[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_160":161,"_162":163},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_107":89,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":58,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",13,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","0fc4f052-5636-11f1-b043-ee650bb23af1","name","fileType","http","content","import { blob } from \"https://esm.town/v/std/blob\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nconst BLOB_KEY = \"guestbook_entries\";\nconst BANNED_KEY = \"guestbook_banned\";\nconst LOG_KEY = \"guestbook_deleted_log\";\nconst ADMIN_PASSWORD = Deno.env.get(\"GUESTBOOK_PASSWORD\") ?? \"changeme\";\nconst ADMIN_TOKEN = Deno.env.get(\"GUESTBOOK_TOKEN\") ?? \"token123\";\nconst ADMIN_NAME = \"Nulluex\";\nconst ADMIN_AVATAR = Deno.env.get(\"ADMIN_AVATAR\") ?? \"\";\nconst NOTIFY_EMAIL = Deno.env.get(\"NOTIFY_EMAIL\") ?? \"\";\nconst MAX_ENTRIES = 100;\nconst PAGE_SIZE = 10;\nconst LOG_PAGE_SIZE = 10;\n\ninterface GuestbookEntry {\n id: string;\n name: string;\n website?: string;\n message: string;\n createdAt: string;\n isAdmin?: boolean;\n avatar?: string;\n ip?: string;\n pinned?: boolean;\n private?: boolean;\n likes?: number;\n reply?: { message: string; createdAt: string };\n}\n\ninterface DeletedEntry extends GuestbookEntry {\n deletedAt: string;\n}\n\ninterface BannedIP {\n ip: string;\n bannedAt: string;\n reason?: string;\n}\n\nconst cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n};\n\nfunction jsonp(callback: string, data: unknown) {\n return new Response(`${callback}(${JSON.stringify(data)})`, {\n status: 200,\n headers: { \"Content-Type\": \"application/javascript\", ...cors },\n });\n}\n\nfunction json(data: unknown, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n });\n}\n\nfunction getIP(req: Request): string {\n return req.headers.get(\"cf-connecting-ip\") ??\n req.headers.get(\"x-forwarded-for\")?.split(\",\")[0].trim() ??\n req.headers.get(\"x-real-ip\") ??\n \"unknown\";\n}\n\nasync function getEntries(): Promise {\n return (await blob.getJSON(BLOB_KEY)) as GuestbookEntry[] ?? [];\n}\n\nasync function getBanned(): Promise {\n return (await blob.getJSON(BANNED_KEY)) as BannedIP[] ?? [];\n}\n\nasync function getLog(): Promise {\n return (await blob.getJSON(LOG_KEY)) as DeletedEntry[] ?? [];\n}\n\nfunction sanitize(str: string): string {\n return str.replace(/&/g, \"&\").replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const callback = url.searchParams.get(\"callback\");\n const action = url.searchParams.get(\"action\");\n const token = url.searchParams.get(\"token\") ?? \"\";\n const isAdmin = token === ADMIN_TOKEN;\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n // GET / — fetch entries with pagination\n if (!action) {\n const page = parseInt(url.searchParams.get(\"page\") ?? \"1\");\n const allEntries = await getEntries();\n const entries = isAdmin ? allEntries : allEntries.filter((e) => !e.private);\n const pinned = entries.filter((e) => e.pinned);\n const unpinned = entries.filter((e) => !e.pinned);\n const total = unpinned.length;\n const totalPages = Math.max(1, Math.ceil(total / PAGE_SIZE));\n const start = (page - 1) * PAGE_SIZE;\n const pageEntries = [\n ...pinned,\n ...unpinned.slice(start, start + PAGE_SIZE),\n ].map((e) => ({ ...e, ip: undefined }));\n const result = { entries: pageEntries, total, totalPages, page };\n if (callback) return jsonp(callback, result);\n return json(result);\n }\n\n // login\n if (action === \"login\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n const pw = url.searchParams.get(\"password\") ?? \"\";\n if (pw === ADMIN_PASSWORD) {\n return jsonp(callback, {\n token: ADMIN_TOKEN,\n avatar: ADMIN_AVATAR,\n name: ADMIN_NAME,\n });\n }\n return jsonp(callback, { error: \"Wrong password\" });\n }\n\n // submit\n if (action === \"submit\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n const name = sanitize(url.searchParams.get(\"name\") ?? \"\");\n const message = sanitize(url.searchParams.get(\"message\") ?? \"\");\n const website = url.searchParams.get(\"website\") ?? \"\";\n const honeypot = url.searchParams.get(\"honeypot\") ?? \"\";\n const isPrivate = url.searchParams.get(\"private\") === \"1\";\n const ip = getIP(req);\n if (honeypot) return jsonp(callback, { error: \"Bot detected\" });\n if (!name.trim()) return jsonp(callback, { error: \"Name is required\" });\n if (!message.trim()) {\n return jsonp(callback, { error: \"Message is required\" });\n }\n const banned = await getBanned();\n if (banned.some((b) => b.ip === ip)) {\n return jsonp(callback, { error: \"You are banned from this guestbook.