Role Mirror

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_172":173,"_174":175},"routes/_app.x.$handle.$name",{"_100":99,"_32":45,"_109":90,"_27":53,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":59,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",13,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","361e5f6e-ac5c-11f1-8a28-1607ee4eb77e","name","fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ADMIN_KEY = \"bechstein-admin-2026\";\n\nasync function ensureTables() {\n await sqlite.execute(`create table if not exists people (\n id text primary key,\n name text,\n token text,\n created_at text\n )`);\n await sqlite.execute(`create table if not exists responses (\n doc_id text primary key,\n respondent_id text,\n subject_id text,\n is_self integer,\n answers text,\n submitted integer,\n updated_at text\n )`);\n await sqlite.execute(`create table if not exists extra_responses (\n person_id text,\n q_key text,\n answer text,\n updated_at text,\n primary key (person_id, q_key)\n )`);\n try {\n await sqlite.execute(\"alter table people add column token text\");\n } catch (e) {}\n const rows = await sqlite.execute({\n sql: \"select id, token from people\",\n args: [],\n });\n for (const r of rows.rows as any[]) {\n if (!r.token) {\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n await sqlite.execute({\n sql: \"update people set token = ? where id = ?\",\n args: [token, r.id],\n });\n }\n }\n}\n\nfunction jsonResponse(data: unknown, status?: number) {\n return new Response(JSON.stringify(data), {\n status: status || 200,\n headers: { \"content-type\": \"application/json;charset=utf-8\" },\n });\n}\n\nasync function listPeople() {\n const result = await sqlite.execute({\n sql: \"select id, name, created_at from people\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n createdAt: r.created_at,\n }));\n}\n\nasync function adminListPeople(origin: string) {\n const result = await sqlite.execute({\n sql:\n \"select id, name, token, created_at from people order by created_at asc\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n token: r.token,\n createdAt: r.created_at,\n link: origin + \"/?u=\" + r.token,\n }));\n}\n\nasync function addPerson(name: string) {\n name = (name || \"\").toString().trim().slice(0, 60);\n if (!name) throw new Error(\"empty name\");\n const id = crypto.randomUUID();\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n const createdAt = new Date().toISOString();\n await sqlite.execute({\n sql: \"insert into people (id, name, token, created_at) values (?, ?, ?, ?)\",\n args: [id, name, token, createdAt],\n });\n return { id, name, token, createdAt };\n}\n\nasync function deletePerson(id: string) {\n await sqlite.execute({ sql: \"delete from people where id = ?\", args: [id] });\n await sqlite.execute({\n sql: \"delete from responses where respondent_id = ? or subject_id = ?\",\n args: [id, id],\n });\n return { ok: true };\n}\n\nasync function saveExtraResponse(\n personId: string,\n qKey: string,\n answer: string,\n) {\n const updatedAt = new Date().toISOString();\n await sqlite.execute({\n sql: `insert into extra_responses (person_id, q_key, answer, updated_at)\n values (?, ?, ?, ?)\n on conflict(person_id, q_key) do update set\n answer = excluded.answer,\n updated_at = excluded.updated_at`,\n args: [personId, qKey, answer, updatedAt],\n });\n return { ok: true };\n}\n\nasync function getMyExtraResponses(personId: string) {\n const result = await sqlite.execute({\n sql: \"select q_key, answer from extra_responses where person_id = ?\",\n args: [personId],\n });\n const out: Record = {};\n for (const r of result.rows as any[]) out[r.q_key] = r.answer;\n return out;\n}\n\nasync function listExtraResponses(qKey: string) {\n const result = await sqlite.execute({\n sql:\n \"select answer from extra_responses where q_key = ? and answer is not null and trim(answer) != ''\",\n args: [qKey],\n });\n return (result.rows as any[]).map((r) => r.answer);\n}\n\nasync function resolveToken(token: string) {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"select id, name from people where token = ?\",\n args: [token],\n });\n if (!result.rows.length) return null;\n const r = result.rows[0] as any;\n return { id: r.id, name: r.name };\n}\n\nfunction mapResponseRow(r: any) {\n return {\n docId: r.doc_id,\n respondentId: r.respondent_id,\n subjectId: r.subject_id,\n isSelf: !!r.is_self,\n answers: JSON.parse(r.answers || \"{}\"),\n submitted: !!r.submitted,\n updatedAt: r.updated_at,\n };\n}\n\nasync function listResponses() {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses\",\n args: [],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function listMyResponses(respondentId: string) {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses where respondent_id = ?