DDRP Giveaways

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_214":215,"_216":217},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_161":-5,"_20":162,"_22":163,"_164":165,"_166":167,"_26":168,"_24":169,"_170":171,"_172":173,"_174":51,"_175":176,"_177":68,"_178":-5,"_179":-5,"_180":181},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":29,"_30":-5,"_31":32,"_33":34,"_35":-5},"handle","ASHxo","name","DDRP-Giveaways","branchName","main","version","path","index.html","project",{"_36":114,"_13":14,"_38":115,"_49":-5,"_116":51,"_52":53,"_117":53,"_118":119,"_120":-5,"_121":122,"_123":83,"_124":68,"_125":-5,"_126":-5,"_127":100,"_55":56,"_128":129,"_130":131,"_132":133,"_134":-5,"_135":136,"_137":136,"_138":139,"_140":139,"_141":139,"_142":136,"_143":136,"_144":145,"_146":147,"_148":149,"_50":51},"tree",[77,78,79,80],"file",{"_36":59,"_13":19,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":68,"_38":69,"_17":70,"_71":24,"_72":73,"_74":51,"_75":-5,"_18":76},"contents",[],"upstream",{"_36":37,"_38":39,"_40":41,"_13":16,"_42":43,"_17":44,"_45":-5,"_46":-5,"_47":48,"_49":-5,"_50":51,"_52":53,"_54":12,"_55":56,"_57":58},"pull","ahead",160,"behind",0,"envVars","id","271a7958-6cbf-438c-b7e8-9dd2d2d4a2bc","createdAt",["D",1785713332787],"updatedAt",["D",1785715285109],"projectId","fea1f135-2d3a-472a-a6ed-5fa4688670b5",12,"forkedBranchId","forkedBranchVersion","lockfileKey","1785715285416-esm.town_v_ASHxo_webhook-relay@12-main","deletedAt","isOwned",false,"privacy","public","userHandle","orgId","019fc4cd-f05d-7068-b194-b5dea919cc29","projectName","webhook-relay","bcfdb621-bdd1-4892-a8b3-898a732828fe","fileId","019fc4ef-d665-710f-acbe-8eccbafc9836","parentId","branchId","bf0f841f-6c64-4702-a3e9-9cf57962dc9d","branchVersion",146,"latest",true,["D",1785788399400],61,"fileType","content","\n\n\n \n \n DDRP Giveaways\n \n \n \n \n \n\n\n

\n \n \n

❦

\n\n \n

\n \n

Active Giveaways

\n \n

Loading giveaways…

\n\n \n

\n \n \n

\n\n

✦

\n\n

Submit Your Entry

\n Discord Connection *\n \n

Click \"Connect Discord\" to link your account and enter the giveaway.

