Sign in or sign up

\n Enter your email — we'll send a one-tap link. Same flow whether you're new or\n returning; we'll create your account on first use.\n

\n {error && (\n

\n {error}\n

\n )}\n

\n ,\n );\n});\n\nsignIn.post(\"/\", async (c) => {\n if (c.get(\"user\")?.email) return c.redirect(\"/\", 302);\n const body = await c.req.parseBody();\n const email = String(body.email ?? \"\").trim().toLowerCase();\n if (!email) return c.redirect(\"/sign-in?error=Please+enter+an+email\", 302);\n try {\n await auth.api.signInMagicLink({\n body: { email, callbackURL: \"/me\" },\n headers: c.req.raw.headers,\n });\n } catch (e) {\n console.error(\"[sign-in] error:\", e);\n return c.redirect(\n `/sign-in?error=${encodeURIComponent(\"Couldn't send the sign-in email. Try again or email steve@val.town.\")}&email=${encodeURIComponent(email)}`,\n 302,\n );\n }\n return c.redirect(`/sign-in/sent?email=${encodeURIComponent(email)}`, 302);\n});\n\nsignIn.get(\"/sent\", (c) => {\n // Refresh of /sign-in/sent after the magic link has been clicked: send them home.\n if (c.get(\"user\")?.email) return c.redirect(\"/\", 302);\n const email = c.req.query(\"email\") ?? \"\";\n return c.html(\n \n

Check your email

\n We sent a sign-in link to {email}. The link expires in 5 minutes.\n

\n Wrong email? Try again.\n

\n ,\n );\n});\n\nexport default signIn.fetch;\n",[18,154],"c2de8d76-47b6-11f1-a161-42b51c65c3df",["D",1777898570362],"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { findMessageForReport } from \"../lib/messages.ts\";\nimport { createMessageSpamReport } from \"../lib/reports.ts\";\nimport Layout from \"./layout\";\n\nasync function lookupSenderProfileUrl(senderEmail: string): Promise {\n const { rows } = await sqlite.execute({\n sql: \"select Profile from DateMeDocs where UserEmail = ? limit 1\",\n args: [senderEmail],\n });\n if (rows.length === 0) return \"\";\n try {\n return JSON.parse((rows[0] as any).Profile);\n } catch {\n return String((rows[0] as any).Profile);\n }\n}\n\nexport default async function ReportSpam(c: any) {\n const id = Number(c.req.query(\"id\") ?? \"0\");\n const token = String(c.req.query(\"t\") ?? \"\");\n const email = c.get(\"user\")?.email;\n\n const msg = id ? await findMessageForReport(id, token) : null;\n if (!msg) {\n return c.html(\n \n

Invalid link

\n This report link is invalid or has expired. If you keep getting unwanted messages,\n email our admin.\n

\n ,\n );\n }\n\n const senderProfileUrl = await lookupSenderProfileUrl(msg.sender_email);\n\n // Idempotent — createMessageSpamReport finds the existing row by message_id\n // and no-ops both the insert and the ban. The page renders the same.\n await createMessageSpamReport({\n messageId: id,\n recipientEmail: msg.recipient_email,\n senderEmail: msg.sender_email,\n senderProfileUrl,\n reason: null,\n });\n\n return c.html(\n \n

Reported. Thanks.

\n We've suspended the sender's account. Their profile is removed from the directory and\n they can't send messages.\n

\n Reported sender: {msg.sender_email}\n

\n ,\n );\n}\n",[18,161],"86ec5faf-c41f-4690-8998-ff837e4a91bb",266,["D",1783632024627],6,"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono@3.12.12\";\nimport DuplicateUrlError from \"../components/DuplicateUrlError.tsx\";\nimport JoinForm, { type JoinChip, type JoinDefaults } from \"../components/JoinForm.tsx\";\nimport ProfileSummary from \"../components/ProfileSummary.tsx\";\nimport { getOrCreateApiKey, regenerateApiKey } from \"../lib/api_key.ts\";\nimport { safeParse } from \"../lib/json_safe.ts\";\nimport {\n findExistingProfileOwner,\n parseProfileForm,\n updateProfile,\n} from \"../lib/profile_persist.ts\";\nimport Layout from \"./layout\";\n\nasync function findProfile(email: string) {\n // 1. Direct match on UserEmail (the canonical claim).\n const direct = await sqlite.execute({\n sql: \"select * from DateMeDocs where UserEmail = ? limit 1\",\n args: [email],\n });\n if (direct.rows.length > 0) return direct.rows[0] as Record;\n\n // 2. Auto-claim fallback: an UNCLAIMED profile whose Contact field is exactly\n // this user's email. Safe because magic-link auth proves they own the email,\n // so even if someone else typed it as Contact, only the real owner can sign\n // in and claim it. Only auto-claim when there's exactly one match — multiple\n // ambiguous matches fall through to the manual /claim flow.\n const orphans = await sqlite.execute({\n sql: \"select * from DateMeDocs where UserEmail is null and Contact = ?\",\n args: [JSON.stringify(email)],\n });\n if (orphans.rows.length !== 1) return null;\n const row = orphans.rows[0] as Record;\n await sqlite.execute({\n sql: \"update DateMeDocs set UserEmail = ? where Profile = ?\",\n args: [email, row.Profile],\n });\n row.UserEmail = email;\n return row;\n}\n\nasync function loadChips(profileUrl: string): Promise {\n const { rows } = await sqlite.execute({\n sql: `select original_label, latitude, longitude from dateme_profile_locations\n where profile = ? order by ord asc`,\n args: [JSON.stringify(profileUrl)],\n });\n return rows.map((r: any) => ({\n label: r.original_label,\n lat: r.latitude,\n lon: r.longitude,\n }));\n}\n\nfunction defaultsFromProfile(row: Record, chips: JoinChip[]): JoinDefaults {\n const arrField = (k: string): string[] => {\n const x = safeParse(row[k]);\n return Array.isArray(x) ? x : x ? [String(x)] : [];\n };\n const styleVal = safeParse(row.Style);\n const styleStr = Array.isArray(styleVal) ? styleVal[0] : styleVal;\n const num = (k: string) => {\n const v = row[k];\n return typeof v === \"number\" ? v : v != null ? Number(v) || undefined : undefined;\n };\n return {\n Name: safeParse(row.Name),\n Profile: safeParse(row.Profile),\n Birthday: row.Birthday ? String(row.Birthday) : \"\",\n Gender: arrField(\"Gender\"),\n InterestedIn: arrField(\"InterestedIn\"),\n Style: typeof styleStr === \"string\" ? styleStr.toLowerCase() : \"mono\",\n LocationFlexibility: safeParse(row.LocationFlexibility) ?? \"Flexible\",\n Locations: chips,\n LookingForAgeMin: num(\"LookingForAgeMin\"),\n LookingForAgeMax: num(\"LookingForAgeMax\"),\n LookingForRadiusMi: num(\"LookingForRadiusMi\"),\n };\n}\n\nfunction defaultsFromBody(body: Record): JoinDefaults {\n const arr = (k: string): string[] => {\n const v = body[k];\n return Array.isArray(v) ? v.map(String) : v ? [String(v)] : [];\n };\n const rawLocs = body[\"locations[]\"];\n const locArr = Array.isArray(rawLocs) ? rawLocs : rawLocs ? [rawLocs] : [];\n const Locations = locArr\n .map((v: any) => {\n try { return JSON.parse(String(v)); } catch { return null; }\n })\n .filter((x: any) => x && typeof x.label === \"string\");\n const num = (k: string) => {\n const v = body[k];\n if (v == null || v === \"\") return undefined;\n const n = Number(v);\n return Number.isFinite(n) ? n : undefined;\n };\n return {\n Name: body.Name ? String(body.Name) : undefined,\n Profile: body.Profile ? String(body.Profile) : undefined,\n Birthday: body.Birthday ? String(body.Birthday) : undefined,\n Gender: arr(\"Gender[]\"),\n InterestedIn: arr(\"InterestedIn[]\"),\n Style: body.Style ? String(body.Style) : undefined,\n LocationFlexibility: body.LocationFlexibility ? String(body.LocationFlexibility) : undefined,\n Locations,\n LookingForAgeMin: num(\"LookingForAgeMin\"),\n LookingForAgeMax: num(\"LookingForAgeMax\"),\n LookingForRadiusMi: num(\"LookingForRadiusMi\"),\n };\n}\n\nfunction requireEmail(c: any): string | Response {\n const email = c.get(\"user\")?.email;\n return email || c.redirect(\"/\", 302);\n}\n\nexport const me = new Hono();\n\nme.get(\"/\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n\n const profile = await findProfile(email);\n if (!profile) return c.redirect(\"/claim\", 302);\n if (profile.blocked_at) return c.redirect(\"/banned\", 302);\n\n const deleted = profile.DeletedAt != null;\n const apiKey = await getOrCreateApiKey(email);\n const authorizedUrl = `${new URL(c.req.url).origin}/api/browse?key=${apiKey}`;\n // `border border-transparent` on the blue button matches outer height of\n // the bordered white sibling. `class=\"contents\"` on the wrapping forms\n // makes their child \n \n )\n : (\n \n )}\n \n Delete account\n \n \n

AI access

\n This URL returns your browse results as JSON, using your saved search prefs. Anyone\n with it can see what you'd see browsing — treat it like a password, and regenerate it\n if you ever share it by mistake.\n

