[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_178":179,"_180":181},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":37,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":37,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",20,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_34":35,"_36":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","client.ts","latestPath","fileId","14ae918e-b12d-11f1-933a-1607ee4eb77e","name","new-file-582.ts","fileType","script","content","","createdAt",["D",1789494328242],"branchVersion","branchId","efce13a8-4703-42d3-8163-67565ac1ccd7","id","62ce43df-b7a2-4c8c-9371-49a28e628ca7","Insideout",["D",1789473375240],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","47eaf13b-b72f-4418-ae2f-ebe9fff309ae","pinnedFileId","742edec4-b0fc-11f1-b0fe-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0783d-81e8-754f-ad5a-c8c2fb0c005f","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":54,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",32,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","AyanAfzal","handle","displayName","Rayan Bhatti","avatar","https://lh3.googleusercontent.com/a/ACg8ocLHYtPrlNBVkdnNY7c7Sp49jHoTN9_El-TKpOlHxwIPQn6Saw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":174,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":37,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":175,"_80":176,"_82":177,"_84":25},"tree",[161,162,163],"files",[161,162,163],"counts",{"_151":62,"_152":136,"_153":62,"_154":155,"_156":157},"contents",[126,127,128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":148,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_134":25,"_38":149,"_13":136,"_34":35,"_36":37,"_24":25,"_137":-5,"_27":150},{"_43":139,"_32":140,"_30":56,"_132":-5,"_41":42,"_40":141,"_134":25,"_38":142,"_13":143,"_34":144,"_36":145,"_24":25,"_137":146,"_27":147},{"_43":129,"_32":130,"_30":131,"_132":-5,"_41":42,"_40":133,"_134":25,"_38":135,"_13":136,"_34":35,"_36":37,"_24":25,"_137":-5,"_27":138},"965157d8-16ec-4c77-a57c-20b5f2631296","page.ts","032725c0-b12d-11f1-bace-1607ee4eb77e","parentId",18,"latest",["D",1789494257241],1,"label",[130],"2857d350-d96b-4e2b-86d2-09b1a05c1c86","main.ts",16,["D",1789494213332],7,"http","/**\n * INSIDEOUT SPORTS MANAGEMENT — single-file Val Town HTTP val (Deno / TypeScript)\n * ------------------------------------------------------------------------------\n * Public site + Player Portal + Registration + Admin panel in ONE file.\n * Persistence: Val Town std/blob (auto-detected). Falls back to in-memory if the\n * blob module is unavailable, so the val still runs anywhere.\n *\n * Admin sign-in: email + password. Override with env vars ADMIN_EMAIL and\n * ADMIN_PASSWORD in the val's settings (strongly recommended if the val is public).\n */\n\nimport { SHELL, TAIL } from \"./page.ts\";\nimport { CLIENT } from \"./client.ts\";\n\nconst BLOB_KEY = \"insideout_db_v1\";\n\nfunction envOr(key: string, fallback: string): string {\n try {\n const v = Deno.env.get(key);\n if (v && v.length > 0) return v;\n } catch (_e) { /* env not available */ }\n return fallback;\n}\n\nfunction adminPassword(): string {\n return envOr(\"ADMIN_PASSWORD\", \"Insideoutsports123\");\n}\n\nfunction adminEmail(): string {\n return envOr(\"ADMIN_EMAIL\", \"insideoutsportsuk@gmail.com\").toLowerCase();\n}\n\n/* ----------------------------------------------------------------------------\n * SEED DATA\n * -------------------------------------------------------------------------- */\n\nfunction seed(): any {\n const now = Date.now();\n return {\n stats: [\n { id: \"s1\", label: \"Athletes under management\", value: 184, suffix: \"+\" },\n { id: \"s2\", label: \"Sports properties operated\", value: 26, suffix: \"\" },\n { id: \"s3\", label: \"Brand deals closed\", value: 340, suffix: \"+\" },\n { id: \"s4\", label: \"Contract renewal