[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_293":294,"_295":296},"routes/_app.x.$handle.$name",{"_104":103,"_38":51,"_112":94,"_33":113,"_13":14,"_114":-5,"_11":115,"_116":117,"_118":119,"_120":121,"_122":123,"_26":-5,"_124":-5,"_125":-5,"_126":32,"_127":128,"_129":30,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_49":50,"_38":51,"_44":52,"_53":-5,"_54":32,"_55":56,"_57":56,"_58":59,"_60":-5,"_19":61,"_62":-5,"_63":32,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":32},"version",35,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","8ba048d6-a8b1-4b87-97f0-a913304d258b","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":32,"_33":34,"_35":34},"file",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":14,"_47":48,"_29":32},"previous","deleted",true,"deletedHere",false,"path","scripts/login-redirect-check.ts","latestPath","fileId","76f2ff7c-9aff-11f1-b56a-1607ee4eb77e","name","login-redirect-check.ts","fileType","script","content","/** Temporary smoke test for the post-login return path. */\nimport { loginAndReturnTo, safePath } from \"../post-login.ts\";\n\nconst res = loginAndReturnTo(\"/admin?ok=hi\");\nconsole.log(\"status:\", res.status);\nconsole.log(\"location:\", res.headers.get(\"Location\"));\nconsole.log(\"set-cookie:\", res.headers.get(\"Set-Cookie\"));\n\nconst cases: Array<[string, string | null]> = [\n [\"%2Fadmin\", \"/admin\"],\n [\"%2Fadmin%3Fok%3Dsaved\", \"/admin?ok=saved\"],\n [\"%2F%2Fevil.example.com\", null], // protocol-relative → rejected\n [\"https%3A%2F%2Fevil.example.com\", null], // absolute URL → rejected\n [\"admin\", null], // not absolute → rejected\n [\"%E0%A4%A\", null], // malformed encoding → rejected\n];\n\nfor (const [raw, expected] of cases) {\n const actual = safePath(raw);\n console.log(actual === expected ? \"✅\" : \"❌\", raw, \"→\", actual);\n}\n","createdAt",["D",1787055742805],"branchVersion","branchId","d72d2544-fed2-11f0-a1dd-42dde27851f2","id","d72cb6b8-fed2-11f0-a1dd-42dde27851f2","newsletter-signup",["D",1769884195507],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Signup API with ntfy push alerts and an admin dashboard","imageUrl","c821e8f7-4cc4-4c23-96f1-319b8f33d4b7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","6b193d60-e165-45a9-869c-c3f886455f3e","tursoName","d72cb6b8fed211f0a1dd42dde27851f2","tursoHostname","d72cb6b8fed211f0a1dd42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789447273596],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_111":107},"org",{"_104":103,"_105":-5,"_106":107,"_19":61,"_108":109,"_110":32},"branch",{"_13":93,"_38":94,"_49":48,"_95":50,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":51,"_102":103},"isOwned",51,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","colel","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ6RVZCOExVNXBIT3FrVDh5a0VZQTNRRG5ycCJ9","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_49":50,"_38":51,"_44":288,"_53":-5,"_54":32,"_55":56,"_57":56,"_58":59,"_60":-5,"_19":61,"_62":-5,"_63":32,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":289,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":290,"_88":291,"_90":292,"_92":32},"tree",[214,219,221,222,223,224,225,226],"files",[214,215,216,217,218,219,220,221,222,223,224,225,226],"counts",{"_204":67,"_205":188,"_206":67,"_207":208,"_209":210},"contents",[134,135,136,137,138,139,140,141],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_49":198,"_38":199,"_36":200,"_145":-5,"_47":48,"_46":201,"_147":30,"_44":202,"_13":67,"_40":196,"_42":-5,"_29":32,"_151":-5,"_33":203},{"_49":191,"_38":192,"_36":193,"_145":-5,"_47":48,"_46":194,"_147":30,"_44":195,"_13":67,"_40":196,"_42":-5,"_29":32,"_151":-5,"_33":197},{"_49":183,"_38":184,"_36":185,"_145":-5,"_47":48,"_46":186,"_147":32,"_44":187,"_13":188,"_40":26,"_42":189,"_29":32,"_151":-5,"_33":190},{"_49":176,"_38":177,"_36":178,"_145":-5,"_47":48,"_46":179,"_147":30,"_44":180,"_13":67,"_40":41,"_42":181,"_29":32,"_151":-5,"_33":182},{"_49":169,"_38":170,"_36":171,"_145":-5,"_47":48,"_46":172,"_147":32,"_44":173,"_13":67,"_40":41,"_42":174,"_29":32,"_151":-5,"_33":175},{"_49":160,"_38":161,"_36":162,"_145":-5,"_47":48,"_46":163,"_147":30,"_44":164,"_13":165,"_40":166,"_42":167,"_29":32,"_151":51,"_33":168},{"_49":153,"_38":154,"_36":155,"_145":-5,"_47":48,"_46":156,"_147":32,"_44":157,"_13":67,"_40":41,"_42":158,"_29":32,"_151":-5,"_33":159},{"_49":142,"_38":143,"_36":144,"_145":-5,"_47":48,"_46":146,"_147":30,"_44":148,"_13":149,"_40":41,"_42":150,"_29":32,"_151":-5,"_33":152},"3a591dfe-b686-44e1-a3b5-4aef78fe49a7","post-login.ts","51348738-9aff-11f1-9d2d-1607ee4eb77e","parentId",34,"latest",["D",1787055738792],3,"/**\n * Return-to-destination across the OAuth round trip.\n *\n * std/oauth's callback page always lands on \"/\" when login happens as a full-page\n * navigation (it only postMessages back when it was opened as a popup), and it has no\n * \"redirect back to X\" option. So we stash the intended path in a short-lived cookie\n * before sending the user to /auth/login, then resume it on the next visit to \"/\".\n */\n\nimport type { Context, Next } from \"npm:hono\";\nimport { getOAuthUserData } from \"https://esm.town/v/std/oauth/middleware.ts\";\n\nconst COOKIE = \"post_login_redirect\";\nconst MAX_AGE = 600; // 10 minutes — just long enough to finish logging in\n\nfunction readCookie(req: Request, name: string): string | null {\n const header = req.headers.get(\"Cookie\");\n if (!header) return null;\n for (const part of header.split(\";\")) {\n const [key, ...rest] = part.trim().split(\"=\");\n if (key === name) return rest.join(\"=\") || null;\n }\n return null;\n}\n\n/** Only same-origin absolute paths — never honour a full URL or protocol-relative path. */\nexport function safePath(raw: string): string | null {\n let value: string;\n try {\n value = decodeURIComponent(raw);\n } catch {\n return null;\n }\n if (!value.startsWith(\"/\") || value.startsWith(\"//\")) return null;\n return value;\n}\n\n/** 302 to the Val Town login flow, remembering where the user was headed. */\nexport function loginAndReturnTo(dest: string): Response {\n return new Response(null, {\n status: 302,\n headers: {\n \"Location\": \"/auth/login\",\n // SameSite=None (like std/oauth's own session cookie) so this survives the\n // login round trip even when the app is embedded in an iframe.