Email:\\s*(.*?)\\s*-\\s*eTempMail/i);\n msg.subject = m ? m[1] : \"\";\n m = html.match(/<b>Sender<\\/b>:\\s*<a[^>]*data-cfemail=\"([^\"]+)\"/i);\n if (m) msg.from = decodeCfemail(m[1]);\n else {\n m = html.match(/<b>Sender<\\/b>:\\s*([^<]+)/i);\n msg.from = m ? m[1].trim() : \"\";\n }\n m = html.match(/<b>Date<\\/b>:\\s*([^<]+)/i);\n msg.date = m ? m[1].trim() : \"\";\n m = html.match(/<iframe[^>]*src=\"data:text\\/html,([^\"]+)\"/i);\n msg.body = m ? htmlToText(decodeURIComponent(m[1])) : \"\";\n return msg;\n}\n\nexport async function extend(ci: string): Promise<boolean> {\n const r = await postJson(\"/moreMinutes\", undefined, ci);\n return r.status === 200;\n}\n\nexport async function deleteBox(ci: string): Promise<boolean> {\n const r = await postJson(\"/deleteEmailAddress\", undefined, ci);\n return r.status === 200;\n}\n\nexport async function changeDomain(ci: string, domainId: number): Promise<boolean> {\n const r = await postJson(\"/changeEmailAddress\", { id: String(domainId) }, ci);\n return r.status === 200;\n}\n\nexport async function serverTime(ci: string): Promise<string> {\n const r = await postJson(\"/getServerTime\", undefined, ci);\n return String(r.data);\n}\n","label",[18],"pulls","branches",1,"forks","envVars",{"_160":26,"_162":26},"connections",{"_160":26,"_161":26},"count","unfilledCount","emptyCount",{"_32":187,"_13":188,"_63":189,"_42":-5,"_34":35,"_145":108,"_146":85,"_36":190,"_38":26,"_65":21,"_148":191,"_67":24,"_150":-5,"_174":192,"_17":193},{"_32":144,"_13":18,"_63":64,"_42":-5,"_34":35,"_145":39,"_146":85,"_36":184,"_38":26,"_65":66,"_148":149,"_67":24,"_150":-5,"_174":185,"_17":186},{"_32":177,"_13":178,"_63":83,"_42":-5,"_34":35,"_145":172,"_146":85,"_36":179,"_38":154,"_65":180,"_148":181,"_67":24,"_150":-5,"_174":182,"_17":183},{"_32":167,"_13":168,"_63":169,"_42":-5,"_34":35,"_145":170,"_146":85,"_36":171,"_38":172,"_65":66,"_148":173,"_67":24,"_150":-5,"_174":175,"_17":176},"c5f61a33-f80c-460e-85eb-4f667b385969","test.ts","84afe23e-b039-11f1-b650-1607ee4eb77e",8,["D",1789391230685],4,"import { initSession, inbox, BASE, UA } from \"./etempmail.ts\";\n\nasync function post(path: string, ci: string, body?: Record<string, string>) {\n const res = await fetch(BASE + path, {\n method: \"POST\",\n headers: {\n \"user-agent\": UA, referer: BASE + \"/\", origin: BASE,\n \"x-requested-with\": \"XMLHttpRequest\",\n \"content-type\": \"application/x-www-form-urlencoded\",\n cookie: `ci_session=${ci}`,\n },\n body: body ? new URLSearchParams(body).toString() : \"\",\n });\n const setCi = res.headers.getSetCookie?.().map((c) => c.match(/ci_session=([^;]+)/)?.[1]).find(Boolean);\n return { ci: setCi ?? ci, status: res.status, text: (await res.text()).slice(0, 300) };\n}\n\nconst rk = \"ROGCPQP11944977\";\nlet ci = await initSession();\n// recover\nlet r = await post(\"/recoverEmailAddress\", ci, { key: rk });\nci = r.ci;\nconsole.log(\"recover:\", r.status, r.text);\n\n// getEmailAddress без токена, но с активной сессией\nr = await post(\"/getEmailAddress\", ci, { cf_token: \"\" });\nci = r.ci;\nconsole.log(\"getEmailAddress no-token:\", r.status, r.text);\n\n// getEmailAddress с фейковым токеном\nr = await post(\"/getEmailAddress\", ci, { cf_token: \"XXXX.faketoken\" });\nconsole.log(\"getEmailAddress