Role Mirror

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_177":178,"_179":180},"routes/_app.x.$handle.$name",{"_104":103,"_38":51,"_113":94,"_33":59,"_13":14,"_114":-5,"_11":115,"_116":117,"_118":119,"_120":121,"_122":123,"_26":-5,"_124":-5,"_125":-5,"_126":31,"_127":128,"_129":64,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_49":50,"_38":51,"_44":52,"_53":-5,"_54":31,"_55":56,"_57":56,"_58":59,"_60":-5,"_19":61,"_62":37,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":72,"_73":74,"_75":76,"_77":-5,"_78":79,"_80":79,"_81":82,"_83":82,"_84":82,"_85":79,"_86":79,"_87":88,"_89":90,"_91":92,"_93":31},"version",14,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","3f6a9fb9-3cff-4e69-8eb3-30a3f9bf47ab","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":34,"_39":40,"_41":43,"_44":45,"_46":14,"_47":48,"_30":31},"previous",{"_36":37,"_38":34,"_39":40,"_41":42},"deleted",false,"deletedHere","path","new-file-6993.ts","latestPath","fileId","88917af6-ac5c-11f1-bdf6-1607ee4eb77e","name","fileType","http","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ADMIN_KEY = \"bechstein-admin-2026\";\n\nasync function ensureTables() {\n await sqlite.execute(`create table if not exists people (\n id text primary key,\n name text,\n token text,\n created_at text\n )`);\n await sqlite.execute(`create table if not exists responses (\n doc_id text primary key,\n respondent_id text,\n subject_id text,\n is_self integer,\n answers text,\n submitted integer,\n updated_at text\n )`);\n await sqlite.execute(`create table if not exists extra_responses (\n person_id text,\n q_key text,\n answer text,\n updated_at text,\n primary key (person_id, q_key)\n )`);\n try {\n await sqlite.execute(\"alter table people add column token text\");\n } catch (e) {}\n const rows = await sqlite.execute({\n sql: \"select id, token from people\",\n args: [],\n });\n for (const r of rows.rows as any[]) {\n if (!r.token) {\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n await sqlite.execute({\n sql: \"update people set token = ? where id = ?\",\n args: [token, r.id],\n });\n }\n }\n}\n\nfunction jsonResponse(data: unknown, status?: number) {\n return new Response(JSON.stringify(data), {\n status: status || 200,\n headers: { \"content-type\": \"application/json;charset=utf-8\" },\n });\n}\n\nasync function listPeople() {\n const result = await sqlite.execute({\n sql: \"select id, name, created_at from people\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n createdAt: r.created_at,\n }));\n}\n\nasync function adminListPeople(origin: string) {\n const result = await sqlite.execute({\n sql:\n \"select id, name, token, created_at from people order by created_at asc\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n token: r.token,\n createdAt: r.created_at,\n link: origin + \"/?u=\" + r.token,\n }));\n}\n\nasync function addPerson(name: string) {\n name = (name || \"\").toString().trim().slice(0, 60);\n if (!name) throw new Error(\"empty name\");\n const id = crypto.randomUUID();\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n const createdAt = new Date().toISOString();\n await sqlite.execute({\n sql: \"insert into people (id, name, token, created_at) values (?, ?, ?, ?)\",\n args: [id, name, token, createdAt],\n });\n return { id, name, token, createdAt };\n}\n\nasync function deletePerson(id: string) {\n await sqlite.execute({ sql: \"delete from people where id = ?\", args: [id] });\n await sqlite.execute({\n sql: \"delete from responses where respondent_id = ? or subject_id = ?\",\n args: [id, id],\n });\n return { ok: true };\n}\n\nasync function saveExtraResponse(\n personId: string,\n qKey: string,\n answer: string,\n) {\n const updatedAt = new Date().toISOString();\n await sqlite.execute({\n sql: `insert into extra_responses (person_id, q_key, answer, updated_at)\n values (?, ?, ?, ?)