\n {authorizedUrl}\n \n

\n \n ,\n );\n});\n\nme.post(\"/api-key/regenerate\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n await regenerateApiKey(email);\n return c.redirect(\"/me\", 302);\n});\n\nme.get(\"/edit\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n const profile = await findProfile(email);\n if (!profile) return c.redirect(\"/claim\", 302);\n if (profile.blocked_at) return c.redirect(\"/banned\", 302);\n\n const profileUrl = safeParse(profile.Profile);\n const chips = await loadChips(profileUrl);\n return c.html(\n \n \n ,\n );\n});\n\nme.post(\"/edit\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n const profile = await findProfile(email);\n if (!profile) return c.redirect(\"/claim\", 302);\n if (profile.blocked_at) return c.redirect(\"/banned\", 302);\n\n const body = await c.req.parseBody({ all: true });\n\n const renderError = (reason: any) =>\n c.html(\n \n \n ,\n );\n\n const parsed = await parseProfileForm(body);\n if (!parsed.ok) return renderError(parsed.reason);\n\n // If they're changing their Profile URL, make sure the new one isn't already\n // someone else's row. Same human error as /join's duplicate check.\n const oldProfileUrl = safeParse(profile.Profile);\n if (parsed.form.profile !== oldProfileUrl) {\n const existing = await findExistingProfileOwner(parsed.form.profile);\n if (existing && existing.userEmail !== email) {\n return renderError(\n ,\n );\n }\n }\n\n try {\n await updateProfile(parsed.form, email, oldProfileUrl);\n } catch (e) {\n console.error(\"[me/edit] error:\", e);\n // Race condition (or duplicate-row data corruption): the UPDATE hit the\n // Profile UNIQUE/PRIMARY KEY. Show the same duplicate-URL message we'd\n // give on /join so the user can choose claim vs sign-out.\n if (/UNIQUE|PRIMARY KEY/i.test(String(e))) {\n const after = await findExistingProfileOwner(parsed.form.profile);\n return renderError(\n ,\n );\n }\n return renderError(\"Something went wrong saving your changes. Try again or email steve@val.town.\");\n }\n return c.redirect(\"/me\", 302);\n});\n\nme.post(\"/pause\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n await sqlite.execute({\n sql: \"update DateMeDocs set DeletedAt = strftime('%Y-%m-%dT%H:%M:%fZ','now') where UserEmail = ?\",\n args: [email],\n });\n return c.redirect(\"/me\", 302);\n});\n\nme.post(\"/republish\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n await sqlite.execute({\n sql: \"update DateMeDocs set DeletedAt = null where UserEmail = ?\",\n args: [email],\n });\n return c.redirect(\"/me\", 302);\n});\n\nme.get(\"/delete\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n return c.html(\n \n

Delete your account?

\n This will permanently remove your profile and account. This can't be undone. If you just\n want to take a break, use Remove from directory instead.\n

\n \n \n ← Never mind, take me back\n \n

\n ,\n );\n});\n\nme.post(\"/delete\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n await sqlite.execute({\n sql:\n \"delete from dateme_profile_locations where profile in (select Profile from DateMeDocs where UserEmail = ?)\",\n args: [email],\n });\n await sqlite.execute({\n sql: \"delete from DateMeDocs where UserEmail = ?\",\n args: [email],\n });\n // Cascades to session + account via FK — invalidates the cookie session.\n await sqlite.execute({\n sql: \"delete from user where email = ?\",\n args: [email],\n });\n return c.redirect(\"/\", 302);\n});\n\nexport default me.fetch;\n",[18,168],"c2e0032c-47b6-11f1-a161-42b51c65c3df",["D",1777898570362],19,"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport { PropsWithChildren } from \"npm:hono/jsx\";\nimport { parseProject } from \"https://esm.town/v/std/parseImportMeta/project\";\n\nconst PUBLIC_TABS = { \"/\": \"Home\", \"/faq\": \"FAQ\" };\nconst SIGNED_IN_TABS = { \"/\": \"Home\", \"/browse\": \"Browse\", \"/faq\": \"FAQ\" };\nconst sourceURL = parseProject(import.meta.url).links.self.project;\n\ntype Props = PropsWithChildren<{ activeTab: string; email?: string }>;\n\nexport default function Layout({ activeTab, email, children }: Props) {\n return (\n \n \n Date Me Directory\n \n \n \n \n \n \n

\n {Object.entries(email ? SIGNED_IN_TABS : PUBLIC_TABS).map(([link, title]) => (\n \n {title === \"Home\" ? Date Me Directory : title}\n \n ))}\n \n {email\n ? (\n <>\n \n My profile\n \n \n \n )\n : Sign in}\n \n

{children}

\n \n \n \n );\n}\n",[18,82],"d16ddb90-5cf0-11f1-8e90-1607ee4eb77e",246,["D",1780232480057],28,"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport { sendEmailBestEffort } from \"../lib/send_email.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono@3.12.12\";\nimport DuplicateUrlError from \"../components/DuplicateUrlError.tsx\";\nimport JoinForm, { type JoinDefaults } from \"../components/JoinForm.tsx\";\nimport { createProfile, findExistingProfileOwner, parseProfileForm } from \"../lib/profile_persist.ts\";\nimport Layout from \"./layout\";\n\nconst label = (value: unknown): string => {\n if (Array.isArray(value)) return value.length ? value.join(\", \") : \"-\";\n if (value === null || value === undefined || value === \"\") return \"-\";\n return String(value);\n};\n\nconst escapeHtml = (s: string): string =>\n s.replace(/&/g, \"&\").replace(//g, \">\").replace(/\\\"/g, \""\");\n\ntype PublicationStatus = { published: boolean; status: string; detail: string };\n\nfunction derivePublicationStatus(row: any): PublicationStatus {\n if (!row) return { published: false, status: \"missing\", detail: \"No saved row found after insert\" };\n if (row.blocked_at) return { published: false, status: \"banned\", detail: `Banned at ${row.blocked_at}` };\n if (row.DeletedAt) return { published: false, status: \"paused\", detail: `Soft-deleted at ${row.DeletedAt}` };\n return { published: true, status: \"published\", detail: \"Visible in browse/search\" };\n}\n\nasync function loadPublicationStatus(email: string, profile: string): Promise {\n const { rows } = await sqlite.execute({\n sql: \"select DeletedAt, blocked_at from DateMeDocs where UserEmail = ? and Profile = ? limit 1\",\n args: [email, JSON.stringify(profile)],\n });\n return derivePublicationStatus((rows as any[])[0]);\n}\n\nfunction buildSubmitNotification(form: any, email: string, origin: string, publication: PublicationStatus) {\n const adminUrl = `${origin}/admin/users/${encodeURIComponent(email)}`;\n const submittedAt = new Date().toISOString();\n const radius = form.lookingForRadiusMi == null ? \"Anywhere\" : `${form.lookingForRadiusMi} mi`;\n const locations = form.chips?.map((c: any) => c.label) ?? [];\n const rows = [\n [\"Status\", `${publication.published ? \"Published\" : \"Unpublished\"} (${publication.status}; ${publication.detail})`],\n [\"Name\", form.name],\n [\"Email\", email],\n [\"Profile\", form.profile],\n [\"Admin\", adminUrl],\n [\"Submitted\", submittedAt],\n [\"Age\", form.age],\n [\"Birthday\", form.birthday],\n [\"Gender\", form.genders],\n [\"Interested in\", form.interestedIn],\n [\"Style\", form.styleArr],\n [\"Locations\", locations],\n [\"Location flexibility\", form.locationFlexibility],\n [\"Looking for age\", `${form.lookingForAgeMin}-${form.lookingForAgeMax}`],\n [\"Search radius\", radius],\n ];\n const text = rows.map(([k, v]) => `${k}: ${label(v)}`).join(\"\\n\");\n const htmlRows = rows.map(([k, v]) => `\n \n ${escapeHtml(k)}\n ${escapeHtml(label(v))}\n `).join(\"\");\n const html = `\n

${escapeHtml(form.name)} submitted a Date Me profile.

