[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_152":153,"_154":155},"routes/_app.x.$handle.$name",{"_93":92,"_32":44,"_102":83,"_27":103,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":25,"_120":-5,"_121":-5,"_122":123},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":-5,"_55":25,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":76,"_77":78,"_79":80,"_81":25},"version",2,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":20,"_35":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","valtown-email-sender.ts","latestPath","fileId","becd45fa-5568-11f1-a876-ee650bb23af1","name","fileType","http","content","// ════════════════════════════════════════════════════════════════════════\n// Liftaro Email-Sender Val (val.town HTTP-Val)\n// ────────────────────────────────────────────────────────────────────────\n// HTTP-Endpoint, der eine Mail über das All-Inkl-Postfach (SMTP) versendet.\n// Wird vom Hauptcheck-Frontend aufgerufen, wenn der Bearbeiter eine Reply\n// auf eine Inbox-Email absendet.\n//\n// POST \n// Header: X-App-Secret: \n// Body (JSON): {\n// to: \"kunde@example.de\" (oder Array),\n// subject: \"Re: ...\",\n// text: \"Plain-Text-Body\",\n// html?: \"

HTML-Body

\",\n// replyTo?: \"check@liftaro.de\",\n// inReplyTo?: \"\",\n// references?: \" \",\n// attachments?: [{ filename, contentType, contentBase64 }]\n// }\n//\n// Response 200: { ok: true, messageId }\n// Response 401: { error: \"Auth failed\" }\n// Response 400: { error: \"