\n on conflict(person_id, q_key) do update set\n answer = excluded.answer,\n updated_at = excluded.updated_at`,\n args: [personId, qKey, answer, updatedAt],\n });\n return { ok: true };\n}\n\nasync function getMyExtraResponses(personId: string) {\n const result = await sqlite.execute({\n sql: \"select q_key, answer from extra_responses where person_id = ?\",\n args: [personId],\n });\n const out: Record = {};\n for (const r of result.rows as any[]) out[r.q_key] = r.answer;\n return out;\n}\n\nasync function listExtraResponses(qKey: string) {\n const result = await sqlite.execute({\n sql:\n \"select answer from extra_responses where q_key = ? and answer is not null and trim(answer) != ''\",\n args: [qKey],\n });\n return (result.rows as any[]).map((r) => r.answer);\n}\n\nasync function resolveToken(token: string) {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"select id, name from people where token = ?\",\n args: [token],\n });\n if (!result.rows.length) return null;\n const r = result.rows[0] as any;\n return { id: r.id, name: r.name };\n}\n\nfunction mapResponseRow(r: any) {\n return {\n docId: r.doc_id,\n respondentId: r.respondent_id,\n subjectId: r.subject_id,\n isSelf: !!r.is_self,\n answers: JSON.parse(r.answers || \"{}\"),\n submitted: !!r.submitted,\n updatedAt: r.updated_at,\n };\n}\n\nasync function listResponses() {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses\",\n args: [],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function listMyResponses(respondentId: string) {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses where respondent_id = ?\",\n args: [respondentId],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function saveResponse(body: any) {\n if (!body || !body.respondentId || !body.subjectId) {\n throw new Error(\"invalid response\");\n }\n const asPerson = await resolveToken(body.token || \"\");\n if (!asPerson || asPerson.id !== body.respondentId) {\n throw new Error(\"not authorized for this identity\");\n }\n const docId = body.respondentId + \"__\" + body.subjectId;\n const updatedAt = new Date().toISOString();\n const record = {\n docId,\n respondentId: body.respondentId,\n subjectId: body.subjectId,\n isSelf: !!body.isSelf,\n answers: body.answers || {},\n submitted: !!body.submitted,\n updatedAt,\n };\n await sqlite.execute({\n sql:\n `insert into responses (doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at)\n values (?, ?, ?, ?, ?, ?, ?)\n on conflict(doc_id) do update set\n is_self = excluded.is_self,\n answers = excluded.answers,\n submitted = excluded.submitted,\n updated_at = excluded.updated_at`,\n args: [\n docId,\n record.respondentId,\n record.subjectId,\n record.isSelf ? 1 : 0,\n JSON.stringify(record.answers),\n record.submitted ? 1 : 0,\n updatedAt,\n ],\n });\n return { ok: true, docId };\n}\n\nexport default async function (req: Request): Promise {\n await ensureTables();\n const url = new URL(req.url);\n\n try {\n if (url.pathname === \"/api/people\" && req.method === \"GET\") {\n return jsonResponse(await listPeople());\n }\n if (url.pathname === \"/api/resolve\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(person);\n }\n if (url.pathname === \"/api/my-responses\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await listMyResponses(person.id));\n }\n if (url.pathname === \"/api/responses\" && req.method === \"POST\") {\n const body = await req.json();\n return jsonResponse(await saveResponse(body));\n }\n if (url.pathname === \"/api/my-extra\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await getMyExtraResponses(person.id));\n }\n if (url.pathname === \"/api/extra\" && req.method === \"POST\") {\n const body = await req.json();\n const person = await resolveToken(body.token || \"\");\n if (!person || person.id !