\n Manage in admin\n

\n ${htmlRows}

`;\n return { subject: `Date Me Doc Submit Success: ${form.name} [${publication.status}]`, text, html };\n}\n\nfunction requireEmail(c: any): string | Response {\n const email = c.get(\"user\")?.email;\n return email || c.redirect(\"/\", 302);\n}\n\nasync function userHasProfile(email: string): Promise {\n const { rows } = await sqlite.execute({\n sql: \"select 1 from DateMeDocs where UserEmail = ? limit 1\",\n args: [email],\n });\n return rows.length > 0;\n}\n\nfunction defaultsFromBody(body: Record): JoinDefaults {\n const arr = (k: string): string[] => {\n const v = body[k];\n return Array.isArray(v) ? v.map(String) : v ? [String(v)] : [];\n };\n // Re-hydrate chips that came in via locations[]= JSON entries so the form\n // can show them again on error.\n const rawLocs = body[\"locations[]\"];\n const locArr = Array.isArray(rawLocs) ? rawLocs : rawLocs ? [rawLocs] : [];\n const Locations = locArr\n .map((v: any) => {\n try { return JSON.parse(String(v)); } catch { return null; }\n })\n .filter((x: any) => x && typeof x.label === \"string\");\n const num = (k: string) => {\n const v = body[k];\n if (v == null || v === \"\") return undefined;\n const n = Number(v);\n return Number.isFinite(n) ? n : undefined;\n };\n return {\n Name: body.Name ? String(body.Name) : undefined,\n Profile: body.Profile ? String(body.Profile) : undefined,\n Birthday: body.Birthday ? String(body.Birthday) : undefined,\n Gender: arr(\"Gender[]\"),\n InterestedIn: arr(\"InterestedIn[]\"),\n Style: body.Style ? String(body.Style) : undefined,\n LocationFlexibility: body.LocationFlexibility ? String(body.LocationFlexibility) : undefined,\n Locations,\n LookingForAgeMin: num(\"LookingForAgeMin\"),\n LookingForAgeMax: num(\"LookingForAgeMax\"),\n LookingForRadiusMi: num(\"LookingForRadiusMi\"),\n };\n}\n\n\n\nexport const Form = async (c: any) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n // If they already have a profile, send them to edit instead of creating a duplicate.\n if (await userHasProfile(email)) return c.redirect(\"/me/edit\", 302);\n return c.html(\n \n \n ,\n );\n};\n\nexport const Submit = async (c: any) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n if (await userHasProfile(email)) return c.redirect(\"/me/edit\", 302);\n\n const body = await c.req.parseBody({ all: true });\n const defaults = defaultsFromBody(body);\n\n const renderError = (reason: any) =>\n c.html(\n \n \n ,\n );\n\n const parsed = await parseProfileForm(body);\n if (!parsed.ok) return renderError(parsed.reason);\n\n // Check for an existing row with this Profile URL before INSERT, so we can\n // give a human error instead of leaking a UNIQUE constraint failure.\n const existing = await findExistingProfileOwner(parsed.form.profile);\n if (existing) {\n return renderError(\n ,\n );\n }\n\n try {\n await createProfile(parsed.form, email);\n } catch (e) {\n console.error(\"[join] error:\", e);\n // Race condition fallback: if two submits raced past the pre-check above,\n // the second one hits a PRIMARY KEY/UNIQUE failure. Show the duplicate\n // message rather than the generic one.\n if (/UNIQUE|PRIMARY KEY/i.test(String(e))) {\n const after = await findExistingProfileOwner(parsed.form.profile);\n return renderError(\n ,\n );\n }\n await sendEmailBestEffort({\n subject: \"Date Me Doc Submit Error: \" + parsed.form.name,\n text: `${email}\\n\\n${String(e)}`,\n });\n return renderError(\"Something went wrong saving your submission. Try again or email steve@val.town.\");\n }\n // Profile saved. Notify Steve — but a failed notification must never break the\n // user's successful submission, so it's best-effort and lives outside the try\n // above (a thrown notification used to be misread as a save failure → 500).\n const publication = await loadPublicationStatus(email, parsed.form.profile);\n await sendEmailBestEffort(buildSubmitNotification(parsed.form, email, new URL(c.req.url).origin, publication));\n return c.redirect(\"/me\", 302);\n};\n\nexport const join = new Hono();\njoin.get(\"/\", Form);\njoin.post(\"/\", Submit);\nexport default join.fetch;\n",[18,201],"14b22b94-48c5-11f1-a98b-42b51c65c3df",218,["D",1778014671803],31,"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport Layout from \"./layout\";\n\nexport default async function Home(c) {\n const email = c.get(\"user\")?.email;\n\n return c.html(\n \n

Date thoughtfully

\n Date Me Docs are long-form, earnest dating profiles. People host them on Google Docs,\n Notion, or personal sites.\n

\n The directory is now sign-in only, to keep spam out and help members feel safer.\n

\n {email\n ? (\n \n Browse the directory\n \n )\n : (\n \n Sign in or sign up\n \n )}\n

\n ,\n );\n}",[18,100],"aa5ab4f6-fcf8-45a5-85ae-fcd81ff6ee33",256,["D",1783359419353],7,"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { FROM_ADDRESS } from \"../lib/send_email.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono@3.12.12\";\nimport { safeParse } from \"../lib/json_safe.ts\";\nimport { requireClaimedProfile } from \"../lib/profile_guard.ts\";\nimport {\n createProfileFlag,\n flagsRecentForReporter,\n hasReporterFlaggedTarget,\n runAiReview,\n} from \"../lib/reports.ts\";\nimport Layout from \"./layout\";\n\nconst ADMIN_EMAIL = \"stevekrouse.dateme_contact@valtown.email\";\nconst FLAGS_PER_DAY_LIMIT = 5;\nconst MAX_REASON = 500;\n\nasync function findTarget(profileUrl: string) {\n const { rows } = await sqlite.execute({\n sql:\n \"select Name, Profile, UserEmail, blocked_at, DeletedAt from DateMeDocs where Profile = ? limit 1\",\n args: [JSON.stringify(profileUrl)],\n });\n return (rows[0] as any) ?? null;\n}\n\nconst Box = ({ children }: { children: any }) => (\n

{children}

\n);\n\nconst Err = ({ msg }: { msg: string }) => (\n

{msg}

\n);\n\nexport const flag = new Hono();\n\nflag.get(\"/\", async (c) => {\n const guard = await requireClaimedProfile(c);\n if (guard instanceof Response) return guard;\n const { email: reporterEmail } = guard;\n\n const profileUrl = c.req.query(\"profile\");\n const error = c.req.query(\"error\");\n if (!profileUrl) return c.redirect(\"/browse\", 302);\n\n const t = await findTarget(profileUrl);\n if (!t) {\n return c.html(\n \n \n

Profile not found

\n Couldn't find that profile.{\" \"}\n Back to browse.\n

\n \n ,\n );\n }\n\n if (t.UserEmail === reporterEmail) {\n return c.html(\n \n \n

Can't flag your own profile

\n Back to browse\n

\n \n ,\n );\n }\n\n const targetName = safeParse(t.Name);\n return c.html(\n \n \n

Flag {targetName}'s profile

\n Use this only for genuine concerns: spam pitches, harassment, illegal content,\n fake/joke profiles, or impersonation. An admin will review and take action.\n You won't hear back unless we have questions.\n

\n {error && }\n \n \n ,\n );\n});\n\nflag.post(\"/\", async (c) => {\n const guard = await requireClaimedProfile(c);\n if (guard instanceof Response) return guard;\n const { email: reporterEmail } = guard;\n\n const body = await c.req.parseBody();\n const profileUrl = String(body.profile_url ?? \"\").trim();\n let reason = String(body.reason ?? \"\").trim();\n if (reason.length > MAX_REASON) reason = reason.slice(0, MAX_REASON);\n if (!profileUrl) return c.redirect(\"/browse\", 302);\n\n const back = `/flag?profile=${encodeURIComponent(profileUrl)}`;\n const t = await findTarget(profileUrl);\n if (!t) {\n return c.redirect(`${back}&error=${encodeURIComponent(\"Profile not found.\")}`, 302);\n }\n if (t.UserEmail === reporterEmail) {\n return c.redirect(\n `${back}&error=${encodeURIComponent(\"You can't flag your own profile.\")}`,\n 302,\n );\n }\n\n // Rate limits.\n const recent = await flagsRecentForReporter(reporterEmail);\n if (recent >= FLAGS_PER_DAY_LIMIT) {\n return c.redirect(\n `${back}&error=${encodeURIComponent(\"You've submitted too many flags today. Try again tomorrow.\")}`,\n 302,\n );\n }\n if (await hasReporterFlaggedTarget(reporterEmail, profileUrl)) {\n return c.redirect(\n `${back}&error=${encodeURIComponent(\"You've already flagged this profile.\")}`,\n 302,\n );\n }\n\n const id = await createProfileFlag({\n flaggedProfileUrl: profileUrl,\n flaggedTargetEmail: t.UserEmail ?? null,\n reporterEmail,\n reason: reason || null,\n });\n\n // Synchronous AI review — total < 5s, acceptable in a POST handler.\n await runAiReview(id);\n\n // Re-read the row to grab AI verdict for the email.\n const { rows: rRows } = await sqlite.execute({\n sql: \"select ai_verdict, ai_reasoning from dateme_reports where id = ? limit 1\",\n args: [id],\n });\n const aiRow = (rRows[0] as any) ?? {};\n\n const targetName = safeParse(t.Name);\n const adminText =\n `New profile flag (id ${id})\\n\\n`\n + `Target: ${targetName} <${t.UserEmail ?? \"(unclaimed)\"}>\\n`\n + `Profile: ${profileUrl}\\n`\n + `Reporter: ${reporterEmail}\\n\\n`\n + `Reporter's reason:\\n${reason || \"(none)\"}\\n\\n`\n + `AI verdict: ${aiRow.ai_verdict ?? \"(none)\"}\\n`\n + `AI reasoning: ${aiRow.ai_reasoning ?? \"(none)\"}\\n\\n`\n + `Review: https://dateme.directory/admin/reports/${id}`;\n\n try {\n await sendEmail({\n from: FROM_ADDRESS,\n to: ADMIN_EMAIL,\n replyTo: reporterEmail,\n subject: `Date Me Directory: profile flagged (${targetName})`,\n text: adminText,\n } as any);\n } catch (e) {\n console.error(\"[flag] sendEmail error:\", e);\n }\n\n return c.html(\n \n \n

Thanks — we'll review it

\n We've logged your flag against {targetName}'s profile and an admin will look at it\n shortly. You won't hear back unless we have questions.\n