\n ⚠️ Important: You must connect your Discord account.\n

\n Pick Your Numbers *\n

\n \n

\n\n \n

My Entries

\n \n

\n Discord Connection\n \n

\n \n

\n\n \n \n\n \n

📊 Owner Dashboard

\n \n \n

\n\n

\n \n \n

\n\n

Loading…

\n\n

Loading stats…

\n\n

\n 🔒 Owner Dashboard\n ·\n view source\n

\n\n \n \n\n \n

\n\n \n\n\n","deleted","label",[19],{"_36":105,"_13":106,"_60":107,"_62":-5,"_63":64,"_65":108,"_67":68,"_38":109,"_17":110,"_71":101,"_72":111,"_74":51,"_75":-5,"_89":112,"_18":113},{"_36":95,"_13":96,"_60":97,"_62":-5,"_63":64,"_65":98,"_67":68,"_38":99,"_17":100,"_71":101,"_72":102,"_74":51,"_75":-5,"_89":103,"_18":104},{"_36":59,"_13":19,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":68,"_38":92,"_17":70,"_71":24,"_72":73,"_74":51,"_75":-5,"_89":93,"_18":94},{"_36":81,"_13":82,"_60":83,"_62":-5,"_63":64,"_65":32,"_67":68,"_38":84,"_17":85,"_71":86,"_72":87,"_74":51,"_75":88,"_89":90,"_18":91},"6f3512c6-1c8d-4652-bc51-6ca4944586f6","main.ts","019fc4ef-d665-710f-acbe-909da26bd235",["D",1785794223067],75,"http","import { staticHTTPServer, parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { email } from \"https://esm.town/v/std/email\";\nimport { Hono } from \"npm:hono\";\n\nconst OWNER_PIN = Deno.env.get(\"OWNER_PIN\") ?? \"4947\";\nconst OWNER_EMAIL = Deno.env.get(\"OWNER_EMAIL\") ?? \"\";\n\n// ─── Database Schema ───────────────────────────────────────────────\nawait sqlite.batch([\n { sql: `CREATE TABLE IF NOT EXISTS giveaways (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n description TEXT DEFAULT '',\n status TEXT DEFAULT 'active',\n allow_duplicate_numbers INTEGER DEFAULT 0,\n number_min INTEGER DEFAULT 1,\n number_max INTEGER DEFAULT 100,\n numbers_per_entry INTEGER DEFAULT 1,\n max_entries_per_person INTEGER DEFAULT 1,\n ends_at TEXT,\n auto_draw INTEGER DEFAULT 0,\n notify_participants INTEGER DEFAULT 0,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS entries (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n giveaway_id INTEGER NOT NULL,\n participant_name TEXT NOT NULL,\n participant_id TEXT NOT NULL,\n numbers TEXT NOT NULL,\n email TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS winners (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n giveaway_id INTEGER NOT NULL,\n winning_number INTEGER NOT NULL,\n prize_description TEXT DEFAULT '',\n created_at TEXT DEFAULT (datetime('now'))\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS owner_notes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n giveaway_id INTEGER,\n note_text TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now'))\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS owner_sessions (\n token TEXT PRIMARY KEY,\n created_at TEXT DEFAULT (datetime('now')),\n expires_at TEXT NOT NULL\n )` },\n]);\n\n// ─── Migrations: add new columns to existing tables ────────────────\nasync function migrateColumn(table: string, column: string, def: string) {\n try {\n await sqlite.execute({ sql: `ALTER TABLE ${table} ADD COLUMN ${column} ${def}` });\n } catch {\n // Column already exists — safe to ignore\n }\n}\nawait migrateColumn(\"giveaways\", \"ends_at\", \"TEXT\");\nawait migrateColumn(\"giveaways\", \"auto_draw\", \"INTEGER DEFAULT 0\");\nawait migrateColumn(\"giveaways\", \"notify_participants\", \"INTEGER DEFAULT 0\");\nawait migrateColumn(\"giveaways\", \"recurring\", \"INTEGER DEFAULT 0\");\nawait migrateColumn(\"giveaways\", \"recurring_interval_days\", \"INTEGER\");\nawait migrateColumn(\"giveaways\", \"next_draw_at\", \"TEXT\");\nawait migrateColumn(\"entries\", \"email\", \"TEXT\");\n\n// ─── Helpers ───────────────────────────────────────────────────────\n\nasync function isAuthed(req: Request): Promise {\n const auth = req.headers.get(\"Authorization\");\n if (!auth?.startsWith(\"Bearer \")) return false;\n const token = auth.slice(7);\n const result = await sqlite.execute({\n sql: \"SELECT 1 FROM owner_sessions WHERE token = ? AND expires_at > datetime('now')\",\n args: [token],\n });\n return result.rows.length > 0;\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data, (_key, value) =>\n typeof value === \"bigint\" ? Number(value) : value\n ), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nfunction normalizeGiveaway(row: Record) {\n return {\n id: Number(row.id),\n name: row.name,\n description: row.description ?? \"\",\n status: row.status ?? \"active\",\n allow_duplicate_numbers: !!row.allow_duplicate_numbers,\n number_min: Number(row.number_min) || 1,\n number_max: Number(row.number_max) || 100,\n numbers_per_entry: Number(row.numbers_per_entry) || 1,\n max_entries_per_person: Number(row.max_entries_per_person) || 1,\n ends_at: row.ends_at ?? null,\n auto_draw: !!row.auto_draw,\n notify_participants: !!row.notify_participants,\n recurring: !!row.recurring,\n recurring_interval_days: row.recurring_interval_days ? Number(row.recurring_interval_days) : null,\n next_draw_at: row.next_draw_at ?? null,\n created_at: row.created_at,\n updated_at: row.updated_at,\n };\n}\n\nasync function getTakenNumbers(giveawayId: number): Promise> {\n const result = await sqlite.execute({\n sql: \"SELECT numbers FROM entries WHERE giveaway_id = ?\",\n args: [giveawayId],\n });\n const taken = new Set();\n for (const row of result.rows) {\n const nums = JSON.parse(row.numbers as string) as number[];\n nums.forEach((n) => taken.add(n));\n }\n return taken;\n}\n\nasync function getEntryCount(giveawayId: number): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT COUNT(*) as count FROM entries WHERE giveaway_id = ?\",\n args: [giveawayId],\n });\n return result.rows[0].count as number;\n}\n\n/**\n * Pick a random winning number from [min, max] that hasn't been drawn before\n * for this giveaway. When every number in the range has been used at least\n * once, falls back to a fully random pick (cycle resets).\n */\nasync function pickUniqueWinningNumber(giveawayId: number, min: number, max: number): Promise {\n const prevWinners = await sqlite.execute({\n sql: \"SELECT winning_number FROM winners WHERE giveaway_id = ?\",\n args: [giveawayId],\n });\n const used = new Set();\n for (const row of prevWinners.rows) {\n used.add(Number(row.winning_number));\n }\n\n const available: number[] = [];\n for (let i = min; i <= max; i++) {\n if (!used.has(i)) available.push(i);\n }\n\n // All numbers exhausted — reset and pick freely\n if (available.length === 0) {\n return Math.floor(Math.random() * (max - min + 1)) + min;\n }\n\n return available[Math.floor(Math.random() * available.length)];\n}\n\nasync function sendWinnerNotifications(\n giveawayId: number,\n giveawayName: string,\n winningNumber: number,\n prizeDescription: string,\n notifyParticipants: boolean,\n) {\n const entriesResult = await sqlite.execute({\n sql: \"SELECT participant_name, participant_id, email, numbers FROM entries WHERE giveaway_id = ?\",\n args: [giveawayId],\n });\n\n const matchers: { name: string; id: string; numbers: number[] }[] = [];\n const participantEmails: string[] = [];\n\n for (const row of entriesResult.rows) {\n const nums = JSON.parse(row.numbers as string) as number[];\n if (nums.includes(winningNumber)) {\n matchers.push({ name: row.participant_name as string, id: row.participant_id as string, numbers: nums });\n }\n if (row.email) participantEmails.push(row.email as string);\n }\n\n // Notify owner\n if (OWNER_EMAIL) {\n try {\n await email({\n to: OWNER_EMAIL,\n subject: `🎲 Winner drawn: ${giveawayName}`,\n text: `A winner has been drawn for \"${giveawayName}\".\\n\\nWinning number: ${winningNumber}\\nPrize: ${prizeDescription || \"—\"}\\nWinner(s): ${matchers.map((m) => m.name).join(\", \") || \"No match found\"}\\nTotal entries: ${entriesResult.rows.length}`,\n });\n } catch (e) {\n console.error(\"Failed to send owner email:\", e);\n }\n }\n\n // Notify participants\n if (notifyParticipants) {\n for (const emailAddr of participantEmails) {\n try {\n await email({\n to: emailAddr,\n subject: `🎁 ${giveawayName} — Winner Drawn!