\n Thanks For Being at HR DevFest 2026!\n

Win Big at NorfolkJS

Drop your name and email for a chance to score one of our current raffle prizes.

\n\n

\n Current Prize Pool:\n

${sanitize(prize.name)}
No prizes configured yet.

\n\n \n

One entry per human. Must be present to win.

View Source

\n\n \n \n \n`;\n}\n\nfunction renderOdds() {\n return `\n\n \n \n \n Live Odds | NorfolkJS Raffle\n \n \n \n

Live Raffle Odds

Anonymous odds update in real time. Winners appear as they are drawn.

\n \n \n \n`;\n}\n\nfunction renderAdmin(entries: Entry[], winners: Winners, prizes: Prize[], key: string) {\n const prizeNameById = new Map(prizes.map((prize) => [prize.id, prize.name]));\n\n const winnerRows = prizes.map((prize) => {\n const winner = winners[prize.id];\n const hasWinner = Boolean(winner);\n\n return `\n \n ${sanitize(prize.name)}\n ${hasWinner ? sanitize(winner.entry.name) : \"Not drawn yet\"}\n ${hasWinner ? sanitize(winner.entry.email) : \"-\"}\n \n \n \n \n \n `;\n }).join(\"\");\n\n const prizeRows = prizes.map((prize) => `\n \n \n \n \n \n \n \n \n \n `).join(\"\");\n\n const submissionRows = [...entries].reverse().map((entry) => {\n const prizeSummary = formatEntryPrizeSummary(entry, prizeNameById, prizes);\n\n return `\n \n ${sanitize(entry.name)}\n ${sanitize(entry.email)}\n ${sanitize(entry.createdAt)}\n ${sanitize(prizeSummary) || \"-\"}\n \n `;\n }).join(\"\");\n\n const submissionCards = [...entries].reverse().map((entry) => {\n const prizeSummary = formatEntryPrizeSummary(entry, prizeNameById, prizes);\n\n return `\n

Name: ${sanitize(entry.name)}

Email: ${sanitize(entry.email)}

Submitted: ${sanitize(entry.createdAt)}

Prizes: ${sanitize(prizeSummary) || \"-\"}

\n `;\n }).join(\"\");\n\n return `\n\n \n \n \n Manage | NorfolkJS Raffle\n \n \n \n

Prize Pool Management

Total entries: ${entries.length}

Back to Admin Home

\n \n

\n\n

Winners

\n \n \n \n \n \n \n \n \n \n \n ${winnerRows || ''}\n \n

Prize	Winner Name	Winner Email	Action
No prizes configured yet.

\n\n

All Submissions

\n \n \n \n \n \n \n \n \n \n \n ${submissionRows || ''}\n \n

Name	Email	Submitted At (UTC)	Entered Prizes
No submissions yet.

\n ${submissionCards || '

No submissions yet.

'}\n

\n\n

Prize Pool

\n \n

\n \n \n \n \n \n \n \n \n ${prizeRows || ''}\n \n

Prize Name	Actions
No prizes configured yet.

\n\n

Admin key is provided via ?key=.... Keep this URL private.

View Source

\n \n \n \n`;\n}\n\nfunction renderAdminHome(entries: Entry[], winners: Winners, prizes: Prize[], key: string) {\n const prizeNameById = new Map(prizes.map((prize) => [prize.id, prize.name]));\n\n const winnerRows = prizes.map((prize) => {\n const winner = winners[prize.id];\n const hasWinner = Boolean(winner);\n\n return `\n \n ${sanitize(prize.name)}\n ${hasWinner ? sanitize(winner.entry.name) : \"Not drawn yet\"}\n ${hasWinner ? sanitize(winner.entry.email) : \"-\"}\n \n \n \n \n \n `;\n }).join(\"\");\n\n const submissionRows = [...entries].reverse().map((entry) => {\n const prizeSummary = formatEntryPrizeSummary(entry, prizeNameById, prizes);\n\n return `\n \n ${sanitize(entry.name)}\n ${sanitize(entry.email)}\n ${sanitize(entry.createdAt)}\n ${sanitize(prizeSummary) || \"-\"}\n \n `;\n }).join(\"\");\n\n const submissionCards = [...entries].reverse().map((entry) => {\n const prizeSummary = formatEntryPrizeSummary(entry, prizeNameById, prizes);\n\n return `\n