== body.personId) {\n return jsonResponse({ error: \"not authorized for this identity\" }, 403);\n }\n return jsonResponse(\n await saveExtraResponse(person.id, body.qKey, body.answer || \"\"),\n );\n }\n if (url.pathname === \"/api/admin/people\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n if (req.method === \"GET\") {\n return jsonResponse(await adminListPeople(url.origin));\n }\n if (req.method === \"POST\") {\n const body = await req.json();\n const person = await addPerson(body.name);\n return jsonResponse({\n ...person,\n link: url.origin + \"/?u=\" + person.token,\n });\n }\n if (req.method === \"DELETE\") {\n const id = url.searchParams.get(\"id\") || \"\";\n return jsonResponse(await deletePerson(id));\n }\n }\n if (url.pathname === \"/api/admin/responses\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n return jsonResponse(await listResponses());\n }\n if (url.pathname === \"/api/admin/extra\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n const qKey = url.searchParams.get(\"q\") || \"\";\n return jsonResponse(await listExtraResponses(qKey));\n }\n } catch (err: any) {\n return jsonResponse({ error: String((err && err.message) || err) }, 400);\n }\n\n return new Response(INDEX_HTML, {\n headers: { \"content-type\": \"text/html;charset=utf-8\" },\n });\n}\n\nconst INDEX_HTML = `\n\n\n\nRole Mirror\n\n\n\n\n\n\n\n

\n \n

\n\n\n\n\n`;","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ADMIN_KEY = \"bechstein-rm-2j7022lR\";\n\nasync function ensureTables() {\n await sqlite.execute(`create table if not exists people (\n id text primary key,\n name text,\n token text,\n created_at text\n )`);\n await sqlite.execute(`create table if not exists responses (\n doc_id text primary key,\n respondent_id text,\n subject_id text,\n is_self integer,\n answers text,\n submitted integer,\n updated_at text\n )`);\n await sqlite.execute(`create table if not exists extra_responses (\n person_id text,\n q_key text,\n answer text,\n updated_at text,\n primary key (person_id, q_key)\n )`);\n try {\n await sqlite.execute(\"alter table people add column token text\");\n } catch (e) {}\n const rows = await sqlite.execute({\n sql: \"select id, token from people\",\n args: [],\n });\n for (const r of rows.rows as any[]) {\n if (!r.token) {\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n await sqlite.execute({\n sql: \"update people set token = ? where id = ?\",\n args: [token, r.id],\n });\n }\n }\n}\n\nfunction jsonResponse(data: unknown, status?: number) {\n return new Response(JSON.stringify(data), {\n status: status || 200,\n headers: { \"content-type\": \"application/json;charset=utf-8\" },\n });\n}\n\nasync function listPeople() {\n const result = await sqlite.execute({\n sql: \"select id, name, created_at from people\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n createdAt: r.created_at,\n }));\n}\n\nasync function adminListPeople(origin: string) {\n const result = await sqlite.execute({\n sql:\n \"select id, name, token, created_at from people order by created_at asc\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n token: r.token,\n createdAt: r.created_at,\n link: origin + \"/?u=\" + r.token,\n }));\n}\n\nasync function addPerson(name: string) {\n name = (name || \"\").toString().trim().slice(0, 60);\n if (!name) throw new Error(\"empty name\");\n const id = crypto.randomUUID();\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n const createdAt = new Date().toISOString();\n await sqlite.execute({\n sql: \"insert into people (id, name, token, created_at) values (?, ?, ?, ?)\",\n args: [id, name, token, createdAt],\n });\n return { id, name, token, createdAt };\n}\n\nasync function deletePerson(id: string) {\n await sqlite.execute({ sql: \"delete from people where id = ?\", args: [id] });\n await sqlite.execute({\n sql: \"delete from responses where respondent_id = ? or subject_id = ?\",\n args: [id, id],\n });\n return { ok: true };\n}\n\nasync function saveExtraResponse(\n personId: string,\n qKey: string,\n answer: string,\n) {\n const updatedAt = new Date().toISOString();\n await sqlite.execute({\n sql: `insert into extra_responses (person_id, q_key, answer, updated_at)\n values (?, ?, ?, ?)