[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_198":199,"_200":201},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_107":89,"_27":101,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":25,"_121":122,"_123":58,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":54,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",74,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","f89513c0-5505-11f1-9eb2-ee650bb23af1","name","fileType","http","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst rawSqliteExecute = sqlite.execute.bind(sqlite);\n\ntype SqlInput = Parameters[0];\ntype SqlResult = Awaited>;\n\nlet initDbPromise: Promise | null = null;\n\nasync function ensureDb(): Promise {\n if (!initDbPromise) {\n initDbPromise = initDb().catch((error) => {\n initDbPromise = null;\n throw error;\n });\n }\n\n return initDbPromise;\n}\n\nasync function dbExecute(input: SqlInput): Promise {\n let lastError: unknown;\n\n for (let attempt = 0; attempt < 3; attempt += 1) {\n try {\n return await rawSqliteExecute(input);\n } catch (error) {\n lastError = error;\n if (attempt < 2) await sleep(180 + attempt * 260);\n }\n }\n\n throw lastError;\n}\n\nfunction sleep(ms: number): Promise {\n return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n(sqlite as unknown as { execute: (input: SqlInput) => Promise })\n .execute = dbExecute;\n\nasync function loadTextModule(\n fileBase: string,\n exportName: string,\n): Promise {\n const capitalized = fileBase.charAt(0).toUpperCase() + fileBase.slice(1);\n const paths = [\n `./${fileBase}.ts`,\n `./${fileBase}`,\n `./${capitalized}.ts`,\n `./${capitalized}`,\n ];\n\n const attempts: string[] = [];\n\n for (const path of paths) {\n try {\n const module = await import(path) as Record;\n const value = module[exportName] ?? module.default;\n const exportsFound = Object.keys(module).join(\", \") || \"inga exports\";\n attempts.push(`${path}: ${exportsFound}`);\n\n if (typeof value === \"string\" && value.trim()) return value;\n } catch (error) {\n attempts.push(\n `${path}: ${error instanceof Error ? error.message : String(error)}`,\n );\n }\n }\n\n throw new Error(\n `${fileBase}.ts saknar ${exportName}. Testade: ${attempts.join(\" | \")}`,\n );\n}\n\nconst APP_HTML = await loadTextModule(\"ui\", \"APP_HTML\");\nconst STYLE_CSS = await loadTextModule(\"style\", \"STYLE_CSS\");\nconst CLIENT_JS = await loadTextModule(\"client\", \"CLIENT_JS\");\n\ntype Quote = {\n id: string;\n text: string;\n name: string;\n rating_total: number;\n rating_count: number;\n created_at: string;\n};\n\ntype PendingQuote = {\n id: string;\n text: string;\n name: string;\n submitted_by: string;\n created_at: string;\n};\n\ntype OnlineVisitor = {\n visitor_id: string;\n display_name: string;\n page: string;\n last_seen: string;\n};\n\ntype ExtraHeaders = Record;\n\nconst ADMIN_ENV = \"ADMIN_PASSWORD\";\nconst SECRET_ENV = \"ADMIN_SESSION_SECRET\";\nconst ADMIN_COOKIE = \"sommarcitat_admin\";\nconst VOTER_COOKIE = \"sommarcitat_voter\";\nconst RATING_COOKIE = \"sommarcitat_rating_access\";\nconst ADD_COOKIE = \"sommarcitat_add_access\";\n\nconst DEFAULT_RATING_PASSWORD = \"114abc\";\nconst DAY = 24 * 60 * 60;\nconst SHORT_ACCESS_SECONDS = 10 * 60;\nconst ADD_ACCESS_SECONDS = 30 * DAY;\nconst PRESENCE_WINDOW_SECONDS = 70;\n\nexport default async function handler(req: Request): Promise {\n await ensureDb();\n\n const url = new URL(req.url);\n const path = route(url.pathname);\n const method = req.method.toUpperCase();\n\n try {\n if (method === \"GET\" && isStylePath(path)) return css();\n if (method === \"GET\" && isScriptPath(path)) return js();\n if (method === \"GET\" && !path.startsWith(\"/api/\")) return html();\n\n if (method === \"GET\" && path === \"/api/quotes\") {\n const visitorName = await getAddSubmitterName(req);\n\n if (!visitorName) {\n return json(\n {\n error: \"Skriv ditt namn först för att se citaten.\",\n needsName: true,\n },\n 401,\n );\n }\n\n return json(await payload());\n }\n\n if (method === \"GET\" && path === \"/api/version\") {\n const visitorName = await getAddSubmitterName(req);\n\n if (!visitorName) {\n return json(\n {\n error: \"Skriv ditt namn först.\",\n needsName: true,\n },\n 401,\n );\n }\n\n return json(await versionPayload());\n }\n\n if (method === \"POST\" && path === \"/api/presence/heartbeat\") {\n return presenceHeartbeat(req);\n }\n\n if (method === \"GET\" && path === \"/api/admin/session\") {\n return adminSession(req);\n }\n if (method === \"POST\" && path === \"/api/admin/login\") {\n return adminLogin(req);\n }\n if (method === \"POST\" && path === \"/api/admin/logout\") {\n return json({ ok: true }, 200, {\n \"set-cookie\": clearCookie(ADMIN_COOKIE),\n });\n }\n\n if (method === \"GET\" && path === \"/api/rating-access/session\") {\n return ratingSession(req);\n }\n if (method === \"POST\" && path === \"/api/rating-access/login\") {\n return ratingLogin(req);\n }\n\n if (method === \"GET\" && path === \"/api/add-access/session\") {\n return addSession(req);\n }\n if (method === \"POST\" && path === \"/api/add-access/login\") {\n return addLogin(req);\n }\n if (method === \"POST\" && path === \"/api/add-access/logout\") {\n return json({ ok: true }, 200, {\n \"set-cookie\": clearCookie(ADD_COOKIE),\n });\n }\n if (method === \"POST\" && path === \"/api/add-pending\") {\n return addPendingRoute(req);\n }\n\n if (method === \"POST\" && path === \"/api/rate\") return rateQuote(req);\n\n if (path.startsWith(\"/api/admin/\")) {\n const guard = await requireAdmin(req);\n if (guard) return guard;\n }\n\n if (method === \"GET\" && path === \"/api/admin/presence\") {\n return adminPresenceRoute();\n }\n if (method === \"GET\" && path === \"/api/admin/pending\") {\n return pendingRoute();\n }\n if (method === \"POST\" && path === \"/api/admin/approve-pending\") {\n return approvePendingRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/reject-pending\") {\n return rejectPendingRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/admin-password\") {\n return saveAdminPassword(req);\n }\n if (method === \"POST\" && path === \"/api/admin/rating-settings\") {\n return saveRatingSettings(req);\n }\n if (method === \"POST\" && path === \"/api/admin/add\") return addRoute(req);\n if (method === \"POST\" && path === \"/api/admin/import\") {\n return importRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/update\") {\n return updateRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/delete\") {\n return deleteRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/reset-ratings\") {\n return resetRatingsRoute();\n }\n if (method === \"POST\" && path === \"/api/admin/clear\") return clearRoute();\n\n return json({ error: \"Sidan finns inte.\" }, 404);\n } catch (error) {\n console.error(error);\n return json({ error: \"Något gick fel på servern.\" }, 500);\n }\n}\n\nfunction route(pathname: string): string {\n const apiStart = pathname.indexOf(\"/api/\");\n if (apiStart >= 0) return pathname.slice(apiStart);\n return pathname;\n}\n\nfunction isStylePath(path: string): boolean {\n return path === \"/style.css\" || path.endsWith(\"/style.css\");\n}\n\nfunction isScriptPath(path: string): boolean {\n return path === \"/app.js\" || path.endsWith(\"/app.js\");\n}\n\nasync function initDb() {\n await sqlite.execute(\n \"create table if not exists quotes (id text primary key, text text not null, name text not null, rating_total integer not null default 0, rating_count integer not null default 0, created_at text not null)\",\n );\n await sqlite.execute(\n \"create table if not exists app_settings (key text primary key, value text not null)\",\n );\n await sqlite.execute(\n \"create table if not exists quote_ratings (quote_id text not null, voter_id text not null, rating_version text not null default '1', rating integer not null, created_at text not null, primary key (quote_id, voter_id, rating_version))\",\n );\n await sqlite.execute(\n \"create table if not exists pending_quotes (id text primary key, text text not null, name text not null, submitted_by text not null default 'Okänd', created_at text not null)\",\n );\n await sqlite.execute(\n \"create table if not exists visitor_presence (visitor_id text primary key, display_name text not null default 'Unknown', page text not null default 'Okänd sida', last_seen text not null)\",\n );\n\n await trySql(\n \"alter table quotes add column rating_total integer not null default 0\",\n );\n await trySql(\n \"alter table quotes add column rating_count integer not null default 0\",\n );\n await trySql(\n \"alter table quote_ratings add column rating_version text not null default '1'\",\n );\n await trySql(\n \"alter table pending_quotes add column submitted_by text not null default 'Okänd'\",\n );\n await trySql(\n \"alter table visitor_presence add column display_name text not null default 'Unknown'\",\n );\n await trySql(\n \"alter table visitor_presence add column page text not null default 'Okänd sida'\",\n );\n await trySql(\n \"alter table visitor_presence add column last_seen text not null default '1970-01-01T00:00:00.000Z'\",\n );\n\n await ensureSetting(\"rating_version\", \"1\");\n await ensureSetting(\"data_version\", \"1\");\n await ensureSetting(\"rating_password_required\", \"true\");\n await ensureSetting(\"rating_password_version\", \"1\");\n await ensureSetting(\"admin_password_version\", \"1\");\n\n if (!await getSetting(\"rating_password_hash\", \"\")) {\n await setSetting(\n \"rating_password_hash\",\n await hashRatingPassword(DEFAULT_RATING_PASSWORD),\n );\n }\n\n await removeOldStarterQuotesOnce();\n}\n\nasync function trySql(sql: string) {\n try {\n await sqlite.execute(sql);\n } catch {\n // Kolumnen finns redan eller migreringen behövs inte.\n }\n}\n\nasync function ensureSetting(key: string, value: string) {\n if (!await getSetting(key, \"\")) await setSetting(key, value);\n}\n\nasync function getSetting(key: string, fallback: string): Promise {\n const result = await sqlite.execute({\n sql: \"select value from app_settings where key = :key limit 1\",\n args: { key },\n });\n\n return String(\n (result.rows[0] as { value?: string } | undefined)?.value || fallback,\n );\n}\n\nasync function setSetting(key: string, value: string) {\n await sqlite.execute({\n sql:\n \"insert into app_settings (key, value) values (:key, :value) on conflict(key) do update set value = excluded.value\",\n args: { key, value },\n });\n}\n\nasync function bumpDataVersion() {\n await setSetting(\"data_version\", String(Date.now()));\n}\n\nasync function ratingPasswordRequired(): Promise {\n return await getSetting(\"rating_password_required\", \"true\") === \"true\";\n}\n\nasync function removeOldStarterQuotesOnce() {\n if (await getSetting(\"starter_quotes_removed_v6\", \"\")) return;\n\n await sqlite.execute(\n \"delete from quotes where (text = 'Jag är inte sen, tiden är tidig' and name = 'Wille') or (text = 'Det där var nästan smart' and name = 'Alex') or (text = 'Vi gör det enkelt och krånglar till det sen' and name = 'Nora') or (text = 'Solen skiner, men jag fattar ändå ingenting' and name = 'Sam')\",\n );\n await setSetting(\"starter_quotes_removed_v6\", \"true\");\n}\n\nasync function payload() {\n return {\n quotes: await getQuotes(),\n ratingVersion: await getSetting(\"rating_version\", \"1\"),\n dataVersion: await getSetting(\"data_version\", \"1\"),\n ratingPasswordRequired: await ratingPasswordRequired(),\n };\n}\n\nasync function versionPayload() {\n return {\n ratingVersion: await getSetting(\"rating_version\", \"1\"),\n dataVersion: await getSetting(\"data_version\", \"1\"),\n ratingPasswordRequired: await ratingPasswordRequired(),\n };\n}\n\nasync function getQuotes(): Promise {\n const result = await sqlite.execute(\n \"select id, text, name, coalesce(rating_total, 0) as rating_total, coalesce(rating_count, 0) as rating_count, created_at from quotes order by coalesce(rating_total, 0) desc, abs(length(text) - coalesce((select avg(length(text)) from quotes), 0)) asc, coalesce(rating_count, 0) desc, text collate nocase asc\",\n );\n\n return result.rows as Quote[];\n}\n\nasync function quoteExists(id: string): Promise {\n const result = await sqlite.execute({\n sql: \"select id from quotes where id = :id limit 1\",\n args: { id },\n });\n\n return result.rows.length > 0;\n}\n\nasync function getPendingQuotes(): Promise {\n const result = await sqlite.execute(\n \"select id, text, name, submitted_by, created_at from pending_quotes order by created_at asc\",\n );\n return result.rows as PendingQuote[];\n}\n\nasync function pendingExists(id: string): Promise {\n const result = await sqlite.execute({\n sql:\n \"select id, text, name, submitted_by, created_at from pending_quotes where id = :id limit 1\",\n args: { id },\n });\n\n return result.rows.length ? result.rows[0] as PendingQuote : null;\n}\n\nasync function addQuote(text: string, name: string) {\n await addQuotesBulk([{ text, name }]);\n}\n\nasync function addQuotesBulk(quotes: Array<{ text: string; name: string }>) {\n for (let start = 0; start < quotes.length; start += 150) {\n const chunk = quotes.slice(start, start + 150);\n const args: Record = {};\n const created = new Date().toISOString();\n\n const values = chunk.map((quote, index) => {\n args[\"id\" + index] = crypto.randomUUID();\n args[\"text\" + index] = quote.text;\n args[\"name\" + index] = quote.name;\n args[\"created\" + index] = created;\n\n return \"(:id\" + index + \", :text\" + index + \", :name\" + index +\n \", 0, 0, :created\" + index + \")\";\n }).join(\", \");\n\n await sqlite.execute({\n sql:\n \"insert into quotes (id, text, name, rating_total, rating_count, created_at) values \" +\n values,\n args,\n });\n }\n}\n\nfunction parseImportLine(line: string): { text: string; name: string } | null {\n let cleaned = line.trim();\n\n while (\n cleaned.startsWith(\"-\") || cleaned.startsWith(\"•\") ||\n cleaned.startsWith(\"*\")\n ) {\n cleaned = cleaned.slice(1).trim();\n }\n\n const separators = [\" — \", \" – \", \" - \", \"—\", \"–\", \"-\"];\n let bestIndex = -1;\n let bestSeparator = \"\";\n\n for (const separator of separators) {\n const index = cleaned.lastIndexOf(separator);\n if (index > bestIndex) {\n bestIndex = index;\n bestSeparator = separator;\n }\n }\n\n if (bestIndex < 1) return null;\n\n let text = cleaned.slice(0, bestIndex).trim();\n const name = cleaned.slice(bestIndex + bestSeparator.length).trim();\n\n if (text.startsWith('\"') && text.endsWith('\"')) {\n text = text.slice(1, -1).trim();\n }\n if (text.startsWith(\"“\") && text.endsWith(\"”\")) {\n text = text.slice(1, -1).trim();\n }\n\n return text && name ? { text, name } : null;\n}\n\nasync function adminSession(req: Request) {\n const ok = await isAdmin(req);\n return json(\n { ok },\n 200,\n ok ? {} : { \"set-cookie\": clearCookie(ADMIN_COOKIE) },\n );\n}\n\nasync function adminLogin(req: Request) {\n const body = await readJson(req);\n const password = String(body.password || \"\");\n\n if (!await checkAdminPassword(password)) {\n return json({ error: \"Fel lösenord.\" }, 401, {\n \"set-cookie\": clearCookie(ADMIN_COOKIE),\n });\n }\n\n return json({ ok: true }, 200, {\n \"set-cookie\": await createAccessCookie(\n ADMIN_COOKIE,\n \"admin\",\n \"admin_password_version\",\n 30 * DAY,\n ),\n });\n}\n\nasync function requireAdmin(req: Request): Promise {\n if (await isAdmin(req)) return null;\n return json({ error: \"Du behöver logga in igen.\" }, 401, {\n \"set-cookie\": clearCookie(ADMIN_COOKIE),\n });\n}\n\nasync function isAdmin(req: Request): Promise {\n return await verifyAccessCookie(\n req,\n ADMIN_COOKIE,\n \"admin\",\n \"admin_password_version\",\n );\n}\n\nasync function checkAdminPassword(password: string): Promise {\n const savedHash = await getSetting(\"admin_password_hash\", \"\");\n if (savedHash) return safeEqual(savedHash, await hashAdminPassword(password));\n\n const configured = Deno.env.get(ADMIN_ENV);\n return Boolean(configured && password === configured);\n}\n\nasync function ratingSession(req: Request) {\n const required = await ratingPasswordRequired();\n const ok = !required ||\n await verifyAccessCookie(\n req,\n RATING_COOKIE,\n \"rating\",\n \"rating_password_version\",\n );\n\n return json(\n { required, ok },\n 200,\n ok ? {} : { \"set-cookie\": clearCookie(RATING_COOKIE) },\n );\n}\n\nasync function ratingLogin(req: Request) {\n if (!await ratingPasswordRequired()) {\n return json({ ok: true, required: false });\n }\n\n const body = await readJson(req);\n const password = String(body.password || \"\");\n const savedHash = await getSetting(\"rating_password_hash\", \"\");\n const incomingHash = await hashRatingPassword(password);\n\n if (!savedHash || !safeEqual(savedHash, incomingHash)) {\n return json({ error: \"Fel lösenord.\" }, 401, {\n \"set-cookie\": clearCookie(RATING_COOKIE),\n });\n }\n\n return json({ ok: true, required: true }, 200, {\n \"set-cookie\": await createAccessCookie(\n RATING_COOKIE,\n \"rating\",\n \"rating_password_version\",\n SHORT_ACCESS_SECONDS,\n ),\n });\n}\n\nasync function addSession(req: Request) {\n const parsed = await readAccessCookie(req, ADD_COOKIE, \"add\", \"\");\n const email = String(parsed?.submitter || \"\").trim();\n const ok = Boolean(email);\n\n return json(\n { ok, email, name: email },\n 200,\n ok ? {} : { \"set-cookie\": clearCookie(ADD_COOKIE) },\n );\n}\n\nasync function addLogin(req: Request) {\n const body = await readJson(req);\n const email = cleanEmail(String(body.email || body.name || \"\"));\n\n if (!email) {\n return json({ error: \"Skriv din skolmejl först.\" }, 400, {\n \"set-cookie\": clearCookie(ADD_COOKIE),\n });\n }\n\n if (!email.endsWith(\"@edu.lerum.se\")) {\n return json({ error: \"Du måste använda en mejl som slutar på @edu.lerum.se.\" }, 403, {\n \"set-cookie\": clearCookie(ADD_COOKIE),\n });\n }\n\n return json({ ok: true, email, name: email }, 200, {\n \"set-cookie\": await createAccessCookie(\n ADD_COOKIE,\n \"add\",\n \"\",\n ADD_ACCESS_SECONDS,\n { submitter: email },\n ),\n });\n}\n\n$1(req: Request) {\n const submitter = await getAddSubmitterName(req);\n\n if (!submitter) {\n return json(\n { error: \"Skriv ditt namn först för att lägga till citat.\" },\n 401,\n { \"set-cookie\": clearCookie(ADD_COOKIE) },\n );\n }\n\n const body = await readJson(req);\n const text = String(body.text || \"\").trim();\n const name = String(body.name || \"\").trim();\n\n if (!text || !name) {\n return json({ error: \"Du behöver fylla i både citat och namn.\" }, 400);\n }\n\n await sqlite.execute({\n sql:\n \"insert into pending_quotes (id, text, name, submitted_by, created_at) values (:id, :text, :name, :submitted_by, :created)\",\n args: {\n id: crypto.randomUUID(),\n text,\n name,\n submitted_by: submitter,\n created: new Date().toISOString(),\n },\n });\n\n await bumpDataVersion();\n return json({ ok: true });\n}\n\nasync function rateQuote(req: Request) {\n const visitorName = await getAddSubmitterName(req);\n\n if (!visitorName) {\n return json(\n {\n error: \"Skriv ditt namn först för att betygsätta.\",\n needsName: true,\n },\n 401,\n );\n }\n\n if (\n await ratingPasswordRequired() &&\n !await verifyAccessCookie(\n req,\n RATING_COOKIE,\n \"rating\",\n \"rating_password_version\",\n )\n ) {\n return json(\n { error: \"Du behöver skriva lösenordet för att betygsätta.\" },\n 401,\n {\n \"set-cookie\": clearCookie(RATING_COOKIE),\n },\n );\n }\n\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n const rating = Math.floor(Number(body.rating || 0));\n\n if (!id) return json({ error: \"Citat-id saknas.\" }, 400);\n if (rating < 1 || rating > 5) {\n return json({ error: \"Betyget måste vara mellan 1 och 5.\" }, 400);\n }\n if (!await quoteExists(id)) {\n return json({ error: \"Citatet finns inte längre.\" }, 404);\n }\n\n const voter = getOrCreateVoter(req);\n const ratingVersion = await getSetting(\"rating_version\", \"1\");\n\n const old = await sqlite.execute({\n sql:\n \"select rating from quote_ratings where quote_id = :id and voter_id = :voter and rating_version = :version limit 1\",\n args: { id, voter: voter.id, version: ratingVersion },\n });\n\n if (old.rows.length) {\n return json(\n { error: \"Du har redan betygsatt det här citatet.\" },\n 409,\n voter.cookie ? { \"set-cookie\": voter.cookie } : {},\n );\n }\n\n await sqlite.execute({\n sql:\n \"insert into quote_ratings (quote_id, voter_id, rating_version, rating, created_at) values (:id, :voter, :version, :rating, :created)\",\n args: {\n id,\n voter: voter.id,\n version: ratingVersion,\n rating,\n created: new Date().toISOString(),\n },\n });\n\n await sqlite.execute({\n sql:\n \"update quotes set rating_total = coalesce(rating_total, 0) + :rating, rating_count = coalesce(rating_count, 0) + 1 where id = :id\",\n args: { id, rating },\n });\n\n await bumpDataVersion();\n return json(\n await payload(),\n 200,\n voter.cookie ? { \"set-cookie\": voter.cookie } : {},\n );\n}\n\nasync function presenceHeartbeat(req: Request) {\n const visitor = getOrCreateVisitor(req);\n const body = await readJson(req);\n const rawPage = String(body.page || \"Start\").trim();\n const page = cleanName(rawPage || \"Start\");\n const addName = await getAddSubmitterName(req);\n const displayName = addName ? cleanName(addName) : \"Unknown\";\n\n await sqlite.execute({\n sql:\n \"insert into visitor_presence (visitor_id, display_name, page, last_seen) values (:visitor_id, :display_name, :page, :last_seen) on conflict(visitor_id) do update set display_name = excluded.display_name, page = excluded.page, last_seen = excluded.last_seen\",\n args: {\n visitor_id: visitor.id,\n display_name: displayName,\n page,\n last_seen: new Date().toISOString(),\n },\n });\n\n return json(\n { ok: true },\n 200,\n visitor.cookie ? { \"set-cookie\": visitor.cookie } : {},\n );\n}\n\nasync function adminPresenceRoute() {\n await cleanupOldPresence();\n\n const cutoff = new Date(Date.now() - PRESENCE_WINDOW_SECONDS * 1000)\n .toISOString();\n\n const result = await sqlite.execute({\n sql:\n \"select visitor_id, display_name, page, last_seen from visitor_presence where last_seen >= :cutoff order by last_seen desc\",\n args: { cutoff },\n });\n\n const visitors = result.rows as OnlineVisitor[];\n return json({ onlineCount: visitors.length, visitors });\n}\n\nasync function cleanupOldPresence() {\n const oldCutoff = new Date(Date.now() - 10 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: \"delete from visitor_presence where last_seen < :oldCutoff\",\n args: { oldCutoff },\n });\n}\n\nasync function pendingRoute() {\n return json({ pendingQuotes: await getPendingQuotes() });\n}\n\nasync function approvePendingRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n\n if (!id) return json({ error: \"Saknar väntliste-id.\" }, 400);\n\n const pending = await pendingExists(id);\n if (!pending) {\n return json({ error: \"Citatet finns inte i väntlistan längre.\" }, 404);\n }\n\n await addQuote(pending.text, pending.name);\n await sqlite.execute({\n sql: \"delete from pending_quotes where id = :id\",\n args: { id },\n });\n await bumpDataVersion();\n\n return json({\n ...(await payload()),\n pendingQuotes: await getPendingQuotes(),\n });\n}\n\nasync function rejectPendingRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n\n if (!id) return json({ error: \"Saknar väntliste-id.\" }, 400);\n\n await sqlite.execute({\n sql: \"delete from pending_quotes where id = :id\",\n args: { id },\n });\n await bumpDataVersion();\n\n return json({ pendingQuotes: await getPendingQuotes() });\n}\n\nasync function saveAdminPassword(req: Request) {\n const body = await readJson(req);\n const password = String(body.password || \"\").trim();\n\n if (password.length < 4) {\n return json({ error: \"Adminlösenordet måste vara minst 4 tecken.