\n Back to browse\n

\n \n ,\n );\n});\n\nexport default flag.fetch;\n",[18,175],"c2dfc920-47b6-11f1-a161-42b51c65c3df",["D",1777898570362],"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport Layout from \"./layout\";\n\nconst linkClass = \"text-sky-600 hover:text-sky-500\";\n\nexport default function FAQ(c) {\n return c.html(\n \n

FAQ

Press

\n \n Tired of Dating Apps, Some Turn to ‘Date-Me Docs’ (New York Times)\n \n
\n \n ‘Date Me’ Google Docs and the Hyper-Optimized Quest for Love (Wired)\n \n
\n \n Four ways to find love - without the apps (The Guardian)\n \n

\n\n

Contact

\n Contact me by email at:{\" \"}\n \n stevekrouse.dateme_contact@valtown.email\n \n

\n This site was made with ❤️ by Steve Krouse using{\" \"}\n Val Town{\" \"}\n (view the code).\n Please reach out with questions, feedback, or suggestions!\n

\n This service is provided free of charge. All I ask is to be notified if you find love. \n

\n ,\n );\n}",[18,220],"4459d6f8-5c25-11f1-bbd5-ee650bb23af1",233,["D",1780145055495],4,"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport { sendEmail } from \"../lib/send_email.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono@3.12.12\";\nimport { safeParse } from \"../lib/json_safe.ts\";\nimport { createMessage, recentSendCount } from \"../lib/messages.ts\";\nimport { requireSignedIn } from \"../lib/profile_guard.ts\";\nimport { checkSpam } from \"../lib/openai_review.ts\";\nimport Layout from \"./layout\";\n\nconst DAILY_LIMIT = 1;\nconst MAX_BODY = 4000;\n\nasync function findRecipient(profileUrl: string) {\n const { rows } = await sqlite.execute({\n sql:\n \"select Name, Profile, UserEmail, blocked_at, DeletedAt from DateMeDocs where Profile = ? limit 1\",\n args: [JSON.stringify(profileUrl)],\n });\n return (rows[0] as any) ?? null;\n}\n\nconst Box = ({ children }: { children: any }) => (\n

{children}

\n);\n\n// Prominent, sticks to the top of the form so the user actually sees it.\n// Rendered as a yellow \"heads up\" banner with an icon — not the small inline red text it used to be.\nconst Err = ({ msg }: { msg: string }) => (\n \n

\n ⚠️\n

Message not sent

{msg}

\n Your message text is preserved below — copy it somewhere safe before leaving this page.\n

\n \n);\n\nexport const contact = new Hono();\n\n// Helper: build the redirect-back URL, preserving both the error message and\n// the user's typed message body so they don't lose what they wrote.\nfunction backTo(profileUrl: string, error: string, body?: string): string {\n const params = new URLSearchParams({ profile: profileUrl, error });\n if (body) params.set(\"body\", body);\n return `/contact?${params.toString()}`;\n}\n\ncontact.get(\"/\", async (c) => {\n const guard = await requireSignedIn(c);\n if (guard instanceof Response) return guard;\n const { email: senderEmail } = guard;\n\n const profileUrl = c.req.query(\"profile\");\n const error = c.req.query(\"error\");\n const preservedBody = c.req.query(\"body\") ?? \"\";\n if (!profileUrl) return c.redirect(\"/browse\", 302);\n\n const r = await findRecipient(profileUrl);\n if (!r || r.DeletedAt || r.blocked_at || !r.UserEmail) {\n return c.html(\n \n \n

Can't reach this profile

\n This profile has been removed or hasn't been claimed yet, so we can't pass on a\n message. Back to browse.\n

\n \n ,\n );\n }\n\n const recipientName = safeParse(r.Name);\n return c.html(\n \n \n

Send a message to {recipientName}

\n They'll get an email with your message. If they reply, your email is shared with them.\n
\n You can only send 1 message per 24 hours across the whole site{\" \"}\n — make it count.\n

\n {error && }\n \n ,\n );\n});\n\ncontact.post(\"/\", async (c) => {\n const guard = await requireSignedIn(c);\n if (guard instanceof Response) return guard;\n const { email: senderEmail } = guard;\n\n const body = await c.req.parseBody();\n const profileUrl = String(body.profile_url ?? \"\").trim();\n const text = String(body.body ?? \"\").trim();\n if (!profileUrl || !text) return c.redirect(\"/browse\", 302);\n\n if (text.length > MAX_BODY) {\n return c.redirect(backTo(profileUrl, \"Message is too long.\", text), 302);\n }\n\n const recent = await recentSendCount(senderEmail);\n if (recent >= DAILY_LIMIT) {\n return c.redirect(\n backTo(\n profileUrl,\n \"You can only send 1 message per 24 hours across the entire Date Me Directory — \"\n + \"this slows things down on purpose, to keep the site thoughtful and spam-free. \"\n + \"Try again tomorrow.\",\n text,\n ),\n 302,\n );\n }\n\n const r = await findRecipient(profileUrl);\n if (!r || r.DeletedAt || r.blocked_at || !r.UserEmail) {\n return c.redirect(backTo(profileUrl, \"That profile isn't reachable.\", text), 302);\n }\n const recipientName = safeParse(r.Name);\n const recipientEmail = r.UserEmail as string;\n\n const spam = await checkSpam(text, senderEmail, recipientName);\n if (spam.spam) {\n return c.redirect(\n backTo(\n profileUrl,\n \"Our spam filter flagged this message — please rephrase. (\" + (spam.reason ?? \"\") + \")\",\n text,\n ),\n 302,\n );\n }\n\n let id: number;\n let reportToken: string;\n try {\n const created = await createMessage({\n senderEmail,\n recipientEmail,\n recipientProfileUrl: profileUrl,\n body: text,\n openaiSpamFlag: false,\n openaiSpamReason: spam.reason,\n });\n id = created.id;\n reportToken = created.reportToken;\n } catch (e) {\n console.error(\"[contact] createMessage error:\", e);\n return c.redirect(\n backTo(profileUrl, \"Couldn't save your message — try again in a moment.\", text),\n 302,\n );\n }\n\n const reportLink = new URL(c.req.url);\n reportLink.pathname = \"/report-spam\";\n reportLink.search = `?id=${id}&t=${reportToken}`;\n const reportUrl = reportLink.toString();\n\n // Email body is HTML — built as a string here because email clients require\n // inline styles and a different rendering pipeline than our JSX pages.\n const escaped = (s: string) =>\n s.replace(/&/g, \"&\").replace(//g, \">\");\n\n const txt =\n `Hi ${recipientName},\\n\\n`\n + `Someone from the Date Me Directory sent you a message:\\n\\n`\n + `────────\\n${text}\\n────────\\n\\n`\n + `Hit reply to talk to them — replying will share your email address with them.\\n\\n`\n + `If this is spam, click here to report (one click, suspends the sender):\\n${reportUrl}\\n\\n`\n + `— Date Me Directory`;\n\n const html =\n `

Hi ${escaped(recipientName)},

`\n + `

Someone from the Date Me Directory sent you a message:

`\n + `

${escaped(text)}

`\n + `

Hit reply to talk to them — replying will share your email address with them.

`\n + `

If this is spam, click here to report (one click, suspends the sender).

`\n + `

— Date Me Directory

`;\n\n try {\n await sendEmail({\n to: recipientEmail,\n replyTo: senderEmail,\n subject: `Date Me Directory: someone wrote to you`,\n text: txt,\n html,\n } as any);\n } catch (e) {\n console.error(\"[contact] sendEmail error:\", e);\n return c.redirect(\n backTo(profileUrl, \"Couldn't send the message — try again later.\", text),\n 302,\n );\n }\n\n return c.html(\n \n \n

Message sent

\n We emailed your message to {recipientName}. If they reply, you'll hear from them at{\" \"}\n {senderEmail}.\n

\n Back to browse\n

\n \n ,\n );\n});\n\nexport default contact.fetch;\n",[18,232],"4459a714-5c25-11f1-bbd5-ee650bb23af1",["D",1780145055495],"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono@3.12.12\";\nimport { makeClaimToken } from \"../lib/claim_token.ts\";\nimport { docContainsToken, validateDoc } from \"../lib/doc_validator.ts\";\nimport Layout from \"./layout\";\n\nfunction requireEmail(c: any): string | Response {\n const email = c.get(\"user\")?.email;\n return email || c.redirect(\"/\", 302);\n}\n\n/** True if this user already owns a (claimed) profile. The DateMeDocs.UserEmail\n * unique partial index guarantees at most one row per email, so anything\n * beyond `claim/verify`'s final UPDATE on a *second* doc would crash with a\n * UNIQUE error. We catch that here by short-circuiting to /me. */\nasync function userHasProfile(email: string): Promise {\n const { rows } = await sqlite.execute({\n sql: \"select 1 from DateMeDocs where UserEmail = ? limit 1\",\n args: [email],\n });\n return rows.length > 0;\n}\n\nasync function findByProfile(url: string) {\n const { rows } = await sqlite.execute({\n sql: \"select Name, Profile, UserEmail, DeletedAt from DateMeDocs where Profile = ? limit 1\",\n args: [JSON.stringify(url)],\n });\n return (rows[0] as any) ?? null;\n}\n\nconst Box = ({ children }: { children: any }) => (\n

{children}

\n);\n\nconst Error_ = ({ msg }: { msg: string }) => (\n

{msg}

\n);\n\nexport const claim = new Hono();\n\nclaim.get(\"/\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n if (await userHasProfile(email)) return c.redirect(\"/me\", 302);\n return c.html(\n \n

