[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_305":306,"_307":308},"routes/_app.x.$handle.$name",{"_104":103,"_38":51,"_112":94,"_33":113,"_13":14,"_114":-5,"_11":115,"_116":117,"_118":119,"_120":121,"_122":123,"_26":-5,"_124":-5,"_125":-5,"_126":32,"_127":128,"_129":30,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_49":50,"_38":51,"_44":52,"_53":-5,"_54":32,"_55":56,"_57":56,"_58":59,"_60":-5,"_19":61,"_62":-5,"_63":32,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":32},"version",39,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","bec45bcc-0000-459f-8bf6-bfdeaeefa581","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":32,"_33":34,"_35":34},"file",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":14,"_47":48,"_29":32},"previous","deleted",true,"deletedHere",false,"path","scripts/filter-check.ts","latestPath","fileId","252d1e06-9b00-11f1-bfe8-1607ee4eb77e","name","filter-check.ts","fileType","script","content","/** Temporary: exercises filter parsing + evaluation semantics. */\nimport { evaluateFilter, parseFilter, type Scope } from \"../filter.ts\";\n\nlet pass = 0;\nlet fail = 0;\n\nfunction check(label: string, actual: unknown, expected: unknown) {\n const ok = JSON.stringify(actual) === JSON.stringify(expected);\n ok ? pass++ : fail++;\n console.log(ok ? \"✅\" : `❌ ${label}: got ${JSON.stringify(actual)}, want ${JSON.stringify(expected)}`, ok ? label : \"\");\n}\n\nfunction sends(filter: string, scope: Scope, mode: \"all\" | \"any\" = \"all\") {\n const d = evaluateFilter(parseFilter(filter), mode, scope);\n return d.send;\n}\n\nconst signup: Scope = {\n email: \"dana@Acme.com\",\n details: {\n plan: \"Enterprise\",\n seats: 25,\n company: \"Acme\",\n blank: \" \",\n optin: false,\n zero: 0,\n interests: [\"ai\", \"design\"],\n tags: [],\n utm: { source: \"hn\", campaign: \"launch\" },\n answers: [{ value: \"yes\" }, { value: \"no\" }],\n },\n};\nconst bare: Scope = { email: \"bob@example.com\", details: null };\n\n/* ---------------------------------- parsing ---------------------------------- */\ncheck(\"parses 3 rules\", parseFilter(\"plan = pro\\n# note\\n\\ncompany exists\\nseats >= 5\").rules.length, 3);\ncheck(\"no-space syntax\", parseFilter(\"plan=pro\").rules[0], { path: \"plan\", op: \"eq\", value: \"pro\", source: \"plan=pro\" });\ncheck(\"quoted value keeps spaces\", parseFilter('company = \"Big Co\"').rules[0].value, \"Big Co\");\ncheck(\"trailing comment stripped\", parseFilter(\"plan = pro # only pro\").rules[0].value, \"pro\");\ncheck(\"missing value errors\", parseFilter(\"plan =\").errors.length, 1);\ncheck(\"non-numeric compare errors\", parseFilter(\"seats > many\").errors.length, 1);\ncheck(\"unknown operator errors\", parseFilter(\"plan wat pro\").errors[0].message.includes(\"unknown operator\"), true);\ncheck(\"garbage line errors\", parseFilter(\"!!!\").errors.length, 1);\ncheck(\"exists ignores stray value\", parseFilter(\"company exists yes\").rules[0].op, \"exists\");\n\n/* --------------------------------- evaluation -------------------------------- */\ncheck(\"no filter → send\", sends(\"\", signup), true);\ncheck(\"case-insensitive equals\", sends(\"plan = enterprise\", signup), true);\ncheck(\"wrong value → skip\", sends(\"plan = pro\", signup), false);\ncheck(\"exists on present\", sends(\"company exists\", signup), true);\ncheck(\"exists on whitespace-only → skip\", sends(\"blank exists\", signup), false);\ncheck(\"missing on absent\", sends(\"phone missing\", signup), true);\ncheck(\"missing on empty array\", sends(\"tags missing\", signup), true);\ncheck(\"false is present\", sends(\"optin exists\", signup), true);\ncheck(\"zero is present\", sends(\"zero exists\", signup), true);\ncheck(\"boolean equality\", sends(\"optin = false\", signup), true);\ncheck(\"numeric string equality\", sends(\"seats = 25\", signup), true);\ncheck(\"numeric >=\", sends(\"seats >= 25\", signup), true);\ncheck(\"numeric > fails\", sends(\"seats > 25\", signup), false);\ncheck(\"numeric compare on non-number → skip\", sends(\"company > 5\", signup), false);\ncheck(\"array any-element equals\", sends(\"interests = ai\", signup), true);\ncheck(\"array any-element miss\", sends(\"interests = crypto\", signup), false);\ncheck(\"in list\", sends(\"plan in pro, enterprise\", signup), true);\ncheck(\"in list miss\", sends(\"plan in pro, starter\", signup), false);\ncheck(\"contains on email\", sends(\"email ~ @acme.com\", signup), true);\ncheck(\"contains miss\", sends(\"email ~ @other.com\", signup), false);\ncheck(\"nested dot path\", sends(\"utm.source = hn\", signup), true);\ncheck(\"array index path\", sends(\"answers[0].value = yes\", signup), true);\ncheck(\"array index path miss\", sends(\"answers[1].value = yes\", signup), false);\ncheck(\"deep path on absent parent\", sends(\"nope.deeper = 1\", signup), false);\ncheck(\"neq true when absent (documented)\", sends(\"phone != 555\", signup), true);\ncheck(\"neq + exists guards presence\", sends(\"phone != 555\\nphone exists\", signup), false);\n\n/* ------------------------------- modes + errors ------------------------------ */\ncheck(\"all: one miss → skip\", sends(\"plan = enterprise\\nphone exists\", signup, \"all\"), false);\ncheck(\"all: both hit → send\", sends(\"plan = enterprise\\ncompany exists\", signup, \"all\"), true);\ncheck(\"any: one hit → send\", sends(\"plan = starter\\ncompany exists\", signup, \"any\"), true);\ncheck(\"any: none hit → skip\", sends(\"plan = starter\\nphone exists\", signup, \"any\"), false);\ncheck(\"broken filter fails open\", sends(\"plan ===\", signup), true);\ncheck(\"filter on signup with no details\", sends(\"company exists\", bare), false);\ncheck(\"email filter works without details\", sends(\"email ~ example.com\", bare), true);\n\n/* --------------------------------- reasons ---------------------------------- */\nconst skip = evaluateFilter(parseFilter(\"plan = pro\"), \"all\", signup);\nconsole.log(\"skip reason:\", skip.reason);\ncheck(\"skip reason names actual value\", skip.reason.includes(\"Enterprise\"), true);\nconst errored = evaluateFilter(parseFilter(\"plan ===\"), \"all\", signup);\nconsole.log(\"error reason:\", errored.reason);\ncheck(\"error outcome\", errored.outcome, \"error\");\n\nconsole.log(`\\n${pass} passed, ${fail} failed`);\n","createdAt",["D",1787056035113],"branchVersion","branchId","d72d2544-fed2-11f0-a1dd-42dde27851f2","id","d72cb6b8-fed2-11f0-a1dd-42dde27851f2","newsletter-signup",["D",1769884195507],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Signup API with ntfy push alerts and an admin