${body}

`,\n { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } },\n );\n}\n\n// ── DB helpers ──────────────────────────────────────────────────────\nasync function getSession(code: string) {\n const r =\n (await sqlite.execute(`SELECT * FROM bv_sessions${V} WHERE code=?`, [code]))\n .rows[0];\n if (!r) return null;\n return {\n code: r.code ?? r[0],\n title: r.title ?? r[1],\n admin_token: r.admin_token ?? r[2],\n current_q: r.current_q ?? r[3],\n finished: r.finished ?? r[4],\n };\n}\nasync function getQuestions(code: string) {\n return (await sqlite.execute(\n `SELECT * FROM bv_questions${V} WHERE session_code=? ORDER BY sort_order`,\n [code],\n )).rows\n .map((r: any) => ({\n id: r.id ?? r[0],\n session_code: r.session_code ?? r[1],\n sort_order: r.sort_order ?? r[2],\n question_text: r.question_text ?? r[3],\n phase: r.phase ?? r[4],\n }));\n}\nasync function getOptions(qid: number) {\n return (await sqlite.execute(\n `SELECT option_text FROM bv_options${V} WHERE question_id=?`,\n [qid],\n )).rows.map((r: any) => r.option_text ?? r[0]);\n}\nasync function getVotes(qid: number) {\n return (await sqlite.execute(\n `SELECT voter_ip, vote FROM bv_votes${V} WHERE question_id=?`,\n [qid],\n )).rows.map((r: any) => ({ ip: r.voter_ip ?? r[0], vote: r.vote ?? r[1] }));\n}\n\nfunction adminUrl(code: string, token: string) {\n return `/room/${code}/admin?token=${token}`;\n}\nfunction act(code: string, action: string, token: string) {\n return `/room/${code}/admin/${action}?token=${token}`;\n}\n\nfunction votePills(votes: { ip: string; vote: string }[], myIp?: string) {\n if (!votes.length) return 'No votes';\n return votes.map((v) => {\n const youBadge = myIp && v.ip === myIp\n ? 'you'\n : \"\";\n return `

${esc(v.vote)}${youBadge}

`;\n }).join(\"\");\n}\n\nfunction qListHtml(questions: any[], currentIdx: number) {\n return questions.map((q, i) => {\n const done = q.phase === \"revealed\";\n const active = i === currentIdx;\n const cls = active ? \"qi qactive\" : done ? \"qi qdone\" : \"qi qwait\";\n const icon = active ? \"►\" : done ? \"✓\" : `${i + 1}`;\n return `

${icon}${\n esc(q.question_text)\n }

`;\n }).join(\"\");\n}\n\n// ── App ─────────────────────────────────────────────────────────────\nconst app = new Hono();\n\n// ── Landing ─────────────────────────────────────────────────────────\napp.get(\"/\", (c) =>\n page(\n \"Blind Vote\",\n `\n

🗳️

Blind Vote

Anonymous group votes with simultaneous reveals

Have a room code?

\n \n

No signup. No names. Fully anonymous. One vote per person per question.

\n`,\n ));\n\n// ── Create form ─────────────────────────────────────────────────────\napp.get(\"/create\", (c) =>\n page(\n \"Create Session\",\n `\n

Create a Session

Add your questions below

\n \n \n`,\n ));\n\n// ── Create POST ─────────────────────────────────────────────────────\napp.post(\"/create\", async (c) => {\n const form = await c.req.formData();\n const title = (form.get(\"title\") as string || \"\").trim();\n if (!title) {\n return page(\n \"Error\",\n `

Title required.

← Back`,\n );\n }\n\n const questions: { text: string; options: string[] }[] = [];\n for (let i = 0; i < 100; i++) {\n const text = (form.get(`q_${i}_text`) as string || \"\").trim();\n if (!text) continue;\n const opts = (form.get(`q_${i}_options`) as string || \"\").split(\"\\n\").map(\n (l) => l.trim()\n ).filter(Boolean);\n questions.push({ text, options: opts });\n }\n if (!questions.length) {\n return page(\n \"Error\",\n `

Add at least one question.