rate\", value: 96, suffix: \"%\" },\n ],\n partners: [\n {\n id: \"p1\",\n name: \"Apex Hydration\",\n logo: \"\",\n sector: \"Sports nutrition\",\n },\n { id: \"p2\", name: \"Vertex Motors\", logo: \"\", sector: \"Automotive\" },\n { id: \"p3\", name: \"Northbank Financial\", logo: \"\", sector: \"Banking\" },\n { id: \"p4\", name: \"Kite Telecom\", logo: \"\", sector: \"Telecom\" },\n { id: \"p5\", name: \"Halcyon Airways\", logo: \"\", sector: \"Aviation\" },\n { id: \"p6\", name: \"Foundry Athletic\", logo: \"\", sector: \"Footwear\" },\n {\n id: \"p7\",\n name: \"Meridian Broadcast\",\n logo: \"\",\n sector: \"Media rights\",\n },\n { id: \"p8\", name: \"Sable Energy\", logo: \"\", sector: \"Energy\" },\n ],\n players: [\n {\n id: \"a1\",\n ref: \"IO-7HF2QK\",\n status: \"approved\",\n featured: true,\n fullName: \"Zain Ul Abideen\",\n email: \"zain@example.com\",\n phone: \"+92 300 0000001\",\n country: \"Pakistan\",\n city: \"Lahore\",\n sport: \"Cricket\",\n position: \"Right-arm fast bowler\",\n level: \"First-class\",\n club: \"Lahore Qalandars Academy\",\n dob: \"2002-04-11\",\n height: \"188\",\n weight: \"82\",\n instagram: \"@zain.pace\",\n youtube: \"\",\n highlight: \"\",\n bio:\n \"Express pace bowler with a four-season first-class record and a top speed of 146 kph.\",\n createdAt: now - 86400000 * 42,\n decidedAt: now - 86400000 * 35,\n },\n {\n id: \"a2\",\n ref: \"IO-3PLX9M\",\n status: \"approved\",\n featured: true,\n fullName: \"Amara Okonkwo\",\n email: \"amara@example.com\",\n phone: \"+234 802 0000002\",\n country: \"Nigeria\",\n city: \"Lagos\",\n sport: \"Athletics\",\n position: \"400m hurdles\",\n level: \"International\",\n club: \"Lagos Track Club\",\n dob: \"2001-09-02\",\n height: \"175\",\n weight: \"63\",\n instagram: \"@amararuns\",\n youtube: \"\",\n highlight: \"\",\n bio:\n \"National record holder at 400m hurdles and a two-time continental medallist.\",\n createdAt: now - 86400000 * 61,\n decidedAt: now - 86400000 * 54,\n },\n {\n id: \"a3\",\n ref: \"IO-5KD8TR\",\n status: \"approved\",\n featured: true,\n fullName: \"Diego Marchetti\",\n email: \"diego@example.com\",\n phone: \"+39 340 0000003\",\n country: \"Italy\",\n city: \"Turin\",\n sport: \"Football\",\n position: \"Attacking midfielder\",\n level: \"Professional\",\n club: \"Serie B side\",\n dob: \"2003-01-27\",\n height: \"179\",\n weight: \"72\",\n instagram: \"@d.marchetti\",\n youtube: \"\",\n highlight: \"\",\n bio:\n \"Left-footed playmaker, 14 goal contributions last season, out of contract in June.\",\n createdAt: now - 86400000 * 28,\n decidedAt: now - 86400000 * 20,\n },\n {\n id: \"a4\",\n ref: \"IO-9WQ4ZC\",\n status: \"pending\",\n featured: false,\n fullName: \"Hina Raza\",\n email: \"hina@example.com\",\n phone: \"+92 321 0000004\",\n country: \"Pakistan\",\n city: \"Karachi\",\n sport: \"Squash\",\n position: \"Singles\",\n level: \"National\",\n club: \"Karachi Squash Complex\",\n dob: \"2005-06-19\",\n height: \"168\",\n weight: \"58\",\n instagram: \"@hina.squash\",\n youtube: \"\",\n highlight: \"\",\n bio:\n \"Junior national champion looking for international tour representation.\",\n createdAt: now - 86400000 * 3,\n decidedAt: 0,\n },\n ],\n team: [\n {\n id: \"t1\",\n email: \"founder@insideout.sport\",\n name: \"Founder\",\n role: \"Owner\",\n invitedAt: now - 86400000 * 200,\n },\n {\n id: \"t2\",\n email: \"ops@insideout.sport\",\n name: \"Operations\",\n role: \"Manager\",\n invitedAt: now - 86400000 * 120,\n },\n ],\n testimonials: [\n {\n id: \"q1\",\n quote:\n \"They renegotiated my contract in eleven days and found me a boot deal I did not know existed. I train, they handle the rest.\",\n name: \"Diego Marchetti\",\n role: \"Attacking midfielder\",\n },\n {\n id: \"q2\",\n quote:\n \"Insideout treated a women's squash career like a serious commercial asset. Nobody else in the region was doing that.