: string;\n required?: boolean;\n className?: string;\n },\n) {\n return (\n

\n {title}\n \n {hint &&

{hint}

}\n

\n );\n}\n\nfunction EventChecks({ events }: { events: string }) {\n const list = events.split(\",\").map(e => e.trim());\n return (\n

\n Notify on\n

\n \n \n New signup\n \n \n \n Details updated\n \n

\n );\n}\n\nfunction ReceiverFields({ receiver }: { receiver?: Receiver }) {\n return (\n <>\n

\n \n \n \n

\n Priority\n \n

\n \n \n

\n \n

\n \n \n Enabled\n \n {receiver?.auth && (\n \n \n Clear saved auth\n \n )}\n

\n \n );\n}\n\nfunction StatusDot({ ok }: { ok: boolean | null }) {\n const color = ok === null ? \"bg-slate-300\" : ok ? \"bg-emerald-500\" : \"bg-red-500\";\n return ;\n}\n\nexport function Receivers(\n { receivers, deliveries }: { receivers: Receiver[]; deliveries: Delivery[] },\n) {\n const lastByReceiver = new Map();\n for (const d of deliveries) {\n if (d.receiver_id !== null && !lastByReceiver.has(d.receiver_id)) lastByReceiver.set(d.receiver_id, d);\n }\n\n return (\n \n {receivers.length === 0 && (\n

\n No receivers yet — add one below, then subscribe to that topic in the{\" \"}\n ntfy web app or mobile app.\n

\n )}\n\n

\n {receivers.map((receiver) => {\n const last = lastByReceiver.get(receiver.id);\n return (\n \n

\n \n {receiver.name}\n \n {receiver.server.replace(/^https?:\\/\\//, \"\")}/{receiver.topic}\n \n {!receiver.enabled && (\n \n disabled\n \n )}\n

\n {last\n ? last.ok\n ? `last ${last.event} ok · ${last.created_at}`\n : `last ${last.event} failed (${last.status ?? \"network\"}) · ${last.created_at}`\n : \"no deliveries yet\"}\n

\n\n \n\n

\n \n Save\n \n \n Send test\n \n \n Delete\n \n

\n \n );\n })}\n

\n\n

\n + Add receiver\n

\n \n );\n}\n\nexport function Deliveries({ deliveries }: { deliveries: Delivery[] }) {\n if (!deliveries.length) return null;\n return (\n \n

\n \n \n \n \n \n \n \n \n \n \n \n {deliveries.map((d) => (\n \n \n \n \n \n \n \n ))}\n \n

When (UTC)	Receiver	Event	Signup	Result
{d.created_at}	{d.receiver_name}	{d.event}	\n {d.subscriber_id ? `#${d.subscriber_id}` : \"—\"}\n	\n {d.ok\n ? ok\n : (\n \n {d.status ?? \"network\"} {d.error ? `· ${d.error}` : \"\"}\n \n )}\n