`,\n text: `The winning number for \"${giveawayName}\" is ${winningNumber}!\\n\\n${matchers.length ? `Winner(s): ${matchers.map((m) => m.name).join(\", \")}` : \"No match found for this number.\"}\\n\\nThank you for participating in DDRP Giveaways!`,\n });\n } catch (e) {\n console.error(`Failed to send email to ${emailAddr}:`, e);\n }\n }\n }\n\n // Send winner announcement to Discord webhook (with role ping) — always fires\n const webhookUrl = Deno.env.get(\"GIVEAWAY_DISCORD_WEBHOOK\");\n if (webhookUrl) {\n try {\n const WINNER_ROLE_ID = \"1462179730923982941\";\n const winnerValue = matchers.length > 0\n ? matchers.map((m) => `<@${m.id}>`).join(\", \")\n : \"No match found for this number.\";\n\n const embed = {\n title: `🎉 Winner: ${giveawayName}`,\n fields: [\n { name: \"🔢 Winning Number\", value: String(winningNumber), inline: true },\n { name: \"🏆 Winner(s)\", value: winnerValue, inline: false },\n { name: \"🎁 Prize\", value: prizeDescription || \"—\", inline: false },\n { name: \"📊 Total Entries\", value: String(entriesResult.rows.length), inline: true },\n { name: \"🔗 Enter Here\", value: \"https://ddrp-giveaways.val.run\" },\n ],\n color: 0xc41e3a,\n timestamp: new Date().toISOString(),\n footer: { text: \"DDRP Giveaways · Winner Announcement\" },\n };\n await fetch(webhookUrl, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n content: `<@&${WINNER_ROLE_ID}>`,\n embeds: [embed],\n allowed_mentions: { roles: [WINNER_ROLE_ID] },\n }),\n });\n } catch (e) {\n console.error(\"Failed to send Discord winner announcement:\", e);\n }\n }\n\n return matchers;\n}\n\n// ─── Hono API ──────────────────────────────────────────────────────\n\nconst api = new Hono();\napi.onError((err) => Promise.reject(err));\n\n// ─── PUBLIC ROUTES ──────────────────────────────────────────────────\n\n// List active giveaways\napi.get(\"/api/giveaways\", async (c) => {\n const result = await sqlite.execute(\n \"SELECT * FROM giveaways WHERE status = 'active' ORDER BY created_at DESC\",\n );\n const giveaways = [];\n for (const row of result.rows) {\n giveaways.push({\n ...normalizeGiveaway(row),\n entryCount: await getEntryCount(row.id as number),\n });\n }\n return json(giveaways);\n});\n\n// Get giveaway details\napi.get(\"/api/giveaways/:id\", async (c) => {\n const id = parseInt(c.req.param(\"id\"));\n const result = await sqlite.execute({\n sql: \"SELECT * FROM giveaways WHERE id = ?\",\n args: [id],\n });\n if (result.rows.length === 0) return json({ error: \"Giveaway not found\" }, 404);\n\n const giveaway = normalizeGiveaway(result.rows[0]);\n const taken = await getTakenNumbers(id);\n\n return json({\n ...giveaway,\n entryCount: await getEntryCount(id),\n takenNumbers: [...taken].sort((a, b) => a - b),\n });\n});\n\n// Submit entry\napi.post(\"/api/giveaways/:id/entries\", async (c) => {\n const id = parseInt(c.req.param(\"id\"));\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n\n const result = await sqlite.execute({\n sql: \"SELECT * FROM giveaways WHERE id = ? AND status = 'active'\",\n args: [id],\n });\n if (result.rows.length === 0) return json({ error: \"Giveaway not found or inactive\" }, 404);\n const giveaway = normalizeGiveaway(result.rows[0]);\n\n // Check if giveaway has ended\n if (giveaway.ends_at && new Date(giveaway.ends_at) <= new Date()) {\n return json({ error: \"This giveaway has ended\" }, 400);\n }\n\n const participantName = typeof body.participantName === \"string\" ? body.participantName.trim() : \"\";\n const participantId = typeof body.participantId === \"string\" ? body.participantId.trim() : \"\";\n if (!participantId) return json({ error: \"Discord User ID is required\" }, 400);\n if (!/^\\d{17,19}$/.test(participantId)) {\n return json({ error: \"Invalid Discord User ID. It must be a 17-19 digit numeric ID.\" }, 400);\n }\n\n // 30-second cooldown between entries (per participant, across all giveaways)\n const recentEntry = await sqlite.execute({\n sql: \"SELECT created_at FROM entries WHERE participant_id = ? ORDER BY created_at DESC LIMIT 1\",\n args: [participantId],\n });\n if (recentEntry.rows.length > 0) {\n const lastEntryTime = new Date(recentEntry.rows[0].created_at as string + \"Z\").getTime();\n const elapsed = Date.now() - lastEntryTime;\n if (elapsed < 30000) {\n const remaining = Math.ceil((30000 - elapsed) / 1000);\n return json({ error: `Please wait ${remaining} second${remaining > 1 ? \"s\" : \"\"} before submitting another entry.` }, 400);\n }\n }\n\n const numbers = body.numbers;\n if (!Array.isArray(numbers) || numbers.length !== giveaway.numbers_per_entry) {\n return json({ error: `You must pick exactly ${giveaway.numbers_per_entry} number(s)` }, 400);\n }\n for (const n of numbers) {\n if (typeof n !== \"number\" || !Number.isInteger(n) || n < giveaway.number_min || n > giveaway.number_max) {\n return json({ error: `Numbers must be whole numbers between ${giveaway.number_min} and ${giveaway.number_max}` }, 400);\n }\n }\n\n // Anti-brute-force: prevent sequential number guessing (e.g. 1, 2, 3, 4, 5…)\n const prevEntries = await sqlite.execute({\n sql: \"SELECT numbers FROM entries WHERE giveaway_id = ? AND participant_id = ?\",\n args: [id, participantId],\n });\n const prevNums = new Set();\n for (const row of prevEntries.rows) {\n const nums = JSON.parse(row.numbers as string) as number[];\n nums.forEach((n) => prevNums.add(n));\n }\n for (const n of numbers) {\n if (prevNums.has(n - 1) || prevNums.has(n + 1)) {\n return json({ error: \"You can't pick a number right next to one you already chose. This prevents cheating by counting through numbers.\" }, 400);\n }\n }\n\n const unique = new Set(numbers);\n if (unique.size !== numbers.length && !giveaway.allow_duplicate_numbers) {\n return json({ error: \"Duplicate numbers in a single entry are not allowed\" }, 400);\n }\n\n const existing = await sqlite.execute({\n sql: \"SELECT COUNT(*) as count FROM entries WHERE giveaway_id = ? AND participant_id = ?\",\n args: [id, participantId],\n });\n if (!giveaway.unlimited_entries && (existing.rows[0].count as number) >= giveaway.max_entries_per_person) {\n return json({ error: `Maximum entries (${giveaway.max_entries_per_person}) reached for this giveaway` }, 400);\n }\n\n if (!giveaway.allow_duplicate_numbers) {\n const taken = await getTakenNumbers(id);\n for (const n of numbers) {\n if (taken.has(n)) {\n return json({ error: `Number ${n} is already taken. Please choose another.` }, 400);\n }\n }\n }\n\n const participantEmail = null;\n\n await sqlite.execute({\n sql: \"INSERT INTO entries (giveaway_id, participant_name, participant_id, numbers, email) VALUES (?, ?, ?, ?, ?)\",\n args: [id, participantName, participantId, JSON.stringify(numbers), participantEmail || null],\n });\n\n // Send confirmation email to participant\n if (participantEmail && giveaway.notify_participants) {\n try {\n await email({\n to: participantEmail,\n subject: `✅ Entry confirmed: ${giveaway.name}`,\n text: `Your entry for \"${giveaway.name}\" has been confirmed!\\n\\nYour number(s): ${numbers.join(\", \")}\\n${giveaway.ends_at ? `\\nThis giveaway ends on ${giveaway.ends_at}.` : \"\"}\\nGood luck! 🌹`,\n });\n } catch (e) {\n console.error(\"Failed to send confirmation email:\", e);\n }\n }\n\n // Notify owner of new entry\n if (OWNER_EMAIL && giveaway.notify_participants) {\n try {\n await email({\n to: OWNER_EMAIL,\n subject: `📝 New entry: ${giveaway.name}`,\n text: `New entry in \"${giveaway.name}\" from ${participantName}.