\n on conflict(person_id, q_key) do update set\n answer = excluded.answer,\n updated_at = excluded.updated_at`,\n args: [personId, qKey, answer, updatedAt],\n });\n return { ok: true };\n}\n\nasync function getMyExtraResponses(personId: string) {\n const result = await sqlite.execute({\n sql: \"select q_key, answer from extra_responses where person_id = ?\",\n args: [personId],\n });\n const out: Record = {};\n for (const r of result.rows as any[]) out[r.q_key] = r.answer;\n return out;\n}\n\nasync function listExtraResponses(qKey: string) {\n const result = await sqlite.execute({\n sql:\n \"select answer from extra_responses where q_key = ? and answer is not null and trim(answer) != ''\",\n args: [qKey],\n });\n return (result.rows as any[]).map((r) => r.answer);\n}\n\nasync function resolveToken(token: string) {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"select id, name from people where token = ?\",\n args: [token],\n });\n if (!result.rows.length) return null;\n const r = result.rows[0] as any;\n return { id: r.id, name: r.name };\n}\n\nfunction mapResponseRow(r: any) {\n return {\n docId: r.doc_id,\n respondentId: r.respondent_id,\n subjectId: r.subject_id,\n isSelf: !!r.is_self,\n answers: JSON.parse(r.answers || \"{}\"),\n submitted: !!r.submitted,\n updatedAt: r.updated_at,\n };\n}\n\nasync function listResponses() {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses\",\n args: [],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function listMyResponses(respondentId: string) {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses where respondent_id = ?\",\n args: [respondentId],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function saveResponse(body: any) {\n if (!body || !body.respondentId || !body.subjectId) {\n throw new Error(\"invalid response\");\n }\n const asPerson = await resolveToken(body.token || \"\");\n if (!asPerson || asPerson.id !== body.respondentId) {\n throw new Error(\"not authorized for this identity\");\n }\n const docId = body.respondentId + \"__\" + body.subjectId;\n const updatedAt = new Date().toISOString();\n const record = {\n docId,\n respondentId: body.respondentId,\n subjectId: body.subjectId,\n isSelf: !!body.isSelf,\n answers: body.answers || {},\n submitted: !!body.submitted,\n updatedAt,\n };\n await sqlite.execute({\n sql:\n `insert into responses (doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at)\n values (?, ?, ?, ?, ?, ?, ?)\n on conflict(doc_id) do update set\n is_self = excluded.is_self,\n answers = excluded.answers,\n submitted = excluded.submitted,\n updated_at = excluded.updated_at`,\n args: [\n docId,\n record.respondentId,\n record.subjectId,\n record.isSelf ? 1 : 0,\n JSON.stringify(record.answers),\n record.submitted ? 1 : 0,\n updatedAt,\n ],\n });\n return { ok: true, docId };\n}\n\nexport default async function (req: Request): Promise {\n await ensureTables();\n const url = new URL(req.url);\n\n try {\n if (url.pathname === \"/api/people\" && req.method === \"GET\") {\n return jsonResponse(await listPeople());\n }\n if (url.pathname === \"/api/resolve\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(person);\n }\n if (url.pathname === \"/api/my-responses\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await listMyResponses(person.id));\n }\n if (url.pathname === \"/api/responses\" && req.method === \"POST\") {\n const body = await req.json();\n return jsonResponse(await saveResponse(body));\n }\n if (url.pathname === \"/api/my-extra\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await getMyExtraResponses(person.id));\n }\n if (url.pathname === \"/api/extra\" && req.method === \"POST\") {\n const body = await req.json();\n const person = await resolveToken(body.token || \"\");\n if (!person || person.id !