\",\n name: \"Hina Raza\",\n role: \"National squash champion\",\n },\n {\n id: \"q3\",\n quote:\n \"We ran a six-city grassroots property with them. Clean operations, on-time reporting, and the sponsor renewed for three years.\",\n name: \"Apex Hydration\",\n role: \"Regional marketing lead\",\n },\n ],\n news: [\n {\n id: \"n1\",\n date: \"2026-08-14\",\n tag: \"Signing\",\n title: \"Three first-class cricketers join the management roster\",\n excerpt:\n \"The pace trio signs multi-year representation covering playing contracts, endorsements and image rights.\",\n },\n {\n id: \"n2\",\n date: \"2026-07-02\",\n tag: \"Property\",\n title:\n \"Insideout to operate the Northbank Youth League for a third season\",\n excerpt:\n \"Twelve clubs, 240 fixtures and a broadcast package now handled end to end by the operations wing.\",\n },\n {\n id: \"n3\",\n date: \"2026-05-23\",\n tag: \"Sportswear\",\n title:\n \"Insideout Sportswear opens its performance kit line to club orders\",\n excerpt:\n \"Custom match kits, training wear and travel sets, produced in-house with a four-week turnaround.\",\n },\n ],\n stars: [],\n messages: [],\n };\n}\n\n/* ----------------------------------------------------------------------------\n * STORAGE\n * -------------------------------------------------------------------------- */\n\nlet DB: any = null;\nlet blobApi: any = null;\nlet blobTried = false;\n\nasync function getBlob(): Promise {\n if (blobTried) return blobApi;\n blobTried = true;\n try {\n const mod: any = await import(\"https://esm.town/v/std/blob\");\n blobApi = mod.blob;\n } catch (_e) {\n blobApi = null;\n }\n return blobApi;\n}\n\nasync function load(): Promise {\n if (DB) return DB;\n const b = await getBlob();\n if (b) {\n try {\n const saved = await b.getJSON(BLOB_KEY);\n if (saved && saved.stats) {\n if (!Array.isArray(saved.stars)) saved.stars = [];\n DB = saved;\n return DB;\n }\n } catch (_e) { /* first run */ }\n }\n DB = seed();\n await save();\n return DB;\n}\n\nasync function save(): Promise {\n const b = await getBlob();\n if (!b) return;\n try {\n await b.setJSON(BLOB_KEY, DB);\n } catch (_e) { /* read-only env */ }\n}\n\nconst MEM_PHOTOS: Record = {};\n\nasync function photoPut(id: string, type: string, data: string): Promise {\n MEM_PHOTOS[id] = { type, data };\n const b = await getBlob();\n if (!b) return;\n try {\n await b.setJSON(\"insideout_photo_\" + id, { type, data });\n } catch (_e) { /* read-only */ }\n}\n\nasync function photoGet(id: string): Promise {\n if (MEM_PHOTOS[id]) return MEM_PHOTOS[id];\n const b = await getBlob();\n if (!b) return null;\n try {\n const v = await b.getJSON(\"insideout_photo_\" + id);\n if (v && v.data) {\n MEM_PHOTOS[id] = v;\n return v;\n }\n } catch (_e) { /* missing */ }\n return null;\n}\n\nasync function photoDel(id: string): Promise {\n delete MEM_PHOTOS[id];\n const b = await getBlob();\n if (!b) return;\n try {\n await b.delete(\"insideout_photo_\" + id);\n } catch (_e) { /* missing */ }\n}\n\n/* ----------------------------------------------------------------------------\n * HELPERS\n * -------------------------------------------------------------------------- */\n\nfunction json(data: any, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n \"content-type\": \"application/json; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n}\n\nfunction uid(prefix: string): string {\n return prefix + Math.random().toString(36).slice(2, 9) +\n Date.now().toString(36).slice(-4);\n}\n\nfunction refCode(): string {\n const alphabet = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let out = \"\";\n for (let i = 0; i < 6; i++) {\n out += alphabet[Math.floor(Math.random() * alphabet.length)];\n }\n return \"IO-\" + out;\n}\n\nfunction clean(v: any, max = 500): string {\n return String(v == null ? \"\" : v).trim().slice(0, max);\n}\n\nfunction tokenFor(pw: string): string {\n const bytes = new TextEncoder().encode(pw);\n let bin = \"\";\n for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i]);\n return \"io.