\\nNumber(s): ${numbers.join(\", \")}\\nTotal entries: ${await getEntryCount(id)}`,\n });\n } catch (e) {\n console.error(\"Failed to send owner notification:\", e);\n }\n }\n\n // Send Discord webhook notification for new entry\n const entryWebhookUrl = Deno.env.get(\"GIVEAWAY_DISCORD_WEBHOOK\");\n if (entryWebhookUrl) {\n try {\n const isNumeric = /^\\d{17,19}$/.test(participantId);\n const mention = isNumeric ? `<@${participantId}>` : participantId;\n const entryEmbed = {\n title: `📝 New Entry: ${giveaway.name}`,\n fields: [\n { name: \"👤 Participant\", value: mention, inline: true },\n { name: \"🔢 Number(s)\", value: numbers.join(\", \"), inline: true },\n { name: \"📊 Total Entries\", value: String(await getEntryCount(id)), inline: true },\n { name: \"🔗 Enter Here\", value: \"https://ddrp-giveaways.val.run\" },\n ],\n color: 0xc41e3a,\n timestamp: new Date().toISOString(),\n footer: { text: \"DDRP Giveaways · New Entry\" },\n };\n await fetch(entryWebhookUrl, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ embeds: [entryEmbed] }),\n });\n } catch (e) {\n console.error(\"Failed to send Discord entry notification:\", e);\n }\n }\n\n // Check if the submitted numbers match any pre-set winning number\n // If so, announce the winner to Discord immediately\n const presetWinners = await sqlite.execute({\n sql: \"SELECT winning_number, prize_description FROM winners WHERE giveaway_id = ?\",\n args: [id],\n });\n for (const wrow of presetWinners.rows) {\n const wn = Number(wrow.winning_number);\n if (numbers.includes(wn)) {\n // This entry matches a pre-set winning number — announce it!\n const winnerWebhookUrl = Deno.env.get(\"GIVEAWAY_DISCORD_WEBHOOK\");\n if (winnerWebhookUrl) {\n try {\n const WINNER_ROLE_ID = \"1462179730923982941\";\n const isNumeric = /^\\d{17,19}$/.test(participantId);\n const winnerMention = isNumeric ? `<@${participantId}>` : participantId;\n const totalEntries = await getEntryCount(id);\n const embed = {\n title: `🎉 Winner: ${giveaway.name}`,\n fields: [\n { name: \"🔢 Winning Number\", value: String(wn), inline: true },\n { name: \"🏆 Winner(s)\", value: winnerMention, inline: false },\n { name: \"🎁 Prize\", value: (wrow.prize_description as string) || \"—\", inline: false },\n { name: \"📊 Total Entries\", value: String(totalEntries), inline: true },\n ],\n color: 0xc41e3a,\n timestamp: new Date().toISOString(),\n footer: { text: \"DDRP Giveaways · Winner Announcement\" },\n };\n await fetch(winnerWebhookUrl, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n content: `<@&${WINNER_ROLE_ID}>`,\n embeds: [embed],\n allowed_mentions: { roles: [WINNER_ROLE_ID] },\n }),\n });\n } catch (e) {\n console.error(\"Failed to send Discord winner announcement on entry match:\", e);\n }\n }\n\n // Send winner email to owner\n if (OWNER_EMAIL) {\n try {\n await email({\n to: OWNER_EMAIL,\n subject: `🎉 Winner found: ${giveaway.name}`,\n text: `A participant matched the pre-set winning number for \"${giveaway.name}\".\\n\\nWinning number: ${wn}\\nWinner Discord ID: ${participantId}\\nNumber(s) picked: ${numbers.join(\", \")}`,\n });\n } catch (e) {\n console.error(\"Failed to send owner email for winner match:\", e);\n }\n }\n\n // Auto-end the giveaway when a winner is found\n if (giveaway.recurring || giveaway.recurring_interval_days) {\n await sqlite.execute({ sql: \"DELETE FROM entries WHERE giveaway_id = ?\", args: [id] });\n await sqlite.execute({ sql: \"UPDATE giveaways SET ends_at = NULL, updated_at = datetime('now') WHERE id = ?\", args: [id] });\n } else {\n await sqlite.execute({ sql: \"UPDATE giveaways SET status = 'ended', updated_at = datetime('now') WHERE id = ?\", args: [id] });\n }\n break;\n }\n }\n\n return json({ ok: true, message: \"Entry submitted successfully!\" }, 201);\n});\n\n// Get entries for a participant\napi.get(\"/api/giveaways/:id/entries\", async (c) => {\n const id = parseInt(c.req.param(\"id\"));\n const participantId = c.req.query(\"participant_id\");\n if (!participantId) return json({ error: \"participant_id query parameter is required\" }, 400);\n\n const result = await sqlite.execute({\n sql: \"SELECT * FROM entries WHERE giveaway_id = ? AND participant_id = ? ORDER BY created_at DESC\",\n args: [id, participantId],\n });\n const entries = result.rows.map((row) => ({\n ...row,\n numbers: JSON.parse(row.numbers as string),\n }));\n return json(entries);\n});\n\n// Get winners (owner only — keeps winning numbers hidden from public)\napi.get(\"/api/owner/giveaways/:id/winners\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n const result = await sqlite.execute({\n sql: \"SELECT * FROM winners WHERE giveaway_id = ? ORDER BY created_at DESC\",\n args: [id],\n });\n return json(result.rows);\n});\n\n// ─── OWNER ROUTES ──────────────────────────────────────────────────\n\n// Login with PIN\napi.post(\"/api/owner/login\", async (c) => {\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n if (body.pin !== OWNER_PIN) return json({ error: \"Invalid PIN\" }, 401);\n\n await sqlite.execute(\"DELETE FROM owner_sessions WHERE expires_at < datetime('now')\");\n const token = crypto.randomUUID();\n const expires = new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString();\n await sqlite.execute({\n sql: \"INSERT INTO owner_sessions (token, expires_at) VALUES (?, ?)\",\n args: [token, expires],\n });\n\n return json({ token });\n});\n\n// Verify token\napi.post(\"/api/owner/verify\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n return json({ ok: true });\n});\n\n// List ALL giveaways (owner)\napi.get(\"/api/owner/giveaways\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const result = await sqlite.execute(\"SELECT * FROM giveaways ORDER BY created_at DESC\");\n const giveaways = [];\n for (const row of result.rows) {\n giveaways.push({\n ...normalizeGiveaway(row),\n entryCount: await getEntryCount(row.id as number),\n });\n }\n return json(giveaways);\n});\n\n// Create giveaway\napi.post(\"/api/owner/giveaways\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n\n const name = typeof body.name === \"string\" ? body.name.trim() : \"\";\n if (!name) return json({ error: \"Giveaway name is required\" }, 400);\n\n const result = await sqlite.execute({\n sql: `INSERT INTO giveaways (name, description, status, allow_duplicate_numbers, number_min, number_max, numbers_per_entry, max_entries_per_person, ends_at, auto_draw, notify_participants, recurring, recurring_interval_days)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n name,\n typeof body.description === \"string\" ? body.description.trim() : \"\",\n body.status ?? \"active\",\n body.allow_duplicate_numbers ? 1 : 0,\n parseInt(body.number_min) || 1,\n parseInt(body.number_max) || 100,\n parseInt(body.numbers_per_entry) || 1,\n parseInt(body.max_entries_per_person) || 1,\n typeof body.ends_at === \"string\" && body.ends_at ? body.ends_at : null,\n body.auto_draw ? 1 : 0,\n body.notify_participants ? 1 : 0,\n body.recurring ? 1 : 0,\n body.recurring_interval_days ? parseInt(body.recurring_interval_days) : null,\n ],\n });\n\n const giveawayId = Number(result.lastInsertRowid);\n\n // Insert pre-set winning numbers if provided\n if (Array.isArray(body.winning_numbers) && body.winning_numbers.length > 0) {\n for (const num of body.winning_numbers) {\n const wn = parseInt(num);\n if (!isNaN(wn)) {\n await sqlite.execute({\n sql: \"INSERT INTO winners (giveaway_id, winning_number, prize_description) VALUES (?, ?, ?)\",\n args: [giveawayId, wn, \"Pre-set winning number\"],\n });\n }\n }\n } else if (body.auto_draw) {\n // Auto-draw enabled: immediately pick a random winning number from the min-max range\n // This number is stored secretly — when someone enters with it, they instantly win\n const min = parseInt(body.number_min) || 1;\n const max = parseInt(body.number_max) || 100;\n const autoWinningNumber = Math.floor(Math.random() * (max - min + 1)) + min;\n await sqlite.execute({\n sql: \"INSERT INTO winners (giveaway_id, winning_number, prize_description) VALUES (?, ?, ?)\",\n args: [giveawayId, autoWinningNumber, \"Auto-generated winning number\"],\n });\n }\n\n return json({ id: result.lastInsertRowid, ok: true }, 201);\n});\n\n// Update giveaway\napi.put(\"/api/owner/giveaways/:id\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n\n const updates: string[] = [];\n const args: (string | number | null)[] = [];\n\n const fields: Record = {\n name: body.name,\n description: body.description,\n status: body.status,\n allow_duplicate_numbers: body.allow_duplicate_numbers !