\" });\n }\n const adminPosting = token === ADMIN_TOKEN;\n const entry: GuestbookEntry = {\n id: crypto.randomUUID(),\n name: adminPosting ? ADMIN_NAME : name.trim(),\n ...(website.trim() ? { website: website.trim() } : {}),\n message: message.trim(),\n createdAt: new Date().toISOString(),\n ip,\n likes: 0,\n ...(isPrivate ? { private: true } : {}),\n ...(adminPosting ? { isAdmin: true, avatar: ADMIN_AVATAR } : {}),\n };\n const entries = await getEntries();\n entries.unshift(entry);\n if (entries.length > MAX_ENTRIES) entries.splice(MAX_ENTRIES);\n await blob.setJSON(BLOB_KEY, entries);\n // email notification\n if (!adminPosting && NOTIFY_EMAIL) {\n try {\n await email({\n to: NOTIFY_EMAIL,\n subject: \"New guestbook entry from \" + entry.name,\n text: `Name: ${entry.name}\\nWebsite: ${\n entry.website || \"none\"\n }\\nMessage: ${entry.message}\\nPrivate: ${\n isPrivate ? \"yes\" : \"no\"\n }\\nIP: ${ip}\\nTime: ${entry.createdAt}`,\n });\n } catch (_) {}\n }\n return jsonp(callback, { ...entry, ip: undefined });\n }\n\n // like\n if (action === \"like\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n const id = url.searchParams.get(\"id\") ?? \"\";\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n target.likes = (target.likes ?? 0) + 1;\n await blob.setJSON(BLOB_KEY, entries);\n return jsonp(callback, { success: true, likes: target.likes });\n }\n\n // reply\n if (action === \"reply\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const message = sanitize(url.searchParams.get(\"message\") ?? \"\");\n if (!message.trim()) {\n return jsonp(callback, { error: \"Reply message required\" });\n }\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n target.reply = {\n message: message.trim(),\n createdAt: new Date().toISOString(),\n avatar: ADMIN_AVATAR,\n };\n await blob.setJSON(BLOB_KEY, entries);\n return jsonp(callback, { success: true });\n }\n\n // edit\n if (action === \"edit\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const message = sanitize(url.searchParams.get(\"message\") ?? \"\");\n if (!message.trim()) return jsonp(callback, { error: \"Message required\" });\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n target.message = message.trim();\n await blob.setJSON(BLOB_KEY, entries);\n return jsonp(callback, { success: true });\n }\n\n // pin\n if (action === \"pin\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n target.pinned = !target.pinned;\n await blob.setJSON(BLOB_KEY, entries);\n return jsonp(callback, { success: true, pinned: target.pinned });\n }\n\n // delete\n if (action === \"delete\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n await blob.setJSON(BLOB_KEY, entries.filter((e) => e.id !== id));\n const log = await getLog();\n log.unshift({ ...target, deletedAt: new Date().toISOString() });\n await blob.setJSON(LOG_KEY, log);\n return jsonp(callback, { success: true });\n }\n\n // ban\n if (action === \"ban\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const reason = url.searchParams.get(\"reason\") ?? \"\";\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Entry not found\" });\n const ip = target.ip ?? \"unknown\";\n if (ip === \"unknown\") return jsonp(callback, { error: \"No IP recorded\" });\n const banned = await getBanned();\n if (banned.some((b) => b.ip === ip)) {\n return jsonp(callback, { error: \"Already banned\" });\n }\n banned.push({\n ip,\n bannedAt: new Date().toISOString(),\n ...(reason ? { reason } : {}),\n });\n await blob.setJSON(BANNED_KEY, banned);\n await blob.setJSON(BLOB_KEY, entries.filter((e) => e.id !== id));\n const log = await getLog();\n log.unshift({ ...target, deletedAt: new Date().toISOString() });\n await blob.setJSON(LOG_KEY, log);\n return jsonp(callback, { success: true, ip });\n }\n\n // unban\n if (action === \"unban\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const ip = url.searchParams.get(\"ip\") ?? \"\";\n const banned = await getBanned();\n await blob.setJSON(BANNED_KEY, banned.filter((b) => b.ip !