Role Mirror

\n \n

\n\n\n\n\n`;\n","deleted","label",[119],"cee0a50d-ce82-455e-adee-bb44150a145c","main.ts","361e5f6e-ac5c-11f1-8a28-1607ee4eb77e",13,["D",1789409356441],3,"script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ADMIN_KEY = \"bechstein-rm-2j7022lR\";\n\nasync function ensureTables() {\n await sqlite.execute(`create table if not exists people (\n id text primary key,\n name text,\n token text,\n created_at text\n )`);\n await sqlite.execute(`create table if not exists responses (\n doc_id text primary key,\n respondent_id text,\n subject_id text,\n is_self integer,\n answers text,\n submitted integer,\n updated_at text\n )`);\n await sqlite.execute(`create table if not exists extra_responses (\n person_id text,\n q_key text,\n answer text,\n updated_at text,\n primary key (person_id, q_key)\n )`);\n try {\n await sqlite.execute(\"alter table people add column token text\");\n } catch (e) {}\n const rows = await sqlite.execute({\n sql: \"select id, token from people\",\n args: [],\n });\n for (const r of rows.rows as any[]) {\n if (!r.token) {\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n await sqlite.execute({\n sql: \"update people set token = ? where id = ?\",\n args: [token, r.id],\n });\n }\n }\n}\n\nfunction jsonResponse(data: unknown, status?: number) {\n return new Response(JSON.stringify(data), {\n status: status || 200,\n headers: { \"content-type\": \"application/json;charset=utf-8\" },\n });\n}\n\nasync function listPeople() {\n const result = await sqlite.execute({\n sql: \"select id, name, created_at from people\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n createdAt: r.created_at,\n }));\n}\n\nasync function adminListPeople(origin: string) {\n const result = await sqlite.execute({\n sql:\n \"select id, name, token, created_at from people order by created_at asc\",\n args: [],\n });\n return result.rows.map((r: any) => ({\n id: r.id,\n name: r.name,\n token: r.token,\n createdAt: r.created_at,\n link: origin + \"/?u=\" + r.token,\n }));\n}\n\nasync function addPerson(name: string) {\n name = (name || \"\").toString().trim().slice(0, 60);\n if (!name) throw new Error(\"empty name\");\n const id = crypto.randomUUID();\n const token = crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n const createdAt = new Date().toISOString();\n await sqlite.execute({\n sql: \"insert into people (id, name, token, created_at) values (?, ?, ?, ?)\",\n args: [id, name, token, createdAt],\n });\n return { id, name, token, createdAt };\n}\n\nasync function deletePerson(id: string) {\n await sqlite.execute({ sql: \"delete from people where id = ?\", args: [id] });\n await sqlite.execute({\n sql: \"delete from responses where respondent_id = ? or subject_id = ?\",\n args: [id, id],\n });\n return { ok: true };\n}\n\nasync function saveExtraResponse(\n personId: string,\n qKey: string,\n answer: string,\n) {\n const updatedAt = new Date().toISOString();\n await sqlite.execute({\n sql: `insert into extra_responses (person_id, q_key, answer, updated_at)\n values (?, ?, ?, ?)\n on conflict(person_id, q_key) do update set\n answer = excluded.answer,\n updated_at = excluded.updated_at`,\n args: [personId, qKey, answer, updatedAt],\n });\n return { ok: true };\n}\n\nasync function getMyExtraResponses(personId: string) {\n const result = await sqlite.execute({\n sql: \"select q_key, answer from extra_responses where person_id = ?\",\n args: [personId],\n });\n const out: Record = {};\n for (const r of result.rows as any[]) out[r.q_key] = r.answer;\n return out;\n}\n\nasync function listExtraResponses(qKey: string) {\n const result = await sqlite.execute({\n sql:\n \"select answer from extra_responses where q_key = ? and answer is not null and trim(answer) != ''\",\n args: [qKey],\n });\n return (result.rows as any[]).map((r) => r.answer);\n}\n\nasync function resolveToken(token: string) {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"select id, name from people where token = ?\",\n args: [token],\n });\n if (!result.rows.length) return null;\n const r = result.rows[0] as any;\n return { id: r.id, name: r.name };\n}\n\nfunction mapResponseRow(r: any) {\n return {\n docId: r.doc_id,\n respondentId: r.respondent_id,\n subjectId: r.subject_id,\n isSelf: !!r.is_self,\n answers: JSON.parse(r.answers || \"{}\"),\n submitted: !!r.submitted,\n updatedAt: r.updated_at,\n };\n}\n\nasync function listResponses() {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses\",\n args: [],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function listMyResponses(respondentId: string) {\n const result = await sqlite.execute({\n sql:\n \"select doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at from responses where respondent_id = ?\",\n args: [respondentId],\n });\n return result.rows.map(mapResponseRow);\n}\n\nasync function saveResponse(body: any) {\n if (!body || !body.respondentId || !body.subjectId) {\n throw new Error(\"invalid response\");\n }\n const asPerson = await resolveToken(body.token || \"\");\n if (!asPerson || asPerson.id !== body.respondentId) {\n throw new Error(\"not authorized for this identity\");\n }\n const docId = body.respondentId + \"__\" + body.subjectId;\n const updatedAt = new Date().toISOString();\n const record = {\n docId,\n respondentId: body.respondentId,\n subjectId: body.subjectId,\n isSelf: !!body.isSelf,\n answers: body.answers || {},\n submitted: !!body.submitted,\n updatedAt,\n };\n await sqlite.execute({\n sql:\n `insert into responses (doc_id, respondent_id, subject_id, is_self, answers, submitted, updated_at)\n values (?, ?, ?, ?, ?, ?, ?)\n on conflict(doc_id) do update set\n is_self = excluded.is_self,\n answers = excluded.answers,\n submitted = excluded.submitted,\n updated_at = excluded.updated_at`,\n args: [\n docId,\n record.respondentId,\n record.subjectId,\n record.isSelf ? 1 : 0,\n JSON.stringify(record.answers),\n record.submitted ? 1 : 0,\n updatedAt,\n ],\n });\n return { ok: true, docId };\n}\n\nexport default async function (req: Request): Promise {\n await ensureTables();\n const url = new URL(req.url);\n\n try {\n if (url.pathname === \"/api/people\" && req.method === \"GET\") {\n return jsonResponse(await listPeople());\n }\n if (url.pathname === \"/api/resolve\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(person);\n }\n if (url.pathname === \"/api/my-responses\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await listMyResponses(person.id));\n }\n if (url.pathname === \"/api/responses\" && req.method === \"POST\") {\n const body = await req.json();\n return jsonResponse(await saveResponse(body));\n }\n if (url.pathname === \"/api/my-extra\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const person = await resolveToken(token);\n if (!person) return jsonResponse({ error: \"invalid token\" }, 404);\n return jsonResponse(await getMyExtraResponses(person.id));\n }\n if (url.pathname === \"/api/extra\" && req.method === \"POST\") {\n const body = await req.json();\n const person = await resolveToken(body.token || \"\");\n if (!person || person.id !== body.personId) {\n return jsonResponse({ error: \"not authorized for this identity\" }, 403);\n }\n return jsonResponse(\n await saveExtraResponse(person.id, body.qKey, body.answer || \"\"),\n );\n }\n if (url.pathname === \"/api/admin/people\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n if (req.method === \"GET\") {\n return jsonResponse(await adminListPeople(url.origin));\n }\n if (req.method === \"POST\") {\n const body = await req.json();\n const person = await addPerson(body.name);\n return jsonResponse({\n ...person,\n link: url.origin + \"/?u=\" + person.token,\n });\n }\n if (req.method === \"DELETE\") {\n const id = url.searchParams.get(\"id\") || \"\";\n return jsonResponse(await deletePerson(id));\n }\n }\n if (url.pathname === \"/api/admin/responses\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n return jsonResponse(await listResponses());\n }\n if (url.pathname === \"/api/admin/extra\" && req.method === \"GET\") {\n const key = url.searchParams.get(\"key\") || \"\";\n if (key !== ADMIN_KEY) return jsonResponse({ error: \"forbidden\" }, 403);\n const qKey = url.searchParams.get(\"q\") || \"\";\n return jsonResponse(await listExtraResponses(qKey));\n }\n } catch (err: any) {\n return jsonResponse({ error: String((err && err.message) || err) }, 400);\n }\n\n return new Response(INDEX_HTML, {\n headers: { \"content-type\": \"text/html;charset=utf-8\" },\n });\n}\n\nconst INDEX_HTML = `\n\n\n\nRole Mirror\n\n\n\n\n\n\n\n