\n \n );\n}\n","createdAt",["D",1787052948354],"branchVersion","branchId","d72d2544-fed2-11f0-a1dd-42dde27851f2","id","d72cb6b8-fed2-11f0-a1dd-42dde27851f2","newsletter-signup",["D",1769884195507],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Signup API with ntfy push alerts and an admin dashboard","imageUrl","c821e8f7-4cc4-4c23-96f1-319b8f33d4b7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","6b193d60-e165-45a9-869c-c3f886455f3e","tursoName","d72cb6b8fed211f0a1dd42dde27851f2","tursoHostname","d72cb6b8fed211f0a1dd42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789534231467],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_103":102,"_110":106},"org",{"_103":102,"_104":-5,"_105":106,"_19":60,"_107":108,"_109":30},"branch",{"_13":92,"_37":93,"_48":47,"_94":49,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":50,"_101":102},"isOwned",51,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","colel","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ6RVZCOExVNXBIT3FrVDh5a0VZQTNRRG5ycCJ9","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_37":50,"_43":236,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":-5,"_62":30,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":70,"_71":72,"_73":237,"_75":-5,"_76":77,"_78":77,"_79":80,"_81":80,"_82":80,"_83":77,"_84":77,"_85":238,"_87":239,"_89":240,"_91":30},"tree",[198,201,202,203,204,205],"files",[198,199,200,201,202,203,204,205],"counts",{"_187":66,"_188":189,"_190":66,"_191":192,"_193":194},"contents",[134,135,136,137,138,139],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_48":180,"_37":181,"_35":182,"_143":-5,"_46":47,"_45":183,"_145":129,"_43":184,"_13":66,"_39":185,"_41":-5,"_29":30,"_148":-5,"_32":186},{"_48":173,"_37":174,"_35":175,"_143":-5,"_46":47,"_45":176,"_145":30,"_43":177,"_13":66,"_39":26,"_41":178,"_29":30,"_148":-5,"_32":179},{"_48":166,"_37":167,"_35":168,"_143":-5,"_46":47,"_45":169,"_145":129,"_43":170,"_13":66,"_39":40,"_41":171,"_29":30,"_148":-5,"_32":172},{"_48":159,"_37":160,"_35":161,"_143":-5,"_46":47,"_45":162,"_145":30,"_43":163,"_13":66,"_39":40,"_41":164,"_29":30,"_148":-5,"_32":165},{"_48":150,"_37":151,"_35":152,"_143":-5,"_46":47,"_45":153,"_145":30,"_43":154,"_13":155,"_39":156,"_41":157,"_29":30,"_148":50,"_32":158},{"_48":140,"_37":141,"_35":142,"_143":-5,"_46":47,"_45":144,"_145":30,"_43":146,"_13":66,"_39":40,"_41":147,"_29":30,"_148":-5,"_32":149},"57e39e18-14b2-498a-add6-3e2db1aa84a9","ntfy.ts","c9b89cf0-9af8-11f1-9164-1607ee4eb77e","parentId",18,"latest",["D",1787052875199],"/**\n * ntfy.sh publishing.\n *\n * Uses ntfy's \"publish as JSON\" API: POST the message object (including `topic`)\n * to the server ROOT url — not the topic url.\n * https://docs.ntfy.sh/publish/#publish-as-json\n *\n * Auth (https://docs.ntfy.sh/publish/#authentication):\n * - access token -> Authorization: Bearer tk_…\n * - user:password -> Authorization: Basic base64(user:password)\n */\n\nimport {\n logDelivery,\n type NtfyEvent,\n type Receiver,\n receiversForEvent,\n type Subscriber,\n} from \"./db.ts\";\n\nexport interface NtfyMessage {\n topic: string;\n message: string;\n title?: string;\n tags?: string[];\n priority?: number;\n click?: string;\n markdown?: boolean;\n actions?: Array<{ action: string; label: string; url?: string; clear?: boolean }>;\n}\n\nexport interface PublishResult {\n ok: boolean;\n status: number | null;\n error: string | null;\n}\n\nfunction authHeader(auth: string | null): Record {\n const value = auth?.trim();\n if (!value) return {};\n // Access tokens are prefixed tk_; anything with a colon is user:password.\n if (value.startsWith(\"tk_\") || !value.includes(\":\")) {\n return { Authorization: `Bearer ${value}` };\n }\n return { Authorization: `Basic ${btoa(value)}` };\n}\n\nexport function normalizeServer(server: string): string {\n const trimmed = (server || \"https://ntfy.sh\").trim().replace(/\\/+$/, \"\");\n return /^https?:\\/\\//.test(trimmed) ? trimmed : `https://${trimmed}`;\n}\n\n/** Publish a single message to one receiver's server + topic. */\nexport async function publish(\n receiver: Pick,\n message: Omit & { tags?: string[] },\n): Promise {\n const body: NtfyMessage = {\n topic: receiver.topic.trim(),\n priority: receiver.priority,\n tags: message.tags ?? receiver.tags?.split(\",\").map(t => t.trim()).filter(Boolean),\n ...message,\n };\n\n try {\n const res = await fetch(normalizeServer(receiver.server) + \"/\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", ...authHeader(receiver.auth) },\n body: JSON.stringify(body),\n signal: AbortSignal.timeout(10_000),\n });\n if (!res.ok) {\n const text = (await res.text().catch(() => \"\")).slice(0, 300);\n return { ok: false, status: res.status, error: text || res.statusText };\n }\n await res.body?.cancel();\n return { ok: true, status: res.status, error: null };\n } catch (err: any) {\n return { ok: false, status: null, error: err?.message ?? String(err) };\n }\n}\n\nfunction formatDetails(details: Record | null): string {\n if (!details || !Object.keys(details).length) return \"\";\n return Object.entries(details)\n .map(([k, v]) => `- **${k}:** ${typeof v === \"object\" ? JSON.stringify(v) : String(v)}`)\n .join(\"\\n\");\n}\n\nfunction buildMessage(event: NtfyEvent, subscriber: Subscriber, adminUrl?: string) {\n const detailLines = formatDetails(subscriber.details);\n const title = event === \"signup\"\n ? \"New newsletter signup\"\n : `Signup details updated (#${subscriber.id})`;\n const lines = [\n subscriber.email,\n detailLines,\n `_#${subscriber.id} · ${subscriber.created_at} UTC_`,\n ].filter(Boolean);\n return {\n title,\n message: lines.join(\"\\n\"),\n markdown: true,\n click: adminUrl,\n actions: adminUrl\n ? [{ action: \"view\", label: \"Open admin\", url: adminUrl, clear: false }]\n : undefined,\n };\n}\n\n/**\n * Fan a signup event out to every enabled receiver listening for it.\n * Never throws — failures are logged to ntfy_deliveries so the admin page can show them.\n */\nexport async function notify(\n event: NtfyEvent,\n subscriber: Subscriber,\n origin?: string,\n): Promise {\n const receivers = await receiversForEvent(event).catch(() => []);\n if (!receivers.length) return [];\n\n const adminUrl = origin ? `${origin.replace(/\\/+$/, \"\")}/admin` : undefined;\n const payload = buildMessage(event, subscriber, adminUrl);\n\n const results = await Promise.all(receivers.map(async (receiver) => {\n const result = await publish(receiver, payload);\n if (!result.ok) {\n console.error(`ntfy: ${receiver.name} (${receiver.topic}) failed:`, result.status, result.error);\n }\n await logDelivery({\n receiver_id: receiver.id,\n receiver_name: receiver.name,\n subscriber_id: subscriber.id,\n event,\n ok: result.ok,\n status: result.status,\n error: result.error,\n }).catch(() => {});\n return result;\n }));\n\n return results;\n}\n\n/** Send a \"does this config work?\" message to one receiver. */\nexport async function sendTest(receiver: Receiver, origin?: string): Promise {\n const adminUrl = origin ? `${origin.replace(/\\/+$/, \"\")}/admin` : undefined;\n const result = await publish(receiver, {\n title: \"Newsletter signup test\",\n message: `Test notification for receiver **${receiver.name}**. If you can read this, alerts work. 🎉`,\n markdown: true,\n click: adminUrl,\n });\n await logDelivery({\n receiver_id: receiver.id,\n receiver_name: receiver.name,\n subscriber_id: null,\n event: \"test\",\n ok: result.ok,\n status: result.status,\n error: result.error,\n }).catch(() => {});\n return result;\n}\n","label",[141],"c6212ed6-1830-11f1-bd77-42dde27851f2","main.ts","d73071ea-fed2-11f0-a1dd-42dde27851f2",16,["D",1772673318659],14,"http","/**\n * Newsletter Signup API\n *\n * A simple HTTP endpoint for collecting email signups with flexible metadata storage.\n *\n * Features:\n * - Public signup endpoint (POST /subscribe) — returns subscriber id\n * - Public details endpoint (PUT /subscribe/:id/details) — merge additional info after signup\n * - Admin endpoints protected by API key (GET, PUT, DELETE /subscribers)\n * - Flexible JSON metadata field for arbitrary subscriber data\n * - Developer notes field for internal annotations\n * - SQLite storage with timestamps\n * - Duplicate emails allowed (de-duplicate downstream as needed)\n * - CORS enabled\n *\n * Environment Variables:\n * - ADMIN_API_KEY: Required for admin endpoints (passed via X-API-Key header)\n *\n * Schema:\n * - id: auto-incrementing primary key\n * - email: subscriber email (not unique)\n * - details: JSON blob for any metadata\n * - developer_notes: internal notes\n * - created_at, updated_at: timestamps\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite@14-main/main.ts\";\n\n// Simple auth check for admin endpoints\nfunction isAuthorized(req: Request): boolean {\n const apiKey = req.headers.get(\"X-API-Key\");\n const adminKey = Deno.env.get(\"ADMIN_API_KEY\");\n return !!adminKey && apiKey === adminKey;\n}\n\nfunction unauthorizedResponse(corsHeaders: Record): Response {\n return new Response(JSON.stringify({ error: \"Unauthorized\" }), {\n status: 401,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n}\n\n// Initialize the database table (no unique constraint on email - duplicates allowed, de-dupe later)\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS newsletter_subscribers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT NOT NULL,\n details TEXT,\n developer_notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nexport default async function(req: Request): Promise {\n const url = new URL(req.url);\n const corsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PUT, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-API-Key\",\n };\n\n // Handle CORS preflight\n if (req.method === \"OPTIONS\") {\n return new Response(null, { headers: corsHeaders });\n }\n\n try {\n // POST /subscribe - Sign up for newsletter\n if (req.method === \"POST\" && url.pathname === \"/subscribe\") {\n const body = await req.json();\n const { email, details } = body;\n\n if (!email || typeof email !