Date Me Directory

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_851":852,"_853":854},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_628":-5,"_20":629,"_22":630,"_631":632,"_633":634,"_26":635,"_24":636,"_637":-5,"_638":-5,"_639":75,"_640":641,"_642":69,"_643":-5,"_644":-5,"_645":646},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","stevekrouse","name","dateme","branchName","main","version","path","pages/layout","project",{"_33":571,"_13":14,"_47":572,"_573":-5,"_574":75,"_575":576,"_577":576,"_578":579,"_580":-5,"_581":582,"_583":81,"_584":69,"_585":-5,"_586":-5,"_587":103,"_588":589,"_590":591,"_592":593,"_594":595,"_596":103,"_597":598,"_599":598,"_600":601,"_602":601,"_603":601,"_604":598,"_605":598,"_606":607,"_608":609,"_610":611,"_612":75},"tree",[54,55,56,57,58,59,60,61,62,63],"file",{"_33":34,"_35":36,"_37":38,"_13":39,"_40":41,"_42":43,"_17":44,"_45":46,"_47":48,"_49":50,"_51":-5,"_18":52},"contents",[],"upstream","pull","ahead","behind","envVars","id","c2e0032c-47b6-11f1-a161-42b51c65c3df","branchId","6ea333ec-e58d-11ef-b8f1-e6cdfca9ef9f","fileId","44427056-e590-11ef-af82-e6cdfca9ef9f","layout","content","/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport { PropsWithChildren } from \"npm:hono/jsx\";\nimport { parseProject } from \"https://esm.town/v/std/parseImportMeta/project\";\n\nconst PUBLIC_TABS = { \"/\": \"Home\", \"/faq\": \"FAQ\" };\nconst SIGNED_IN_TABS = { \"/\": \"Home\", \"/browse\": \"Browse\", \"/faq\": \"FAQ\" };\nconst sourceURL = parseProject(import.meta.url).links.self.project;\n\ntype Props = PropsWithChildren<{ activeTab: string; email?: string }>;\n\nexport default function Layout({ activeTab, email, children }: Props) {\n return (\n \n \n Date Me Directory\n \n \n \n \n \n \n

\n {Object.entries(email ? SIGNED_IN_TABS : PUBLIC_TABS).map(([link, title]) => (\n \n {title === \"Home\" ? Date Me Directory : title}\n \n ))}\n \n {email\n ? (\n <>\n \n My profile\n \n \n \n )\n : Sign in}\n \n

{children}

\n \n \n \n );\n}\n","fileType","script",19,"parentId","78e859c0-e58f-11ef-b429-e6cdfca9ef9f","createdAt",["D",1777898570362],"branchVersion",169,"label",[53,39],"pages",{"_33":505,"_13":506,"_37":507,"_45":-5,"_35":36,"_49":110,"_68":69,"_47":508,"_17":112,"_42":113,"_40":-5,"_74":75,"_51":-5,"_76":509,"_18":510},{"_33":498,"_13":499,"_37":500,"_45":-5,"_35":36,"_49":501,"_68":69,"_47":502,"_17":112,"_42":113,"_40":-5,"_74":75,"_51":-5,"_76":503,"_18":504},{"_33":340,"_13":341,"_37":342,"_45":-5,"_35":36,"_49":110,"_68":69,"_47":343,"_17":112,"_42":113,"_40":-5,"_74":75,"_51":-5,"_76":344,"_18":345},{"_33":150,"_13":53,"_37":46,"_45":-5,"_35":36,"_49":151,"_68":69,"_47":152,"_17":122,"_42":113,"_40":-5,"_74":75,"_51":-5,"_76":153,"_18":154},{"_33":126,"_13":127,"_37":128,"_45":-5,"_35":36,"_49":129,"_68":69,"_47":130,"_17":112,"_42":113,"_40":-5,"_74":75,"_51":-5,"_76":131,"_18":132},{"_33":107,"_13":108,"_37":109,"_45":-5,"_35":36,"_49":110,"_68":69,"_47":111,"_17":112,"_42":113,"_40":-5,"_74":75,"_51":-5,"_76":114,"_18":115},{"_33":98,"_13":99,"_37":100,"_45":-5,"_35":36,"_49":101,"_68":69,"_47":102,"_17":103,"_42":24,"_40":104,"_74":75,"_51":-5,"_76":105,"_18":106},{"_33":89,"_13":90,"_37":91,"_45":-5,"_35":36,"_49":92,"_68":69,"_47":93,"_17":94,"_42":24,"_40":95,"_74":75,"_51":-5,"_76":96,"_18":97},{"_33":79,"_13":80,"_37":81,"_45":-5,"_35":36,"_49":82,"_68":69,"_47":83,"_17":84,"_42":72,"_40":85,"_74":75,"_51":86,"_76":87,"_18":88},{"_33":64,"_13":65,"_37":66,"_45":-5,"_35":36,"_49":67,"_68":69,"_47":70,"_17":71,"_42":72,"_40":73,"_74":75,"_51":-5,"_76":77,"_18":78},"d08d58bc-47ca-11f1-ad6e-42b51c65c3df","rss","0022bb14-e591-11ef-9eb9-e6cdfca9ef9f",190,"latest",true,["D",1777907183273],15,"http","// Public RSS feed: metadata-only. We deliberately omit the doc URL and the\n// user's contact email, since the directory itself is sign-in only.