Welcome

\n Signed in as {email}. What would you like to do?\n

\n\n {/* Get-listed options, grouped. */}\n

\n {/* Primary: create a new listing. */}\n \n

\n 📝\n

Create your profile

\n Write a Date Me Doc and get listed in the directory.\n

\n \n\n {/* Secondary: claim an existing doc. */}\n \n

\n 🔗\n

Claim an existing profile

\n Already have a Date Me Doc here? Link it to this account.\n

\n \n

\n\n {/* Divider before the no-commitment escape hatch. */}\n

\n or\n

\n\n {/* Tertiary: just browse — visually lightest, no border. */}\n \n

\n 👀\n

Just browse for now

\n Look around and message people. You can add your own profile anytime.\n

\n \n

\n ,\n );\n});\n\nclaim.get(\"/existing\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n if (await userHasProfile(email)) return c.redirect(\"/me\", 302);\n const error = c.req.query(\"error\");\n const prefill = c.req.query(\"url\") ?? \"\";\n return c.html(\n \n \n

Claim your profile

Paste the URL of the Date Me Doc you've already submitted:

\n {error && }\n \n ,\n );\n});\n\nclaim.post(\"/existing\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n if (await userHasProfile(email)) return c.redirect(\"/me\", 302);\n const body = await c.req.parseBody();\n const url = String(body.profile_url ?? \"\").trim();\n if (!url) return c.redirect(\"/claim/existing?error=Please+paste+a+URL\", 302);\n\n const row = await findByProfile(url);\n if (!row) {\n return c.redirect(\n `/claim/existing?error=${encodeURIComponent(\"That URL isn't in our directory. Want to submit it as new instead?\")}`,\n 302,\n );\n }\n if (row.UserEmail && row.UserEmail.toLowerCase() === email.toLowerCase()) {\n return c.redirect(\"/me\", 302);\n }\n if (row.UserEmail) {\n return c.redirect(\n `/claim/existing?error=${encodeURIComponent(\"That profile is already claimed by another account. Email steve@val.town if this is in error.\")}`,\n 302,\n );\n }\n\n const token = await makeClaimToken(url, email);\n return c.html(\n \n \n

Verify ownership

\n Open your doc and paste the code below anywhere in it. Save the doc, then click verify.\n You can remove the code from the doc once you're claimed.\n

{token}

\n \n \n ,\n );\n});\n\nclaim.post(\"/verify\", async (c) => {\n const email = requireEmail(c);\n if (typeof email !== \"string\") return email;\n if (await userHasProfile(email)) return c.redirect(\"/me\", 302);\n const body = await c.req.parseBody();\n const url = String(body.profile_url ?? \"\").trim();\n if (!url) return c.redirect(\"/claim/existing\", 302);\n\n const row = await findByProfile(url);\n if (!row || (row.UserEmail && row.UserEmail.toLowerCase() !== email.toLowerCase())) {\n return c.redirect(\"/claim/existing?error=Lookup+failed\", 302);\n }\n\n // Validate the doc is reachable at all (catches private docs, broken URLs).\n const validation = await validateDoc(url);\n if (!validation.ok) {\n return c.html(\n \n \n

Couldn't read your doc

\n \n Try again\n \n ,\n );\n }\n\n const token = await makeClaimToken(url, email);\n const result = await docContainsToken(url, token);\n if (!result.found) {\n const why = result.bodyLength === 0\n ? `We fetched the page but got nothing back (status ${result.status}). Make sure the page is public.`\n : `We read ${result.bodyLength.toLocaleString()} characters from your page (via ${result.via}) but didn't find the code.`;\n return c.html(\n \n \n

We couldn't find the code

{why}

\n Confirm the code {token} is saved in the doc body\n (not in a comment or hidden block), then try again. If your doc redirects (e.g.\n stevekrouse.com → notion.site), paste the final URL instead.\n

\n \n \n ,\n );\n }\n\n await sqlite.execute({\n sql: \"update DateMeDocs set UserEmail = ? where Profile = ?\",\n args: [email, JSON.stringify(url)],\n });\n return c.redirect(\"/me\", 302);\n});\n\nexport default claim.fetch;\n",[18,182],"b81dcb81-e3cc-4e2b-ba4c-5f21d75732de",["D",1788187875254],34,"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport BrowseFilters from \"../components/BrowseFilters.tsx\";\nimport ProfileTable from \"../components/ProfileTable.tsx\";\nimport SearchHeader from \"../components/SearchHeader.tsx\";\nimport { loadOwnPrefs, resolveBrowseParams } from \"../lib/browse_params.ts\";\nimport { requireSignedIn } from \"../lib/profile_guard.ts\";\nimport { searchProfiles } from \"../lib/profile_search.ts\";\nimport Layout from \"./layout\";\n\nexport default async function Browse(c) {\n // Signed-in is enough to browse. A claimed profile is optional — no-profile\n // members just don't get their search pre-filled and see a nudge to add one.\n const guard = await requireSignedIn(c);\n if (guard instanceof Response) return guard;\n const { email, hasProfile } = guard;\n\n const url = new URL(c.req.url);\n const prefs = await loadOwnPrefs(email);\n const params = resolveBrowseParams(url, prefs);\n\n const { local, remote, geo } = await searchProfiles(params);\n const count = local.length + remote.length;\n\n // Section headings: e.g. \"Within 25 miles of Kansas City, Missouri, United\n // States (3)\". Without a location filter, everything is local and no heading\n // is needed.\n const radiusLabel = params.radiusMi && geo.length\n ? `Within ${params.radiusMi} mile${params.radiusMi === 1 ? \"\" : \"s\"} of ${\n geo.map((g) => g.label).join(\" or \")\n }`\n : null;\n\n return c.html(\n \n

\n {!hasProfile && (\n

\n You're browsing without a listing, so others can't find you here.\n Add your profile\n

\n )}\n \n \n

\n {local.length > 0 && (\n

\n {radiusLabel && (\n

\n {radiusLabel} ({local.length})\n

\n )}\n \n

\n )}\n {remote.length > 0 && (\n

\n Flexible location ({remote.length})\n \n {\" \"}— open to travel or relocating, not based in your radius\n \n

\n \n

\n )}\n

\n ,\n );\n}\n",[18,208],"c2dda384-47b6-11f1-a161-42b51c65c3df",["D",1777898570362],"/** @jsxImportSource npm:hono@3.12.12/jsx */\nimport Layout from \"./layout\";\n\nconst ADMIN_EMAIL = \"stevekrouse.dateme_contact@valtown.email\";\n\nexport default function Banned(c: any) {\n const email = c.get(\"user\")?.email;\n return c.html(\n \n

Account suspended

\n Your account has been suspended after a message you sent was reported as spam. Your\n profile is no longer visible in the directory and you can't send or receive messages.\n