\" + btoa(bin);\n}\n\nfunction authorised(req: Request): boolean {\n const h = req.headers.get(\"authorization\") || \"\";\n const t = h.replace(/^Bearer\\s+/i, \"\").trim();\n return t.length > 0 && t === tokenFor(adminEmail() + \":\" + adminPassword());\n}\n\nfunction publicPayload(db: any): any {\n return {\n stats: db.stats,\n partners: db.partners,\n testimonials: db.testimonials,\n news: db.news,\n stars: (db.stars || []).slice().sort((a: any, b: any) =>\n (a.order || 0) - (b.order || 0)\n ),\n roster: db.players\n .filter((p: any) => p.status === \"approved\")\n .map((p: any) => ({\n id: p.id,\n fullName: p.fullName,\n sport: p.sport,\n position: p.position,\n country: p.country,\n level: p.level,\n club: p.club,\n bio: p.bio,\n instagram: p.instagram,\n featured: !!p.featured,\n })),\n };\n}\n\n/* ----------------------------------------------------------------------------\n * API\n * -------------------------------------------------------------------------- */\n\nasync function api(req: Request, path: string): Promise {\n const db = await load();\n\n if (path.startsWith(\"/api/photo/\") && req.method === \"GET\") {\n const ph = await photoGet(path.slice(11));\n if (!ph) return json({ ok: false, error: \"Not found.\" }, 404);\n const bin = atob(ph.data);\n const bytes = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);\n return new Response(bytes, {\n headers: {\n \"content-type\": ph.type,\n \"cache-control\": \"public, max-age=86400\",\n },\n });\n }\n\n if (path === \"/api/public\" && req.method === \"GET\") {\n return json({ ok: true, data: publicPayload(db) });\n }\n\n if (path === \"/api/register\" && req.method === \"POST\") {\n const b = await req.json().catch(() => ({}));\n const fullName = clean(b.fullName, 120);\n const email = clean(b.email, 160).toLowerCase();\n const sport = clean(b.sport, 80);\n if (!fullName || !email || !sport) {\n return json(\n { ok: false, error: \"Name, email and sport are required.\" },\n 400,\n );\n }\n if (!/^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$/.test(email)) {\n return json(\n { ok: false, error: \"That email address is not valid.\" },\n 400,\n );\n }\n const existing = db.players.find((p: any) => p.email === email);\n if (existing) {\n return json({\n ok: false,\n error: \"An application already exists for this email. Reference \" +\n existing.ref + \".\",\n }, 409);\n }\n const player = {\n id: uid(\"a_\"),\n ref: refCode(),\n status: \"pending\",\n featured: false,\n fullName,\n email,\n phone: clean(b.phone, 40),\n country: clean(b.country, 80),\n city: clean(b.city, 80),\n sport,\n position: clean(b.position, 80),\n level: clean(b.level, 60),\n club: clean(b.club, 120),\n dob: clean(b.dob, 20),\n height: clean(b.height, 10),\n weight: clean(b.weight, 10),\n instagram: clean(b.instagram, 120),\n youtube: clean(b.youtube, 200),\n highlight: clean(b.highlight, 300),\n bio: clean(b.bio, 1200),\n createdAt: Date.now(),\n decidedAt: 0,\n };\n db.players.unshift(player);\n await save();\n return json({ ok: true, ref: player.ref });\n }\n\n if (path === \"/api/track\" && req.method === \"POST\") {\n const b = await req.json().catch(() => ({}));\n const key = clean(b.key, 160).toLowerCase();\n if (!key) {\n return json(\n { ok: false, error: \"Enter your reference code or email.\" },\n 400,\n );\n }\n const p = db.players.find((x: any) =>\n x.ref.toLowerCase() === key || x.email.toLowerCase() === key\n );\n if (!p) {\n return json({\n ok: false,\n error: \"No application found for that reference or email.