[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_104":105,"_106":107},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","TPM","name","MITAA26","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":12,"_53":-5,"_54":55,"_56":25,"_57":32,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/TPM/MITAA26/code/main.ts","extension","id","5d909137-a9f5-4d6f-b994-32c9cf642e66","fileId","25fb0268-a789-11f1-b239-1607ee4eb77e","parentId","branchId","045bc046-6a1b-4bcb-9dcf-b2528319506d","branchVersion",10,"latest",true,"createdAt",["D",1788436199442],"version",9,"fileType","http","content","/**\n * MITAA — anonymous Q&A for one event, with multiple panel sessions.\n * One Val Town HTTP val. Participants submit; only the moderator reads.\n *\n * Setup:\n * 1. Paste into the val's main.ts (select all first — leave nothing behind).\n * 2. Env vars -> ADMIN_KEY = \n * 3. Participants: .val.run/ <- one QR for the whole event\n * You: .val.run/admin?k=\n *\n * Edit PANELS below to your real session names.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst PANELS = [\"Panel 1\", \"Panel 2\", \"Panel 3\"];\n\nconst ADMIN_KEY = Deno.env.get(\"ADMIN_KEY\") ?? \"\";\nconst MAX_PER_PERSON = 5; // per browser token, per panel\nconst MIN_SECONDS_BETWEEN = 8;\nconst MAX_CHARS = 500;\n\nlet ready: Promise | null = null;\nfunction init() {\n ready ??= (async () => {\n await sqlite.batch([\n `create table if not exists questions (\n id integer primary key autoincrement,\n body text not null,\n name text,\n token text not null,\n status text not null default 'new',\n created_at integer not null\n )`,\n `create index if not exists idx_q_token on questions(token)`,\n `create table if not exists settings (k text primary key, v text not null)`,\n ]);\n // added after v1 shipped; sqlite has no \"add column if not exists\"\n try {\n await sqlite.execute(\n `alter table questions add column panel integer not null default 0`,\n );\n } catch { /* already there */ }\n })();\n return ready;\n}\n\nconst json = (o: unknown, s = 200) =>\n new Response(JSON.stringify(o), {\n status: s,\n headers: { \"content-type\": \"application/json\" },\n });\nconst html = (s: string) =>\n new Response(s, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n\nasync function activePanel(): Promise {\n const r = await sqlite.execute({\n sql: `select v from settings where k = 'active_panel'`,\n args: [],\n });\n const n = r.rows.length ? Number((r.rows[0] as any).v) : 0;\n return Number.isInteger(n) && n >= 0 && n < PANELS.length ? n : 0;\n}\n\nfunction authed(url: URL) {\n const k = url.searchParams.get(\"k\") ?? \"\";\n if (!ADMIN_KEY || k.length !== ADMIN_KEY.length) return false;\n let diff = 0;\n for (let i = 0; i < k.length; i++) {\n diff |= k.charCodeAt(i) ^ ADMIN_KEY.charCodeAt(i);\n }\n return diff === 0;\n}\n\nexport default async function (req: Request): Promise {\n await init();\n const url = new URL(req.url);\n const p = url.pathname;\n\n // ---------- participant ----------\n if (p === \"/\" && req.method === \"GET\") {\n const cur = await activePanel();\n return html(\n ASK_PAGE\n .replaceAll(\"__PANEL_NAME__\", esc(PANELS[cur]))\n .replaceAll(\"__PANEL_IDX__\", String(cur)),\n );\n }\n\n // lets an open phone notice the panel changed without a reload\n if (p === \"/active\" && req.method === \"GET\") {\n const cur = await activePanel();\n return json({ index: cur, name: PANELS[cur] });\n }\n\n if (p === \"/ask\" && req.method === \"POST\") {\n const b = await req.json().catch(() => null) as {\n body?: string;\n name?: string;\n token?: string;\n } | null;\n if (!b) return json({ error: \"Bad request.\" }, 400);\n\n const body = (b.body ?? \"\").trim();\n const name = (b.name ?? \"\").trim().slice(0, 60) || null;\n const token = (b.token ?? \"\").trim().slice(0, 64);\n\n if (!token) return json({ error: \"Bad request.\" }, 400);\n if (body.length < 3) return json({ error: \"That looks a bit short.\" }, 400);\n if (body.length > MAX_CHARS) {\n return json({ error: \"Please keep it under 500 characters.\" }, 400);\n }\n\n // the panel comes from the SERVER, never the client — a stale phone can't mis-tag\n const panel = await activePanel();\n\n const mine = await sqlite.execute({\n sql: `select count(*) as n, coalesce(max(created_at),0) as last\n from questions where token = ? and panel = ?