== undefined ? (body.allow_duplicate_numbers ? 1 : 0) : undefined,\n number_min: body.number_min !== undefined ? parseInt(body.number_min) : undefined,\n number_max: body.number_max !== undefined ? parseInt(body.number_max) : undefined,\n numbers_per_entry: body.numbers_per_entry !== undefined ? parseInt(body.numbers_per_entry) : undefined,\n max_entries_per_person: body.max_entries_per_person !== undefined ? parseInt(body.max_entries_per_person) : undefined,\n ends_at: body.ends_at !== undefined ? (body.ends_at || null) : undefined,\n auto_draw: body.auto_draw !== undefined ? (body.auto_draw ? 1 : 0) : undefined,\n notify_participants: body.notify_participants !== undefined ? (body.notify_participants ? 1 : 0) : undefined,\n recurring: body.recurring !== undefined ? (body.recurring ? 1 : 0) : undefined,\n recurring_interval_days: body.recurring_interval_days !== undefined ? (body.recurring_interval_days ? parseInt(body.recurring_interval_days) : null) : undefined,\n };\n\n for (const [key, value] of Object.entries(fields)) {\n if (value !== undefined) {\n updates.push(`${key} = ?`);\n args.push(value as string | number | null);\n }\n }\n updates.push(\"updated_at = datetime('now')\");\n args.push(id);\n\n await sqlite.execute({\n sql: `UPDATE giveaways SET ${updates.join(\", \")} WHERE id = ?`,\n args,\n });\n\n return json({ ok: true });\n});\n\n// Delete giveaway\napi.delete(\"/api/owner/giveaways/:id\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n await sqlite.batch([\n { sql: \"DELETE FROM entries WHERE giveaway_id = ?\", args: [id] },\n { sql: \"DELETE FROM winners WHERE giveaway_id = ?\", args: [id] },\n { sql: \"DELETE FROM owner_notes WHERE giveaway_id = ?\", args: [id] },\n { sql: \"DELETE FROM giveaways WHERE id = ?\", args: [id] },\n ]);\n return json({ ok: true });\n});\n\n// List all entries for a giveaway (owner)\napi.get(\"/api/owner/giveaways/:id/entries\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n const result = await sqlite.execute({\n sql: \"SELECT * FROM entries WHERE giveaway_id = ? ORDER BY created_at DESC\",\n args: [id],\n });\n const entries = result.rows.map((row) => ({\n ...row,\n numbers: JSON.parse(row.numbers as string),\n }));\n return json(entries);\n});\n\n// Add a winner (manual)\napi.post(\"/api/owner/giveaways/:id/winners\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n\n const winningNumber = parseInt(body.winning_number);\n if (isNaN(winningNumber)) return json({ error: \"A valid winning number is required\" }, 400);\n\n const giveawayResult = await sqlite.execute({\n sql: \"SELECT name, notify_participants, recurring, recurring_interval_days, next_draw_at FROM giveaways WHERE id = ?\",\n args: [id],\n });\n if (giveawayResult.rows.length === 0) return json({ error: \"Giveaway not found\" }, 404);\n const giveaway = giveawayResult.rows[0];\n\n const prizeDesc = typeof body.prize_description === \"string\" ? body.prize_description.trim() : \"\";\n const result = await sqlite.execute({\n sql: \"INSERT INTO winners (giveaway_id, winning_number, prize_description) VALUES (?, ?, ?)\",\n args: [id, winningNumber, prizeDesc],\n });\n\n const matchers = await sendWinnerNotifications(\n id, giveaway.name as string, winningNumber, prizeDesc, !!giveaway.notify_participants,\n );\n\n // If recurring or scheduled recurring, clear entries so the giveaway restarts fresh\n if (giveaway.recurring || giveaway.recurring_interval_days) {\n await sqlite.execute({ sql: \"DELETE FROM entries WHERE giveaway_id = ?\", args: [id] });\n }\n\n // If scheduled recurring, set the next auto-draw date (only if not already scheduled in the future)\n const intervalDays = giveaway.recurring_interval_days ? Number(giveaway.recurring_interval_days) : null;\n if (intervalDays) {\n const existingNextDraw = giveaway.next_draw_at as string | null;\n if (!existingNextDraw || new Date(existingNextDraw) <= new Date()) {\n const nextDraw = new Date(Date.now() + intervalDays * 86400000).toISOString();\n await sqlite.execute({ sql: \"UPDATE giveaways SET next_draw_at = ? WHERE id = ?\", args: [nextDraw, id] });\n }\n }\n\n // Prevent auto-draw from firing again for this giveaway:\n // - Non-recurring: mark as ended (same as auto-draw.ts does)\n // - Recurring with auto_draw: clear ends_at so auto-draw's first query won't match\n if (giveaway.recurring || giveaway.recurring_interval_days) {\n await sqlite.execute({ sql: \"UPDATE giveaways SET ends_at = NULL, updated_at = datetime('now') WHERE id = ?\", args: [id] });\n } else {\n await sqlite.execute({ sql: \"UPDATE giveaways SET status = 'ended', updated_at = datetime('now') WHERE id = ?\", args: [id] });\n }\n\n return json({ id: result.lastInsertRowid, ok: true, matchers, recurred: !!giveaway.recurring }, 201);\n});\n\n// Auto-draw a random winner\napi.post(\"/api/owner/giveaways/:id/auto-draw\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n let body = {};\n try { body = await c.req.json(); } catch { /* no body needed */ }\n\n const giveawayResult = await sqlite.execute({\n sql: \"SELECT * FROM giveaways WHERE id = ?\",\n args: [id],\n });\n if (giveawayResult.rows.length === 0) return json({ error: \"Giveaway not found\" }, 404);\n const giveaway = normalizeGiveaway(giveawayResult.rows[0]);\n\n // Pick a winning number that avoids repeating any previous draw for this giveaway\n const winningNumber = await pickUniqueWinningNumber(id, giveaway.number_min, giveaway.number_max);\n const prizeDesc = typeof body.prize_description === \"string\" ? body.prize_description.trim() : \"Auto-drawn winner\";\n\n const result = await sqlite.execute({\n sql: \"INSERT INTO winners (giveaway_id, winning_number, prize_description) VALUES (?, ?, ?)\",\n args: [id, winningNumber, prizeDesc],\n });\n\n const matchers = await sendWinnerNotifications(\n id, giveaway.name, winningNumber, prizeDesc, giveaway.notify_participants,\n );\n\n // If recurring or scheduled recurring, clear entries\n if (giveaway.recurring || giveaway.recurring_interval_days) {\n await sqlite.execute({ sql: \"DELETE FROM entries WHERE giveaway_id = ?\", args: [id] });\n }\n\n // If scheduled recurring, set the next auto-draw date (only if not already scheduled in the future)\n if (giveaway.recurring_interval_days) {\n if (!giveaway.next_draw_at || new Date(giveaway.next_draw_at) <= new Date()) {\n const nextDraw = new Date(Date.now() + giveaway.recurring_interval_days * 86400000).toISOString();\n await sqlite.execute({ sql: \"UPDATE giveaways SET next_draw_at = ? WHERE id = ?\", args: [nextDraw, id] });\n }\n }\n\n // Prevent auto-draw interval from firing again for this giveaway:\n // - Non-recurring: mark as ended (same as auto-draw.ts does)\n // - Recurring with auto_draw: clear ends_at so auto-draw's first query won't match\n if (giveaway.recurring || giveaway.recurring_interval_days) {\n await sqlite.execute({ sql: \"UPDATE giveaways SET ends_at = NULL, updated_at = datetime('now') WHERE id = ?\", args: [id] });\n } else {\n await sqlite.execute({ sql: \"UPDATE giveaways SET status = 'ended', updated_at = datetime('now') WHERE id = ?\", args: [id] });\n }\n\n return json({ id: result.lastInsertRowid, ok: true, winningNumber, matchers, recurred: giveaway.recurring }, 201);\n});\n\n// End a giveaway manually\napi.post(\"/api/owner/giveaways/:id/end\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n await sqlite.execute({\n sql: \"UPDATE giveaways SET status = 'ended', updated_at = datetime('now') WHERE id = ?