[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_92":91,"_32":44,"_101":82,"_27":102,"_13":14,"_103":-5,"_11":104,"_105":106,"_107":108,"_109":110,"_111":112,"_20":-5,"_113":-5,"_114":-5,"_115":25,"_116":117,"_118":119,"_120":-5,"_121":-5,"_122":123},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":-5,"_55":25,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":76,"_77":78,"_79":80,"_81":25},"version",10,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":36,"_34":35,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":20,"_34":35},"deleted",false,"deletedHere","path","valtown-email-sender.ts","latestPath","fileId","becd45fa-5568-11f1-a876-ee650bb23af1","name","fileType","content","// ════════════════════════════════════════════════════════════════════════\n// Liftaro Email-Sender Val (val.town HTTP-Val)\n// ────────────────────────────────────────────────────────────────────────\n// HTTP-Endpoint, der eine Mail über das All-Inkl-Postfach (SMTP) versendet.\n// Wird vom Hauptcheck-Frontend aufgerufen, wenn der Bearbeiter eine Reply\n// auf eine Inbox-Email absendet.\n//\n// POST \n// Header: X-App-Secret: \n// Body (JSON): {\n// to: \"kunde@example.de\" (oder Array),\n// subject: \"Re: ...\",\n// text: \"Plain-Text-Body\",\n// html?: \"

HTML-Body

\",\n// replyTo?: \"check@liftaro.de\",\n// inReplyTo?: \"\",\n// references?: \" \",\n// attachments?: [{ filename, contentType, contentBase64 }]\n// }\n//\n// Response 200: { ok: true, messageId }\n// Response 401: { error: \"Auth failed\" }\n// Response 400: { error: \"

\" }\n//\n// Env-Variablen (in val.town Settings → Environment Variables):\n// APP_SECRET — geheimer String, mit dem das Frontend sich authentifiziert\n// SMTP_HOST — z.B. \"w021201e.kasserver.com\"\n// SMTP_PORT — \"465\" (SSL) oder \"587\" (STARTTLS)\n// SMTP_USER — Postfach-Login (oft die Email-Adresse oder eine Kürzel-ID)\n// SMTP_PASS — Postfach-Passwort\n// SMTP_FROM — Default-Absender, z.B. \"check@liftaro.de\"\n// SMTP_FROM_NAME — z.B. \"Liftaro GmbH\"\n// ALLOWED_ORIGIN — z.B. \"https://check.liftaro.de\" (oder \"*\" während Test)\n// ════════════════════════════════════════════════════════════════════════\n\nimport { SMTPClient } from \"https://deno.land/x/denomailer@1.6.0/mod.ts\";\n\ntype Attachment = { filename: string; contentType: string; contentBase64: string };\ntype SendPayload = {\n to: string | string[];\n subject: string;\n text?: string;\n html?: string;\n bcc?: string | string[]; // V12.138: BCC-Empfänger (optional, mehrere möglich)\n replyTo?: string;\n inReplyTo?: string;\n references?: string;\n attachments?: Attachment[];\n};\n\nfunction cors(allow: string): HeadersInit {\n return {\n \"Access-Control-Allow-Origin\": allow,\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-App-Secret\",\n \"Access-Control-Max-Age\": \"86400\",\n };\n}\n\nfunction json(body: any, status: number, allow: string): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...cors(allow) },\n });\n}\n\nfunction b64ToUint8(b64: string): Uint8Array {\n const bin = atob(b64);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\n// RFC 2047 \"B\"-Encoding für Betreffzeilen mit Nicht-ASCII-Zeichen (Umlaute, „·\", „–\", Emoji …).\n// denomailer kodiert den Subject nicht zuverlässig → ohne diese Kodierung werden solche\n// Zeichen beim SMTP-Versand zu „?