== ip));\n return jsonp(callback, { success: true });\n }\n\n // banned list\n if (action === \"banned\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n return jsonp(callback, await getBanned());\n }\n\n // log\n if (action === \"log\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const page = parseInt(url.searchParams.get(\"page\") ?? \"1\");\n const log = await getLog();\n const total = log.length;\n const totalPages = Math.max(1, Math.ceil(total / LOG_PAGE_SIZE));\n const start = (page - 1) * LOG_PAGE_SIZE;\n return jsonp(callback, {\n entries: log.slice(start, start + LOG_PAGE_SIZE),\n total,\n totalPages,\n page,\n });\n }\n\n // clearlog\n if (action === \"clearlog\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n await blob.setJSON(LOG_KEY, []);\n return jsonp(callback, { success: true });\n }\n\n return json({ error: \"Not found\" }, 404);\n}","import { blob } from \"https://esm.town/v/std/blob\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nconst BLOB_KEY = \"guestbook_entries\";\nconst BANNED_KEY = \"guestbook_banned\";\nconst LOG_KEY = \"guestbook_deleted_log\";\nconst ADMIN_PASSWORD = Deno.env.get(\"GUESTBOOK_PASSWORD\") ?? \"changeme\";\nconst ADMIN_TOKEN = Deno.env.get(\"GUESTBOOK_TOKEN\") ?? \"token123\";\nconst ADMIN_NAME = \"Nulluex\";\nconst ADMIN_AVATAR = Deno.env.get(\"ADMIN_AVATAR\") ?? \"\";\nconst NOTIFY_EMAIL = Deno.env.get(\"NOTIFY_EMAIL\") ?? \"\";\nconst MAX_ENTRIES = 100;\nconst PAGE_SIZE = 10;\nconst LOG_PAGE_SIZE = 10;\n\ninterface GuestbookEntry {\n id: string;\n name: string;\n website?: string;\n message: string;\n createdAt: string;\n isAdmin?: boolean;\n avatar?: string;\n ip?: string;\n pinned?: boolean;\n private?: boolean;\n likes?: number;\n reply?: { message: string; createdAt: string };\n}\n\ninterface DeletedEntry extends GuestbookEntry {\n deletedAt: string;\n}\n\ninterface BannedIP {\n ip: string;\n bannedAt: string;\n reason?: string;\n}\n\nconst cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n};\n\nfunction jsonp(callback: string, data: unknown) {\n return new Response(`${callback}(${JSON.stringify(data)})`, {\n status: 200,\n headers: { \"Content-Type\": \"application/javascript\", ...cors },\n });\n}\n\nfunction json(data: unknown, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n });\n}\n\nfunction getIP(req: Request): string {\n return req.headers.get(\"cf-connecting-ip\") ??\n req.headers.get(\"x-forwarded-for\")?.split(\",\")[0].trim() ??\n req.headers.get(\"x-real-ip\") ??\n \"unknown\";\n}\n\nasync function getEntries(): Promise {\n return (await blob.getJSON(BLOB_KEY)) as GuestbookEntry[] ?? [];\n}\n\nasync function getBanned(): Promise {\n return (await blob.getJSON(BANNED_KEY)) as BannedIP[] ?? [];\n}\n\nasync function getLog(): Promise {\n return (await blob.getJSON(LOG_KEY)) as DeletedEntry[] ?? [];\n}\n\nfunction sanitize(str: string): string {\n return str.replace(/&/g, \"&\").replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const callback = url.searchParams.get(\"callback\");\n const action = url.searchParams.get(\"action\");\n const token = url.searchParams.get(\"token\") ?? \"\";\n const isAdmin = token === ADMIN_TOKEN;\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n // GET / — fetch entries with pagination\n if (!action) {\n const page = parseInt(url.searchParams.get(\"page\") ?? \"1\");\n const allEntries = await getEntries();\n const entries = isAdmin ? allEntries : allEntries.filter((e) => !e.private);\n const pinned = entries.filter((e) => e.pinned);\n const unpinned = entries.filter((e) => !e.pinned);\n const total = unpinned.length;\n const totalPages = Math.max(1, Math.ceil(total / PAGE_SIZE));\n const start = (page - 1) * PAGE_SIZE;\n const pageEntries = [\n ...pinned,\n ...unpinned.slice(start, start + PAGE_SIZE),\n ].map((e) => ({ ...e, ip: undefined }));\n const result = { entries: pageEntries, total, totalPages, page };\n if (callback) return jsonp(callback, result);\n return json(result);\n }\n\n // login\n if (action === \"login\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n const pw = url.searchParams.get(\"password\") ?? \"\";\n if (pw === ADMIN_PASSWORD) {\n return jsonp(callback, {\n token: ADMIN_TOKEN,\n avatar: ADMIN_AVATAR,\n name: ADMIN_NAME,\n });\n }\n return jsonp(callback, { error: \"Wrong password\" });\n }\n\n // submit\n if (action === \"submit\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n const name = sanitize(url.searchParams.get(\"name\") ?? \"\");\n