← Back`,\n );\n }\n\n const code = rng(6), token = rng(24);\n await sqlite.execute(\n `INSERT INTO bv_sessions${V} (code,title,admin_token,current_q,finished) VALUES(?,?,?,0,0)`,\n [code, title, token],\n );\n\n for (let i = 0; i < questions.length; i++) {\n const res = await sqlite.execute(\n `INSERT INTO bv_questions${V} (session_code,sort_order,question_text,phase) VALUES(?,?,?,'voting')`,\n [code, i, questions[i].text],\n );\n const qid = res.lastInsertRowid;\n for (const opt of questions[i].options) {\n await sqlite.execute(\n `INSERT INTO bv_options${V} (question_id,option_text) VALUES(?,?)`,\n [qid, opt],\n );\n }\n }\n\n const base = new URL(c.req.url).origin;\n return page(\n \"Session Created\",\n `\n

✅

Session Created

${\n esc(title)\n } — ${questions.length} question${\n questions.length > 1 ? \"s\" : \"\"\n }

\n Room Code

${code}

\n Voter link\n

\n \n \n

\n 🔑 Admin link (save this!)\n

\n \n \n

⚠️ Don't share this link.

\n Go to Admin Dashboard →\n `,\n );\n});\n\n// ── Join ─────────────────────────────────────────────────────────────\napp.get(\"/join\", (c) => {\n const code = (c.req.query(\"code\") || \"\").trim().toUpperCase();\n return new Response(null, {\n status: 302,\n headers: { Location: code ? `/room/${code}` : \"/\" },\n });\n});\n\n// ── Voter page ──────────────────────────────────────────────────────\napp.get(\"/room/:code\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase();\n const s = await getSession(code);\n if (!s) {\n return page(\n \"Not Found\",\n `

Room ${\n esc(code)\n } not found.

← Home`,\n );\n }\n\n const qs = await getQuestions(code);\n const total = qs.length;\n const qi = s.current_q;\n const myIp = getIp(c);\n\n // ── Finished ──────────────────────────────────────────────────────\n if (s.finished) {\n let all = \"\";\n for (const q of qs) {\n const v = await getVotes(q.id);\n all += `

${\n esc(q.question_text)\n }

${\n votePills(v, myIp)\n }

`;\n }\n return page(\n \"Complete\",\n `\n

🏁

${\n esc(s.title)\n }

All questions complete

\n ${all}← Home\n `,\n );\n }\n\n const q = qs[qi];\n if (!q) return page(\"Error\", `

Session error.

`);\n const opts = await getOptions(q.id);\n const votes = await getVotes(q.id);\n const alreadyVoted = votes.some((v) => v.ip === myIp);\n\n // ── Revealed ──────────────────────────────────────────────────────\n if (q.phase === \"revealed\") {\n return page(\n \"Results\",\n `\n

${\n esc(s.title)\n }

Question ${qi + 1} of ${total}

\n ${esc(q.question_text)}\n Revealed\n

\n ${votePills(votes, myIp)}\n

Waiting for the admin to continue...

\n `,\n ``,\n );\n }\n\n // ── Voting ────────────────────────────────────────────────────────\n if (alreadyVoted) {\n return page(\n \"Waiting\",\n `\n

${\n esc(s.title)\n }

Question ${qi + 1} of ${total}

✓

\n ${esc(q.question_text)}\n

Your vote is locked in.

${votes.length} vote${\n votes.length !== 1 ? \"s\" : \"\"\n } so far

This page will update when results are revealed.

\n `,\n ``,\n );\n }\n\n let inputHtml: string;\n if (opts.length) {\n inputHtml =\n `Your vote`;\n } else {\n inputHtml =\n `Your vote`;\n }\n\n return page(\n `Vote: ${q.question_text}`,\n `\n

${\n esc(s.title)\n }

Question ${qi + 1} of ${total}

\n ${esc(q.question_text)}\n Voting\n

${votes.length} vote${\n votes.length !== 1 ? \"s\" : \"\"\n } so far

\n \n

Fully anonymous. One vote per person.

\n `,\n ``,\n );\n});\n\n// ── Submit vote ─────────────────────────────────────────────────────\napp.post(\"/room/:code/vote\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase();\n const form = await c.req.formData();\n const vote = (form.get(\"vote\") as string || \"\").trim();\n const ip = getIp(c);\n\n if (!vote) {\n return page(\n \"Error\",\n `

Vote is required.

← Back`,\n );\n }\n\n const s = await getSession(code);\n if (!s) return page(\"Error\", `

Room not found.

`);\n const qs = await getQuestions(code);\n const q = qs[s.current_q];\n if (!q || q.phase !== \"voting\") {\n return page(\n \"Error\",\n `

Voting is closed for this question.

