\n )}\n {user.username}\n {user.tier && ` • ${user.tier}`}\n {\" • \"}\n Logout\n

\n )}\n {children}\n

\n \n \n);\n\nconst EmailCard = ({ email }: { email: Email }) => (\n

{email.subject || \"No Subject\"}

\n \n {email.from} → {email.to} • {format(new Date(email.timestamp))}\n \n

\n ${email.text}`,\n }}\n />\n

\n);\n\n// Helpers\nasync function fetchEmails(limit = 1): Promise {\n const params = new URLSearchParams({\n apikey: TESTMAIL_API.API_KEY,\n namespace: TESTMAIL_API.NAMESPACE,\n limit: limit.toString(),\n });\n\n const resp = await fetch(`${TESTMAIL_API.BASE_URL}?${params}`);\n const { emails } = await resp.json();\n return emails?.sort((a: Email, b: Email) => b.timestamp - a.timestamp) || [];\n}\n\nasync function extractOTP(content: string): Promise {\n const hash = createHash(\"sha256\").update(content).digest(\"hex\");\n\n // Check cache\n const cache = await blob.getJSON(CACHE_KEY);\n if (cache?.hash === hash && Date.now() - cache.timestamp < CACHE_TTL) {\n return cache.code;\n }\n\n // Extract with AI\n const openai = new OpenAI();\n const { choices } = await openai.chat.completions.create({\n model: \"gpt-5-nano\",\n max_tokens: 256,\n messages: [\n { role: \"system\", content: OTP_PROMPT },\n { role: \"user\", content },\n ],\n });\n\n const code = choices[0].message.content.trim();\n\n // Cache result\n await blob.setJSON(CACHE_KEY, { timestamp: Date.now(), hash, code });\n return code;\n}\n\n// Routes\napp.get(\"/\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n const origin = new URL(c.req.url).origin;\n const otpUrl = `${origin}/otp`;\n\n // Check if user is logged in\n if (!session?.user) {\n return c.html(\n \n

Testmail OTP Service

Please log in to access this service.

\n Log in with Val Town\n

\n ,\n );\n }\n\n // Check if user is authorized\n if (!isAuthorized(session.user.username)) {\n return c.html(\n \n

Access Denied

\n Your account (@{session.user.username}) is not authorized to access\n this service.\n

Please contact the administrator to request access.

\n ,\n 403,\n );\n }\n\n return c.html(\n \n

Setup Steps

\n Create a Testmail account\n
\n testmail.app\n
\n Copy your namespace (e.g. pl1md)\n
\n Found in your Testmail dashboard\n
\n Copy your API key\n
\n Found in Settings → API\n
\n Add environment variables to Val Town\n
\n TESTMAIL_NAMESPACE = your namespace\n
\n TESTMAIL_APIKEY = your API key\n
\n ALLOWED_USERS = comma-separated usernames (optional)\n
\n Install the Raycast snippet (optional)\n
\n Click here to add snippet\n
\n \n Type :email to generate a unique email address\n \n
\n Install the iOS Shortcut (optional)\n
\n \n Download Shortcut\n \n
\n When prompted, paste this URL:\n
\n \n

\n\n

Endpoints

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

Endpoint	Description
\n \n `/otp`\n \n	Get the latest OTP or verification link (JSON)
\n \n `/email`\n \n	View the latest email with AI extraction details
\n \n `/emails`\n \n	View all recent emails
\n \n `/raycast`\n \n	Install Raycast snippet for generating emails

\n\n

Quick Links

\n \n iOS Shortcut\n \n
\n Raycast Snippet\n
\n \n Testmail Dashboard\n \n

\n ,\n );\n});\n\napp.get(\"/emails\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n\n if (!session?.user || !isAuthorized(session.user.username)) {\n return c.redirect(\"/\");\n }\n\n const emails = await fetchEmails(parseInt(c.req.query(\"limit\") || \"10\"));\n\n return c.html(\n \n

Emails

\n {emails.length\n ? (\n emails.map((email) => )\n )\n :

No emails found

}\n ,\n );\n});\n\napp.get(\"/email\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n\n if (!session?.user || !isAuthorized(session.user.username)) {\n return c.redirect(\"/\");\n }\n\n const emails = await fetchEmails(1);\n const email = emails[0];\n\n if (!email) {\n return c.html(\n \n