const message = sanitize(url.searchParams.get(\"message\") ?? \"\");\n const website = url.searchParams.get(\"website\") ?? \"\";\n const honeypot = url.searchParams.get(\"honeypot\") ?? \"\";\n const isPrivate = url.searchParams.get(\"private\") === \"1\";\n const ip = getIP(req);\n if (honeypot) return jsonp(callback, { error: \"Bot detected\" });\n if (!name.trim()) return jsonp(callback, { error: \"Name is required\" });\n if (!message.trim()) {\n return jsonp(callback, { error: \"Message is required\" });\n }\n const banned = await getBanned();\n if (banned.some((b) => b.ip === ip)) {\n return jsonp(callback, { error: \"You are banned from this guestbook.\" });\n }\n const adminPosting = token === ADMIN_TOKEN;\n const entry: GuestbookEntry = {\n id: crypto.randomUUID(),\n name: adminPosting ? ADMIN_NAME : name.trim(),\n ...(website.trim() ? { website: website.trim() } : {}),\n message: message.trim(),\n createdAt: new Date().toISOString(),\n ip,\n likes: 0,\n ...(isPrivate ? { private: true } : {}),\n ...(adminPosting ? { isAdmin: true, avatar: ADMIN_AVATAR } : {}),\n };\n const entries = await getEntries();\n entries.unshift(entry);\n if (entries.length > MAX_ENTRIES) entries.splice(MAX_ENTRIES);\n await blob.setJSON(BLOB_KEY, entries);\n // email notification\n if (!adminPosting && NOTIFY_EMAIL) {\n try {\n await email({\n to: NOTIFY_EMAIL,\n subject: \"New guestbook entry from \" + entry.name,\n text: `Name: ${entry.name}\\nWebsite: ${\n entry.website || \"none\"\n }\\nMessage: ${entry.message}\\nPrivate: ${\n isPrivate ? \"yes\" : \"no\"\n }\\nIP: ${ip}\\nTime: ${entry.createdAt}`,\n });\n } catch (_) {}\n }\n return jsonp(callback, { ...entry, ip: undefined });\n }\n\n // like\n if (action === \"like\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n const id = url.searchParams.get(\"id\") ?? \"\";\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n target.likes = (target.likes ?? 0) + 1;\n await blob.setJSON(BLOB_KEY, entries);\n return jsonp(callback, { success: true, likes: target.likes });\n }\n\n // reply\n if (action === \"reply\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const message = sanitize(url.searchParams.get(\"message\") ?? \"\");\n if (!message.trim()) {\n return jsonp(callback, { error: \"Reply message required\" });\n }\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n target.reply = {\n message: message.trim(),\n createdAt: new Date().toISOString(),\n avatar: ADMIN_AVATAR,\n };\n await blob.setJSON(BLOB_KEY, entries);\n return jsonp(callback, { success: true });\n }\n\n // edit\n if (action === \"edit\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const message = sanitize(url.searchParams.get(\"message\") ?? \"\");\n if (!message.trim()) return jsonp(callback, { error: \"Message required\" });\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n target.message = message.trim();\n await blob.setJSON(BLOB_KEY, entries);\n return jsonp(callback, { success: true });\n }\n\n // edit reply\n if (action === \"editreply\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const message = sanitize(url.searchParams.get(\"message\") ?? \"\");\n if (!message.trim()) return jsonp(callback, { error: \"Message required\" });\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target || !target.reply) {\n return jsonp(callback, { error: \"Reply not found\" });\n }\n target.reply.message = message.trim();\n await blob.setJSON(BLOB_KEY, entries);\n return jsonp(callback, { success: true });\n }\n\n // delete reply\n if (action === \"deletereply\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n delete target.reply;\n await blob.setJSON(BLOB_KEY, entries);\n return jsonp(callback, { success: true });\n }\n\n // pin\n if (action === \"pin\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n target.pinned = !target.pinned;\n await blob.setJSON(BLOB_KEY, entries);\n return jsonp(callback, { success: true, pinned: target.pinned });\n }\n\n // delete\n if (action === \"delete\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Not found\" });\n await blob.setJSON(BLOB_KEY, entries.filter((e) => e.id !