`,\n args: [token, panel],\n });\n const row = mine.rows[0] as any;\n const now = Date.now();\n if (Number(row.n) >= MAX_PER_PERSON) {\n return json({\n error: \"You've reached 5 questions for this session. Thank you!\",\n }, 429);\n }\n if (now - Number(row.last) < MIN_SECONDS_BETWEEN * 1000) {\n return json({ error: \"One moment before the next one.\" }, 429);\n }\n\n await sqlite.execute({\n sql:\n `insert into questions (body, name, token, created_at, panel) values (?, ?, ?, ?, ?)`,\n args: [body, name, token, now, panel],\n });\n return json({ ok: true, panel: PANELS[panel] });\n }\n\n // a person may read back ONLY their own submissions\n if (p === \"/mine\" && req.method === \"GET\") {\n const token = (url.searchParams.get(\"token\") ?? \"\").slice(0, 64);\n if (!token) return json({ items: [] });\n const r = await sqlite.execute({\n sql:\n `select body, created_at, panel from questions where token = ? order by id desc`,\n args: [token],\n });\n return json({\n items: (r.rows as any[]).map((q) => ({\n ...q,\n panelName: PANELS[Number(q.panel)] ?? \"?\",\n })),\n });\n }\n\n // ---------- admin ----------\n if (p === \"/admin\" && req.method === \"GET\") {\n if (!authed(url)) return new Response(\"Not found\", { status: 404 });\n return html(ADMIN_PAGE.replace(\"__PANELS__\", JSON.stringify(PANELS)));\n }\n\n if (p === \"/admin/data\" && req.method === \"GET\") {\n if (!authed(url)) return json({ error: \"no\" }, 403);\n const r = await sqlite.execute(\n `select id, body, name, status, created_at, panel from questions order by id desc`,\n );\n return json({ items: r.rows, active: await activePanel() });\n }\n\n if (p === \"/admin/mark\" && req.method === \"POST\") {\n if (!authed(url)) return json({ error: \"no\" }, 403);\n const b = await req.json().catch(() => null) as {\n id?: number;\n status?: string;\n } | null;\n if (!b?.id || ![\"new\", \"answered\", \"hidden\"].includes(b.status ?? \"\")) {\n return json({ error: \"bad\" }, 400);\n }\n await sqlite.execute({\n sql: `update questions set status = ? where id = ?`,\n args: [b.status, b.id],\n });\n return json({ ok: true });\n }\n\n // move one question to a different panel\n if (p === \"/admin/retag\" && req.method === \"POST\") {\n if (!authed(url)) return json({ error: \"no\" }, 403);\n const b = await req.json().catch(() => null) as {\n id?: number;\n panel?: number;\n } | null;\n if (\n !b?.id || !Number.isInteger(b.panel) || b.panel! < 0 ||\n b.panel! >= PANELS.length\n ) {\n return json({ error: \"bad\" }, 400);\n }\n await sqlite.execute({\n sql: `update questions set panel = ? where id = ?`,\n args: [b.panel, b.id],\n });\n return json({ ok: true });\n }\n\n // switch which panel new questions get tagged with\n if (p === \"/admin/active\" && req.method === \"POST\") {\n if (!authed(url)) return json({ error: \"no\" }, 403);\n const b = await req.json().catch(() => null) as { panel?: number } | null;\n if (\n !Number.isInteger(b?.panel) || b!.panel! < 0 || b!.panel! >= PANELS.length\n ) {\n return json({ error: \"bad\" }, 400);\n }\n await sqlite.execute({\n sql: `insert into settings (k, v) values ('active_panel', ?)\n on conflict(k) do update set v = excluded.v`,\n args: [String(b!.panel)],\n });\n return json({ ok: true });\n }\n\n if (p === \"/admin/export\" && req.method === \"GET\") {\n if (!authed(url)) return new Response(\"Not found\", { status: 404 });\n const r = await sqlite.execute(\n `select id, created_at, panel, name, status, body from questions order by panel, id`,\n );\n const q = (v: unknown) => '\"' + String(v ?? \"\").replaceAll('\"', '\"\"') + '\"';\n const csv = [\"id,time,panel,name,status,question\"]\n .concat(\n (r.rows as any[]).map((x) =>\n [\n x.id,\n new Date(Number(x.created_at)).toISOString(),\n PANELS[Number(x.panel)] ?? \"?\",\n x.name,\n x.status,\n x.body,\n ].map(q).join(\",\")\n ),\n ).join(\"\\n\");\n return new Response(csv, {\n headers: {\n \"content-type\": \"text/csv; charset=utf-8\",\n \"content-disposition\": 'attachment; filename=\"questions.csv\"',\n },\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}\n\nfunction esc(s: string) {\n return s.replace(\n /[<>&\"]/g,\n (\n c,\n ) => ({\n \"<\": \"<\",\n \">\": \">\",\n \"&\": \"&\",\n '\"': \""\",\n }[c] as string),\n );\n}\n\n/* ------------------------------------------------------------------ */\n/* Participant page */\n/* ------------------------------------------------------------------ */\nconst ASK_PAGE = `\n\nAsk a question\n\n