No emails found

\n ,\n );\n }\n\n const content = email.html || email.text || \"\";\n let extractedCode = null;\n\n // Extract OTP to show debug info\n try {\n extractedCode = await extractOTP(content);\n } catch (error) {\n extractedCode = \"Error extracting code\";\n }\n\n return c.html(\n \n

Latest Email

\n \n

AI Extraction

View AI extraction details

Input (HTML/Text)

{content}

Extracted Output

{extractedCode}

\n ,\n );\n});\n\napp.get(\"/raycast\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n\n if (!session?.user || !isAuthorized(session.user.username)) {\n return c.redirect(\"/\");\n }\n\n const snippet = {\n text:\n `${TESTMAIL_API.NAMESPACE}.{date format=\"yyyy-MM-dd-hh-mm\"}@inbox.testmail.app`,\n name: \"email\",\n keyword: \":email\",\n };\n const url = `https://ray.so/snippets/shared?snippet=${\n encodeURIComponent(JSON.stringify(snippet))\n }`;\n return c.redirect(url);\n});\n\napp.get(\"/otp\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n\n if (!session?.user || !isAuthorized(session.user.username)) {\n return c.json({ error: \"Unauthorized\" }, 401);\n }\n\n const emails = await fetchEmails(1);\n\n if (!emails.length) {\n return c.text(\"No emails\", 204);\n }\n\n const email = emails[0];\n const content = email.html || email.text || \"\";\n\n try {\n const code = await extractOTP(content);\n const status = code !== \"No code or activation link found.\" ? 200 : 202;\n return c.json({\n code,\n timeAgo: format(new Date(email.timestamp)),\n method: \"ai\",\n }, status);\n } catch (error) {\n return c.json({ error: \"Could not extract OTP\" }, 422);\n }\n});\n\n// Health check endpoint (public)\napp.get(\"/health\", (c) => {\n return c.json({ status: \"ok\", timestamp: Date.now() });\n});\n\n// Wrap the app with OAuth middleware\nexport default oauthMiddleware({\n scopes: [\"openid\", \"offline_access\", \"profile\", \"user_rw\"],\n clientName: \"Testmail OTP Service\",\n}, app.fetch);","label","nbbaier-otp","children",[71],"contentHash","f6336096a7233f1335c95d9f0bf728cc18c13574275ed35a3a3925d2e8572176","dbf062b0-f7a9-11f0-b4d2-42dde27851f2","f8f2a2d6-279a-11f0-9d52-569c3dd06744",["D",1769096935984],15,"/** @jsxImportSource https://esm.sh/hono@latest/jsx **/\n\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nimport { createHash } from \"node:crypto\";\nimport { Hono } from \"npm:hono\";\nimport { jsx } from \"npm:hono/jsx\";\nimport { format } from \"npm:timeago.js\";\n\nconst app = new Hono();\n\n// Constants\nconst TESTMAIL_API = {\n BASE_URL: \"https://api.testmail.app/api/json\",\n API_KEY: Deno.env.get(\"TESTMAIL_APIKEY\"),\n NAMESPACE: Deno.env.get(\"TESTMAIL_NAMESPACE\"),\n};\n\nconst CACHE_KEY = \"otpCache\";\nconst CACHE_TTL = 10_000;\n\nconst OTP_PROMPT =\n `Extract either an OTP code or an activation link from the provided content, following these rules:\n\nEXTRACTION RULES:\n\n1. OTP (One-Time Passcode):\n - Identify standalone alphanumeric codes (letters and/or numbers).\n - Codes should be 4–8 characters long (e.g., \"ABC123\", \"X7K9P2\", \"123456\").\n - May be labeled as: OTP, code, verification code, passcode, PIN, activation code.\n - May be formatted with spaces or dashes (e.g., \"ABC-123\", \"AB CD 12\").\n - Extract only the code itself, removing spaces and dashes.\n\n2. Activation/Verification Links:\n - Extract any URL found in tags.\n - Include URLs from tracking or redirect services (e.g., mandrillapp.com, sendgrid.net).\n - Look for activation-related link text: \"Verify\", \"Activate\", \"Confirm\", \"Complete\", \"Click here\", \"Choose password\".\n - Extract the full URL from the href attribute.\n - If multiple valid links are present, prioritize those with activation-related text as above; otherwise, select the first found.\n\n3. Priority:\n - If both OTP and link are found, return the OTP.\n - If multiple OTPs exist, return the first valid one found.\n - If multiple links exist, prioritize based on activation-related text as above.\n - If neither an OTP nor a link is found, output: No code or activation link found\n\nBegin with a concise checklist (3–6 bullets) of what you will do; keep items conceptual, not implementation-level.\nAfter performing the extraction, validate in 1–2 lines whether the extraction followed the priority and output rules; if not, self-correct and retry.\n\nOutput Format:\n- Output should be a plain string containing only the extracted code or URL, as determined by the above rules.\n- Do not add any extra formatting (no quotes, brackets, or explanations).\n- If nothing is found, output exactly: No code or activation link found\n- If multiple possible OTPs or activation links are present, only output the single item selected by the priority rules.\n- For malformed HTML where links cannot be parsed, treat as if no link is found.`;\n\n// Types\ninterface Email {\n timestamp: number;\n html?: string;\n text?: string;\n subject?: string;\n from?: string;\n to?: string;\n}\n\n// Components\nconst Layout = (\n { children, title = \"Email Service\" }: { children: any; title?: string },\n) => (\n \n \n \n \n {title}\n \n \n \n