dashboard","imageUrl","c821e8f7-4cc4-4c23-96f1-319b8f33d4b7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","6b193d60-e165-45a9-869c-c3f886455f3e","tursoName","d72cb6b8fed211f0a1dd42dde27851f2","tursoHostname","d72cb6b8fed211f0a1dd42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789447273596],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_111":107},"org",{"_104":103,"_105":-5,"_106":107,"_19":61,"_108":109,"_110":32},"branch",{"_13":93,"_38":94,"_49":48,"_95":50,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":51,"_102":103},"isOwned",51,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","colel","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ6RVZCOExVNXBIT3FrVDh5a0VZQTNRRG5ycCJ9","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_49":50,"_38":51,"_44":300,"_53":-5,"_54":32,"_55":56,"_57":56,"_58":59,"_60":-5,"_19":61,"_62":-5,"_63":32,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":301,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":302,"_88":303,"_90":304,"_92":32},"tree",[223,228,230,231,232,233,234,235,236],"files",[223,224,225,226,227,228,229,230,231,232,233,234,235,236],"counts",{"_212":67,"_213":214,"_215":67,"_216":217,"_218":219},"contents",[134,135,136,137,138,139,140,141,142],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_49":206,"_38":207,"_36":208,"_146":-5,"_47":48,"_46":209,"_148":30,"_44":210,"_13":67,"_40":204,"_42":-5,"_29":32,"_152":-5,"_33":211},{"_49":199,"_38":200,"_36":201,"_146":-5,"_47":48,"_46":202,"_148":30,"_44":203,"_13":67,"_40":204,"_42":-5,"_29":32,"_152":-5,"_33":205},{"_49":191,"_38":192,"_36":193,"_146":-5,"_47":48,"_46":194,"_148":32,"_44":195,"_13":196,"_40":26,"_42":197,"_29":32,"_152":-5,"_33":198},{"_49":184,"_38":185,"_36":186,"_146":-5,"_47":48,"_46":187,"_148":30,"_44":188,"_13":67,"_40":41,"_42":189,"_29":32,"_152":-5,"_33":190},{"_49":177,"_38":178,"_36":179,"_146":-5,"_47":48,"_46":180,"_148":32,"_44":181,"_13":67,"_40":41,"_42":182,"_29":32,"_152":-5,"_33":183},{"_49":170,"_38":171,"_36":172,"_146":-5,"_47":48,"_46":173,"_148":32,"_44":174,"_13":67,"_40":41,"_42":175,"_29":32,"_152":-5,"_33":176},{"_49":161,"_38":162,"_36":163,"_146":-5,"_47":48,"_46":164,"_148":30,"_44":165,"_13":166,"_40":167,"_42":168,"_29":32,"_152":51,"_33":169},{"_49":154,"_38":155,"_36":156,"_146":-5,"_47":48,"_46":157,"_148":32,"_44":158,"_13":67,"_40":41,"_42":159,"_29":32,"_152":-5,"_33":160},{"_49":143,"_38":144,"_36":145,"_146":-5,"_47":48,"_46":147,"_148":30,"_44":149,"_13":150,"_40":41,"_42":151,"_29":32,"_152":-5,"_33":153},"3a591dfe-b686-44e1-a3b5-4aef78fe49a7","post-login.ts","51348738-9aff-11f1-9d2d-1607ee4eb77e","parentId",34,"latest",["D",1787055738792],3,"/**\n * Return-to-destination across the OAuth round trip.\n *\n * std/oauth's callback page always lands on \"/\" when login happens as a full-page\n * navigation (it only postMessages back when it was opened as a popup), and it has no\n * \"redirect back to X\" option. So we stash the intended path in a short-lived cookie\n * before sending the user to /auth/login, then resume it on the next visit to \"/\".\n */\n\nimport type { Context, Next } from \"npm:hono\";\nimport { getOAuthUserData } from \"https://esm.town/v/std/oauth/middleware.ts\";\n\nconst COOKIE = \"post_login_redirect\";\nconst MAX_AGE = 600; // 10 minutes — just long enough to finish logging in\n\nfunction readCookie(req: Request, name: string): string | null {\n const header = req.headers.get(\"Cookie\");\n if (!header) return null;\n for (const part of header.split(\";\")) {\n const [key, ...rest] = part.trim().split(\"=\");\n if (key === name) return rest.join(\"=\") || null;\n }\n return null;\n}\n\n/** Only same-origin absolute paths — never honour a full URL or protocol-relative path. */\nexport function safePath(raw: string): string | null {\n let value: string;\n try {\n value = decodeURIComponent(raw);\n } catch {\n return null;\n }\n if (!value.startsWith(\"/\") || value.startsWith(\"//\")) return null;\n return value;\n}\n\n/** 302 to the Val Town login flow, remembering where the user was headed. */\nexport function loginAndReturnTo(dest: string): Response {\n return new Response(null, {\n status: 302,\n headers: {\n \"Location\": \"/auth/login\",\n // SameSite=None (like std/oauth's own session cookie) so this survives the\n // login round trip even when the app is embedded in an iframe.\n \"Set-Cookie\":\n `${COOKIE}=${encodeURIComponent(dest)}; Path=/; HttpOnly; Secure; SameSite=None; Max-Age=${MAX_AGE}`,\n },\n });\n}\n\n/**\n * Mount on GET \"/\" ahead of the API docs route: if the visitor just came back from\n * login and has a pending destination, send them there instead.\n */\nexport async function resumeAfterLogin(c: Context, next: Next) {\n const cookie = readCookie(c.req.raw, COOKIE);\n const dest = cookie ? safePath(cookie) : null;\n\n if (dest && await getOAuthUserData(c.req.raw)) {\n return new Response(null, {\n status: 302,\n headers: {\n \"Location\": dest,\n \"Set-Cookie\": `${COOKIE}=; Path=/; HttpOnly; Secure; SameSite=None; Max-Age=0`,\n },\n });\n }\n\n await next();\n}\n","label",[144],"57e39e18-14b2-498a-add6-3e2db1aa84a9","ntfy.ts","c9b89cf0-9af8-11f1-9164-1607ee4eb77e",18,["D",1787052875199],"/**\n * ntfy.sh publishing.\n *\n * Uses ntfy's \"publish as JSON\" API: POST the message object (including `topic`)\n * to the server ROOT url — not the topic url.\n * https://docs.ntfy.sh/publish/#publish-as-json\n *\n * Auth (https://docs.ntfy.sh/publish/#authentication):\n * - access token -> Authorization: Bearer tk_…\n * - user:password -> Authorization: Basic base64(user:password)\n */\n\nimport {\n logDelivery,\n type NtfyEvent,\n type Receiver,\n receiversForEvent,\n type Subscriber,\n} from \"./db.ts\";\n\nexport interface NtfyMessage {\n topic: string;\n message: string;\n title?: string;\n tags?: string[];\n priority?: number;\n click?: string;\n markdown?: boolean;\n actions?: Array<{ action: string; label: string; url?: string; clear?: boolean }>;\n}\n\nexport interface PublishResult {\n ok: boolean;\n status: number | null;\n error: string | null;\n}\n\nfunction authHeader(auth: string | null): Record {\n const value = auth?.trim();\n if (!value) return {};\n // Access tokens are prefixed tk_; anything with a colon is user:password.\n if (value.startsWith(\"tk_\") || !value.includes(\":\")) {\n return { Authorization: `Bearer ${value}` };\n }\n return { Authorization: `Basic ${btoa(value)}` };\n}\n\nexport function normalizeServer(server: string): string {\n const trimmed = (server || \"https://ntfy.sh\").trim().replace(/\\/+$/, \"\");\n return /^https?:\\/\\//.test(trimmed) ? trimmed : `https://${trimmed}`;\n}\n\n/** Publish a single message to one receiver's server + topic. */\nexport async function publish(\n receiver: Pick,\n message: Omit & { tags?: string[] },\n): Promise {\n const body: NtfyMessage = {\n topic: receiver.topic.trim(),\n priority: receiver.priority,\n tags: message.tags ?? receiver.tags?.split(\",\").map(t => t.trim()).filter(Boolean),\n ...message,\n };\n\n try {\n const res = await fetch(normalizeServer(receiver.server) + \"/\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", ...authHeader(receiver.auth) },\n body: JSON.stringify(body),\n signal: AbortSignal.timeout(10_000),\n });\n if (!res.ok) {\n const text = (await res.text().catch(() => \"\")).slice(0, 300);\n return { ok: false, status: res.status, error: text || res.statusText };\n }\n await res.body?.cancel();\n return { ok: true, status: res.status, error: null };\n } catch (err: any) {\n return { ok: false, status: null, error: err?.message ?? String(err) };\n }\n}\n\nfunction formatDetails(details: Record | null): string {\n if (!details || !Object.keys(details).length) return \"\";\n return Object.entries(details)\n .map(([k, v]) => `- **${k}:** ${typeof v === \"object\" ? JSON.stringify(v) : String(v)}`)\n .join(\"\\n\");\n}\n\nfunction buildMessage(event: NtfyEvent, subscriber: Subscriber, adminUrl?: string) {\n const detailLines = formatDetails(subscriber.details);\n const title = event === \"signup\"\n ? \"New newsletter signup\"\n : `Signup details updated (#${subscriber.id})`;\n const lines = [\n subscriber.email,\n detailLines,\n `_#${subscriber.id} · ${subscriber.created_at} UTC_`,\n ].filter(Boolean);\n return {\n title,\n message: lines.join(\"\\n\"),\n markdown: true,\n click: adminUrl,\n actions: adminUrl\n ? [{ action: \"view\", label: \"Open admin\", url: adminUrl, clear: false }]\n : undefined,\n };\n}\n\n/**\n * Fan a signup event out to every enabled receiver listening for it.\n * Never throws — failures are logged to ntfy_deliveries so the admin page can show them.