\",\n }, 404);\n }\n return json({\n ok: true,\n player: {\n ref: p.ref,\n status: p.status,\n fullName: p.fullName,\n email: p.email,\n sport: p.sport,\n position: p.position,\n level: p.level,\n club: p.club,\n country: p.country,\n city: p.city,\n createdAt: p.createdAt,\n decidedAt: p.decidedAt,\n bio: p.bio,\n },\n });\n }\n\n if (path === \"/api/contact\" && req.method === \"POST\") {\n const b = await req.json().catch(() => ({}));\n const name = clean(b.name, 120);\n const email = clean(b.email, 160);\n const body = clean(b.message, 2000);\n if (!name || !email || !body) {\n return json(\n { ok: false, error: \"Fill in every field before sending.\" },\n 400,\n );\n }\n db.messages.unshift({\n id: uid(\"m_\"),\n name,\n email,\n subject: clean(b.subject, 160),\n message: body,\n createdAt: Date.now(),\n });\n db.messages = db.messages.slice(0, 300);\n await save();\n return json({ ok: true });\n }\n\n if (path === \"/api/admin/login\" && req.method === \"POST\") {\n const b = await req.json().catch(() => ({}));\n const em = clean(b.email, 200).toLowerCase();\n if (em !== adminEmail() || clean(b.password, 200) !== adminPassword()) {\n return json({ ok: false, error: \"Wrong email or password.\" }, 401);\n }\n return json({\n ok: true,\n token: tokenFor(adminEmail() + \":\" + adminPassword()),\n });\n }\n\n if (path === \"/api/admin\" && req.method === \"POST\") {\n if (!authorised(req)) {\n return json({ ok: false, error: \"Not signed in.\" }, 401);\n }\n const b = await req.json().catch(() => ({}));\n const action = clean(b.action, 60);\n const d = b.payload || {};\n\n if (action === \"data\") {\n return json({\n ok: true,\n data: {\n stats: db.stats,\n partners: db.partners,\n players: db.players,\n team: db.team,\n messages: db.messages,\n news: db.news,\n },\n });\n }\n\n if (action === \"stats.save\") {\n const rows = Array.isArray(d.stats) ? d.stats : [];\n db.stats = rows.slice(0, 8).map((s: any, i: number) => ({\n id: clean(s.id, 20) || \"s\" + (i + 1),\n label: clean(s.label, 60) || \"Metric\",\n value: Math.max(0, Math.min(9999999, Number(s.value) || 0)),\n suffix: clean(s.suffix, 4),\n }));\n await save();\n return json({ ok: true, stats: db.stats });\n }\n\n if (action === \"stat.add\") {\n if (db.stats.length >= 8) {\n return json({ ok: false, error: \"Maximum of eight metrics.\" }, 400);\n }\n db.stats.push({\n id: uid(\"s_\"),\n label: \"New metric\",\n value: 0,\n suffix: \"\",\n });\n await save();\n return json({ ok: true, stats: db.stats });\n }\n\n if (action === \"stat.remove\") {\n db.stats = db.stats.filter((s: any) => s.id !== clean(d.id, 40));\n await save();\n return json({ ok: true, stats: db.stats });\n }\n\n if (action === \"partner.save\") {\n const name = clean(d.name, 80);\n if (!name) {\n return json({ ok: false, error: \"Partner name is required.\" }, 400);\n }\n const id = clean(d.id, 40);\n const found = id ? db.partners.find((p: any) => p.id === id) : null;\n if (found) {\n found.name = name;\n found.logo = clean(d.logo, 500);\n found.sector = clean(d.sector, 80);\n } else {\n db.partners.push({\n id: uid(\"p_\"),\n name,\n logo: clean(d.logo, 500),\n sector: clean(d.sector, 80),\n });\n }\n await save();\n return json({ ok: true, partners: db.partners });\n }\n\n if (action === \"partner.remove\") {\n db.partners = db.partners.filter((p: any) => p.id !== clean(d.id, 40));\n await save();\n return json({ ok: true, partners: db.partners });\n }\n\n if (action === \"star.save\") {\n const st = d.star || {};\n const sid = clean(st.id, 40) || uid(\"st\");\n const name = clean(st.name, 90);\n if (!name) {\n return json({ ok: false, error: \"Player name is required.\" }, 400);\n }\n if (!Array.isArray(db.stars)) db.stars = [];\n const existing = db.stars.find((x: any) => x.id === sid);\n let hasPhoto = existing ? !!existing.photo : false;\n const img = typeof st.photoData === \"string\" ? st.photoData : \"\";\n if (img) {\n const m = img.match(/^data:(image\\/[a-z+]+);base64,(.+)$/i);\n if (!m) {\n return json({\n ok: false,\n error: \"That file is not a supported image.