← Back`,\n );\n }\n\n const dup =\n (await sqlite.execute(\n `SELECT id FROM bv_votes${V} WHERE question_id=? AND voter_ip=?`,\n [q.id, ip],\n )).rows;\n if (dup.length) {\n return page(\n \"Already Voted\",\n `

You've already voted on this question.

← Back`,\n );\n }\n\n await sqlite.execute(\n `INSERT INTO bv_votes${V} (question_id,voter_ip,vote) VALUES(?,?,?)`,\n [q.id, ip, vote],\n );\n\n return new Response(null, {\n status: 302,\n headers: { Location: `/room/${code}` },\n });\n});\n\n// ── Admin auth ──────────────────────────────────────────────────────\nasync function authAdmin(\n c: any,\n): Promise<{ s: any; token: string } | Response> {\n const code = c.req.param(\"code\").toUpperCase();\n const token = c.req.query(\"token\") || \"\";\n const s = await getSession(code);\n if (!s || token !== s.admin_token) {\n return page(\"Error\", `

Unauthorized.

`);\n }\n return { s, token };\n}\n\n// ── Admin page ──────────────────────────────────────────────────────\napp.get(\"/room/:code/admin\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase();\n const token = c.req.query(\"token\") || \"\";\n const s = await getSession(code);\n if (!s) {\n return page(\n \"Not Found\",\n `

Room not found.

← Home`,\n );\n }\n if (token !== s.admin_token) {\n return page(\"Unauthorized\", `

Invalid admin token.

`);\n }\n\n const qs = await getQuestions(code);\n const total = qs.length;\n const qi = s.current_q;\n const base = new URL(c.req.url).origin;\n const voterLink = `${base}/room/${code}`;\n const a = (action: string) => act(code, action, token);\n\n // ── Finished ──────────────────────────────────────────────────────\n if (s.finished) {\n let all = \"\";\n for (const q of qs) {\n const v = await getVotes(q.id);\n all += `

${\n esc(q.question_text)\n }

${votePills(v)}

`;\n }\n return page(\n \"Complete — Admin\",\n `\n

🏁

${\n esc(s.title)\n }

Session Complete — ${total} questions

\n ${all}\n

Admin Controls

\n \n

\n ← Create new session\n `,\n );\n }\n\n const q = qs[qi];\n const votes = await getVotes(q.id);\n const revealed = q.phase === \"revealed\";\n const isFirst = qi === 0;\n const isLast = qi === total - 1;\n const progress = Math.round(((qi + (revealed ? 1 : 0)) / total) * 100);\n\n // ── Status display ────────────────────────────────────────────────\n let statusHtml: string;\n if (revealed) {\n statusHtml = `\n

\n ${esc(q.question_text)}\n Revealed\n

\n ${votePills(votes)}`;\n } else {\n statusHtml = `\n

\n ${esc(q.question_text)}\n Voting open\n

${votes.length}

vote${\n votes.length !== 1 ? \"s\" : \"\"\n } received

`;\n }\n\n // ── Controls ──────────────────────────────────────────────────────\n let controls: string;\n if (revealed) {\n controls = `\n

