[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_157":158,"_159":160},"routes/_app.x.$handle.$name",{"_97":96,"_32":44,"_106":87,"_27":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":25,"_121":122,"_123":56,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":44,"_52":-5,"_18":53,"_54":31,"_55":56,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",6,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","25fb0268-a789-11f1-b239-1607ee4eb77e","name","fileType","http","content","}/**\n * MITAA — anonymous Q&A for one event.\n * One Val Town HTTP val. Participants submit; only the admin reads.\n *\n * Setup:\n * 1. Paste this into a new HTTP val.\n * 2. Val settings -> Environment Variables -> add ADMIN_KEY = \n * 3. Participants: https://-.val.run/\n * You: https://-.val.run/admin?k=\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ADMIN_KEY = Deno.env.get(\"ADMIN_KEY\") ?? \"\";\nconst MAX_PER_PERSON = 5; // per browser token\nconst MIN_SECONDS_BETWEEN = 8; // per browser token\nconst MAX_CHARS = 500;\n\nlet ready: Promise | null = null;\nfunction init() {\n ready ??= sqlite.batch([\n `create table if not exists questions (\n id integer primary key autoincrement,\n body text not null,\n name text,\n token text not null,\n status text not null default 'new',\n created_at integer not null\n )`,\n `create index if not exists idx_q_token on questions(token)`,\n ]);\n return ready;\n}\n\nconst json = (o: unknown, s = 200) =>\n new Response(JSON.stringify(o), { status: s, headers: { \"content-type\": \"application/json\" } });\nconst html = (s: string) =>\n new Response(s, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n\nfunction authed(url: URL) {\n const k = url.searchParams.get(\"k\") ?? \"\";\n // constant-ish time compare; fine at this scale\n if (!ADMIN_KEY || k.length !== ADMIN_KEY.length) return false;\n let diff = 0;\n for (let i = 0; i < k.length; i++) diff |= k.charCodeAt(i) ^ ADMIN_KEY.charCodeAt(i);\n return diff === 0;\n}\n\nexport default async function (req: Request): Promise {\n await init();\n const url = new URL(req.url);\n const p = url.pathname;\n\n // ---------- participant ----------\n if (p === \"/\" && req.method === \"GET\") return html(ASK_PAGE);\n\n if (p === \"/ask\" && req.method === \"POST\") {\n const b = await req.json().catch(() => null) as\n { body?: string; name?: string; token?: string } | null;\n if (!b) return json({ error: \"Bad request.\" }, 400);\n\n const body = (b.body ?? \"\").trim();\n const name = (b.name ?? \"\").trim().slice(0, 60) || null;\n const token = (b.token ?? \"\").trim().slice(0, 64);\n\n if (!token) return json({ error: \"Bad request.\" }, 400);\n if (body.length < 3) return json({ error: \"That looks a bit short.\" }, 400);\n if (body.length > MAX_CHARS) return json({ error: \"Please keep it under 500 characters.\" }, 400);\n\n const mine = await sqlite.execute({\n sql: `select count(*) as n, coalesce(max(created_at),0) as last\n from questions where token = ?`,\n args: [token],\n });\n const row = mine.rows[0] as any;\n const now = Date.now();\n if (Number(row.n) >= MAX_PER_PERSON)\n return json({ error: \"You've reached the limit of 5 questions. Thank you!\" }, 429);\n if (now - Number(row.last) < MIN_SECONDS_BETWEEN * 1000)\n return json({ error: \"One moment before the next one.\" }, 429);\n\n await sqlite.execute({\n sql: `insert into questions (body, name, token, created_at) values (?, ?, ?, ?)`,\n args: [body, name, token, now],\n });\n return json({ ok: true });\n }\n\n // A person may read back ONLY their own submissions.\n if (p === \"/mine\" && req.method === \"GET\") {\n const token = (url.searchParams.get(\"token\") ?? \"\").slice(0, 64);\n if (!token) return json({ items: [] });\n const r = await sqlite.execute({\n sql: `select body, created_at from questions where token = ? order by id desc`,\n args: [token],\n });\n return json({ items: r.rows });\n }\n\n // ---------- admin ----------\n if (p === \"/admin\" && req.method === \"GET\") {\n if (!authed(url)) return new Response(\"Not found\", { status: 404 });\n return html(ADMIN_PAGE);\n }\n\n if (p === \"/admin/data\" && req.method === \"GET\") {\n if (!authed(url)) return json({ error: \"no\" }, 403);\n const r = await sqlite.execute(\n `select id, body, name, status, created_at from questions order by id desc`,\n );\n return json({ items: r.rows });\n }\n\n if (p === \"/admin/mark\" && req.method === \"POST\") {\n if (!authed(url)) return json({ error: \"no\" }, 403);\n const b = await req.json().catch(() => null) as { id?: number; status?: string } | null;\n if (!b?.id || ![\"new\", \"answered\", \"hidden\"].includes(b.status ?? \"\"))\n return json({ error: \"bad\" }, 400);\n await sqlite.execute({\n sql: `update questions set status = ? where id = ?`,\n args: [b.status, b.id],\n });\n return json({ ok: true });\n }\n\n if (p === \"/admin/export\" && req.method === \"GET\") {\n if (!authed(url)) return new Response(\"Not found\", { status: 404 });\n const r = await sqlite.execute(\n `select id, created_at, name, status, body from questions order by id`,\n );\n const esc = (v: unknown) => '\"' + String(v ?? \"\").replaceAll('\"', '\"\"') + '\"';\n const csv = [\"id,time,name,status,question\"]\n .concat((r.rows as any[]).map((q) =>\n [q.id, new Date(Number(q.created_at)).toISOString(), q.name, q.status, q.body]\n .map(esc).join(\",\")\n )).join(\"\\n\");\n return new Response(csv, {\n headers: {\n \"content-type\": \"text/csv; charset=utf-8\",\n \"content-disposition\": 'attachment; filename=\"questions.csv\"',\n },\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}\n\n/* ------------------------------------------------------------------ */\n/* Participant page — small on purpose, loads on a bad venue network. */\n/* ------------------------------------------------------------------ */\nconst ASK_PAGE = `\n\n\nAsk a question\n\n

