Marx${activeTag ? ` – ${activeTag}` : \"\"}

\n \n\n

\n ${bookmarks.map((b) => renderBookmarkItem(b, authenticated)).join(\"\\n\")}\n

\n${authenticated ? managementScript(tags.map(t => t.name)) : \"\"}\n\n`;\n}\n\nfunction renderBookmarkItem(bookmark: any, authenticated = false): string {\n const tagsHtml = bookmark.tags.length\n ? `${bookmark.tags\n .map((t: string) => `#${t}`)\n .join(\" \")}`\n : \"\";\n\n const separator = bookmark.tags.length && bookmark.description ? ` | ` : \"\";\n const descHtml = bookmark.description ? `${escapeHtml(bookmark.description)}` : \"\";\n\n const metaLine = tagsHtml || descHtml\n ? `

${tagsHtml}${separator}${descHtml}

`\n : \"\";\n\n const id = bookmark.id;\n const jsData = escapeAttr(JSON.stringify({ id, url: bookmark.url, title: bookmark.title, description: bookmark.description, tags: bookmark.tags }));\n\n const actionsHtml = authenticated\n ? `\n \n \n `\n : \"\";\n\n const editFormHtml = authenticated\n ? ``\n : \"\";\n\n return `

\n \n $\"\"$ \n ${escapeHtml(bookmark.title || bookmark.url)}\n \n ${actionsHtml}\n

\n ${metaLine}\n

${formatDate(bookmark.saved)}

\n ${editFormHtml}\n

`;\n}\n\nfunction renderTagSidebar(tagGroups: any[], activeTag?: string, authenticated = false): string {\n if (activeTag) {\n const tagActions = authenticated\n ? `

\n \n \n

`\n : \"\";\n return `

Tags

${groupsHtml}

`;\n}\n\nfunction managementScript(allTagNames: string[]): string {\n return ``;\n}\n\nfunction escapeHtml(str: string): string {\n return str.replace(/&/g, \"&\").replace(//g, \">\").replace(/\"/g, \""\");\n}\n\nfunction escapeAttr(str: string): string {\n return str.replace(/&/g, \"&\").replace(/\"/g, \""\").replace(/'/g, \"'\").replace(//g, \">\");\n}\n\n// --- Login page ---\n\nfunction renderLoginPage(error?: string): string {\n return `\n\n\n \n \n Marx – Login\n \n \n\n\n \n