\n \n

\n\n\n\n\n`;",[135],"pulls",1,"forks","envVars",{"_150":54,"_152":54},"connections",{"_150":54,"_151":54},"count","unfilledCount","emptyCount",{"_20":134,"_13":135,"_120":136,"_121":-5,"_122":21,"_123":137,"_124":50,"_22":159,"_29":139,"_127":140,"_129":141,"_131":38,"_132":-5,"_156":160,"_94":161},{"_20":118,"_13":119,"_120":48,"_121":-5,"_122":21,"_123":30,"_124":50,"_22":155,"_29":126,"_127":128,"_129":130,"_131":38,"_132":-5,"_156":157,"_94":158},["D",1789410035897],"children",[],[119],["D",1789409356441],[],[135],["D",1788964746973],["D",1789485645684],{"_11":12,"_92":88},{"_11":12,"_85":86,"_87":88,"_45":46,"_89":90,"_91":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_80":-5,"_81":-5,"_82":-5,"_83":14,"_84":12},"ctx",{"_73":-5,"_113":200,"_201":202,"_203":204,"_205":38,"_206":38,"_207":38,"_208":50,"_209":-5,"_210":-7,"_211":-7,"_212":54,"_213":38,"_214":38,"_215":-5,"_216":38,"_217":38,"_218":38,"_219":-5},"ENV",{"_171":172,"_173":174,"_175":26,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1