== id));\n const log = await getLog();\n log.unshift({ ...target, deletedAt: new Date().toISOString() });\n await blob.setJSON(LOG_KEY, log);\n return jsonp(callback, { success: true });\n }\n\n // ban\n if (action === \"ban\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const id = url.searchParams.get(\"id\") ?? \"\";\n const reason = url.searchParams.get(\"reason\") ?? \"\";\n const entries = await getEntries();\n const target = entries.find((e) => e.id === id);\n if (!target) return jsonp(callback, { error: \"Entry not found\" });\n const ip = target.ip ?? \"unknown\";\n if (ip === \"unknown\") return jsonp(callback, { error: \"No IP recorded\" });\n const banned = await getBanned();\n if (banned.some((b) => b.ip === ip)) {\n return jsonp(callback, { error: \"Already banned\" });\n }\n banned.push({\n ip,\n bannedAt: new Date().toISOString(),\n ...(reason ? { reason } : {}),\n });\n await blob.setJSON(BANNED_KEY, banned);\n await blob.setJSON(BLOB_KEY, entries.filter((e) => e.id !== id));\n const log = await getLog();\n log.unshift({ ...target, deletedAt: new Date().toISOString() });\n await blob.setJSON(LOG_KEY, log);\n return jsonp(callback, { success: true, ip });\n }\n\n // unban\n if (action === \"unban\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const ip = url.searchParams.get(\"ip\") ?? \"\";\n const banned = await getBanned();\n await blob.setJSON(BANNED_KEY, banned.filter((b) => b.ip !== ip));\n return jsonp(callback, { success: true });\n }\n\n // banned list\n if (action === \"banned\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n return jsonp(callback, await getBanned());\n }\n\n // log\n if (action === \"log\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n const page = parseInt(url.searchParams.get(\"page\") ?? \"1\");\n const log = await getLog();\n const total = log.length;\n const totalPages = Math.max(1, Math.ceil(total / LOG_PAGE_SIZE));\n const start = (page - 1) * LOG_PAGE_SIZE;\n return jsonp(callback, {\n entries: log.slice(start, start + LOG_PAGE_SIZE),\n total,\n totalPages,\n page,\n });\n }\n\n // clearlog\n if (action === \"clearlog\") {\n if (!callback) return json({ error: \"callback required\" }, 400);\n if (!isAdmin) return jsonp(callback, { error: \"Unauthorized\" });\n await blob.setJSON(LOG_KEY, []);\n return jsonp(callback, { success: true });\n }\n\n return json({ error: \"Not found\" }, 404);\n}","createdAt",["D",1779519495662],"branchVersion","branchId","08fa8246-5636-11f1-b043-ee650bb23af1","id","08f9e4b2-5636-11f1-b043-ee650bb23af1","guestbook-api",["D",1779492550400],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Guestbook API with GET/POST, blob storage, and CORS","imageUrl","f1dbe83b-7fef-4df0-b27d-3d42bcee90fd","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019e5203-dd77-74a5-804b-ef7c7d340eed","tursoName","08f9e4b2563611f1b043ee650bb23af1","tursoHostname","08f9e4b2563611f1b043ee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789512044203],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_106":102},"org",{"_99":98,"_100":-5,"_101":102,"_18":55,"_103":104,"_105":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",15,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","nulluex","handle","displayName","avatar","https://avatars.githubusercontent.com/u/85952011?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":155,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":156,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":157,"_83":158,"_85":159,"_87":25},"tree",[150],"files",[150],"counts",{"_138":62,"_139":140,"_141":62,"_142":143,"_144":145},"contents",[129],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":133,"_13":134,"_33":34,"_35":37,"_24":25,"_135":136,"_27":137},"c5de7e7e-5674-11f1-a581-ee650bb23af1","parentId","latest",["D",1779519495662],12,"label","nulluex-guestbook",[28],"pulls","branches",1,"forks","envVars",{"_146":148,"_149":62},"connections",{"_146":62,"_147":62},"count","unfilledCount",3,"emptyCount",{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":151,"_13":134,"_33":34,"_35":37,"_24":25,"_135":136,"_152":153,"_27":154},["D",1779519495662],"children",[],[28],["D",1779492550400],["D",1789512044203],{"_99":98,"_106":102},{"_99":98,"_100":-5,"_101":102,"_18":55,"_103":104,"_105":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_126":193,"_194":195,"_196":197,"_198":25,"_199":25,"_200":25,"_201":58,"_202":-5,"_203":-7,"_204":-7,"_205":62,"_206":25,"_207":25,"_208":-5,"_209":25,"_210":25,"_211":25,"_212":-5},"ENV",{"_164":165,"_166":167,"_168":89,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v13