\n \n

\n\n`;\n}\n\nfunction unauthorizedResponse(): Response {\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n}\n\n// --- Import endpoint ---\n\nasync function handleImport(req: Request): Promise {\n const bookmarks: any[] = await req.json();\n\n // Collect unique tags\n const tagSet = new Set();\n for (const b of bookmarks) {\n for (const t of b.tags || []) tagSet.add(t);\n }\n\n // Insert tags\n for (const tag of tagSet) {\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO tags (name) VALUES (?)\",\n args: [tag],\n });\n }\n\n // Get tag ID map\n const tagResult = await sqlite.execute(\"SELECT id, name FROM tags\");\n const tagIdMap = new Map();\n for (const row of tagResult.rows as any[]) {\n tagIdMap.set(row.name, row.id);\n }\n\n // Insert bookmarks\n for (const b of bookmarks) {\n const result = await sqlite.execute({\n sql: \"INSERT INTO bookmarks (url, title, description, saved) VALUES (?, ?, ?, ?)\",\n args: [b.url, b.title || \"\", b.description || \"\", b.saved],\n });\n const bookmarkId = result.lastInsertRowid;\n\n for (const tag of b.tags || []) {\n const tagId = tagIdMap.get(tag);\n if (tagId && bookmarkId) {\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO bookmark_tags (bookmark_id, tag_id) VALUES (?, ?)\",\n args: [Number(bookmarkId), tagId],\n });\n }\n }\n }\n\n return new Response(JSON.stringify({ imported: bookmarks.length }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\n// --- Router ---\n\nexport default async function(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n const authenticated = await isAuthenticated(req);\n\n // Login page\n if (path === \"/login\" && req.method === \"GET\") {\n if (authenticated) return Response.redirect(new URL(\"/\", req.url), 302);\n return new Response(renderLoginPage(), { headers: { \"Content-Type\": \"text/html\" } });\n }\n\n // Login form submission\n if (path === \"/login\" && req.method === \"POST\") {\n const formData = await req.formData();\n const pw = formData.get(\"password\") as string;\n const expected = Deno.env.get(\"AUTH_PASSWORD\");\n\n if (!expected || pw !== expected) {\n return new Response(renderLoginPage(\"Incorrect password\"), {\n status: 401,\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n const token = await createSessionToken(pw);\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/\",\n \"Set-Cookie\": setSessionCookie(token),\n },\n });\n }\n\n // Logout\n if (path === \"/logout\") {\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/\",\n \"Set-Cookie\": clearSessionCookie(),\n },\n });\n }\n\n // --- Protected mutation endpoints (require auth) ---\n\n // Import API\n if (path === \"/api/import\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n return handleImport(req);\n }\n\n // Rename tag API\n if (path === \"/api/tags/rename\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { oldName, newName } = await req.json();\n await renameTag(oldName, newName);\n return Response.json({ ok: true, slug: slugify(newName.trim()) });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Delete tag API\n if (path === \"/api/tags/delete\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { name } = await req.json();\n await deleteTag(name);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Update bookmark API\n if (path === \"/api/bookmarks/update\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { id, url, title, description, tags } = await req.json();\n await updateBookmark(id, url, title, description, tags || []);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Delete bookmark API\n if (path === \"/api/bookmarks/delete\" && req.method === \"POST\") {\n if (!authenticated) return unauthorizedResponse();\n try {\n const { id } = await req.json();\n await deleteBookmark(id);\n return Response.json({ ok: true });\n } catch (e: any) {\n return Response.json({ error: e.message }, { status: 400 });\n }\n }\n\n // Tag page: /tags/{slug}/\n const tagMatch = path.match(/^\\/tags\\/([^/]+)\\/?$/);\n if (tagMatch) {\n const tagSlug = tagMatch[1];\n const [bookmarks, tags] = await Promise.all([getBookmarksByTag(tagSlug), getAllTags()]);\n const activeTag = tags.find((t) => t.slug === tagSlug)?.name || tagSlug;\n return new Response(renderPage(bookmarks, tags, activeTag, authenticated), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // Home page\n if (path === \"/\" || path === \"\") {\n const [bookmarks, tags] = await Promise.all([getAllBookmarks(), getAllTags()]);\n return new Response(renderPage(bookmarks, tags, undefined, authenticated), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}\n","deleted","label","marxbookmarks",[128],"992ea624-2d34-11f1-aa50-42dde27851f2","README.md","992ea70a-2d34-11f1-aa50-42dde27851f2",["D",1774983935664],"# Marx\n\nA personal bookmark manager with tag filtering, backed by SQLite. Publicly readable, password-protected for edits.