Role Mirror

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","LukasBN","name","Role-Mirror","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/LukasBN/Role-Mirror/code/main.ts","extension","id","cee0a50d-ce82-455e-adee-bb44150a145c","fileId","361e5f6e-ac5c-11f1-8a28-1607ee4eb77e","parentId","branchId","8dc20f3f-6b08-4ef9-91ef-93d8c7b7f5ae","branchVersion",13,"latest",true,"createdAt",["D",1789409356441],"version",3,"fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ADMIN_KEY = \"bechstein-rm-2j7022lR\";\n\nasync function ensureTables() {\n await sqlite.execute(`create table if not exists people (\n id text primary key,\n name text,\n token text,\n created_at text\n )`);\n await sqlite.execute(`create table if not exists responses (\n doc_id text primary key,\n respondent_id text,\n subject_id text,\n is_self integer,\n answers text,\n submitted integer,\n updated_at text\n )`);\n await sqlite.execute(`create table if not exists extra_responses (\n person_id text,\n q_key text,\n answer text,\n updated_at text,\n primary key (person_id, q_key)\n )`);\n try {\n await sqlite.execute(\"alter table people add column token text\");\n } catch (e) {}\n const rows = await sqlite.execute({\n sql: \"select id, token from people\",\n args: [],\n });\n for (const r of rows.rows as any[]) {\n if (!r.token) {\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n await sqlite.execute({\n sql: \"update people set token = ? where id = ?\",\n args: [token, r.id],\n });\n }\n }\n}\n\nfunction jsonResponse(data: unknown, status?: number) {\n return new Response(JSON.stringify(data), {\n status: status || 200,\n headers: { \"content-type\": \"application/json;charset=utf-8\" },\n });\n}\n\nasync function listPeople() {\n const result = await sqlite.execute({\n sql: \"select id, name, created_at from people\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n createdAt: r.created_at,\n }));\n}\n\nasync function adminListPeople(origin: string) {\n const result = await sqlite.execute({\n sql:\n \"select id, name, token, created_at from people order by created_at asc\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n token: r.token,\n createdAt: r.created_at,\n link: origin + \"/?u=\" + r.token,\n }));\n}\n\nasync function addPerson(name: string) {\n name = (name || \"\").toString().trim().slice(0, 60);\n if (!name) throw new Error(\"empty name\");\n const id = crypto.randomUUID();\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n const createdAt = new Date().toISOString();\n await sqlite.execute({\n sql: \"insert into people (id, name, token, created_at) values (?, ?, ?, ?)\",\n args: [id, name, token, createdAt],\n });\n return { id, name, token, createdAt };\n}\n\nasync function deletePerson(id: string) {\n await sqlite.execute({ sql: \"delete from people where id = ?\", args: [id] });\n await sqlite.execute({\n sql: \"delete from responses where respondent_id = ? or subject_id = ?\",\n args: [id, id],\n });\n return { ok: true };\n}\n\nasync function saveExtraResponse(\n personId: string,\n qKey: string,\n answer: string,\n) {\n const updatedAt = new Date().toISOString();\n await sqlite.execute({\n sql: `insert into extra_responses (person_id, q_key, answer, updated_at)\n values (?, ?, ?, ?)\n on conflict(person_id, q_key) do update set\n answer = excluded.answer,\n updated_at = excluded.updated_at`,\n args: [personId, qKey, answer, updatedAt],\n });\n return { ok: true };\n}\n\nasync function getMyExtraResponses(personId: string) {\n const result = await sqlite.execute({\n sql: \"select q_key, answer from extra_responses where person_id = ?\",\n args: [personId],\n });\n const out: Record = {};\n for (const r of result.rows as any[]) out[r.q_key] = r.answer;\n return out;\n}\n\nasync function listExtraResponses(qKey: string) {\n const result = await sqlite.execute({\n sql:\n \"select answer from extra_responses where q_key = ? and answer is not null and trim(answer) != ''\",\n args: [qKey],\n });\n return (result.rows as any[]).map((r) => r.answer);\n}\n\nasync function resolveToken(token: string) {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"select id, name from people where token = ?\",\n args: [token],\n });\n if (!result.rows.length) return null;\n const r = result.rows[0] as any;\n return { id: r.id, name: r.name };\n}\n\nfunction mapResponseRow(r: any) {\n return {\n docId: r.doc_id,\n respondentId: r.respondent_id,\n subjectId: r.subject_id,\n isSelf: !!r.is_self,\n answers: JSON.parse(r.answers || \"{}\"),\n submitted: !!r.submitted,\n updatedAt: r.updated_at,\n };\n}\n\nasync function listResponses() {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses\",\n args: [],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function listMyResponses(respondentId: string) {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses where respondent_id = ?