\" }, 400);\n }\n\n await setSetting(\"admin_password_hash\", await hashAdminPassword(password));\n await setSetting(\"admin_password_version\", String(Date.now()));\n await bumpDataVersion();\n\n return json({ ok: true }, 200, { \"set-cookie\": clearCookie(ADMIN_COOKIE) });\n}\n\nasync function saveRatingSettings(req: Request) {\n const body = await readJson(req);\n const required = Boolean(body.passwordRequired);\n const password = String(body.password || \"\").trim();\n\n await setSetting(\"rating_password_required\", required ? \"true\" : \"false\");\n\n if (password) {\n await setSetting(\n \"rating_password_hash\",\n await hashRatingPassword(password),\n );\n await setSetting(\"rating_password_version\", String(Date.now()));\n }\n\n await bumpDataVersion();\n\n return json(\n { ok: true, ratingPasswordRequired: await ratingPasswordRequired() },\n 200,\n password\n ? {\n \"set-cookie\": clearCookie(RATING_COOKIE),\n }\n : {},\n );\n}\n\nasync function addRoute(req: Request) {\n const body = await readJson(req);\n const text = String(body.text || \"\").trim();\n const name = String(body.name || \"\").trim();\n\n if (!text || !name) {\n return json({ error: \"Du behöver fylla i både citat och namn.\" }, 400);\n }\n\n await addQuote(text, name);\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function importRoute(req: Request) {\n const body = await readJson(req);\n const lines = String(body.text || \"\").split(String.fromCharCode(10)).map((\n line,\n ) => line.trim()).filter(Boolean);\n\n const failedLines: number[] = [];\n const parsedQuotes: Array<{ text: string; name: string }> = [];\n\n for (const [index, line] of lines.entries()) {\n const parsed = parseImportLine(line);\n if (parsed) parsedQuotes.push(parsed);\n else failedLines.push(index + 1);\n }\n\n if (parsedQuotes.length) {\n await addQuotesBulk(parsedQuotes);\n await bumpDataVersion();\n }\n\n const response: Record = {\n imported: parsedQuotes.length,\n failedLines,\n };\n\n if (body.returnQuotes !== false) Object.assign(response, await payload());\n\n return json(response);\n}\n\nasync function updateRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n const field = String(body.field || \"\").trim();\n const value = String(body.value || \"\").trim();\n\n if (!id) return json({ error: \"Citat-id saknas.\" }, 400);\n if (!value) return json({ error: \"Fältet får inte vara tomt.\" }, 400);\n if (field !== \"text\" && field !== \"name\") {\n return json({ error: \"Okänt fält.\" }, 400);\n }\n\n await sqlite.execute({\n sql: \"update quotes set \" + field + \" = :value where id = :id\",\n args: { value, id },\n });\n\n await bumpDataVersion();\n return json(await payload());\n}\n\nasync function deleteRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n\n if (!id) return json({ error: \"Citat-id saknas.\" }, 400);\n\n await sqlite.execute({\n sql: \"delete from quote_ratings where quote_id = :id\",\n args: { id },\n });\n await sqlite.execute({\n sql: \"delete from quotes where id = :id\",\n args: { id },\n });\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function resetRatingsRoute() {\n await sqlite.execute(\"delete from quote_ratings\");\n await sqlite.execute(\"update quotes set rating_total = 0, rating_count = 0\");\n await setSetting(\"rating_version\", String(Date.now()));\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function clearRoute() {\n await sqlite.execute(\"delete from quote_ratings\");\n await sqlite.execute(\"delete from quotes\");\n await setSetting(\"rating_version\", String(Date.now()));\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function hashRatingPassword(password: string): Promise {\n return await signText(\"rating-password:\" + password);\n}\n\nasync function hashAdminPassword(password: string): Promise {\n return await signText(\"admin-password:\" + password);\n}\n\nfunction cleanName(name: string): string {\n return name.replaceAll(\"<\", \"\").replaceAll(\">\", \"\").trim().slice(0, 60);\n}\n\nfunction cleanEmail(email: string): string {\n return email\n .replaceAll(\"<\", \"\")\n .replaceAll(\">\", \"\")\n .trim()\n .toLowerCase()\n .slice(0, 120);\n}\n\nasync function createAccessCookie(\n name: string,\n type: string,\n versionKey: string,\n maxAge: number,\n extra: Record = {},\n): Promise {\n const payloadData: Record = {\n ...extra,\n type,\n exp: Date.now() + maxAge * 1000,\n };\n\n if (versionKey) payloadData.version = await getSetting(versionKey, \"1\");\n\n const payload = base64UrlEncode(JSON.stringify(payloadData));\n const signature = await signText(payload);\n\n return buildCookie(name, payload + \".\" + signature, maxAge, true);\n}\n\nasync function verifyAccessCookie(\n req: Request,\n name: string,\n type: string,\n versionKey: string,\n): Promise {\n return Boolean(await readAccessCookie(req, name, type, versionKey));\n}\n\nasync function readAccessCookie(\n req: Request,\n name: string,\n type: string,\n versionKey: string,\n): Promise | null> {\n const token = getCookie(req, name);\n if (!token) return null;\n\n const parts = token.split(\".\");\n if (parts.length !== 2) return null;\n\n const [payload, signature] = parts;\n if (!safeEqual(signature, await signText(payload))) return null;\n\n try {\n const parsed = JSON.parse(base64UrlDecode(payload)) as\n & Record\n & {\n type?: string;\n version?: string;\n exp?: number;\n };\n\n if (parsed.type !== type) return null;\n if (Number(parsed.exp || 0) <= Date.now()) return null;\n if (\n versionKey &&\n String(parsed.version || \"\") !== await getSetting(versionKey, \"1\")\n ) return null;\n\n return parsed;\n } catch {\n return null;\n }\n}\n\nasync function getAddSubmitterName(req: Request): Promise {\n const parsed = await readAccessCookie(req, ADD_COOKIE, \"add\", \"\");\n const submitter = String(parsed?.submitter || \"\").trim();\n\n return submitter || null;\n}\n\nasync function signText(text: string): Promise {\n const secret = Deno.env.get(SECRET_ENV) || Deno.env.get(ADMIN_ENV) ||\n \"sommarcitat-fallback-secret\";\n\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n\n const signature = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(text),\n );\n return base64UrlEncodeBytes(new Uint8Array(signature));\n}\n\nfunction safeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n\n let result = 0;\n\n for (let i = 0; i < a.length; i += 1) {\n result |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n\n return result === 0;\n}\n\nfunction getOrCreateVoter(req: Request): { id: string; cookie?: string } {\n const existing = getCookie(req, VOTER_COOKIE);\n if (existing && isSafeToken(existing)) return { id: existing };\n\n const id = crypto.randomUUID();\n return { id, cookie: buildCookie(VOTER_COOKIE, id, 365 * DAY, true) };\n}\n\nfunction getOrCreateVisitor(req: Request): { id: string; cookie?: string } {\n const existing = getCookie(req, \"sommarcitat_visitor\");\n if (existing && isSafeToken(existing)) return { id: existing };\n\n const id = crypto.randomUUID();\n return {\n id,\n cookie: buildCookie(\"sommarcitat_visitor\", id, 365 * DAY, true),\n };\n}\n\nfunction isSafeToken(value: string): boolean {\n if (value.length < 10 || value.length > 80) return false;\n\n const allowed =\n \"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_-\";\n\n for (const char of value) {\n if (!allowed.includes(char)) return false;\n }\n\n return true;\n}\n\nfunction getCookie(req: Request, name: string): string | null {\n const prefix = name + \"=\";\n\n const found = (req.headers.get(\"cookie\") || \"\")\n .split(\";\")\n .map((part) => part.trim())\n .find((part) => part.startsWith(prefix));\n\n return found ? decodeURIComponent(found.slice(prefix.length)) : null;\n}\n\nfunction buildCookie(\n name: string,\n value: string,\n maxAge: number,\n httpOnly: boolean,\n): string {\n const parts = [\n name + \"=\" + encodeURIComponent(value),\n \"Path=/\",\n \"Max-Age=\" + maxAge,\n \"SameSite=Lax\",\n \"Secure\",\n ];\n\n if (httpOnly) parts.push(\"HttpOnly\");\n\n return parts.join(\"; \");\n}\n\nfunction clearCookie(name: string): string {\n return name + \"=; Path=/; Max-Age=0; SameSite=Lax; Secure; HttpOnly\";\n}\n\nfunction base64UrlEncode(text: string): string {\n return base64UrlEncodeBytes(new TextEncoder().encode(text));\n}\n\nfunction base64UrlEncodeBytes(bytes: Uint8Array): string {\n let binary = \"\";\n\n for (const byte of bytes) binary += String.fromCharCode(byte);\n\n return btoa(binary).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replaceAll(\n \"=\",\n \"\",\n );\n}\n\nfunction base64UrlDecode(text: string): string {\n const normalized = text.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\");\n return atob(normalized + \"=\".repeat((4 - normalized.length % 4) % 4));\n}\n\nasync function readJson(req: Request): Promise> {\n try {\n return await req.json();\n } catch {\n return {};\n }\n}\n\nfunction json(\n data: unknown,\n status = 200,\n extraHeaders: ExtraHeaders = {},\n): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: securityHeaders(\"application/json; charset=utf-8\", extraHeaders),\n });\n}\n\nfunction html(): Response {\n const nonce = createNonce();\n\n const page = APP_HTML\n .replace(\n '',\n ``,\n )\n .replace(\n '',\n ``,\n );\n\n return new Response(page, {\n headers: securityHeaders(\"text/html; charset=utf-8\", {}, false, nonce),\n });\n}\n\nfunction css(): Response {\n return new Response(STYLE_CSS, {\n headers: securityHeaders(\"text/css; charset=utf-8\", {}, true),\n });\n}\n\nfunction js(): Response {\n return new Response(CLIENT_JS, {\n headers: securityHeaders(\"application/javascript; charset=utf-8\", {}, true),\n });\n}\n\nfunction createNonce(): string {\n const bytes = new Uint8Array(16);\n crypto.getRandomValues(bytes);\n\n return base64UrlEncodeBytes(bytes);\n}\n\nfunction securityHeaders(\n contentType: string,\n extraHeaders: ExtraHeaders = {},\n allowCache = false,\n nonce = \"\",\n): Headers {\n const headers = new Headers();\n\n headers.set(\"content-type\", contentType);\n headers.set(\"x-content-type-options\", \"nosniff\");\n headers.set(\"referrer-policy\", \"no-referrer\");\n headers.set(\n \"permissions-policy\",\n \"camera=(), microphone=(), geolocation=(), payment=(), usb=(), fullscreen=(self)\",\n );\n headers.set(\"cross-origin-opener-policy\", \"same-origin\");\n headers.set(\"cross-origin-resource-policy\", \"same-origin\");\n headers.set(\"cache-control\", allowCache ? \"public, max-age=60\" : \"no-store\");\n\n headers.set(\n \"content-security-policy\",\n nonce\n ? `default-src 'self'; script-src 'self' 'nonce-${nonce}'; style-src 'self' 'nonce-${nonce}'; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'`\n : \"default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'\",\n );\n\n for (const [key, value] of Object.entries(extraHeaders)) {\n if (Array.isArray(value)) {\n value.forEach((item) => headers.append(key, item));\n } else headers.append(key, value);\n }\n\n return headers;\n}","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst rawSqliteExecute = sqlite.execute.bind(sqlite);\n\ntype SqlInput = Parameters[0];\ntype SqlResult = Awaited>;\n\nlet initDbPromise: Promise | null = null;\n\nasync function ensureDb(): Promise {\n if (!initDbPromise) {\n initDbPromise = initDb().catch((error) => {\n initDbPromise = null;\n throw error;\n });\n }\n\n return initDbPromise;\n}\n\nasync function dbExecute(input: SqlInput): Promise {\n let lastError: unknown;\n\n for (let attempt = 0; attempt < 3; attempt += 1) {\n try {\n return await rawSqliteExecute(input);\n } catch (error) {\n lastError = error;\n if (attempt < 2) await sleep(180 + attempt * 260);\n }\n }\n\n throw lastError;\n}\n\nfunction sleep(ms: number): Promise {\n return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n(sqlite as unknown as { execute: (input: SqlInput) => Promise })\n .execute = dbExecute;\n\nasync function loadTextModule(\n fileBase: string,\n exportName: string,\n): Promise {\n const capitalized = fileBase.charAt(0).toUpperCase() + fileBase.slice(1);\n const paths = [\n `./${fileBase}.ts`,\n `./${fileBase}`,\n `./${capitalized}.ts`,\n `./${capitalized}`,\n ];\n\n const attempts: string[] = [];\n\n for (const path of paths) {\n try {\n const module = await import(path) as Record;\n const value = module[exportName] ?? module.default;\n const exportsFound = Object.keys(module).join(\", \") || \"inga exports\";\n attempts.push(`${path}: ${exportsFound}`);\n\n if (typeof value === \"string\" && value.trim()) return value;\n } catch (error) {\n attempts.push(\n `${path}: ${error instanceof Error ? error.message : String(error)}`,\n );\n }\n }\n\n throw new Error(\n `${fileBase}.ts saknar ${exportName}. Testade: ${attempts.join(\" | \")}`,\n );\n}\n\nconst APP_HTML = await loadTextModule(\"ui\", \"APP_HTML\");\nconst STYLE_CSS = await loadTextModule(\"style\", \"STYLE_CSS\");\nconst CLIENT_JS = await loadTextModule(\"client\", \"CLIENT_JS\");\n\ntype Quote = {\n id: string;\n text: string;\n name: string;\n rating_total: number;\n rating_count: number;\n created_at: string;\n};\n\ntype PendingQuote = {\n id: string;\n text: string;\n name: string;\n submitted_by: string;\n created_at: string;\n};\n\ntype OnlineVisitor = {\n visitor_id: string;\n display_name: string;\n page: string;\n last_seen: string;\n};\n\ntype ExtraHeaders = Record;\n\nconst ADMIN_ENV = \"ADMIN_PASSWORD\";\nconst SECRET_ENV = \"ADMIN_SESSION_SECRET\";\nconst ADMIN_COOKIE = \"sommarcitat_admin\";\nconst VOTER_COOKIE = \"sommarcitat_voter\";\nconst RATING_COOKIE = \"sommarcitat_rating_access\";\nconst ADD_COOKIE = \"sommarcitat_add_access\";\n\nconst DEFAULT_RATING_PASSWORD = \"114abc\";\nconst DAY = 24 * 60 * 60;\nconst SHORT_ACCESS_SECONDS = 10 * 60;\nconst ADD_ACCESS_SECONDS = 30 * DAY;\nconst PRESENCE_WINDOW_SECONDS = 70;\n\nexport default async function handler(req: Request): Promise {\n await ensureDb();\n\n const url = new URL(req.url);\n const path = route(url.pathname);\n const method = req.method.toUpperCase();\n\n try {\n if (method === \"GET\" && isStylePath(path)) return css();\n if (method === \"GET\" && isScriptPath(path)) return js();\n if (method === \"GET\" && !path.startsWith(\"/api/\")) return html();\n\n if (method === \"GET\" && path === \"/api/quotes\") {\n const visitorName = await getAddSubmitterName(req);\n\n if (!visitorName) {\n return json(\n {\n error: \"Skriv ditt namn först för att se citaten.\",\n needsName: true,\n },\n 401,\n );\n }\n\n return json(await payload());\n }\n\n if (method === \"GET\" && path === \"/api/version\") {\n const visitorName = await getAddSubmitterName(req);\n\n if (!visitorName) {\n return json(\n {\n error: \"Skriv ditt namn först.\",\n needsName: true,\n },\n 401,\n );\n }\n\n return json(await versionPayload());\n }\n\n if (method === \"POST\" && path === \"/api/presence/heartbeat\") {\n return presenceHeartbeat(req);\n }\n\n if (method === \"GET\" && path === \"/api/admin/session\") {\n return adminSession(req);\n }\n if (method === \"POST\" && path === \"/api/admin/login\") {\n return adminLogin(req);\n }\n if (method === \"POST\" && path === \"/api/admin/logout\") {\n return json({ ok: true }, 200, {\n \"set-cookie\": clearCookie(ADMIN_COOKIE),\n });\n }\n\n if (method === \"GET\" && path === \"/api/rating-access/session\") {\n return ratingSession(req);\n }\n if (method === \"POST\" && path === \"/api/rating-access/login\") {\n return ratingLogin(req);\n }\n\n if (method === \"GET\" && path === \"/api/add-access/session\") {\n return addSession(req);\n }\n if (method === \"POST\" && path === \"/api/add-access/login\") {\n return addLogin(req);\n }\n if (method === \"POST\" && path === \"/api/add-access/logout\") {\n return json({ ok: true }, 200, {\n \"set-cookie\": clearCookie(ADD_COOKIE),\n });\n }\n if (method === \"POST\" && path === \"/api/add-pending\") {\n return addPendingRoute(req);\n }\n\n if (method === \"POST\" && path === \"/api/rate\") return rateQuote(req);\n\n if (path.startsWith(\"/api/admin/\")) {\n const guard = await requireAdmin(req);\n if (guard) return guard;\n }\n\n if (method === \"GET\" && path === \"/api/admin/presence\") {\n return adminPresenceRoute();\n }\n if (method === \"GET\" && path === \"/api/admin/pending\") {\n return pendingRoute();\n }\n if (method === \"POST\" && path === \"/api/admin/approve-pending\") {\n return approvePendingRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/reject-pending\") {\n return rejectPendingRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/admin-password\") {\n return saveAdminPassword(req);\n }\n if (method === \"POST\" && path === \"/api/admin/rating-settings\") {\n return saveRatingSettings(req);\n }\n if (method === \"POST\" && path === \"/api/admin/add\") return addRoute(req);\n if (method === \"POST\" && path === \"/api/admin/import\") {\n return importRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/update\") {\n return updateRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/delete\") {\n return deleteRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/reset-ratings\") {\n return resetRatingsRoute();\n }\n if (method === \"POST\" && path === \"/api/admin/clear\") return clearRoute();\n\n return json({ error: \"Sidan finns inte.\" }, 404);\n } catch (error) {\n console.error(error);\n return json({ error: \"Något gick fel på servern.\" }, 500);\n }\n}\n\nfunction route(pathname: string): string {\n const apiStart = pathname.indexOf(\"/api/\");\n if (apiStart >= 0) return pathname.slice(apiStart);\n return pathname;\n}\n\nfunction isStylePath(path: string): boolean {\n return path === \"/style.css\" || path.endsWith(\"/style.css\");\n}\n\nfunction isScriptPath(path: string): boolean {\n return path === \"/app.js\" || path.endsWith(\"/app.js\");\n}\n\nasync function initDb() {\n await sqlite.execute(\n \"create table if not exists quotes (id text primary key, text text not null, name text not null, rating_total integer not null default 0, rating_count integer not null default 0, created_at text not null)\",\n );\n await sqlite.execute(\n \"create table if not exists app_settings (key text primary key, value text not null)\",\n );\n await sqlite.execute(\n \"create table if not exists quote_ratings (quote_id text not null, voter_id text not null, rating_version text not null default '1', rating integer not null, created_at text not null, primary key (quote_id, voter_id, rating_version))\",\n );\n await sqlite.execute(\n \"create table if not exists pending_quotes (id text primary key, text text not null, name text not null, submitted_by text not null default 'Okänd', created_at text not null)\",\n );\n await sqlite.execute(\n \"create table if not exists visitor_presence (visitor_id text primary key, display_name text not null default 'Unknown', page text not null default 'Okänd sida', last_seen text not null)\",\n );\n\n await trySql(\n \"alter table quotes add column rating_total integer not null default 0\",\n );\n await trySql(\n \"alter table quotes add column rating_count integer not null default 0\",\n );\n await trySql(\n \"alter table quote_ratings add column rating_version text not null default '1'\",\n );\n await trySql(\n \"alter table pending_quotes add column submitted_by text not null default 'Okänd'\",\n );\n await trySql(\n \"alter table visitor_presence add column display_name text not null default 'Unknown'\",\n );\n await trySql(\n \"alter table visitor_presence add column page text not null default 'Okänd sida'\",\n );\n await trySql(\n \"alter table visitor_presence add column last_seen text not null default '1970-01-01T00:00:00.000Z'\",\n );\n\n await ensureSetting(\"rating_version\", \"1\");\n await ensureSetting(\"data_version\", \"1\");\n await ensureSetting(\"rating_password_required\", \"true\");\n await ensureSetting(\"rating_password_version\", \"1\");\n await ensureSetting(\"admin_password_version\", \"1\");\n\n if (!await getSetting(\"rating_password_hash\", \"\")) {\n await setSetting(\n \"rating_password_hash\",\n await hashRatingPassword(DEFAULT_RATING_PASSWORD),\n );\n }\n\n await removeOldStarterQuotesOnce();\n}\n\nasync function trySql(sql: string) {\n try {\n await sqlite.execute(sql);\n } catch {\n // Kolumnen finns redan eller migreringen behövs inte.\n }\n}\n\nasync function ensureSetting(key: string, value: string) {\n if (!await getSetting(key, \"\")) await setSetting(key, value);\n}\n\nasync function getSetting(key: string, fallback: string): Promise {\n const result = await sqlite.execute({\n sql: \"select value from app_settings where key = :key limit 1\",\n args: { key },\n });\n\n return String(\n (result.rows[0] as { value?: string } | undefined)?.value || fallback,\n );\n}\n\nasync function setSetting(key: string, value: string) {\n await sqlite.execute({\n sql:\n \"insert into app_settings (key, value) values (:key, :value) on conflict(key) do update set value = excluded.value\",\n args: { key, value },\n });\n}\n\nasync function bumpDataVersion() {\n await setSetting(\"data_version\", String(Date.now()));\n}\n\nasync function ratingPasswordRequired(): Promise {\n return await getSetting(\"rating_password_required\", \"true\") === \"true\";\n}\n\nasync function removeOldStarterQuotesOnce() {\n if (await getSetting(\"starter_quotes_removed_v6\", \"\")) return;\n\n await sqlite.execute(\n \"delete from quotes where (text = 'Jag är inte sen, tiden är tidig' and name = 'Wille') or (text = 'Det där var nästan smart' and name = 'Alex') or (text = 'Vi gör det enkelt och krånglar till det sen' and name = 'Nora') or (text = 'Solen skiner, men jag fattar ändå ingenting' and name = 'Sam')\",\n );\n await setSetting(\"starter_quotes_removed_v6\", \"true\");\n}\n\nasync function payload() {\n return {\n quotes: await getQuotes(),\n ratingVersion: await getSetting(\"rating_version\", \"1\"),\n dataVersion: await getSetting(\"data_version\", \"1\"),\n ratingPasswordRequired: await ratingPasswordRequired(),\n };\n}\n\nasync function versionPayload() {\n return {\n ratingVersion: await getSetting(\"rating_version\", \"1\"),\n dataVersion: await getSetting(\"data_version\", \"1\"),\n ratingPasswordRequired: await ratingPasswordRequired(),\n };\n}\n\nasync function getQuotes(): Promise {\n const result = await sqlite.execute(\n \"select id, text, name, coalesce(rating_total, 0) as rating_total, coalesce(rating_count, 0) as rating_count, created_at from quotes order by coalesce(rating_total, 0) desc, abs(length(text) - coalesce((select avg(length(text)) from quotes), 0)) asc, coalesce(rating_count, 0) desc, text collate nocase asc\",\n );\n\n return result.rows as Quote[];\n}\n\nasync function quoteExists(id: string): Promise {\n const result = await sqlite.execute({\n sql: \"select id from quotes where id = :id limit 1\",\n args: { id },\n });\n\n return result.rows.length > 0;\n}\n\nasync function getPendingQuotes(): Promise {\n const result = await sqlite.execute(\n \"select id, text, name, submitted_by, created_at from pending_quotes order by created_at asc\",\n );\n return result.rows as PendingQuote[];\n}\n\nasync function pendingExists(id: string): Promise {\n const result = await sqlite.execute({\n sql:\n \"select id, text, name, submitted_by, created_at from pending_quotes where id = :id limit 1\",\n args: { id },\n });\n\n return result.rows.length ? result.rows[0] as PendingQuote : null;\n}\n\nasync function addQuote(text: string, name: string) {\n await addQuotesBulk([{ text, name }]);\n}\n\nasync function addQuotesBulk(quotes: Array<{ text: string; name: string }>) {\n for (let start = 0; start < quotes.length; start += 150) {\n const chunk = quotes.slice(start, start + 150);\n const args: Record = {};\n const created = new Date().toISOString();\n\n const values = chunk.map((quote, index) => {\n args[\"id\" + index] = crypto.randomUUID();\n args[\"text\" + index] = quote.text;\n args[\"name\" + index] = quote.name;\n args[\"created\" + index] = created;\n\n return \"(:id\" + index + \", :text\" + index + \", :name\" + index +\n \", 0, 0, :created\" + index + \")\";\n }).join(\", \");\n\n await sqlite.execute({\n sql:\n \"insert into quotes (id, text, name, rating_total, rating_count, created_at) values \" +\n values,\n args,\n });\n }\n}\n\nfunction parseImportLine(line: string): { text: string; name: string } | null {\n let cleaned = line.trim();\n\n while (\n cleaned.startsWith(\"-\") || cleaned.startsWith(\"•\") ||\n cleaned.startsWith(\"*\")\n ) {\n cleaned = cleaned.slice(1).trim();\n }\n\n const separators = [\" — \", \" – \", \" - \", \"—\", \"–\", \"-\"];\n let bestIndex = -1;\n let bestSeparator = \"\";\n\n for (const separator of separators) {\n const index = cleaned.lastIndexOf(separator);\n if (index > bestIndex) {\n bestIndex = index;\n bestSeparator = separator;\n }\n }\n\n if (bestIndex < 1) return null;\n\n let text = cleaned.slice(0, bestIndex).trim();\n const name = cleaned.slice(bestIndex + bestSeparator.length).trim();\n\n if (text.startsWith('\"') && text.endsWith('\"')) {\n text = text.slice(1, -1).trim();\n }\n if (text.startsWith(\"“\") && text.endsWith(\"”\")) {\n text = text.slice(1, -1).trim();\n }\n\n return text && name ? { text, name } : null;\n}\n\nasync function adminSession(req: Request) {\n const ok = await isAdmin(req);\n return json(\n { ok },\n 200,\n ok ? {} : { \"set-cookie\": clearCookie(ADMIN_COOKIE) },\n );\n}\n\nasync function adminLogin(req: Request) {\n const body = await readJson(req);\n const password = String(body.password || \"\");\n\n if (!await checkAdminPassword(password)) {\n return json({ error: \"Fel lösenord.