[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_158":159,"_160":161},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":57,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":45,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",4,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","25fb0268-a789-11f1-b239-1607ee4eb77e","name","fileType","http","content","// Learn more: https://docs.val.town/vals/http/\nexport default async function (req: Request): Promise {\n return Response.json({ ok: true })\n}","// Learn more: https://docs.val.town/vals/http/\nexport default async function (req: Request): Promise {\n return Response.json({ ok: true })\n}/**\n * MITAA — anonymous Q&A for one event.\n * One Val Town HTTP val. Participants submit; only the admin reads.\n *\n * Setup:\n * 1. Paste this into a new HTTP val.\n * 2. Val settings -> Environment Variables -> add ADMIN_KEY = \n * 3. Participants: https://-.val.run/\n * You: https://-.val.run/admin?k=\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ADMIN_KEY = Deno.env.get(\"ADMIN_KEY\") ?? \"\";\nconst MAX_PER_PERSON = 5; // per browser token\nconst MIN_SECONDS_BETWEEN = 8; // per browser token\nconst MAX_CHARS = 500;\n\nlet ready: Promise | null = null;\nfunction init() {\n ready ??= sqlite.batch([\n `create table if not exists questions (\n id integer primary key autoincrement,\n body text not null,\n name text,\n token text not null,\n status text not null default 'new',\n created_at integer not null\n )`,\n `create index if not exists idx_q_token on questions(token)`,\n ]);\n return ready;\n}\n\nconst json = (o: unknown, s = 200) =>\n new Response(JSON.stringify(o), { status: s, headers: { \"content-type\": \"application/json\" } });\nconst html = (s: string) =>\n new Response(s, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n\nfunction authed(url: URL) {\n const k = url.searchParams.get(\"k\") ?? \"\";\n // constant-ish time compare; fine at this scale\n if (!ADMIN_KEY || k.length !== ADMIN_KEY.length) return false;\n let diff = 0;\n for (let i = 0; i < k.length; i++) diff |= k.charCodeAt(i) ^ ADMIN_KEY.charCodeAt(i);\n return diff === 0;\n}\n\nexport default async function (req: Request): Promise {\n await init();\n const url = new URL(req.url);\n const p = url.pathname;\n\n // ---------- participant ----------\n if (p === \"/\" && req.method === \"GET\") return html(ASK_PAGE);\n\n if (p === \"/ask\" && req.method === \"POST\") {\n const b = await req.json().catch(() => null) as\n { body?: string; name?: string; token?: string } | null;\n if (!b) return json({ error: \"Bad request.\" }, 400);\n\n const body = (b.body ?? \"\").trim();\n const name = (b.name ?? \"\").trim().slice(0, 60) || null;\n const token = (b.token ?? \"\").trim().slice(0, 64);\n\n if (!token) return json({ error: \"Bad request.\" }, 400);\n if (body.length < 3) return json({ error: \"That looks a bit short.\" }, 400);\n if (body.length > MAX_CHARS) return json({ error: \"Please keep it under 500 characters.\" }, 400);\n\n const mine = await sqlite.execute({\n sql: `select count(*) as n, coalesce(max(created_at),0) as last\n from questions where token = ?`,\n args: [token],\n });\n const row = mine.rows[0] as any;\n const now = Date.now();\n if (Number(row.n) >= MAX_PER_PERSON)\n return json({ error: \"You've reached the limit of 5 questions. Thank you!\" }, 429);\n if (now - Number(row.last) < MIN_SECONDS_BETWEEN * 1000)\n return json({ error: \"One moment before the next one.\" }, 429);\n\n await sqlite.execute({\n sql: `insert into questions (body, name, token, created_at) values (?, ?, ?, ?)`,\n args: [body, name, token, now],\n });\n return json({ ok: true });\n }\n\n // A person may read back ONLY their own submissions.\n if (p === \"/mine\" && req.method === \"GET\") {\n const token = (url.searchParams.get(\"token\") ?? \"\").slice(0, 64);\n if (!token) return json({ items: [] });\n const r = await sqlite.execute({\n sql: `select body, created_at from questions where token = ? order by id desc`,\n args: [token],\n });\n return json({ items: r.rows });\n }\n\n // ---------- admin ----------\n if (p === \"/admin\" && req.method === \"GET\") {\n if (!authed(url)) return new Response(\"Not found\", { status: 404 });\n return html(ADMIN_PAGE);\n }\n\n if (p === \"/admin/data\" && req.method === \"GET\") {\n if (!authed(url)) return json({ error: \"no\" }, 403);\n const r = await sqlite.execute(\n `select id, body, name, status, created_at from questions order by id desc`,\n );\n return json({ items: r.rows });\n }\n\n if (p === \"/admin/mark\" && req.method === \"POST\") {\n if (!authed(url)) return json({ error: \"no\" }, 403);\n const b = await req.json().catch(() => null) as { id?: number; status?: string } | null;\n if (!b?.id || ![\"new\", \"answered\", \"hidden\"].includes(b.status ?? \"\"))\n return json({ error: \"bad\" }, 400);\n await sqlite.execute({\n sql: `update questions set status = ? where id = ?`,\n args: [b.status, b.id],\n });\n return json({ ok: true });\n }\n\n if (p === \"/admin/export\" && req.method === \"GET\") {\n if (!authed(url)) return new Response(\"Not found\", { status: 404 });\n const r = await sqlite.execute(\n `select id, created_at, name, status, body from questions order by id`,\n );\n const esc = (v: unknown) => '\"' + String(v ?? \"\").replaceAll('\"', '\"\"') + '\"';\n const csv = [\"id,time,name,status,question\"]\n .concat((r.rows as any[]).map((q) =>\n [q.id, new Date(Number(q.created_at)).toISOString(), q.name, q.status, q.body]\n .map(esc).join(\",\")\n )).join(\"\\n\");\n return new Response(csv, {\n headers: {\n \"content-type\": \"text/csv; charset=utf-8\",\n \"content-disposition\": 'attachment; filename=\"questions.csv\"',\n },\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}\n\n/* ------------------------------------------------------------------ */\n/* Participant page — small on purpose, loads on a bad venue network. */\n/* ------------------------------------------------------------------ */\nconst ASK_PAGE = `\n\n\nAsk a question\n\n