Name: ${sanitize(entry.name)}

Email: ${sanitize(entry.email)}

Submitted: ${sanitize(entry.createdAt)}

Prizes: ${sanitize(prizeSummary) || \"-\"}

\n `;\n }).join(\"\");\n\n return `\n\n \n \n \n Admin | NorfolkJS Raffle\n \n \n \n

NorfolkJS Raffle Admin

Total entries: ${entries.length}

Manage Prize Pool + Detailed Data

\n \n

\n\n

Winners

\n \n \n \n \n \n \n \n \n \n \n ${winnerRows || ''}\n \n

Prize	Winner Name	Winner Email	Action
No prizes configured yet.

\n\n

All Submissions

\n \n \n \n \n \n \n \n \n \n \n ${submissionRows || ''}\n \n

Name	Email	Submitted At (UTC)	Entered Prizes
No submissions yet.

\n ${submissionCards || '

No submissions yet.

'}\n

\n\n

Admin key is provided via ?key=.... Keep this URL private.

View Source

\n \n \n \n`;\n}\n\n// ----------------------------\n// HTTP handlers (business logic)\n// ----------------------------\nasync function handleCreateEntry(req: Request) {\n const prizes = await readPrizes();\n\n let body: { name?: string; email?: string; prizeTickets?: unknown; prizeIds?: unknown };\n\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const name = String(body.name ?? \"\").trim();\n const email = normalizeEmail(String(body.email ?? \"\"));\n const ticketCap = Math.max(prizes.length, 1);\n\n let prizeTickets = normalizePrizeTickets(body.prizeTickets, prizes);\n if (!Object.keys(prizeTickets).length && Array.isArray(body.prizeIds)) {\n prizeTickets = prizeTicketsFromPrizeIds(normalizePrizeIds(body.prizeIds, prizes));\n }\n\n const totalTickets = totalPrizeTickets(prizeTickets);\n\n if (!name || !email) {\n return json({ error: \"Name and email are required.\" }, 400);\n }\n if (name.length > 80 || email.length > 140) {\n return json({ error: \"Input exceeds max length.\" }, 400);\n }\n if (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email)) {\n return json({ error: \"Email format is invalid.\" }, 400);\n }\n if (!prizes.length) {\n return json({ error: \"No prizes are configured right now.\" }, 409);\n }\n if (totalTickets !== ticketCap) {\n return json({ error: `You must allocate all ${ticketCap} tickets.` }, 400);\n }\n\n const entries = await listEntries(prizes);\n const duplicate = entries.find((entry) => normalizeEmail(entry.email) === email);\n if (duplicate) {\n return json({ error: \"That email is already entered.\" }, 409);\n }\n\n const entry = await addEntry(name, email, prizeTickets, prizes);\n return json({ ok: true, entryId: entry.id }, 201);\n}\n\nasync function handleDrawWinner(req: Request, url: URL) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n const prizes = await readPrizes();\n const prizeById = new Map(prizes.map((prize) => [prize.id, prize]));\n\n let body: { prizeId?: string };\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const prizeId = String(body.prizeId ?? \"\").trim();\n const prize = prizeById.get(prizeId);\n\n if (!prize) {\n return json({ error: \"Invalid prize ID.\" }, 400);\n }\n\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n\n if (winners[prizeId]) {\n return json({ error: \"Winner already selected for this prize.\" }, 409);\n }\n\n const eligible = buildEligibleCandidates(entries, winners, prizeId);\n\n if (!eligible.length) {\n return json({ error: \"No eligible entries left to draw for this prize.\" }, 409);\n }\n\n const winnerEntry = pickWeightedWinner(eligible);\n\n winners[prizeId] = {\n prizeId,\n prize: prize.name,\n entry: winnerEntry,\n announcedAt: new Date().toISOString(),\n excludedEntryIds: [],\n };\n\n await saveWinners(winners);\n\n return json({\n ok: true,\n prize: prize.name,\n winner: {\n name: winnerEntry.name,\n email: winnerEntry.email,\n },\n });\n}\n\nasync function handleRedrawWinner(req: Request, url: URL) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n const prizes = await readPrizes();\n const prizeById = new Map(prizes.map((prize) => [prize.id, prize]));\n\n let body: { prizeId?: string };\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const prizeId = String(body.prizeId ?? \"\").trim();\n const prize = prizeById.get(prizeId);\n if (!prize) {\n return json({ error: \"Invalid prize ID.\" }, 400);\n }\n\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n const previousWinner = winners[prizeId];\n\n if (!previousWinner) {\n return json({ error: \"No winner exists yet for this prize.\" }, 409);\n }\n\n const winnersForEligibility: Winners = { ...winners };\n delete winnersForEligibility[prizeId];\n\n const excludedEntryIds = Array.from(new Set([\n ...(previousWinner.excludedEntryIds ?? []),\n previousWinner.entry.id,\n ]));\n\n const eligible = buildEligibleCandidates(entries, winnersForEligibility, prizeId, excludedEntryIds);\n if (!eligible.length) {\n return json({ error: \"No alternate eligible entries left for redraw.