\n */\nexport async function notify(\n event: NtfyEvent,\n subscriber: Subscriber,\n origin?: string,\n): Promise {\n const receivers = await receiversForEvent(event).catch(() => []);\n if (!receivers.length) return [];\n\n const adminUrl = origin ? `${origin.replace(/\\/+$/, \"\")}/admin` : undefined;\n const payload = buildMessage(event, subscriber, adminUrl);\n\n const results = await Promise.all(receivers.map(async (receiver) => {\n const result = await publish(receiver, payload);\n if (!result.ok) {\n console.error(`ntfy: ${receiver.name} (${receiver.topic}) failed:`, result.status, result.error);\n }\n await logDelivery({\n receiver_id: receiver.id,\n receiver_name: receiver.name,\n subscriber_id: subscriber.id,\n event,\n ok: result.ok,\n status: result.status,\n error: result.error,\n }).catch(() => {});\n return result;\n }));\n\n return results;\n}\n\n/** Send a \"does this config work?\" message to one receiver. */\nexport async function sendTest(receiver: Receiver, origin?: string): Promise {\n const adminUrl = origin ? `${origin.replace(/\\/+$/, \"\")}/admin` : undefined;\n const result = await publish(receiver, {\n title: \"Newsletter signup test\",\n message: `Test notification for receiver **${receiver.name}**. If you can read this, alerts work. 🎉`,\n markdown: true,\n click: adminUrl,\n });\n await logDelivery({\n receiver_id: receiver.id,\n receiver_name: receiver.name,\n subscriber_id: null,\n event: \"test\",\n ok: result.ok,\n status: result.status,\n error: result.error,\n }).catch(() => {});\n return result;\n}\n",[155],"d965e792-2865-42ad-86c7-3fecac2e98be","main.ts","d73071ea-fed2-11f0-a1dd-42dde27851f2",31,["D",1787055692887],16,"http","/**\n * Newsletter Signup API + ntfy.sh alerts + admin dashboard.\n *\n * Routes:\n * - POST /subscribe public signup, pushes to every enabled ntfy receiver\n * - PUT /subscribe/:id/details public, merge extra info into a signup\n * - GET /subscribers list signups (X-API-Key: ADMIN_API_KEY)\n * - PUT /subscribers/:id update details / developer notes (X-API-Key)\n * - DELETE /subscribers/:id remove a signup (X-API-Key)\n * - GET /admin dashboard behind Val Town login\n * - GET /auth/login|callback, POST /auth/logout provided by std/oauth\n *\n * Environment variables:\n * - ADMIN_API_KEY (optional) enables the X-API-Key JSON admin endpoints\n * - ADMIN_USERNAMES (optional) extra Val Town usernames allowed into /admin,\n * comma-separated. Members of this val's org always have access.\n *\n * ntfy receivers are configured in the dashboard, not in env vars — see db.ts / ntfy.ts.\n */\n\nimport { Hono } from \"npm:hono\";\nimport { oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { admin } from \"./admin/routes.tsx\";\nimport { api } from \"./api.ts\";\nimport { resumeAfterLogin } from \"./post-login.ts\";\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.route(\"/admin\", admin);\n// Login always returns to \"/\" — bounce back to wherever the user was headed.\napp.get(\"/\", resumeAfterLogin);\napp.route(\"/\", api);\n\nexport default oauthMiddleware(app.fetch);\n",[162],"395d7521-db77-46cd-839b-212294d142b9","filter.ts","1685ed6a-9b00-11f1-bb89-1607ee4eb77e",38,["D",1787056010527],"/**\n * Per-receiver notification filters.\n *\n * A filter is plain text, one rule per line, so it round-trips through a textarea with no\n * client-side JS and stays readable in the database:\n *\n * plan = enterprise # equals (case-insensitive, numeric-aware)\n * company exists # field was provided and isn't empty\n * phone missing # field absent / null / empty\n * country in US, CA, MX # any of\n * email ~ @acme.com # contains\n * seats >= 10 # numeric comparison\n * # comments and blank lines are ignored\n *\n * Paths are resolved against the signup's `details` object, plus `email` at the top level.\n * Dot/bracket paths reach into nested data: `utm.source`, `answers[0].value`.\n *\n * Design decisions worth knowing:\n * - A filter that fails to parse FAILS OPEN (the notification is still sent, and the error is\n * surfaced in the dashboard). Losing a signup alert to a typo is worse than an extra push.\n * - Array values match if ANY element matches, so `interests = ai` works on `[\"ai\",\"design\"]`.\n * - `!=` is also true when the field is absent. Pair it with `exists` if you need presence.\n * - `false` and `0` count as present — they were deliberately submitted.\n */\n\nexport type Op =\n | \"exists\"\n | \"missing\"\n | \"eq\"\n | \"neq\"\n | \"contains\"\n | \"in\"\n | \"gt\"\n | \"gte\"\n | \"lt\"\n | \"lte\";\n\nexport type MatchMode = \"all\" | \"any\";\n\nexport interface Rule {\n path: string;\n op: Op;\n value: string;\n source: string;\n}\n\nexport interface FilterError {\n line: number;\n source: string;\n message: string;\n}\n\nexport interface ParsedFilter {\n rules: Rule[];\n errors: FilterError[];\n}\n\nexport interface Scope {\n email: string;\n details: Record | null;\n}\n\nexport type Decision = {\n /** Should the notification go out? */\n send: boolean;\n outcome: \"no-filter\" | \"match\" | \"no-match\" | \"error\";\n /** Human-readable explanation, shown in the dashboard and delivery log. */\n reason: string;\n};\n\nconst OP_ALIASES: Record = {\n \"=\": \"eq\",\n \"==\": \"eq\",\n \"is\": \"eq\",\n \"!=\": \"neq\",\n \"<>\": \"neq\",\n \"isnt\": \"neq\",\n \"~\": \"contains\",\n \"contains\": \"contains\",\n \"includes\": \"contains\",\n \"in\": \"in\",\n \">\": \"gt\",\n \">=\": \"gte\",\n \"<\": \"lt\",\n \"<=\": \"lte\",\n \"exists\": \"exists\",\n \"present\": \"exists\",\n \"has\": \"exists\",\n \"missing\": \"missing\",\n \"absent\": \"missing\",\n \"empty\": \"missing\",\n};\n\nconst OP_LABELS: Record = {\n exists: \"exists\",\n missing: \"missing\",\n eq: \"=\",\n neq: \"!=\",\n contains: \"~\",\n in: \"in\",\n gt: \">\",\n gte: \">=\",\n lt: \"<\",\n lte: \"<=\",\n};\n\nconst NUMERIC_OPS: Op[] = [\"gt\", \"gte\", \"lt\", \"lte\"];\nconst VALUELESS_OPS: Op[] = [\"exists\", \"missing\"];\n\n// path, then a symbol or word operator, then the rest of the line as the value.\nconst LINE_RE = /^([A-Za-z0-9_\\-.[\\]]+)\\s*(!=|<>|>=|<=|==|=|~|>|<|[A-Za-z]+)\\s*(.*)$/;\n\nfunction unquote(value: string): string {\n const trimmed = value.trim();\n if (trimmed.length >= 2) {\n const first = trimmed[0];\n const last = trimmed[trimmed.length - 1];\n if ((first === '\"' || first === \"'\") && first === last) return trimmed.slice(1, -1);\n }\n return trimmed;\n}\n\nexport function parseFilter(raw: string | null | undefined): ParsedFilter {\n const rules: Rule[] = [];\n const errors: FilterError[] = [];\n\n (raw ?? \"\").split(/\\r?\\n/).forEach((line, index) => {\n const source = line.trim();\n if (!source || source.startsWith(\"#\")) return;\n\n const lineNumber = index + 1;\n const match = LINE_RE.exec(source);\n if (!match) {\n errors.push({\n line: lineNumber,\n source,\n message: \"expected `field operator value`, e.g. `plan = enterprise`\",\n });\n return;\n }\n\n const [, path, rawOp, rest] = match;\n const op = OP_ALIASES[rawOp.toLowerCase()];\n if (!op) {\n errors.push({ line: lineNumber, source, message: `unknown operator “${rawOp}”` });\n return;\n }\n\n // Strip trailing comments from the value, but only when clearly a comment.\n const withoutComment = rest.replace(/\\s+#.*$/, \"\");\n const value = VALUELESS_OPS.includes(op) ? \"\" : unquote(withoutComment);\n\n if (!VALUELESS_OPS.includes(op) && value === \"\") {\n errors.push({ line: lineNumber, source, message: `“${rawOp}” needs a value` });\n return;\n }\n if (NUMERIC_OPS.includes(op) && !Number.isFinite(Number(value))) {\n errors.push({\n line: lineNumber,\n source,\n message: `“${rawOp}” needs a number, got “${value}”`,\n });\n return;\n }\n if (op === \"in\" && splitList(value).length === 0) {\n errors.push({ line: lineNumber, source, message: \"`in` needs a comma-separated list\" });\n return;\n }\n\n rules.push({ path, op, value, source });\n });\n\n return { rules, errors };\n}\n\nfunction splitList(value: string): string[] {\n return value.split(\",\").map(v => unquote(v)).filter(v => v !