\" }\n//\n// Env-Variablen (in val.town Settings → Environment Variables):\n// APP_SECRET — geheimer String, mit dem das Frontend sich authentifiziert\n// SMTP_HOST — z.B. \"w021201e.kasserver.com\"\n// SMTP_PORT — \"465\" (SSL) oder \"587\" (STARTTLS)\n// SMTP_USER — Postfach-Login (oft die Email-Adresse oder eine Kürzel-ID)\n// SMTP_PASS — Postfach-Passwort\n// SMTP_FROM — Default-Absender, z.B. \"check@liftaro.de\"\n// SMTP_FROM_NAME — z.B. \"Liftaro GmbH\"\n// ALLOWED_ORIGIN — z.B. \"https://check.liftaro.de\" (oder \"*\" während Test)\n// ════════════════════════════════════════════════════════════════════════\n\nimport { SMTPClient } from \"https://deno.land/x/denomailer@1.6.0/mod.ts\";\n\ntype Attachment = { filename: string; contentType: string; contentBase64: string };\ntype SendPayload = {\n to: string | string[];\n subject: string;\n text?: string;\n html?: string;\n replyTo?: string;\n inReplyTo?: string;\n references?: string;\n attachments?: Attachment[];\n};\n\nfunction cors(allow: string): HeadersInit {\n return {\n \"Access-Control-Allow-Origin\": allow,\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-App-Secret\",\n \"Access-Control-Max-Age\": \"86400\",\n };\n}\n\nfunction json(body: any, status: number, allow: string): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...cors(allow) },\n });\n}\n\nfunction b64ToUint8(b64: string): Uint8Array {\n const bin = atob(b64);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nexport default async function (req: Request): Promise {\n const ALLOW = Deno.env.get(\"ALLOWED_ORIGIN\") || \"*\";\n\n // CORS-Preflight\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors(ALLOW) });\n }\n\n if (req.method !== \"POST\") {\n return json({ error: \"Method not allowed\" }, 405, ALLOW);\n }\n\n // 1. App-Secret prüfen\n const expectedSecret = Deno.env.get(\"APP_SECRET\") || \"\";\n const gotSecret = req.headers.get(\"X-App-Secret\") || \"\";\n if (!expectedSecret || gotSecret !== expectedSecret) {\n return json({ error: \"Auth failed\" }, 401, ALLOW);\n }\n\n // 2. Body parsen\n let body: SendPayload;\n try { body = await req.json(); }\n catch { return json({ error: \"Invalid JSON\" }, 400, ALLOW); }\n\n const to = Array.isArray(body.to) ? body.to : [body.to];\n if (!to.length || !to[0]) return json({ error: \"Missing 'to'\" }, 400, ALLOW);\n if (!body.subject) return json({ error: \"Missing 'subject'\" }, 400, ALLOW);\n if (!body.text && !body.html) return json({ error: \"Missing 'text' or 'html'\" }, 400, ALLOW);\n\n // 3. SMTP-Connection vorbereiten\n const host = Deno.env.get(\"SMTP_HOST\") || \"\";\n const port = parseInt(Deno.env.get(\"SMTP_PORT\") || \"465\", 10);\n const user = Deno.env.get(\"SMTP_USER\") || \"\";\n const pass = Deno.env.get(\"SMTP_PASS\") || \"\";\n const fromAddr = Deno.env.get(\"SMTP_FROM\") || user;\n const fromName = Deno.env.get(\"SMTP_FROM_NAME\") || \"Liftaro GmbH\";\n if (!host || !user || !pass) {\n return json({ error: \"SMTP not configured (HOST/USER/PASS missing)\" }, 500, ALLOW);\n }\n\n // 4. Custom Headers für In-Reply-To / References (für Thread-Anbindung)\n const customHeaders: Record = {};\n if (body.inReplyTo) {\n const mid = body.inReplyTo.startsWith(\"<\") ? body.inReplyTo : `<${body.inReplyTo}>`;\n customHeaders[\"In-Reply-To\"] = mid;\n if (!body.references) customHeaders[\"References\"] = mid;\n }\n if (body.references) customHeaders[\"References\"] = body.references;\n\n // 5. Attachments aufbereiten\n const attachments = (body.attachments || []).map(a => ({\n filename: a.filename,\n contentType: a.contentType || \"application/octet-stream\",\n encoding: \"binary\" as const,\n content: b64ToUint8(a.contentBase64),\n }));\n\n // 6. SMTP-Client + Send\n const client = new SMTPClient({\n connection: {\n hostname: host,\n port: port,\n tls: port === 465, // implicit TLS bei 465, STARTTLS bei 587\n auth: { username: user, password: pass },\n },\n });\n\n try {\n const fromHeader = fromName ? `${fromName} <${fromAddr}>` : fromAddr;\n await client.send({\n from: fromHeader,\n to: to,\n replyTo: body.replyTo || fromAddr,\n subject: body.subject,\n content: body.text || \"\",\n html: body.html || undefined,\n headers: customHeaders,\n attachments: attachments.length ? attachments : undefined,\n });\n await client.close();\n return json({ ok: true, from: fromHeader, to: to, subject: body.subject }, 200, ALLOW);\n } catch (err: any) {\n try { await client.close(); } catch (_) {}\n console.error(\"[email-sender] SMTP-Send fehlgeschlagen:\", err);\n return json({ error: \"SMTP send failed: \" + (err?.message || String(err)) }, 500, ALLOW);\n }\n}\n","createdAt",["D",1779405370195],"branchVersion","branchId","be121938-5568-11f1-874c-ee650bb23af1","id","be10f620-5568-11f1-874c-ee650bb23af1","liftaroEmailSender",["D",1779404377893],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","b8672cc5-9c71-42c6-931f-a0aabca33bdd","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e049b-6e23-74ee-9bdd-0c49067080a6","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_93":92,"_101":97},"org",{"_93":92,"_94":95,"_96":97,"_18":53,"_98":99,"_100":25},"branch",{"_13":82,"_32":83,"_42":41,"_84":43,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":44,"_91":92},"isOwned",10,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","giltglobalinvest","handle","displayName","Patrizio Fontanarosa","avatar","https://lh3.googleusercontent.com/a/ACg8ocL48GSPatvcxwg0cqcSWpW_ddx-HBZAMenADEoTYtVSkvBX8g=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":148,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":-5,"_55":25,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":149,"_77":150,"_79":151,"_81":25},"tree",[143],"files",[143],"counts",{"_132":59,"_133":129,"_134":59,"_135":136,"_137":138},"contents",[124],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":125,"_32":28,"_30":31,"_126":-5,"_40":41,"_39":14,"_127":25,"_37":128,"_13":129,"_33":20,"_35":36,"_24":25,"_130":-5,"_27":131},"0d8a6f5e-556b-11f1-a573-ee650bb23af1","parentId","latest",["D",1779405370195],1,"label",[28],"pulls","branches","forks","envVars",{"_139":141,"_142":59},"connections",{"_139":59,"_140":59},"count","unfilledCount",12,"emptyCount",{"_42":125,"_32":28,"_30":31,"_126":-5,"_40":41,"_39":14,"_127":25,"_37":144,"_13":129,"_33":20,"_35":36,"_24":25,"_130":-5,"_145":146,"_27":147},["D",1779405370195],"children",[],[28],["D",1779404377893],{"_93":92,"_101":97},{"_93":92,"_94":95,"_96":97,"_18":53,"_98":99,"_100":25},{"_13":82,"_32":83,"_42":41,"_84":43,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":44,"_91":92},"ctx",{"_75":-5,"_121":185,"_186":187,"_188":189,"_190":25,"_191":25,"_192":25,"_193":194,"_195":-5,"_196":-7,"_197":-7,"_198":59,"_199":25,"_200":25,"_201":-5,"_202":25,"_203":25,"_204":25,"_205":-5},"ENV",{"_156":157,"_158":159,"_160":83,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets",true,"preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2