Ask a question

Only the moderator sees this. Other people in the room cannot.

\n Your question\n \n

0 / 500

\n Your name (optional)\n \n

\n \n

Your name is optional and never shown to other participants.\n Questions are deleted after the event.

\n\n \n

\n`;\n\n/* ------------------------------------------------------------------ */\n/* Admin page — the only place questions are readable. */\n/* ------------------------------------------------------------------ */\nconst ADMIN_PAGE = `\n\n\nModerator\n\n

Moderator

\n 0 questions\n \n \n

\n \n \n \n \n

\n Export CSV\n

\n`;","createdAt",["D",1788434330025],"branchVersion","branchId","045bc046-6a1b-4bcb-9dcf-b2528319506d","id","8cd25f61-a13e-4827-a261-6f805c9b9483","MITAA26",["D",1788434291432],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","30738f3a-c3ec-41e1-82a2-11d17e8d7690","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a066fb-791e-721f-8efe-297b4810c575","tursoName","8cd25f61a13e4827a2616f805c9b9483","tursoHostname","8cd25f61a13e4827a2616f805c9b9483-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789476648181],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":54,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",10,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","TPM","handle","displayName","puimun-teoh","avatar","https://avatars.githubusercontent.com/u/97607755?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":153,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":45,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":154,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":155,"_82":156,"_84":157,"_86":25},"tree",[148],"files",[148],"counts",{"_137":61,"_138":139,"_140":61,"_141":142,"_143":144},"contents",[129],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":133,"_13":134,"_33":34,"_35":37,"_24":25,"_135":-5,"_27":136},"6c4cbf78-64da-4f30-ac6f-69ba01cea910","parentId","latest",["D",1788434330025],3,"label",[28],"pulls","branches",1,"forks","envVars",{"_145":139,"_147":61},"connections",{"_145":61,"_146":61},"count","unfilledCount","emptyCount",{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":149,"_13":134,"_33":34,"_35":37,"_24":25,"_135":-5,"_150":151,"_27":152},["D",1788434330025],"children",[],[28],["D",1788434291432],["D",1789476648181],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":54,"_103":104,"_105":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_126":191,"_192":193,"_194":195,"_196":25,"_197":25,"_198":25,"_199":57,"_200":-5,"_201":-7,"_202":-7,"_203":61,"_204":25,"_205":25,"_206":-5,"_207":25,"_208":25,"_209":25,"_210":-5},"ENV",{"_162":163,"_164":165,"_166":88,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Ask a question

Question received

Diff · v4