\",\n args: [respondentId],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function saveResponse(body: any) {\n if (!body || !body.respondentId || !body.subjectId) {\n throw new Error(\"invalid response\");\n }\n const asPerson = await resolveToken(body.token || \"\");\n if (!asPerson || asPerson.id !== body.respondentId) {\n throw new Error(\"not authorized for this identity\");\n }\n const docId = body.respondentId + \"__\" + body.subjectId;\n const updatedAt = new Date().toISOString();\n const record = {\n docId,\n respondentId: body.respondentId,\n subjectId: body.subjectId,\n isSelf: !!body.isSelf,\n answers: body.answers || {},\n submitted: !!body.submitted,\n updatedAt,\n };\n await sqlite.execute({\n sql:\n `insert into responses (doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at)\n values (?, ?, ?, ?, ?, ?, ?)\n on conflict(doc_id) do update set\n is_self = excluded.is_self,\n answers = excluded.answers,\n submitted = excluded.submitted,\n updated_at = excluded.updated_at`,\n args: [\n docId,\n record.respondentId,\n record.subjectId,\n record.isSelf ? 1 : 0,\n JSON.stringify(record.answers),\n record.submitted ? 1 : 0,\n updatedAt,\n ],\n });\n return { ok: true, docId };\n}\n\nexport default async function (req: Request): Promise {\n await ensureTables();\n const url = new URL(req.url);\n\n try {\n if (url.pathname === \"/api/people\" && req.method === \"GET\") {\n return jsonResponse(await listPeople());\n }\n if (url.pathname === \"/api/resolve\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(person);\n }\n if (url.pathname === \"/api/my-responses\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await listMyResponses(person.id));\n }\n if (url.pathname === \"/api/responses\" && req.method === \"POST\") {\n const body = await req.json();\n return jsonResponse(await saveResponse(body));\n }\n if (url.pathname === \"/api/my-extra\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await getMyExtraResponses(person.id));\n }\n if (url.pathname === \"/api/extra\" && req.method === \"POST\") {\n const body = await req.json();\n const person = await resolveToken(body.token || \"\");\n if (!person || person.id !== body.personId) {\n return jsonResponse({ error: \"not authorized for this identity\" }, 403);\n }\n return jsonResponse(\n await saveExtraResponse(person.id, body.qKey, body.answer || \"\"),\n );\n }\n if (url.pathname === \"/api/admin/people\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n if (req.method === \"GET\") {\n return jsonResponse(await adminListPeople(url.origin));\n }\n if (req.method === \"POST\") {\n const body = await req.json();\n const person = await addPerson(body.name);\n return jsonResponse({\n ...person,\n link: url.origin + \"/?u=\" + person.token,\n });\n }\n if (req.method === \"DELETE\") {\n const id = url.searchParams.get(\"id\") || \"\";\n return jsonResponse(await deletePerson(id));\n }\n }\n if (url.pathname === \"/api/admin/responses\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n return jsonResponse(await listResponses());\n }\n if (url.pathname === \"/api/admin/extra\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n const qKey = url.searchParams.get(\"q\") || \"\";\n return jsonResponse(await listExtraResponses(qKey));\n }\n } catch (err: any) {\n return jsonResponse({ error: String((err && err.message) || err) }, 400);\n }\n\n return new Response(INDEX_HTML, {\n headers: { \"content-type\": \"text/html;charset=utf-8\" },\n });\n}\n\nconst INDEX_HTML = `\n\n\n\nRole Mirror\n\n\n\n\n\n\n\n

\n \n