{children}

\n \n \n);\n\nconst EmailCard = ({ email }: { email: Email }) => (\n

{email.subject || \"No Subject\"}

\n \n {email.from} → {email.to} • {format(new Date(email.timestamp))}\n \n

\n ${email.text}`,\n }}\n />\n

\n);\n\n// Helpers\nasync function fetchEmails(limit = 1): Promise {\n const params = new URLSearchParams({\n apikey: TESTMAIL_API.API_KEY,\n namespace: TESTMAIL_API.NAMESPACE,\n limit: limit.toString(),\n });\n\n const resp = await fetch(`${TESTMAIL_API.BASE_URL}?${params}`);\n const { emails } = await resp.json();\n return emails?.sort((a: Email, b: Email) => b.timestamp - a.timestamp) || [];\n}\n\nasync function extractOTP(content: string): Promise {\n const hash = createHash(\"sha256\").update(content).digest(\"hex\");\n\n // Check cache\n const cache = await blob.getJSON(CACHE_KEY);\n if (cache?.hash === hash && Date.now() - cache.timestamp < CACHE_TTL) {\n return cache.code;\n }\n\n // Extract with AI\n const openai = new OpenAI();\n const { choices } = await openai.chat.completions.create({\n model: \"gpt-5-nano\",\n max_tokens: 256,\n messages: [\n { role: \"system\", content: OTP_PROMPT },\n { role: \"user\", content },\n ],\n });\n\n const code = choices[0].message.content.trim();\n\n // Cache result\n await blob.setJSON(CACHE_KEY, { timestamp: Date.now(), hash, code });\n return code;\n}\n\n// Routes\napp.get(\"/\", (c) => {\n const origin = new URL(c.req.url).origin;\n const otpUrl = `${origin}/otp`;\n \n return c.html(\n \n \n

Setup Steps

\n Create a Testmail account\n
\n testmail.app\n
\n Copy your namespace (e.g. pl1md)\n
\n Found in your Testmail dashboard\n
\n Copy your API key\n
\n Found in Settings → API\n
\n Add environment variables to Val Town\n
\n TESTMAIL_NAMESPACE = your namespace\n
\n TESTMAIL_APIKEY = your API key\n
\n Install the Raycast snippet (optional)\n
\n Click here to add snippet\n
\n Type :email to generate a unique email address\n
\n Install the iOS Shortcut (optional)\n
\n Download Shortcut\n
\n When prompted, paste this URL:\n
\n \n

\n\n

Endpoints

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

Endpoint	Description
`/otp`	Get the latest OTP or verification link (JSON)
`/email`	View the latest email with AI extraction details
`/emails`	View all recent emails
`/raycast`	Install Raycast snippet for generating emails

\n\n

Quick Links

\n ,\n );\n});\n\napp.get(\"/emails\", async (c) => {\n const emails = await fetchEmails(parseInt(c.req.query(\"limit\") || \"10\"));\n\n return c.html(\n \n

Emails

\n {emails.length\n ? (\n emails.map((email) => )\n )\n :

No emails found

}\n ,\n );\n});\n\napp.get(\"/email\", async (c) => {\n const emails = await fetchEmails(1);\n const email = emails[0];\n\n if (!email) {\n return c.html(\n \n

No emails found

Latest Email

\n \n

AI Extraction

View AI extraction details

Input (HTML/Text)