\n \"Set-Cookie\":\n `${COOKIE}=${encodeURIComponent(dest)}; Path=/; HttpOnly; Secure; SameSite=None; Max-Age=${MAX_AGE}`,\n },\n });\n}\n\n/**\n * Mount on GET \"/\" ahead of the API docs route: if the visitor just came back from\n * login and has a pending destination, send them there instead.\n */\nexport async function resumeAfterLogin(c: Context, next: Next) {\n const cookie = readCookie(c.req.raw, COOKIE);\n const dest = cookie ? safePath(cookie) : null;\n\n if (dest && await getOAuthUserData(c.req.raw)) {\n return new Response(null, {\n status: 302,\n headers: {\n \"Location\": dest,\n \"Set-Cookie\": `${COOKIE}=; Path=/; HttpOnly; Secure; SameSite=None; Max-Age=0`,\n },\n });\n }\n\n await next();\n}\n","label",[143],"57e39e18-14b2-498a-add6-3e2db1aa84a9","ntfy.ts","c9b89cf0-9af8-11f1-9164-1607ee4eb77e",18,["D",1787052875199],"/**\n * ntfy.sh publishing.\n *\n * Uses ntfy's \"publish as JSON\" API: POST the message object (including `topic`)\n * to the server ROOT url — not the topic url.\n * https://docs.ntfy.sh/publish/#publish-as-json\n *\n * Auth (https://docs.ntfy.sh/publish/#authentication):\n * - access token -> Authorization: Bearer tk_…\n * - user:password -> Authorization: Basic base64(user:password)\n */\n\nimport {\n logDelivery,\n type NtfyEvent,\n type Receiver,\n receiversForEvent,\n type Subscriber,\n} from \"./db.ts\";\n\nexport interface NtfyMessage {\n topic: string;\n message: string;\n title?: string;\n tags?: string[];\n priority?: number;\n click?: string;\n markdown?: boolean;\n actions?: Array<{ action: string; label: string; url?: string; clear?: boolean }>;\n}\n\nexport interface PublishResult {\n ok: boolean;\n status: number | null;\n error: string | null;\n}\n\nfunction authHeader(auth: string | null): Record {\n const value = auth?.trim();\n if (!value) return {};\n // Access tokens are prefixed tk_; anything with a colon is user:password.\n if (value.startsWith(\"tk_\") || !value.includes(\":\")) {\n return { Authorization: `Bearer ${value}` };\n }\n return { Authorization: `Basic ${btoa(value)}` };\n}\n\nexport function normalizeServer(server: string): string {\n const trimmed = (server || \"https://ntfy.sh\").trim().replace(/\\/+$/, \"\");\n return /^https?:\\/\\//.test(trimmed) ? trimmed : `https://${trimmed}`;\n}\n\n/** Publish a single message to one receiver's server + topic. */\nexport async function publish(\n receiver: Pick,\n message: Omit & { tags?: string[] },\n): Promise {\n const body: NtfyMessage = {\n topic: receiver.topic.trim(),\n priority: receiver.priority,\n tags: message.tags ?? receiver.tags?.split(\",\").map(t => t.trim()).filter(Boolean),\n ...message,\n };\n\n try {\n const res = await fetch(normalizeServer(receiver.server) + \"/\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", ...authHeader(receiver.auth) },\n body: JSON.stringify(body),\n signal: AbortSignal.timeout(10_000),\n });\n if (!res.ok) {\n const text = (await res.text().catch(() => \"\")).slice(0, 300);\n return { ok: false, status: res.status, error: text || res.statusText };\n }\n await res.body?.cancel();\n return { ok: true, status: res.status, error: null };\n } catch (err: any) {\n return { ok: false, status: null, error: err?.message ?? String(err) };\n }\n}\n\nfunction formatDetails(details: Record | null): string {\n if (!details || !Object.keys(details).length) return \"\";\n return Object.entries(details)\n .map(([k, v]) => `- **${k}:** ${typeof v === \"object\" ? JSON.stringify(v) : String(v)}`)\n .join(\"\\n\");\n}\n\nfunction buildMessage(event: NtfyEvent, subscriber: Subscriber, adminUrl?: string) {\n const detailLines = formatDetails(subscriber.details);\n const title = event === \"signup\"\n ? \"New newsletter signup\"\n : `Signup details updated (#${subscriber.id})`;\n const lines = [\n subscriber.email,\n detailLines,\n `_#${subscriber.id} · ${subscriber.created_at} UTC_`,\n ].filter(Boolean);\n return {\n title,\n message: lines.join(\"\\n\"),\n markdown: true,\n click: adminUrl,\n actions: adminUrl\n ? [{ action: \"view\", label: \"Open admin\", url: adminUrl, clear: false }]\n : undefined,\n };\n}\n\n/**\n * Fan a signup event out to every enabled receiver listening for it.\n * Never throws — failures are logged to ntfy_deliveries so the admin page can show them.\n */\nexport async function notify(\n event: NtfyEvent,\n subscriber: Subscriber,\n origin?: string,\n): Promise {\n const receivers = await receiversForEvent(event).catch(() => []);\n if (!receivers.length) return [];\n\n const adminUrl = origin ? `${origin.replace(/\\/+$/, \"\")}/admin` : undefined;\n const payload = buildMessage(event, subscriber, adminUrl);\n\n const results = await Promise.all(receivers.map(async (receiver) => {\n const result = await publish(receiver, payload);\n if (!result.ok) {\n console.error(`ntfy: ${receiver.name} (${receiver.topic}) failed:`, result.status, result.error);\n }\n await logDelivery({\n receiver_id: receiver.id,\n receiver_name: receiver.name,\n subscriber_id: subscriber.id,\n event,\n ok: result.ok,\n status: result.status,\n error: result.error,\n }).catch(() => {});\n return result;\n }));\n\n return results;\n}\n\n/** Send a \"does this config work?\" message to one receiver. */\nexport async function sendTest(receiver: Receiver, origin?: string): Promise {\n const adminUrl = origin ? `${origin.replace(/\\/+$/, \"\")}/admin` : undefined;\n const result = await publish(receiver, {\n title: \"Newsletter signup test\",\n message: `Test notification for receiver **${receiver.name}**. If you can read this, alerts work. 🎉`,\n markdown: true,\n click: adminUrl,\n });\n await logDelivery({\n receiver_id: receiver.id,\n receiver_name: receiver.name,\n subscriber_id: null,\n event: \"test\",\n ok: result.ok,\n status: result.status,\n error: result.error,\n }).catch(() => {});\n return result;\n}\n",[154],"d965e792-2865-42ad-86c7-3fecac2e98be","main.ts","d73071ea-fed2-11f0-a1dd-42dde27851f2",31,["D",1787055692887],16,"http","/**\n * Newsletter Signup API + ntfy.sh alerts + admin dashboard.