\",\n args: [respondentId],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function saveResponse(body: any) {\n if (!body || !body.respondentId || !body.subjectId) {\n throw new Error(\"invalid response\");\n }\n const asPerson = await resolveToken(body.token || \"\");\n if (!asPerson || asPerson.id !== body.respondentId) {\n throw new Error(\"not authorized for this identity\");\n }\n const docId = body.respondentId + \"__\" + body.subjectId;\n const updatedAt = new Date().toISOString();\n const record = {\n docId,\n respondentId: body.respondentId,\n subjectId: body.subjectId,\n isSelf: !!body.isSelf,\n answers: body.answers || {},\n submitted: !!body.submitted,\n updatedAt,\n };\n await sqlite.execute({\n sql:\n `insert into responses (doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at)\n values (?, ?, ?, ?, ?, ?, ?)\n on conflict(doc_id) do update set\n is_self = excluded.is_self,\n answers = excluded.answers,\n submitted = excluded.submitted,\n updated_at = excluded.updated_at`,\n args: [\n docId,\n record.respondentId,\n record.subjectId,\n record.isSelf ? 1 : 0,\n JSON.stringify(record.answers),\n record.submitted ? 1 : 0,\n updatedAt,\n ],\n });\n return { ok: true, docId };\n}\n\nexport default async function (req: Request): Promise {\n await ensureTables();\n const url = new URL(req.url);\n\n try {\n if (url.pathname === \"/api/people\" && req.method === \"GET\") {\n return jsonResponse(await listPeople());\n }\n if (url.pathname === \"/api/resolve\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(person);\n }\n if (url.pathname === \"/api/my-responses\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await listMyResponses(person.id));\n }\n if (url.pathname === \"/api/responses\" && req.method === \"POST\") {\n const body = await req.json();\n return jsonResponse(await saveResponse(body));\n }\n if (url.pathname === \"/api/my-extra\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await getMyExtraResponses(person.id));\n }\n if (url.pathname === \"/api/extra\" && req.method === \"POST\") {\n const body = await req.json();\n const person = await resolveToken(body.token || \"\");\n if (!person || person.id !== body.personId) {\n return jsonResponse({ error: \"not authorized for this identity\" }, 403);\n }\n return jsonResponse(\n await saveExtraResponse(person.id, body.qKey, body.answer || \"\"),\n );\n }\n if (url.pathname === \"/api/admin/people\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n if (req.method === \"GET\") {\n return jsonResponse(await adminListPeople(url.origin));\n }\n if (req.method === \"POST\") {\n const body = await req.json();\n const person = await addPerson(body.name);\n return jsonResponse({\n ...person,\n link: url.origin + \"/?u=\" + person.token,\n });\n }\n if (req.method === \"DELETE\") {\n const id = url.searchParams.get(\"id\") || \"\";\n return jsonResponse(await deletePerson(id));\n }\n }\n if (url.pathname === \"/api/admin/responses\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n return jsonResponse(await listResponses());\n }\n if (url.pathname === \"/api/admin/extra\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n const qKey = url.searchParams.get(\"q\") || \"\";\n return jsonResponse(await listExtraResponses(qKey));\n }\n } catch (err: any) {\n return jsonResponse({ error: String((err && err.message) || err) }, 400);\n }\n\n return new Response(INDEX_HTML, {\n headers: { \"content-type\": \"text/html;charset=utf-8\" },\n });\n}\n\nconst INDEX_HTML = `\n\n\n\nRole Mirror\n\n\n\n\n\n\n\n

\n \n

\n\n\n\n\n`;","deleted",false,"label",[14],"8e102f10-948e-41c4-b460-d6ee9d588d22",["D",1788964746973],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","2cc5bb30-4ac8-4dde-9ad8-1ed9fce1eb4c","pinnedFileId","88917af6-ac5c-11f1-bdf6-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0869a-1f9b-76ca-b36a-aabd64b43276","tursoName","8e102f10948e41c4b460d6ee9d588d22","tursoHostname","8e102f10948e41c4b460d6ee9d588d22-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789485645684],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":102},"org",{"_9":10,"_99":100,"_101":102,"_55":56,"_103":104,"_105":42},"branch",{"_35":89,"_11":90,"_22":28,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",14,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Lukas Englert","avatar","https://lh3.googleusercontent.com/a/ACg8ocIpL4PzgJTY1qrqJS3agBxk9jBbYd4oUCTXcCQnrM-EaQClhg=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_140":141,"_142":143,"_144":145,"_146":42,"_147":42,"_148":42,"_149":32,"_150":-5,"_151":-7,"_152":-7,"_153":63,"_154":42,"_155":42,"_156":-5,"_157":42,"_158":42,"_159":42,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":90,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]