\n\n\n\n\n`;","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ADMIN_KEY = \"bechstein-rm-2j7022lR\";\n\nasync function ensureTables() {\n await sqlite.execute(`create table if not exists people (\n id text primary key,\n name text,\n token text,\n created_at text\n )`);\n await sqlite.execute(`create table if not exists responses (\n doc_id text primary key,\n respondent_id text,\n subject_id text,\n is_self integer,\n answers text,\n submitted integer,\n updated_at text\n )`);\n await sqlite.execute(`create table if not exists extra_responses (\n person_id text,\n q_key text,\n answer text,\n updated_at text,\n primary key (person_id, q_key)\n )`);\n try {\n await sqlite.execute(\"alter table people add column token text\");\n } catch (e) {}\n const rows = await sqlite.execute({\n sql: \"select id, token from people\",\n args: [],\n });\n for (const r of rows.rows as any[]) {\n if (!r.token) {\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n await sqlite.execute({\n sql: \"update people set token = ? where id = ?\",\n args: [token, r.id],\n });\n }\n }\n}\n\nfunction jsonResponse(data: unknown, status?: number) {\n return new Response(JSON.stringify(data), {\n status: status || 200,\n headers: { \"content-type\": \"application/json;charset=utf-8\" },\n });\n}\n\nasync function listPeople() {\n const result = await sqlite.execute({\n sql: \"select id, name, created_at from people\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n createdAt: r.created_at,\n }));\n}\n\nasync function adminListPeople(origin: string) {\n const result = await sqlite.execute({\n sql:\n \"select id, name, token, created_at from people order by created_at asc\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n token: r.token,\n createdAt: r.created_at,\n link: origin + \"/?u=\" + r.token,\n }));\n}\n\nasync function addPerson(name: string) {\n name = (name || \"\").toString().trim().slice(0, 60);\n if (!name) throw new Error(\"empty name\");\n const id = crypto.randomUUID();\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n const createdAt = new Date().toISOString();\n await sqlite.execute({\n sql: \"insert into people (id, name, token, created_at) values (?, ?, ?, ?)\",\n args: [id, name, token, createdAt],\n });\n return { id, name, token, createdAt };\n}\n\nasync function deletePerson(id: string) {\n await sqlite.execute({ sql: \"delete from people where id = ?\", args: [id] });\n await sqlite.execute({\n sql: \"delete from responses where respondent_id = ? or subject_id = ?\",\n args: [id, id],\n });\n return { ok: true };\n}\n\nasync function saveExtraResponse(\n personId: string,\n qKey: string,\n answer: string,\n) {\n const updatedAt = new Date().toISOString();\n await sqlite.execute({\n sql: `insert into extra_responses (person_id, q_key, answer, updated_at)\n values (?, ?, ?, ?)\n on conflict(person_id, q_key) do update set\n answer = excluded.answer,\n updated_at = excluded.updated_at`,\n args: [personId, qKey, answer, updatedAt],\n });\n return { ok: true };\n}\n\nasync function getMyExtraResponses(personId: string) {\n const result = await sqlite.execute({\n sql: \"select q_key, answer from extra_responses where person_id = ?\",\n args: [personId],\n });\n const out: Record = {};\n for (const r of result.rows as any[]) out[r.q_key] = r.answer;\n return out;\n}\n\nasync function listExtraResponses(qKey: string) {\n const result = await sqlite.execute({\n sql:\n \"select answer from extra_responses where q_key = ? and answer is not null and trim(answer) != ''\",\n args: [qKey],\n });\n return (result.rows as any[]).map((r) => r.answer);\n}\n\nasync function resolveToken(token: string) {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"select id, name from people where token = ?\",\n args: [token],\n });\n if (!result.rows.length) return null;\n const r = result.rows[0] as any;\n return { id: r.id, name: r.name };\n}\n\nfunction mapResponseRow(r: any) {\n return {\n docId: r.doc_id,\n respondentId: r.respondent_id,\n subjectId: r.subject_id,\n isSelf: !!r.is_self,\n answers: JSON.parse(r.answers || \"{}\"),\n submitted: !!r.submitted,\n updatedAt: r.updated_at,\n };\n}\n\nasync function listResponses() {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses\",\n args: [],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function listMyResponses(respondentId: string) {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses where respondent_id = ?\",\n args: [respondentId],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function saveResponse(body: any) {\n if (!body || !body.respondentId || !body.subjectId) {\n throw new Error(\"invalid response\");\n }\n const asPerson = await resolveToken(body.token || \"\");\n if (!asPerson || asPerson.id !== body.respondentId) {\n throw new Error(\"not authorized for this identity\");\n }\n const docId = body.respondentId + \"__\" + body.subjectId;\n const updatedAt = new Date().toISOString();\n const record = {\n docId,\n respondentId: body.respondentId,\n subjectId: body.subjectId,\n isSelf: !!body.isSelf,\n answers: body.answers || {},\n submitted: !!body.submitted,\n updatedAt,\n };\n await sqlite.execute({\n sql:\n `insert into responses (doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at)\n values (?, ?, ?, ?, ?, ?, ?)