[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_193":194,"_195":196},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_147":-5,"_20":148,"_22":149,"_150":151,"_152":153,"_26":154,"_24":155,"_156":-5,"_157":-5,"_158":52,"_159":160,"_161":43,"_162":-5,"_163":-5,"_164":165},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","piyatat726","name","chitien-inquiry","branchName","main","version","path","main.tsx","project",{"_33":88,"_13":14,"_44":89,"_90":-5,"_91":52,"_92":93,"_94":93,"_95":96,"_97":-5,"_98":99,"_100":36,"_101":43,"_102":-5,"_103":-5,"_104":84,"_105":106,"_107":108,"_109":110,"_111":112,"_113":-5,"_114":115,"_116":115,"_117":118,"_119":118,"_120":118,"_121":115,"_122":115,"_123":124,"_125":126,"_127":128,"_129":52},"tree",[55,56,57,58],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":54},"contents",[],"upstream","pull","ahead","behind","envVars","id","044e36b1-4d4b-4ec4-9882-aad3f02b99d6","fileId","01a080e1-be0d-720f-a0a0-9bf8a8e4498f","parentId","branchId","4bb477fd-f17c-45e1-8c45-9ac232bb7f1e","branchVersion",5,"latest",true,"createdAt",["D",1788868821249],1,"fileType","http","content","/** @jsxImportSource npm:hono/jsx */\nimport { Hono } from \"npm:hono\";\nimport { email } from \"https://esm.town/v/std/email\";\nimport { addInquiry, countRecentByIp, listInquiries } from \"./db.ts\";\n\n// 齊天旅行社網站詢問表單後端\n// POST /inquiry (body: JSON sent as text/plain to avoid CORS preflight)\n// GET /admin?key=INQUIRY_ADMIN_KEY -> 詢問列表\n// GET /health\n\nconst app = new Hono();\n\nconst LIMIT = { name: 80, email: 160, phone: 60, month: 40, party: 40, message: 4000, dest: 40 };\n\nasync function sha256(s: string): Promise {\n const buf = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n// strip ASCII control characters (keep tab/newline), trim, cap length\nconst CONTROL_RE = new RegExp(\"[\\\\x00-\\\\x08\\\\x0B\\\\x0C\\\\x0E-\\\\x1F]\", \"g\");\nfunction clean(v: unknown, max: number): string {\n return String(v ?? \"\").replace(CONTROL_RE, \"\").trim().slice(0, max);\n}\n\nfunction fmtDate(iso: string): string {\n // created_at is UTC from sqlite; show Taipei time\n const d = new Date(iso.replace(\" \", \"T\") + \"Z\");\n return d.toLocaleString(\"zh-TW\", { timeZone: \"Asia/Taipei\", hour12: false });\n}\n\napp.get(\"/\", (c) => c.json({ service: \"chitien-inquiry\", ok: true }));\napp.get(\"/health\", (c) => c.text(\"ok\"));\n\napp.post(\"/inquiry\", async (c) => {\n let body: any = {};\n try {\n body = JSON.parse(await c.req.text());\n } catch {\n return c.json({ ok: false, error: \"bad_json\" }, 400);\n }\n\n // Honeypot: real users never fill this. Pretend success so bots move on.\n if (clean(body.website, 200)) return c.json({ ok: true, id: 0 });\n\n const name = clean(body.name, LIMIT.name);\n const emailAddr = clean(body.email, LIMIT.email);\n const phone = clean(body.phone, LIMIT.phone);\n const dests: string[] = Array.isArray(body.destinations)\n ? body.destinations.map((d: unknown) => clean(d, LIMIT.dest)).filter(Boolean).slice(0, 20)\n : [];\n const month = clean(body.month, LIMIT.month);\n const party = clean(body.party, LIMIT.party);\n const message = clean(body.message, LIMIT.message);\n const lang = clean(body.lang, 5) || \"zh\";\n\n if (name.length < 1) return c.json({ ok: false, error: \"name_required\" }, 400);\n if (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(emailAddr)) return c.json({ ok: false, error: \"email_invalid\" }, 400);\n if (!message && dests.length === 0) return c.json({ ok: false, error: \"empty\" }, 400);\n\n const ip = c.req.header(\"x-forwarded-for\")?.split(\",\")[0].trim() || \"unknown\";\n const ipHash = (await sha256(ip)).slice(0, 24);\n if ((await countRecentByIp(ipHash, 15)) >= 5) {\n return c.json({ ok: false, error: \"rate_limited\" }, 429);\n }\n\n const id = await addInquiry({\n name,\n email: emailAddr,\n phone,\n destinations: dests.join(\"、\"),\n month,\n party,\n message,\n lang,\n ip_hash: ipHash,\n user_agent: clean(c.req.header(\"user-agent\"), 200),\n });\n\n const lines = [\n `齊天旅行社網站新詢問 #${id}`,\n \"\",\n `姓名：${name}`,\n `Email：${emailAddr}`,\n `電話 / LINE：${phone || \"未填\"}`,\n `想去的地方：${dests.join(\"、\") || \"未指定\"}`,\n `預計出發：${month || \"未填\"}`,\n `人數：${party || \"未填\"}`,\n `語言：${lang}`,\n \"\",\n \"留言：\",\n message || \"（無）\",\n \"\",\n \"直接回覆此信即可回信給客人。\",\n ];\n\n try {\n await email({\n subject: `【齊天旅行社網站詢問】${name}｜${dests.join(\"、\") || \"未指定目的地\"}`,\n text: lines.join(\"\\n\"),\n replyTo: emailAddr,\n });\n } catch (e) {\n console.error(\"email notification failed\", e);\n }\n\n return c.json({ ok: true, id });\n});\n\napp.get(\"/admin\", async (c) => {\n const key = c.req.query(\"key\") ?? \"\";\n const expected = Deno.env.get(\"INQUIRY_ADMIN_KEY\") ?? \"\";\n if (!expected || key !== expected) return c.text(\"Unauthorized\", 401);\n const rows = await listInquiries(300);\n return c.html(\n \n \n \n \n \n 齊天旅行社網站詢問\n \n \n \n