\n *\n * Routes:\n * - POST /subscribe public signup, pushes to every enabled ntfy receiver\n * - PUT /subscribe/:id/details public, merge extra info into a signup\n * - GET /subscribers list signups (X-API-Key: ADMIN_API_KEY)\n * - PUT /subscribers/:id update details / developer notes (X-API-Key)\n * - DELETE /subscribers/:id remove a signup (X-API-Key)\n * - GET /admin dashboard behind Val Town login\n * - GET /auth/login|callback, POST /auth/logout provided by std/oauth\n *\n * Environment variables:\n * - ADMIN_API_KEY (optional) enables the X-API-Key JSON admin endpoints\n * - ADMIN_USERNAMES (optional) extra Val Town usernames allowed into /admin,\n * comma-separated. Members of this val's org always have access.\n *\n * ntfy receivers are configured in the dashboard, not in env vars — see db.ts / ntfy.ts.\n */\n\nimport { Hono } from \"npm:hono\";\nimport { oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { admin } from \"./admin/routes.tsx\";\nimport { api } from \"./api.ts\";\nimport { resumeAfterLogin } from \"./post-login.ts\";\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.route(\"/admin\", admin);\n// Login always returns to \"/\" — bounce back to wherever the user was headed.\napp.get(\"/\", resumeAfterLogin);\napp.route(\"/\", api);\n\nexport default oauthMiddleware(app.fetch);\n",[161],"c50b37d2-7a79-4c51-a698-277f271e418f","db.ts","bddbfe22-9af8-11f1-9164-1607ee4eb77e",17,["D",1787052855294],"/**\n * Database schema + queries.\n *\n * Tables:\n * - newsletter_subscribers: signups (email + flexible JSON details + notes)\n * - ntfy_receivers: configurable ntfy.sh destinations for new-submission alerts\n * - ntfy_deliveries: audit log of notification attempts\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type NtfyEvent = \"signup\" | \"details\";\n\nexport interface Subscriber {\n id: number;\n email: string;\n details: Record | null;\n developer_notes: string | null;\n created_at: string;\n updated_at: string;\n}\n\nexport interface Receiver {\n id: number;\n name: string;\n server: string;\n topic: string;\n priority: number;\n tags: string | null;\n /** ntfy access token (tk_…) or \"user:password\" for basic auth. */\n auth: string | null;\n /** Comma-separated list of NtfyEvent values. */\n events: string;\n enabled: number;\n created_at: string;\n updated_at: string;\n}\n\nexport interface Delivery {\n id: number;\n receiver_id: number | null;\n receiver_name: string;\n subscriber_id: number | null;\n event: string;\n ok: number;\n status: number | null;\n error: string | null;\n created_at: string;\n}\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS newsletter_subscribers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT NOT NULL,\n details TEXT,\n developer_notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ntfy_receivers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n server TEXT NOT NULL DEFAULT 'https://ntfy.sh',\n topic TEXT NOT NULL,\n priority INTEGER NOT NULL DEFAULT 3,\n tags TEXT,\n auth TEXT,\n events TEXT NOT NULL DEFAULT 'signup',\n enabled INTEGER NOT NULL DEFAULT 1,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ntfy_deliveries (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n receiver_id INTEGER,\n receiver_name TEXT NOT NULL,\n subscriber_id INTEGER,\n event TEXT NOT NULL,\n ok INTEGER NOT NULL,\n status INTEGER,\n error TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nfunction parseDetails(raw: unknown): Record | null {\n if (!raw || typeof raw !== \"string\") return null;\n try {\n return JSON.parse(raw);\n } catch {\n return { _unparsed: raw };\n }\n}\n\nfunction toSubscriber(row: any): Subscriber {\n return {\n id: Number(row.id),\n email: String(row.email),\n details: parseDetails(row.details),\n developer_notes: row.developer_notes ?? null,\n created_at: String(row.created_at),\n updated_at: String(row.updated_at),\n };\n}\n\n/* ---------------------------------- subscribers --------------------------------- */\n\nexport async function insertSubscriber(email: string, details: unknown): Promise {\n const res = await sqlite.execute({\n sql: \"INSERT INTO newsletter_subscribers (email, details) VALUES (?, ?)\",\n args: [email, details ? JSON.stringify(details) : null],\n });\n return Number(res.lastInsertRowid);\n}\n\nexport async function getSubscriber(id: number | string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n return res.rows.length ? toSubscriber(res.rows[0]) : null;\n}\n\nexport async function listSubscribers(limit = 500): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM newsletter_subscribers ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return res.rows.map(toSubscriber);\n}\n\nexport async function countSubscribers(): Promise {\n const res = await sqlite.execute(\"SELECT COUNT(*) AS n FROM newsletter_subscribers\");\n return Number((res.rows[0] as any).n);\n}\n\n/** Shallow-merges `details` into the subscriber's existing details. */\nexport async function mergeSubscriberDetails(\n id: number | string,\n details: Record,\n): Promise | null> {\n const existing = await getSubscriber(id);\n if (!existing) return null;\n const merged = { ...(existing.details ?? {}), ...details };\n await sqlite.execute({\n sql: \"UPDATE newsletter_subscribers SET details = ?, updated_at = datetime('now') WHERE id = ?\",\n args: [JSON.stringify(merged), id],\n });\n return merged;\n}\n\nexport async function updateSubscriber(\n id: number | string,\n fields: { details?: unknown; developer_notes?: string },\n): Promise {\n const updates: string[] = [];\n const args: any[] = [];\n if (fields.details !== undefined) {\n updates.push(\"details = ?\");\n args.push(fields.details ? JSON.stringify(fields.details) : null);\n }\n if (fields.developer_notes !== undefined) {\n updates.push(\"developer_notes = ?