fake-token:\", r.status, r.text);\nconsole.log(\"inbox still works:\", JSON.stringify(await inbox(ci)).slice(0, 150));\n","children",[],[168],"2c387a26-a442-4b46-ae3f-3a61da2aca7a","main.ts",["D",1789389809889],"http","import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport * as etm from \"./etempmail.ts\";\n\n// ───────────────────────── storage ─────────────────────────\ntype PoolEntry = { recover_key: string; address?: string; ci?: string; updated?: number };\ntype DB = { pool: PoolEntry[] };\n\nasync function db(): Promise<DB> {\n const d = await blob.getJSON<DB>(\"etempmail_db\");\n return d ?? { pool: [] };\n}\nconst save = (d: DB) => blob.setJSON(\"etempmail_db\", d);\n\n// ───────────────────────── helpers ─────────────────────────\nconst json = (data: unknown, status = 200) =>\n Response.json(data, { status, headers: { \"access-control-allow-origin\": \"*\" } });\nconst err = (msg: string, status = 400) => json({ success: false, error: msg }, status);\n\nasync function withBox(key: string, fn: (entry: PoolEntry, ci: string) => Promise<any>) {\n const d = await db();\n const entry = d.pool.find((p) => p.recover_key === key);\n if (!entry) return err(\"unknown recover_key — добавь через POST /pool\", 404);\n\n const attempt = async (ci?: string) => {\n if (!ci) throw new Error(\"SESSION_EXPIRED\");\n return fn(entry, ci);\n };\n try {\n return await attempt(entry.ci);\n } catch (e) {\n if (!(e instanceof Error && e.message === \"SESSION_EXPIRED\")) throw e;\n }\n // session dead → silent re-recover\n const { ci } = await etm.recover(key);\n entry.ci = ci;\n entry.updated = Date.now();\n await save(d);\n return fn(entry, ci);\n}\n\n// ───────────────────────── routes ─────────────────────────\nexport default async function(req: Request): Promise<Response> {\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/+$/, \"\") || \"/\";\n const q = url.searchParams;\n const body = req.method === \"POST\" || req.method === \"PUT\" || req.method === \"DELETE\"\n ? await req.json().catch(() => ({}))\n : ({} as any);\n\n // ── docs\n if (path === \"/\" || path === \"/docs\") {\n return json({\n name: \"eTempMail EDU API\",\n note: \"Creating NEW mailboxes requires Cloudflare Turnstile — impossible server-side. Use the recover-key pool: create keys once (nodriver locally) and POST /pool. Recover/inbox/read/extend/delete/change-domain all work turnstile-free.\",\n routes: {\n \"GET /domains\": \"список .edu.pl доменов (id для /domain)\",\n \"GET /pool\": \"пул ключей\",\n \"POST /pool\": \"добавить ключи {keys:[{recover_key,address}]} или {keys:[\\\"RK\\\", ...]}\",\n \"DELETE /pool?key=RK\": \"убрать ключ из пула\",\n \"POST /mailbox\": \"{recover_key} → восстановить ящик (активировать сессию)\",\n \"GET /inbox?key=RK\": \"входящие\",\n \"GET /message?key=RK&id=N\": \"письмо (subject/from/date/body), id = 1-based\",\n \"POST /extend?key=RK\": \"продлить TTL (+20 мин)\",\n \"POST /delete?key=RK\": \"удалить ящик\",\n \"POST /domain?key=RK\": \"{id: 22|23|24} — сменить домен\",\n \"GET /time?key=RK\": \"серверное время (для расчёта TTL)\",\n },\n });\n }\n\n if (path === \"/domains\") {\n return json({ domains: Object.entries(etm.EDU_DOMAINS).map(([domain, id]) => ({ id, domain })) });\n }\n\n // ── pool management\n if (path === \"/pool\") {\n const d = await db();\n if (req.method === \"GET\") {\n return json({ count: d.pool.length, pool: d.pool.map(({ ci, ...rest }) => ({ ...rest, has_session: !!ci })) });\n }\n if (req.method === \"POST\") {\n const raw = body.keys;\n if (!Array.isArray(raw)) return err(\"body: {keys: [...]