== \"\");\n}\n\n/** Signup fields visible to filters: everything in `details`, plus `email`. */\nexport function buildScope(scope: Scope): Record {\n // details wins on collision — a submitted `details.email` is the more specific value.\n return { email: scope.email, ...(scope.details ?? {}) };\n}\n\nfunction tokenizePath(path: string): string[] {\n return path\n .replace(/\\[(\\d+)\\]/g, \".$1\")\n .split(\".\")\n .filter(segment => segment !== \"\");\n}\n\nexport function resolvePath(path: string, root: Record): unknown {\n let current: unknown = root;\n for (const segment of tokenizePath(path)) {\n if (current === null || current === undefined) return undefined;\n if (Array.isArray(current)) {\n const index = Number(segment);\n if (!Number.isInteger(index)) return undefined;\n current = current[index];\n continue;\n }\n if (typeof current !== \"object\") return undefined;\n current = (current as Record)[segment];\n }\n return current;\n}\n\n/** Present = supplied and not blank. `false` and `0` are present; \"\" and [] are not. */\nexport function isPresent(value: unknown): boolean {\n if (value === undefined || value === null) return false;\n if (typeof value === \"string\") return value.trim() !== \"\";\n if (Array.isArray(value)) return value.some(isPresent);\n if (typeof value === \"object\") return Object.keys(value as object).length > 0;\n return true;\n}\n\nfunction normalize(value: unknown): string {\n if (typeof value === \"string\") return value.trim().toLowerCase();\n if (value === null || value === undefined) return \"\";\n if (typeof value === \"object\") return JSON.stringify(value).toLowerCase();\n return String(value).toLowerCase();\n}\n\nfunction equals(value: unknown, target: string): boolean {\n if (Array.isArray(value)) return value.some(item => equals(item, target));\n const left = normalize(value);\n const right = target.trim().toLowerCase();\n if (left === right) return true;\n const leftNumber = Number(left);\n const rightNumber = Number(right);\n return left !== \"\" && right !== \"\" &&\n Number.isFinite(leftNumber) && Number.isFinite(rightNumber) &&\n leftNumber === rightNumber;\n}\n\nfunction containsText(value: unknown, target: string): boolean {\n if (Array.isArray(value)) return value.some(item => containsText(item, target));\n if (!isPresent(value)) return false;\n return normalize(value).includes(target.trim().toLowerCase());\n}\n\nfunction compareNumeric(value: unknown, target: string, op: Op): boolean {\n if (Array.isArray(value)) return value.some(item => compareNumeric(item, target, op));\n const left = typeof value === \"boolean\" ? NaN : Number(normalize(value));\n const right = Number(target);\n if (!Number.isFinite(left) || !Number.isFinite(right)) return false;\n switch (op) {\n case \"gt\":\n return left > right;\n case \"gte\":\n return left >= right;\n case \"lt\":\n return left < right;\n case \"lte\":\n return left <= right;\n default:\n return false;\n }\n}\n\nexport function testRule(rule: Rule, root: Record): boolean {\n const value = resolvePath(rule.path, root);\n switch (rule.op) {\n case \"exists\":\n return isPresent(value);\n case \"missing\":\n return !isPresent(value);\n case \"eq\":\n return equals(value, rule.value);\n case \"neq\":\n // Absent counts as \"not equal\" — documented, pair with `exists` if you need presence.\n return !equals(value, rule.value);\n case \"contains\":\n return containsText(value, rule.value);\n case \"in\":\n return splitList(rule.value).some(item => equals(value, item));\n case \"gt\":\n case \"gte\":\n case \"lt\":\n case \"lte\":\n return compareNumeric(value, rule.value, rule.op);\n default:\n return false;\n }\n}\n\nexport function ruleToText(rule: Rule): string {\n const label = OP_LABELS[rule.op];\n return VALUELESS_OPS.includes(rule.op)\n ? `${rule.path} ${label}`\n : `${rule.path} ${label} ${rule.value}`;\n}\n\nfunction preview(value: unknown): string {\n if (value === undefined) return \"absent\";\n if (value === null) return \"null\";\n const text = typeof value === \"string\" ? value : JSON.stringify(value);\n const trimmed = String(text);\n return trimmed.length > 60 ? `${trimmed.slice(0, 57)}…` : trimmed;\n}\n\n/** Decide whether a receiver should be notified about this signup. */\nexport function evaluateFilter(\n parsed: ParsedFilter,\n mode: MatchMode,\n scope: Scope,\n): Decision {\n if (parsed.errors.length) {\n const first = parsed.errors[0];\n return {\n send: true,\n outcome: \"error\",\n reason: `filter error on line ${first.line} (${first.message}) — sent anyway`,\n };\n }\n\n if (!parsed.rules.length) {\n return { send: true, outcome: \"no-filter\", reason: \"no filter\" };\n }\n\n const root = buildScope(scope);\n const results = parsed.rules.map(rule => ({ rule, pass: testRule(rule, root) }));\n\n if (mode === \"any\") {\n const hit = results.find(r => r.pass);\n if (hit) {\n return { send: true, outcome: \"match\", reason: `matched ${ruleToText(hit.rule)}` };\n }\n return {\n send: false,\n outcome: \"no-match\",\n reason: `no rule matched (${parsed.rules.length} tried)`,\n };\n }\n\n const miss = results.find(r => !r.pass);\n if (miss) {\n const actual = preview(resolvePath(miss.rule.path, root));\n return {\n send: false,\n outcome: \"no-match\",\n reason: `failed ${ruleToText(miss.rule)} — ${miss.rule.path} is ${actual}`,\n };\n }\n return {\n send: true,\n outcome: \"match\",\n reason: `matched all ${parsed.rules.length} rule${parsed.rules.length === 1 ? \"\" : \"s\"}`,\n };\n}\n\n/** Short label for the dashboard, e.g. \"2 rules · all must match\". */\nexport function summarizeFilter(raw: string | null, mode: MatchMode): string {\n const parsed = parseFilter(raw);\n if (parsed.errors.length) {\n return `${parsed.errors.length} error${parsed.errors.length === 1 ? \"\" : \"s\"} — sends everything`;\n }\n if (!parsed.rules.length) return \"no filter — notifies on every matching event\";\n const count = `${parsed.rules.length} rule${parsed.rules.length === 1 ? \"\" : \"s\"}`;\n return mode === \"any\" ? `${count} · any may match` : `${count} · all must match`;\n}\n",[171],"c50b37d2-7a79-4c51-a698-277f271e418f","db.ts","bddbfe22-9af8-11f1-9164-1607ee4eb77e",17,["D",1787052855294],"/**\n * Database schema + queries.\n *\n * Tables:\n * - newsletter_subscribers: signups (email + flexible JSON details + notes)\n * - ntfy_receivers: configurable ntfy.sh destinations for new-submission alerts\n * - ntfy_deliveries: audit log of notification attempts\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type NtfyEvent = \"signup\" | \"details\";\n\nexport interface Subscriber {\n id: number;\n email: string;\n details: Record | null;\n developer_notes: string | null;\n created_at: string;\n updated_at: string;\n}\n\nexport interface Receiver {\n id: number;\n name: string;\n server: string;\n topic: string;\n priority: number;\n tags: string | null;\n /** ntfy access token (tk_…) or \"user:password\" for basic auth. */\n auth: string | null;\n /** Comma-separated list of NtfyEvent values. */\n events: string;\n enabled: number;\n created_at: string;\n updated_at: string;\n}\n\nexport interface Delivery {\n id: number;\n receiver_id: number | null;\n receiver_name: string;\n subscriber_id: number | null;\n event: string;\n ok: number;\n status: number | null;\n error: string | null;\n created_at: string;\n}\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS newsletter_subscribers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT NOT NULL,\n details TEXT,\n developer_notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ntfy_receivers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n server TEXT NOT NULL DEFAULT 'https://ntfy.sh',\n topic TEXT NOT NULL,\n priority INTEGER NOT NULL DEFAULT 3,\n tags TEXT,\n auth TEXT,\n events TEXT NOT NULL DEFAULT 'signup',\n enabled INTEGER NOT NULL DEFAULT 1,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ntfy_deliveries (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n receiver_id INTEGER,\n receiver_name TEXT NOT NULL,\n subscriber_id INTEGER,\n event TEXT NOT NULL,\n ok INTEGER NOT NULL,\n status INTEGER,\n error TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\nfunction parseDetails(raw: unknown): Record | null {\n if (!raw || typeof raw !