Ask a question

Only the moderator sees this. Other people in the room cannot.

\n Your question\n \n

0 / 500

\n Your name (optional)\n \n

\n \n

Your name is optional and never shown to other participants.\n Questions are deleted after the event.

\n\n \n

\n`;\n\n/* ------------------------------------------------------------------ */\n/* Admin page — the only place questions are readable. */\n/* ------------------------------------------------------------------ */\nconst ADMIN_PAGE = `\n\n\nModerator\n\n

Moderator

\n 0 questions\n \n \n

\n \n \n \n \n

\n Export CSV\n

\n`;","createdAt",["D",1788434454494],"branchVersion","branchId","045bc046-6a1b-4bcb-9dcf-b2528319506d","id","8cd25f61-a13e-4827-a261-6f805c9b9483","MITAA26",["D",1788434291432],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","30738f3a-c3ec-41e1-82a2-11d17e8d7690","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a066fb-791e-721f-8efe-297b4810c575","tursoName","8cd25f61a13e4827a2616f805c9b9483","tursoHostname","8cd25f61a13e4827a2616f805c9b9483-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789476648181],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_105":101},"org",{"_97":96,"_98":99,"_100":101,"_18":53,"_102":103,"_104":25},"branch",{"_13":86,"_32":87,"_42":41,"_88":43,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":44,"_95":96},"isOwned",10,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","TPM","handle","displayName","puimun-teoh","avatar","https://avatars.githubusercontent.com/u/97607755?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":152,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":44,"_52":-5,"_18":53,"_54":31,"_55":56,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":153,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":154,"_81":155,"_83":156,"_85":25},"tree",[147],"files",[147],"counts",{"_136":60,"_137":138,"_139":60,"_140":141,"_142":143},"contents",[128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":129,"_32":28,"_30":31,"_130":-5,"_40":41,"_39":14,"_131":25,"_37":132,"_13":133,"_33":34,"_35":36,"_24":25,"_134":-5,"_27":135},"fa0030b5-c292-4445-b84f-4d72f31e7a38","parentId","latest",["D",1788434454494],5,"label",[28],"pulls","branches",1,"forks","envVars",{"_144":138,"_146":60},"connections",{"_144":60,"_145":60},"count","unfilledCount","emptyCount",{"_42":129,"_32":28,"_30":31,"_130":-5,"_40":41,"_39":14,"_131":25,"_37":148,"_13":133,"_33":34,"_35":36,"_24":25,"_134":-5,"_149":150,"_27":151},["D",1788434454494],"children",[],[28],["D",1788434291432],["D",1789476648181],{"_97":96,"_105":101},{"_97":96,"_98":99,"_100":101,"_18":53,"_102":103,"_104":25},{"_13":86,"_32":87,"_42":41,"_88":43,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":44,"_95":96},"ctx",{"_79":-5,"_125":190,"_191":192,"_193":194,"_195":25,"_196":25,"_197":25,"_198":56,"_199":-5,"_200":-7,"_201":-7,"_202":60,"_203":25,"_204":25,"_205":-5,"_206":25,"_207":25,"_208":25,"_209":-5},"ENV",{"_161":162,"_163":164,"_165":87,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Ask a question

Question received

Diff · v6