== body.personId) {\n return jsonResponse({ error: \"not authorized for this identity\" }, 403);\n }\n return jsonResponse(\n await saveExtraResponse(person.id, body.qKey, body.answer || \"\"),\n );\n }\n if (url.pathname === \"/api/admin/people\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n if (req.method === \"GET\") {\n return jsonResponse(await adminListPeople(url.origin));\n }\n if (req.method === \"POST\") {\n const body = await req.json();\n const person = await addPerson(body.name);\n return jsonResponse({\n ...person,\n link: url.origin + \"/?u=\" + person.token,\n });\n }\n if (req.method === \"DELETE\") {\n const id = url.searchParams.get(\"id\") || \"\";\n return jsonResponse(await deletePerson(id));\n }\n }\n if (url.pathname === \"/api/admin/responses\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n return jsonResponse(await listResponses());\n }\n if (url.pathname === \"/api/admin/extra\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n const qKey = url.searchParams.get(\"q\") || \"\";\n return jsonResponse(await listExtraResponses(qKey));\n }\n } catch (err: any) {\n return jsonResponse({ error: String((err && err.message) || err) }, 400);\n }\n\n return new Response(INDEX_HTML, {\n headers: { \"content-type\": \"text/html;charset=utf-8\" },\n });\n}\n\nconst INDEX_HTML = `\n\n\n\nRole Mirror\n\n\n\n\n\n\n\n

\n \n

\n\n\n\n\n`;\n","createdAt",["D",1789410035897],"branchVersion","branchId","8dc20f3f-6b08-4ef9-91ef-93d8c7b7f5ae","id","8e102f10-948e-41c4-b460-d6ee9d588d22","Role-Mirror",["D",1788964746973],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","2cc5bb30-4ac8-4dde-9ad8-1ed9fce1eb4c","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0869a-1f9b-76ca-b36a-aabd64b43276","tursoName","8e102f10948e41c4b460d6ee9d588d22","tursoHostname","8e102f10948e41c4b460d6ee9d588d22-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789485645684],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_112":108},"org",{"_104":103,"_105":106,"_107":108,"_19":61,"_109":110,"_111":31},"branch",{"_13":14,"_38":94,"_49":48,"_95":50,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":51,"_102":103},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","LukasBN","handle","displayName","Lukas Englert","avatar","https://lh3.googleusercontent.com/a/ACg8ocIpL4PzgJTY1qrqJS3agBxk9jBbYd4oUCTXcCQnrM-EaQClhg=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_49":50,"_38":51,"_44":172,"_53":-5,"_54":31,"_55":56,"_57":56,"_58":59,"_60":-5,"_19":61,"_62":37,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":72,"_73":74,"_75":173,"_77":-5,"_78":79,"_80":79,"_81":82,"_83":82,"_84":82,"_85":79,"_86":79,"_87":174,"_89":175,"_91":176,"_93":31},"tree",[163,164],"files",[163,164],"counts",{"_152":68,"_153":154,"_155":68,"_156":157,"_158":159},"contents",[134,135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_49":143,"_38":144,"_36":145,"_137":-5,"_47":48,"_46":146,"_138":64,"_44":147,"_13":148,"_39":149,"_41":150,"_30":31,"_141":-5,"_33":151},{"_49":136,"_38":34,"_36":37,"_137":-5,"_47":48,"_46":14,"_138":64,"_44":139,"_13":140,"_39":40,"_41":43,"_30":31,"_141":-5,"_33":142},"a12c5413-9d27-4070-b211-7dc44864212f","parentId","latest",["D",1789410035897],9,"label",[34],"cee0a50d-ce82-455e-adee-bb44150a145c","main.ts","361e5f6e-ac5c-11f1-8a28-1607ee4eb77e",13,["D",1789409356441],3,"script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ADMIN_KEY = \"bechstein-rm-2j7022lR\";\n\nasync function ensureTables() {\n await sqlite.execute(`create table if not exists people (\n id text primary key,\n name text,\n token text,\n created_at text\n )`);\n await sqlite.execute(`create table if not exists responses (\n doc_id text primary key,\n respondent_id text,\n subject_id text,\n is_self integer,\n answers text,\n submitted integer,\n updated_at text\n )`);\n await sqlite.execute(`create table if not exists extra_responses (\n person_id text,\n q_key text,\n answer text,\n updated_at text,\n primary key (person_id, q_key)\n )`);\n try {\n await sqlite.execute(\"alter table people add column token text\");\n } catch (e) {}\n const rows = await sqlite.execute({\n sql: \"select id, token from people\",\n args: [],\n });\n for (const r of rows.rows as any[]) {\n if (!r.token) {\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n await sqlite.execute({\n sql: \"update people set token = ? where id = ?