\n )}\n {user.username}\n {user.tier && ` • ${user.tier}`}\n {\" • \"}\n Logout\n

\n )}\n {children}\n

\n \n \n);\n\nconst EmailCard = ({ email }: { email: Email }) => (\n

{email.subject || \"No Subject\"}

\n \n {email.from} → {email.to} • {format(new Date(email.timestamp))}\n \n

\n ${email.text}`,\n }}\n />\n

\n);\n\n// Helpers\nasync function fetchEmails(limit = 1): Promise {\n const params = new URLSearchParams({\n apikey: TESTMAIL_API.API_KEY,\n namespace: TESTMAIL_API.NAMESPACE,\n limit: limit.toString(),\n });\n\n const resp = await fetch(`${TESTMAIL_API.BASE_URL}?${params}`);\n const { emails } = await resp.json();\n return emails?.sort((a: Email, b: Email) => b.timestamp - a.timestamp) || [];\n}\n\nasync function extractOTP(content: string): Promise {\n const hash = createHash(\"sha256\").update(content).digest(\"hex\");\n\n // Check cache\n const cache = await blob.getJSON(CACHE_KEY);\n if (cache?.hash === hash && Date.now() - cache.timestamp < CACHE_TTL) {\n return cache.code;\n }\n\n // Extract with AI\n const openai = new OpenAI();\n const { choices } = await openai.chat.completions.create({\n model: \"gpt-5-nano\",\n max_tokens: 256,\n messages: [\n { role: \"system\", content: OTP_PROMPT },\n { role: \"user\", content },\n ],\n });\n\n const code = choices[0].message.content.trim();\n\n // Cache result\n await blob.setJSON(CACHE_KEY, { timestamp: Date.now(), hash, code });\n return code;\n}\n\n// Routes\napp.get(\"/\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n const origin = new URL(c.req.url).origin;\n const otpUrl = `${origin}/otp`;\n\n // Check if user is logged in\n if (!session?.user) {\n return c.html(\n \n

Testmail OTP Service

Please log in to access this service.

\n Log in with Val Town\n

\n ,\n );\n }\n\n // Check if user is authorized\n if (!isAuthorized(session.user.username)) {\n return c.html(\n \n

Access Denied

\n Your account (@{session.user.username}) is not authorized to access\n this service.\n

Please contact the administrator to request access.

\n ,\n 403,\n );\n }\n\n return c.html(\n \n

Setup Steps

\n Create a Testmail account\n
\n testmail.app\n
\n Copy your namespace (e.g. pl1md)\n
\n Found in your Testmail dashboard\n
\n Copy your API key\n
\n Found in Settings → API\n
\n Add environment variables to Val Town\n
\n TESTMAIL_NAMESPACE = your namespace\n
\n TESTMAIL_APIKEY = your API key\n
\n ALLOWED_USERS = comma-separated usernames (optional)\n
\n Install the Raycast snippet (optional)\n
\n Click here to add snippet\n
\n \n Type :email to generate a unique email address\n \n
\n Install the iOS Shortcut (optional)\n
\n \n Download Shortcut\n \n
\n When prompted, paste this URL:\n
\n \n

\n\n

Endpoints

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

Endpoint	Description
\n \n `/otp`\n \n	Get the latest OTP or verification link (JSON)
\n \n `/email`\n \n	View the latest email with AI extraction details
\n \n `/emails`\n \n	View all recent emails
\n \n `/raycast`\n \n	Install Raycast snippet for generating emails

\n\n

Quick Links

\n \n iOS Shortcut\n \n
\n Raycast Snippet\n
\n \n Testmail Dashboard\n \n

\n ,\n );\n});\n\napp.get(\"/emails\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n\n if (!session?.user || !isAuthorized(session.user.username)) {\n return c.redirect(\"/\");\n }\n\n const emails = await fetchEmails(parseInt(c.req.query(\"limit\") || \"10\"));\n\n return c.html(\n \n

Emails

\n {emails.length\n ? (\n emails.map((email) => )\n )\n :

No emails found

}\n ,\n );\n});\n\napp.get(\"/email\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n\n if (!session?.user || !isAuthorized(session.user.username)) {\n return c.redirect(\"/\");\n }\n\n const emails = await fetchEmails(1);\n const email = emails[0];\n\n if (!email) {\n return c.html(\n \n

No emails found

\n ,\n );\n }\n\n const content = email.html || email.text || \"\";\n let extractedCode = null;\n\n // Extract OTP to show debug info\n try {\n extractedCode = await extractOTP(content);\n } catch (error) {\n extractedCode = \"Error extracting code\";\n }\n\n return c.html(\n \n

Latest Email

\n \n

AI Extraction

View AI extraction details

Input (HTML/Text)

{content}

Extracted Output

{extractedCode}

\n ,\n );\n});\n\napp.get(\"/raycast\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n\n if (!session?.user || !isAuthorized(session.user.username)) {\n return c.redirect(\"/\");\n }\n\n const snippet = {\n text:\n `${TESTMAIL_API.NAMESPACE}.{date format=\"yyyy-MM-dd-hh-mm\"}@inbox.testmail.app`,\n name: \"email\",\n keyword: \":email\",\n };\n const url = `https://ray.so/snippets/shared?snippet=${\n encodeURIComponent(JSON.stringify(snippet))\n }`;\n return c.redirect(url);\n});\n\napp.get(\"/otp\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n\n if (!session?.user || !isAuthorized(session.user.username)) {\n return c.json({ error: \"Unauthorized\" }, 401);\n }\n\n const emails = await fetchEmails(1);\n\n if (!emails.length) {\n return c.text(\"No emails\", 204);\n }\n\n const email = emails[0];\n const content = email.html || email.text || \"\";\n\n try {\n const code = await extractOTP(content);\n const status = code !== \"No code or activation link found.\" ? 200 : 202;\n return c.json({\n code,\n timeAgo: format(new Date(email.timestamp)),\n method: \"ai\",\n }, status);\n } catch (error) {\n return c.json({ error: \"Could not extract OTP\" }, 422);\n }\n});\n\n// Health check endpoint (public)\napp.get(\"/health\", (c) => {\n return c.json({ status: \"ok\", timestamp: Date.now() });\n});\n\n// Wrap the app with OAuth middleware\nexport default oauthMiddleware({\n scopes: [\"openid\", \"offline_access\", \"profile\", \"user_rw\"],\n clientName: \"Testmail OTP Service\",\n}, app.fetch);","deleted","label","nbbaier-otp",[124],"pulls","branches",1,"forks","envVars",{"_148":150,"_151":42},"connections",{"_148":42,"_149":42},"count","unfilledCount",2,"emptyCount",{"_18":123,"_20":124,"_125":36,"_126":-5,"_127":68,"_128":66,"_129":38,"_22":153,"_65":131,"_132":133,"_134":135,"_136":26,"_137":138,"_154":155,"_89":156},["D",1769127955574],"children",[],[124],["D",1769104642795],{"_16":17,"_87":83},{"_16":17,"_81":-5,"_82":83,"_33":34,"_84":85,"_86":26},{"_65":66,"_20":67,"_18":68,"_69":19,"_70":71,"_72":73,"_74":28,"_75":76,"_77":78,"_79":21,"_80":17},"ctx",{"_58":-5,"_110":194,"_195":196,"_197":198,"_199":26,"_200":26,"_201":26,"_202":38,"_203":-5,"_204":-7,"_205":-7,"_206":42,"_207":26,"_208":26,"_209":-5,"_210":26,"_211":26,"_212":26,"_213":-5},"ENV",{"_165":166,"_167":168,"_169":67,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]