== \"string\") return null;\n try {\n return JSON.parse(raw);\n } catch {\n return { _unparsed: raw };\n }\n}\n\nfunction toSubscriber(row: any): Subscriber {\n return {\n id: Number(row.id),\n email: String(row.email),\n details: parseDetails(row.details),\n developer_notes: row.developer_notes ?? null,\n created_at: String(row.created_at),\n updated_at: String(row.updated_at),\n };\n}\n\n/* ---------------------------------- subscribers --------------------------------- */\n\nexport async function insertSubscriber(email: string, details: unknown): Promise {\n const res = await sqlite.execute({\n sql: \"INSERT INTO newsletter_subscribers (email, details) VALUES (?, ?)\",\n args: [email, details ? JSON.stringify(details) : null],\n });\n return Number(res.lastInsertRowid);\n}\n\nexport async function getSubscriber(id: number | string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n return res.rows.length ? toSubscriber(res.rows[0]) : null;\n}\n\nexport async function listSubscribers(limit = 500): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM newsletter_subscribers ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return res.rows.map(toSubscriber);\n}\n\nexport async function countSubscribers(): Promise {\n const res = await sqlite.execute(\"SELECT COUNT(*) AS n FROM newsletter_subscribers\");\n return Number((res.rows[0] as any).n);\n}\n\n/** Shallow-merges `details` into the subscriber's existing details. */\nexport async function mergeSubscriberDetails(\n id: number | string,\n details: Record,\n): Promise | null> {\n const existing = await getSubscriber(id);\n if (!existing) return null;\n const merged = { ...(existing.details ?? {}), ...details };\n await sqlite.execute({\n sql: \"UPDATE newsletter_subscribers SET details = ?, updated_at = datetime('now') WHERE id = ?\",\n args: [JSON.stringify(merged), id],\n });\n return merged;\n}\n\nexport async function updateSubscriber(\n id: number | string,\n fields: { details?: unknown; developer_notes?: string },\n): Promise {\n const updates: string[] = [];\n const args: any[] = [];\n if (fields.details !== undefined) {\n updates.push(\"details = ?\");\n args.push(fields.details ? JSON.stringify(fields.details) : null);\n }\n if (fields.developer_notes !== undefined) {\n updates.push(\"developer_notes = ?\");\n args.push(fields.developer_notes);\n }\n if (!updates.length) return false;\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n await sqlite.execute({\n sql: `UPDATE newsletter_subscribers SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n return true;\n}\n\nexport async function deleteSubscriber(id: number | string): Promise {\n await sqlite.execute({\n sql: \"DELETE FROM newsletter_subscribers WHERE id = ?\",\n args: [id],\n });\n}\n\n/* ----------------------------------- receivers ---------------------------------- */\n\nfunction toReceiver(row: any): Receiver {\n return {\n id: Number(row.id),\n name: String(row.name),\n server: String(row.server),\n topic: String(row.topic),\n priority: Number(row.priority),\n tags: row.tags ?? null,\n auth: row.auth ?? null,\n events: String(row.events),\n enabled: Number(row.enabled),\n created_at: String(row.created_at),\n updated_at: String(row.updated_at),\n };\n}\n\nexport async function listReceivers(): Promise {\n const res = await sqlite.execute(\"SELECT * FROM ntfy_receivers ORDER BY id ASC\");\n return res.rows.map(toReceiver);\n}\n\nexport async function getReceiver(id: number | string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM ntfy_receivers WHERE id = ?\",\n args: [id],\n });\n return res.rows.length ? toReceiver(res.rows[0]) : null;\n}\n\n/** Enabled receivers subscribed to a given event. */\nexport async function receiversForEvent(event: NtfyEvent): Promise {\n const all = await listReceivers();\n return all.filter(r =>\n r.enabled && r.events.split(\",\").map(e => e.trim()).includes(event)\n );\n}\n\nexport type ReceiverInput = {\n name: string;\n server: string;\n topic: string;\n priority: number;\n tags: string | null;\n auth: string | null;\n events: string;\n enabled: number;\n};\n\nexport async function createReceiver(input: ReceiverInput): Promise {\n const res = await sqlite.execute({\n sql: `INSERT INTO ntfy_receivers (name, server, topic, priority, tags, auth, events, enabled)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n input.name,\n input.server,\n input.topic,\n input.priority,\n input.tags,\n input.auth,\n input.events,\n input.enabled,\n ],\n });\n return Number(res.lastInsertRowid);\n}\n\nexport async function updateReceiver(\n id: number | string,\n input: Partial,\n): Promise {\n const updates: string[] = [];\n const args: any[] = [];\n for (const [key, value] of Object.entries(input)) {\n if (value === undefined) continue;\n updates.push(`${key} = ?`);\n args.push(value as any);\n }\n if (!updates.length) return;\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n await sqlite.execute({\n sql: `UPDATE ntfy_receivers SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n}\n\nexport async function deleteReceiver(id: number | string): Promise {\n await sqlite.execute({ sql: \"DELETE FROM ntfy_receivers WHERE id = ?\", args: [id] });\n}\n\n/* ---------------------------------- deliveries ---------------------------------- */\n\nexport async function logDelivery(entry: {\n receiver_id: number | null;\n receiver_name: string;\n subscriber_id: number | null;\n event: string;\n ok: boolean;\n status: number | null;\n error: string | null;\n}): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ntfy_deliveries (receiver_id, receiver_name, subscriber_id, event, ok, status, error)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n entry.receiver_id,\n entry.receiver_name,\n entry.subscriber_id,\n entry.event,\n entry.ok ? 1 : 0,\n entry.status,\n entry.error,\n ],\n });\n}\n\nexport async function recentDeliveries(limit = 25): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM ntfy_deliveries ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return res.rows.map((row: any) => ({\n id: Number(row.id),\n receiver_id: row.receiver_id === null ? null : Number(row.receiver_id),\n receiver_name: String(row.receiver_name),\n subscriber_id: row.subscriber_id === null ? null : Number(row.subscriber_id),\n event: String(row.event),\n ok: Number(row.ok),\n status: row.status === null ? null : Number(row.status),\n error: row.error ?? null,\n created_at: String(row.created_at),\n }));\n}\n",[178],"3ba4ab03-e1a6-49e6-9561-a3bd02238abd","api.ts","d6ea0706-9af8-11f1-bee9-1607ee4eb77e",19,["D",1787052897308],"/**\n * Public + API-key protected JSON API.\n * Response shapes are unchanged from the original version, so existing clients keep working.