Marx${activeTag ? ` – ${activeTag}` : \"\"}

\n \n\n

\n ${bookmarks.map((b) => renderBookmarkItem(b, authenticated)).join(\"\\n\")}\n

\n${authenticated ? managementScript(tags.map(t => t.name)) : \"\"}\n\n`;\n}\n\nfunction renderBookmarkItem(bookmark: any, authenticated = false): string {\n const tagsHtml = bookmark.tags.length\n ? `${bookmark.tags\n .map((t: string) => `#${t}`)\n .join(\" \")}`\n : \"\";\n\n const separator = bookmark.tags.length && bookmark.description ? ` | ` : \"\";\n const descHtml = bookmark.description ? `${escapeHtml(bookmark.description)}` : \"\";\n\n const metaLine = tagsHtml || descHtml\n ? `

${tagsHtml}${separator}${descHtml}

`\n : \"\";\n\n const id = bookmark.id;\n const jsData = escapeAttr(JSON.stringify({ id, url: bookmark.url, title: bookmark.title, description: bookmark.description, tags: bookmark.tags }));\n\n const actionsHtml = authenticated\n ? `\n \n \n `\n : \"\";\n\n const editFormHtml = authenticated\n ? ``\n : \"\";\n\n return `

\n \n $\"\"$ \n ${escapeHtml(bookmark.title || bookmark.url)}\n \n ${actionsHtml}\n

\n ${metaLine}\n

${formatDate(bookmark.saved)}

\n ${editFormHtml}\n

`;\n}\n\nfunction renderTagSidebar(tagGroups: any[], activeTag?: string, authenticated = false): string {\n if (activeTag) {\n const tagActions = authenticated\n ? `

\n \n \n

`\n : \"\";\n return `

Tags

${groupsHtml}

`;\n}\n\nfunction managementScript(allTagNames: string[]): string {\n return ``;\n}\n\nfunction escapeHtml(str: string): string {\n return str.replace(/&/g, \"&\").replace(//g, \">\").replace(/\"/g, \""\");\n}\n\nfunction escapeAttr(str: string): string {\n return str.replace(/&/g, \"&\").replace(/\"/g, \""\").replace(/'/g, \"'\").replace(//g, \">\");\n}\n\n// --- Login page ---\n\nfunction renderLoginPage(error?: string): string {\n return `\n\n\n \n \n Marx – Login\n \n \n\n\n \n