{content}

Extracted Output

{extractedCode}

\n ,\n );\n});\n\napp.get(\"/raycast\", (c) => {\n const snippet = {\n text: `${TESTMAIL_API.NAMESPACE}.{date format=\"yyyy-MM-dd-hh-mm\"}@inbox.testmail.app`,\n name: \"email\",\n keyword: \":email\",\n };\n const url = `https://ray.so/snippets/shared?snippet=${encodeURIComponent(JSON.stringify(snippet))}`;\n return c.redirect(url);\n});\n\napp.get(\"/otp\", async (c) => {\n const emails = await fetchEmails(1);\n\n if (!emails.length) {\n return c.text(\"No emails\", 204);\n }\n\n const email = emails[0];\n const content = email.html || email.text || \"\";\n\n try {\n const code = await extractOTP(content);\n const status = code !== \"No code or activation link found.\" ? 200 : 202;\n return c.json({\n code,\n timeAgo: format(new Date(email.timestamp)),\n method: \"ai\",\n }, status);\n } catch (error) {\n return c.json({ error: \"Could not extract OTP\" }, 422);\n }\n});\n\nexport default app.fetch;",[71],"d132beaa18f3121a07a85e5f9360bd4854a5743549024893b0486770833e2aab",["D",1769104642795],"legacyEnvVars","httpPrivacy","description","how i get emails fast","imageUrl","userId","5d1042a9-7b0b-499d-8a72-3a8ac7a4e185","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"5f80108f-7ca4-4327-b77b-089dbe4b5a82","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_140":136},"org",{"_11":12,"_134":-5,"_135":136,"_107":108,"_137":138,"_139":48},"branch","displayName","avatar","https://secure.gravatar.com/avatar/0129a541b7b3574e92c4afd06c5e32da&d=identicon","tier","pro","canRestrictVals","profileImageUrl","","adoptOrgId",{"_32":58,"_13":14,"_34":187,"_46":-5,"_102":48,"_49":50,"_103":50,"_104":105,"_106":-5,"_107":108,"_109":78,"_110":26,"_111":-5,"_112":-5,"_113":114,"_53":115,"_116":-5,"_117":-5,"_118":-5,"_119":-5,"_120":121,"_122":121,"_123":124,"_125":124,"_126":124,"_127":121,"_128":121,"_129":188,"_131":189,"_133":190,"_47":48},"tree",[184],"files",[184],"counts",{"_172":114,"_173":174,"_175":114,"_176":177,"_178":179},"contents",[169],"file","upstreamProject",{"_32":39,"_13":14,"_104":105,"_106":-5,"_49":50,"_129":167},"upstreamBranch",{"_32":33,"_34":165,"_36":166,"_13":16,"_38":39,"_40":41,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":52,"_53":54,"_55":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1746220700333],["D",1769536179737],{"_11":52,"_140":168},"https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yWVl4a0NVdVNvQllmTDNGV2JLZ2xlbkxiS0sifQ",{"_32":76,"_13":71,"_77":78,"_79":-5,"_80":57,"_81":56,"_82":26,"_34":170,"_40":20,"_84":85,"_86":87,"_65":48,"_88":89,"_70":171},["D",1769127955574],[71],"pulls","branches",1,"forks","envVars",{"_180":182,"_183":114},"connections",{"_180":114,"_181":114},"count","unfilledCount",2,"emptyCount",{"_32":76,"_13":71,"_77":78,"_79":-5,"_80":57,"_81":56,"_82":26,"_34":83,"_40":20,"_84":85,"_86":87,"_65":48,"_88":89,"_90":185,"_70":186},[],[71],["D",1769104642795],{"_11":12,"_140":136},{"_11":12,"_134":-5,"_135":136,"_107":108,"_137":138,"_139":48},{"_40":56,"_13":16,"_32":57,"_38":58,"_42":33,"_43":59,"_60":50,"_61":39,"_62":54,"_55":14,"_51":12},"ctx",{"_129":-5,"_162":224,"_225":226,"_227":228,"_229":48,"_230":48,"_231":48,"_232":26,"_233":-5,"_234":-7,"_235":-7,"_236":114,"_237":48,"_238":48,"_239":-5,"_240":48,"_241":48,"_242":48,"_243":-5},"ENV",{"_195":196,"_197":198,"_199":16,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergenbbaier/mainintospookyuser/main

Hmain.tsx+170-26