網站詢問（共 {rows.length} 筆，最新在上）

\n {rows.length === 0 &&

目前還沒有詢問。

}\n {rows.map((r) => (\n

#{r.id}・{fmtDate(r.created_at)}・{r.lang}

{r.name}　{r.email}　電話/LINE：{r.phone || \"未填\"}

目的地：{r.destinations || \"未指定\"}　出發：{r.month || \"未填\"}　人數：{r.party || \"未填\"}

{r.message || \"（無留言）\"}

\n ))}\n \n ,\n );\n});\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","deleted",false,"label",[19],{"_33":80,"_13":81,"_35":82,"_37":-5,"_38":39,"_40":46,"_42":43,"_44":83,"_17":84,"_47":85,"_49":-5,"_51":52,"_53":-5,"_60":86,"_18":87},{"_33":72,"_13":73,"_35":74,"_37":-5,"_38":39,"_40":75,"_42":43,"_44":76,"_17":46,"_47":24,"_49":77,"_51":52,"_53":-5,"_60":78,"_18":79},{"_33":63,"_13":64,"_35":65,"_37":-5,"_38":39,"_40":66,"_42":43,"_44":67,"_17":46,"_47":68,"_49":69,"_51":52,"_53":-5,"_60":70,"_18":71},{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":59,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_60":61,"_18":62},["D",1788868821249],"children",[],[19],"fcf36612-ff8c-4e05-b935-4371de93a7d6","db.ts","01a080e1-be0d-720f-a0a0-95f2ff9c7dc2",2,["D",1788868727973],"script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport interface Inquiry {\n id: number;\n name: string;\n email: string;\n phone: string;\n destinations: string;\n month: string;\n party: string;\n message: string;\n lang: string;\n ip_hash: string;\n user_agent: string;\n created_at: string;\n}\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS inquiries (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n email TEXT NOT NULL,\n phone TEXT NOT NULL DEFAULT '',\n destinations TEXT NOT NULL DEFAULT '',\n month TEXT NOT NULL DEFAULT '',\n party TEXT NOT NULL DEFAULT '',\n message TEXT NOT NULL DEFAULT '',\n lang TEXT NOT NULL DEFAULT 'zh',\n ip_hash TEXT NOT NULL DEFAULT '',\n user_agent TEXT NOT NULL DEFAULT '',\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n)`);\n\nexport async function addInquiry(i: Omit): Promise {\n const r = await sqlite.execute({\n sql: `INSERT INTO inquiries (name, email, phone, destinations, month, party, message, lang, ip_hash, user_agent)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [i.name, i.email, i.phone, i.destinations, i.month, i.party, i.message, i.lang, i.ip_hash, i.user_agent],\n });\n return Number(r.lastInsertRowid ?? 0);\n}\n\nexport async function countRecentByIp(ipHash: string, minutes: number): Promise {\n const r = await sqlite.execute({\n sql: `SELECT COUNT(*) AS n FROM inquiries WHERE ip_hash = ? AND created_at >= datetime('now', ?)`,\n args: [ipHash, `-${minutes} minutes`],\n });\n return Number((r.rows[0] as any)?.n ?? 0);\n}\n\nexport async function listInquiries(limit = 300): Promise {\n const r = await sqlite.execute({\n sql: `SELECT id, name, email, phone, destinations, month, party, message, lang, created_at\n FROM inquiries ORDER BY id DESC LIMIT ?`,\n args: [limit],\n });\n return r.rows as unknown as Inquiry[];\n}\n",[],[64],"b7bf10e0-84e2-4dee-b7f6-46d8ccd04908","README.md","01a080e1-be0d-720f-a0a0-9153a0ca3e53",6,["D",1788868842846],"# chitien-inquiry\n\n齊天旅行社 (Chi-Tien Travel) 官網詢問表單的後端。