\n If you think this is in error, email{\" \"}\n {ADMIN_EMAIL}.\n

\n \n

\n ,\n );\n}\n",[18,189],"0a9b6301-89b7-454e-b02d-d24c369eb233","api_browse.ts","e97d7092-7bdb-11f1-914e-1607ee4eb77e",["D",1788187875254],"// GET /api/browse — machine-readable version of /browse for the \"authorized\n// URL\" flow: hand an AI agent https://date.val.run/api/browse?key=\n// and it sees exactly what you'd see browsing (your saved prefs by default,\n// or the same filter query params /browse accepts), as JSON instead of HTML.\n//\n// Auth is the API key, not the cookie session — so this route lives outside\n// requireSignedIn/requireClaimedProfile. Same visibility as a signed-in human:\n// no more fields than the /browse table already renders, and no Contact/email.\nimport { findEmailByApiKey } from \"../lib/api_key.ts\";\nimport { loadOwnPrefs, resolveBrowseParams } from \"../lib/browse_params.ts\";\nimport { ageFromBirthday, httpsIfy, safeParse } from \"../lib/json_safe.ts\";\nimport { searchProfiles } from \"../lib/profile_search.ts\";\n\nfunction listField(v: any): string[] {\n const x = safeParse(v);\n return Array.isArray(x) ? x : x ? [String(x)] : [];\n}\n\nfunction toJson(row: Record) {\n return {\n name: safeParse(row.Name) ?? null,\n profileUrl: httpsIfy(safeParse(row.Profile)),\n age: ageFromBirthday(row.Birthday),\n gender: listField(row.Gender),\n interestedIn: listField(row.InterestedIn),\n style: listField(row.Style),\n locations: listField(row.Location),\n locationFlexibility: safeParse(row.LocationFlexibility) ?? null,\n lastUpdated: safeParse(row.LastUpdated) ?? null,\n claimed: !!row.UserEmail,\n };\n}\n\nfunction extractKey(req: Request, url: URL): string {\n const auth = req.headers.get(\"Authorization\");\n if (auth?.startsWith(\"Bearer \")) return auth.slice(\"Bearer \".length).trim();\n return url.searchParams.get(\"key\") ?? \"\";\n}\n\nexport default async function apiBrowse(c: any) {\n const url = new URL(c.req.url);\n const key = extractKey(c.req.raw, url);\n const email = await findEmailByApiKey(key);\n if (!email) {\n return c.json({ error: \"Missing or invalid API key. Get yours at /me.\" }, 401);\n }\n\n const prefs = await loadOwnPrefs(email);\n const params = resolveBrowseParams(url, prefs);\n const { local, remote } = await searchProfiles(params);\n\n return c.json({\n count: local.length + remote.length,\n profiles: [...local, ...remote].map(toJson),\n });\n}\n",[18,523],"c2deee2e-47b6-11f1-a161-42b51c65c3df",["D",1777898570362],[18,227],"pulls","branches","forks","envVars",{"_118":539,"_540":121},"connections",{"_118":121,"_538":121},"unfilledCount",3,"emptyCount",{"_50":974,"_13":929,"_80":923,"_60":-5,"_52":53,"_441":117,"_443":24,"_54":975,"_56":121,"_83":228,"_445":-5,"_85":86,"_446":-5,"_608":976,"_17":977},{"_50":967,"_13":968,"_80":969,"_60":923,"_52":53,"_441":397,"_443":24,"_54":970,"_56":506,"_83":84,"_445":971,"_85":86,"_446":-5,"_608":972,"_17":973},{"_50":960,"_13":961,"_80":962,"_60":923,"_52":53,"_441":150,"_443":24,"_54":963,"_56":121,"_83":84,"_445":964,"_85":86,"_446":-5,"_608":965,"_17":966},{"_50":952,"_13":953,"_80":954,"_60":923,"_52":53,"_441":955,"_443":24,"_54":956,"_56":506,"_83":84,"_445":957,"_85":86,"_446":-5,"_608":958,"_17":959},{"_50":944,"_13":945,"_80":946,"_60":923,"_52":53,"_441":947,"_443":24,"_54":948,"_56":473,"_83":84,"_445":949,"_85":86,"_446":-5,"_608":950,"_17":951},{"_50":937,"_13":938,"_80":939,"_60":923,"_52":53,"_441":270,"_443":24,"_54":940,"_56":539,"_83":84,"_445":941,"_85":86,"_446":-5,"_608":942,"_17":943},{"_50":930,"_13":931,"_80":932,"_60":923,"_52":53,"_441":397,"_443":24,"_54":933,"_56":496,"_83":84,"_445":934,"_85":86,"_446":-5,"_608":935,"_17":936},{"_50":920,"_13":921,"_80":922,"_60":923,"_52":53,"_441":924,"_443":24,"_54":925,"_56":539,"_83":84,"_445":926,"_85":86,"_446":-5,"_608":927,"_17":928},{"_50":913,"_13":914,"_80":915,"_60":-5,"_52":53,"_441":916,"_443":24,"_54":917,"_56":121,"_83":228,"_445":-5,"_85":86,"_446":-5,"_608":918,"_17":919},{"_50":909,"_13":783,"_80":777,"_60":-5,"_52":53,"_441":117,"_443":24,"_54":910,"_56":121,"_83":228,"_445":-5,"_85":86,"_446":-5,"_608":911,"_17":912},{"_50":902,"_13":903,"_80":904,"_60":777,"_52":53,"_441":124,"_443":24,"_54":905,"_56":121,"_83":84,"_445":906,"_85":86,"_446":-5,"_608":907,"_17":908},{"_50":894,"_13":895,"_80":896,"_60":777,"_52":53,"_441":897,"_443":24,"_54":898,"_56":121,"_83":84,"_445":899,"_85":86,"_446":-5,"_608":900,"_17":901},{"_50":886,"_13":887,"_80":888,"_60":777,"_52":53,"_441":889,"_443":24,"_54":890,"_56":26,"_83":84,"_445":891,"_85":86,"_446":-5,"_608":892,"_17":893},{"_50":879,"_13":880,"_80":881,"_60":777,"_52":53,"_441":124,"_443":24,"_54":882,"_56":121,"_83":84,"_445":883,"_85":86,"_446":-5,"_608":884,"_17":885},{"_50":871,"_13":872,"_80":873,"_60":777,"_52":53,"_441":874,"_443":24,"_54":875,"_56":121,"_83":84,"_445":876,"_85":86,"_446":-5,"_608":877,"_17":878},{"_50":864,"_13":865,"_80":866,"_60":777,"_52":53,"_441":124,"_443":24,"_54":867,"_56":121,"_83":84,"_445":868,"_85":86,"_446":-5,"_608":869,"_17":870},{"_50":857,"_13":858,"_80":859,"_60":777,"_52":53,"_441":124,"_443":24,"_54":860,"_56":121,"_83":84,"_445":861,"_85":86,"_446":-5,"_608":862,"_17":863},{"_50":850,"_13":851,"_80":852,"_60":777,"_52":53,"_441":117,"_443":24,"_54":853,"_56":121,"_83":84,"_445":854,"_85":86,"_446":-5,"_608":855,"_17":856},{"_50":843,"_13":844,"_80":845,"_60":777,"_52":53,"_441":270,"_443":24,"_54":846,"_56":26,"_83":84,"_445":847,"_85":86,"_446":-5,"_608":848,"_17":849},{"_50":836,"_13":837,"_80":838,"_60":777,"_52":53,"_441":124,"_443":24,"_54":839,"_56":121,"_83":84,"_445":840,"_85":86,"_446":-5,"_608":841,"_17":842},{"_50":828,"_13":829,"_80":830,"_60":777,"_52":53,"_441":831,"_443":24,"_54":832,"_56":26,"_83":84,"_445":833,"_85":86,"_446":-5,"_608":834,"_17":835},{"_50":821,"_13":822,"_80":823,"_60":777,"_52":53,"_441":117,"_443":24,"_54":824,"_56":121,"_83":84,"_445":825,"_85":86,"_446":-5,"_608":826,"_17":827},{"_50":814,"_13":815,"_80":816,"_60":777,"_52":53,"_441":504,"_443":24,"_54":817,"_56":26,"_83":84,"_445":818,"_85":86,"_446":-5,"_608":819,"_17":820},{"_50":807,"_13":808,"_80":809,"_60":777,"_52":53,"_441":124,"_443":24,"_54":810,"_56":26,"_83":84,"_445":811,"_85":86,"_446":-5,"_608":812,"_17":813},{"_50":800,"_13":801,"_80":802,"_60":777,"_52":53,"_441":270,"_443":24,"_54":803,"_56":26,"_83":84,"_445":804,"_85":86,"_446":-5,"_608":805,"_17":806},{"_50":792,"_13":793,"_80":794,"_60":777,"_52":53,"_441":397,"_443":24,"_54":795,"_56":796,"_83":84,"_445":797,"_85":86,"_446":-5,"_608":798,"_17":799},{"_50":784,"_13":785,"_80":786,"_60":777,"_52":53,"_441":787,"_443":24,"_54":788,"_56":539,"_83":84,"_445":789,"_85":86,"_446":-5,"_608":790,"_17":791},{"_50":774,"_13":775,"_80":776,"_60":777,"_52":53,"_441":778,"_443":24,"_54":779,"_56":539,"_83":84,"_445":780,"_85":86,"_446":-5,"_608":781,"_17":782},{"_50":440,"_13":18,"_80":358,"_60":-5,"_52":53,"_441":442,"_443":24,"_54":771,"_56":26,"_83":228,"_445":-5,"_85":86,"_446":-5,"_608":772,"_17":773},{"_50":528,"_13":227,"_80":226,"_60":358,"_52":53,"_441":124,"_443":24,"_54":768,"_56":121,"_83":228,"_445":-5,"_85":86,"_446":-5,"_608":769,"_17":770},{"_50":760,"_13":761,"_80":762,"_60":226,"_52":53,"_441":763,"_443":24,"_54":764,"_56":26,"_83":84,"_445":765,"_85":86,"_446":-5,"_608":766,"_17":767},{"_50":753,"_13":754,"_80":755,"_60":226,"_52":53,"_441":124,"_443":24,"_54":756,"_56":121,"_83":84,"_445":757,"_85":86,"_446":-5,"_608":758,"_17":759},{"_50":746,"_13":747,"_80":748,"_60":226,"_52":53,"_441":124,"_443":24,"_54":749,"_56":121,"_83":84,"_445":750,"_85":86,"_446":-5,"_608":751,"_17":752},{"_50":739,"_13":740,"_80":741,"_60":226,"_52":53,"_441":124,"_443":24,"_54":742,"_56":121,"_83":84,"_445":743,"_85":86,"_446":-5,"_608":744,"_17":745},{"_50":732,"_13":733,"_80":734,"_60":226,"_52":53,"_441":124,"_443":24,"_54":735,"_56":121,"_83":84,"_445":736,"_85":86,"_446":-5,"_608":737,"_17":738},{"_50":724,"_13":725,"_80":726,"_60":226,"_52":53,"_441":727,"_443":24,"_54":728,"_56":506,"_83":84,"_445":