\" }, 409);\n }\n\n const winnerEntry = pickWeightedWinner(eligible);\n winnersForEligibility[prizeId] = {\n prizeId,\n prize: prize.name,\n entry: winnerEntry,\n announcedAt: new Date().toISOString(),\n excludedEntryIds,\n };\n\n await saveWinners(winnersForEligibility);\n\n return json({\n ok: true,\n prize: prize.name,\n previousWinner: {\n name: previousWinner.entry.name,\n email: previousWinner.entry.email,\n },\n winner: {\n name: winnerEntry.name,\n email: winnerEntry.email,\n },\n });\n}\n\nasync function handleOddsState() {\n const prizes = await readPrizes();\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n return json(buildOddsState(prizes, entries, winners));\n}\n\nasync function handleResetRaffle(url: URL) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n await writeEntries([]);\n await saveWinners({});\n\n return json({ ok: true });\n}\n\nasync function handleAddPrize(req: Request, url: URL) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n let body: { name?: string };\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const name = normalizePrizeName(body.name);\n if (!name) {\n return json({ error: \"Prize name is required.\" }, 400);\n }\n if (name.length > 80) {\n return json({ error: \"Prize name exceeds max length.\" }, 400);\n }\n\n const prizes = await readPrizes();\n const next: Prize[] = [...prizes, { id: createPrizeId(), name }];\n await writePrizes(next);\n\n return json({ ok: true, prizes: next }, 201);\n}\n\nasync function handleRenamePrize(req: Request, url: URL, prizeId: string) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n let body: { name?: string };\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const name = normalizePrizeName(body.name);\n if (!name) {\n return json({ error: \"Prize name is required.\" }, 400);\n }\n if (name.length > 80) {\n return json({ error: \"Prize name exceeds max length.\" }, 400);\n }\n\n const prizes = await readPrizes();\n const exists = prizes.some((prize) => prize.id === prizeId);\n if (!exists) {\n return json({ error: \"Prize not found.\" }, 404);\n }\n\n const updated = prizes.map((prize) => prize.id === prizeId ? { ...prize, name } : prize);\n await writePrizes(updated);\n\n const winners = await readWinners(updated);\n if (winners[prizeId]) {\n winners[prizeId].prize = name;\n await saveWinners(winners);\n }\n\n return json({ ok: true, prizes: updated });\n}\n\nasync function handleRemovePrize(url: URL, prizeId: string) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n const prizes = await readPrizes();\n const exists = prizes.some((prize) => prize.id === prizeId);\n if (!exists) {\n return json({ error: \"Prize not found.\" }, 404);\n }\n\n const updatedPrizes = prizes.filter((prize) => prize.id !== prizeId);\n await writePrizes(updatedPrizes);\n\n // Prune entry selections and winner records for deleted prize IDs.\n const entries = await readEntries(updatedPrizes);\n await writeEntries(entries);\n\n const winners = await readWinners(updatedPrizes);\n await saveWinners(winners);\n\n return json({ ok: true, prizes: updatedPrizes });\n}\n\n// ----------------------------\n// Routing\n// ----------------------------\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, _c) => {\n throw err;\n});\n\napp.get(\"/\", async (c) => {\n const prizes = await readPrizes();\n return c.html(renderHome(prizes));\n});\n\napp.get(\"/odds\", async (c) => {\n return c.html(renderOddsPomoSSE());\n});\n\napp.post(\"/api/entries\", async (c) => {\n return await handleCreateEntry(c.req.raw);\n});\n\napp.get(\"/api/odds\", async () => {\n return await handleOddsState();\n});\n\napp.get(\"/api/odds/stream\", async (c) => {\n return await handleOddsStream(c.req.raw);\n});\n\napp.get(\"/admin\", async (c) => {\n const url = new URL(c.req.url);\n if (!ensureAdmin(url)) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n\n const prizes = await readPrizes();\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n return c.html(renderAdminHome(entries, winners, prizes, url.searchParams.get(\"key\") ?? \"\"));\n});\n\napp.get(\"/admin/manage\", async (c) => {\n const url = new URL(c.req.url);\n if (!ensureAdmin(url)) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n\n const prizes = await readPrizes();\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n return c.html(renderAdmin(entries, winners, prizes, url.searchParams.get(\"key\") ?? \"\"));\n});\n\napp.get(\"/api/admin/state\", async (c) => {\n const url = new URL(c.req.url);\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n const prizes = await readPrizes();\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n return json({ entriesCount: entries.length, winners, prizes });\n});\n\napp.post(\"/api/admin/draw\", async (c) => {\n return await handleDrawWinner(c.req.raw, new URL(c.req.url));\n});\n\napp.post(\"/api/admin/redraw\", async (c) => {\n return await handleRedrawWinner(c.req.raw, new URL(c.req.url));\n});\n\napp.post(\"/api/admin/reset\", async (c) => {\n return await handleResetRaffle(new URL(c.req.url));\n});\n\napp.post(\"/api/admin/prizes\", async (c) => {\n return await handleAddPrize(c.req.raw, new URL(c.req.url));\n});\n\napp.patch(\"/api/admin/prizes/:prizeId\", async (c) => {\n return await handleRenamePrize(c.req.raw, new URL(c.req.url), c.req.param(\"prizeId\"));\n});\n\napp.delete(\"/api/admin/prizes/:prizeId\", async (c) => {\n return await handleRemovePrize(new URL(c.req.url), c.req.param(\"prizeId\"));\n});\n\napp.notFound(() => new Response(\"Not found\", { status: 404 }));\n\nexport default app.fetch;\n\nfunction renderOddsV2() {\n return `\n\n \n \n \n Live Odds | NorfolkJS Raffle\n \n \n \n