\n on conflict(doc_id) do update set\n is_self = excluded.is_self,\n answers = excluded.answers,\n submitted = excluded.submitted,\n updated_at = excluded.updated_at`,\n args: [\n docId,\n record.respondentId,\n record.subjectId,\n record.isSelf ? 1 : 0,\n JSON.stringify(record.answers),\n record.submitted ? 1 : 0,\n updatedAt,\n ],\n });\n return { ok: true, docId };\n}\n\nexport default async function (req: Request): Promise {\n await ensureTables();\n const url = new URL(req.url);\n\n try {\n if (url.pathname === \"/api/people\" && req.method === \"GET\") {\n return jsonResponse(await listPeople());\n }\n if (url.pathname === \"/api/resolve\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(person);\n }\n if (url.pathname === \"/api/my-responses\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await listMyResponses(person.id));\n }\n if (url.pathname === \"/api/responses\" && req.method === \"POST\") {\n const body = await req.json();\n return jsonResponse(await saveResponse(body));\n }\n if (url.pathname === \"/api/my-extra\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await getMyExtraResponses(person.id));\n }\n if (url.pathname === \"/api/extra\" && req.method === \"POST\") {\n const body = await req.json();\n const person = await resolveToken(body.token || \"\");\n if (!person || person.id !== body.personId) {\n return jsonResponse({ error: \"not authorized for this identity\" }, 403);\n }\n return jsonResponse(\n await saveExtraResponse(person.id, body.qKey, body.answer || \"\"),\n );\n }\n if (url.pathname === \"/api/admin/people\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n if (req.method === \"GET\") {\n return jsonResponse(await adminListPeople(url.origin));\n }\n if (req.method === \"POST\") {\n const body = await req.json();\n const person = await addPerson(body.name);\n return jsonResponse({\n ...person,\n link: url.origin + \"/?u=\" + person.token,\n });\n }\n if (req.method === \"DELETE\") {\n const id = url.searchParams.get(\"id\") || \"\";\n return jsonResponse(await deletePerson(id));\n }\n }\n if (url.pathname === \"/api/admin/responses\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n return jsonResponse(await listResponses());\n }\n if (url.pathname === \"/api/admin/extra\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n const qKey = url.searchParams.get(\"q\") || \"\";\n return jsonResponse(await listExtraResponses(qKey));\n }\n } catch (err: any) {\n return jsonResponse({ error: String((err && err.message) || err) }, 400);\n }\n\n return new Response(INDEX_HTML, {\n headers: { \"content-type\": \"text/html;charset=utf-8\" },\n });\n}\n\nconst INDEX_HTML = `\n\n\n\nRole Mirror\n\n\n\n\n\n\n\n

\n \n

\n\n\n\n\n`;","createdAt",["D",1789409356441],"branchVersion","branchId","8dc20f3f-6b08-4ef9-91ef-93d8c7b7f5ae","id","8e102f10-948e-41c4-b460-d6ee9d588d22","Role-Mirror",["D",1788964746973],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","2cc5bb30-4ac8-4dde-9ad8-1ed9fce1eb4c","pinnedFileId","88917af6-ac5c-11f1-bdf6-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0869a-1f9b-76ca-b36a-aabd64b43276","tursoName","8e102f10948e41c4b460d6ee9d588d22","tursoHostname","8e102f10948e41c4b460d6ee9d588d22-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789485645684],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"isOwned",14,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","LukasBN","handle","displayName","Lukas Englert","avatar","https://lh3.googleusercontent.com/a/ACg8ocIpL4PzgJTY1qrqJS3agBxk9jBbYd4oUCTXcCQnrM-EaQClhg=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":167,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":168,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":169,"_84":170,"_86":171,"_88":25},"tree",[158,159],"files",[158,159],"counts",{"_147":63,"_148":149,"_150":63,"_151":152,"_153":154},"contents",[130,131],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":143,"_32":28,"_30":31,"_134":-5,"_41":42,"_40":14,"_136":59,"_38":144,"_13":145,"_33":34,"_35":37,"_24":25,"_141":-5,"_27":146},{"_43":132,"_32":133,"_30":57,"_134":-5,"_41":42,"_40":135,"_136":25,"_38":137,"_13":138,"_33":139,"_35":140,"_24":25,"_141":-5,"_27":142},"08f098a5-672c-408a-bf1e-74f2a7edcbdc","new-file-6993.ts","parentId",11,"latest",["D",1789381737673],8,"http","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ADMIN_KEY = \"bechstein-admin-2026\";\n\nasync function ensureTables() {\n await sqlite.execute(`create table if not exists people (\n id text primary key,\n name text,\n token text,\n created_at text\n )`);\n await sqlite.execute(`create table if not exists responses (\n doc_id text primary key,\n respondent_id text,\n subject_id text,\n is_self integer,\n answers text,\n submitted integer,\n updated_at text\n )`);\n await sqlite.execute(`create table if not exists extra_responses (\n person_id text,\n q_key text,\n answer text,\n updated_at text,\n primary key (person_id, q_key)\n )`);\n try {\n await sqlite.execute(\"alter table people add column token text\");\n } catch (e) {}\n const rows = await sqlite.execute({\n sql: \"select id, token from people\",\n args: [],\n });\n for (const r of rows.rows as any[]) {\n if (!r.token) {\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n await sqlite.execute({\n sql: \"update people set token = ? where id = ?\",\n args: [token, r.id],\n });\n }\n }\n}\n\nfunction jsonResponse(data: unknown, status?: number) {\n return new Response(JSON.stringify(data), {\n status: status || 200,\n headers: { \"content-type\": \"application/json;charset=utf-8\" },\n });\n}\n\nasync function listPeople() {\n const result = await sqlite.execute({\n sql: \"select id, name, created_at from people\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n createdAt: r.created_at,\n }));\n}\n\nasync function adminListPeople(origin: string) {\n const result = await sqlite.execute({\n sql:\n \"select id, name, token, created_at from people order by created_at asc\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n token: r.token,\n createdAt: r.created_at,\n link: origin + \"/?u=\" + r.token,\n }));\n}\n\nasync function addPerson(name: string) {\n name = (name || \"\").toString().trim().slice(0, 60);\n if (!name) throw new Error(\"empty name\");\n const id = crypto.randomUUID();\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n const createdAt = new Date().toISOString();\n await sqlite.execute({\n sql: \"insert into people (id, name, token, created_at) values (?, ?, ?, ?)\",\n args: [id, name, token, createdAt],\n });\n return { id, name, token, createdAt };\n}\n\nasync function deletePerson(id: string) {\n await sqlite.execute({ sql: \"delete from people where id = ?\", args: [id] });\n await sqlite.execute({\n sql: \"delete from responses where respondent_id = ? or subject_id = ?\",\n args: [id, id],\n });\n return { ok: true };\n}\n\nasync function saveExtraResponse(\n personId: string,\n qKey: string,\n answer: string,\n) {\n const updatedAt = new Date().toISOString();\n await sqlite.execute({\n sql: `insert into extra_responses (person_id, q_key, answer, updated_at)\n values (?, ?, ?, ?)\n on conflict(person_id, q_key) do update set\n answer = excluded.answer,\n updated_at = excluded.updated_at`,\n args: [personId, qKey, answer, updatedAt],\n });\n return { ok: true };\n}\n\nasync function getMyExtraResponses(personId: string) {\n const result = await sqlite.execute({\n sql: \"select q_key, answer from extra_responses where person_id = ?\",\n args: [personId],\n });\n const out: Record = {};\n for (const r of result.rows as any[]) out[r.q_key] = r.answer;\n return out;\n}\n\nasync function listExtraResponses(qKey: string) {\n const result = await sqlite.execute({\n sql:\n \"select answer from extra_responses where q_key = ? and answer is not null and trim(answer) != ''\",\n args: [qKey],\n });\n return (result.rows as any[]).map((r) => r.answer);\n}\n\nasync function resolveToken(token: string) {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"select id, name from people where token = ?\",\n args: [token],\n });\n if (!result.rows.length) return null;\n const r = result.rows[0] as any;\n return { id: r.id, name: r.name };\n}\n\nfunction mapResponseRow(r: any) {\n return {\n docId: r.doc_id,\n respondentId: r.respondent_id,\n subjectId: r.subject_id,\n isSelf: !!r.is_self,\n answers: JSON.parse(r.answers || \"{}\"),\n submitted: !!r.submitted,\n updatedAt: r.updated_at,\n };\n}\n\nasync function listResponses() {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses\",\n args: [],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function listMyResponses(respondentId: string) {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses where respondent_id = ?