\n */\n\nimport { Hono } from \"npm:hono\";\nimport { cors } from \"npm:hono/cors\";\nimport * as db from \"./db.ts\";\nimport { notify } from \"./ntfy.ts\";\n\nconst EMAIL_RE = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n\nfunction isAuthorized(req: Request): boolean {\n const adminKey = Deno.env.get(\"ADMIN_API_KEY\");\n return !!adminKey && req.headers.get(\"X-API-Key\") === adminKey;\n}\n\nexport const api = new Hono();\n\napi.use(\n \"*\",\n cors({\n origin: \"*\",\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"OPTIONS\"],\n allowHeaders: [\"Content-Type\", \"X-API-Key\"],\n }),\n);\n\n/* -------------------------------- public routes -------------------------------- */\n\n// POST /subscribe — sign up, then alert every enabled ntfy receiver\napi.post(\"/subscribe\", async (c) => {\n const body = await c.req.json().catch(() => ({} as any));\n const { email, details } = body ?? {};\n\n if (!email || typeof email !== \"string\") {\n return c.json({ error: \"Email is required\" }, 400);\n }\n if (!EMAIL_RE.test(email)) {\n return c.json({ error: \"Invalid email format\" }, 400);\n }\n\n const id = await db.insertSubscriber(email.toLowerCase().trim(), details);\n\n // Notify receivers. Failures are logged, never surfaced to the subscriber.\n const subscriber = await db.getSubscriber(id);\n if (subscriber) {\n await notify(\"signup\", subscriber, new URL(c.req.url).origin).catch((err) =>\n console.error(\"ntfy notify failed:\", err)\n );\n }\n\n return c.json({ success: true, message: \"Successfully subscribed!\", id }, 201);\n});\n\n// PUT /subscribe/:id/details — merge extra info collected after signup\napi.put(\"/subscribe/:id/details\", async (c) => {\n const id = c.req.param(\"id\");\n if (!/^\\d+$/.test(id)) return c.json({ error: \"Invalid id\" }, 400);\n\n const body = await c.req.json().catch(() => ({} as any));\n const { details } = body ?? {};\n if (details === undefined || details === null || typeof details !== \"object\") {\n return c.json({ error: \"details object is required\" }, 400);\n }\n\n const merged = await db.mergeSubscriberDetails(id, details);\n if (!merged) return c.json({ error: \"Subscriber not found\" }, 404);\n\n const subscriber = await db.getSubscriber(id);\n if (subscriber) {\n await notify(\"details\", subscriber, new URL(c.req.url).origin).catch((err) =>\n console.error(\"ntfy notify failed:\", err)\n );\n }\n\n return c.json({ success: true, message: \"Details updated\", details: merged });\n});\n\n/* ------------------------- API-key protected admin routes ----------------------- */\n\napi.use(\"/subscribers/*\", async (c, next) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized\" }, 401);\n await next();\n});\napi.use(\"/subscribers\", async (c, next) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized\" }, 401);\n await next();\n});\n\napi.get(\"/subscribers\", async (c) => {\n const subscribers = await db.listSubscribers();\n return c.json({ subscribers });\n});\n\napi.put(\"/subscribers/:id\", async (c) => {\n const body = await c.req.json().catch(() => ({} as any));\n const { details, developer_notes } = body ?? {};\n const updated = await db.updateSubscriber(c.req.param(\"id\"), { details, developer_notes });\n if (!updated) return c.json({ error: \"No fields to update\" }, 400);\n return c.json({ success: true, message: \"Subscriber updated\" });\n});\n\napi.delete(\"/subscribers/:id\", async (c) => {\n await db.deleteSubscriber(c.req.param(\"id\"));\n return c.json({ success: true, message: \"Subscriber removed\" });\n});\n\n/* ------------------------------------ docs ------------------------------------- */\n\napi.get(\"/\", (c) =>\n c.json({\n name: \"Newsletter Signup API\",\n admin: new URL(\"/admin\", c.req.url).toString(),\n endpoints: {\n \"POST /subscribe\": {\n description:\n \"Subscribe to the newsletter. Notifies all enabled ntfy receivers. Returns subscriber id.\",\n body: { email: \"string (required)\", details: \"object (optional metadata)\" },\n response: { success: \"boolean\", message: \"string\", id: \"number\" },\n },\n \"PUT /subscribe/:id/details\": {\n description:\n \"Add or update details for an existing subscriber (public, no auth). Shallow-merges with existing details.\",\n body: { details: \"object (required)\" },\n },\n \"GET /subscribers\": { description: \"List all subscribers (X-API-Key)\" },\n \"PUT /subscribers/:id\": {\n description: \"Update subscriber details or developer notes (X-API-Key)\",\n body: { details: \"object (optional)\", developer_notes: \"string (optional)\" },\n },\n \"DELETE /subscribers/:id\": { description: \"Remove a subscriber (X-API-Key)\" },\n \"GET /admin\": {\n description: \"Admin dashboard — review signups and configure ntfy receivers (Val Town login)\",\n },\n },\n }));\n",[185],"36591fea-1c07-475d-9748-0b07d7cc1ead","README.md","be6f332a-fed3-11f0-bfa2-42dde27851f2",37,["D",1787055755660],2,"# Newsletter Signup API\n\nEmail signup endpoint with flexible metadata storage, **ntfy.sh push notifications** for new\nsubmissions, and an admin dashboard behind Val Town login.\n\n🔗 · 🛠 \n\n## How it works\n\n```mermaid\nflowchart LR\n F[Your form] -->|POST /subscribe| A[main.ts]\n A --> D[(SQLite)]\n A --> N[ntfy.ts]\n N -->|JSON publish| S1[ntfy.sh / self-hosted]\n S1 --> P[phone / desktop / web app]\n N --> L[(ntfy_deliveries log)]\n U[You] -->|Val Town login| AD[/admin/]\n AD --> D\n AD --> L\n```\n\nEvery signup fans out to **every enabled receiver** configured in the dashboard. Delivery failures\nare logged, never surfaced to the person signing up — a broken receiver can't break your form.\n\n## Setup\n\n1. Open and log in with Val Town.\n2. Add a receiver: pick an **unguessable topic** (the topic name is effectively the password —\n anyone who knows it can read your notifications).\n3. Subscribe to that same topic in the [ntfy app](https://ntfy.sh/app) (iOS, Android, web, CLI).\n4. Hit **Send test** to confirm it arrives.\n\n### Receiver options\n\n| Field | Notes |\n|-------|-------|\n| Name | Label shown in the dashboard |\n| Topic | ntfy topic — keep it long and random |\n| Server | `https://ntfy.sh` or your own self-hosted ntfy |\n| Priority | 1 (min) … 5 (max) — controls how loudly the app alerts |\n| Tags | Comma-separated; ntfy maps many to [emoji](https://docs.ntfy.sh/emojis/) |\n| Auth | Access token (`tk_…`) or `user:password` — only needed for protected topics |\n| Notify on | New signup and/or details updated |\n| Enabled | Pause a receiver without deleting it |\n\nNotifications are Markdown-formatted and include a click action + \"Open admin\" button pointing\nback at the dashboard. Uses ntfy's [publish-as-JSON API](https://docs.ntfy.sh/publish/#publish-as-json).\n\n## Login flow\n\n`std/oauth`'s callback always returns to `/` — it has no \"return to where I was\" option, so\nvisiting `/admin` while logged out would otherwise dump you on the API docs after signing in.\n`post-login.ts` fixes that: the admin gate stashes the intended path in a short-lived\n`post_login_redirect` cookie, and a middleware on `GET /` resumes it once a session exists.\nOnly same-origin absolute paths are honoured (no open redirects).\n\n```mermaid\nsequenceDiagram\n participant B as Browser\n participant V as Val\n participant T as val.town\n B->>V: GET /admin (no session)\n V-->>B: 302 /auth/login + post_login_redirect=/admin\n B->>T: OAuth login\n T-->>B: back to /auth/callback → session cookie\n B->>V: GET / (callback lands here)\n V-->>B: 302 /admin (cookie cleared)\n```\n\n## Environment variables\n\n| Key | Required | Purpose |\n|-----|----------|---------|\n| `ADMIN_API_KEY` | for JSON admin endpoints | `X-API-Key` value for `/subscribers*` |\n| `ADMIN_USERNAMES` | optional | Extra Val Town usernames allowed into `/admin`, comma-separated. Members of this val's org always have access. |\n\n👉 Add ADMIN_USERNAMES here: https://www.val.town/x/colel/newsletter-signup/environment-variables?key=ADMIN_USERNAMES\n\nntfy credentials live in the database (managed from the dashboard), not in env vars.