Live Raffle Odds

Anonymous odds update in real time. Winners appear as they are drawn.

\n \n \n \n`;\n}\n\nfunction renderOddsPomo() {\n return `\n\n \n \n \n Live Odds | NorfolkJS Raffle\n \n \n \n \n \n \n

Live Raffle Odds

Anonymous odds update in real time. Winners appear as they are drawn.

\n \n \n \n`;\n}\n\nfunction renderOddsPomoSSE() {\n return `\n\n \n \n \n Live Odds | NorfolkJS Raffle\n \n \n \n \n \n \n

Live Raffle Odds

Anonymous odds update in real time. Winners appear as they are drawn.

\n \n \n \n`;\n}\n\nasync function handleOddsStream(req: Request) {\n const encoder = new TextEncoder();\n\n const stream = new ReadableStream({\n start(controller) {\n let closed = false;\n let intervalId: number | undefined;\n\n const close = () => {\n if (closed) {\n return;\n }\n closed = true;\n if (intervalId !== undefined) {\n clearInterval(intervalId);\n }\n try {\n controller.close();\n } catch {\n // Stream may already be closed.\n }\n };\n\n const publish = async () => {\n if (closed) {\n return;\n }\n\n const prizes = await readPrizes();\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n const payload = JSON.stringify(buildOddsState(prizes, entries, winners));\n controller.enqueue(encoder.encode(`event: odds\\ndata: ${payload}\\n\\n`));\n };\n\n publish().catch(() => close());\n intervalId = setInterval(() => {\n publish().catch(() => close());\n }, 2000) as unknown as number;\n\n req.signal.addEventListener(\"abort\", () => close());\n },\n cancel() {\n // No-op: handled via abort/close lifecycle.\n },\n });\n\n return new Response(stream, {\n headers: {\n \"content-type\": \"text/event-stream; charset=utf-8\",\n \"cache-control\": \"no-cache, no-transform\",\n connection: \"keep-alive\",\n },\n });\n}\n","deleted","label",[100],"permalink","https://www.val.town/x/pchinjr/devfest26-raffle/code/main.http.ts","extension","actionData","errors"]