\");\n args.push(fields.developer_notes);\n }\n if (!updates.length) return false;\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n await sqlite.execute({\n sql: `UPDATE newsletter_subscribers SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n return true;\n}\n\nexport async function deleteSubscriber(id: number | string): Promise {\n await sqlite.execute({\n sql: \"DELETE FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n}\n\n/* ----------------------------------- receivers ---------------------------------- */\n\nfunction toReceiver(row: any): Receiver {\n return {\n id: Number(row.id),\n name: String(row.name),\n server: String(row.server),\n topic: String(row.topic),\n priority: Number(row.priority),\n tags: row.tags ?? null,\n auth: row.auth ?? null,\n events: String(row.events),\n enabled: Number(row.enabled),\n created_at: String(row.created_at),\n updated_at: String(row.updated_at),\n };\n}\n\nexport async function listReceivers(): Promise {\n const res = await sqlite.execute(\"SELECT * FROM ntfy_receivers ORDER BY id ASC\");\n return res.rows.map(toReceiver);\n}\n\nexport async function getReceiver(id: number | string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM ntfy_receivers WHERE id = ?\",\n args: [id],\n });\n return res.rows.length ? toReceiver(res.rows[0]) : null;\n}\n\n/** Enabled receivers subscribed to a given event. */\nexport async function receiversForEvent(event: NtfyEvent): Promise {\n const all = await listReceivers();\n return all.filter(r =>\n r.enabled && r.events.split(\",\").map(e => e.trim()).includes(event)\n );\n}\n\nexport type ReceiverInput = {\n name: string;\n server: string;\n topic: string;\n priority: number;\n tags: string | null;\n auth: string | null;\n events: string;\n enabled: number;\n};\n\nexport async function createReceiver(input: ReceiverInput): Promise {\n const res = await sqlite.execute({\n sql: `INSERT INTO ntfy_receivers (name, server, topic, priority, tags, auth, events, enabled)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n input.name,\n input.server,\n input.topic,\n input.priority,\n input.tags,\n input.auth,\n input.events,\n input.enabled,\n ],\n });\n return Number(res.lastInsertRowid);\n}\n\nexport async function updateReceiver(\n id: number | string,\n input: Partial,\n): Promise {\n const updates: string[] = [];\n const args: any[] = [];\n for (const [key, value] of Object.entries(input)) {\n if (value === undefined) continue;\n updates.push(`${key} = ?`);\n args.push(value as any);\n }\n if (!updates.length) return;\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n await sqlite.execute({\n sql: `UPDATE ntfy_receivers SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n}\n\nexport async function deleteReceiver(id: number | string): Promise {\n await sqlite.execute({ sql: \"DELETE FROM ntfy_receivers WHERE id = ?\", args: [id] });\n}\n\n/* ---------------------------------- deliveries ---------------------------------- */\n\nexport async function logDelivery(entry: {\n receiver_id: number | null;\n receiver_name: string;\n subscriber_id: number | null;\n event: string;\n ok: boolean;\n status: number | null;\n error: string | null;\n}): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ntfy_deliveries (receiver_id, receiver_name, subscriber_id, event, ok, status, error)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n entry.receiver_id,\n entry.receiver_name,\n entry.subscriber_id,\n entry.event,\n entry.ok ? 1 : 0,\n entry.status,\n entry.error,\n ],\n });\n}\n\nexport async function recentDeliveries(limit = 25): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM ntfy_deliveries ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return res.rows.map((row: any) => ({\n id: Number(row.id),\n receiver_id: row.receiver_id === null ? null : Number(row.receiver_id),\n receiver_name: String(row.receiver_name),\n subscriber_id: row.subscriber_id === null ? null : Number(row.subscriber_id),\n event: String(row.event),\n ok: Number(row.ok),\n status: row.status === null ? null : Number(row.status),\n error: row.error ?? null,\n created_at: String(row.created_at),\n }));\n}\n",[170],"3ba4ab03-e1a6-49e6-9561-a3bd02238abd","api.ts","d6ea0706-9af8-11f1-bee9-1607ee4eb77e",19,["D",1787052897308],"/**\n * Public + API-key protected JSON API.\n * Response shapes are unchanged from the original version, so existing clients keep working.\n */\n\nimport { Hono } from \"npm:hono\";\nimport { cors } from \"npm:hono/cors\";\nimport * as db from \"./db.ts\";\nimport { notify } from \"./ntfy.ts\";\n\nconst EMAIL_RE = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n\nfunction isAuthorized(req: Request): boolean {\n const adminKey = Deno.env.get(\"ADMIN_API_KEY\");\n return !!adminKey && req.headers.get(\"X-API-Key\") === adminKey;\n}\n\nexport const api = new Hono();\n\napi.use(\n \"*\",\n cors({\n origin: \"*\",\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"OPTIONS\"],\n allowHeaders: [\"Content-Type\", \"X-API-Key\"],\n }),\n);\n\n/* -------------------------------- public routes -------------------------------- */\n\n// POST /subscribe — sign up, then alert every enabled ntfy receiver\napi.post(\"/subscribe\", async (c) => {\n const body = await c.req.json().catch(() => ({} as any));\n const { email, details } = body ?? {};\n\n if (!email || typeof email !== \"string\") {\n return c.json({ error: \"Email is required\" }, 400);\n }\n if (!EMAIL_RE.test(email)) {\n return c.json({ error: \"Invalid email format\" }, 400);\n }\n\n const id = await db.insertSubscriber(email.toLowerCase().trim(), details);\n\n // Notify receivers. Failures are logged, never surfaced to the subscriber.\n const subscriber = await db.getSubscriber(id);\n if (subscriber) {\n await notify(\"signup\", subscriber, new URL(c.req.url).origin).catch((err) =>\n console.error(\"ntfy notify failed:\", err)\n );\n }\n\n return c.json({ success: true, message: \"Successfully subscribed!\", id }, 201);\n});\n\n// PUT /subscribe/:id/details — merge extra info collected after signup\napi.put(\"/subscribe/:id/details\", async (c) => {\n const id = c.req.param(\"id\");\n if (!/^\\d+$/.test(id)) return c.json({ error: \"Invalid id\" }, 400);\n\n const body = await c.req.json().catch(() => ({} as any));\n const { details } = body ?? {};\n if (details === undefined || details === null || typeof details !