\". Wir kodieren in ≤75-Zeichen-Wörter (UTF-8/Base64),\n// getrennt durch Space (adjazente encoded-words werden vom Client wieder zusammengefügt).\nfunction encodeSubjectRFC2047(subject: string): string {\n if (/^[\\x00-\\x7F]*$/.test(subject)) return subject; // reines ASCII → unverändert\n const enc = new TextEncoder();\n const words: string[] = [];\n let cur: number[] = [];\n const MAX_BYTES = 45; // 45 Bytes → 60 Base64-Zeichen → encoded-word ≤ 72\n const flush = () => {\n if (!cur.length) return;\n let bin = \"\";\n for (const b of cur) bin += String.fromCharCode(b);\n words.push(\"=?UTF-8?B?\" + btoa(bin) + \"?=\");\n cur = [];\n };\n for (const ch of Array.from(subject)) { // pro Code-Point (Surrogate-sicher)\n const bytes = Array.from(enc.encode(ch));\n if (cur.length + bytes.length > MAX_BYTES) flush(); // nie ein Multibyte-Zeichen splitten\n cur.push(...bytes);\n }\n flush();\n return words.join(\" \");\n}\n\nexport default async function (req: Request): Promise {\n const ALLOW = Deno.env.get(\"ALLOWED_ORIGIN\") || \"*\";\n\n // CORS-Preflight\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors(ALLOW) });\n }\n\n if (req.method !== \"POST\") {\n return json({ error: \"Method not allowed\" }, 405, ALLOW);\n }\n\n // 1. App-Secret prüfen\n const expectedSecret = Deno.env.get(\"APP_SECRET\") || \"\";\n const gotSecret = req.headers.get(\"X-App-Secret\") || \"\";\n if (!expectedSecret || gotSecret !== expectedSecret) {\n return json({ error: \"Auth failed\" }, 401, ALLOW);\n }\n\n // 2. Body parsen\n let body: SendPayload;\n try { body = await req.json(); }\n catch { return json({ error: \"Invalid JSON\" }, 400, ALLOW); }\n\n const to = Array.isArray(body.to) ? body.to : [body.to];\n if (!to.length || !to[0]) return json({ error: \"Missing 'to'\" }, 400, ALLOW);\n if (!body.subject) return json({ error: \"Missing 'subject'\" }, 400, ALLOW);\n if (!body.text && !body.html) return json({ error: \"Missing 'text' or 'html'\" }, 400, ALLOW);\n\n // 3. SMTP-Connection vorbereiten\n const host = Deno.env.get(\"SMTP_HOST\") || \"\";\n const port = parseInt(Deno.env.get(\"SMTP_PORT\") || \"465\", 10);\n const user = Deno.env.get(\"SMTP_USER\") || \"\";\n const pass = Deno.env.get(\"SMTP_PASS\") || \"\";\n const fromAddr = Deno.env.get(\"SMTP_FROM\") || user;\n const fromName = Deno.env.get(\"SMTP_FROM_NAME\") || \"Liftaro GmbH\";\n // Präzise Fehlermeldung: welche Variable fehlt?\n const missing: string[] = [];\n if (!host) missing.push(\"SMTP_HOST\");\n if (!user) missing.push(\"SMTP_USER\");\n if (!pass) missing.push(\"SMTP_PASS\");\n if (missing.length) {\n return json({ error: \"SMTP not configured — missing env-vars: \" + missing.join(\", \") }, 500, ALLOW);\n }\n\n // 4. Custom Headers für In-Reply-To / References (für Thread-Anbindung)\n const customHeaders: Record = {};\n if (body.inReplyTo) {\n const mid = body.inReplyTo.startsWith(\"<\") ? body.inReplyTo : `<${body.inReplyTo}>`;\n customHeaders[\"In-Reply-To\"] = mid;\n if (!body.references) customHeaders[\"References\"] = mid;\n }\n if (body.references) customHeaders[\"References\"] = body.references;\n\n // 5. Attachments aufbereiten\n const attachments = (body.attachments || []).map(a => ({\n filename: a.filename,\n contentType: a.contentType || \"application/octet-stream\",\n encoding: \"binary\" as const,\n content: b64ToUint8(a.contentBase64),\n }));\n\n // 6. SMTP-Client + Send\n const client = new SMTPClient({\n connection: {\n hostname: host,\n