729,"_85":86,"_446":-5,"_608":730,"_17":731},{"_50":716,"_13":717,"_80":718,"_60":226,"_52":53,"_441":719,"_443":24,"_54":720,"_56":26,"_83":84,"_445":721,"_85":86,"_446":-5,"_608":722,"_17":723},{"_50":709,"_13":710,"_80":711,"_60":226,"_52":53,"_441":124,"_443":24,"_54":712,"_56":121,"_83":84,"_445":713,"_85":86,"_446":-5,"_608":714,"_17":715},{"_50":522,"_13":523,"_80":524,"_60":358,"_52":53,"_441":397,"_443":24,"_54":706,"_56":26,"_83":84,"_445":526,"_85":86,"_446":-5,"_608":707,"_17":708},{"_50":518,"_13":189,"_80":188,"_60":358,"_52":53,"_441":124,"_443":24,"_54":703,"_56":121,"_83":84,"_445":520,"_85":86,"_446":-5,"_608":704,"_17":705},{"_50":513,"_13":208,"_80":207,"_60":358,"_52":53,"_441":397,"_443":24,"_54":700,"_56":515,"_83":84,"_445":516,"_85":86,"_446":-5,"_608":701,"_17":702},{"_50":509,"_13":182,"_80":181,"_60":358,"_52":53,"_441":504,"_443":24,"_54":697,"_56":496,"_83":84,"_445":511,"_85":86,"_446":-5,"_608":698,"_17":699},{"_50":503,"_13":232,"_80":231,"_60":358,"_52":53,"_441":504,"_443":24,"_54":694,"_56":506,"_83":84,"_445":507,"_85":86,"_446":-5,"_608":695,"_17":696},{"_50":499,"_13":220,"_80":219,"_60":358,"_52":53,"_441":124,"_443":24,"_54":691,"_56":473,"_83":84,"_445":501,"_85":86,"_446":-5,"_608":692,"_17":693},{"_50":493,"_13":175,"_80":174,"_60":358,"_52":53,"_441":494,"_443":24,"_54":688,"_56":496,"_83":84,"_445":497,"_85":86,"_446":-5,"_608":689,"_17":690},{"_50":487,"_13":100,"_80":99,"_60":358,"_52":53,"_441":488,"_443":24,"_54":685,"_56":490,"_83":84,"_445":491,"_85":86,"_446":-5,"_608":686,"_17":687},{"_50":481,"_13":201,"_80":200,"_60":358,"_52":53,"_441":482,"_443":24,"_54":682,"_56":484,"_83":84,"_445":485,"_85":86,"_446":-5,"_608":683,"_17":684},{"_50":476,"_13":82,"_80":81,"_60":358,"_52":53,"_441":124,"_443":24,"_54":679,"_56":478,"_83":84,"_445":479,"_85":86,"_446":-5,"_608":680,"_17":681},{"_50":470,"_13":168,"_80":167,"_60":358,"_52":53,"_441":471,"_443":24,"_54":676,"_56":473,"_83":84,"_445":474,"_85":86,"_446":-5,"_608":677,"_17":678},{"_50":466,"_13":161,"_80":160,"_60":358,"_52":53,"_441":124,"_443":24,"_54":673,"_56":121,"_83":84,"_445":468,"_85":86,"_446":-5,"_608":674,"_17":675},{"_50":462,"_13":154,"_80":153,"_60":358,"_52":53,"_441":124,"_443":24,"_54":670,"_56":121,"_83":84,"_445":464,"_85":86,"_446":-5,"_608":671,"_17":672},{"_50":666,"_13":658,"_80":653,"_60":-5,"_52":53,"_441":103,"_443":24,"_54":667,"_56":121,"_83":228,"_445":-5,"_85":86,"_446":-5,"_608":668,"_17":669},{"_50":659,"_13":660,"_80":661,"_60":653,"_52":53,"_441":270,"_443":24,"_54":662,"_56":121,"_83":84,"_445":663,"_85":86,"_446":-5,"_608":664,"_17":665},{"_50":650,"_13":651,"_80":652,"_60":653,"_52":53,"_441":270,"_443":24,"_54":654,"_56":26,"_83":84,"_445":655,"_85":86,"_446":-5,"_608":656,"_17":657},{"_50":646,"_13":645,"_80":639,"_60":-5,"_52":53,"_441":117,"_443":24,"_54":647,"_56":121,"_83":228,"_445":-5,"_85":86,"_446":-5,"_608":648,"_17":649},{"_50":636,"_13":637,"_80":638,"_60":639,"_52":53,"_441":640,"_443":24,"_54":641,"_56":26,"_83":21,"_445":642,"_85":86,"_446":-5,"_608":643,"_17":644},{"_50":628,"_13":629,"_80":630,"_60":-5,"_52":53,"_441":631,"_443":24,"_54":632,"_56":119,"_83":21,"_445":633,"_85":86,"_446":-5,"_608":634,"_17":635},{"_50":620,"_13":621,"_80":622,"_60":-5,"_52":53,"_441":504,"_443":24,"_54":623,"_56":624,"_83":21,"_445":625,"_85":86,"_446":-5,"_608":626,"_17":627},{"_50":611,"_13":612,"_80":370,"_60":-5,"_52":53,"_441":613,"_443":24,"_54":614,"_56":615,"_83":606,"_445":616,"_85":86,"_446":617,"_608":618,"_17":619},{"_50":601,"_13":602,"_80":603,"_60":-5,"_52":53,"_441":604,"_443":24,"_54":605,"_56":280,"_83":606,"_445":607,"_85":86,"_446":-5,"_608":609,"_17":610},"d08d58bc-47ca-11f1-ad6e-42b51c65c3df","rss","0022bb14-e591-11ef-9eb9-e6cdfca9ef9f",190,["D",1777907183273],"http","// Public RSS feed: metadata-only. We deliberately omit the doc URL and the\n// user's contact email, since the directory itself is sign-in only.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { ageFromBirthday, safeParse } from \"./lib/json_safe.ts\";\n\nconst PUBLIC_FIELDS = [\n \"Gender\",\n \"InterestedIn\",\n \"Location\",\n \"Style\",\n \"LocationFlexibility\",\n];\n\nconst HOME = \"https://dateme.directory\";\n\nfunction escapeXml(s: string): string {\n return String(s).replace(/[&<>\"']/g, (c) =>\n ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" } as Record)[c]\n );\n}\n\nasync function profileGuid(profile: string): Promise {\n const buf = await crypto.subtle.digest(\n \"SHA-256\",\n new TextEncoder().encode(profile),\n );\n const hex = Array.from(new Uint8Array(buf))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n return `dateme-profile-${hex.slice(0, 16)}`;\n}\n\nexport async function rss(_req: Request) {\n const { rows } = await sqlite.execute(\n `select * from DateMeDocs\n where DeletedAt is null and blocked_at is null\n order by LastUpdated desc limit 20`,\n );\n\n const items = await Promise.all(rows.map(async (p: any) => {\n const title = escapeXml(safeParse(p.Name));\n const lines: string[] = [];\n const age = ageFromBirthday(p.Birthday);\n if (age != null) lines.push(`Age: ${age}`);\n for (const k of PUBLIC_FIELDS) {\n if (p[k]) lines.push(`${k}: ${safeParse(p[k])}`);\n }\n const description = escapeXml(lines.join(\"\\n\"));\n const guid = await profileGuid(safeParse(p.Profile));\n const pubDate = new Date(safeParse(p.LastUpdated)).toUTCString();\n return ` \n ${title}\n ${description}\n ${HOME}\n ${guid}\n ${pubDate}\n `;\n }));\n\n const xml = `\n\n\n Date Me Directory\n Recent profiles in the Date Me Directory. Sign in at ${HOME} to view full profiles.\n ${HOME}\n \n${items.join(\"\\n\")}\n\n`;\n\n return new Response(xml, { headers: { \"Content-type\": \"application/rss+xml\" } });\n}\n","children",[],[602],"568fb5bd-856f-4cff-8d14-feb708081947","index",264,["D",1783631995713],23,"import { Hono } from \"npm:hono@3.12.12\";\nimport { serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { auth } from \"./lib/auth.ts\";\nimport { admin } from \"./pages/admin/index.tsx\";\nimport apiBrowse from \"./pages/api_browse.ts\";\nimport banned from \"./pages/banned.tsx\";\nimport browse from \"./pages/browse\";\nimport { claim } from \"./pages/claim\";\nimport { contact } from \"./pages/contact\";\nimport faq from \"./pages/faq\";\nimport { flag } from \"./pages/flag.tsx\";\nimport home from \"./pages/home\";\nimport { join } from \"./pages/join\";\nimport { me } from \"./pages/me\";\nimport reportSpam from \"./pages/report_spam.tsx\";\nimport { rss } from \"./rss\";\nimport { signIn } from \"./pages/sign_in.tsx\";\n\ntype AppEnv = {\n Variables: {\n user: { id: string; email: string; name?: string } | null;\n };\n};\n\nconst app = new Hono();\n\n// ── Routes that don't need our session lookup ───────────────────────────────\n// Better Auth handles its own session reads; static + rss render no user UI.\n\napp.on([\"GET\", \"POST\"], \"/api/auth/*\", (c) => auth.handler(c.req.raw));\napp.get(\"/static/favicon.svg\", (c) => serveFile(c.req.path));\napp.get(\"/rss.xml\", (c) => rss(c.req.raw));\n// API-key authed, not cookie-session — deliberately outside userApp's guards.\napp.get(\"/api/browse\", apiBrowse);\n\n// ── Everything else hydrates the user once via middleware ───────────────────\n\nconst userApp = new Hono();\n\nuserApp.use(\"*\", async (c, next) => {\n const session = await auth.api.getSession({ headers: c.req.raw.headers });\n c.set(\"user\", (session?.user as any) ?? null);\n await next();\n});\n\nuserApp.post(\"/sign-out\", async (c) => {\n try {\n await auth.api.signOut({ headers: c.req.raw.headers });\n } catch (e) {\n console.error(\"[sign-out] error:\", e);\n }\n return c.redirect(\"/\", 302);\n});\n\nuserApp.get(\"/\", home);\nuserApp.route(\"/sign-in\", signIn);\nuserApp.get(\"/browse\", browse);\nuserApp.route(\"/join\", join);\nuserApp.route(\"/me\", me);\nuserApp.route(\"/claim\", claim);\nuserApp.route(\"/contact\", contact);\nuserApp.route(\"/flag\", flag);\nuserApp.route(\"/admin\", admin);\nuserApp.get(\"/report-spam\", reportSpam);\nuserApp.get(\"/banned\", banned);\nuserApp.get(\"/faq\", faq);\n\napp.route(\"/\", userApp);\n\napp.onError((e) => Promise.reject(e));\nexport default app.fetch;\n","date",[],[612],"445914a2-5c25-11f1-bbd5-ee650bb23af1","README.md","b0c1b956-e58d-11ef-b938-e6cdfca9ef9f",["D",1780145055495],11,"# Date Me Directory\n\nA directory of long-form, earnest dating profiles (\"Date Me Docs\"). People write their own profile on Google Docs, Notion, or a personal site — this app indexes them so others can browse, filter by location/age/gender preference, and reach out via a relayed contact form.