== \"object\") {\n return c.json({ error: \"details object is required\" }, 400);\n }\n\n const merged = await db.mergeSubscriberDetails(id, details);\n if (!merged) return c.json({ error: \"Subscriber not found\" }, 404);\n\n const subscriber = await db.getSubscriber(id);\n if (subscriber) {\n await notify(\"details\", subscriber, new URL(c.req.url).origin).catch((err) =>\n console.error(\"ntfy notify failed:\", err)\n );\n }\n\n return c.json({ success: true, message: \"Details updated\", details: merged });\n});\n\n/* ------------------------- API-key protected admin routes ----------------------- */\n\napi.use(\"/subscribers/*\", async (c, next) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized\" }, 401);\n await next();\n});\napi.use(\"/subscribers\", async (c, next) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized\" }, 401);\n await next();\n});\n\napi.get(\"/subscribers\", async (c) => {\n const subscribers = await db.listSubscribers();\n return c.json({ subscribers });\n});\n\napi.put(\"/subscribers/:id\", async (c) => {\n const body = await c.req.json().catch(() => ({} as any));\n const { details, developer_notes } = body ?? {};\n const updated = await db.updateSubscriber(c.req.param(\"id\"), { details, developer_notes });\n if (!updated) return c.json({ error: \"No fields to update\" }, 400);\n return c.json({ success: true, message: \"Subscriber updated\" });\n});\n\napi.delete(\"/subscribers/:id\", async (c) => {\n await db.deleteSubscriber(c.req.param(\"id\"));\n return c.json({ success: true, message: \"Subscriber removed\" });\n});\n\n/* ------------------------------------ docs ------------------------------------- */\n\napi.get(\"/\", (c) =>\n c.json({\n name: \"Newsletter Signup API\",\n admin: new URL(\"/admin\", c.req.url).toString(),\n endpoints: {\n \"POST /subscribe\": {\n description:\n \"Subscribe to the newsletter. Notifies all enabled ntfy receivers. Returns subscriber id.\",\n body: { email: \"string (required)\", details: \"object (optional metadata)\" },\n response: { success: \"boolean\", message: \"string\", id: \"number\" },\n },\n \"PUT /subscribe/:id/details\": {\n description:\n \"Add or update details for an existing subscriber (public, no auth). Shallow-merges with existing details.\",\n body: { details: \"object (required)\" },\n },\n \"GET /subscribers\": { description: \"List all subscribers (X-API-Key)\" },\n \"PUT /subscribers/:id\": {\n description: \"Update subscriber details or developer notes (X-API-Key)\",\n body: { details: \"object (optional)\", developer_notes: \"string (optional)\" },\n },\n \"DELETE /subscribers/:id\": { description: \"Remove a subscriber (X-API-Key)\" },\n \"GET /admin\": {\n description: \"Admin dashboard — review signups and configure ntfy receivers (Val Town login)\",\n },\n },\n }));\n",[177],"824710a6-524a-4fde-b73a-aaa163402649","README.md","be6f332a-fed3-11f0-bfa2-42dde27851f2",27,["D",1787053091769],1,"# Newsletter Signup API\n\nEmail signup endpoint with flexible metadata storage, **ntfy.sh push notifications** for new\nsubmissions, and an admin dashboard behind Val Town login.\n\n🔗 · 🛠 \n\n## How it works\n\n```mermaid\nflowchart LR\n F[Your form] -->|POST /subscribe| A[main.ts]\n A --> D[(SQLite)]\n A --> N[ntfy.ts]\n N -->|JSON publish| S1[ntfy.sh / self-hosted]\n S1 --> P[phone / desktop / web app]\n N --> L[(ntfy_deliveries log)]\n U[You] -->|Val Town login| AD[/admin/]\n AD --> D\n AD --> L\n```\n\nEvery signup fans out to **every enabled receiver** configured in the dashboard. Delivery failures\nare logged, never surfaced to the person signing up — a broken receiver can't break your form.\n\n## Setup\n\n1. Open and log in with Val Town.\n2. Add a receiver: pick an **unguessable topic** (the topic name is effectively the password —\n anyone who knows it can read your notifications).\n3. Subscribe to that same topic in the [ntfy app](https://ntfy.sh/app) (iOS, Android, web, CLI).\n4. Hit **Send test** to confirm it arrives.\n\n### Receiver options\n\n| Field | Notes |\n|-------|-------|\n| Name | Label shown in the dashboard |\n| Topic | ntfy topic — keep it long and random |\n| Server | `https://ntfy.sh` or your own self-hosted ntfy |\n| Priority | 1 (min) … 5 (max) — controls how loudly the app alerts |\n| Tags | Comma-separated; ntfy maps many to [emoji](https://docs.ntfy.sh/emojis/) |\n| Auth | Access token (`tk_…`) or `user:password` — only needed for protected topics |\n| Notify on | New signup and/or details updated |\n| Enabled | Pause a receiver without deleting it |\n\nNotifications are Markdown-formatted and include a click action + \"Open admin\" button pointing\nback at the dashboard. Uses ntfy's [publish-as-JSON API](https://docs.ntfy.sh/publish/#publish-as-json).\n\n## Environment variables\n\n| Key | Required | Purpose |\n|-----|----------|---------|\n| `ADMIN_API_KEY` | for JSON admin endpoints | `X-API-Key` value for `/subscribers*` |\n| `ADMIN_USERNAMES` | optional | Extra Val Town usernames allowed into `/admin`, comma-separated. Members of this val's org always have access. |\n\n👉 Add ADMIN_USERNAMES here: https://www.val.town/x/colel/newsletter-signup/environment-variables?key=ADMIN_USERNAMES\n\nntfy credentials live in the database (managed from the dashboard), not in env vars.\n\n## Endpoints\n\n| Method | Path | Auth | Description |\n|--------|------|------|-------------|\n| POST | `/subscribe` | Public | Submit a signup → notifies receivers |\n| PUT | `/subscribe/:id/details` | Public | Merge extra details into a signup |\n| GET | `/subscribers` | API Key | List all subscribers |\n| PUT | `/subscribers/:id` | API Key | Update details or notes |\n| DELETE | `/subscribers/:id` | API Key | Remove a subscriber |\n| GET | `/admin` | Val Town login | Dashboard: review signups, configure receivers |\n\n## Usage\n\n**Subscribe (public):**\n```bash\ncurl -X POST https://newsletter-signup.val.run/subscribe \\\n -H \"Content-Type: application/json\" \\\n -d '{\"email\": \"user@example.com\", \"details\": {\"any\": \"json\"}}'\n```\n\n**Admin requests:**\n```bash\ncurl https://newsletter-signup.val.run/subscribers \\\n -H \"X-API-Key: your-admin-key\"\n```\n\n## Files\n\n| File | Role |\n|------|------|\n| `main.ts` | Hono app; mounts API + admin, wraps everything in Val Town OAuth |\n| `api.ts` | Public + API-key JSON routes |\n| `ntfy.ts` | ntfy publishing, message formatting, test sends |\n| `db.ts` | Schema + queries (subscribers, receivers, delivery log) |\n| `admin/routes.tsx` | Auth gate + dashboard routes and form handling |\n| `admin/Layout.tsx`, `admin/Receivers.tsx`, `admin/Subscribers.tsx` | React (SSR) UI |\n\n## Schema\n\n**`newsletter_subscribers`** — `id`, `email`, `details` (JSON), `developer_notes`, `created_at`, `updated_at`\n\n**`ntfy_receivers`** — `id`, `name`, `server`, `topic`, `priority`, `tags`, `auth`, `events`, `enabled`, timestamps\n\n**`ntfy_deliveries`** — `id`, `receiver_id`, `receiver_name`, `subscriber_id`, `event`, `ok`, `status`, `error`, `created_at`\n",[184],"4f20e196-0364-4fa0-bc2e-058d5d3d1377","scripts","013cb2e4-c52a-417b-a150-124dc8a68c51",25,["D",1787053034424],"directory",[192],"964d6db5-0871-412c-97ed-cb80b4512abb","admin","5bf3d673-b10d-4ac0-be56-a32e248add93",20,["D",1787052908390],[199],"pulls","branches","forks","envVars",{"_211":67,"_213":67},"connections",{"_211":67,"_212":67},"count","unfilledCount","emptyCount",{"_49":198,"_38":199,"_36":200,"_145":-5,"_47":48,"_46":201,"_147":30,"_44":285,"_13":67,"_40":196,"_42":-5,"_29":32,"_151":-5,"_228":286,"_33":287},{"_49":278,"_38":279,"_36":280,"_145":200,"_47":48,"_46":201,"_147":30,"_44":281,"_13":67,"_40":41,"_42":282,"_29":32,"_151":-5,"_228":283,"_33":284},{"_49":270,"_38":271,"_36":272,"_145":200,"_47":48,"_46":273,"_147":32,"_44":274,"_13":67,"_40":41,"_42":275,"_29":32,"_151":-5,"_228":276,"_33":277},{"_49":262,"_38":263,"_36":264,"_145":200,"_47":48,"_46":265,"_147":30,"_44":266,"_13":67,"_40":41,"_42":267,"_29":32,"_151":-5,"_228":268,"_33":269},{"_49":253,"_38":254,"_36":255,"_145":200,"_47":48,"_46":256,"_147":32,"_44":257,"_13":258,"_40":41,"_42":259,"_29":32,"_151":-5,"_228":260,"_33":261},{"_49":191,"_38":192,"_36":193,"_145":-5,"_47":48,"_46":194,"_147":30,"_44":250,"_13":67,"_40":196,"_42":-5,"_29":32,"_151":-5,"_228":251,"_33":252},{"_49":246,"_38":39,"_36":37,"_145":193,"_47":48,"_46":14,"_147":32,"_44":247,"_13":67,"_40":41,"_42":43,"_29":32,"_151":-5,"_228":248,"_33":249},{"_49":183,"_38":184,"_36":185,"_145":-5,"_47":48,"_46":186,"_147":32,"_44":243,"_13":188,"_40":26,"_42":189,"_29":32,"_151":-5,"_228":244,"_33":245},{"_49":176,"_38":177,"_36":178,"_145":-5,"_47":48,"_46":179,"_147":30,"_44":240,"_13":67,"_40":41,"_42":181,"_29":32,"_151":-5,"_228":241,"_33":242},{"_49":169,"_38":170,"_36":171,"_145":-5,"_47":48,"_46":172,"_147":32,"_44":237,"_13":67,"_40":41,"_42":174,"_29":32,"_151":-5,"_228":238,"_33":239},{"_49":160,"_38":161,"_36":162,"_145":-5,"_47":48,"_46":163,"_147":30,"_44":234,"_13":165,"_40":166,"_42":167,"_29":32,"_151":51,"_228":235,"_33":236},{"_49":153,"_38":154,"_36":155,"_145":-5,"_47":48,"_46":156,"_147":32,"_44":231,"_13":67,"_40":41,"_42":158,"_29":32,"_151":-5,"_228":232,"_33":233},{"_49":142,"_38":143,"_36":144,"_145":-5,"_47":48,"_46":146,"_147":30,"_44":227,"_13":149,"_40":41,"_42":150,"_29":32,"_151":-5,"_228":229,"_33":230},["D",1787055738792],"children",[],[143],["D",1787052875199],[],[154],["D",1787055692887],[],[161],["D",1787052855294],[],[170],["D",1787052897308],[],[177],["D",1787053091769],[],[184],"2303ce54-ccaa-4b58-8611-121088ab5310",["D",1787055742805],[],[192,39],["D",1787053034424],[220],[192],"850118fe-0f47-434b-884e-db61cefc4b71","routes.tsx","11bb59b6-9af9-11f1-984d-1607ee4eb77e",30,["D",1787055685998],2,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport { renderToString } from \"https://esm.sh/react-dom@18.2.0/server\";\nimport { Hono } from \"npm:hono\";\nimport { getOAuthUserData } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport * as db from \"../db.ts\";\nimport { normalizeServer, sendTest } from \"../ntfy.ts\";\nimport { loginAndReturnTo } from \"../post-login.ts\";\nimport { type FlashMessage, Layout } from \"./Layout.tsx\";\nimport { Deliveries, Receivers } from \"./Receivers.tsx\";\nimport { Subscribers } from \"./Subscribers.tsx\";\n\ntype AdminUser = { username: string | null };\n\n/**\n * Admin access = logged in with Val Town AND (member of this val's org\n * OR listed in the optional ADMIN_USERNAMES env var, comma-separated).\n */\nasync function requireAdmin(req: Request): Promise {\n const session = await getOAuthUserData(req);\n if (!session?.user) return \"anonymous\";\n\n const allowlist = (Deno.env.get(\"ADMIN_USERNAMES\") ?? \"\")\n .split(\",\").map(s => s.trim().replace(/^@/, \"\")).filter(Boolean);\n\n const username = session.user.username ?? null;\n const allowed = session.isOrgMember === true ||\n (!!username && allowlist.includes(username));\n\n return allowed ? { username } : \"forbidden\";\n}\n\nfunction html(node: React.ReactNode, status = 200): Response {\n return new Response(\"\" + renderToString(<>{node}), {\n status,\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}\n\nfunction flashFrom(url: URL): FlashMessage | null {\n const ok = url.searchParams.get(\"ok\");\n if (ok) return { kind: \"ok\", text: ok };\n const err = url.searchParams.get(\"err\");\n if (err) return { kind: \"error\", text: err };\n return null;\n}\n\nfunction back(kind: \"ok\" | \"err\", text: string): Response {\n return new Response(null, {\n status: 302,\n headers: { Location: `/admin?${kind}=${encodeURIComponent(text)}` },\n });\n}\n\nconst str = (v: unknown): string => (typeof v === \"string\" ? v : \"\");\n\nfunction eventsFromBody(body: Record): string {\n const raw = body[\"events\"];\n const list = (Array.isArray(raw) ? raw : raw === undefined ? [] : [raw]).map(String);\n const events = list.filter(e => e === \"signup\" || e === \"details\");\n return (events.length ? events : [\"signup\"]).join(\",\");\n}\n\nfunction receiverFromBody(body: Record) {\n const priority = Math.min(5, Math.max(1, Number(body.priority) || 3));\n return {\n name: str(body.name).trim() || \"Receiver\",\n topic: str(body.topic).trim(),\n server: normalizeServer(str(body.server).trim() || \"https://ntfy.sh\"),\n priority,\n tags: str(body.tags).trim() || null,\n events: eventsFromBody(body),\n enabled: body.enabled ? 1 : 0,\n };\n}\n\nexport const admin = new Hono();\n\nadmin.use(\"*\", async (c, next) => {\n const result = await requireAdmin(c.req.raw);\n if (result === \"anonymous\") {\n // Remember where they were headed — std/oauth always returns to \"/\".\n const url = new URL(c.req.url);\n return loginAndReturnTo(url.pathname + url.search);\n }\n if (result === \"forbidden\") {\n return html(\n \n