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { ageFromBirthday, safeParse } from \"./lib/json_safe.ts\";\n\nconst PUBLIC_FIELDS = [\n \"Gender\",\n \"InterestedIn\",\n \"Location\",\n \"Style\",\n \"LocationFlexibility\",\n];\n\nconst HOME = \"https://dateme.directory\";\n\nfunction escapeXml(s: string): string {\n return String(s).replace(/[&<>\"']/g, (c) =>\n ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" } as Record)[c]\n );\n}\n\nasync function profileGuid(profile: string): Promise {\n const buf = await crypto.subtle.digest(\n \"SHA-256\",\n new TextEncoder().encode(profile),\n );\n const hex = Array.from(new Uint8Array(buf))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n return `dateme-profile-${hex.slice(0, 16)}`;\n}\n\nexport async function rss(_req: Request) {\n const { rows } = await sqlite.execute(\n `select * from DateMeDocs\n where DeletedAt is null and blocked_at is null\n order by LastUpdated desc limit 20`,\n );\n\n const items = await Promise.all(rows.map(async (p: any) => {\n const title = escapeXml(safeParse(p.Name));\n const lines: string[] = [];\n const age = ageFromBirthday(p.Birthday);\n if (age != null) lines.push(`Age: ${age}`);\n for (const k of PUBLIC_FIELDS) {\n if (p[k]) lines.push(`${k}: ${safeParse(p[k])}`);\n }\n const description = escapeXml(lines.join(\"\\n\"));\n const guid = await profileGuid(safeParse(p.Profile));\n const pubDate = new Date(safeParse(p.LastUpdated)).toUTCString();\n return ` \n ${title}\n ${description}\n ${HOME}\n ${guid}\n ${pubDate}\n `;\n }));\n\n const xml = `\n\n\n Date Me Directory\n Recent profiles in the Date Me Directory. Sign in at ${HOME} to view full profiles.\n ${HOME}\n \n${items.join(\"\\n\")}\n\n`;\n\n return new Response(xml, { headers: { \"Content-type\": \"application/rss+xml\" } });\n}\n","deleted",false,"children",[],[65],"568fb5bd-856f-4cff-8d14-feb708081947","index","d8c06b22-e58e-11ef-942a-e6cdfca9ef9f",264,["D",1783631995713],23,"import { Hono } from \"npm:hono@3.12.12\";\nimport { serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { auth } from \"./lib/auth.ts\";\nimport { admin } from \"./pages/admin/index.tsx\";\nimport apiBrowse from \"./pages/api_browse.ts\";\nimport banned from \"./pages/banned.tsx\";\nimport browse from \"./pages/browse\";\nimport { claim } from \"./pages/claim\";\nimport { contact } from \"./pages/contact\";\nimport faq from \"./pages/faq\";\nimport { flag } from \"./pages/flag.tsx\";\nimport home from \"./pages/home\";\nimport { join } from \"./pages/join\";\nimport { me } from \"./pages/me\";\nimport reportSpam from \"./pages/report_spam.tsx\";\nimport { rss } from \"./rss\";\nimport { signIn } from \"./pages/sign_in.tsx\";\n\ntype AppEnv = {\n Variables: {\n user: { id: string; email: string; name?: string } | null;\n };\n};\n\nconst app = new Hono();\n\n// ── Routes that don't need our session lookup ───────────────────────────────\n// Better Auth handles its own session reads; static + rss render no user UI.\n\napp.on([\"GET\", \"POST\"], \"/api/auth/*\", (c) => auth.handler(c.req.raw));\napp.get(\"/static/favicon.svg\", (c) => serveFile(c.req.path));\napp.get(\"/rss.xml\", (c) => rss(c.req.raw));\n// API-key authed, not cookie-session — deliberately outside userApp's guards.\napp.get(\"/api/browse\", apiBrowse);\n\n// ── Everything else hydrates the user once via middleware ───────────────────\n\nconst userApp = new Hono();\n\nuserApp.use(\"*\", async (c, next) => {\n const session = await auth.api.getSession({ headers: c.req.raw.headers });\n c.set(\"user\", (session?.user as any) ?? null);\n await next();\n});\n\nuserApp.post(\"/sign-out\", async (c) => {\n try {\n await auth.api.signOut({ headers: c.req.raw.headers });\n } catch (e) {\n console.error(\"[sign-out] error:\", e);\n }\n return c.redirect(\"/\", 