== \"string\") {\n return new Response(JSON.stringify({ error: \"Email is required\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // Basic email validation\n const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n if (!emailRegex.test(email)) {\n return new Response(JSON.stringify({ error: \"Invalid email format\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n const insertResult = await sqlite.execute({\n sql: \"INSERT INTO newsletter_subscribers (email, details) VALUES (?, ?)\",\n args: [email.toLowerCase().trim(), details ? JSON.stringify(details) : null],\n });\n\n return new Response(JSON.stringify({\n success: true,\n message: \"Successfully subscribed!\",\n id: Number(insertResult.lastInsertRowid),\n }), {\n status: 201,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // PUT /subscribe/:id/details - Add/merge details for an existing subscription (public)\n if (req.method === \"PUT\" && url.pathname.match(/^\\/subscribe\\/\\d+\\/details$/)) {\n const id = url.pathname.split(\"/\")[2];\n const body = await req.json();\n const { details } = body;\n\n if (details === undefined || details === null || typeof details !== \"object\") {\n return new Response(JSON.stringify({ error: \"details object is required\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // Fetch existing subscriber\n const existing = await sqlite.execute({\n sql: \"SELECT id, details FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n\n if (existing.rows.length === 0) {\n return new Response(JSON.stringify({ error: \"Subscriber not found\" }), {\n status: 404,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // Merge new details into existing details (shallow merge)\n const existingDetails = existing.rows[0].details\n ? JSON.parse(existing.rows[0].details as string)\n : {};\n const mergedDetails = { ...existingDetails, ...details };\n\n await sqlite.execute({\n sql: \"UPDATE newsletter_subscribers SET details = ?, updated_at = datetime('now') WHERE id = ?\",\n args: [JSON.stringify(mergedDetails), id],\n });\n\n return new Response(JSON.stringify({\n success: true,\n message: \"Details updated\",\n details: mergedDetails,\n }), {\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // GET /subscribers - List all subscribers (admin endpoint)\n if (req.method === \"GET\" && url.pathname === \"/subscribers\") {\n if (!isAuthorized(req)) return unauthorizedResponse(corsHeaders);\n \n const result = await sqlite.execute(\"SELECT * FROM newsletter_subscribers ORDER BY created_at DESC\");\n const subscribers = result.rows.map(row => ({\n id: row.id,\n email: row.email,\n details: row.details ? JSON.parse(row.details as string) : null,\n developer_notes: row.developer_notes,\n created_at: row.created_at,\n updated_at: row.updated_at,\n }));\n\n return new Response(JSON.stringify({ subscribers }), {\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // PUT /subscribers/:id - Update subscriber (for developer notes)\n if (req.method === \"PUT\" && url.pathname.startsWith(\"/subscribers/\")) {\n if (!isAuthorized(req)) return unauthorizedResponse(corsHeaders);\n \n const id = url.pathname.split(\"/\")[2];\n const body = await req.json();\n const { details, developer_notes } = body;\n\n const updates: string[] = [];\n const args: any[] = [];\n\n if (details !== undefined) {\n updates.push(\"details = ?\");\n args.push(details ? JSON.stringify(details) : null);\n }\n if (developer_notes !== undefined) {\n updates.push(\"developer_notes = ?\");\n args.push(developer_notes);\n }\n\n if (updates.length === 0) {\n return new Response(JSON.stringify({ error: \"No fields to update\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n\n await sqlite.execute({\n sql: `UPDATE newsletter_subscribers SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n\n return new Response(JSON.stringify({ success: true, message: \"Subscriber updated\" }), {\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // DELETE /subscribers/:id - Unsubscribe\n if (req.method === \"DELETE\" && url.pathname.startsWith(\"/subscribers/\")) {\n if (!isAuthorized(req)) return unauthorizedResponse(corsHeaders);\n \n const id = url.pathname.split(\"/\")[2];\n\n await sqlite.execute({\n sql: \"DELETE FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n\n return new Response(JSON.stringify({ success: true, message: \"Subscriber removed\" }), {\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n\n // Default: show API documentation\n return new Response(JSON.stringify({\n name: \"Newsletter Signup API\",\n endpoints: {\n \"POST /subscribe\": {\n description: \"Subscribe to the newsletter. Returns subscriber id for follow-up calls.