Ask a question

Only the moderator sees this. Other people in the room cannot.

\n Your question\n \n

0 / 500

\n Your name (optional)\n \n

\n \n

Your question goes to the session named above. Your name is optional and\n never shown to other participants. Questions are deleted after the event.

\n\n \n

\n`;\n\n/* ------------------------------------------------------------------ */\n/* Moderator page */\n/* ------------------------------------------------------------------ */\nconst ADMIN_PAGE = `\n\nModerator\n\n

Moderator

\n 0 questions\n \n \n

\n \n \n \n \n

\n Export CSV\n

\n Taking questions for\n

\n \n Showing\n

\n`;","deleted",false,"label",[14],"8cd25f61-a13e-4827-a261-6f805c9b9483",["D",1788434291432],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","30738f3a-c3ec-41e1-82a2-11d17e8d7690","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a066fb-791e-721f-8efe-297b4810c575","tursoName","8cd25f61a13e4827a2616f805c9b9483","tursoHostname","8cd25f61a13e4827a2616f805c9b9483-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789476648181],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_103":99},"org",{"_9":10,"_96":97,"_98":99,"_54":55,"_100":101,"_102":42},"branch",{"_35":30,"_11":87,"_22":28,"_88":45,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":12,"_95":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","puimun-teoh","avatar","https://avatars.githubusercontent.com/u/97607755?v=4","tier","free","canRestrictVals","profileImageUrl","ctx",{"_80":-5,"_137":138,"_139":140,"_141":142,"_143":42,"_144":42,"_145":42,"_146":32,"_147":-5,"_148":-7,"_149":-7,"_150":61,"_151":42,"_152":42,"_153":-5,"_154":42,"_155":42,"_156":42,"_157":-5},"ENV",{"_108":109,"_110":111,"_112":87,"_113":114,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Ask a question

Question received