\n \n

\n\n`;\n}\n\nfunction unauthorizedResponse(): Response {\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n}\n\n// --- Import endpoint ---\n\nasync function handleImport(req: Request): Promise {\n const bookmarks: any[] = await req.json();\n\n // Collect unique tags\n const tagSet = new Set();\n for (const b of bookmarks) {\n for (const t of b.tags || []) tagSet.add(t);\n }\n\n // Insert tags\n for (const tag of tagSet) {\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO tags (name) VALUES (?)\",\n args: [tag],\n });\n }\n\n // Get tag ID map\n const tagResult = await sqlite.execute(\"SELECT id, name FROM tags\");\n const tagIdMap = new Map();\n for (const row of tagResult.rows as any[]) {\n tagIdMap.set(row.name, row.id);\n }\n\n // Insert bookmarks\n for (const b of bookmarks) {\n const result = await sqlite.execute({\n sql: \"INSERT INTO bookmarks (url, title, description, saved) VALUES (?, ?, ?, ?)\",\n args: [b.url, b.title || \"\", b.description || \"\", b.saved],\n });\n const bookmarkId = result.lastInsertRowid;\n\n for (const tag of b.tags || []) {\n const tagId = tagIdMap.get(tag);\n if (tagId && bookmarkId) {\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO bookmark_tags (bookmark_id, tag_id) VALUES (?, ?)\",\n args: [Number(bookmarkId), tagId],\n });\n }\n }\n }\n\n return new Response(JSON.stringify({ imported: bookmarks.length }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\n// --- Router ---\n\nexport default async function(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n const authenticated = await isAuthenticated(req);\n\n // Login page\n if (path === \"/login\" && req.method === \"GET\") {\n if (authenticated) return Response.redirect(new URL(\"/\", req.url), 302);\n return new Response(renderLoginPage(), { headers: { \"Content-Type\": \"text/html\" } });\n }\n\n // Login form submission\n if (path === \"/login\" && req.method === \"POST\") {\n const formData = await req.formData();\n const password = formData.get(\"password\") as string;\n const expected = Deno.env.get(\"AUTH_PASSWORD\");\n\n if (!expected || password !== expected) {\n return new Response(renderLoginPage(\"Incorrect password\"), {\n status: 401,\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n const token = await createSessionToken(password);\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/\",\n \"Set-Cookie\": setSessionCookie(token),\n },\n });\n }\n\n // Logout\n if (path === \"/logout\") {\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/\",\n \"Set-Cookie\": clearSessionCookie(),\n },\n });\n }\n\n // --- Protected mutation endpoints (require auth) ---\n\n // Import API\n if (path === \"/api/import\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n return handleImport(req);\n }\n\n // Rename tag API\n if (path === \"/api/tags/rename\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { oldName, newName } = await req.json();\n await renameTag(oldName, newName);\n return Response.json({ ok: true, slug: slugify(newName.trim()) });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Delete tag API\n if (path === \"/api/tags/delete\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { name } = await req.json();\n await deleteTag(name);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Update bookmark API\n if (path === \"/api/bookmarks/update\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { id, url, title, description, tags } = await req.json();\n await updateBookmark(id, url, title, description, tags || []);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Delete bookmark API\n if (path === \"/api/bookmarks/delete\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { id } = await req.json();\n await deleteBookmark(id);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Tag page: /tags/{slug}/\n const tagMatch = path.match(/^\\/tags\\/([^/]+)\\/?$/);\n if (tagMatch) {\n const tagSlug = tagMatch[1];\n const [bookmarks, tags] = await Promise.all([getBookmarksByTag(tagSlug), getAllTags()]);\n const activeTag = tags.find((t) => t.slug === tagSlug)?.name || tagSlug;\n return new Response(renderPage(bookmarks, tags, activeTag, authenticated), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // Home page\n if (path === \"/\" || path === \"\") {\n const [bookmarks, tags] = await Promise.all([getAllBookmarks(), getAllTags()]);\n return new Response(renderPage(bookmarks, tags, undefined, authenticated), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}\n","deleted","label",[60],{"_35":59,"_13":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":69,"_37":79,"_17":31,"_71":72,"_73":74,"_75":51,"_76":-5,"_80":81,"_18":82},["D",1772983357784],"children",[],[60],["D",1772982116698],"legacyEnvVars","httpPrivacy","description","Bookmark manager with tag filtering, backed by SQLite","imageUrl","userId","f497980b-7fd3-43fe-9915-57490c62d759","pinnedFileId","e967a682-1aff-11f1-bf68-42dde27851f2","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"tursoName","c01886341aff11f1bf6442dde27851f2","tursoHostname","c01886341aff11f1bf6442dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789518064818],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_131":127},"org",{"_11":12,"_124":125,"_126":127,"_89":90,"_128":129,"_130":51},"branch",{"_17":67,"_13":16,"_35":65,"_42":43,"_45":36,"_46":120,"_121":53,"_122":43,"_123":56,"_57":14,"_54":12},20,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","Sean","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ybGJINk9XVXlsZlFZSkFQdzBRRXpKYXFKMkUifQ","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_35":43,"_13":14,"_37":169,"_49":-5,"_84":51,"_52":53,"_85":53,"_86":87,"_88":-5,"_89":90,"_91":92,"_93":69,"_94":-5,"_95":-5,"_96":97,"_55":56,"_98":99,"_100":101,"_102":170,"_104":-5,"_105":106,"_107":106,"_108":109,"_110":109,"_111":109,"_112":106,"_113":106,"_114":171,"_116":172,"_118":173,"_50":51},[166],"files",[166],"counts",{"_155":97,"_156":157,"_158":159,"_34":160,"_161":162},[153],"upstreamProject","upstreamBranch",{"_35":36,"_37":151,"_39":152,"_13":41,"_42":43,"_17":44,"_45":-5,"_46":-5,"_47":48,"_49":-5,"_50":51,"_52":53,"_54":12,"_55":56,"_57":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1772982116698],["D",1774983935664],{"_35":59,"_13":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":69,"_37":70,"_17":31,"_71":72,"_73":74,"_75":51,"_76":-5,"_18":154},[60],"pulls","branches",2,"forks",1,{"_163":159,"_165":97},"connections",{"_163":97,"_164":97},"count","unfilledCount","emptyCount",{"_35":59,"_13":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":69,"_37":79,"_17":31,"_71":72,"_73":74,"_75":51,"_76":-5,"_80":167,"_18":168},[],[60],["D",1772982116698],["D",1789518064818],{"_11":12,"_131":127},{"_11":12,"_124":125,"_126":127,"_89":90,"_128":129,"_130":51},{"_17":67,"_13":16,"_35":65,"_42":43,"_45":36,"_46":120,"_121":53,"_122":43,"_123":56,"_57":14,"_54":12},"ctx",{"_114":-5,"_148":207,"_208":209,"_210":211,"_212":51,"_213":51,"_214":51,"_215":69,"_216":-5,"_217":-7,"_218":-7,"_219":97,"_220":51,"_221":51,"_222":-5,"_223":51,"_224":51,"_225":51,"_226":-5},"ENV",{"_178":179,"_180":181,"_182":41,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code