302);\n});\n\nuserApp.get(\"/\", home);\nuserApp.route(\"/sign-in\", signIn);\nuserApp.get(\"/browse\", browse);\nuserApp.route(\"/join\", join);\nuserApp.route(\"/me\", me);\nuserApp.route(\"/claim\", claim);\nuserApp.route(\"/contact\", contact);\nuserApp.route(\"/flag\", flag);\nuserApp.route(\"/admin\", admin);\nuserApp.get(\"/report-spam\", reportSpam);\nuserApp.get(\"/banned\", banned);\nuserApp.get(\"/faq\", faq);\n\napp.route(\"/\", userApp);\n\napp.onError((e) => Promise.reject(e));\nexport default app.fetch;\n","date",[],[80],"445914a2-5c25-11f1-bbd5-ee650bb23af1","README.md","b0c1b956-e58d-11ef-b938-e6cdfca9ef9f",233,["D",1780145055495],11,"# Date Me Directory\n\nA directory of long-form, earnest dating profiles (\"Date Me Docs\"). People write their own profile on Google Docs, Notion, or a personal site — this app indexes them so others can browse, filter by location/age/gender preference, and reach out via a relayed contact form.\n\n**Live site**: \n\n## Architecture\n\n- **Routing**: [Hono](https://hono.dev/) with hono/jsx for server-rendered pages.\n- **Styling**: Tailwind via the [twind](https://github.com/tw-in-js/twind) CDN (runtime, no build step).\n- **Auth**: [Better Auth](https://www.better-auth.com/) with the magic-link plugin (no passwords). Session in an `httpOnly` cookie.\n- **DB**: SQLite via `std/sqlite` — project-scoped (not personal-org).\n- **Email**: `std/email`.\n- **Spam classifier + flag review**: `std/openai` (`gpt-4o-mini`), fail-open.\n- **Geocoding**: client-side autocomplete via [Photon](https://photon.komoot.io/) wrapped in the [`stevekrouse/location_input`](https://www.val.town/x/stevekrouse/location_input) form-associated web component; server-side single-shot geocode for legacy free-text queries.\n\n```mermaid\nerDiagram\n user ||--o{ session : \"has\"\n user ||--o| DateMeDocs : \"claims (UserEmail)\"\n DateMeDocs ||--o{ dateme_profile_locations : \"geocoded sidecar\"\n DateMeDocs ||--o{ dateme_messages : \"sender of\"\n DateMeDocs ||--o{ dateme_messages : \"recipient of\"\n DateMeDocs ||--o{ dateme_reports : \"target of\"\n dateme_messages ||--o{ dateme_reports : \"subject of (type=message_spam)\"\n```\n\n## Layout\n\n```\ndateme/\n├── index # App root: routes + session middleware\n├── pages/ # Hono route handlers + JSX pages\n│ ├── layout # Shared header/footer/twind/web-component bootstrap\n│ ├── home # / — public landing\n│ ├── sign_in.tsx # /sign-in (+ /sign-in/sent) — magic-link form\n│ ├── browse # /browse — filtered table, requires sign-in (profile optional)\n│ ├── join # /join — submit a new profile\n│ ├── claim # /claim — link an existing doc to your account via token-in-doc\n│ ├── me # /me, /me/edit, /me/pause, /me/republish, /me/delete\n│ ├── contact # /contact?profile=… — relayed first-contact email\n│ ├── flag.tsx # /flag?profile=… — flag a profile for admin review\n│ ├── report_spam.tsx # /report-spam?id=…&t=… — one-click recipient spam report\n│ ├── banned.tsx # /banned — suspended-account page\n│ ├── faq # /faq\n│ └── admin/ # admin-only pages, allowlist guarded (see lib/admin_guard.ts)\n│ ├── index.tsx # mounts the admin sub-app under /admin\n│ ├── layout.tsx # admin chrome\n│ ├── badges.tsx # shared badge components\n│ ├── dashboard.tsx # /admin — counts + recent reports\n│ ├── reports.tsx # /admin/reports[/:id] — review queue + decide\n│ ├── messages.tsx # /admin/messages — paginated message log\n│ ├── users.tsx # /admin/users — list of all claimed users\n│ └── user_detail.tsx # /admin/users/:email — actions (ban/unban/soft-delete/hard-delete)\n├── components/ # Pure JSX components\n│ ├── JoinForm.tsx\n│ ├── BrowseFilters.tsx\n│ ├── SearchHeader.tsx\n│ ├── ProfileTable.tsx\n│ ├── ProfileRow.tsx\n│ └── ProfileSummary.tsx\n├── lib/ # Domain helpers (no JSX)\n│ ├── auth.ts # Better Auth instance (magic link)\n│ ├── auth_schema.ts # Better Auth CREATE TABLEs (kept but no longer