\",\n args: [id],\n });\n return json({ ok: true });\n});\n\n// Get stats (owner)\napi.get(\"/api/owner/stats\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n\n const totalGiveaways = await sqlite.execute(\"SELECT COUNT(*) as count FROM giveaways\");\n const activeGiveaways = await sqlite.execute(\"SELECT COUNT(*) as count FROM giveaways WHERE status = 'active'\");\n const draftGiveaways = await sqlite.execute(\"SELECT COUNT(*) as count FROM giveaways WHERE status = 'draft'\");\n const endedGiveaways = await sqlite.execute(\"SELECT COUNT(*) as count FROM giveaways WHERE status = 'ended'\");\n const totalEntries = await sqlite.execute(\"SELECT COUNT(*) as count FROM entries\");\n const totalWinners = await sqlite.execute(\"SELECT COUNT(*) as count FROM winners\");\n const uniqueParticipants = await sqlite.execute(\"SELECT COUNT(DISTINCT participant_id) as count FROM entries\");\n\n const popular = await sqlite.execute({\n sql: `SELECT g.id, g.name, g.status, COUNT(e.id) as entry_count\n FROM giveaways g LEFT JOIN entries e ON g.id = e.giveaway_id\n GROUP BY g.id ORDER BY entry_count DESC LIMIT 5`,\n });\n\n const recent = await sqlite.execute({\n sql: `SELECT e.id, e.participant_name, e.participant_id, e.numbers, e.created_at, g.name as giveaway_name\n FROM entries e JOIN giveaways g ON e.giveaway_id = g.id\n ORDER BY e.created_at DESC LIMIT 10`,\n });\n\n return json({\n totalGiveaways: totalGiveaways.rows[0].count,\n activeGiveaways: activeGiveaways.rows[0].count,\n draftGiveaways: draftGiveaways.rows[0].count,\n endedGiveaways: endedGiveaways.rows[0].count,\n totalEntries: totalEntries.rows[0].count,\n totalWinners: totalWinners.rows[0].count,\n uniqueParticipants: uniqueParticipants.rows[0].count,\n popularGiveaways: popular.rows.map((r) => ({\n id: Number(r.id),\n name: r.name,\n status: r.status,\n entryCount: Number(r.entry_count),\n })),\n recentEntries: recent.rows.map((r) => ({\n id: Number(r.id),\n participantName: r.participant_name,\n participantId: r.participant_id,\n numbers: JSON.parse(r.numbers as string),\n createdAt: r.created_at,\n giveawayName: r.giveaway_name,\n })),\n });\n});\n\n// Delete a winner\napi.delete(\"/api/owner/giveaways/:id/winners/:wid\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const wid = parseInt(c.req.param(\"wid\"));\n await sqlite.execute({ sql: \"DELETE FROM winners WHERE id = ?\", args: [wid] });\n return json({ ok: true });\n});\n\n// Get notes for a giveaway\napi.get(\"/api/owner/giveaways/:id/notes\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n const result = await sqlite.execute({\n sql: \"SELECT * FROM owner_notes WHERE giveaway_id = ? ORDER BY created_at DESC\",\n args: [id],\n });\n return c.json(result.rows);\n});\n\n// Add a note\napi.post(\"/api/owner/giveaways/:id/notes\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n let body;\n try {\n body = await c.req.json();\n } catch {\n return json({ error: \"Invalid JSON body\" }, 400);\n }\n\n const noteText = typeof body.note_text === \"string\" ? body.note_text.trim() : \"\";\n if (!noteText) return json({ error: \"Note text is required\" }, 400);\n\n const result = await sqlite.execute({\n sql: \"INSERT INTO owner_notes (giveaway_id, note_text) VALUES (?, ?)\",\n args: [id, noteText],\n });\n\n return json({ id: result.lastInsertRowid, ok: true }, 201);\n});\n\n// Delete a note\napi.delete(\"/api/owner/notes/:nid\", async (c) => {\n if (!(await isAuthed(c.req.raw))) return json({ error: \"Unauthorized\" }, 401);\n const nid = parseInt(c.req.param(\"nid\"));\n await sqlite.execute({ sql: \"DELETE FROM owner_notes WHERE id = ?\", args: [nid] });\n return json({ ok: true });\n});\n\n// ─── DISCORD OAUTH2 ──────────────────────────────────────────────────\n\n// Redirect to Discord authorization page\n// Supports cross-val OAuth via return_to param (used by DDRP-Applications)\napi.get(\"/api/auth/discord\", (c) => {\n const clientId = Deno.env.get(\"DISCORD_CLIENT_ID\");\n if (!clientId) return json({ error: \"Discord OAuth not configured\" }, 500);\n\n const redirectUri = `https://ddrp-giveaways.val.run/api/auth/discord/callback`;\n const state = c.req.query(\"state\") || \"\";\n const returnTo = c.req.query(\"return_to\") || \"\";\n\n // Encode return_to in state with pipe delimiter: \"state|return_to\"\n const fullState = returnTo ? `${state}|${returnTo}` : state;\n\n const params = new URLSearchParams({\n client_id: clientId,\n redirect_uri: redirectUri,\n response_type: \"code\",\n scope: \"identify\",\n state: fullState,\n });\n\n return Response.redirect(\n `https://discord.com/api/oauth2/authorize?${params}`,\n 302,\n );\n});\n\n// Discord callback — exchange code, get user info, set cookies, redirect back\n// Supports cross-val OAuth: if state contains \"appState|returnTo\", redirect there\napi.get(\"/api/auth/discord/callback\", async (c) => {\n const origin = \"https://ddrp-giveaways.val.run\";\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\") || \"\";\n const error = c.req.query(\"error\");\n\n // Parse cross-val state: \"appState|returnTo\"\n let appState = state;\n let returnTo = \"\";\n if (state.includes(\"|\")) {\n const idx = state.indexOf(\"|\");\n appState = state.slice(0, idx);\n returnTo = state.slice(idx + 1);\n }\n\n if (error) {\n if (returnTo) {\n return Response.redirect(`${returnTo}/?discord_error=${encodeURIComponent(error)}`, 302);\n }\n return Response.redirect(`${origin}/?discord_error=${encodeURIComponent(error)}`, 302);\n }\n if (!code) return json({ error: \"No authorization code provided\" }, 400);\n\n const clientId = Deno.env.get(\"DISCORD_CLIENT_ID\");\n const clientSecret = Deno.env.get(\"DISCORD_CLIENT_SECRET\");\n if (!clientId || !clientSecret) {\n return json({ error: \"Discord OAuth not configured\" }, 500);\n }\n\n const redirectUri = `${origin}/api/auth/discord/callback`;\n\n // Exchange code for access token\n const tokenRes = await fetch(\"https://discord.com/api/oauth2/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n client_id: clientId,\n client_secret: clientSecret,\n grant_type: \"authorization_code\",\n code,\n redirect_uri: redirectUri,\n }),\n });\n\n if (!tokenRes.ok) {\n console.error(\"Discord token exchange failed:\", await tokenRes.text());\n if (returnTo) return Response.redirect(`${returnTo}/?discord_error=token_failed`, 302);\n return Response.redirect(`${origin}/?discord_error=token_failed`, 302);\n }\n\n const tokenData = await tokenRes.json();\n\n // Fetch user info from Discord\n const userRes = await fetch(\"https://discord.com/api/users/@me\", {\n headers: { Authorization: `Bearer ${tokenData.access_token}` },\n });\n\n if (!userRes.ok) {\n if (returnTo) return Response.redirect(`${returnTo}/?discord_error=user_fetch_failed`, 302);\n return Response.redirect(`${origin}/?discord_error=user_fetch_failed`, 302);\n }\n\n const userData = await userRes.json();\n\n // Cross-val redirect: send Discord user info back to the calling val\n if (returnTo) {\n const sep = returnTo.includes(\"?\") ? \"&\" : \"?\";\n const params = new URLSearchParams({\n discord_id: userData.id,\n discord_name: userData.username,\n });\n if (appState) params.set(\"apply\", appState);\n return Response.redirect(`${returnTo}${sep}${params}`, 302);\n }\n\n // Same-val redirect: set cookies and redirect within giveaways\n const redirectUrl = appState\n ? `${origin}/?giveaway=${encodeURIComponent(appState)}`\n : `${origin}/`;\n\n const headers = new Headers();\n headers.set(\"Location\", redirectUrl);\n headers.append(\n \"Set-Cookie\",\n `discord_id=${userData.id}; Path=/; Max-Age=31536000; SameSite=Lax`,\n );\n headers.append(\n \"Set-Cookie\",\n `discord_name=${encodeURIComponent(userData.username)}; Path=/; Max-Age=31536000; SameSite=Lax`,\n );\n\n return new Response(null, { status: 302, headers });\n});\n\n// ─── Main Handler ──────────────────────────────────────────────────\n\nexport default staticHTTPServer(import.meta.url, async (req) => {\n const url = new URL(req.url);\n\n if (url.pathname.startsWith(\"/api/\")) {\n return await api.fetch(req);\n }\n\n if (url.pathname === \"/source\") {\n return new Response(null, { status: 302, headers: { Location: parseVal().links.self.val } });\n }\n\n return null;\n});\n","ddrp-giveaways","children",[],[82],["D",1785788399400],[],[19],"47f6d875-e973-4b6e-a721-1eae00f6e899","discord-update.ts","aa1dd9c8-8f5e-11f1-b2a5-1607ee4eb77e",46,["D",1785777368889],1,"interval","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function () {\n const webhookUrl = Deno.env.get(\"GIVEAWAY_DISCORD_WEBHOOK\");\n if (!webhookUrl) {\n console.error(\"GIVEAWAY_DISCORD_WEBHOOK not set — skipping Discord update\");\n return;\n }\n\n // Get all active giveaways with entry counts\n const result = await sqlite.execute({\n sql: `SELECT g.id, g.name, g.description, g.number_min, g.number_max,\n g.numbers_per_entry, g.allow_duplicate_numbers, g.ends_at,\n g.recurring, g.auto_draw,\n COUNT(e.id) as entry_count\n FROM giveaways g\n LEFT JOIN entries e ON g.id = e.giveaway_id\n WHERE g.status = 'active'\n GROUP BY g.id\n ORDER BY g.created_at DESC`,\n });\n\n // Build Discord embed\n let totalEntries = 0;\n const fields: Record[] = [];\n\n for (const row of result.rows) {\n const name = row.name as string;\n const entryCount = Number(row.entry_count);\n totalEntries += entryCount;\n const range = `${row.number_min}-${row.number_max}`;\n const recurring = !!row.recurring;\n const endsAt = row.ends_at as string | null;\n\n let value = `📊 **${entryCount}** entries\\n🔢 Range: ${range}`;\n if (recurring) value += \"\\n🔁 Recurring — resets after each draw\";\n if (endsAt) {\n const ended = new Date(endsAt) <= new Date();\n if (!ended) {\n const diff = new Date(endsAt).getTime() - Date.now();\n const hrs = Math.floor(diff / 3600000);\n const days = Math.floor(hrs / 24);\n value += days > 0\n ? `\\n⏰ Ends in ${days}d ${hrs % 24}h`\n : `\\n⏰ Ends in ${hrs}h`;\n }\n }\n\n fields.push({ name: `🎁 ${name}`, value, inline: false });\n }\n\n const embed = {\n title: \"🌹 DDRP Giveaways — Status Update\",\n description: result.rows.length === 0\n ? \"No active giveaways right now.\"\n : `**${result.rows.length}** active giveaway(s) · **${totalEntries}** total entries`,\n color: 0xc41e3a,\n fields: fields.slice(0, 25), // Discord embed limit\n timestamp: new Date().toISOString(),\n footer: { text: \"DDRP Giveaways · Auto-update every 3 hours\" },\n };\n\n try {\n const res = await fetch(webhookUrl, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ embeds: [embed] }),\n });\n if (!res.ok) {\n console.error(\"Discord webhook failed:\", res.status, await res.text());\n } else {\n console.log(`Discord update sent: ${result.rows.length} giveaways, ${totalEntries} entries`);\n }\n } catch (e) {\n console.error(\"Failed to send Discord update:\", e);\n }\n\n // Clean up expired owner sessions\n await sqlite.execute(\"DELETE FROM owner_sessions WHERE expires_at < datetime('now')\");\n}\n",[],[96],"b6e2af02-f496-4f46-820e-80de22138ed7","auto-draw.ts","3e2802f2-8f59-11f1-be0c-1607ee4eb77e",161,["D",1785794242288],21,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { email } from \"https://esm.town/v/std/email\";\n\n/**\n * Pick a random winning number from [min, max] that hasn't been drawn before\n * for this giveaway. When every number in the range has been used at least\n * once, falls back to a fully random pick (cycle resets).\n */\nasync function pickUniqueWinningNumber(giveawayId: number, min: number, max: number): Promise {\n const prevWinners = await sqlite.execute({\n sql: \"SELECT winning_number FROM winners WHERE giveaway_id = ?\",\n args: [giveawayId],\n });\n const used = new Set();\n for (const row of prevWinners.rows) {\n used.add(Number(row.winning_number));\n }\n\n const available: number[] = [];\n for (let i = min; i <= max; i++) {\n if (!used.has(i)) available.push(i);\n }\n\n // All numbers exhausted — reset and pick freely\n if (available.length === 0) {\n return Math.floor(Math.random() * (max - min + 1)) + min;\n }\n\n return available[Math.floor(Math.random() * available.length)];\n}\n\nexport default async function () {\n // Find giveaways that have ended and need auto-draw\n const result = await sqlite.execute({\n sql: `SELECT * FROM giveaways\n WHERE ends_at IS NOT NULL\n AND ends_at <= datetime('now')\n AND auto_draw = 1\n AND status = 'active'`,\n });\n\n for (const giveaway of result.rows) {\n const id = Number(giveaway.id);\n const giveawayName = giveaway.name as string;\n const notifyParticipants = !!giveaway.notify_participants;\n\n // Get all entries with their numbers\n const entriesResult = await sqlite.execute({\n sql: \"SELECT id, participant_name, participant_id, email, numbers FROM entries WHERE giveaway_id = ?\",\n args: [id],\n });\n\n // Collect all taken numbers\n const takenNumbers: number[] = [];\n for (const row of entriesResult.rows) {\n const nums = JSON.parse(row.numbers as string) as number[];\n nums.forEach((n) => { if (!takenNumbers.includes(n)) takenNumbers.push(n); });\n }\n\n const isRecurring = !!giveaway.recurring;\n\n // Pick a winning number that avoids repeating any previous draw for this giveaway\n const min = Number(giveaway.number_min) || 1;\n const max = Number(giveaway.number_max) || 1000;\n const winningNumber = await pickUniqueWinningNumber(id, min, max);\n\n // Insert winner\n await sqlite.execute({\n sql: \"INSERT INTO winners (giveaway_id, winning_number, prize_description) VALUES (?, ?, ?)\",\n args: [id, winningNumber, \"Auto-drawn winner\"],\n });\n\n if (isRecurring) {\n // Clear entries for the next round; keep status active\n await sqlite.execute({ sql: \"DELETE FROM entries WHERE giveaway_id = ?\", args: [id] });\n await sqlite.execute({\n sql: \"UPDATE giveaways SET updated_at = datetime('now') WHERE id = ?\",\n args: [id],\n });\n } else {\n await sqlite.execute({\n sql: \"UPDATE giveaways SET status = 'ended', updated_at = datetime('now') WHERE id = ?\",\n args: [id],\n });\n }\n\n // Find winner(s) and collect emails\n const winnerNames: string[] = [];\n const winnerIds: string[] = [];\n const participantEmails: string[] = [];\n for (const row of entriesResult.rows) {\n const nums = JSON.parse(row.numbers as string) as number[];\n if (nums.includes(winningNumber)) {\n winnerNames.push(row.participant_name as string);\n winnerIds.push(row.participant_id as string);\n }\n if (row.email) participantEmails.push(row.email as string);\n }\n\n // Send winner announcement to Discord webhook (with role ping) — always fires\n const webhookUrl = Deno.env.get(\"GIVEAWAY_DISCORD_WEBHOOK\");\n if (webhookUrl) {\n try {\n const WINNER_ROLE_ID = \"1462179730923982941\";\n const winnerValue = winnerIds.length > 0\n ? winnerIds.map((id) => `<@${id}>`).join(\", \")\n : \"No match found for this number.\";\n const embed = {\n title: `🎉 Winner: ${giveawayName}`,\n fields: [\n { name: \"🔢 Winning Number\", value: String(winningNumber), inline: true },\n { name: \"🏆 Winner(s)\", value: winnerValue, inline: false },\n { name: \"🎁 Prize\", value: \"Auto-drawn winner\", inline: false },\n { name: \"📊 Total Entries\", value: String(entriesResult.rows.length), inline: true },\n ],\n color: 0xc41e3a,\n timestamp: new Date().toISOString(),\n footer: { text: \"DDRP Giveaways · Winner Announcement\" },\n };\n await fetch(webhookUrl, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n content: `<@&${WINNER_ROLE_ID}>`,\n embeds: [embed],\n allowed_mentions: { roles: [WINNER_ROLE_ID] },\n }),\n });\n } catch (e) {\n console.error(\"Failed to send Discord winner announcement:\", e);\n }\n }\n\n // Notify owner\n const ownerEmail = Deno.env.get(\"OWNER_EMAIL\");\n if (ownerEmail) {\n try {\n await email({\n to: ownerEmail,\n subject: `🎲 Auto-draw complete: ${giveawayName}`,\n text: `Giveaway \"${giveawayName}\" has ended and a winner has been auto-drawn.\\n\\nWinning number: ${winningNumber}\\nWinner(s): ${winnerNames.join(\", \") || \"No match\"}\\nTotal entries: ${entriesResult.rows.length}`,\n });\n } catch (e) {\n console.error(\"Failed to send owner email:\", e);\n }\n }\n\n // Notify participants\n if (notifyParticipants) {\n for (const emailAddr of participantEmails) {\n try {\n await email({\n to: emailAddr,\n subject: `🎁 ${giveawayName} — Winner Drawn!`,\n text: `The winning number for \"${giveawayName}\" is ${winningNumber}!\\n\\n${winnerNames.length ? `Winner(s): ${winnerNames.join(\", \")}` : \"No match found for this number.