\",\n body: { email: \"string (required)\", details: \"object (optional metadata)\" },\n response: { success: \"boolean\", message: \"string\", id: \"number\" },\n },\n \"PUT /subscribe/:id/details\": {\n description: \"Add or update details for an existing subscriber (public, no auth). Shallow-merges with existing details.\",\n body: { details: \"object (required)\" },\n },\n \"GET /subscribers\": {\n description: \"List all subscribers (admin)\",\n },\n \"PUT /subscribers/:id\": {\n description: \"Update subscriber details or developer notes\",\n body: { details: \"object (optional)\", developer_notes: \"string (optional)\" },\n },\n \"DELETE /subscribers/:id\": {\n description: \"Remove a subscriber\",\n },\n },\n }), {\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n\n } catch (error: any) {\n console.error(\"Error:\", error);\n return new Response(JSON.stringify({ error: \"Internal server error\", message: error.message }), {\n status: 500,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders },\n });\n }\n}\n",[151],"c50b37d2-7a79-4c51-a698-277f271e418f","db.ts","bddbfe22-9af8-11f1-9164-1607ee4eb77e",17,["D",1787052855294],"/**\n * Database schema + queries.\n *\n * Tables:\n * - newsletter_subscribers: signups (email + flexible JSON details + notes)\n * - ntfy_receivers: configurable ntfy.sh destinations for new-submission alerts\n * - ntfy_deliveries: audit log of notification attempts\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type NtfyEvent = \"signup\" | \"details\";\n\nexport interface Subscriber {\n id: number;\n email: string;\n details: Record | null;\n developer_notes: string | null;\n created_at: string;\n updated_at: string;\n}\n\nexport interface Receiver {\n id: number;\n name: string;\n server: string;\n topic: string;\n priority: number;\n tags: string | null;\n /** ntfy access token (tk_…) or \"user:password\" for basic auth. */\n auth: string | null;\n /** Comma-separated list of NtfyEvent values. */\n events: string;\n enabled: number;\n created_at: string;\n updated_at: string;\n}\n\nexport interface Delivery {\n id: number;\n receiver_id: number | null;\n receiver_name: string;\n subscriber_id: number | null;\n event: string;\n ok: number;\n status: number | null;\n error: string | null;\n created_at: string;\n}\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS newsletter_subscribers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT NOT NULL,\n details TEXT,\n developer_notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ntfy_receivers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n server TEXT NOT NULL DEFAULT 'https://ntfy.sh',\n topic TEXT NOT NULL,\n priority INTEGER NOT NULL DEFAULT 3,\n tags TEXT,\n auth TEXT,\n events TEXT NOT NULL DEFAULT 'signup',\n enabled INTEGER NOT NULL DEFAULT 1,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ntfy_deliveries (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n receiver_id INTEGER,\n receiver_name TEXT NOT NULL,\n subscriber_id INTEGER,\n event TEXT NOT NULL,\n ok INTEGER NOT NULL,\n status INTEGER,\n error TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nfunction parseDetails(raw: unknown): Record | null {\n if (!raw || typeof raw !== \"string\") return null;\n try {\n return JSON.parse(raw);\n } catch {\n return { _unparsed: raw };\n }\n}\n\nfunction toSubscriber(row: any): Subscriber {\n return {\n id: Number(row.id),\n email: String(row.email),\n details: parseDetails(row.details),\n developer_notes: row.developer_notes ?? null,\n created_at: String(row.created_at),\n updated_at: String(row.updated_at),\n };\n}\n\n/* ---------------------------------- subscribers --------------------------------- */\n\nexport async function insertSubscriber(email: string, details: unknown): Promise {\n const res = await sqlite.execute({\n sql: \"INSERT INTO newsletter_subscribers (email, details) VALUES (?, ?)\",\n args: [email, details ? JSON.stringify(details) : null],\n });\n return Number(res.lastInsertRowid);\n}\n\nexport async function getSubscriber(id: number | string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n return res.rows.length ? toSubscriber(res.rows[0]) : null;\n}\n\nexport async function listSubscribers(limit = 500): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM newsletter_subscribers ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return res.rows.map(toSubscriber);\n}\n\nexport async function countSubscribers(): Promise {\n const res = await sqlite.execute(\"SELECT COUNT(*) AS n FROM newsletter_subscribers\");\n return Number((res.rows[0] as any).n);\n}\n\n/** Shallow-merges `details` into the subscriber's existing details. */\nexport async function mergeSubscriberDetails(\n id: number | string,\n details: Record,\n): Promise | null> {\n const existing = await getSubscriber(id);\n if (!existing) return null;\n const merged = { ...(existing.details ?? {}), ...details };\n await sqlite.execute({\n sql: \"UPDATE newsletter_subscribers SET details = ?, updated_at = datetime('now') WHERE id = ?