\n\n- `POST /inquiry` 接收網站表單（JSON，以 text/plain 送出避免 CORS preflight），存進 SQLite `inquiries` 表，並用 std/email 寄通知信到帳號信箱（回覆信件即回給客人）。\n- `GET /admin?key=INQUIRY_ADMIN_KEY` 查看所有詢問。\n- `GET /health` 健康檢查。\n\n防護：honeypot 欄位 `website`、每個 IP 15 分鐘內最多 5 筆、欄位長度限制、控制字元過濾。\n",[],[73],"83808d2d-83b4-48ca-8033-5ef2f339ec00","components","01a080e1-be0d-720f-a0a0-8c994b4d2526",["D",1788868672868],0,"directory",[],[81],"2e9fda9f-c072-4ae0-a75e-c7ccaadd31aa",["D",1788868672868],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","齊天旅行社網站詢問表單後端: 存 SQLite + email 通知","imageUrl","userId","04d840cc-4bfb-411e-9b63-ee625b96a32a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019edd59-7b3e-722d-a9c9-2bb34b53ed67","tursoName","2e9fda9fc0724ae0a75ec7ccaadd31aa","tursoHostname","2e9fda9fc0724ae0a75ec7ccaadd31aa-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789651264012],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_146":142},"org",{"_11":12,"_139":140,"_141":142,"_98":99,"_143":144,"_145":52},"branch",{"_17":130,"_13":16,"_33":39,"_131":88,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":14,"_138":12},"isOwned",7,"projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","哲齊許","avatar","https://lh3.googleusercontent.com/a/ACg8ocL--LqhYafFVZniKIfsTcCNAYb_-LmvuCWSdg_tAqidOaXRAHs=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":88,"_13":14,"_44":188,"_90":-5,"_91":52,"_92":93,"_94":93,"_95":96,"_97":-5,"_98":99,"_100":36,"_101":43,"_102":-5,"_103":-5,"_104":84,"_105":106,"_107":108,"_109":110,"_111":189,"_113":-5,"_114":115,"_116":115,"_117":118,"_119":118,"_120":118,"_121":115,"_122":115,"_123":190,"_125":191,"_127":192,"_129":52},[176,177,178,179],"files",[176,177,178,179],"counts",{"_167":84,"_168":46,"_169":84,"_32":170,"_171":172},[],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":166},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],"pulls","branches","forks",{"_173":46,"_175":84},"connections",{"_173":84,"_174":84},"count","unfilledCount","emptyCount",{"_33":80,"_13":81,"_35":82,"_37":-5,"_38":39,"_40":46,"_42":43,"_44":83,"_17":84,"_47":85,"_49":-5,"_51":52,"_53":-5,"_60":186,"_18":187},{"_33":72,"_13":73,"_35":74,"_37":-5,"_38":39,"_40":75,"_42":43,"_44":76,"_17":46,"_47":24,"_49":77,"_51":52,"_53":-5,"_60":184,"_18":185},{"_33":63,"_13":64,"_35":65,"_37":-5,"_38":39,"_40":66,"_42":43,"_44":67,"_17":46,"_47":68,"_49":69,"_51":52,"_53":-5,"_60":182,"_18":183},{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":59,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_60":180,"_18":181},[],[19],[],[64],[],[73],[],[81],["D",1788868672868],["D",1789651264012],{"_11":12,"_146":142},{"_11":12,"_139":140,"_141":142,"_98":99,"_143":144,"_145":52},{"_17":130,"_13":16,"_33":39,"_131":88,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":14,"_138":12},"ctx",{"_123":-5,"_163":226,"_227":228,"_229":230,"_231":52,"_232":52,"_233":52,"_234":43,"_235":-5,"_236":-7,"_237":-7,"_238":84,"_239":52,"_240":52,"_241":-5,"_242":52,"_243":52,"_244":52,"_245":-5},"ENV",{"_197":198,"_199":200,"_201":16,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e8c4b7030cb7600e4eb0736b15f422c8b8bd130f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]