\n\n## Endpoints\n\n| Method | Path | Auth | Description |\n|--------|------|------|-------------|\n| POST | `/subscribe` | Public | Submit a signup → notifies receivers |\n| PUT | `/subscribe/:id/details` | Public | Merge extra details into a signup |\n| GET | `/subscribers` | API Key | List all subscribers |\n| PUT | `/subscribers/:id` | API Key | Update details or notes |\n| DELETE | `/subscribers/:id` | API Key | Remove a subscriber |\n| GET | `/admin` | Val Town login | Dashboard: review signups, configure receivers |\n\n## Usage\n\n**Subscribe (public):**\n```bash\ncurl -X POST https://newsletter-signup.val.run/subscribe \\\n -H \"Content-Type: application/json\" \\\n -d '{\"email\": \"user@example.com\", \"details\": {\"any\": \"json\"}}'\n```\n\n**Admin requests:**\n```bash\ncurl https://newsletter-signup.val.run/subscribers \\\n -H \"X-API-Key: your-admin-key\"\n```\n\n## Files\n\n| File | Role |\n|------|------|\n| `main.ts` | Hono app; mounts API + admin, wraps everything in Val Town OAuth |\n| `api.ts` | Public + API-key JSON routes |\n| `ntfy.ts` | ntfy publishing, message formatting, test sends |\n| `db.ts` | Schema + queries (subscribers, receivers, delivery log) |\n| `admin/routes.tsx` | Auth gate + dashboard routes and form handling |\n| `admin/Layout.tsx`, `admin/Receivers.tsx`, `admin/Subscribers.tsx` | React (SSR) UI |\n\n## Schema\n\n**`newsletter_subscribers`** — `id`, `email`, `details` (JSON), `developer_notes`, `created_at`, `updated_at`\n\n**`ntfy_receivers`** — `id`, `name`, `server`, `topic`, `priority`, `tags`, `auth`, `events`, `enabled`, timestamps\n\n**`ntfy_deliveries`** — `id`, `receiver_id`, `receiver_name`, `subscriber_id`, `event`, `ok`, `status`, `error`, `created_at`\n",[192],"4f20e196-0364-4fa0-bc2e-058d5d3d1377","scripts","013cb2e4-c52a-417b-a150-124dc8a68c51",25,["D",1787053034424],"directory",[200],"964d6db5-0871-412c-97ed-cb80b4512abb","admin","5bf3d673-b10d-4ac0-be56-a32e248add93",20,["D",1787052908390],[207],"pulls","branches",1,"forks","envVars",{"_220":67,"_222":67},"connections",{"_220":67,"_221":67},"count","unfilledCount","emptyCount",{"_49":206,"_38":207,"_36":208,"_146":-5,"_47":48,"_46":209,"_148":30,"_44":297,"_13":67,"_40":204,"_42":-5,"_29":32,"_152":-5,"_238":298,"_33":299},{"_49":290,"_38":291,"_36":292,"_146":208,"_47":48,"_46":209,"_148":30,"_44":293,"_13":67,"_40":41,"_42":294,"_29":32,"_152":-5,"_238":295,"_33":296},{"_49":282,"_38":283,"_36":284,"_146":208,"_47":48,"_46":285,"_148":32,"_44":286,"_13":67,"_40":41,"_42":287,"_29":32,"_152":-5,"_238":288,"_33":289},{"_49":274,"_38":275,"_36":276,"_146":208,"_47":48,"_46":277,"_148":30,"_44":278,"_13":67,"_40":41,"_42":279,"_29":32,"_152":-5,"_238":280,"_33":281},{"_49":266,"_38":267,"_36":268,"_146":208,"_47":48,"_46":269,"_148":32,"_44":270,"_13":196,"_40":41,"_42":271,"_29":32,"_152":-5,"_238":272,"_33":273},{"_49":199,"_38":200,"_36":201,"_146":-5,"_47":48,"_46":202,"_148":30,"_44":263,"_13":67,"_40":204,"_42":-5,"_29":32,"_152":-5,"_238":264,"_33":265},{"_49":259,"_38":39,"_36":37,"_146":201,"_47":48,"_46":14,"_148":32,"_44":260,"_13":67,"_40":41,"_42":43,"_29":32,"_152":-5,"_238":261,"_33":262},{"_49":191,"_38":192,"_36":193,"_146":-5,"_47":48,"_46":194,"_148":32,"_44":256,"_13":196,"_40":26,"_42":197,"_29":32,"_152":-5,"_238":257,"_33":258},{"_49":184,"_38":185,"_36":186,"_146":-5,"_47":48,"_46":187,"_148":30,"_44":253,"_13":67,"_40":41,"_42":189,"_29":32,"_152":-5,"_238":254,"_33":255},{"_49":177,"_38":178,"_36":179,"_146":-5,"_47":48,"_46":180,"_148":32,"_44":250,"_13":67,"_40":41,"_42":182,"_29":32,"_152":-5,"_238":251,"_33":252},{"_49":170,"_38":171,"_36":172,"_146":-5,"_47":48,"_46":173,"_148":32,"_44":247,"_13":67,"_40":41,"_42":175,"_29":32,"_152":-5,"_238":248,"_33":249},{"_49":161,"_38":162,"_36":163,"_146":-5,"_47":48,"_46":164,"_148":30,"_44":244,"_13":166,"_40":167,"_42":168,"_29":32,"_152":51,"_238":245,"_33":246},{"_49":154,"_38":155,"_36":156,"_146":-5,"_47":48,"_46":157,"_148":32,"_44":241,"_13":67,"_40":41,"_42":159,"_29":32,"_152":-5,"_238":242,"_33":243},{"_49":143,"_38":144,"_36":145,"_146":-5,"_47":48,"_46":147,"_148":30,"_44":237,"_13":150,"_40":41,"_42":151,"_29":32,"_152":-5,"_238":239,"_33":240},["D",1787055738792],"children",[],[144],["D",1787052875199],[],[155],["D",1787055692887],[],[162],["D",1787056010527],[],[171],["D",1787052855294],[],[178],["D",1787052897308],[],[185],["D",1787055755660],[],[192],"d954eb61-9c0d-48ff-afef-ab721702d06e",["D",1787056035113],[],[200,39],["D",1787053034424],[229],[200],"850118fe-0f47-434b-884e-db61cefc4b71","routes.tsx","11bb59b6-9af9-11f1-984d-1607ee4eb77e",30,["D",1787055685998],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport { renderToString } from \"https://esm.sh/react-dom@18.2.0/server\";\nimport { Hono } from \"npm:hono\";\nimport { getOAuthUserData } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport * as db from \"../db.ts\";\nimport { normalizeServer, sendTest } from \"../ntfy.ts\";\nimport { loginAndReturnTo } from \"../post-login.ts\";\nimport { type FlashMessage, Layout } from \"./Layout.tsx\";\nimport { Deliveries, Receivers } from \"./Receivers.tsx\";\nimport { Subscribers } from \"./Subscribers.tsx\";\n\ntype AdminUser = { username: string | null };\n\n/**\n * Admin access = logged in with Val Town AND (member of this val's org\n * OR listed in the optional ADMIN_USERNAMES env var, comma-separated).\n */\nasync function requireAdmin(req: Request): Promise {\n const session = await getOAuthUserData(req);\n if (!session?.user) return \"anonymous\";\n\n const allowlist = (Deno.env.get(\"ADMIN_USERNAMES\") ?? \"\")\n .split(\",\").map(s => s.trim().replace(/^@/, \"\")).filter(Boolean);\n\n const username = session.user.username ?? null;\n const allowed = session.isOrgMember === true ||\n (!!username && allowlist.includes(username));\n\n return allowed ? { username } : \"forbidden\";\n}\n\nfunction html(node: React.ReactNode, status = 200): Response {\n return new Response(\"\" + renderToString(<>{node}), {\n status,\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}\n\nfunction flashFrom(url: URL): FlashMessage | null {\n const ok = url.searchParams.get(\"ok\");\n if (ok) return { kind: \"ok\", text: ok };\n const err = url.searchParams.get(\"err\");\n if (err) return { kind: \"error\", text: err };\n return null;\n}\n\nfunction back(kind: \"ok\" | \"err\", text: string): Response {\n return new Response(null, {\n status: 302,\n headers: { Location: `/admin?${kind}=${encodeURIComponent(text)}` },\n });\n}\n\nconst str = (v: unknown): string => (typeof v === \"string\" ? v : \"\");\n\nfunction eventsFromBody(body: Record): string {\n const raw = body[\"events\"];\n const list = (Array.isArray(raw) ? raw : raw === undefined ? [] : [raw]).map(String);\n const events = list.filter(e => e === \"signup\" || e === \"details\");\n return (events.length ? events : [\"signup\"]).join(\",\");\n}\n\nfunction receiverFromBody(body: Record) {\n const priority = Math.min(5, Math.max(1, Number(body.priority) || 3));\n return {\n name: str(body.name).trim() || \"Receiver\",\n topic: str(body.topic).trim(),\n server: normalizeServer(str(body.server).trim() || \"https://ntfy.sh\"),\n priority,\n tags: str(body.tags).trim() || null,\n events: eventsFromBody(body),\n enabled: body.enabled ? 1 : 0,\n };\n}\n\nexport const admin = new Hono();\n\nadmin.use(\"*\", async (c, next) => {\n const result = await requireAdmin(c.req.raw);\n if (result === \"anonymous\") {\n // Remember where they were headed — std/oauth always returns to \"/\".\n const url = new URL(c.req.url);\n return loginAndReturnTo(url.pathname + url.search);\n }\n if (result === \"forbidden\") {\n return html(\n \n