\",\n args: [JSON.stringify(merged), id],\n });\n return merged;\n}\n\nexport async function updateSubscriber(\n id: number | string,\n fields: { details?: unknown; developer_notes?: string },\n): Promise {\n const updates: string[] = [];\n const args: any[] = [];\n if (fields.details !== undefined) {\n updates.push(\"details = ?\");\n args.push(fields.details ? JSON.stringify(fields.details) : null);\n }\n if (fields.developer_notes !== undefined) {\n updates.push(\"developer_notes = ?\");\n args.push(fields.developer_notes);\n }\n if (!updates.length) return false;\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n await sqlite.execute({\n sql: `UPDATE newsletter_subscribers SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n return true;\n}\n\nexport async function deleteSubscriber(id: number | string): Promise {\n await sqlite.execute({\n sql: \"DELETE FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n}\n\n/* ----------------------------------- receivers ---------------------------------- */\n\nfunction toReceiver(row: any): Receiver {\n return {\n id: Number(row.id),\n name: String(row.name),\n server: String(row.server),\n topic: String(row.topic),\n priority: Number(row.priority),\n tags: row.tags ?? null,\n auth: row.auth ?? null,\n events: String(row.events),\n enabled: Number(row.enabled),\n created_at: String(row.created_at),\n updated_at: String(row.updated_at),\n };\n}\n\nexport async function listReceivers(): Promise {\n const res = await sqlite.execute(\"SELECT * FROM ntfy_receivers ORDER BY id ASC\");\n return res.rows.map(toReceiver);\n}\n\nexport async function getReceiver(id: number | string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM ntfy_receivers WHERE id = ?\",\n args: [id],\n });\n return res.rows.length ? toReceiver(res.rows[0]) : null;\n}\n\n/** Enabled receivers subscribed to a given event. */\nexport async function receiversForEvent(event: NtfyEvent): Promise {\n const all = await listReceivers();\n return all.filter(r =>\n r.enabled && r.events.split(\",\").map(e => e.trim()).includes(event)\n );\n}\n\nexport type ReceiverInput = {\n name: string;\n server: string;\n topic: string;\n priority: number;\n tags: string | null;\n auth: string | null;\n events: string;\n enabled: number;\n};\n\nexport async function createReceiver(input: ReceiverInput): Promise {\n const res = await sqlite.execute({\n sql: `INSERT INTO ntfy_receivers (name, server, topic, priority, tags, auth, events, enabled)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n input.name,\n input.server,\n input.topic,\n input.priority,\n input.tags,\n input.auth,\n input.events,\n input.enabled,\n ],\n });\n return Number(res.lastInsertRowid);\n}\n\nexport async function updateReceiver(\n id: number | string,\n input: Partial,\n): Promise {\n const updates: string[] = [];\n const args: any[] = [];\n for (const [key, value] of Object.entries(input)) {\n if (value === undefined) continue;\n updates.push(`${key} = ?`);\n args.push(value as any);\n }\n if (!updates.length) return;\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n await sqlite.execute({\n sql: `UPDATE ntfy_receivers SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n}\n\nexport async function deleteReceiver(id: number | string): Promise {\n await sqlite.execute({ sql: \"DELETE FROM ntfy_receivers WHERE id = ?\", args: [id] });\n}\n\n/* ---------------------------------- deliveries ---------------------------------- */\n\nexport async function logDelivery(entry: {\n receiver_id: number | null;\n receiver_name: string;\n subscriber_id: number | null;\n event: string;\n ok: boolean;\n status: number | null;\n error: string | null;\n}): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ntfy_deliveries (receiver_id, receiver_name, subscriber_id, event, ok, status, error)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n entry.receiver_id,\n entry.receiver_name,\n entry.subscriber_id,\n entry.event,\n entry.ok ? 1 : 0,\n entry.status,\n entry.error,\n ],\n });\n}\n\nexport async function recentDeliveries(limit = 25): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM ntfy_deliveries ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return res.rows.map((row: any) => ({\n id: Number(row.id),\n receiver_id: row.receiver_id === null ? null : Number(row.receiver_id),\n receiver_name: String(row.receiver_name),\n subscriber_id: row.subscriber_id === null ? null : Number(row.subscriber_id),\n event: String(row.event),\n ok: Number(row.ok),\n status: row.status === null ? null : Number(row.status),\n error: row.error ?? null,\n created_at: String(row.created_at),\n }));\n}\n",[160],"3ba4ab03-e1a6-49e6-9561-a3bd02238abd","api.ts","d6ea0706-9af8-11f1-bee9-1607ee4eb77e",19,["D",1787052897308],"/**\n * Public + API-key protected JSON API.\n * Response shapes are unchanged from the original version, so existing clients keep working.