\n\n[Live demo](https://marxbookmarks.val.run/)\n\n## How it works\n\nMarx is a single-file Val Town HTTP val. Everything — routing, auth, database queries, and HTML rendering — lives in `main.ts`.\n\n**Storage:** Uses Val Town's built-in SQLite via `std/sqlite`. Three tables:\n\n- `bookmarks` — stores URL, title, description, and save date\n- `tags` — unique tag names\n- `bookmark_tags` — many-to-many join table\n\n**Auth:** A single password set via an environment variable. On login, the password is hashed with SHA-256 to produce a session token, which is stored as an `HttpOnly` cookie valid for 30 days. No user accounts — it's single-owner.\n\n**Public vs. private:** Anyone can browse bookmarks and filter by tag. Only authenticated users see edit/delete controls and can call the mutation APIs.\n\n**Routing** is handled manually in the default export function:\n\n| Route | Method | Auth required |\n|-------|--------|---------------|\n| `/` | GET | No |\n| `/tags/:slug/` | GET | No |\n| `/login` | GET / POST | No |\n| `/logout` | GET | No |\n| `/api/bookmarks/update` | POST | Yes |\n| `/api/bookmarks/delete` | POST | Yes |\n| `/api/tags/rename` | POST | Yes |\n| `/api/tags/delete` | POST | Yes |\n| `/api/import` | POST | Yes |\n\n## Forking and setting up\n\n### 1. Fork the val\n\nOn Val Town, open [snptrs/marx](https://www.val.town/x/snptrs/marx) and click **Fork**.\n\n### 2. Set your password\n\nIn your val's environment settings, add:\n\n```\nAUTH_PASSWORD=your-password-here\n```\n\n### 3. Initialize the database\n\nThe val doesn't auto-create its tables. Run this once as a Val Town script to set up the schema:\n\n```ts\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS bookmarks (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n url TEXT NOT NULL,\n title TEXT NOT NULL DEFAULT '',\n description TEXT NOT NULL DEFAULT '',\n saved TEXT NOT NULL DEFAULT (datetime('now'))\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS tags (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL UNIQUE\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS bookmark_tags (\n bookmark_id INTEGER NOT NULL REFERENCES bookmarks(id),\n tag_id INTEGER NOT NULL REFERENCES tags(id),\n UNIQUE(bookmark_id, tag_id)\n )\n`);\n```\n\n### 4. Import existing bookmarks (optional)\n\nPOST a JSON array to `/api/import` with a `Cookie` header containing your session token, or just log in to your instance first and use your browser session.\n\n```json\n[\n {\n \"url\": \"https://example.com\",\n \"title\": \"Example Site\",\n \"description\": \"Optional notes\",\n \"saved\": \"2024-06-01T12:00:00Z\",\n \"tags\": [\"design\", \"reference\"]\n }\n]\n```\n\n## Managing bookmarks\n\nOnce logged in:\n\n- **Edit** — hover a bookmark and click \"edit\" to update its title, URL, description, or tags\n- **Delete** — hover a bookmark and click \"delete\"\n- **Tag autocomplete** — the tag input suggests existing tags as you type\n- **Rename/delete tags** — navigate to a tag page and use the Rename/Delete buttons in the sidebar\n",[146],"pulls",2,"forks",1,"envVars",{"_159":154,"_161":62},"connections",{"_159":62,"_160":62},"count","unfilledCount","emptyCount",{"_21":145,"_13":146,"_129":147,"_130":-5,"_131":33,"_132":42,"_134":58,"_23":168,"_30":62,"_137":114,"_139":149,"_141":46,"_142":-5,"_165":169,"_102":170},{"_21":127,"_13":128,"_129":56,"_130":-5,"_131":33,"_132":133,"_134":58,"_23":164,"_30":136,"_137":138,"_139":140,"_141":46,"_142":143,"_165":166,"_102":167},["D",1772983658548],"children",[],[128],["D",1774983935664],[],[146],["D",1772982116698],["D",1789518064818],{"_11":12,"_100":96},{"_11":12,"_93":94,"_95":96,"_53":54,"_97":98,"_99":46},{"_30":42,"_13":41,"_21":33,"_28":29,"_32":-5,"_34":-5,"_88":-5,"_89":-5,"_90":-5,"_91":14,"_92":12},"ctx",{"_81":-5,"_122":209,"_210":211,"_212":213,"_214":46,"_215":46,"_216":46,"_217":58,"_218":-5,"_219":-7,"_220":-7,"_221":62,"_222":46,"_223":46,"_224":-5,"_225":46,"_226":46,"_227":46,"_228":-5},"ENV",{"_180":181,"_182":183,"_184":41,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches2

Branches
2