\"}\\n\\nThank you for participating in DDRP Giveaways!`,\n });\n } catch (e) {\n console.error(`Failed to send email to ${emailAddr}:`, e);\n }\n }\n }\n\n console.log(`Auto-drew winner for \"${giveawayName}\": winning number ${winningNumber}`);\n }\n\n // ─── Scheduled recurring draws ──────────────────────────────────\n // Check for giveaways with a scheduled next_draw_at that has passed\n const scheduled = await sqlite.execute({\n sql: `SELECT * FROM giveaways\n WHERE next_draw_at IS NOT NULL\n AND next_draw_at <= datetime('now')\n AND status = 'active'`,\n });\n\n for (const g of scheduled.rows) {\n const sid = Number(g.id);\n const sName = g.name as string;\n const sMin = Number(g.number_min) || 1;\n const sMax = Number(g.number_max) || 1000;\n const sInterval = Number(g.recurring_interval_days) || 14;\n const sNotify = !!g.notify_participants;\n\n // Pick a winning number that avoids repeating any previous draw for this giveaway\n const sWinning = await pickUniqueWinningNumber(sid, sMin, sMax);\n\n // Fetch entries BEFORE clearing them (needed to find matchers)\n const sEntriesResult = await sqlite.execute({\n sql: \"SELECT participant_name, participant_id, numbers FROM entries WHERE giveaway_id = ?\",\n args: [sid],\n });\n\n // Insert winner\n await sqlite.execute({\n sql: \"INSERT INTO winners (giveaway_id, winning_number, prize_description) VALUES (?, ?, ?)\",\n args: [sid, sWinning, \"Scheduled auto-draw winner\"],\n });\n\n // Find matchers BEFORE clearing entries\n const sWinnerIds: string[] = [];\n for (const row of sEntriesResult.rows) {\n const nums = JSON.parse(row.numbers as string) as number[];\n if (nums.includes(sWinning)) {\n sWinnerIds.push(row.participant_id as string);\n }\n }\n\n // Send winner announcement to Discord webhook (with role ping) — always fires\n const sWebhookUrl = Deno.env.get(\"GIVEAWAY_DISCORD_WEBHOOK\");\n if (sWebhookUrl) {\n try {\n const WINNER_ROLE_ID = \"1462179730923982941\";\n const sWinnerValue = sWinnerIds.length > 0\n ? sWinnerIds.map((id) => `<@${id}>`).join(\", \")\n : \"No match found for this number.\";\n // Build combined entry list for the announcement\n const sEntryLines = sEntriesResult.rows.map((row: Record) => {\n const nums = JSON.parse(row.numbers as string) as number[];\n const pid = row.participant_id as string;\n const isNumeric = /^\\d{17,19}$/.test(pid);\n const mention = isNumeric ? `<@${pid}>` : pid;\n return `${mention} — ${nums.join(\", \")}`;\n });\n const sEntryList = sEntryLines.length > 0\n ? sEntryLines.join(\"\\n\").slice(0, 1024)\n : \"No entries.\";\n const embed = {\n title: `🎉 Winner: ${sName}`,\n fields: [\n { name: \"🔢 Winning Number\", value: String(sWinning), inline: true },\n { name: \"🏆 Winner(s)\", value: sWinnerValue, inline: false },\n { name: \"🎁 Prize\", value: \"Scheduled auto-draw winner\", inline: false },\n { name: \"📊 Total Entries\", value: String(sEntriesResult.rows.length), inline: true },\n { name: \"📋 All Entries\", value: sEntryList, inline: false },\n { name: \"🔗 Enter Here\", value: \"https://ddrp-giveaways.val.run\" },\n ],\n color: 0xc41e3a,\n timestamp: new Date().toISOString(),\n footer: { text: \"DDRP Giveaways · Winner Announcement\" },\n };\n await fetch(sWebhookUrl, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n content: `<@&${WINNER_ROLE_ID}>`,\n embeds: [embed],\n allowed_mentions: { roles: [WINNER_ROLE_ID] },\n }),\n });\n } catch (e) {\n console.error(\"Failed to send Discord winner announcement:\", e);\n }\n }\n\n // Clear entries for the next round\n await sqlite.execute({ sql: \"DELETE FROM entries WHERE giveaway_id = ?\", args: [sid] });\n\n // Set next draw date\n const nextDraw = new Date(Date.now() + sInterval * 86400000).toISOString();\n await sqlite.execute({\n sql: \"UPDATE giveaways SET next_draw_at = ?, updated_at = datetime('now') WHERE id = ?\",\n args: [nextDraw, sid],\n });\n\n // Notify owner\n const sOwnerEmail = Deno.env.get(\"OWNER_EMAIL\");\n if (sOwnerEmail) {\n try {\n await email({\n to: sOwnerEmail,\n subject: `📅 Scheduled draw: ${sName}`,\n text: `Scheduled auto-draw for \"${sName}\".\\n\\nWinning number: ${sWinning}\\nNext draw: ${nextDraw}`,\n });\n } catch (e) {\n console.error(\"Failed to send scheduled draw email:\", e);\n }\n }\n\n console.log(`Scheduled draw for \"${sName}\": winning number ${sWinning}`);\n }\n\n // Clean up expired owner sessions\n await sqlite.execute(\"DELETE FROM owner_sessions WHERE expires_at < datetime('now')\");\n}\n",[],[106],"216614e6-7881-4097-8292-87a412f1487d",["D",1785715480085],"legacyEnvVars","httpPrivacy","description","Giveaway system with owner dashboard, entries & private notes","imageUrl","userId","12cf16a3-2a6a-421b-b356-b38cc8b42700","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","tursoName","216614e678814097829287a412f1487d","tursoHostname","216614e678814097829287a412f1487d-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789648255466],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_160":156},"org",{"_11":12,"_153":154,"_155":156,"_121":122,"_157":158,"_159":51},"branch",{"_17":108,"_13":16,"_36":64,"_42":114,"_45":37,"_46":44,"_150":53,"_151":43,"_152":56,"_57":14,"_54":12},"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","Chevelle Ezell","avatar","https://lh3.googleusercontent.com/a/ACg8ocJD2GClHcBju4Xwk2TYAuiheZvOXV2UmcqQ4cPAYsoXDR0zeg=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":114,"_13":14,"_38":209,"_49":-5,"_116":51,"_52":53,"_117":53,"_118":119,"_120":-5,"_121":122,"_123":83,"_124":68,"_125":-5,"_126":-5,"_127":100,"_55":56,"_128":129,"_130":131,"_132":210,"_134":-5,"_135":136,"_137":136,"_138":139,"_140":139,"_141":139,"_142":136,"_143":136,"_144":211,"_146":212,"_148":213,"_50":51},[197,198,199,200],"files",[197,198,199,200],"counts",{"_187":34,"_188":100,"_189":34,"_35":190,"_191":192},[],{"_36":59,"_13":19,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":68,"_38":69,"_17":70,"_71":24,"_72":73,"_74":51,"_75":-5,"_18":186},"upstreamProject",{"_36":43,"_13":58,"_118":184,"_120":-5,"_52":53,"_144":185},"upstreamBranch",{"_36":37,"_38":182,"_40":183,"_13":16,"_42":43,"_17":44,"_45":-5,"_46":-5,"_47":48,"_49":-5,"_50":51,"_52":53,"_54":12,"_55":56,"_57":58},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1785713332787],["D",1785715285109],"Private webhook relay for storing incoming POSTs",{"_11":12,"_160":156},[19],"pulls","branches","forks",{"_193":195,"_196":34},"connections",{"_193":34,"_194":34},"count","unfilledCount",5,"emptyCount",{"_36":105,"_13":106,"_60":107,"_62":-5,"_63":64,"_65":108,"_67":68,"_38":109,"_17":110,"_71":101,"_72":111,"_74":51,"_75":-5,"_89":207,"_18":208},{"_36":95,"_13":96,"_60":97,"_62":-5,"_63":64,"_65":98,"_67":68,"_38":99,"_17":100,"_71":101,"_72":102,"_74":51,"_75":-5,"_89":205,"_18":206},{"_36":59,"_13":19,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":68,"_38":92,"_17":70,"_71":24,"_72":73,"_74":51,"_75":-5,"_89":203,"_18":204},{"_36":81,"_13":82,"_60":83,"_62":-5,"_63":64,"_65":32,"_67":68,"_38":84,"_17":85,"_71":86,"_72":87,"_74":51,"_75":88,"_89":201,"_18":202},[],[82],[],[19],[],[96],[],[106],["D",1785715480085],["D",1789648255466],{"_11":12,"_160":156},{"_11":12,"_153":154,"_155":156,"_121":122,"_157":158,"_159":51},{"_17":108,"_13":16,"_36":64,"_42":114,"_45":37,"_46":44,"_150":53,"_151":43,"_152":56,"_57":14,"_54":12},"ctx",{"_144":-5,"_179":247,"_248":249,"_250":251,"_252":51,"_253":51,"_254":51,"_255":68,"_256":-5,"_257":-7,"_258":-7,"_259":34,"_260":51,"_261":51,"_262":-5,"_263":51,"_264":51,"_265":51,"_266":-5},"ENV",{"_218":219,"_220":221,"_222":16,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240,"_241":242,"_243":244,"_245":246},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","a3e067d4463eea85f6334f8e583e8516ae58c4f6","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

DDRP Giveaways

Active Giveaways

Submit Your Entry

My Entries

Owner Access

📊 Owner Dashboard