\" }, 401, {\n \"set-cookie\": clearCookie(ADMIN_COOKIE),\n });\n }\n\n return json({ ok: true }, 200, {\n \"set-cookie\": await createAccessCookie(\n ADMIN_COOKIE,\n \"admin\",\n \"admin_password_version\",\n 30 * DAY,\n ),\n });\n}\n\nasync function requireAdmin(req: Request): Promise {\n if (await isAdmin(req)) return null;\n return json({ error: \"Du behöver logga in igen.\" }, 401, {\n \"set-cookie\": clearCookie(ADMIN_COOKIE),\n });\n}\n\nasync function isAdmin(req: Request): Promise {\n return await verifyAccessCookie(\n req,\n ADMIN_COOKIE,\n \"admin\",\n \"admin_password_version\",\n );\n}\n\nasync function checkAdminPassword(password: string): Promise {\n const savedHash = await getSetting(\"admin_password_hash\", \"\");\n if (savedHash) return safeEqual(savedHash, await hashAdminPassword(password));\n\n const configured = Deno.env.get(ADMIN_ENV);\n return Boolean(configured && password === configured);\n}\n\nasync function ratingSession(req: Request) {\n const required = await ratingPasswordRequired();\n const ok = !required ||\n await verifyAccessCookie(\n req,\n RATING_COOKIE,\n \"rating\",\n \"rating_password_version\",\n );\n\n return json(\n { required, ok },\n 200,\n ok ? {} : { \"set-cookie\": clearCookie(RATING_COOKIE) },\n );\n}\n\nasync function ratingLogin(req: Request) {\n if (!await ratingPasswordRequired()) {\n return json({ ok: true, required: false });\n }\n\n const body = await readJson(req);\n const password = String(body.password || \"\");\n const savedHash = await getSetting(\"rating_password_hash\", \"\");\n const incomingHash = await hashRatingPassword(password);\n\n if (!savedHash || !safeEqual(savedHash, incomingHash)) {\n return json({ error: \"Fel lösenord.\" }, 401, {\n \"set-cookie\": clearCookie(RATING_COOKIE),\n });\n }\n\n return json({ ok: true, required: true }, 200, {\n \"set-cookie\": await createAccessCookie(\n RATING_COOKIE,\n \"rating\",\n \"rating_password_version\",\n SHORT_ACCESS_SECONDS,\n ),\n });\n}\n\nasync function addSession(req: Request) {\n const parsed = await readAccessCookie(req, ADD_COOKIE, \"add\", \"\");\n const email = String(parsed?.submitter || \"\").trim();\n const ok = Boolean(email);\n\n return json(\n { ok, email, name: email },\n 200,\n ok ? {} : { \"set-cookie\": clearCookie(ADD_COOKIE) },\n );\n}\n\nasync function addLogin(req: Request) {\n const body = await readJson(req);\n const email = cleanEmail(String(body.email || body.name || \"\"));\n\n if (!email) {\n return json({ error: \"Skriv din skolmejl först.\" }, 400, {\n \"set-cookie\": clearCookie(ADD_COOKIE),\n });\n }\n\n if (!email.endsWith(\"@edu.lerum.se\")) {\n return json(\n { error: \"Du måste använda en mejl som slutar på @edu.lerum.se.\" },\n 403,\n {\n \"set-cookie\": clearCookie(ADD_COOKIE),\n },\n );\n }\n\n return json({ ok: true, email, name: email }, 200, {\n \"set-cookie\": await createAccessCookie(\n ADD_COOKIE,\n \"add\",\n \"\",\n ADD_ACCESS_SECONDS,\n { submitter: email },\n ),\n });\n}\n\nasync function addPendingRoute(req: Request) {\n const submitter = await getAddSubmitterName(req);\n\n if (!submitter) {\n return json(\n { error: \"Skriv ditt namn först för att lägga till citat.\" },\n 401,\n { \"set-cookie\": clearCookie(ADD_COOKIE) },\n );\n }\n\n const body = await readJson(req);\n const text = String(body.text || \"\").trim();\n const name = String(body.name || \"\").trim();\n\n if (!text || !name) {\n return json({ error: \"Du behöver fylla i både citat och namn.\" }, 400);\n }\n\n await sqlite.execute({\n sql:\n \"insert into pending_quotes (id, text, name, submitted_by, created_at) values (:id, :text, :name, :submitted_by, :created)\",\n args: {\n id: crypto.randomUUID(),\n text,\n name,\n submitted_by: submitter,\n created: new Date().toISOString(),\n },\n });\n\n await bumpDataVersion();\n return json({ ok: true });\n}\n\nasync function rateQuote(req: Request) {\n const visitorName = await getAddSubmitterName(req);\n\n if (!visitorName) {\n return json(\n {\n error: \"Skriv ditt namn först för att betygsätta.\",\n needsName: true,\n },\n 401,\n );\n }\n\n if (\n await ratingPasswordRequired() &&\n !await verifyAccessCookie(\n req,\n RATING_COOKIE,\n \"rating\",\n \"rating_password_version\",\n )\n ) {\n return json(\n { error: \"Du behöver skriva lösenordet för att betygsätta.\" },\n 401,\n {\n \"set-cookie\": clearCookie(RATING_COOKIE),\n },\n );\n }\n\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n const rating = Math.floor(Number(body.rating || 0));\n\n if (!id) return json({ error: \"Citat-id saknas.\" }, 400);\n if (rating < 1 || rating > 5) {\n return json({ error: \"Betyget måste vara mellan 1 och 5.\" }, 400);\n }\n if (!await quoteExists(id)) {\n return json({ error: \"Citatet finns inte längre.\" }, 404);\n }\n\n const voter = getOrCreateVoter(req);\n const ratingVersion = await getSetting(\"rating_version\", \"1\");\n\n const old = await sqlite.execute({\n sql:\n \"select rating from quote_ratings where quote_id = :id and voter_id = :voter and rating_version = :version limit 1\",\n args: { id, voter: voter.id, version: ratingVersion },\n });\n\n if (old.rows.length) {\n return json(\n { error: \"Du har redan betygsatt det här citatet.\" },\n 409,\n voter.cookie ? { \"set-cookie\": voter.cookie } : {},\n );\n }\n\n await sqlite.execute({\n sql:\n \"insert into quote_ratings (quote_id, voter_id, rating_version, rating, created_at) values (:id, :voter, :version, :rating, :created)\",\n args: {\n id,\n voter: voter.id,\n version: ratingVersion,\n rating,\n created: new Date().toISOString(),\n },\n });\n\n await sqlite.execute({\n sql:\n \"update quotes set rating_total = coalesce(rating_total, 0) + :rating, rating_count = coalesce(rating_count, 0) + 1 where id = :id\",\n args: { id, rating },\n });\n\n await bumpDataVersion();\n return json(\n await payload(),\n 200,\n voter.cookie ? { \"set-cookie\": voter.cookie } : {},\n );\n}\n\nasync function presenceHeartbeat(req: Request) {\n const visitor = getOrCreateVisitor(req);\n const body = await readJson(req);\n const rawPage = String(body.page || \"Start\").trim();\n const page = cleanName(rawPage || \"Start\");\n const addName = await getAddSubmitterName(req);\n const displayName = addName ? cleanName(addName) : \"Unknown\";\n\n await sqlite.execute({\n sql:\n \"insert into visitor_presence (visitor_id, display_name, page, last_seen) values (:visitor_id, :display_name, :page, :last_seen) on conflict(visitor_id) do update set display_name = excluded.display_name, page = excluded.page, last_seen = excluded.last_seen\",\n args: {\n visitor_id: visitor.id,\n display_name: displayName,\n page,\n last_seen: new Date().toISOString(),\n },\n });\n\n return json(\n { ok: true },\n 200,\n visitor.cookie ? { \"set-cookie\": visitor.cookie } : {},\n );\n}\n\nasync function adminPresenceRoute() {\n await cleanupOldPresence();\n\n const cutoff = new Date(Date.now() - PRESENCE_WINDOW_SECONDS * 1000)\n .toISOString();\n\n const result = await sqlite.execute({\n sql:\n \"select visitor_id, display_name, page, last_seen from visitor_presence where last_seen >= :cutoff order by last_seen desc\",\n args: { cutoff },\n });\n\n const visitors = result.rows as OnlineVisitor[];\n return json({ onlineCount: visitors.length, visitors });\n}\n\nasync function cleanupOldPresence() {\n const oldCutoff = new Date(Date.now() - 10 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: \"delete from visitor_presence where last_seen < :oldCutoff\",\n args: { oldCutoff },\n });\n}\n\nasync function pendingRoute() {\n return json({ pendingQuotes: await getPendingQuotes() });\n}\n\nasync function approvePendingRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n\n if (!id) return json({ error: \"Saknar väntliste-id.\" }, 400);\n\n const pending = await pendingExists(id);\n if (!pending) {\n return json({ error: \"Citatet finns inte i väntlistan längre.\" }, 404);\n }\n\n await addQuote(pending.text, pending.name);\n await sqlite.execute({\n sql: \"delete from pending_quotes where id = :id\",\n args: { id },\n });\n await bumpDataVersion();\n\n return json({\n ...(await payload()),\n pendingQuotes: await getPendingQuotes(),\n });\n}\n\nasync function rejectPendingRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n\n if (!id) return json({ error: \"Saknar väntliste-id.\" }, 400);\n\n await sqlite.execute({\n sql: \"delete from pending_quotes where id = :id\",\n args: { id },\n });\n await bumpDataVersion();\n\n return json({ pendingQuotes: await getPendingQuotes() });\n}\n\nasync function saveAdminPassword(req: Request) {\n const body = await readJson(req);\n const password = String(body.password || \"\").trim();\n\n if (password.length < 4) {\n return json({ error: \"Adminlösenordet måste vara minst 4 tecken.\" }, 400);\n }\n\n await setSetting(\"admin_password_hash\", await hashAdminPassword(password));\n await setSetting(\"admin_password_version\", String(Date.now()));\n await bumpDataVersion();\n\n return json({ ok: true }, 200, { \"set-cookie\": clearCookie(ADMIN_COOKIE) });\n}\n\nasync function saveRatingSettings(req: Request) {\n const body = await readJson(req);\n const required = Boolean(body.passwordRequired);\n const password = String(body.password || \"\").trim();\n\n await setSetting(\"rating_password_required\", required ? \"true\" : \"false\");\n\n if (password) {\n await setSetting(\n \"rating_password_hash\",\n await hashRatingPassword(password),\n );\n await setSetting(\"rating_password_version\", String(Date.now()));\n }\n\n await bumpDataVersion();\n\n return json(\n { ok: true, ratingPasswordRequired: await ratingPasswordRequired() },\n 200,\n password\n ? {\n \"set-cookie\": clearCookie(RATING_COOKIE),\n }\n : {},\n );\n}\n\nasync function addRoute(req: Request) {\n const body = await readJson(req);\n const text = String(body.text || \"\").trim();\n const name = String(body.name || \"\").trim();\n\n if (!text || !name) {\n return json({ error: \"Du behöver fylla i både citat och namn.\" }, 400);\n }\n\n await addQuote(text, name);\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function importRoute(req: Request) {\n const body = await readJson(req);\n const lines = String(body.text || \"\").split(String.fromCharCode(10)).map((\n line,\n ) => line.trim()).filter(Boolean);\n\n const failedLines: number[] = [];\n const parsedQuotes: Array<{ text: string; name: string }> = [];\n\n for (const [index, line] of lines.entries()) {\n const parsed = parseImportLine(line);\n if (parsed) parsedQuotes.push(parsed);\n else failedLines.push(index + 1);\n }\n\n if (parsedQuotes.length) {\n await addQuotesBulk(parsedQuotes);\n await bumpDataVersion();\n }\n\n const response: Record = {\n imported: parsedQuotes.length,\n failedLines,\n };\n\n if (body.returnQuotes !== false) Object.assign(response, await payload());\n\n return json(response);\n}\n\nasync function updateRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n const field = String(body.field || \"\").trim();\n const value = String(body.value || \"\").trim();\n\n if (!id) return json({ error: \"Citat-id saknas.\" }, 400);\n if (!value) return json({ error: \"Fältet får inte vara tomt.\" }, 400);\n if (field !== \"text\" && field !== \"name\") {\n return json({ error: \"Okänt fält.\" }, 400);\n }\n\n await sqlite.execute({\n sql: \"update quotes set \" + field + \" = :value where id = :id\",\n args: { value, id },\n });\n\n await bumpDataVersion();\n return json(await payload());\n}\n\nasync function deleteRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n\n if (!id) return json({ error: \"Citat-id saknas.\" }, 400);\n\n await sqlite.execute({\n sql: \"delete from quote_ratings where quote_id = :id\",\n args: { id },\n });\n await sqlite.execute({\n sql: \"delete from quotes where id = :id\",\n args: { id },\n });\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function resetRatingsRoute() {\n await sqlite.execute(\"delete from quote_ratings\");\n await sqlite.execute(\"update quotes set rating_total = 0, rating_count = 0\");\n await setSetting(\"rating_version\", String(Date.now()));\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function clearRoute() {\n await sqlite.execute(\"delete from quote_ratings\");\n await sqlite.execute(\"delete from quotes\");\n await setSetting(\"rating_version\", String(Date.now()));\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function hashRatingPassword(password: string): Promise {\n return await signText(\"rating-password:\" + password);\n}\n\nasync function hashAdminPassword(password: string): Promise {\n return await signText(\"admin-password:\" + password);\n}\n\nfunction cleanName(name: string): string {\n return name.replaceAll(\"<\", \"\").replaceAll(\">\", \"\").trim().slice(0, 60);\n}\n\nfunction cleanEmail(email: string): string {\n return email\n .replaceAll(\"<\", \"\")\n .replaceAll(\">\", \"\")\n .trim()\n .toLowerCase()\n .slice(0, 120);\n}\n\nasync function createAccessCookie(\n name: string,\n type: string,\n versionKey: string,\n maxAge: number,\n extra: Record = {},\n): Promise {\n const payloadData: Record = {\n ...extra,\n type,\n exp: Date.now() + maxAge * 1000,\n };\n\n if (versionKey) payloadData.version = await getSetting(versionKey, \"1\");\n\n const payload = base64UrlEncode(JSON.stringify(payloadData));\n const signature = await signText(payload);\n\n return buildCookie(name, payload + \".\" + signature, maxAge, true);\n}\n\nasync function verifyAccessCookie(\n req: Request,\n name: string,\n type: string,\n versionKey: string,\n): Promise {\n return Boolean(await readAccessCookie(req, name, type, versionKey));\n}\n\nasync function readAccessCookie(\n req: Request,\n name: string,\n type: string,\n versionKey: string,\n): Promise | null> {\n const token = getCookie(req, name);\n if (!token) return null;\n\n const parts = token.split(\".\");\n if (parts.length !== 2) return null;\n\n const [payload, signature] = parts;\n if (!safeEqual(signature, await signText(payload))) return null;\n\n try {\n const parsed = JSON.parse(base64UrlDecode(payload)) as\n & Record\n & {\n type?: string;\n version?: string;\n exp?: number;\n };\n\n if (parsed.type !== type) return null;\n if (Number(parsed.exp || 0) <= Date.now()) return null;\n if (\n versionKey &&\n String(parsed.version || \"\") !== await getSetting(versionKey, \"1\")\n ) return null;\n\n return parsed;\n } catch {\n return null;\n }\n}\n\nasync function getAddSubmitterName(req: Request): Promise {\n const parsed = await readAccessCookie(req, ADD_COOKIE, \"add\", \"\");\n const submitter = String(parsed?.submitter || \"\").trim();\n\n return submitter || null;\n}\n\nasync function signText(text: string): Promise {\n const secret = Deno.env.get(SECRET_ENV) || Deno.env.get(ADMIN_ENV) ||\n \"sommarcitat-fallback-secret\";\n\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n\n const signature = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(text),\n );\n return base64UrlEncodeBytes(new Uint8Array(signature));\n}\n\nfunction safeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n\n let result = 0;\n\n for (let i = 0; i < a.length; i += 1) {\n result |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n\n return result === 0;\n}\n\nfunction getOrCreateVoter(req: Request): { id: string; cookie?: string } {\n const existing = getCookie(req, VOTER_COOKIE);\n if (existing && isSafeToken(existing)) return { id: existing };\n\n const id = crypto.randomUUID();\n return { id, cookie: buildCookie(VOTER_COOKIE, id, 365 * DAY, true) };\n}\n\nfunction getOrCreateVisitor(req: Request): { id: string; cookie?: string } {\n const existing = getCookie(req, \"sommarcitat_visitor\");\n if (existing && isSafeToken(existing)) return { id: existing };\n\n const id = crypto.randomUUID();\n return {\n id,\n cookie: buildCookie(\"sommarcitat_visitor\", id, 365 * DAY, true),\n };\n}\n\nfunction isSafeToken(value: string): boolean {\n if (value.length < 10 || value.length > 80) return false;\n\n const allowed =\n \"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_-\";\n\n for (const char of value) {\n if (!allowed.includes(char)) return false;\n }\n\n return true;\n}\n\nfunction getCookie(req: Request, name: string): string | null {\n const prefix = name + \"=\";\n\n const found = (req.headers.get(\"cookie\") || \"\")\n .split(\";\")\n .map((part) => part.trim())\n .find((part) => part.startsWith(prefix));\n\n return found ? decodeURIComponent(found.slice(prefix.length)) : null;\n}\n\nfunction buildCookie(\n name: string,\n value: string,\n maxAge: number,\n httpOnly: boolean,\n): string {\n const parts = [\n name + \"=\" + encodeURIComponent(value),\n \"Path=/\",\n \"Max-Age=\" + maxAge,\n \"SameSite=Lax\",\n \"Secure\",\n ];\n\n if (httpOnly) parts.push(\"HttpOnly\");\n\n return parts.join(\"; \");\n}\n\nfunction clearCookie(name: string): string {\n return name + \"=; Path=/; Max-Age=0; SameSite=Lax; Secure; HttpOnly\";\n}\n\nfunction base64UrlEncode(text: string): string {\n return base64UrlEncodeBytes(new TextEncoder().encode(text));\n}\n\nfunction base64UrlEncodeBytes(bytes: Uint8Array): string {\n let binary = \"\";\n\n for (const byte of bytes) binary += String.fromCharCode(byte);\n\n return btoa(binary).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replaceAll(\n \"=\",\n \"\",\n );\n}\n\nfunction base64UrlDecode(text: string): string {\n const normalized = text.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\");\n return atob(normalized + \"=\".repeat((4 - normalized.length % 4) % 4));\n}\n\nasync function readJson(req: Request): Promise> {\n try {\n return await req.json();\n } catch {\n return {};\n }\n}\n\nfunction json(\n data: unknown,\n status = 200,\n extraHeaders: ExtraHeaders = {},\n): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: securityHeaders(\"application/json; charset=utf-8\", extraHeaders),\n });\n}\n\nfunction html(): Response {\n const nonce = createNonce();\n\n const page = APP_HTML\n .replace(\n '',\n ``,\n )\n .replace(\n '',\n ``,\n );\n\n return new Response(page, {\n headers: securityHeaders(\"text/html; charset=utf-8\", {}, false, nonce),\n });\n}\n\nfunction css(): Response {\n return new Response(STYLE_CSS, {\n headers: securityHeaders(\"text/css; charset=utf-8\", {}, true),\n });\n}\n\nfunction js(): Response {\n return new Response(CLIENT_JS, {\n headers: securityHeaders(\"application/javascript; charset=utf-8\", {}, true),\n });\n}\n\nfunction createNonce(): string {\n const bytes = new Uint8Array(16);\n crypto.getRandomValues(bytes);\n\n return base64UrlEncodeBytes(bytes);\n}\n\nfunction securityHeaders(\n contentType: string,\n extraHeaders: ExtraHeaders = {},\n allowCache = false,\n nonce = \"\",\n): Headers {\n const headers = new Headers();\n\n headers.set(\"content-type\", contentType);\n headers.set(\"x-content-type-options\", \"nosniff\");\n headers.set(\"referrer-policy\", \"no-referrer\");\n headers.set(\n \"permissions-policy\",\n \"camera=(), microphone=(), geolocation=(), payment=(), usb=(), fullscreen=(self)\",\n );\n headers.set(\"cross-origin-opener-policy\", \"same-origin\");\n headers.set(\"cross-origin-resource-policy\", \"same-origin\");\n headers.set(\"cache-control\", allowCache ? \"public, max-age=60\" : \"no-store\");\n\n headers.set(\n \"content-security-policy\",\n nonce\n ? `default-src 'self'; script-src 'self' 'nonce-${nonce}'; style-src 'self' 'nonce-${nonce}'; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'`\n : \"default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'\",\n );\n\n for (const [key, value] of Object.entries(extraHeaders)) {\n if (Array.isArray(value)) {\n value.forEach((item) => headers.append(key, item));\n } else headers.append(key, value);\n }\n\n return headers;\n}","createdAt",["D",1779641643125],"branchVersion","branchId","f891cc74-5505-11f1-9eb2-ee650bb23af1","id","f890c23e-5505-11f1-9eb2-ee650bb23af1","Citat",["D",1779361955862],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/697c393a-8e74-412a-6ec3-1675575e8700/square512?exp=1789541999&sig=25a8046fdfa7a36cf38817aa275f9470de1062dbcd8228c3c1288643011f7d14","70fb9ab2-4d23-47f8-bc12-3d32368f5f9a","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019e4a3b-ee39-751e-a47d-54c75d59feef","tursoName","f890c23e550511f19eb2ee650bb23af1","tursoHostname","f890c23e550511f19eb2ee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789489305251],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_106":101},"org",{"_99":98,"_100":101,"_102":101,"_18":55,"_103":104,"_105":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",134,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","William1012012012012012012012","handle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":193,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":54,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":194,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":195,"_83":196,"_85":197,"_87":25},"tree",[176,177,178,179],"files",[176,177,178,179],"counts",{"_165":62,"_166":167,"_168":62,"_169":170,"_171":172},"contents",[128,129,130,131],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":157,"_32":158,"_30":159,"_135":-5,"_41":42,"_40":160,"_137":25,"_38":161,"_13":162,"_33":140,"_35":163,"_24":25,"_142":-5,"_27":164},{"_43":152,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_137":25,"_38":153,"_13":154,"_33":34,"_35":37,"_24":25,"_142":155,"_27":156},{"_43":144,"_32":145,"_30":146,"_135":-5,"_41":42,"_40":147,"_137":25,"_38":148,"_13":149,"_33":140,"_35":150,"_24":25,"_142":-5,"_27":151},{"_43":132,"_32":133,"_30":134,"_135":-5,"_41":42,"_40":136,"_137":25,"_38":138,"_13":139,"_33":140,"_35":141,"_24":25,"_142":-5,"_27":143},"bd7da2e2-5790-11f1-a3bc-ee650bb23af1","ui.ts","9917c9fe-55ac-11f1-92d0-ee650bb23af1","parentId",71,"latest",["D",1779641459101],9,"script","// ui.ts\n// HTML-strukturen för Sommarcitat.\n\nexport const APP_HTML = String.raw`\n\n\n \n \n Sommarcitat\n \n \n\n\n