You don't have access to this dashboard.

\n Ask the owner to add your Val Town username to the{\" \"}\n ADMIN_USERNAMES environment variable.\n

\n \n

\n ,\n 403,\n );\n }\n c.set(\"user\", result);\n await next();\n});\n\n/* ------------------------------------ page ------------------------------------- */\n\nadmin.get(\"/\", async (c) => {\n const user = c.get(\"user\") as AdminUser;\n const [receivers, subscribers, total, deliveries] = await Promise.all([\n db.listReceivers(),\n db.listSubscribers(200),\n db.countSubscribers(),\n db.recentDeliveries(25),\n ]);\n\n return html(\n \n \n \n \n ,\n );\n});\n\n/* ---------------------------------- receivers ---------------------------------- */\n\nadmin.post(\"/receivers\", async (c) => {\n const body = await c.req.parseBody({ all: true });\n const input = receiverFromBody(body);\n if (!input.topic) return back(\"err\", \"A topic is required\");\n await db.createReceiver({ ...input, auth: str(body.auth).trim() || null });\n return back(\"ok\", `Receiver “${input.name}” added`);\n});\n\nadmin.post(\"/receivers/:id\", async (c) => {\n const id = c.req.param(\"id\");\n const body = await c.req.parseBody({ all: true });\n const action = str(body._action);\n\n const receiver = await db.getReceiver(id);\n if (!receiver) return back(\"err\", \"Receiver not found\");\n\n if (action === \"delete\") {\n await db.deleteReceiver(id);\n return back(\"ok\", `Receiver “${receiver.name}” deleted`);\n }\n\n if (action === \"test\") {\n const result = await sendTest(receiver, new URL(c.req.url).origin);\n return result.ok\n ? back(\"ok\", `Test sent to ${receiver.server}/${receiver.topic}`)\n : back(\"err\", `Test failed (${result.status ?? \"network\"}): ${result.error ?? \"unknown error\"}`);\n }\n\n const input = receiverFromBody(body);\n if (!input.topic) return back(\"err\", \"A topic is required\");\n\n // Auth: blank input keeps the stored secret, \"clear_auth\" removes it.\n const newAuth = str(body.auth).trim();\n const auth = body.clear_auth ? null : newAuth ? newAuth : undefined;\n\n await db.updateReceiver(id, { ...input, ...(auth === undefined ? {} : { auth }) });\n return back(\"ok\", `Receiver “${input.name}” saved`);\n});\n\n/* --------------------------------- subscribers --------------------------------- */\n\nadmin.post(\"/subscribers/:id\", async (c) => {\n const id = c.req.param(\"id\");\n const body = await c.req.parseBody();\n const action = str(body._action);\n\n if (action === \"delete\") {\n await db.deleteSubscriber(id);\n return back(\"ok\", `Signup #${id} deleted`);\n }\n\n await db.updateSubscriber(id, { developer_notes: str(body.developer_notes) });\n return back(\"ok\", `Notes saved for #${id}`);\n});\n",[],[199,254],"6eb89ce3-a586-46a0-aa2d-100ac5a04ae3","Subscribers.tsx","fbee90e4-9af8-11f1-96e3-1607ee4eb77e",22,["D",1787052959417],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport type { Subscriber } from \"../db.ts\";\nimport { Card } from \"./Layout.tsx\";\n\nfunction DetailsCell({ details }: { details: Record | null }) {\n if (!details || !Object.keys(details).length) {\n return —;\n }\n return (\n

\n {Object.keys(details).length} field{Object.keys(details).length === 1 ? \"\" : \"s\"}\n

\n        {JSON.stringify(details, null, 2)}\n

\n );\n}\n\nexport function Subscribers(\n { subscribers, total }: { subscribers: Subscriber[]; total: number },\n) {\n return (\n \n {subscribers.length === 0\n ?