\",\n }, 400);\n }\n if (m[2].length > 900000) {\n return json({ ok: false, error: \"That image is too large.\" }, 400);\n }\n await photoPut(sid, m[1], m[2]);\n hasPhoto = true;\n }\n const rec = {\n id: sid,\n name,\n country: clean(st.country, 90),\n stats: clean(st.stats, 800),\n photo: hasPhoto,\n rev: Date.now(),\n order: Number(st.order) || 0,\n };\n if (existing) Object.assign(existing, rec);\n else db.stars.push(rec);\n await save();\n return json({ ok: true, stars: db.stars });\n }\n\n if (action === \"star.remove\") {\n const sid = clean(d.id, 40);\n db.stars = (db.stars || []).filter((x: any) => x.id !== sid);\n await photoDel(sid);\n await save();\n return json({ ok: true, stars: db.stars });\n }\n\n if (action === \"team.add\") {\n const email = clean(d.email, 160).toLowerCase();\n if (!/^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$/.test(email)) {\n return json({ ok: false, error: \"Enter a valid email address.\" }, 400);\n }\n if (db.team.find((t: any) => t.email === email)) {\n return json(\n { ok: false, error: \"That person is already on the team.\" },\n 409,\n );\n }\n db.team.push({\n id: uid(\"t_\"),\n email,\n name: clean(d.name, 80) || email.split(\"@\")[0],\n role: clean(d.role, 40) || \"Staff\",\n invitedAt: Date.now(),\n });\n await save();\n return json({ ok: true, team: db.team });\n }\n\n if (action === \"team.remove\") {\n db.team = db.team.filter((t: any) => t.id !== clean(d.id, 40));\n await save();\n return json({ ok: true, team: db.team });\n }\n\n if (action === \"player.status\") {\n const p = db.players.find((x: any) => x.id === clean(d.id, 40));\n if (!p) return json({ ok: false, error: \"Application not found.\" }, 404);\n const status = clean(d.status, 20);\n if ([\"pending\", \"approved\", \"denied\"].indexOf(status) < 0) {\n return json({ ok: false, error: \"Unknown status.\" }, 400);\n }\n p.status = status;\n p.decidedAt = status === \"pending\" ? 0 : Date.now();\n if (status !== \"approved\") p.featured = false;\n await save();\n return json({ ok: true, players: db.players });\n }\n\n if (action === \"player.feature\") {\n const p = db.players.find((x: any) => x.id === clean(d.id, 40));\n if (!p) return json({ ok: false, error: \"Application not found.\" }, 404);\n if (p.status !== \"approved\") {\n return json({\n ok: false,\n error: \"Approve the athlete before featuring them.\",\n }, 400);\n }\n p.featured = !p.featured;\n await save();\n return json({ ok: true, players: db.players });\n }\n\n if (action === \"player.remove\") {\n db.players = db.players.filter((x: any) => x.id !== clean(d.id, 40));\n await save();\n return json({ ok: true, players: db.players });\n }\n\n if (action === \"news.add\") {\n const title = clean(d.title, 160);\n if (!title) {\n return json({ ok: false, error: \"Headline is required.\" }, 400);\n }\n db.news.unshift({\n id: uid(\"n_\"),\n date: clean(d.date, 20) || new Date().toISOString().slice(0, 10),\n tag: clean(d.tag, 30) || \"Update\",\n title,\n excerpt: clean(d.excerpt, 400),\n });\n db.news = db.news.slice(0, 24);\n await save();\n return json({ ok: true, news: db.news });\n }\n\n if (action === \"news.remove\") {\n db.news = db.news.filter((n: any) => n.id !== clean(d.id, 40));\n await save();\n return json({ ok: true, news: db.news });\n }\n\n if (action === \"message.remove\") {\n db.messages = db.messages.filter((m: any) => m.id !== clean(d.id, 40));\n await save();\n return json({ ok: true, messages: db.messages });\n }\n\n if (action === \"reset\") {\n DB = seed();\n await save();\n return json({ ok: true });\n }\n\n return json({ ok: false, error: \"Unknown action.\" }, 400);\n }\n\n return json({ ok: false, error: \"Route not found.\" }, 404);\n}\n\n/* ----------------------------------------------------------------------------\n * PAGE\n * -------------------------------------------------------------------------- */\n\nconst PAGE = SHELL + \"

Diff · v20