\n \n ☀\n Sommarcitat\n \n\n \n

\n\n

Logga in för att se citaten

\n \n

\n Skriv din mejl som slutar på @edu.lerum.se. När du är inloggad kan du läsa citat, betygsätta och skicka in nya citat.\n

\n\n \n\n

\n\n

Sommar, sol och legendariska citat

Citat som glänser i solen.

\n Lägg in roliga, smarta eller helt orimliga citat. Betygsätt med 1-5 stjärnor och låt vinnarna synas direkt på startsidan.\n

\n\n

\n Betygsätt nu\n Lägg till citat\n

\n\n

\n Sök direkt\n

\n \n \n

Söker både på namn och på själva citatet.

\n\n \n

\n\n

Live just nu

Prispallen

\n Se plats 4-10\n

\n\n

Betygsätt citaten

\n Ge varje citat 1-5 stjärnor. Citat med högst totalpoäng hamnar högst.\n

\n\n

Lösenord krävs

Skriv lösenordet för att kunna betygsätta citaten.

\n \n \n

\n\n

\n Sök person\n \n

\n Sök citat\n \n

\n \n

Visar alla citat.

\n\n

Lägg till citat

\n Här kan du skicka in citat. De hamnar först i admin-väntlistan och måste godkännas innan de syns på sidan.\n

\n\n

Skriv ditt namn

Skriv ditt eget namn så admin kan se vem som skickat in citatet. Namnet visas bara i Admin.