\",\n args: [token, r.id],\n });\n }\n }\n}\n\nfunction jsonResponse(data: unknown, status?: number) {\n return new Response(JSON.stringify(data), {\n status: status || 200,\n headers: { \"content-type\": \"application/json;charset=utf-8\" },\n });\n}\n\nasync function listPeople() {\n const result = await sqlite.execute({\n sql: \"select id, name, created_at from people\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n createdAt: r.created_at,\n }));\n}\n\nasync function adminListPeople(origin: string) {\n const result = await sqlite.execute({\n sql:\n \"select id, name, token, created_at from people order by created_at asc\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n token: r.token,\n createdAt: r.created_at,\n link: origin + \"/?u=\" + r.token,\n }));\n}\n\nasync function addPerson(name: string) {\n name = (name || \"\").toString().trim().slice(0, 60);\n if (!name) throw new Error(\"empty name\");\n const id = crypto.randomUUID();\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n const createdAt = new Date().toISOString();\n await sqlite.execute({\n sql: \"insert into people (id, name, token, created_at) values (?, ?, ?, ?)\",\n args: [id, name, token, createdAt],\n });\n return { id, name, token, createdAt };\n}\n\nasync function deletePerson(id: string) {\n await sqlite.execute({ sql: \"delete from people where id = ?\", args: [id] });\n await sqlite.execute({\n sql: \"delete from responses where respondent_id = ? or subject_id = ?\",\n args: [id, id],\n });\n return { ok: true };\n}\n\nasync function saveExtraResponse(\n personId: string,\n qKey: string,\n answer: string,\n) {\n const updatedAt = new Date().toISOString();\n await sqlite.execute({\n sql: `insert into extra_responses (person_id, q_key, answer, updated_at)\n values (?, ?, ?, ?)\n on conflict(person_id, q_key) do update set\n answer = excluded.answer,\n updated_at = excluded.updated_at`,\n args: [personId, qKey, answer, updatedAt],\n });\n return { ok: true };\n}\n\nasync function getMyExtraResponses(personId: string) {\n const result = await sqlite.execute({\n sql: \"select q_key, answer from extra_responses where person_id = ?\",\n args: [personId],\n });\n const out: Record = {};\n for (const r of result.rows as any[]) out[r.q_key] = r.answer;\n return out;\n}\n\nasync function listExtraResponses(qKey: string) {\n const result = await sqlite.execute({\n sql:\n \"select answer from extra_responses where q_key = ? and answer is not null and trim(answer) != ''\",\n args: [qKey],\n });\n return (result.rows as any[]).map((r) => r.answer);\n}\n\nasync function resolveToken(token: string) {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"select id, name from people where token = ?\",\n args: [token],\n });\n if (!result.rows.length) return null;\n const r = result.rows[0] as any;\n return { id: r.id, name: r.name };\n}\n\nfunction mapResponseRow(r: any) {\n return {\n docId: r.doc_id,\n respondentId: r.respondent_id,\n subjectId: r.subject_id,\n isSelf: !!r.is_self,\n answers: JSON.parse(r.answers || \"{}\"),\n submitted: !!r.submitted,\n updatedAt: r.updated_at,\n };\n}\n\nasync function listResponses() {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses\",\n args: [],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function listMyResponses(respondentId: string) {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses where respondent_id = ?\",\n args: [respondentId],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function saveResponse(body: any) {\n if (!body || !body.respondentId || !body.subjectId) {\n throw new Error(\"invalid response\");\n }\n const asPerson = await resolveToken(body.token || \"\");\n if (!asPerson || asPerson.id !== body.respondentId) {\n throw new Error(\"not authorized for this identity\");\n }\n const docId = body.respondentId + \"__\" + body.subjectId;\n const updatedAt = new Date().toISOString();\n const record = {\n docId,\n respondentId: body.respondentId,\n subjectId: body.subjectId,\n isSelf: !!body.isSelf,\n answers: body.answers || {},\n submitted: !!body.submitted,\n updatedAt,\n };\n await sqlite.execute({\n sql:\n `insert into responses (doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at)\n values (?, ?, ?, ?, ?, ?, ?)