\",\n args: [respondentId],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function saveResponse(body: any) {\n if (!body || !body.respondentId || !body.subjectId) {\n throw new Error(\"invalid response\");\n }\n const asPerson = await resolveToken(body.token || \"\");\n if (!asPerson || asPerson.id !== body.respondentId) {\n throw new Error(\"not authorized for this identity\");\n }\n const docId = body.respondentId + \"__\" + body.subjectId;\n const updatedAt = new Date().toISOString();\n const record = {\n docId,\n respondentId: body.respondentId,\n subjectId: body.subjectId,\n isSelf: !!body.isSelf,\n answers: body.answers || {},\n submitted: !!body.submitted,\n updatedAt,\n };\n await sqlite.execute({\n sql:\n `insert into responses (doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at)\n values (?, ?, ?, ?, ?, ?, ?)\n on conflict(doc_id) do update set\n is_self = excluded.is_self,\n answers = excluded.answers,\n submitted = excluded.submitted,\n updated_at = excluded.updated_at`,\n args: [\n docId,\n record.respondentId,\n record.subjectId,\n record.isSelf ? 1 : 0,\n JSON.stringify(record.answers),\n record.submitted ? 1 : 0,\n updatedAt,\n ],\n });\n return { ok: true, docId };\n}\n\nexport default async function (req: Request): Promise {\n await ensureTables();\n const url = new URL(req.url);\n\n try {\n if (url.pathname === \"/api/people\" && req.method === \"GET\") {\n return jsonResponse(await listPeople());\n }\n if (url.pathname === \"/api/resolve\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(person);\n }\n if (url.pathname === \"/api/my-responses\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await listMyResponses(person.id));\n }\n if (url.pathname === \"/api/responses\" && req.method === \"POST\") {\n const body = await req.json();\n return jsonResponse(await saveResponse(body));\n }\n if (url.pathname === \"/api/my-extra\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await getMyExtraResponses(person.id));\n }\n if (url.pathname === \"/api/extra\" && req.method === \"POST\") {\n const body = await req.json();\n const person = await resolveToken(body.token || \"\");\n if (!person || person.id !== body.personId) {\n return jsonResponse({ error: \"not authorized for this identity\" }, 403);\n }\n return jsonResponse(\n await saveExtraResponse(person.id, body.qKey, body.answer || \"\"),\n );\n }\n if (url.pathname === \"/api/admin/people\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n if (req.method === \"GET\") {\n return jsonResponse(await adminListPeople(url.origin));\n }\n if (req.method === \"POST\") {\n const body = await req.json();\n const person = await addPerson(body.name);\n return jsonResponse({\n ...person,\n link: url.origin + \"/?u=\" + person.token,\n });\n }\n if (req.method === \"DELETE\") {\n const id = url.searchParams.get(\"id\") || \"\";\n return jsonResponse(await deletePerson(id));\n }\n }\n if (url.pathname === \"/api/admin/responses\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n return jsonResponse(await listResponses());\n }\n if (url.pathname === \"/api/admin/extra\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n const qKey = url.searchParams.get(\"q\") || \"\";\n return jsonResponse(await listExtraResponses(qKey));\n }\n } catch (err: any) {\n return jsonResponse({ error: String((err && err.message) || err) }, 400);\n }\n\n return new Response(INDEX_HTML, {\n headers: { \"content-type\": \"text/html;charset=utf-8\" },\n });\n}\n\nconst INDEX_HTML = `\n\n\n\nRole Mirror\n\n\n\n\n\n\n\n

\n \n

\n\n\n\n\n`;","label",[133],"cee0a50d-ce82-455e-adee-bb44150a145c",["D",1789409356441],3,[28],"pulls","branches",1,"forks","envVars",{"_155":63,"_157":63},"connections",{"_155":63,"_156":63},"count","unfilledCount","emptyCount",{"_43":143,"_32":28,"_30":31,"_134":-5,"_41":42,"_40":14,"_136":59,"_38":164,"_13":145,"_33":34,"_35":37,"_24":25,"_141":-5,"_161":165,"_27":166},{"_43":132,"_32":133,"_30":57,"_134":-5,"_41":42,"_40":135,"_136":25,"_38":160,"_13":138,"_33":139,"_35":140,"_24":25,"_141":-5,"_161":162,"_27":163},["D",1789381737673],"children",[],[133],["D",1789409356441],[],[28],["D",1788964746973],["D",1789485645684],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"ctx",{"_82":-5,"_127":205,"_206":207,"_208":209,"_210":25,"_211":25,"_212":25,"_213":59,"_214":-5,"_215":-7,"_216":-7,"_217":63,"_218":25,"_219":25,"_220":-5,"_221":25,"_222":25,"_223":25,"_224":-5},"ENV",{"_176":177,"_178":179,"_180":90,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v13