\n \n \n

\n\n

Skicka in citat

\n \n \n \n

Citatet syns inte offentligt förrän admin trycker Ja. Ditt namn visas bara för admin.

\n\n

Prispall och plats 4-10

\n Första, andra och tredje plats syns stort på prispallen. Listan under börjar på plats 4.\n

\n\n

Plats 4-10

\n\n

Admin

Logga in för att lägga till, importera, ändra och ta bort citat.

\n\n

\n Lösenord\n

\n \n \n

Du hålls inloggad i 30 dagar med en säker cookie. Lösenordet sparas inte i webbläsaren.

\n\n

\n Väntar\n 0\n Nya citat\n

\n Publicerade\n 0\n Citat totalt\n

\n Poäng\n 0\n Totalt\n

\n\n

Online just nu

Visar vilka som varit aktiva på sidan senaste minuten.

\n 0 online\n

\n\n

Ingen online-data ännu.

\n\n

Väntlista för nya citat

Citat som skickas in via Lägg till-sidan hamnar här.

\n \n

\n\n

Adminlösenord

Byt lösenordet till Admin. När du sparar loggas du ut och får logga in igen med det nya.

\n Nytt adminlösenord\n \n

\n \n

\n\n

Betygsätt-lösenord

Här styr du om betygsätt-fliken ska kräva lösenord.

\n \n \n Kräv lösenord för att betygsätta\n \n

\n Nytt lösenord\n \n

\n \n

\n\n

Lägg till ett citat

\n Citat\n \n

\n Namn\n \n

\n \n

\n\n

Importera citat

\n Ett citat per rad\n \n

Format: Vad de säger - Namn

\n
\n \n

\n\n

Ändra citat

Redigera text och namn direkt här. Poäng visas bara som statistik.