\n on conflict(doc_id) do update set\n is_self = excluded.is_self,\n answers = excluded.answers,\n submitted = excluded.submitted,\n updated_at = excluded.updated_at`,\n args: [\n docId,\n record.respondentId,\n record.subjectId,\n record.isSelf ? 1 : 0,\n JSON.stringify(record.answers),\n record.submitted ? 1 : 0,\n updatedAt,\n ],\n });\n return { ok: true, docId };\n}\n\nexport default async function (req: Request): Promise {\n await ensureTables();\n const url = new URL(req.url);\n\n try {\n if (url.pathname === \"/api/people\" && req.method === \"GET\") {\n return jsonResponse(await listPeople());\n }\n if (url.pathname === \"/api/resolve\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(person);\n }\n if (url.pathname === \"/api/my-responses\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await listMyResponses(person.id));\n }\n if (url.pathname === \"/api/responses\" && req.method === \"POST\") {\n const body = await req.json();\n return jsonResponse(await saveResponse(body));\n }\n if (url.pathname === \"/api/my-extra\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await getMyExtraResponses(person.id));\n }\n if (url.pathname === \"/api/extra\" && req.method === \"POST\") {\n const body = await req.json();\n const person = await resolveToken(body.token || \"\");\n if (!person || person.id !== body.personId) {\n return jsonResponse({ error: \"not authorized for this identity\" }, 403);\n }\n return jsonResponse(\n await saveExtraResponse(person.id, body.qKey, body.answer || \"\"),\n );\n }\n if (url.pathname === \"/api/admin/people\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n if (req.method === \"GET\") {\n return jsonResponse(await adminListPeople(url.origin));\n }\n if (req.method === \"POST\") {\n const body = await req.json();\n const person = await addPerson(body.name);\n return jsonResponse({\n ...person,\n link: url.origin + \"/?u=\" + person.token,\n });\n }\n if (req.method === \"DELETE\") {\n const id = url.searchParams.get(\"id\") || \"\";\n return jsonResponse(await deletePerson(id));\n }\n }\n if (url.pathname === \"/api/admin/responses\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n return jsonResponse(await listResponses());\n }\n if (url.pathname === \"/api/admin/extra\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n const qKey = url.searchParams.get(\"q\") || \"\";\n return jsonResponse(await listExtraResponses(qKey));\n }\n } catch (err: any) {\n return jsonResponse({ error: String((err && err.message) || err) }, 400);\n }\n\n return new Response(INDEX_HTML, {\n headers: { \"content-type\": \"text/html;charset=utf-8\" },\n });\n}\n\nconst INDEX_HTML = `\n\n\n\nRole Mirror\n\n\n\n\n\n\n\n

\n \n

\n\n\n\n\n`;",[144],"pulls","branches",1,"forks","envVars",{"_160":68,"_162":68},"connections",{"_160":68,"_161":68},"count","unfilledCount","emptyCount",{"_49":143,"_38":144,"_36":145,"_137":-5,"_47":48,"_46":146,"_138":64,"_44":169,"_13":148,"_39":149,"_41":150,"_30":31,"_141":-5,"_166":170,"_33":171},{"_49":136,"_38":34,"_36":37,"_137":-5,"_47":48,"_46":14,"_138":64,"_44":165,"_13":140,"_39":40,"_41":43,"_30":31,"_141":-5,"_166":167,"_33":168},["D",1789410035897],"children",[],[34],["D",1789409356441],[],[144],["D",1788964746973],["D",1789485645684],{"_104":103,"_112":108},{"_104":103,"_105":106,"_107":108,"_19":61,"_109":110,"_111":31},{"_13":14,"_38":94,"_49":48,"_95":50,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":51,"_102":103},"ctx",{"_87":-5,"_131":210,"_211":212,"_213":214,"_215":31,"_216":31,"_217":31,"_218":64,"_219":-5,"_220":-7,"_221":-7,"_222":68,"_223":31,"_224":31,"_225":-5,"_226":31,"_227":31,"_228":31,"_229":-5},"ENV",{"_181":182,"_183":184,"_185":94,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v14