${p}
`).join('') - const html = `${paragraphs}` - - try { - const resend = new Resend(process.env.RESEND_API_KEY) - const { data: created, error: createErr } = await resend.broadcasts.create({ - audienceId, - from: fromLabel, - subject, - ...(previewText ? { previewText } : {}), - html, - text, - }) - if (createErr || !created?.id) { - res.status(502).json({ message: createErr?.message || 'Broadcast creation failed.' }); return - } - const { error: sendErr } = await resend.broadcasts.send(created.id) - if (sendErr) { res.status(502).json({ message: sendErr.message || 'Broadcast send failed.' }); return } - - appendAuditEntry('broadcast-sent', `Subject: ${subject} | AudienceId: ${audienceId}`) - res.json({ ok: true, broadcastId: created.id }) - } catch (err) { - res.status(502).json({ message: String(err?.message ?? 'Broadcast failed.') }) - } - }) - - app.post('/api/admin-contacts/trigger-drip', requireAdminAuth, async (req, res) => { - if (!process.env.RESEND_API_KEY) { res.status(503).json({ message: 'RESEND_API_KEY is not configured.' }); return } - const automationId = process.env.RESEND_AUTOMATION_WELCOME || '' - if (!automationId) { res.status(503).json({ message: 'No RESEND_AUTOMATION_* configured.' }); return } - - const email = typeof req.body?.email === 'string' ? req.body.email.trim().toLowerCase() : '' - const tag = typeof req.body?.tag === 'string' ? req.body.tag.trim().slice(0, 50) : '' - if (!email) { res.status(400).json({ message: 'email is required.' }); return } - - try { - const resend = new Resend(process.env.RESEND_API_KEY) - // Add or update the contact in the Resend audience so the automation can fire - const audienceId = process.env.RESEND_AUDIENCE_ID || '' - if (audienceId) { - await resend.contacts.create({ audienceId, email, unsubscribed: false }).catch(() => {}) - } - appendAuditEntry('drip-triggered', `email: ${email}${tag ? ` | tag: ${tag}` : ''}`) - res.json({ ok: true, note: 'Contact synced to Resend audience; automation will fire based on your Resend settings.' }) - } catch (err) { - res.status(502).json({ message: String(err?.message ?? 'Drip trigger failed.') }) - } - }) - - app.post('/api/admin-contact-submissions/:id/draft-reply', requireAdminAuth, async (req, res) => { - const apiKey = process.env.ANTHROPIC_API_KEY - if (!apiKey) { res.status(503).json({ message: 'ANTHROPIC_API_KEY is not configured on the server.' }); return } - - const { id } = req.params - if (!id || typeof id !== 'string') { res.status(400).json({ message: 'Invalid submission id.' }); return } - - const submission = state.contactSubmissions.find(s => s.id === id.trim()) - if (!submission) { res.status(404).json({ message: 'Submission not found.' }); return } - - const senderName = submission.name?.trim() || 'this listener' - const messageText = submission.message?.trim() || '(no message body)' - - try { - const apiRes = await fetch('https://api.anthropic.com/v1/messages', { - method: 'POST', - headers: { - 'Content-Type': 'application/json', - 'x-api-key': apiKey, - 'anthropic-version': '2023-06-01', - }, - body: JSON.stringify({ - model: 'claude-haiku-4-5-20251001', - max_tokens: 400, - messages: [{ - role: 'user', - content: `Draft a warm, personal reply to this message from a podcast listener. Write only the reply body — no greeting line (handled separately), no sign-off (handled by a signature). Keep it under 150 words. Be genuine and specific to their message.\n\nFrom: ${senderName}\nMessage:\n${messageText.slice(0, 1500)}`, - }], - }), - }) - - if (!apiRes.ok) { - const err = await apiRes.json().catch(() => ({})) - res.status(502).json({ message: err?.error?.message || 'AI draft request failed.' }); return - } - - const data = await apiRes.json() - const draft = String(data?.content?.[0]?.text ?? '').trim() - res.json({ ok: true, draft }) - } catch { - res.status(502).json({ message: 'AI draft request failed.' }) - } - }) - - // ── Webhook CRUD ─────────────────────────────────────────────────────────── - - app.get('/api/admin-webhooks', requireAdminAuth, (_req, res) => { - res.json({ webhooks: state.webhooks }) - }) - - app.post('/api/admin-webhooks', requireAdminAuth, (req, res) => { - const url = typeof req.body?.url === 'string' ? req.body.url.trim() : '' - const events = Array.isArray(req.body?.events) ? req.body.events.filter(e => typeof e === 'string' && e.trim()) : ['*'] - const label = typeof req.body?.label === 'string' ? req.body.label.trim().slice(0, 100) : '' - if (!url || !/^https?:\/\/./.test(url)) { - res.status(400).json({ message: 'A valid http/https URL is required.' }); return - } - const webhook = { id: randomUUID(), url: url.slice(0, 500), label, events, createdAt: new Date().toISOString() } - state.webhooks.push(webhook) - state.webhooks = state.webhooks.slice(0, 50) - queueWebhooksWrite() - appendAuditEntry('webhook-added', url) - res.json({ ok: true, webhook }) - }) - - app.delete('/api/admin-webhooks/:id', requireAdminAuth, (req, res) => { - const { id } = req.params - const before = state.webhooks.length - state.webhooks = state.webhooks.filter(w => w.id !== id) - if (state.webhooks.length === before) { res.status(404).json({ message: 'Webhook not found.' }); return } - queueWebhooksWrite() - appendAuditEntry('webhook-removed', `id: ${id}`) - res.json({ ok: true }) - }) - - app.post('/api/admin-webhooks/:id/test', requireAdminAuth, async (req, res) => { - const wh = state.webhooks.find(w => w.id === req.params.id) - if (!wh) { res.status(404).json({ message: 'Webhook not found.' }); return } - try { - const r = await fetch(wh.url, { - method: 'POST', - headers: { 'Content-Type': 'application/json', 'User-Agent': 'Siteforge-Webhook/1.0' }, - body: JSON.stringify({ event: 'test', data: { message: 'Test event from Siteforge.' }, firedAt: new Date().toISOString() }), - signal: AbortSignal.timeout(8000), - }) - appendAuditEntry('webhook-test', `${wh.url} → ${r.status}`) - res.json({ ok: true, status: r.status }) - } catch (err) { - res.status(502).json({ message: String(err?.message ?? 'Test failed.') }) - } - }) } diff --git a/src/AdminPage.tsx b/src/AdminPage.tsx index cdf2fc5..4621d18 100644 --- a/src/AdminPage.tsx +++ b/src/AdminPage.tsx @@ -698,7 +698,7 @@ type StringField = Exclude