}\");\n let added = 0;\n for (const item of raw) {\n const e: PoolEntry = typeof item === \"string\"\n ? { recover_key: item }\n : { recover_key: item.recover_key ?? item.recovery, address: item.address };\n if (!e.recover_key) continue;\n if (!d.pool.some((p) => p.recover_key === e.recover_key)) {\n d.pool.push(e);\n added++;\n }\n }\n await save(d);\n return json({ success: true, added, count: d.pool.length });\n }\n if (req.method === \"DELETE\") {\n const key2 = q.get(\"key\") || body.recover_key;\n const before = d.pool.length;\n d.pool = d.pool.filter((p) => p.recover_key !== key2);\n await save(d);\n return json({ success: true, removed: before - d.pool.length });\n }\n return err(\"method not allowed\", 405);\n }\n\n // ── recover: activate a key → session\n if (path === \"/mailbox\" && req.method === \"POST\") {\n const key = body.recover_key ?? body.key;\n if (!key) return err(\"body: {recover_key}\");\n const d = await db();\n const entry = d.pool.find((p) => p.recover_key === key) ?? { recover_key: key };\n if (!d.pool.some((p) => p.recover_key === key)) d.pool.push(entry);\n try {\n const { ci } = await etm.recover(key);\n entry.ci = ci;\n entry.updated = Date.now();\n await save(d);\n return json({\n success: true,\n recover_key: key,\n address: entry.address ?? null,\n hint: entry.address ? undefined : \"адрес неизвестен — добавь address через POST /pool (recover_key не возвращает адрес)\",\n });\n } catch (e) {\n return err(e instanceof Error ? e.message : \"recover failed\", 502);\n }\n }\n\n const key = q.get(\"key\") || body.recover_key;\n if (!key) return err(\"missing ?key=<recover_key>\");\n\n if (path === \"/inbox\" && req.method === \"GET\") {\n return withBox(key, async (_e, ci) => {\n const messages = await etm.inbox(ci);\n return json({ success: true, count: messages.length, messages });\n }).catch((e) => err(e.message, 502));\n }\n\n if (path === \"/message\" && req.method === \"GET\") {\n const id = parseInt(q.get(\"id\") || \"1\", 10);\n return withBox(key, async (_e, ci) => json({ success: true, message: await etm.message(ci, id) }))\n .catch((e) => err(e.message, 502));\n }\n\n if (path === \"/extend\" && req.method === \"POST\") {\n return withBox(key, async (e, ci) => {\n const ok = await etm.extend(ci);\n if (ok) { e.updated = Date.now(); await save(await db()); }\n return json({ success: ok });\n }).catch((e) => err(e.message, 502));\n }\n\n if (path === \"/delete\" && req.method === \"POST\") {\n return withBox(key, async (_e, ci) => json({ success: await etm.deleteBox(ci) }))\n .catch((e) => err(e.message, 502));\n }\n\n if (path === \"/domain\" && req.method === \"POST\") {\n const id = parseInt(body.id ?? q.get(\"id\"), 10);\n if (![22, 23, 24].includes(id)) return err(\"id must be 22|23|24\");\n return withBox(key, async (_e, ci) => json({ success: await etm.changeDomain(ci, id) }))\n .catch((e) => err(e.message, 502));\n }\n\n if (path === \"/time\" && req.method === \"GET\") {\n return withBox(key, async (_e, ci) => json({ success: true, server_time: await etm.serverTime(ci) }))\n .catch((e) => err(e.message, 502));\n }\n\n return err(\"not found — см. GET /docs\", 404);\n}\n",[],[178],["D",1789389621593],[],[18],"99e0e4a4-6d0d-46b7-982f-eb9c20638e62","README.md","3a2db01a-b03e-11f1-9272-1607ee4eb77e",["D",1789391673546],"# eTempMail EDU API\n\nREST API для https://etempmail.com (edu.pl temp mail) — реверс + recover-flow.\n\n⚠️ **Создание НОВОГО ящика требует Cloudflare Turnstile** — на сервере это не обходится\n(проверено живьём: без токена → тролль-адрес `...bot.brother@get-a-real-job...`,\nфейковый токен → `403 Bot detected`).\nСхема: **разово** создаёшь пул recover_keys локально (nodriver-скрипт), загружаешь их\nв API — дальше всё (восстановление, приём писем, продление, удаление) работает чистым HTTP.\n`recover_key` постоянный: ящик восстанавливается когда угодно, `/extend` продлевает TTL —\nфактически ящик бессмертный. Каждый ключ = один ящик с фиксированным адресом.\n\n## Endpoints\n\n| Метод | Путь | Описание |\n|---|---|---|\n| GET | `/` | docs |\n| GET | `/domains` | домены: 22 securemail, 23 mats, 24 temporarmail (.edu.pl) |\n| GET | `/pool` | пул ключей |\n| POST | `/pool` | `{keys: [\"RK\", ...]}` или `{keys: [{recover_key, address}, ...]}` |\n| DELETE | `/pool?key=RK` | убрать ключ |\n| POST | `/mailbox` | `{recover_key}` → восстановить/активировать ящик |\n| GET | `/inbox?key=RK` | входящие `[{from,subject,date}]` |\n| GET | `/message?key=RK&id=N` | письмо с телом (id = 1-based позиция в инбоксе) |\n| POST | `/extend?key=RK` | +20 мин TTL (дергай раз в ~15 мин) |\n| POST | `/delete?key=RK` | удалить ящик |\n| POST | `/domain?key=RK` | `{id: 22\\|23\\|24}` — сменить домен |\n| GET | `/time?key=RK` | серверное время (расчёт TTL) |\n\nСессии (`ci_session`) кешируются и **автоматически восстанавливаются** через recover при истечении.\n\n## Пример\n\n```bash\n# 1. загрузить пул (JSON из твоего nodriver pool-скрипта)\ncurl -X POST https://<endpoint>/pool -H 'content-type: application/json' \\\n -d '{\"keys\":[{\"recover_key\":\"CMDVMRT11944975\",\"address\":\"7qcm4insfh@securemail.edu.pl\"}, ...]}'\n\n# 2. активировать ящик\ncurl -X POST https://<endpoint>/mailbox -H 'content-type: application/json' \\\n -d '{\"recover_key\":\"CMDVMRT11944975\"}'\n\n# 3. письма\ncurl 'https://<endpoint>/inbox?key=CMDVMRT11944975'\ncurl 'https://<endpoint>/message?key=CMDVMRT11944975&id=1'\n\n# 4. поддерживать живым\ncurl -X POST 'https://<endpoint>/extend?key=CMDVMRT11944975'\n```\n\nФайлы: `main.ts` (API), `etempmail.ts` (клиент к etempmail.com), `test.ts` (интеграционный тест).\n",[],[188],["D",1789389275918],{"_11":12,"_122":70},{"_11":12,"_117":118,"_69":70,"_30":68,"_119":120,"_121":24},{"_38":108,"_13":16,"_32":35,"_109":72,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":-5,"_115":14,"_116":12},"ctx",{"_53":-5,"_141":231,"_232":233,"_234":235,"_236":24,"_237":24,"_238":24,"_239":85,"_240":-5,"_241":-7,"_242":-7,"_243":26,"_244":24,"_245":24,"_246":-5,"_247":24,"_248":24,"_249":24,"_250":-5},"ENV",{"_202":203,"_204":205,"_206":16,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"] </article></body></html>

History · etempmail.ts