\n \n \n \n \n

\n\n \n\n

\n\n`;","label",[133],"a42709aa-5790-11f1-944d-ee650bb23af1","style.ts","a5bdfb2e-55ac-11f1-907f-ee650bb23af1",69,["D",1779641416595],10,"// style.ts\n// All CSS för Sommarcitat.\n// Servera den här som /style.css från main/server-filen:\n// import { STYLE_CSS } from \"./style.ts\";\n// if (path === \"/style.css\") return new Response(STYLE_CSS, { headers: { \"content-type\": \"text/css; charset=utf-8\" } });\n\nexport const STYLE_CSS = String.raw`\n:root {\n --sky: #75d7ff;\n --sky-soft: #c8f6ff;\n --sun: #ffd166;\n --sun-deep: #ff9f1c;\n --grass: #43c96f;\n --leaf: #178f52;\n --sea: #2ec4b6;\n --sand: #fff1c7;\n --cream: #fffdf2;\n --gold: #ffd166;\n --silver: #bae6fd;\n --bronze: #fdba74;\n --text: #10331f;\n --muted: rgba(16, 51, 31, 0.68);\n --glass: rgba(255, 255, 255, 0.66);\n --glass-strong: rgba(255, 255, 255, 0.88);\n --line: rgba(255, 255, 255, 0.78);\n --shadow: 0 24px 70px rgba(22, 96, 73, 0.2);\n --shadow-soft: 0 14px 36px rgba(22, 96, 73, 0.13);\n --radius: 30px;\n}\n\n* {\n box-sizing: border-box;\n margin: 0;\n padding: 0;\n}\n\nhtml {\n scroll-behavior: smooth;\n}\n\nbody {\n min-height: 100vh;\n font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif;\n color: var(--text);\n background:\n radial-gradient(circle at 12% 12%, rgba(255, 209, 102, 0.92) 0 72px, transparent 75px),\n radial-gradient(circle at 83% 12%, rgba(255, 255, 255, 0.82) 0 34px, transparent 36px),\n radial-gradient(circle at 78% 19%, rgba(255, 255, 255, 0.68) 0 26px, transparent 28px),\n linear-gradient(180deg, var(--sky), var(--sky-soft) 42%, #dbffe7 100%);\n overflow-x: hidden;\n}\n\nbody::before {\n content: \"\";\n position: fixed;\n inset: auto 0 0 0;\n height: 220px;\n pointer-events: none;\n background:\n radial-gradient(120px 50px at 12% 92%, rgba(67, 201, 111, 0.62), transparent 70%),\n radial-gradient(150px 60px at 40% 105%, rgba(23, 143, 82, 0.4), transparent 70%),\n radial-gradient(170px 70px at 78% 100%, rgba(46, 196, 182, 0.34), transparent 70%),\n linear-gradient(180deg, transparent, rgba(255, 241, 199, 0.7));\n z-index: -2;\n}\n\nbody::after {\n content: \"\";\n position: fixed;\n width: 520px;\n height: 520px;\n left: -190px;\n bottom: -250px;\n border-radius: 999px;\n background: rgba(67, 201, 111, 0.2);\n filter: blur(12px);\n z-index: -3;\n animation: floatBlob 9s ease-in-out infinite;\n}\n\n@keyframes floatBlob {\n 0%, 100% { transform: translateY(0) scale(1); }\n 50% { transform: translateY(-18px) scale(1.05); }\n}\n\n@keyframes slideDown {\n from { opacity: 0; transform: translateY(-18px); }\n to { opacity: 1; transform: translateY(0); }\n}\n\n@keyframes fadeUp {\n from { opacity: 0; transform: translateY(24px); }\n to { opacity: 1; transform: translateY(0); }\n}\n\n@keyframes gentleSpin {\n from { transform: rotate(0deg); }\n to { transform: rotate(360deg); }\n}\n\n@keyframes cardFloat {\n 0%, 100% { transform: translateY(0) rotate(0deg); }\n 50% { transform: translateY(-12px) rotate(1deg); }\n}\n\n@keyframes popIn {\n from { opacity: 0; transform: scale(0.92) translateY(20px); }\n to { opacity: 1; transform: scale(1) translateY(0); }\n}\n\n.app {\n width: min(1180px, calc(100% - 32px));\n margin: 0 auto;\n padding: 24px 0 76px;\n}\n\nheader {\n display: flex;\n align-items: center;\n justify-content: space-between;\n gap: 18px;\n margin-bottom: 34px;\n animation: slideDown 650ms ease both;\n}\n\n.logo {\n display: flex;\n align-items: center;\n gap: 12px;\n font-weight: 950;\n letter-spacing: -0.05em;\n font-size: clamp(1.35rem, 3vw, 2.05rem);\n}\n\n.logo-mark {\n width: 50px;\n height: 50px;\n display: grid;\n place-items: center;\n border-radius: 18px;\n background: linear-gradient(135deg, var(--sun), var(--sun-deep));\n box-shadow: 0 16px 32px rgba(255, 159, 28, 0.32);\n color: #5b3100;\n font-size: 1.45rem;\n animation: gentleSpin 7s linear infinite;\n}\n\nnav,\n.actions,\n.admin-actions,\n.pending-actions {\n display: flex;\n align-items: center;\n gap: 10px;\n flex-wrap: wrap;\n}\n\nnav {\n justify-content: flex-end;\n}\n\na {\n color: inherit;\n}\n\n.nav-link,\nbutton,\n.button {\n border: 0;\n color: var(--text);\n text-decoration: none;\n cursor: pointer;\n font: inherit;\n font-weight: 850;\n padding: 12px 16px;\n border-radius: 999px;\n background: var(--glass);\n backdrop-filter: blur(16px);\n box-shadow: var(--shadow-soft);\n transition: transform 180ms ease, background 180ms ease, box-shadow 180ms ease, opacity 180ms ease;\n}\n\n.nav-link:hover,\nbutton:hover,\n.button:hover {\n transform: translateY(-3px);\n background: var(--glass-strong);\n box-shadow: 0 18px 38px rgba(22, 96, 73, 0.18);\n}\n\nbutton:disabled {\n cursor: not-allowed;\n opacity: 0.55;\n transform: none !important;\n}\n\n.primary {\n background: linear-gradient(135deg, var(--leaf), var(--grass));\n color: white;\n box-shadow: 0 18px 38px rgba(23, 143, 82, 0.25);\n}\n\n.primary:hover {\n background: linear-gradient(135deg, #0f7f49, #35bd63);\n}\n\n.danger {\n background: rgba(255, 107, 107, 0.2);\n color: #7a1f1f;\n}\n\n.danger:hover {\n background: rgba(255, 107, 107, 0.32);\n}\n\n.hero {\n min-height: 52vh;\n display: grid;\n grid-template-columns: 1.04fr 0.96fr;\n gap: 30px;\n align-items: stretch;\n margin-bottom: 30px;\n}\n\n.hero-text {\n display: flex;\n flex-direction: column;\n justify-content: center;\n animation: fadeUp 700ms ease both;\n}\n\n.eyebrow {\n display: inline-flex;\n width: fit-content;\n gap: 8px;\n align-items: center;\n color: #0d5f3a;\n background: rgba(255, 255, 255, 0.66);\n border: 1px solid var(--line);\n border-radius: 999px;\n padding: 9px 13px;\n margin-bottom: 18px;\n font-weight: 950;\n box-shadow: 0 12px 26px rgba(22, 96, 73, 0.1);\n}\n\nh1 {\n font-size: clamp(3rem, 8vw, 6.6rem);\n line-height: 0.9;\n letter-spacing: -0.085em;\n margin-bottom: 20px;\n color: #0d3f2b;\n text-wrap: balance;\n}\n\nh2 {\n font-size: clamp(1.9rem, 4vw, 3.25rem);\n line-height: 1;\n letter-spacing: -0.055em;\n margin-bottom: 16px;\n color: #0d3f2b;\n}\n\n.lead {\n max-width: 650px;\n color: var(--muted);\n font-size: clamp(1.04rem, 2vw, 1.23rem);\n line-height: 1.65;\n margin-bottom: 24px;\n}\n\n.quote-preview,\n.quote-card,\n.panel,\n.home-podium-panel,\n.search-panel,\n.home-search {\n background: rgba(255, 255, 255, 0.58);\n border: 1px solid var(--line);\n border-radius: var(--radius);\n padding: 22px;\n backdrop-filter: blur(18px);\n box-shadow: 0 18px 55px rgba(22, 96, 73, 0.15);\n transition: transform 180ms ease, background 180ms ease, box-shadow 180ms ease;\n}\n\n.quote-card:hover,\n.panel:hover {\n transform: translateY(-4px);\n background: rgba(255, 255, 255, 0.76);\n box-shadow: 0 22px 60px rgba(22, 96, 73, 0.19);\n}\n\n.quote-card {\n min-width: 0;\n overflow: hidden;\n}\n\n.quote-preview {\n border-radius: 38px;\n padding: 30px;\n box-shadow: var(--shadow);\n animation: cardFloat 5s ease-in-out infinite, fadeUp 700ms ease 100ms both;\n position: relative;\n overflow: hidden;\n}\n\n.quote-preview::before {\n content: \"\";\n position: absolute;\n inset: -70px -80px auto auto;\n width: 220px;\n height: 220px;\n border-radius: 50%;\n background: radial-gradient(circle, rgba(255, 209, 102, 0.75), transparent 68%);\n}\n\n.quote-preview::after {\n content: \"\\201C\";\n position: absolute;\n bottom: -70px;\n right: 18px;\n font-size: 13rem;\n opacity: 0.12;\n font-family: Georgia, serif;\n color: #0d3f2b;\n}\n\n.champion-preview {\n background: linear-gradient(145deg, rgba(255, 247, 194, 0.86), rgba(255, 255, 255, 0.68) 48%, rgba(219, 255, 231, 0.7));\n border: 2px solid rgba(255, 209, 102, 0.92);\n box-shadow: 0 30px 90px rgba(255, 159, 28, 0.28), 0 22px 70px rgba(22, 96, 73, 0.18);\n}\n\n.champion-kicker,\n.featured-rating-pill,\n.place-label,\n.podium-ribbon {\n display: inline-flex;\n width: fit-content;\n border-radius: 999px;\n font-weight: 950;\n position: relative;\n z-index: 1;\n}\n\n.champion-kicker {\n margin-bottom: 16px;\n padding: 10px 14px;\n background: linear-gradient(135deg, #fff7b8, var(--gold));\n color: #6b3b00;\n letter-spacing: 0.04em;\n box-shadow: 0 14px 32px rgba(255, 159, 28, 0.22);\n}\n\n.big-quote,\n.quote-text {\n position: relative;\n z-index: 1;\n font-size: clamp(1.3rem, 3vw, 2.1rem);\n line-height: 1.18;\n font-weight: 950;\n letter-spacing: -0.04em;\n margin-bottom: 16px;\n}\n\n.champion-quote {\n font-size: clamp(1.65rem, 4vw, 3.35rem);\n line-height: 1.04;\n text-shadow: 0 2px 0 rgba(255, 255, 255, 0.45);\n}\n\n.quote-text {\n font-size: 1.18rem;\n line-height: 1.35;\n letter-spacing: -0.035em;\n margin-bottom: 14px;\n}\n\n.quote-author {\n color: #0d6c42;\n font-weight: 900;\n position: relative;\n z-index: 1;\n}\n\n.champion-author {\n font-size: 1.12rem;\n}\n\n.featured-rating-pill {\n margin-top: 12px;\n padding: 9px 13px;\n background: rgba(255, 255, 255, 0.68);\n color: #0d5f3a;\n}\n\n.champion-rating {\n background: linear-gradient(135deg, #0d6c42, var(--grass));\n color: white;\n box-shadow: 0 14px 30px rgba(23, 143, 82, 0.24);\n}\n\n.stats {\n position: relative;\n z-index: 1;\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 14px;\n margin-top: 24px;\n}\n\n.stat {\n padding: 16px;\n border-radius: 22px;\n background: rgba(255, 255, 255, 0.62);\n border: 1px solid var(--line);\n}\n\n.stat strong {\n display: block;\n font-size: 1.6rem;\n}\n\n.stat span,\n.small {\n color: var(--muted);\n font-size: 0.92rem;\n font-weight: 750;\n}\n\n.page {\n display: none;\n animation: fadeUp 500ms ease both;\n}\n\n.page.active {\n display: block;\n}\n\n.grid {\n display: grid;\n grid-template-columns: repeat(auto-fit, minmax(270px, 1fr));\n gap: 16px;\n align-items: start;\n}\n\n.quote-meta {\n display: flex;\n justify-content: space-between;\n gap: 14px;\n align-items: center;\n color: var(--muted);\n margin-bottom: 16px;\n font-weight: 800;\n}\n\n.rating-text {\n color: #0d6c42;\n font-weight: 950;\n}\n\n.stars-line {\n color: #d17a00;\n font-size: 1.15rem;\n letter-spacing: 0.04em;\n font-weight: 950;\n}\n\n.rating-stars {\n display: flex;\n gap: 8px;\n flex-wrap: wrap;\n margin-top: 16px;\n align-items: center;\n}\n\n.star-button {\n width: 54px;\n height: 54px;\n display: grid;\n place-items: center;\n padding: 0;\n border-radius: 18px;\n font-size: 1.55rem;\n font-weight: 1000;\n color: #8a4a00;\n background: rgba(255, 255, 255, 0.68);\n}\n\n.star-button:hover,\n.star-button.selected {\n background: linear-gradient(135deg, #fff1a8, var(--gold));\n transform: translateY(-4px) scale(1.03);\n}\n\n.rating-status,\n.rating-help,\n.hint,\n.message {\n color: var(--muted);\n font-weight: 750;\n line-height: 1.5;\n}\n\n.rating-status {\n width: 100%;\n margin-top: 6px;\n font-size: 0.92rem;\n}\n\n.rating-help {\n width: 100%;\n font-size: 0.86rem;\n margin-top: -4px;\n}\n\n.message,\n.hint {\n margin-top: 10px;\n}\n\n.message.success {\n color: #0d6c42;\n}\n\n.message.error {\n color: #a22020;\n}\n\n.home-search {\n margin-top: 18px;\n padding: 16px;\n border-radius: 24px;\n}\n\n.home-search-grid,\n.search-grid,\n.rating-gate-grid,\n.settings-grid,\n.admin-search-grid,\n.form-grid {\n display: grid;\n gap: 12px;\n align-items: end;\n}\n\n.home-search-grid,\n.rating-gate-grid,\n.settings-grid,\n.admin-search-grid {\n grid-template-columns: 1fr auto;\n}\n\n.search-grid {\n grid-template-columns: minmax(0, 1fr) minmax(0, 1fr) auto;\n}\n\n.search-grid > * {\n min-width: 0;\n}\n\n.search-panel {\n position: relative;\n z-index: 3;\n margin-bottom: 26px;\n clear: both;\n}\n\n.search-panel button {\n white-space: nowrap;\n}\n\n.search-result-text,\n.admin-search-text {\n margin-top: 12px;\n color: var(--muted);\n font-weight: 800;\n}\n\n.admin-search-box {\n margin: 14px 0 18px;\n padding: 14px;\n border-radius: 22px;\n background: rgba(255, 255, 255, 0.42);\n border: 1px solid var(--line);\n}\n\n.home-podium-panel {\n margin: 14px 0 34px;\n padding: 24px;\n overflow: hidden;\n background: rgba(255, 255, 255, 0.52);\n box-shadow: 0 18px 45px rgba(22, 96, 73, 0.12);\n}\n\n.home-podium-title,\n.admin-header-row,\n.admin-card-title {\n display: flex;\n justify-content: space-between;\n align-items: end;\n gap: 16px;\n flex-wrap: wrap;\n}\n\n.podium {\n position: relative;\n display: grid;\n grid-template-columns: 0.9fr 1.18fr 0.9fr;\n gap: 18px;\n align-items: end;\n margin: 26px 0 12px;\n padding: 18px 0 6px;\n}\n\n.podium::after {\n display: none;\n}\n\n.podium-card {\n position: relative;\n z-index: 1;\n display: flex;\n flex-direction: column;\n justify-content: space-between;\n text-align: center;\n padding: 24px;\n border-radius: 30px;\n overflow: hidden;\n border: 2px solid var(--line);\n box-shadow: 0 16px 34px rgba(22, 96, 73, 0.13);\n animation: popIn 450ms ease both;\n}\n\n.podium-card::before {\n content: \"\";\n position: absolute;\n inset: 0;\n opacity: 0.32;\n background: radial-gradient(circle at 28% 10%, white, transparent 34%);\n pointer-events: none;\n}\n\n.podium-card::after {\n display: none;\n}\n\n.podium-card > * {\n position: relative;\n z-index: 1;\n}\n\n.podium-card.first {\n min-height: 340px;\n background: linear-gradient(160deg, #fff2a8, var(--gold) 48%, #fff8d6);\n border-color: rgba(255, 159, 28, 0.88);\n transform: translateY(-8px);\n box-shadow: 0 18px 38px rgba(255, 159, 28, 0.22), 0 14px 32px rgba(22, 96, 73, 0.12);\n}\n\n.podium-card.second {\n min-height: 270px;\n background: linear-gradient(160deg, #ecfeff, var(--silver) 55%, #ffffff);\n transform: translateY(14px);\n box-shadow: 0 14px 30px rgba(14, 165, 233, 0.14), 0 12px 28px rgba(22, 96, 73, 0.1);\n}\n\n.podium-card.third {\n min-height: 245px;\n background: linear-gradient(160deg, #ffedd5, var(--bronze) 55%, #fff7ed);\n transform: translateY(24px);\n box-shadow: 0 14px 30px rgba(249, 115, 22, 0.14), 0 12px 28px rgba(22, 96, 73, 0.1);\n}\n\n.podium.compact {\n grid-template-columns: 0.92fr 1.16fr 0.92fr;\n padding: 8px 4px 22px;\n margin: 16px 0 4px;\n}\n\n.podium.compact::after {\n display: none;\n}\n\n.podium.compact .first {\n min-height: 300px;\n transform: translateY(-6px);\n}\n\n.podium.compact .second {\n min-height: 235px;\n transform: translateY(16px);\n}\n\n.podium.compact .third {\n min-height: 215px;\n transform: translateY(24px);\n}\n\n.place-number {\n width: 76px;\n height: 76px;\n display: grid;\n place-items: center;\n margin: 0 auto 12px;\n border-radius: 25px;\n background: rgba(255, 255, 255, 0.7);\n color: #0d3f2b;\n font-size: 2.4rem;\n font-weight: 1000;\n box-shadow: 0 16px 32px rgba(22, 96, 73, 0.15);\n}\n\n.first .place-number {\n width: 92px;\n height: 92px;\n font-size: 3rem;\n background: linear-gradient(135deg, #fff8d6, var(--gold));\n box-shadow: 0 18px 45px rgba(255, 159, 28, 0.32);\n}\n\n.first .quote-text {\n font-size: clamp(1.45rem, 3vw, 2.35rem);\n}\n\n.place-label {\n align-items: center;\n justify-content: center;\n gap: 8px;\n margin: 0 auto 12px;\n padding: 9px 13px;\n background: rgba(255, 255, 255, 0.68);\n color: #0d3f2b;\n}\n\n.place-label::before {\n content: \"🏆\";\n}\n\n.second .place-label::before {\n content: \"🥈\";\n}\n\n.third .place-label::before {\n content: \"🥉\";\n}\n\n.podium-ribbon {\n margin: 0 auto 14px;\n padding: 8px 13px;\n background: rgba(13, 63, 43, 0.92);\n color: white;\n letter-spacing: 0.03em;\n}\n\n.rank-list,\n.edit-list,\n.admin-side-stack {\n display: grid;\n gap: 12px;\n}\n\n.rank-list {\n gap: 10px;\n}\n\n.rank-row {\n display: grid;\n grid-template-columns: 48px 1fr auto;\n gap: 14px;\n align-items: center;\n padding: 14px;\n border-radius: 20px;\n background: rgba(255, 255, 255, 0.62);\n border: 1px solid var(--line);\n box-shadow: 0 10px 24px rgba(22, 96, 73, 0.08);\n transition: transform 180ms ease, background 180ms ease;\n}\n\n.rank-row:hover {\n transform: translateY(-2px);\n background: rgba(255, 255, 255, 0.78);\n}\n\n.rank-number {\n width: 40px;\n height: 40px;\n display: grid;\n place-items: center;\n border-radius: 14px;\n background: linear-gradient(135deg, var(--sea), var(--grass));\n color: white;\n font-weight: 950;\n box-shadow: 0 8px 18px rgba(46, 196, 182, 0.18);\n}\n\n.rank-row .stars-line {\n margin-top: 5px;\n margin-bottom: 0;\n font-size: 1rem;\n}\n\n.rank-row .rating-text {\n white-space: nowrap;\n padding: 8px 11px;\n border-radius: 999px;\n background: rgba(67, 201, 111, 0.14);\n}\n\ninput,\ntextarea {\n width: 100%;\n border: 1px solid rgba(255, 255, 255, 0.9);\n background: rgba(255, 255, 255, 0.65);\n color: var(--text);\n border-radius: 18px;\n padding: 13px 14px;\n font: inherit;\n outline: none;\n transition: 160ms ease;\n}\n\ninput:focus,\ntextarea:focus {\n border-color: rgba(23, 143, 82, 0.65);\n box-shadow: 0 0 0 4px rgba(67, 201, 111, 0.15);\n background: rgba(255, 255, 255, 0.86);\n}\n\ntextarea {\n min-height: 160px;\n resize: vertical;\n line-height: 1.45;\n}\n\nlabel {\n display: block;\n color: #0d5f3a;\n font-weight: 950;\n margin-bottom: 8px;\n}\n\n.form-grid {\n grid-template-columns: 1fr 220px auto;\n margin-bottom: 14px;\n}\n\n.admin-tools,\n.admin-section-grid {\n display: grid;\n grid-template-columns: 1fr 1fr;\n gap: 16px;\n margin: 24px 0;\n}\n\n.admin-section-grid {\n grid-template-columns: 1.35fr 0.85fr;\n margin-bottom: 18px;\n}\n\n.admin-dashboard {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 14px;\n margin-bottom: 18px;\n}\n\n.admin-stat {\n padding: 18px;\n border-radius: 24px;\n background: rgba(255, 255, 255, 0.58);\n border: 1px solid var(--line);\n box-shadow: var(--shadow-soft);\n}\n\n.admin-stat strong {\n display: block;\n font-size: 2rem;\n color: #0d6c42;\n}\n\n.admin-password-card {\n background: linear-gradient(135deg, rgba(255, 255, 255, 0.7), rgba(219, 255, 231, 0.65));\n}\n\n.admin-tool-title,\n.admin-main-heading {\n font-size: 1.7rem;\n}\n\n.admin-main-heading {\n margin-bottom: 6px;\n}\n\n.setting-row {\n display: flex;\n align-items: center;\n gap: 10px;\n flex-wrap: wrap;\n margin: 12px 0;\n}\n\n.setting-row input[type=\"checkbox\"] {\n width: auto;\n transform: scale(1.2);\n}\n\n.edit-row {\n display: grid;\n grid-template-columns: 1fr 180px 160px 110px;\n gap: 10px;\n align-items: center;\n padding: 12px;\n border-radius: 22px;\n background: rgba(255, 255, 255, 0.42);\n border: 1px solid var(--line);\n}\n\n.admin-rating-box {\n border-radius: 18px;\n padding: 12px;\n background: rgba(255, 255, 255, 0.46);\n font-weight: 900;\n color: #0d6c42;\n}\n\n.pending-row {\n display: grid;\n grid-template-columns: 1fr auto;\n gap: 14px;\n align-items: center;\n padding: 16px;\n border-radius: 24px;\n background: rgba(255, 255, 255, 0.5);\n border: 1px solid var(--line);\n}\n\n.empty {\n padding: 28px;\n color: var(--muted);\n text-align: center;\n border-radius: 28px;\n border: 2px dashed rgba(23, 143, 82, 0.24);\n background: rgba(255, 255, 255, 0.42);\n font-weight: 800;\n}\n\n.hidden {\n display: none !important;\n}\n\n.panel-title {\n font-size: 2rem;\n margin-bottom: 14px;\n}\n\n.show-more-text {\n margin-bottom: 12px;\n}\n\n@media (max-width: 1050px) {\n .search-grid,\n .form-grid {\n grid-template-columns: 1fr;\n }\n\n .search-panel button,\n .form-grid button {\n width: 100%;\n }\n}\n\n@media (max-width: 900px) {\n header {\n align-items: flex-start;\n flex-direction: column;\n }\n\n nav {\n justify-content: flex-start;\n }\n\n .hero,\n .podium,\n .admin-tools,\n .admin-section-grid,\n .admin-dashboard,\n .edit-row,\n .home-search-grid,\n .rating-gate-grid,\n .settings-grid,\n .admin-search-grid,\n .pending-row {\n grid-template-columns: 1fr;\n }\n\n .hero {\n gap: 18px;\n }\n\n .champion-preview {\n order: -1;\n padding: 24px;\n border-radius: 30px;\n }\n\n .champion-quote {\n font-size: clamp(1.9rem, 9vw, 3rem);\n }\n\n .stats {\n gap: 9px;\n }\n\n .stat {\n padding: 12px;\n }\n\n .podium {\n display: flex;\n flex-direction: column;\n gap: 14px;\n align-items: stretch;\n padding: 0;\n margin: 22px 0;\n }\n\n .podium::after {\n display: none;\n }\n\n .podium-card,\n .podium-card.first,\n .podium-card.second,\n .podium-card.third,\n .podium.compact .podium-card.first,\n .podium.compact .podium-card.second,\n .podium.compact .podium-card.third {\n min-height: auto;\n transform: none;\n }\n\n .first {\n order: 1;\n }\n\n .second {\n order: 2;\n }\n\n .third {\n order: 3;\n }\n\n .podium-card {\n padding: 20px;\n border-radius: 28px;\n }\n\n .first {\n padding: 26px;\n border-width: 3px;\n }\n\n .first .place-number {\n width: 82px;\n height: 82px;\n font-size: 2.65rem;\n }\n\n .home-podium-panel {\n padding: 18px;\n border-radius: 28px;\n }\n\n .rank-row {\n grid-template-columns: 44px 1fr;\n }\n\n .rank-row .rating-text {\n grid-column: 2;\n }\n}\n\n/* Login med skolmejl och header-status */\n.login-panel {\n max-width: 720px;\n margin: 40px auto;\n padding: clamp(24px, 5vw, 42px);\n border-radius: 38px;\n}\n\n.login-title {\n font-size: clamp(2.4rem, 7vw, 5rem);\n line-height: 0.92;\n}\n\n.login-grid {\n display: grid;\n grid-template-columns: 1fr auto;\n gap: 12px;\n align-items: end;\n margin-top: 18px;\n}\n\n.user-status {\n display: inline-flex;\n align-items: center;\n max-width: 230px;\n min-height: 42px;\n padding: 10px 14px;\n border-radius: 999px;\n background: rgba(255, 255, 255, 0.52);\n color: #0d5f3a;\n font-size: 0.92rem;\n font-weight: 900;\n box-shadow: 0 12px 30px rgba(22, 96, 73, 0.1);\n overflow: hidden;\n text-overflow: ellipsis;\n white-space: nowrap;\n}\n\n.auth-button {\n white-space: nowrap;\n}\n\n.locked-note {\n color: var(--muted);\n font-weight: 850;\n line-height: 1.5;\n margin-top: 10px;\n}\n\n@media (max-width: 700px) {\n .login-grid {\n grid-template-columns: 1fr;\n }\n\n .user-status {\n max-width: 100%;\n }\n}\n\n`;",[145],"2b2e7e24-5791-11f1-a1f4-ee650bb23af1",["D",1779641643125],38,"citatchattenhemlig",[28],"b18071b8-5790-11f1-b786-ee650bb23af1","client.ts","ac1df5d2-55ac-11f1-b2d4-ee650bb23af1",70,["D",1779641438988],13,"// client.ts\n// Frontend-JavaScript för Sommarcitat.\n// Servera den här som /app.js från main/server-filen:\n// import { CLIENT_JS } from \"./client.ts\";\n// if (path === \"/app.js\") return new Response(CLIENT_JS, { headers: { \"content-type\": \"application/javascript; charset=utf-8\" } });\n\nexport const CLIENT_JS = String.raw`\nvar quotesCache = [];\nvar pendingCache = [];\nvar onlineCache = { onlineCount: 0, visitors: [] };\nvar voteOrderIds = null;\nvar ratingVersion = \"1\";\nvar dataVersion = \"1\";\nvar autoRefreshTimer = null;\nvar presenceTimer = null;\nvar isAutoRefreshing = false;\nvar isPresenceLoading = false;\nvar isLoading = false;\nvar voteVisibleCount = 60;\nvar adminVisibleCount = 80;\nvar VOTE_PAGE_SIZE = 60;\nvar ADMIN_PAGE_SIZE = 80;\nvar adminSearchTerm = \"\";\nvar adminUnlocked = false;\nvar ratingPasswordRequired = true;\nvar ratingAccessOk = false;\nvar addAccessOk = false;\nvar nameLoginRequired = false;\nvar visitorEmail = \"\";\nvar quickSearchTerm = \"\";\nvar RATED_KEY_BASE = \"sommarcitat_rated_map\";\nvar BASE_PATH = window.location.pathname.replace(/\\/$/, \"\");\n\nfunction apiUrl(path) {\n if (!BASE_PATH || BASE_PATH.indexOf(\"/api/\") >= 0) return path;\n return BASE_PATH + path;\n}\n\nasync function api(path, options) {\n options = options || {};\n var headers = options.headers || {};\n headers[\"content-type\"] = \"application/json\";\n\n var response = await fetch(apiUrl(path), Object.assign({}, options, {\n headers: headers,\n credentials: \"include\",\n }));\n\n var data = await response.json().catch(function () {\n return {};\n });\n\n if (!response.ok) {\n var error = new Error(data.error || \"Något gick fel.\");\n error.status = response.status;\n error.needsName = Boolean(data.needsName);\n error.data = data;\n throw error;\n }\n\n return data;\n}\n\nasync function loadQuotes() {\n try {\n var data = await api(\"/api/quotes\");\n\n nameLoginRequired = false;\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || \"1\");\n dataVersion = String(data.dataVersion || dataVersion || \"1\");\n ratingPasswordRequired = Boolean(data.ratingPasswordRequired);\n\n return quotesCache;\n } catch (error) {\n if (error && error.needsName) {\n nameLoginRequired = true;\n quotesCache = [];\n return quotesCache;\n }\n\n throw error;\n }\n}\n\nasync function loadPending() {\n if (!adminUnlocked || nameLoginRequired) return;\n\n try {\n var data = await api(\"/api/admin/pending\", { method: \"GET\" });\n pendingCache = data.pendingQuotes || [];\n } catch (error) {\n pendingCache = [];\n }\n}\n\nasync function loadPresence() {\n if (!adminUnlocked || isPresenceLoading || nameLoginRequired) return;\n isPresenceLoading = true;\n\n try {\n var data = await api(\"/api/admin/presence\", { method: \"GET\" });\n onlineCache = {\n onlineCount: Number(data.onlineCount || 0),\n visitors: data.visitors || [],\n };\n } catch (error) {\n onlineCache = { onlineCount: 0, visitors: [] };\n } finally {\n isPresenceLoading = false;\n }\n}\n\nasync function sendPresenceHeartbeat() {\n try {\n await api(\"/api/presence/heartbeat\", {\n method: \"POST\",\n body: JSON.stringify({ page: currentPageLabel() }),\n });\n } catch (error) {\n // Tyst. Online-räkningen ska inte störa vanliga besökare.\n }\n}\n\nfunction currentPageLabel() {\n var pageName = (location.hash || \"#home\").replace(\"#\", \"\");\n var labels = {\n home: \"Start\",\n vote: \"Betygsätt\",\n add: \"Lägg till\",\n top: \"Topplista\",\n admin: \"Admin\",\n login: \"Logga in\",\n };\n return labels[pageName] || pageName || \"Start\";\n}\n\nasync function checkAdminSession() {\n try {\n var data = await api(\"/api/admin/session\", { method: \"GET\" });\n adminUnlocked = Boolean(data.ok);\n } catch (error) {\n adminUnlocked = false;\n }\n}\n\nasync function checkRatingAccess() {\n try {\n var data = await api(\"/api/rating-access/session\", { method: \"GET\" });\n ratingPasswordRequired = Boolean(data.required);\n ratingAccessOk = Boolean(data.ok);\n } catch (error) {\n ratingAccessOk = false;\n }\n}\n\nasync function checkAddAccess() {\n try {\n var data = await api(\"/api/add-access/session\", { method: \"GET\" });\n addAccessOk = Boolean(data.ok);\n visitorEmail = data.email || data.name || \"\";\n } catch (error) {\n addAccessOk = false;\n visitorEmail = \"\";\n }\n}\n\nfunction ratedKey() {\n return RATED_KEY_BASE + \"_\" + ratingVersion;\n}\n\nfunction getRatedMap() {\n try {\n return JSON.parse(localStorage.getItem(ratedKey()) || \"{}\");\n } catch (error) {\n return {};\n }\n}\n\nfunction saveRatedMap(map) {\n localStorage.setItem(ratedKey(), JSON.stringify(map));\n}\n\nfunction removeRatedId(id) {\n var ratedMap = getRatedMap();\n delete ratedMap[id];\n saveRatedMap(ratedMap);\n}\n\nfunction averageRating(quote) {\n var count = Number(quote.rating_count || 0);\n return count ? Number(quote.rating_total || 0) / count : 0;\n}\n\nfunction totalPoints(quote) {\n return Number(quote.rating_total || 0);\n}\n\nfunction averageQuoteLength(quotes) {\n var list = [].concat(quotes || []).filter(function (quote) {\n return String(quote.text || \"\").trim().length > 0;\n });\n\n if (!list.length) return 0;\n\n var total = list.reduce(function (sum, quote) {\n return sum + String(quote.text || \"\").length;\n }, 0);\n\n return total / list.length;\n}\n\nfunction quoteLengthScore(quote, averageLength) {\n return Math.abs(String(quote.text || \"\").length - averageLength);\n}\n\nfunction sortQuotes(quotes) {\n var list = [].concat(quotes || []);\n var avgLength = averageQuoteLength(list);\n\n return list.sort(function (a, b) {\n var pointsDiff = totalPoints(b) - totalPoints(a);\n if (pointsDiff !== 0) return pointsDiff;\n\n var lengthDiff = quoteLengthScore(a, avgLength) - quoteLengthScore(b, avgLength);\n if (lengthDiff !== 0) return lengthDiff;\n\n var countDiff = Number(b.rating_count || 0) - Number(a.rating_count || 0);\n if (countDiff !== 0) return countDiff;\n\n return String(a.text).localeCompare(String(b.text), \"sv\");\n });\n}\n\nfunction getVoteOrderedQuotes() {\n if (!voteOrderIds) {\n voteOrderIds = sortQuotes(quotesCache).map(function (quote) {\n return quote.id;\n });\n }\n\n var byId = {};\n var seen = {};\n var output = [];\n\n quotesCache.forEach(function (quote) {\n byId[quote.id] = quote;\n });\n\n voteOrderIds.forEach(function (id) {\n if (byId[id]) {\n output.push(byId[id]);\n seen[id] = true;\n }\n });\n\n sortQuotes(quotesCache).forEach(function (quote) {\n if (!seen[quote.id]) output.push(quote);\n });\n\n return output;\n}\n\nfunction getSearchTerms() {\n var personInput = document.getElementById(\"personSearch\");\n var quoteInput = document.getElementById(\"quoteSearch\");\n\n return {\n person: personInput ? personInput.value.trim().toLowerCase() : \"\",\n quote: quoteInput ? quoteInput.value.trim().toLowerCase() : \"\",\n quick: quickSearchTerm.trim().toLowerCase(),\n };\n}\n\nfunction filterQuotes(quotes) {\n var terms = getSearchTerms();\n\n return [].concat(quotes || []).filter(function (quote) {\n var name = String(quote.name || \"\").toLowerCase();\n var text = String(quote.text || \"\").toLowerCase();\n\n return (!terms.quick || name.includes(terms.quick) || text.includes(terms.quick)) &&\n (!terms.person || name.includes(terms.person)) &&\n (!terms.quote || text.includes(terms.quote));\n });\n}\n\nfunction showPage() {\n var pageName = (location.hash || \"#home\").replace(\"#\", \"\");\n\n if (pageName === \"vote\") {\n voteOrderIds = null;\n }\n\n if (nameLoginRequired && (pageName === \"vote\" || pageName === \"add\" || pageName === \"top\")) {\n pageName = \"login\";\n if (location.hash !== \"#login\") location.hash = \"#login\";\n }\n\n document.querySelectorAll(\".page\").forEach(function (page) {\n page.classList.remove(\"active\");\n });\n\n var page = document.getElementById(pageName) || document.getElementById(\"home\");\n page.classList.add(\"active\");\n sendPresenceHeartbeat();\n rerenderFromCache();\n}\n\nasync function boot() {\n if (isLoading) return;\n isLoading = true;\n\n try {\n await checkAddAccess();\n await loadQuotes();\n\n if (!nameLoginRequired) {\n await checkRatingAccess();\n await checkAdminSession();\n await loadPending();\n await sendPresenceHeartbeat();\n await loadPresence();\n }\n\n showPage();\n startAutoRefresh();\n startPresenceRefresh();\n } catch (error) {\n document.getElementById(\"featuredQuote\").textContent = \"Kunde inte ladda citaten.\";\n document.getElementById(\"featuredAuthor\").textContent = error.message;\n document.getElementById(\"featuredRating\").textContent = \"Försök uppdatera sidan\";\n } finally {\n isLoading = false;\n }\n}\n\nasync function refreshAll() {\n await loadQuotes();\n\n if (!nameLoginRequired) {\n await loadPending();\n await sendPresenceHeartbeat();\n await loadPresence();\n }\n\n rerenderFromCache();\n}\n\nfunction startAutoRefresh() {\n if (autoRefreshTimer) return;\n autoRefreshTimer = setInterval(checkForUpdates, 8000);\n}\n\nfunction startPresenceRefresh() {\n if (presenceTimer) return;\n presenceTimer = setInterval(async function () {\n if (document.hidden || nameLoginRequired) return;\n await sendPresenceHeartbeat();\n if (adminUnlocked) {\n await loadPresence();\n renderOnlineList();\n }\n }, 20000);\n}\n\nasync function checkForUpdates() {\n if (isAutoRefreshing || document.hidden || nameLoginRequired) return;\n isAutoRefreshing = true;\n\n try {\n var version = await api(\"/api/version\", { method: \"GET\" });\n var nextDataVersion = String(version.dataVersion || \"1\");\n\n if (nextDataVersion !== dataVersion) {\n await loadQuotes();\n\n if (nameLoginRequired) {\n rerenderFromCache();\n return;\n }\n\n await checkRatingAccess();\n await checkAddAccess();\n await loadPending();\n await loadPresence();\n rerenderFromCache();\n }\n } catch (error) {\n if (error && error.needsName) {\n nameLoginRequired = true;\n rerenderFromCache();\n return;\n }\n\n // Tyst auto-refresh. Sidan ska inte störa användaren om nätet hackar.\n } finally {\n isAutoRefreshing = false;\n }\n}\n\nfunction renderAuthHeader() {\n var status = document.getElementById(\"userStatus\");\n var button = document.getElementById(\"siteAuthButton\");\n\n if (status) {\n status.textContent = visitorEmail ? \"Inloggad: \" + visitorEmail : \"Inte inloggad\";\n }\n\n if (button) {\n button.textContent = visitorEmail ? \"Logga ut\" : \"Logga in\";\n }\n}\n\nfunction rerenderFromCache() {\n renderAuthHeader();\n\n renderHome();\n renderPodiums();\n renderVoteList();\n renderAddPage();\n renderTopList();\n renderAdmin();\n}\n\nfunction renderHome() {\n if (nameLoginRequired) {\n document.getElementById(\"statQuotes\").textContent = \"0\";\n document.getElementById(\"statRatings\").textContent = \"0\";\n document.getElementById(\"statLeaders\").textContent = \"0\";\n document.getElementById(\"featuredQuote\").textContent = \"För att kunna se citaten behöver du logga in med din skolmejl.\";\n document.getElementById(\"featuredAuthor\").textContent = \"Endast mejl som slutar på @edu.lerum.se fungerar.\";\n document.getElementById(\"featuredRating\").textContent = \"Tryck på Logga in i menyn\";\n return;\n }\n\n var sorted = sortQuotes(quotesCache);\n var best = sorted[0];\n var totalRatings = quotesCache.reduce(function (sum, quote) {\n return sum + Number(quote.rating_total || 0);\n }, 0);\n\n document.getElementById(\"statQuotes\").textContent = quotesCache.length;\n document.getElementById(\"statRatings\").textContent = totalRatings;\n document.getElementById(\"statLeaders\").textContent = Math.min(3, quotesCache.length);\n\n if (best) {\n document.getElementById(\"featuredQuote\").textContent = \"“\" + best.text + \"”\";\n document.getElementById(\"featuredAuthor\").textContent = \"👑 Förstaplats · sagt av \" + best.name;\n document.getElementById(\"featuredRating\").textContent = ratingLabel(best);\n } else {\n document.getElementById(\"featuredQuote\").textContent = \"Här kommer vinnarcitatet synas.\";\n document.getElementById(\"featuredAuthor\").textContent = \"Lägg till första citatet\";\n document.getElementById(\"featuredRating\").textContent = \"Inga poäng ännu\";\n }\n}\n\nfunction renderPodiums() {\n if (nameLoginRequired) {\n var locked = '