No signups yet.

\n : (\n

\n \n \n \n \n \n \n \n \n \n \n \n \n {subscribers.map((s) => (\n \n \n \n \n \n \n \n \n ))}\n \n

#	Email	Details	Created (UTC)	Notes
{s.id}	{s.email}	\n \n	{s.created_at}	\n \n \n \n Save\n \n \n	\n \n \n Delete\n \n \n

\n )}\n \n );\n}\n",[],[199,263],"939db9bf-ce5e-45c8-9a69-4097026e56b1","Receivers.tsx","f55367e6-9af8-11f1-9164-1607ee4eb77e",21,["D",1787052948354],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport type { Delivery, Receiver } from \"../db.ts\";\nimport { Card } from \"./Layout.tsx\";\n\nconst PRIORITIES = [\n [1, \"1 · min\"],\n [2, \"2 · low\"],\n [3, \"3 · default\"],\n [4, \"4 · high\"],\n [5, \"5 · max\"],\n] as const;\n\nconst input =\n \"w-full px-2.5 py-1.5 rounded-md border border-slate-300 text-sm focus:outline-none focus:ring-2 focus:ring-slate-400\";\nconst label = \"block text-xs font-medium text-slate-500 mb-1\";\n\nfunction Field(\n { name, title, defaultValue, placeholder, type = \"text\", hint, required, className = \"\" }: {\n name: string;\n title: string;\n defaultValue?: string | number | null;\n placeholder?: string;\n type?: string;\n hint?: string;\n required?: boolean;\n className?: string;\n },\n) {\n return (\n

\n {title}\n \n {hint &&

{hint}

}\n

\n );\n}\n\nfunction EventChecks({ events }: { events: string }) {\n const list = events.split(\",\").map(e => e.trim());\n return (\n

\n Notify on\n

\n \n \n New signup\n \n \n \n Details updated\n \n

\n );\n}\n\nfunction ReceiverFields({ receiver }: { receiver?: Receiver }) {\n return (\n <>\n

\n \n \n \n

\n Priority\n \n

\n \n \n

\n \n

\n \n \n Enabled\n \n {receiver?.auth && (\n \n \n Clear saved auth\n \n )}\n

\n \n );\n}\n\nfunction StatusDot({ ok }: { ok: boolean | null }) {\n const color = ok === null ? \"bg-slate-300\" : ok ? \"bg-emerald-500\" : \"bg-red-500\";\n return ;\n}\n\nexport function Receivers(\n { receivers, deliveries }: { receivers: Receiver[]; deliveries: Delivery[] },\n) {\n const lastByReceiver = new Map();\n for (const d of deliveries) {\n if (d.receiver_id !== null && !lastByReceiver.has(d.receiver_id)) lastByReceiver.set(d.receiver_id, d);\n }\n\n return (\n \n {receivers.length === 0 && (\n

\n No receivers yet — add one below, then subscribe to that topic in the{\" \"}\n ntfy web app or mobile app.\n

\n )}\n\n

\n {receivers.map((receiver) => {\n const last = lastByReceiver.get(receiver.id);\n return (\n \n

\n \n {receiver.name}\n \n {receiver.server.replace(/^https?:\\/\\//, \"\")}/{receiver.topic}\n \n {!receiver.enabled && (\n \n disabled\n \n )}\n

\n {last\n ? last.ok\n ? `last ${last.event} ok · ${last.created_at}`\n : `last ${last.event} failed (${last.status ?? \"network\"}) · ${last.created_at}`\n : \"no deliveries yet\"}\n

\n\n \n\n

\n \n Save\n \n \n Send test\n \n \n Delete\n \n

\n \n );\n })}\n

\n\n

\n + Add receiver\n

\n \n );\n}\n\nexport function Deliveries({ deliveries }: { deliveries: Delivery[] }) {\n if (!deliveries.length) return null;\n return (\n \n

\n \n \n \n \n \n \n \n \n \n \n \n {deliveries.map((d) => (\n \n \n \n \n \n \n \n ))}\n \n

When (UTC)	Receiver	Event	Signup	Result
{d.created_at}	{d.receiver_name}	{d.event}	\n {d.subscriber_id ? `#${d.subscriber_id}` : \"—\"}\n	\n {d.ok\n ? ok\n : (\n \n {d.status ?? \"network\"} {d.error ? `· ${d.error}` : \"\"}\n \n )}\n

\n \n );\n}\n",[],[199,271],"246d6b1f-bdb2-46dc-aaa0-dfcdeb912df0","Layout.tsx","dd81d7ce-9af8-11f1-8710-1607ee4eb77e",["D",1787052908390],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\n\nexport interface FlashMessage {\n kind: \"ok\" | \"error\";\n text: string;\n}\n\nexport function Layout(\n { title, user, flash, children }: {\n title: string;\n user: { username: string | null; profileImageUrl?: string | null };\n flash?: FlashMessage | null;\n children: React.ReactNode;\n },\n) {\n return (\n \n \n \n \n {title}\n \n \n \n \n

📬 Newsletter Signups

\n Review submissions and configure ntfy.sh receivers\n

\n @{user.username ?? \"unknown\"}\n

\n\n {flash && (\n \n {flash.text}\n

\n )}\n\n {children}\n\n \n \n \n \n );\n}\n\nexport function Card(\n { title, subtitle, children }: {\n title: string;\n subtitle?: string;\n children: React.ReactNode;\n },\n) {\n return (\n

{title}

\n {subtitle &&

{subtitle}

}\n

{children}

\n );\n}\n",[],[199,279],["D",1787052908390],[215,216,217,218],[199],["D",1769884195507],["D",1789447273596],{"_104":103,"_111":107},{"_104":103,"_105":-5,"_106":107,"_19":61,"_108":109,"_110":32},{"_13":93,"_38":94,"_49":48,"_95":50,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":51,"_102":103},"ctx",{"_86":-5,"_131":326,"_327":328,"_329":330,"_331":32,"_332":32,"_333":32,"_334":30,"_335":-5,"_336":-7,"_337":-7,"_338":67,"_339":32,"_340":32,"_341":-5,"_342":32,"_343":32,"_344":32,"_345":-5},"ENV",{"_297":298,"_299":300,"_301":94,"_302":303,"_304":305,"_306":307,"_308":309,"_310":311,"_312":313,"_314":315,"_316":317,"_318":319,"_320":321,"_322":323,"_324":325},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v35