You don't have access to this dashboard.

\n Ask the owner to add your Val Town username to the{\" \"}\n ADMIN_USERNAMES environment variable.\n

\n \n

\n ,\n 403,\n );\n }\n c.set(\"user\", result);\n await next();\n});\n\n/* ------------------------------------ page ------------------------------------- */\n\nadmin.get(\"/\", async (c) => {\n const user = c.get(\"user\") as AdminUser;\n const [receivers, subscribers, total, deliveries] = await Promise.all([\n db.listReceivers(),\n db.listSubscribers(200),\n db.countSubscribers(),\n db.recentDeliveries(25),\n ]);\n\n return html(\n \n \n \n \n ,\n );\n});\n\n/* ---------------------------------- receivers ---------------------------------- */\n\nadmin.post(\"/receivers\", async (c) => {\n const body = await c.req.parseBody({ all: true });\n const input = receiverFromBody(body);\n if (!input.topic) return back(\"err\", \"A topic is required\");\n await db.createReceiver({ ...input, auth: str(body.auth).trim() || null });\n return back(\"ok\", `Receiver “${input.name}” added`);\n});\n\nadmin.post(\"/receivers/:id\", async (c) => {\n const id = c.req.param(\"id\");\n const body = await c.req.parseBody({ all: true });\n const action = str(body._action);\n\n const receiver = await db.getReceiver(id);\n if (!receiver) return back(\"err\", \"Receiver not found\");\n\n if (action === \"delete\") {\n await db.deleteReceiver(id);\n return back(\"ok\", `Receiver “${receiver.name}” deleted`);\n }\n\n if (action === \"test\") {\n const result = await sendTest(receiver, new URL(c.req.url).origin);\n return result.ok\n ? back(\"ok\", `Test sent to ${receiver.server}/${receiver.topic}`)\n : back(\"err\", `Test failed (${result.status ?? \"network\"}): ${result.error ?? \"unknown error\"}`);\n }\n\n const input = receiverFromBody(body);\n if (!input.topic) return back(\"err\", \"A topic is required\");\n\n // Auth: blank input keeps the stored secret, \"clear_auth\" removes it.\n const newAuth = str(body.auth).trim();\n const auth = body.clear_auth ? null : newAuth ? newAuth : undefined;\n\n await db.updateReceiver(id, { ...input, ...(auth === undefined ? {} : { auth }) });\n return back(\"ok\", `Receiver “${input.name}” saved`);\n});\n\n/* --------------------------------- subscribers --------------------------------- */\n\nadmin.post(\"/subscribers/:id\", async (c) => {\n const id = c.req.param(\"id\");\n const body = await c.req.parseBody();\n const action = str(body._action);\n\n if (action === \"delete\") {\n await db.deleteSubscriber(id);\n return back(\"ok\", `Signup #${id} deleted`);\n }\n\n await db.updateSubscriber(id, { developer_notes: str(body.developer_notes) });\n return back(\"ok\", `Notes saved for #${id}`);\n});\n",[],[207,267],"6eb89ce3-a586-46a0-aa2d-100ac5a04ae3","Subscribers.tsx","fbee90e4-9af8-11f1-96e3-1607ee4eb77e",22,["D",1787052959417],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport type { Subscriber } from \"../db.ts\";\nimport { Card } from \"./Layout.tsx\";\n\nfunction DetailsCell({ details }: { details: Record | null }) {\n if (!details || !Object.keys(details).length) {\n return —;\n }\n return (\n

\n {Object.keys(details).length} field{Object.keys(details).length === 1 ? \"\" : \"s\"}\n

\n        {JSON.stringify(details, null, 2)}\n

\n );\n}\n\nexport function Subscribers(\n { subscribers, total }: { subscribers: Subscriber[]; total: number },\n) {\n return (\n \n {subscribers.length === 0\n ?

No signups yet.

\n : (\n

\n \n \n \n \n \n \n \n \n \n \n \n \n {subscribers.map((s) => (\n \n \n \n \n \n \n \n \n ))}\n \n

#	Email	Details	Created (UTC)	Notes
{s.id}	{s.email}	\n \n	{s.created_at}	\n \n \n \n Save\n \n \n	\n \n \n Delete\n \n \n

\n )}\n \n );\n}\n",[],[207,275],"939db9bf-ce5e-45c8-9a69-4097026e56b1","Receivers.tsx","f55367e6-9af8-11f1-9164-1607ee4eb77e",21,["D",1787052948354],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport type { Delivery, Receiver } from \"../db.ts\";\nimport { Card } from \"./Layout.tsx\";\n\nconst PRIORITIES = [\n [1, \"1 · min\"],\n [2, \"2 · low\"],\n [3, \"3 · default\"],\n [4, \"4 · high\"],\n [5, \"5 · max\"],\n] as const;\n\nconst input =\n \"w-full px-2.5 py-1.5 rounded-md border border-slate-300 text-sm focus:outline-none focus:ring-2 focus:ring-slate-400\";\nconst label = \"block text-xs font-medium text-slate-500 mb-1\";\n\nfunction Field(\n { name, title, defaultValue, placeholder, type = \"text\", hint, required, className = \"\" }: {\n name: string;\n title: string;\n defaultValue?: string | number | null;\n placeholder?: string;\n type?: string;\n hint?: string;\n required?: boolean;\n className?: string;\n },\n) {\n return (\n

\n {title}\n \n {hint &&

{hint}

}\n

\n );\n}\n\nfunction EventChecks({ events }: { events: string }) {\n const list = events.split(\",\").map(e => e.trim());\n return (\n

\n Notify on\n

\n \n \n New signup\n \n \n \n Details updated\n \n

\n );\n}\n\nfunction ReceiverFields({ receiver }: { receiver?: Receiver }) {\n return (\n <>\n

\n \n \n \n

\n Priority\n \n

\n \n \n

\n \n

\n \n \n Enabled\n \n {receiver?.auth && (\n \n \n Clear saved auth\n \n )}\n

\n \n );\n}\n\nfunction StatusDot({ ok }: { ok: boolean | null }) {\n const color = ok === null ? \"bg-slate-300\" : ok ? \"bg-emerald-500\" : \"bg-red-500\";\n return ;\n}\n\nexport function Receivers(\n { receivers, deliveries }: { receivers: Receiver[]; deliveries: Delivery[] },\n) {\n const lastByReceiver = new Map();\n for (const d of deliveries) {\n if (d.receiver_id !== null && !lastByReceiver.has(d.receiver_id)) lastByReceiver.set(d.receiver_id, d);\n }\n\n return (\n \n {receivers.length === 0 && (\n

\n No receivers yet — add one below, then subscribe to that topic in the{\" \"}\n ntfy web app or mobile app.\n

\n )}\n\n

\n {receivers.map((receiver) => {\n const last = lastByReceiver.get(receiver.id);\n return (\n \n

\n \n {receiver.name}\n \n {receiver.server.replace(/^https?:\\/\\//, \"\")}/{receiver.topic}\n \n {!receiver.enabled && (\n \n disabled\n \n )}\n

\n {last\n ? last.ok\n ? `last ${last.event} ok · ${last.created_at}`\n : `last ${last.event} failed (${last.status ?? \"network\"}) · ${last.created_at}`\n : \"no deliveries yet\"}\n

\n\n \n\n

\n \n Save\n \n \n Send test\n \n \n Delete\n \n

\n \n );\n })}\n

\n\n

\n + Add receiver\n

\n \n );\n}\n\nexport function Deliveries({ deliveries }: { deliveries: Delivery[] }) {\n if (!deliveries.length) return null;\n return (\n \n

\n \n \n \n \n \n \n \n \n \n \n \n {deliveries.map((d) => (\n \n \n \n \n \n \n \n ))}\n \n

When (UTC)	Receiver	Event	Signup	Result
{d.created_at}	{d.receiver_name}	{d.event}	\n {d.subscriber_id ? `#${d.subscriber_id}` : \"—\"}\n	\n {d.ok\n ? ok\n : (\n \n {d.status ?? \"network\"} {d.error ? `· ${d.error}` : \"\"}\n \n )}\n

\n \n );\n}\n",[],[207,283],"246d6b1f-bdb2-46dc-aaa0-dfcdeb912df0","Layout.tsx","dd81d7ce-9af8-11f1-8710-1607ee4eb77e",["D",1787052908390],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\n\nexport interface FlashMessage {\n kind: \"ok\" | \"error\";\n text: string;\n}\n\nexport function Layout(\n { title, user, flash, children }: {\n title: string;\n user: { username: string | null; profileImageUrl?: string | null };\n flash?: FlashMessage | null;\n children: React.ReactNode;\n },\n) {\n return (\n \n \n \n \n {title}\n \n \n \n \n

📬 Newsletter Signups

\n Review submissions and configure ntfy.sh receivers\n

\n @{user.username ?? \"unknown\"}\n

\n\n {flash && (\n \n {flash.text}\n

\n )}\n\n {children}\n\n \n \n \n \n );\n}\n\nexport function Card(\n { title, subtitle, children }: {\n title: string;\n subtitle?: string;\n children: React.ReactNode;\n },\n) {\n return (\n

{title}

\n {subtitle &&

{subtitle}

}\n

{children}

\n );\n}\n",[],[207,291],["D",1787052908390],[224,225,226,227],[207],["D",1769884195507],["D",1789447273596],{"_104":103,"_111":107},{"_104":103,"_105":-5,"_106":107,"_19":61,"_108":109,"_110":32},{"_13":93,"_38":94,"_49":48,"_95":50,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":51,"_102":103},"ctx",{"_86":-5,"_131":338,"_339":340,"_341":342,"_343":32,"_344":32,"_345":32,"_346":30,"_347":-5,"_348":-7,"_349":-7,"_350":67,"_351":32,"_352":32,"_353":-5,"_354":32,"_355":32,"_356":32,"_357":-5},"ENV",{"_309":310,"_311":312,"_313":94,"_314":315,"_316":317,"_318":319,"_320":321,"_322":323,"_324":325,"_326":327,"_328":329,"_330":331,"_332":333,"_334":335,"_336":337},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v39