Logga in med din @edu.lerum.se-mejl för att se prispallen.

';\n if (document.getElementById(\"homePodium\")) document.getElementById(\"homePodium\").innerHTML = locked;\n if (document.getElementById(\"podium\")) document.getElementById(\"podium\").innerHTML = locked;\n return;\n }\n\n var sorted = sortQuotes(quotesCache);\n document.getElementById(\"homePodium\").innerHTML = buildPodiumHtml(sorted);\n document.getElementById(\"podium\").innerHTML = buildPodiumHtml(sorted);\n}\n\nfunction buildPodiumHtml(sorted) {\n var podiumData = [sorted[1], sorted[0], sorted[2]];\n var podiumClasses = [\"second\", \"first\", \"third\"];\n var labels = [\"ANDRA PLATS\", \"FÖRSTA PLATS\", \"TREDJE PLATS\"];\n var numbers = [2, 1, 3];\n\n if (!sorted.length) {\n return '

Ingen prispall ännu. Lägg till citat i Admin.

';\n }\n\n return podiumData.map(function (quote, index) {\n if (!quote) {\n return '

' +\n '

' + numbers[index] + '

' +\n '

' + labels[index] + '

' +\n '

Tom plats

' +\n '

Behöver fler citat

' +\n '

';\n }\n\n var ribbon = index === 1 ? '

VINNAREN JUST NU

' : '';\n\n return '

' +\n ribbon +\n '

' +\n '

' + numbers[index] + '

' +\n '

' + labels[index] + '

' +\n '

“' + escapeHtml(quote.text) + '”

' +\n '

' + starText(averageRating(quote)) + '

' +\n '

' + escapeHtml(quote.name) + ' · ' + ratingLabel(quote) + '

' +\n '

';\n }).join(\"\");\n}\n\nfunction renderVoteList() {\n var container = document.getElementById(\"voteList\");\n\n if (nameLoginRequired) {\n if (container) {\n container.innerHTML = '

Logga in med din @edu.lerum.se-mejl för att betygsätta citaten.

';\n }\n return;\n }\n\n var gate = document.getElementById(\"ratingGate\");\n var searchPanel = document.getElementById(\"voteSearchPanel\");\n\n if (ratingPasswordRequired && !ratingAccessOk) {\n gate.classList.remove(\"hidden\");\n searchPanel.classList.add(\"hidden\");\n container.innerHTML = \"\";\n return;\n }\n\n gate.classList.add(\"hidden\");\n searchPanel.classList.remove(\"hidden\");\n\n var allSorted = getVoteOrderedQuotes();\n var quotes = filterQuotes(allSorted);\n var visibleQuotes = quotes.slice(0, voteVisibleCount);\n var ratedMap = getRatedMap();\n var searchText = document.getElementById(\"searchResultText\");\n\n if (searchText) {\n var activeQuickText = quickSearchTerm ? ' Snabbsökning: ”' + quickSearchTerm + '”.' : \"\";\n var baseText = quotes.length === allSorted.length\n ? \"Visar \" + Math.min(visibleQuotes.length, quotes.length) + \" av \" + allSorted.length + \" citat. Sorterat på högst poäng, sedan närmast snittlängd.\" + activeQuickText\n : \"Visar \" + Math.min(visibleQuotes.length, quotes.length) + \" av \" + quotes.length + \" träffar. Sorterat på högst poäng, sedan närmast snittlängd.\" + activeQuickText;\n\n searchText.textContent = baseText + (quotes.length > visibleQuotes.length ? \" Tryck på Visa fler för att ladda fler.\" : \"\");\n }\n\n if (!allSorted.length) {\n container.innerHTML = '

Det finns inga citat ännu. Gå till Admin och lägg till första citatet.

';\n return;\n }\n\n if (!quotes.length) {\n container.innerHTML = '

Inga citat matchade din sökning.

';\n return;\n }\n\n var cardsHtml = visibleQuotes.map(function (quote) {\n var givenRating = Number(ratedMap[quote.id] || 0);\n\n return '

' +\n '

“' + escapeHtml(quote.text) + '”

' +\n '

' +\n '' + escapeHtml(quote.name) + '' +\n '' + ratingLabel(quote) + '' +\n '

' +\n '

' + starText(averageRating(quote)) + '

' +\n buildRatingButtons(quote.id, givenRating) +\n '

';\n }).join(\"\");\n\n if (quotes.length > visibleQuotes.length) {\n cardsHtml += '

' +\n '

Visar ' + visibleQuotes.length + ' av ' + quotes.length + ' citat.

' +\n '' +\n '

';\n }\n\n container.innerHTML = cardsHtml;\n}\n\nfunction buildRatingButtons(id, givenRating) {\n var html = '

Tryck på ett betyg:

';\n\n for (var i = 1; i <= 5; i += 1) {\n var selected = givenRating && i <= givenRating;\n\n html += '';\n }\n\n html += '

' + (givenRating ? 'Du gav ' + givenRating + ' av 5 stjärnor.' : 'Välj 1-5 stjärnor.') + '

';\n return html;\n}\n\nfunction renderAddPage() {\n var gate = document.getElementById(\"addGate\");\n var panel = document.getElementById(\"publicAddPanel\");\n if (!gate || !panel) return;\n\n if (nameLoginRequired || !addAccessOk) {\n gate.classList.remove(\"hidden\");\n panel.classList.add(\"hidden\");\n gate.innerHTML =\n '

Logga in först

' +\n '

För att skriva citat behöver du logga in med din @edu.lerum.se-mejl.

' +\n '';\n return;\n }\n\n gate.classList.add(\"hidden\");\n panel.classList.remove(\"hidden\");\n}\n\nfunction renderPending() {\n var list = document.getElementById(\"pendingList\");\n if (!list) return;\n\n if (!pendingCache.length) {\n list.innerHTML = '

Inga citat väntar på godkännande.

';\n return;\n }\n\n list.innerHTML = pendingCache.map(function (item) {\n return '

' +\n '

' +\n '“' + escapeHtml(item.text) + '”' +\n '

Sagt av ' + escapeHtml(item.name) + '

' +\n '

Inskickat av ' + escapeHtml(item.submitted_by || 'Okänd') + ' · väntar på admin-godkännande

' +\n '

' +\n '' +\n '' +\n '

' +\n '

';\n }).join(\"\");\n}\n\nfunction renderOnlineList() {\n var countElement = document.getElementById(\"onlineCount\");\n var listElement = document.getElementById(\"onlineList\");\n if (!countElement || !listElement) return;\n\n var visitors = onlineCache.visitors || [];\n countElement.textContent = String(onlineCache.onlineCount || visitors.length || 0);\n\n if (!visitors.length) {\n listElement.innerHTML = '

Ingen online-data ännu.

';\n return;\n }\n\n listElement.innerHTML = visitors.map(function (visitor) {\n var name = visitor.display_name || \"Unknown\";\n var page = visitor.page || \"Okänd sida\";\n var seenText = timeAgo(visitor.last_seen);\n var isUnknown = name === \"Unknown\";\n\n return '

' +\n '

' + escapeHtml(name.slice(0, 1).toUpperCase()) + '

' +\n '

' +\n '' + escapeHtml(name) + '' +\n '

' + escapeHtml(page) + ' · ' + escapeHtml(seenText) + '

' +\n '

' +\n '' +\n '

';\n }).join(\"\");\n}\n\nfunction renderTopList() {\n var topList = document.getElementById(\"topList\");\n\n if (nameLoginRequired) {\n if (topList) topList.innerHTML = '

Logga in med din @edu.lerum.se-mejl för att se topplistan.

';\n return;\n }\n\n var sorted = sortQuotes(quotesCache);\n\n if (!sorted.length) {\n topList.innerHTML = '

Inga citat i topplistan ännu.

';\n return;\n }\n\n var listQuotes = sorted.slice(3, 10);\n\n if (!listQuotes.length) {\n topList.innerHTML = '

När det finns fler än tre citat visas plats 4 till 10 här.

';\n return;\n }\n\n topList.innerHTML = listQuotes.map(function (quote, index) {\n var place = index + 4;\n\n return '

' +\n '

' + place + '

' +\n '

' +\n '“' + escapeHtml(quote.text) + '”' +\n '

' + escapeHtml(quote.name) + '

' +\n '

' + starText(averageRating(quote)) + '

' +\n '

' + ratingLabel(quote) + '

' +\n '

';\n }).join(\"\");\n}\n\nfunction renderAdmin() {\n document.getElementById(\"loginPanel\").classList.toggle(\"hidden\", adminUnlocked);\n document.getElementById(\"adminPanel\").classList.toggle(\"hidden\", !adminUnlocked);\n\n if (!adminUnlocked) return;\n\n var totalRatings = quotesCache.reduce(function (sum, quote) {\n return sum + Number(quote.rating_total || 0);\n }, 0);\n\n document.getElementById(\"adminStatPending\").textContent = pendingCache.length;\n document.getElementById(\"adminStatQuotes\").textContent = quotesCache.length;\n document.getElementById(\"adminStatRatings\").textContent = totalRatings;\n\n renderOnlineList();\n renderPending();\n\n var ratingToggle = document.getElementById(\"ratingPasswordRequiredToggle\");\n if (ratingToggle) ratingToggle.checked = ratingPasswordRequired;\n\n var editList = document.getElementById(\"editList\");\n var searchBox = document.getElementById(\"adminSearchInput\");\n var searchInfo = document.getElementById(\"adminSearchText\");\n var term = (searchBox ? searchBox.value : adminSearchTerm).trim().toLowerCase();\n\n var adminQuotes = quotesCache.filter(function (quote) {\n return !term ||\n String(quote.text || \"\").toLowerCase().includes(term) ||\n String(quote.name || \"\").toLowerCase().includes(term);\n });\n\n var visibleQuotes = adminQuotes.slice(0, adminVisibleCount);\n adminSearchTerm = term;\n\n if (searchInfo) {\n searchInfo.textContent = term\n ? \"Visar \" + visibleQuotes.length + \" av \" + adminQuotes.length + \" träffar.\"\n : \"Visar \" + Math.min(visibleQuotes.length, quotesCache.length) + \" av \" + quotesCache.length + \" citat.\";\n }\n\n if (!quotesCache.length) {\n editList.innerHTML = '

Det finns inga citat att ändra ännu.

';\n return;\n }\n\n if (!adminQuotes.length) {\n editList.innerHTML = '

Inga citat matchade din sökning.

';\n return;\n }\n\n var rowsHtml = visibleQuotes.map(function (quote) {\n return '

' +\n '' +\n '' +\n '

' + ratingLabel(quote) + '

' +\n '' +\n '

';\n }).join(\"\");\n\n if (adminQuotes.length > visibleQuotes.length) {\n rowsHtml += '

' +\n '

Visar ' + visibleQuotes.length + ' av ' + adminQuotes.length + ' citat i admin.

' +\n '' +\n '