\n */\n\nimport { Hono } from \"npm:hono\";\nimport { cors } from \"npm:hono/cors\";\nimport * as db from \"./db.ts\";\nimport { notify } from \"./ntfy.ts\";\n\nconst EMAIL_RE = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n\nfunction isAuthorized(req: Request): boolean {\n const adminKey = Deno.env.get(\"ADMIN_API_KEY\");\n return !!adminKey && req.headers.get(\"X-API-Key\") === adminKey;\n}\n\nexport const api = new Hono();\n\napi.use(\n \"*\",\n cors({\n origin: \"*\",\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"OPTIONS\"],\n allowHeaders: [\"Content-Type\", \"X-API-Key\"],\n }),\n);\n\n/* -------------------------------- public routes -------------------------------- */\n\n// POST /subscribe — sign up, then alert every enabled ntfy receiver\napi.post(\"/subscribe\", async (c) => {\n const body = await c.req.json().catch(() => ({} as any));\n const { email, details } = body ?? {};\n\n if (!email || typeof email !== \"string\") {\n return c.json({ error: \"Email is required\" }, 400);\n }\n if (!EMAIL_RE.test(email)) {\n return c.json({ error: \"Invalid email format\" }, 400);\n }\n\n const id = await db.insertSubscriber(email.toLowerCase().trim(), details);\n\n // Notify receivers. Failures are logged, never surfaced to the subscriber.\n const subscriber = await db.getSubscriber(id);\n if (subscriber) {\n await notify(\"signup\", subscriber, new URL(c.req.url).origin).catch((err) =>\n console.error(\"ntfy notify failed:\", err)\n );\n }\n\n return c.json({ success: true, message: \"Successfully subscribed!\", id }, 201);\n});\n\n// PUT /subscribe/:id/details — merge extra info collected after signup\napi.put(\"/subscribe/:id/details\", async (c) => {\n const id = c.req.param(\"id\");\n if (!/^\\d+$/.test(id)) return c.json({ error: \"Invalid id\" }, 400);\n\n const body = await c.req.json().catch(() => ({} as any));\n const { details } = body ?? {};\n if (details === undefined || details === null || typeof details !== \"object\") {\n return c.json({ error: \"details object is required\" }, 400);\n }\n\n const merged = await db.mergeSubscriberDetails(id, details);\n if (!merged) return c.json({ error: \"Subscriber not found\" }, 404);\n\n const subscriber = await db.getSubscriber(id);\n if (subscriber) {\n await notify(\"details\", subscriber, new URL(c.req.url).origin).catch((err) =>\n console.error(\"ntfy notify failed:\", err)\n );\n }\n\n return c.json({ success: true, message: \"Details updated\", details: merged });\n});\n\n/* ------------------------- API-key protected admin routes ----------------------- */\n\napi.use(\"/subscribers/*\", async (c, next) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized\" }, 401);\n await next();\n});\napi.use(\"/subscribers\", async (c, next) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized\" }, 401);\n await next();\n});\n\napi.get(\"/subscribers\", async (c) => {\n const subscribers = await db.listSubscribers();\n return c.json({ subscribers });\n});\n\napi.put(\"/subscribers/:id\", async (c) => {\n const body = await c.req.json().catch(() => ({} as any));\n const { details, developer_notes } = body ?? {};\n const updated = await db.updateSubscriber(c.req.param(\"id\"), { details, developer_notes });\n if (!updated) return c.json({ error: \"No fields to update\" }, 400);\n return c.json({ success: true, message: \"Subscriber updated\" });\n});\n\napi.delete(\"/subscribers/:id\", async (c) => {\n await db.deleteSubscriber(c.req.param(\"id\"));\n return c.json({ success: true, message: \"Subscriber removed\" });\n});\n\n/* ------------------------------------ docs ------------------------------------- */\n\napi.get(\"/\", (c) =>\n c.json({\n name: \"Newsletter Signup API\",\n admin: new URL(\"/admin\", c.req.url).toString(),\n endpoints: {\n \"POST /subscribe\": {\n description:\n \"Subscribe to the newsletter. Notifies all enabled ntfy receivers. Returns subscriber id.\",\n body: { email: \"string (required)\", details: \"object (optional metadata)\" },\n response: { success: \"boolean\", message: \"string\", id: \"number\" },\n },\n \"PUT /subscribe/:id/details\": {\n description:\n \"Add or update details for an existing subscriber (public, no auth). Shallow-merges with existing details.\",\n body: { details: \"object (required)\" },\n },\n \"GET /subscribers\": { description: \"List all subscribers (X-API-Key)\" },\n \"PUT /subscribers/:id\": {\n description: \"Update subscriber details or developer notes (X-API-Key)\",\n body: { details: \"object (optional)\", developer_notes: \"string (optional)\" },\n },\n \"DELETE /subscribers/:id\": { description: \"Remove a subscriber (X-API-Key)\" },\n \"GET /admin\": {\n description: \"Admin dashboard — review signups and configure ntfy receivers (Val Town login)\",\n },\n },\n }));\n",[167],"be6f3280-fed3-11f0-bfa2-42dde27851f2","README.md","be6f332a-fed3-11f0-bfa2-42dde27851f2",11,["D",1769884583495],"# Newsletter Signup API\n\nEmail signup endpoint with flexible metadata storage and admin management.