Controls — Question ${\n qi + 1\n } of ${total} — Revealed

\n \n \n

`;\n } else {\n controls = `\n

Controls — Question ${\n qi + 1\n } of ${total} — Voting

\n \n

\n \n \n

\n `;\n }\n\n return page(\n \"Admin Dashboard\",\n `\n

${\n esc(s.title)\n }

Admin Dashboard

\n Voter link\n

\n \n \n

${code}

${qListHtml(qs, qi)}

${statusHtml}

${controls}

\n `,\n revealed ? \"\" : ``,\n );\n});\n\n// ── Admin actions ───────────────────────────────────────────────────\napp.post(\"/room/:code/admin/reveal\", async (c) => {\n const auth = await authAdmin(c);\n if (auth instanceof Response) return auth;\n const { s, token } = auth;\n const qs = await getQuestions(s.code);\n const q = qs[s.current_q];\n if (q?.phase === \"voting\") {\n await sqlite.execute(\n `UPDATE bv_questions${V} SET phase='revealed' WHERE id=?`,\n [q.id],\n );\n }\n return new Response(null, {\n status: 302,\n headers: { Location: adminUrl(s.code, token) },\n });\n});\n\napp.post(\"/room/:code/admin/unreveal\", async (c) => {\n const auth = await authAdmin(c);\n if (auth instanceof Response) return auth;\n const { s, token } = auth;\n const qs = await getQuestions(s.code);\n const q = qs[s.current_q];\n if (q?.phase === \"revealed\") {\n await sqlite.execute(\n `UPDATE bv_questions${V} SET phase='voting' WHERE id=?`,\n [q.id],\n );\n }\n return new Response(null, {\n status: 302,\n headers: { Location: adminUrl(s.code, token) },\n });\n});\n\napp.post(\"/room/:code/admin/clear\", async (c) => {\n const auth = await authAdmin(c);\n if (auth instanceof Response) return auth;\n const { s, token } = auth;\n const qs = await getQuestions(s.code);\n const q = qs[s.current_q];\n if (q) {\n await sqlite.execute(`DELETE FROM bv_votes${V} WHERE question_id=?`, [\n q.id,\n ]);\n await sqlite.execute(\n `UPDATE bv_questions${V} SET phase='voting' WHERE id=?`,\n [q.id],\n );\n }\n return new Response(null, {\n status: 302,\n headers: { Location: adminUrl(s.code, token) },\n });\n});\n\napp.post(\"/room/:code/admin/next\", async (c) => {\n const auth = await authAdmin(c);\n if (auth instanceof Response) return auth;\n const { s, token } = auth;\n const qs = await getQuestions(s.code);\n if (s.current_q + 1 < qs.length) {\n await sqlite.execute(\n `UPDATE bv_sessions${V} SET current_q=? WHERE code=?`,\n [s.current_q + 1, s.code],\n );\n }\n return new Response(null, {\n status: 302,\n headers: { Location: adminUrl(s.code, token) },\n });\n});\n\napp.post(\"/room/:code/admin/prev\", async (c) => {\n const auth = await authAdmin(c);\n if (auth instanceof Response) return auth;\n const { s, token } = auth;\n if (s.current_q > 0) {\n await sqlite.execute(\n `UPDATE bv_sessions${V} SET current_q=? WHERE code=?`,\n [s.current_q - 1, s.code],\n );\n }\n return new Response(null, {\n status: 302,\n headers: { Location: adminUrl(s.code, token) },\n });\n});\n\napp.post(\"/room/:code/admin/skip\", async (c) => {\n const auth = await authAdmin(c);\n if (auth instanceof Response) return auth;\n const { s, token } = auth;\n const qs = await getQuestions(s.code);\n if (s.current_q + 1 < qs.length) {\n await sqlite.execute(\n `UPDATE bv_sessions${V} SET current_q=? WHERE code=?`,\n [s.current_q + 1, s.code],\n );\n } else {\n await sqlite.execute(`UPDATE bv_sessions${V} SET finished=1 WHERE code=?`, [\n s.code,\n ]);\n }\n return new Response(null, {\n status: 302,\n headers: { Location: adminUrl(s.code, token) },\n });\n});\n\napp.post(\"/room/:code/admin/finish\", async (c) => {\n const auth = await authAdmin(c);\n if (auth instanceof Response) return auth;\n const { s, token } = auth;\n await sqlite.execute(`UPDATE bv_sessions${V} SET finished=1 WHERE code=?`, [\n s.code,\n ]);\n return new Response(null, {\n status: 302,\n headers: { Location: adminUrl(s.code, token) },\n });\n});\n\napp.post(\"/room/:code/admin/unfinish\", async (c) => {\n const auth = await authAdmin(c);\n if (auth instanceof Response) return auth;\n const { s, token } = auth;\n await sqlite.execute(`UPDATE bv_sessions${V} SET finished=0 WHERE code=?`, [\n s.code,\n ]);\n return new Response(null, {\n status: 302,\n headers: { Location: adminUrl(s.code, token) },\n });\n});\n\n// ── Status API ──────────────────────────────────────────────────────\napp.get(\"/api/room/:code/status\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase();\n const s = await getSession(code);\n if (!s) return c.json({ error: \"not found\" }, 404);\n const qs = await getQuestions(code);\n const q = qs[s.current_q];\n const votes = q ? await getVotes(q.id) : [];\n return c.json({\n phase: q?.phase || \"voting\",\n qi: s.current_q,\n total: qs.length,\n count: votes.length,\n finished: !!s.finished,\n });\n});\n\napp.notFound((c) =>\n page(\n \"404\",\n `

Page not found.

← Home`,\n )\n);\n\nexport default app.fetch;","deleted","label",[100],"permalink","https://www.val.town/x/clintr/untitled-9427/code/main.ts","extension","actionData","errors"]