\n\n**Live site**: \n\n## Architecture\n\n- **Routing**: [Hono](https://hono.dev/) with hono/jsx for server-rendered pages.\n- **Styling**: Tailwind via the [twind](https://github.com/tw-in-js/twind) CDN (runtime, no build step).\n- **Auth**: [Better Auth](https://www.better-auth.com/) with the magic-link plugin (no passwords). Session in an `httpOnly` cookie.\n- **DB**: SQLite via `std/sqlite` — project-scoped (not personal-org).\n- **Email**: `std/email`.\n- **Spam classifier + flag review**: `std/openai` (`gpt-4o-mini`), fail-open.\n- **Geocoding**: client-side autocomplete via [Photon](https://photon.komoot.io/) wrapped in the [`stevekrouse/location_input`](https://www.val.town/x/stevekrouse/location_input) form-associated web component; server-side single-shot geocode for legacy free-text queries.\n\n```mermaid\nerDiagram\n user ||--o{ session : \"has\"\n user ||--o| DateMeDocs : \"claims (UserEmail)\"\n DateMeDocs ||--o{ dateme_profile_locations : \"geocoded sidecar\"\n DateMeDocs ||--o{ dateme_messages : \"sender of\"\n DateMeDocs ||--o{ dateme_messages : \"recipient of\"\n DateMeDocs ||--o{ dateme_reports : \"target of\"\n dateme_messages ||--o{ dateme_reports : \"subject of (type=message_spam)\"\n```\n\n## Layout\n\n```\ndateme/\n├── index # App root: routes + session middleware\n├── pages/ # Hono route handlers + JSX pages\n│ ├── layout # Shared header/footer/twind/web-component bootstrap\n│ ├── home # / — public landing\n│ ├── sign_in.tsx # /sign-in (+ /sign-in/sent) — magic-link form\n│ ├── browse # /browse — filtered table, requires sign-in (profile optional)\n│ ├── join # /join — submit a new profile\n│ ├── claim # /claim — link an existing doc to your account via token-in-doc\n│ ├── me # /me, /me/edit, /me/pause, /me/republish, /me/delete\n│ ├── contact # /contact?profile=… — relayed first-contact email\n│ ├── flag.tsx # /flag?profile=… — flag a profile for admin review\n│ ├── report_spam.tsx # /report-spam?id=…&t=… — one-click recipient spam report\n│ ├── banned.tsx # /banned — suspended-account page\n│ ├── faq # /faq\n│ └── admin/ # admin-only pages, allowlist guarded (see lib/admin_guard.ts)\n│ ├── index.tsx # mounts the admin sub-app under /admin\n│ ├── layout.tsx # admin chrome\n│ ├── badges.tsx # shared badge components\n│ ├── dashboard.tsx # /admin — counts + recent reports\n│ ├── reports.tsx # /admin/reports[/:id] — review queue + decide\n│ ├── messages.tsx # /admin/messages — paginated message log\n│ ├── users.tsx # /admin/users — list of all claimed users\n│ └── user_detail.tsx # /admin/users/:email — actions (ban/unban/soft-delete/hard-delete)\n├── components/ # Pure JSX components\n│ ├── JoinForm.tsx\n│ ├── BrowseFilters.tsx\n│ ├── SearchHeader.tsx\n│ ├── ProfileTable.tsx\n│ ├── ProfileRow.tsx\n│ └── ProfileSummary.tsx\n├── lib/ # Domain helpers (no JSX)\n│ ├── auth.ts # Better Auth instance (magic link)\n│ ├── auth_schema.ts # Better Auth CREATE TABLEs (kept but no longer auto-run on cold start)\n│ ├── admin_guard.ts # ADMIN_EMAILS allowlist + requireAdmin() (returns 404, not 302)\n│ ├── profile_guard.ts # requireSignedIn() (browse/contact) + requireClaimedProfile() (flag)\n│ ├── profile_persist.ts # parseProfileForm / createProfile / updateProfile\n│ ├── profile_search.ts # gender/age + geo filtering, local-then-remote sort\n│ ├── profile_locations.ts # Bulk-load lat/lon rows for a set of profiles\n│ ├── doc_validator.ts # Direct-fetch + Jina fallback URL/page checks\n│ ├── claim_token.ts # SHA-256-derived 8-char doc-claim code\n│ ├── messages.ts # createMessage / banUser / unbanUser\n│ ├── reports.ts # unified create/decide/list for profile_flag + message_spam\n│ ├── openai_review.ts # checkSpam (pre-send) + reviewProfileFlag (post-flag)\n│ ├── photon.ts # Server-side single-shot geocode\n│ ├── haversine.ts # Great-circle distance\n│ └── json_safe.ts # safeParse, httpsIfy\n├── rss # /rss.xml — public, metadata-only feed\n├── scripts/\n│ └── smoke_test.ts # Read-only smoke test for endpoints + schema (run before merge)\n└── static/favicon.svg\n```\n\n## Database\n\n```\nDateMeDocs -- one row per profile. PK = Profile (the doc URL, JSON-encoded).\n -- Most string fields are JSON-wrapped (legacy schema).\n -- Status columns: DeletedAt (soft delete / pause), blocked_at + ban_reason (admin ban),\n -- UserEmail (the claim).\ndateme_profile_locations -- geocoded sidecar for DateMeDocs.Location. (profile, ord) PK.\n -- Holds latitude, longitude, is_remote — used by searchProfiles for radius filtering.\ndateme_messages -- first-contact relayed messages. id INTEGER PK, sender_email, recipient_email,\n -- body, sent_at, report_token (16-byte hex for the email's report link).\ndateme_reports -- unified report queue. type='message_spam' (auto-banned on insert) or\n -- 'profile_flag' (queued for admin). Holds AI verdict + admin decision.\n\nuser, session, account, verification -- Better Auth tables. user is the canonical auth record;\n -- DateMeDocs.UserEmail joins to it. account/verification are mostly\n -- empty on a magic-link-only setup but kept for Better Auth's queries.\n```\n\n## Auth flow\n\n1. `POST /sign-in` with email → Better Auth sends a magic link via `std/email`.\n2. Click → `/api/auth/magic-link/verify` → cookie session set → redirect to `/me`.\n3. `/me` finds the user's profile by `UserEmail`. If none, falls back to **auto-claim** for an unclaimed row whose `Contact` exactly matches the signed-in email (safe — magic-link auth proves ownership). Otherwise → `/claim`.\n\nManual claim flow (when auto-claim doesn't apply):\n\n1. `/claim/existing` → user pastes the doc URL.\n2. We hand them an 8-char code (HMAC of `docUrl + email`).\n3. They paste it into the doc, click **Verify**.\n4. We re-fetch (bypassing Jina cache) and confirm the code is in the body, then set `UserEmail`.\n\n## Reports + moderation\n\nThere are two paths into `dateme_reports`:\n\n- **`type='message_spam'`** — recipient clicks the report link in the message email. Auto-bans the sender; report row records the auto-decision for audit. Optional async OpenAI review for record-keeping.\n- **`type='profile_flag'`** — any signed-in user clicks the Flag button on a profile row, optionally with a reason. Synchronous OpenAI review (truncated to 100k chars of profile content) attaches a verdict, but **admin always decides** — AI is advisor, never judge. Steve gets an email per flag.\n\nThe admin queue (`/admin/reports`) shows both types unified. Decisions: ban (sets `DateMeDocs.blocked_at` + `ban_reason`) or dismiss.\n\n## Doc validation\n\n`lib/doc_validator.ts` enforces:\n\n- HTTP(S) only, no socials (Instagram / X / TikTok / Facebook).\n- Direct fetch (with `redirect: follow`, 20s timeout).\n- Google Docs `/document/d/{ID}/...` rewritten to `/export?format=txt`.\n- If the page is < 500 chars after `

Sign in or sign up

Check your email

Invalid link

Reported. Thanks.

Your profile

AI access

Delete your account?

Date thoughtfully

Profile not found

Can't flag your own profile

Flag {targetName}'s profile

Thanks — we'll review it

FAQ

Press

Contact

Can't reach this profile

Send a message to {recipientName}

Message sent

Welcome

Claim your profile

Verify ownership

Couldn't read your doc

We couldn't find the code

\n {radiusLabel} ({local.length})\n

\n Flexible location ({remote.length})\n \n {\" \"}— open to travel or relocating, not based in your radius\n \n

Account suspended

History · pages