\n\n## Features\n\n- **Public signup endpoint** - `POST /subscribe`\n- **Protected admin endpoints** - List, update, and delete subscribers\n- **Flexible metadata** - `details` field accepts any JSON\n- **Developer notes** - Internal annotations per subscriber\n- **Duplicate emails allowed** - De-duplicate downstream as needed\n- **SQLite storage** - Timestamps for created/updated\n- **CORS enabled**\n\n## Setup\n\nSet the `ADMIN_API_KEY` environment variable to protect admin endpoints.\n\n## Endpoints\n\n| Method | Path | Auth | Description |\n|--------|------|------|-------------|\n| POST | `/subscribe` | Public | Submit a signup |\n| GET | `/subscribers` | API Key | List all subscribers |\n| PUT | `/subscribers/:id` | API Key | Update details or notes |\n| DELETE | `/subscribers/:id` | API Key | Remove a subscriber |\n\n## Usage\n\n**Subscribe (public):**\n```bash\ncurl -X POST https://YOUR_ENDPOINT/subscribe \\\n -H \"Content-Type: application/json\" \\\n -d '{\"email\": \"user@example.com\", \"details\": {\"any\": \"json\"}}'\n```\n\n**Admin requests:**\n```bash\ncurl https://YOUR_ENDPOINT/subscribers \\\n -H \"X-API-Key: your-admin-key\"\n```\n\n## Schema\n\n| Column | Type | Description |\n|--------|------|-------------|\n| `id` | INTEGER | Auto-incrementing primary key |\n| `email` | TEXT | Subscriber email |\n| `details` | TEXT | JSON metadata (flexible) |\n| `developer_notes` | TEXT | Internal notes |\n| `created_at` | TEXT | Submission timestamp |\n| `updated_at` | TEXT | Last update timestamp |\n",[174],"964d6db5-0871-412c-97ed-cb80b4512abb","admin","5bf3d673-b10d-4ac0-be56-a32e248add93",20,["D",1787052908390],"directory",[181],"pulls","branches",1,"forks","envVars",{"_195":66,"_197":66},"connections",{"_195":66,"_196":66},"count","unfilledCount","emptyCount",{"_48":180,"_37":181,"_35":182,"_143":-5,"_46":47,"_45":183,"_145":129,"_43":233,"_13":66,"_39":185,"_41":-5,"_29":30,"_148":-5,"_207":234,"_32":235},{"_48":226,"_37":227,"_35":228,"_143":182,"_46":47,"_45":183,"_145":129,"_43":229,"_13":66,"_39":40,"_41":230,"_29":30,"_148":-5,"_207":231,"_32":232},{"_48":222,"_37":38,"_35":36,"_143":182,"_46":47,"_45":14,"_145":30,"_43":223,"_13":66,"_39":40,"_41":42,"_29":30,"_148":-5,"_207":224,"_32":225},{"_48":173,"_37":174,"_35":175,"_143":-5,"_46":47,"_45":176,"_145":30,"_43":219,"_13":66,"_39":26,"_41":178,"_29":30,"_148":-5,"_207":220,"_32":221},{"_48":166,"_37":167,"_35":168,"_143":-5,"_46":47,"_45":169,"_145":129,"_43":216,"_13":66,"_39":40,"_41":171,"_29":30,"_148":-5,"_207":217,"_32":218},{"_48":159,"_37":160,"_35":161,"_143":-5,"_46":47,"_45":162,"_145":30,"_43":213,"_13":66,"_39":40,"_41":164,"_29":30,"_148":-5,"_207":214,"_32":215},{"_48":150,"_37":151,"_35":152,"_143":-5,"_46":47,"_45":153,"_145":30,"_43":210,"_13":155,"_39":156,"_41":157,"_29":30,"_148":50,"_207":211,"_32":212},{"_48":140,"_37":141,"_35":142,"_143":-5,"_46":47,"_45":144,"_145":30,"_43":206,"_13":66,"_39":40,"_41":147,"_29":30,"_148":-5,"_207":208,"_32":209},["D",1787052875199],"children",[],[141],["D",1772673318659],[],[151],["D",1787052855294],[],[160],["D",1787052897308],[],[167],["D",1769884583495],[],[174],"939db9bf-ce5e-45c8-9a69-4097026e56b1",["D",1787052948354],[],[181,38],"246d6b1f-bdb2-46dc-aaa0-dfcdeb912df0","Layout.tsx","dd81d7ce-9af8-11f1-8710-1607ee4eb77e",["D",1787052908390],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\n\nexport interface FlashMessage {\n kind: \"ok\" | \"error\";\n text: string;\n}\n\nexport function Layout(\n { title, user, flash, children }: {\n title: string;\n user: { username: string | null; profileImageUrl?: string | null };\n flash?: FlashMessage | null;\n children: React.ReactNode;\n },\n) {\n return (\n \n \n \n \n {title}\n \n \n \n \n

📬 Newsletter Signups

\n Review submissions and configure ntfy.sh receivers\n

\n @{user.username ?? \"unknown\"}\n

\n\n {flash && (\n \n {flash.text}\n

\n )}\n\n {children}\n\n \n \n \n \n );\n}\n\nexport function Card(\n { title, subtitle, children }: {\n title: string;\n subtitle?: string;\n children: React.ReactNode;\n },\n) {\n return (\n

{title}

\n {subtitle &&

{subtitle}

}\n

{children}

\n );\n}\n",[],[181,227],["D",1787052908390],[199,200],[181],["D",1769884195507],["D",1789534231467],{"_103":102,"_110":106},{"_103":102,"_104":-5,"_105":106,"_19":60,"_107":108,"_109":30},{"_13":92,"_37":93,"_48":47,"_94":49,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":50,"_101":102},"ctx",{"_85":-5,"_131":274,"_275":276,"_277":278,"_279":30,"_280":30,"_281":30,"_282":129,"_283":-5,"_284":-7,"_285":-7,"_286":66,"_287":30,"_288":30,"_289":-5,"_290":30,"_291":30,"_292":30,"_293":-5},"ENV",{"_245":246,"_247":248,"_249":93,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269,"_270":271,"_272":273},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v21