';\n }\n\n editList.innerHTML = rowsHtml;\n}\n\n\nasync function siteEmailLogin(button) {\n var input = document.getElementById(\"siteEmailInput\");\n var message = document.getElementById(\"siteNameMessage\");\n\n if (!input) return;\n\n var email = input.value.trim().toLowerCase();\n\n if (!email) {\n setMessage(message, \"Skriv din skolmejl först.\", \"error\");\n return;\n }\n\n if (!email.endsWith(\"@edu.lerum.se\")) {\n setMessage(message, \"Mejlen måste sluta på @edu.lerum.se.\", \"error\");\n return;\n }\n\n try {\n setButtonBusy(button, \"Loggar in...\");\n\n await api(\"/api/add-access/login\", {\n method: \"POST\",\n body: JSON.stringify({ email: email }),\n });\n\n addAccessOk = true;\n visitorEmail = email;\n nameLoginRequired = false;\n input.value = \"\";\n\n setMessage(message, \"Klart. Laddar citaten...\", \"success\");\n\n await loadQuotes();\n await checkRatingAccess();\n await checkAdminSession();\n await loadPending();\n await sendPresenceHeartbeat();\n await loadPresence();\n\n location.hash = \"#home\";\n showPage();\n startAutoRefresh();\n startPresenceRefresh();\n } catch (error) {\n setMessage(message, error.message || \"Kunde inte logga in.\", \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function siteLogout(button) {\n try {\n setButtonBusy(button, \"Loggar ut...\");\n\n await api(\"/api/add-access/logout\", {\n method: \"POST\",\n body: JSON.stringify({}),\n });\n } catch (error) {\n // Logga ändå ut i frontend.\n } finally {\n addAccessOk = false;\n visitorEmail = \"\";\n nameLoginRequired = true;\n quotesCache = [];\n pendingCache = [];\n voteOrderIds = null;\n location.hash = \"#home\";\n clearButtonBusy(button);\n showPage();\n }\n}\n\nfunction siteAuth(button) {\n if (visitorEmail) {\n siteLogout(button);\n return;\n }\n\n location.hash = \"#login\";\n setTimeout(function () {\n var input = document.getElementById(\"siteEmailInput\");\n if (input) input.focus();\n }, 50);\n}\n\n\nasync function unlockRating(button) {\n var input = document.getElementById(\"ratingPasswordInput\");\n var message = document.getElementById(\"ratingPasswordMessage\");\n\n try {\n setButtonBusy(button, \"Låser upp...\");\n await api(\"/api/rating-access/login\", {\n method: \"POST\",\n body: JSON.stringify({ password: input.value }),\n });\n ratingAccessOk = true;\n input.value = \"\";\n setMessage(message, \"\", \"\");\n await sendPresenceHeartbeat();\n rerenderFromCache();\n } catch (error) {\n ratingAccessOk = false;\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function unlockAdd(button) {\n location.hash = \"#login\";\n return;\n\n var input = document.getElementById(\"addPasswordInput\");\n var message = document.getElementById(\"addPasswordMessage\");\n\n try {\n setButtonBusy(button, \"Sparar...\");\n await api(\"/api/add-access/login\", {\n method: \"POST\",\n body: JSON.stringify({ name: input.value }),\n });\n addAccessOk = true;\n input.value = \"\";\n setMessage(message, \"Du är inloggad för att skicka citat i 30 dagar.\", \"success\");\n await sendPresenceHeartbeat();\n await loadPresence();\n rerenderFromCache();\n } catch (error) {\n addAccessOk = false;\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function submitPendingQuote(button) {\n var textInput = document.getElementById(\"publicQuoteText\");\n var nameInput = document.getElementById(\"publicQuoteName\");\n var message = document.getElementById(\"publicAddMessage\");\n var text = textInput.value.trim();\n var name = nameInput.value.trim();\n\n if (!text || !name) {\n setMessage(message, \"Du behöver fylla i både citat och namn.\", \"error\");\n return;\n }\n\n try {\n setButtonBusy(button, \"Skickar...\");\n await api(\"/api/add-pending\", {\n method: \"POST\",\n body: JSON.stringify({ text: text, name: name }),\n });\n textInput.value = \"\";\n nameInput.value = \"\";\n setMessage(message, \"Citatet skickades till väntlistan.\", \"success\");\n await loadPending();\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n await checkAddAccess();\n rerenderFromCache();\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function approvePending(id, button) {\n try {\n setButtonBusy(button, \"Godkänner...\");\n var data = await api(\"/api/admin/approve-pending\", {\n method: \"POST\",\n body: JSON.stringify({ id: id }),\n });\n quotesCache = data.quotes || quotesCache;\n pendingCache = data.pendingQuotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n dataVersion = String(data.dataVersion || dataVersion);\n rerenderFromCache();\n } catch (error) {\n alert(error.message);\n await loadPending();\n rerenderFromCache();\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function rejectPending(id, button) {\n try {\n setButtonBusy(button, \"Tar bort...\");\n var data = await api(\"/api/admin/reject-pending\", {\n method: \"POST\",\n body: JSON.stringify({ id: id }),\n });\n pendingCache = data.pendingQuotes || [];\n rerenderFromCache();\n } catch (error) {\n alert(error.message);\n await loadPending();\n rerenderFromCache();\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function saveAdminPassword(button) {\n var input = document.getElementById(\"adminPasswordNewInput\");\n var message = document.getElementById(\"adminPasswordMessage\");\n var password = input.value.trim();\n\n if (!password) {\n setMessage(message, \"Skriv ett nytt adminlösenord först.\", \"error\");\n return;\n }\n\n try {\n setButtonBusy(button, \"Sparar...\");\n await api(\"/api/admin/admin-password\", {\n method: \"POST\",\n body: JSON.stringify({ password: password }),\n });\n input.value = \"\";\n adminUnlocked = false;\n setMessage(document.getElementById(\"loginMessage\"), \"Adminlösenordet är ändrat. Logga in igen med det nya.\", \"success\");\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function saveRatingSettings(button) {\n var toggle = document.getElementById(\"ratingPasswordRequiredToggle\");\n var input = document.getElementById(\"ratingPasswordAdminInput\");\n var message = document.getElementById(\"ratingSettingsMessage\");\n\n try {\n setButtonBusy(button, \"Sparar...\");\n var data = await api(\"/api/admin/rating-settings\", {\n method: \"POST\",\n body: JSON.stringify({\n passwordRequired: Boolean(toggle.checked),\n password: input.value.trim(),\n }),\n });\n ratingPasswordRequired = Boolean(data.ratingPasswordRequired);\n ratingAccessOk = !ratingPasswordRequired;\n input.value = \"\";\n setMessage(message, \"Inställningarna sparades.\", \"success\");\n await checkRatingAccess();\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function rateQuote(id, rating, button) {\n var ratedMap = getRatedMap();\n if (ratedMap[id]) return;\n\n try {\n if (button) {\n button.disabled = true;\n button.textContent = \"...\";\n }\n\n var data = await api(\"/api/rate\", {\n method: \"POST\",\n body: JSON.stringify({ id: id, rating: rating }),\n });\n\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n ratedMap = getRatedMap();\n ratedMap[id] = rating;\n saveRatedMap(ratedMap);\n setMessage(document.getElementById(\"ratingPasswordMessage\"), \"Betyget sparades.\", \"success\");\n rerenderFromCache();\n } catch (error) {\n if (error && error.needsName) {\n nameLoginRequired = true;\n location.hash = \"#login\";\n rerenderFromCache();\n return;\n }\n\n alert(error.message);\n rerenderFromCache();\n }\n}$1(button) {\n var input = document.getElementById(\"passwordInput\");\n var message = document.getElementById(\"loginMessage\");\n\n try {\n setButtonBusy(button, \"Loggar in...\");\n await api(\"/api/admin/login\", {\n method: \"POST\",\n body: JSON.stringify({ password: input.value }),\n });\n adminUnlocked = true;\n input.value = \"\";\n setMessage(message, \"\", \"\");\n await loadPending();\n await loadPresence();\n rerenderFromCache();\n } catch (error) {\n adminUnlocked = false;\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function logoutAdmin() {\n try {\n await api(\"/api/admin/logout\", {\n method: \"POST\",\n body: JSON.stringify({}),\n });\n } catch (error) {\n // Ignorera. Vi loggar ändå ut i frontend.\n }\n\n adminUnlocked = false;\n rerenderFromCache();\n}\n\nasync function addSingleQuote(button) {\n var textInput = document.getElementById(\"newQuoteText\");\n var nameInput = document.getElementById(\"newQuoteName\");\n var message = document.getElementById(\"addMessage\");\n var text = textInput.value.trim();\n var name = nameInput.value.trim();\n\n if (!text || !name) {\n setMessage(message, \"Du behöver fylla i både citat och namn.\", \"error\");\n return;\n }\n\n try {\n setButtonBusy(button, \"Lägger till...\");\n var data = await api(\"/api/admin/add\", {\n method: \"POST\",\n body: JSON.stringify({ text: text, name: name }),\n });\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n textInput.value = \"\";\n nameInput.value = \"\";\n setMessage(message, \"Citatet lades till.\", \"success\");\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function importQuotes(button) {\n var textarea = document.getElementById(\"importText\");\n var message = document.getElementById(\"importMessage\");\n var lines = textarea.value.split(String.fromCharCode(10)).map(function (line) {\n return line.trim();\n }).filter(Boolean);\n var chunkSize = 150;\n var totalImported = 0;\n var failedLines = [];\n\n if (!lines.length) {\n setMessage(message, \"Klistra in minst en rad att importera.\", \"error\");\n return;\n }\n\n try {\n setButtonBusy(button, \"Importerar 0 / \" + lines.length + \"...\");\n\n for (var start = 0; start < lines.length; start += chunkSize) {\n var chunk = lines.slice(start, start + chunkSize);\n var data = await api(\"/api/admin/import\", {\n method: \"POST\",\n body: JSON.stringify({\n text: chunk.join(String.fromCharCode(10)),\n returnQuotes: false,\n }),\n });\n\n totalImported += Number(data.imported || 0);\n\n if (data.failedLines && data.failedLines.length) {\n data.failedLines.forEach(function (lineNumber) {\n failedLines.push(start + Number(lineNumber));\n });\n }\n\n if (button) button.textContent = \"Importerar \" + Math.min(start + chunk.length, lines.length) + \" / \" + lines.length + \"...\";\n setMessage(message, \"Importerar... \" + Math.min(start + chunk.length, lines.length) + \" av \" + lines.length + \" rader klara.\", \"success\");\n }\n\n await loadQuotes();\n if (!failedLines.length) textarea.value = \"\";\n\n var failedCount = failedLines.length;\n var failedPreview = failedLines.slice(0, 20).join(\", \");\n var extraFailedText = failedCount > 20 ? \" och \" + (failedCount - 20) + \" till\" : \"\";\n var text = failedCount\n ? totalImported + \" importerades. \" + failedCount + \" rader hade fel format, till exempel rad \" + failedPreview + extraFailedText + \". Format: Vad de säger - Namn eller Vad de säger — Namn.\"\n : totalImported + \" citat importerades.\";\n\n setMessage(message, text, failedCount ? \"error\" : \"success\");\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function updateQuote(id, field, value, input) {\n var oldValue = input ? input.defaultValue : value;\n if (String(value).trim() === String(oldValue).trim()) return;\n\n try {\n if (input) input.disabled = true;\n var data = await api(\"/api/admin/update\", {\n method: \"POST\",\n body: JSON.stringify({ id: id, field: field, value: value }),\n });\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n rerenderFromCache();\n } catch (error) {\n alert(error.message);\n rerenderFromCache();\n } finally {\n if (input) input.disabled = false;\n }\n}\n\nasync function deleteQuote(id, button) {\n if (!confirm(\"Vill du ta bort citatet?\")) return;\n\n try {\n setButtonBusy(button, \"Tar bort...\");\n var data = await api(\"/api/admin/delete\", {\n method: \"POST\",\n body: JSON.stringify({ id: id }),\n });\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n removeRatedId(id);\n rerenderFromCache();\n } catch (error) {\n alert(error.message);\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function resetRatings(button) {\n if (!confirm(\"Vill du nollställa alla betyg?\")) return;\n\n try {\n setButtonBusy(button, \"Nollställer...\");\n var data = await api(\"/api/admin/reset-ratings\", {\n method: \"POST\",\n body: JSON.stringify({}),\n });\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n rerenderFromCache();\n } catch (error) {\n alert(error.message);\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function clearAllQuotes(button) {\n if (!confirm(\"Vill du ta bort alla citat?\")) return;\n\n try {\n setButtonBusy(button, \"Tar bort...\");\n var data = await api(\"/api/admin/clear\", {\n method: \"POST\",\n body: JSON.stringify({}),\n });\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n rerenderFromCache();\n } catch (error) {\n alert(error.message);\n } finally {\n clearButtonBusy(button);\n }\n}\n\nfunction clearSearch() {\n var personInput = document.getElementById(\"personSearch\");\n var quoteInput = document.getElementById(\"quoteSearch\");\n var homeInput = document.getElementById(\"homeSearch\");\n\n if (personInput) personInput.value = \"\";\n if (quoteInput) quoteInput.value = \"\";\n if (homeInput) homeInput.value = \"\";\n\n quickSearchTerm = \"\";\n voteVisibleCount = VOTE_PAGE_SIZE;\n voteOrderIds = null;\n rerenderFromCache();\n}\n\nfunction homeSearch() {\n var homeInput = document.getElementById(\"homeSearch\");\n var personInput = document.getElementById(\"personSearch\");\n var quoteInput = document.getElementById(\"quoteSearch\");\n\n quickSearchTerm = homeInput ? homeInput.value.trim() : \"\";\n if (personInput) personInput.value = \"\";\n if (quoteInput) quoteInput.value = \"\";\n\n voteVisibleCount = VOTE_PAGE_SIZE;\n voteOrderIds = null;\n\n if (location.hash !== \"#vote\") location.hash = \"#vote\";\n else rerenderFromCache();\n}\n\nfunction timeAgo(isoDate) {\n var diff = Math.max(0, Date.now() - new Date(isoDate).getTime());\n var seconds = Math.floor(diff / 1000);\n\n if (seconds < 5) return \"nu\";\n if (seconds < 60) return seconds + \" sek sedan\";\n\n var minutes = Math.floor(seconds / 60);\n if (minutes === 1) return \"1 min sedan\";\n return minutes + \" min sedan\";\n}\n\nfunction setButtonBusy(button, label) {\n if (!button) return;\n button.dataset.oldText = button.textContent;\n button.textContent = label;\n button.disabled = true;\n}\n\nfunction clearButtonBusy(button) {\n if (!button) return;\n button.textContent = button.dataset.oldText || button.textContent;\n button.disabled = false;\n delete button.dataset.oldText;\n}\n\nfunction setMessage(element, text, type) {\n if (!element) return;\n element.textContent = text;\n element.className = type ? \"message \" + type : \"message\";\n}\n\nfunction ratingLabel(quote) {\n var points = totalPoints(quote);\n var count = Number(quote.rating_count || 0);\n\n if (!points && !count) return \"Inga poäng ännu\";\n return points + \" poäng · \" + count + \" betyg\";\n}\n\nfunction formatAverage(value) {\n return value.toFixed(1).replace(\".0\", \"\");\n}\n\nfunction starText(value) {\n var rounded = Math.round(value);\n var text = \"\";\n\n for (var i = 1; i <= 5; i += 1) {\n text += i <= rounded ? \"★\" : \"☆\";\n }\n\n return text;\n}\n\nfunction escapeHtml(text) {\n return String(text)\n .replaceAll(\"&\", \"&\")\n .replaceAll(\"<\", \"<\")\n .replaceAll(\">\", \">\")\n .replaceAll('\"', \""\")\n .replaceAll(\"'\", \"'\");\n}\n\nfunction escapeAttr(text) {\n return escapeHtml(text).replaceAll(String.fromCharCode(96), \"`\");\n}\n\ndocument.addEventListener(\"click\", function (event) {\n var button = event.target.closest(\"button[data-action]\");\n if (!button) return;\n\n var action = button.dataset.action;\n var id = button.dataset.id;\n var rating = Number(button.dataset.rating || 0);\n\n if (action === \"site-name-login\") siteEmailLogin(button);\n if (action === \"site-auth\") siteAuth(button);\n if (action === \"rate\") rateQuote(id, rating, button);\n if (action === \"unlock-rating\") unlockRating(button);\n if (action === \"unlock-add\") unlockAdd(button);\n if (action === \"submit-pending\") submitPendingQuote(button);\n if (action === \"approve-pending\") approvePending(id, button);\n if (action === \"reject-pending\") rejectPending(id, button);\n if (action === \"save-admin-password\") saveAdminPassword(button);\n if (action === \"save-rating-settings\") saveRatingSettings(button);\n if (action === \"login\") loginAdmin(button);\n if (action === \"add\") addSingleQuote(button);\n if (action === \"import\") importQuotes(button);\n if (action === \"delete\") deleteQuote(id, button);\n if (action === \"reset-ratings\") resetRatings(button);\n if (action === \"clear\") clearAllQuotes(button);\n if (action === \"logout\") logoutAdmin();\n if (action === \"refresh\") refreshAll();\n if (action === \"refresh-pending\") loadPending().then(rerenderFromCache);\n if (action === \"clear-search\") clearSearch();\n\n if (action === \"admin-clear-search\") {\n var adminSearch = document.getElementById(\"adminSearchInput\");\n if (adminSearch) adminSearch.value = \"\";\n adminSearchTerm = \"\";\n adminVisibleCount = ADMIN_PAGE_SIZE;\n rerenderFromCache();\n }\n\n if (action === \"home-search\") homeSearch();\n\n if (action === \"show-more-vote\") {\n voteVisibleCount += VOTE_PAGE_SIZE;\n rerenderFromCache();\n }\n\n if (action === \"show-more-admin\") {\n adminVisibleCount += ADMIN_PAGE_SIZE;\n rerenderFromCache();\n }\n});\n\ndocument.addEventListener(\"change\", function (event) {\n var input = event.target.closest(\"input[data-action='edit']\");\n if (!input) return;\n updateQuote(input.dataset.id, input.dataset.field, input.value, input);\n});\n\ndocument.addEventListener(\"input\", function (event) {\n if (event.target && (event.target.id === \"personSearch\" || event.target.id === \"quoteSearch\")) {\n quickSearchTerm = \"\";\n voteVisibleCount = VOTE_PAGE_SIZE;\n voteOrderIds = null;\n rerenderFromCache();\n }\n\n if (event.target && event.target.id === \"adminSearchInput\") {\n adminVisibleCount = ADMIN_PAGE_SIZE;\n rerenderFromCache();\n }\n});\n\nfunction bindEnter(id, callback) {\n var element = document.getElementById(id);\n if (!element) return;\n\n element.addEventListener(\"keydown\", function (event) {\n if (event.key === \"Enter\") callback();\n });\n}\n\nbindEnter(\"siteEmailInput\", function () {\n siteEmailLogin(document.querySelector('button[data-action=\"site-name-login\"]'));\n});\n\nbindEnter(\"passwordInput\", function () {\n loginAdmin(document.querySelector('button[data-action=\"login\"]'));\n});\n\nbindEnter(\"homeSearch\", function () {\n homeSearch();\n});\n\nbindEnter(\"ratingPasswordInput\", function () {\n unlockRating(document.querySelector('button[data-action=\"unlock-rating\"]'));\n});\n\nbindEnter(\"addPasswordInput\", function () {\n unlockAdd(document.querySelector('button[data-action=\"unlock-add\"]'));\n});\n\nbindEnter(\"publicQuoteName\", function () {\n submitPendingQuote(document.querySelector('button[data-action=\"submit-pending\"]'));\n});\n\ndocument.addEventListener(\"visibilitychange\", function () {\n if (!document.hidden) {\n sendPresenceHeartbeat();\n checkForUpdates();\n }\n});\n\nwindow.addEventListener(\"hashchange\", showPage);\nwindow.addEventListener(\"DOMContentLoaded\", boot);\n`;",[158],"pulls","branches",1,"forks","envVars",{"_173":167,"_175":62},"connections",{"_173":62,"_174":62},"count","unfilledCount","emptyCount",{"_43":157,"_32":158,"_30":159,"_135":-5,"_41":42,"_40":160,"_137":25,"_38":190,"_13":162,"_33":140,"_35":163,"_24":25,"_142":-5,"_181":191,"_27":192},{"_43":152,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_137":25,"_38":187,"_13":154,"_33":34,"_35":37,"_24":25,"_142":155,"_181":188,"_27":189},{"_43":144,"_32":145,"_30":146,"_135":-5,"_41":42,"_40":147,"_137":25,"_38":184,"_13":149,"_33":140,"_35":150,"_24":25,"_142":-5,"_181":185,"_27":186},{"_43":132,"_32":133,"_30":134,"_135":-5,"_41":42,"_40":136,"_137":25,"_38":180,"_13":139,"_33":140,"_35":141,"_24":25,"_142":-5,"_181":182,"_27":183},["D",1779641459101],"children",[],[133],["D",1779641416595],[],[145],["D",1779641643125],[],[28],["D",1779641438988],[],[158],["D",1779361955862],["D",1789489305251],{"_99":98,"_106":101},{"_99":98,"_100":101,"_102":101,"_18":55,"_103":104,"_105":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_125":231,"_232":233,"_234":235,"_236":25,"_237":25,"_238":25,"_239":58,"_240":-5,"_241":-7,"_242":-7,"_243":62,"_244":25,"_245":25,"_246":-5,"_247":25,"_248":25,"_249":25,"_250":-5},"ENV",{"_202":203,"_204":205,"_206":89,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Skolmejl krävs

Citat som glänser i solen.

Prispallen

Betygsätt citaten

Lösenord krävs

Lägg till citat

Skriv ditt namn

Skicka in citat

Prispall och plats 4-10

Plats 4-10

Admin

Online just nu

Väntlista för nya citat

Adminlösenord

Betygsätt-lösenord

Lägg till ett citat

Importera citat

Ändra citat

Logga in först

Diff · v74