auto-run on cold start)\n│ ├── admin_guard.ts # ADMIN_EMAILS allowlist + requireAdmin() (returns 404, not 302)\n│ ├── profile_guard.ts # requireSignedIn() (browse/contact) + requireClaimedProfile() (flag)\n│ ├── profile_persist.ts # parseProfileForm / createProfile / updateProfile\n│ ├── profile_search.ts # gender/age + geo filtering, local-then-remote sort\n│ ├── profile_locations.ts # Bulk-load lat/lon rows for a set of profiles\n│ ├── doc_validator.ts # Direct-fetch + Jina fallback URL/page checks\n│ ├── claim_token.ts # SHA-256-derived 8-char doc-claim code\n│ ├── messages.ts # createMessage / banUser / unbanUser\n│ ├── reports.ts # unified create/decide/list for profile_flag + message_spam\n│ ├── openai_review.ts # checkSpam (pre-send) + reviewProfileFlag (post-flag)\n│ ├── photon.ts # Server-side single-shot geocode\n│ ├── haversine.ts # Great-circle distance\n│ └── json_safe.ts # safeParse, httpsIfy\n├── rss # /rss.xml — public, metadata-only feed\n├── scripts/\n│ └── smoke_test.ts # Read-only smoke test for endpoints + schema (run before merge)\n└── static/favicon.svg\n```\n\n## Database\n\n```\nDateMeDocs -- one row per profile. PK = Profile (the doc URL, JSON-encoded).\n -- Most string fields are JSON-wrapped (legacy schema).\n -- Status columns: DeletedAt (soft delete / pause), blocked_at + ban_reason (admin ban),\n -- UserEmail (the claim).\ndateme_profile_locations -- geocoded sidecar for DateMeDocs.Location. (profile, ord) PK.\n -- Holds latitude, longitude, is_remote — used by searchProfiles for radius filtering.\ndateme_messages -- first-contact relayed messages. id INTEGER PK, sender_email, recipient_email,\n -- body, sent_at, report_token (16-byte hex for the email's report link).\ndateme_reports -- unified report queue. type='message_spam' (auto-banned on insert) or\n -- 'profile_flag' (queued for admin). Holds AI verdict + admin decision.\n\nuser, session, account, verification -- Better Auth tables. user is the canonical auth record;\n -- DateMeDocs.UserEmail joins to it. account/verification are mostly\n -- empty on a magic-link-only setup but kept for Better Auth's queries.\n```\n\n## Auth flow\n\n1. `POST /sign-in` with email → Better Auth sends a magic link via `std/email`.\n2. Click → `/api/auth/magic-link/verify` → cookie session set → redirect to `/me`.\n3. `/me` finds the user's profile by `UserEmail`. If none, falls back to **auto-claim** for an unclaimed row whose `Contact` exactly matches the signed-in email (safe — magic-link auth proves ownership). Otherwise → `/claim`.\n\nManual claim flow (when auto-claim doesn't apply):\n\n1. `/claim/existing` → user pastes the doc URL.\n2. We hand them an 8-char code (HMAC of `docUrl + email`).\n3. They paste it into the doc, click **Verify**.\n4. We re-fetch (bypassing Jina cache) and confirm the code is in the body, then set `UserEmail`.\n\n## Reports + moderation\n\nThere are two paths into `dateme_reports`:\n\n- **`type='message_spam'`** — recipient clicks the report link in the message email. Auto-bans the sender; report row records the auto-decision for audit. Optional async OpenAI review for record-keeping.\n- **`type='profile_flag'`** — any signed-in user clicks the Flag button on a profile row, optionally with a reason. Synchronous OpenAI review (truncated to 100k chars of profile content) attaches a verdict, but **admin always decides** — AI is advisor, never judge. Steve gets an email per flag.\n\nThe admin queue (`/admin/reports`) shows both types unified. Decisions: ban (sets `DateMeDocs.blocked_at` + `ban_reason`) or dismiss.\n\n## Doc validation\n\n`lib/doc_validator.ts` enforces:\n\n- HTTP(S) only, no socials (Instagram / X / TikTok / Facebook).\n- Direct fetch (with `redirect: follow`, 20s timeout).\n- Google Docs `/document/d/{ID}/...` rewritten to `/export?format=txt`.\n- If the page is < 500 chars after `