port: port,\n tls: port === 465, // implicit TLS bei 465, STARTTLS bei 587\n auth: { username: user, password: pass },\n },\n });\n\n try {\n const fromHeader = fromName ? `${fromName} <${fromAddr}>` : fromAddr;\n // V12.138: BCC mitschicken — als Array normalisiert, undefined wenn leer\n const bccList = body.bcc\n ? (Array.isArray(body.bcc) ? body.bcc.filter(Boolean) : [body.bcc].filter(Boolean))\n : undefined;\n await client.send({\n from: fromHeader,\n to: to,\n bcc: (bccList && bccList.length) ? bccList : undefined,\n replyTo: body.replyTo || fromAddr,\n subject: encodeSubjectRFC2047(body.subject),\n content: body.text || \"\",\n html: body.html || undefined,\n headers: customHeaders,\n attachments: attachments.length ? attachments : undefined,\n });\n await client.close();\n return json({ ok: true, from: fromHeader, to: to, subject: body.subject }, 200, ALLOW);\n } catch (err: any) {\n try { await client.close(); } catch (_) {}\n console.error(\"[email-sender] SMTP-Send fehlgeschlagen:\", err);\n return json({ error: \"SMTP send failed: \" + (err?.message || String(err)) }, 500, ALLOW);\n }\n}\n","http","createdAt",["D",1781774202941],"branchVersion","branchId","be121938-5568-11f1-874c-ee650bb23af1","id","be10f620-5568-11f1-874c-ee650bb23af1","liftaroEmailSender",["D",1779404377893],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","b8672cc5-9c71-42c6-931f-a0aabca33bdd","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e049b-6e23-74ee-9bdd-0c49067080a6","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_92":91,"_100":96},"org",{"_92":91,"_93":94,"_95":96,"_18":53,"_97":98,"_99":25},"branch",{"_13":14,"_32":82,"_42":41,"_83":43,"_84":-5,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":44,"_90":91},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","giltglobalinvest","handle","displayName","Patrizio Fontanarosa","avatar","https://lh3.googleusercontent.com/a/ACg8ocL48GSPatvcxwg0cqcSWpW_ddx-HBZAMenADEoTYtVSkvBX8g=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":149,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":-5,"_55":25,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":150,"_77":151,"_79":152,"_81":25},"tree",[144],"files",[144],"counts",{"_132":59,"_133":134,"_135":59,"_136":137,"_138":139},"contents",[124],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_42":125,"_32":28,"_30":31,"_126":-5,"_40":41,"_39":14,"_127":119,"_37":128,"_13":129,"_33":36,"_34":35,"_24":25,"_130":-5,"_27":131},"bd0adfe9-4c80-4e85-a91e-d4b1b96da2aa","parentId","latest",["D",1781774202941],7,"label",[28],"pulls","branches",1,"forks","envVars",{"_140":142,"_143":59},"connections",{"_140":59,"_141":59},"count","unfilledCount",12,"emptyCount",{"_42":125,"_32":28,"_30":31,"_126":-5,"_40":41,"_39":14,"_127":119,"_37":145,"_13":129,"_33":36,"_34":35,"_24":25,"_130":-5,"_146":147,"_27":148},["D",1781774202941],"children",[],[28],["D",1779404377893],{"_92":91,"_100":96},{"_92":91,"_93":94,"_95":96,"_18":53,"_97":98,"_99":25},{"_13":14,"_32":82,"_42":41,"_83":43,"_84":-5,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":44,"_90":91},"ctx",{"_75":-5,"_121":186,"_187":188,"_189":190,"_191":25,"_192":25,"_193":25,"_194":119,"_195":-5,"_196":-7,"_197":-7,"_198":59,"_199":25,"_200":25,"_201":-5,"_202":25,"_203":25,"_204":25,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":82,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v10