{app.name}

No scripts in this app yet.

{#each scripts as script (script.id)}
• {script.name} v{script.version} {#if script.kind === 'module'} module {:else} endpoint {/if}
  {script.description ?? '—'}
{/each}

Domain claims

Hosts this app answers on. Routes inside this app can only bind to these. Use app.example.com for exact, *.example.com for wildcard, or {'{'}tenant{'}'}.example.com to bind a capture.

No domain claims yet.

{#each domains as d (d.id)}
• {d.pattern} — {d.shape}
  {#if canAdmin} askRemoveDomain(d)} > Delete {/if}
{/each}

Members

Users with explicit access to this app. Instance owners and admins already have implicit access — they are not listed here. Use the Users page to invite a member first, then grant them app access below.

No explicit members yet.

Cron triggers

Run an endpoint script on a schedule. Schedules are 6-field cron expressions (with seconds): sec min hour day-of-month month day-of-week. The timezone disambiguates schedules like "every weekday at 9am".

Pub/Sub triggers

Subscribe an endpoint script to durable pub/sub messages. Topic patterns are an exact topic (user.created), a prefix wildcard (user.*), or * for every topic.

Email triggers

Fire an endpoint script when your email provider POSTs an inbound message to PiCloud. Configure your provider (Mailgun / Postmark / SendGrid / SES) to POST the generic JSON shape below to the trigger's webhook URL. Set a shared secret to require an X-Picloud-Signature HMAC-SHA256 (hex of the request body); leave it blank to accept unsigned POSTs (URL secrecy only).

{`{
  "from": "sender@external.com",
  "to": ["alice@myapp.com"],
  "cc": [],
  "subject": "...",
  "text": "...",
  "html": "...",
  "message_id": ""
}`}

Queue:receive trigger (v1.1.9)

Register a script as the consumer for a per-app durable queue. Exactly one consumer per queue is allowed — the registration will be rejected if another consumer already exists. Use the Queues tab for a read-only view of message depths.

Create kv:event trigger

Create docs:event trigger

Create files:event trigger

Create dead_letter trigger

Fires when any other trigger or route dead-letters. All filter fields are optional; leaving them blank routes every dead-letter to this script.

No triggers in this app yet.

{#each triggers as t (t.id)}
• {t.kind} {#if !t.enabled} • disabled {/if} {#if t.details.kind === 'cron'} {t.details.schedule} — {t.details.timezone} last fired: {t.details.last_fired_at ?? 'never'} {:else if t.details.kind === 'kv' || t.details.kind === 'docs' || t.details.kind === 'files'} {t.details.collection_glob} — {t.details.ops.join(', ') || 'any op'} {:else if t.details.kind === 'pubsub'} {t.details.topic_pattern} {:else if t.details.kind === 'email'} {t.details.has_inbound_secret ? 'signed (HMAC)' : 'unsigned'} {emailInboundUrl(t.id)} {:else if t.details.kind === 'queue'} {t.details.queue_name} — vt {t.details.visibility_timeout_secs}s last fired: {t.details.last_fired_at ?? 'never'} {/if} → {t.script_id}
  (triggerToRemove = t)} > Delete
{/each}

Realtime topics

Pub/sub topics are internal-only by default — scripts subscribe via triggers, browsers can't. Register a topic here and mark it externally subscribable to let frontend clients connect over SSE at /realtime/topics/<name>. public topics need no auth; token topics require a subscriber token minted by a script via pubsub::subscriber_token.

No registered topics in this app yet.

{#each topics as t (t.name)}
• {t.name} {#if t.external_subscribable} external {t.auth_mode} {:else} internal {/if} · {shortDate(t.created_at)}
  openEditTopic(t)}> Edit (topicToRemove = t)} > Delete
{/each}

Secrets

Encrypted per-app configuration (API keys, OAuth tokens, webhook signing keys), available to scripts as secrets::get("name"). Values are encrypted at rest with the process master key and never leave the server — this list shows names and last-modified times only.

No secrets in this app yet.

{#each secrets as s (s.name)}
• {s.name} · updated {shortDate(s.updated_at)}
  (secretToRemove = s)} > Delete
{/each}

Settings