[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_193":194,"_195":196},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_92":-7,"_93":86,"_29":-7,"_94":-5,"_15":95,"_96":97,"_98":99,"_100":101,"_102":103,"_104":-5,"_105":-5,"_106":-5,"_107":38,"_108":109,"_110":50,"_111":-5,"_112":-5,"_113":114},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","William1012012012012012012012","name","Citat","project",{"_20":28,"_13":14,"_22":36,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":-5,"_43":44,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":-5,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":65,"_66":65,"_67":68,"_69":68,"_70":68,"_71":65,"_72":65,"_73":74,"_75":76,"_77":78,"_79":38},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":-5,"_32":-5,"_33":34,"_35":-5},"id","f891cc74-5505-11f1-9eb2-ee650bb23af1","createdAt",["D",1779361955869],"updatedAt",["D",1779865908030],"main","projectId","f890c23e-5505-11f1-9eb2-ee650bb23af1","version",134,"forkedBranchId","forkedBranchVersion","lockfileKey","1779865908405-esm.town_v_William1012012012012012012012_Citat@134-main","deletedAt",["D",1779361955862],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/697c393a-8e74-412a-6ec3-1675575e8700/square512?exp=1789531199&sig=eb9bc214719f2a3bf7a4feff7d0352faf28d32a3f7fd2379a8a5ee281c408346","userId","70fb9ab2-4d23-47f8-bc12-3d32368f5f9a","pinnedFileId","f89513c0-5505-11f1-9eb2-ee650bb23af1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019e4a3b-ee39-751e-a47d-54c75d59feef","tursoName","f890c23e550511f19eb2ee650bb23af1","tursoHostname","f890c23e550511f19eb2ee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789489305251],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_91":86},"org",{"_11":12,"_85":86,"_87":86,"_45":46,"_88":89,"_90":38},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_80":-5,"_81":-5,"_82":-5,"_83":14,"_84":12},"isOwned","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","path","adoptOrgId",{"_20":28,"_13":14,"_22":188,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":-5,"_43":44,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":-5,"_53":54,"_55":56,"_57":58,"_59":60,"_61":189,"_63":-5,"_64":65,"_66":65,"_67":68,"_69":68,"_70":68,"_71":65,"_72":65,"_73":190,"_75":191,"_77":192,"_79":38},"tree",[171,172,173,174],"files",[171,172,173,174],"counts",{"_161":54,"_17":162,"_163":54,"_164":165,"_166":167},"contents",[115,116,117,118],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_20":154,"_13":155,"_121":156,"_123":-5,"_124":21,"_125":30,"_127":50,"_22":157,"_29":158,"_130":131,"_132":159,"_134":38,"_135":-5,"_93":160},{"_20":145,"_13":146,"_121":48,"_123":-5,"_124":21,"_125":147,"_127":50,"_22":148,"_29":149,"_130":150,"_132":151,"_134":38,"_135":152,"_93":153},{"_20":137,"_13":138,"_121":139,"_123":-5,"_124":21,"_125":140,"_127":50,"_22":141,"_29":142,"_130":131,"_132":143,"_134":38,"_135":-5,"_93":144},{"_20":119,"_13":120,"_121":122,"_123":-5,"_124":21,"_125":126,"_127":50,"_22":128,"_29":129,"_130":131,"_132":133,"_134":38,"_135":-5,"_93":136},"81361514-5928-11f1-9726-ee650bb23af1","ui.ts","fileId","9917c9fe-55ac-11f1-92d0-ee650bb23af1","parentId","branchId","branchVersion",130,"latest",["D",1779816592608],19,"fileType","script","content","// ui.ts\n// HTML-strukturen för Sommarcitat.\n\nexport const APP_HTML = String.raw`\n\n\n \n \n Sommarcitat\n \n \n\n\n

\n \n ☀\n Sommarcitat\n \n\n \n

\n\n

Underhåll

Sidan är pausad just nu

Sidan är tillfälligt pausad för underhåll.

\n Admin\n

\n\n

Logga in för att se citaten

\n \n

\n Skriv din mejl som slutar på @edu.lerum.se. När du är inloggad kan du läsa citat, betygsätta och skicka in nya citat.\n

\n\n \n\n

\n\n

Sommar, sol och legendariska citat

Citat som glänser i solen.

\n Lägg in roliga, smarta eller helt orimliga citat. Betygsätt med 1-5 stjärnor och låt vinnarna synas direkt på startsidan.\n

\n\n

\n Betygsätt nu\n Lägg till citat\n

\n\n

\n Sök direkt\n

\n \n \n

Söker både på namn och på själva citatet.

\n\n \n

\n\n

Live just nu

Prispallen

\n Se plats 4-10\n

\n\n

Citat

\n Ge varje citat 1-5 stjärnor. Citat med högst totalpoäng hamnar högst.\n

\n\n

Lösenord krävs

Skriv lösenordet för att kunna betygsätta citaten.

\n \n \n

\n\n

\n Sök person\n \n

\n Sök citat\n \n

\n \n

Visar alla citat.

\n\n

Lägg till citat

\n Här kan du skicka in citat. De hamnar först i admin-väntlistan och måste godkännas innan de syns på sidan.\n

\n\n

Skriv ditt namn

Skriv ditt eget namn så admin kan se vem som skickat in citatet. Namnet visas bara i Admin.

\n \n \n

\n\n

Skicka in citat

\n \n \n \n

Citatet syns inte offentligt förrän admin trycker Ja. Ditt namn visas bara för admin.

\n\n

Prispall och plats 4-10

\n Första, andra och tredje plats syns stort på prispallen. Listan under börjar på plats 4.\n Poängen väger både betyg och hur många som röstat, så listan blir mer rättvis.\n

\n\n

Plats 4-10

\n\n

Admin

Logga in för att lägga till, importera, ändra och ta bort citat.

\n\n

\n Lösenord\n

\n \n \n

Du hålls inloggad i 30 dagar med en säker cookie. Lösenordet sparas inte i webbläsaren.

\n\n

\n\n \n

\n\n`;","deleted","label",[120],"7d345b6a-5928-11f1-953e-ee650bb23af1","style.ts","a5bdfb2e-55ac-11f1-907f-ee650bb23af1",129,["D",1779816585916],22,"// style.ts\n// All CSS för Sommarcitat.\n// Servera den här som /style.css från main/server-filen:\n// import { STYLE_CSS } from \"./style.ts\";\n// if (path === \"/style.css\") return new Response(STYLE_CSS, { headers: { \"content-type\": \"text/css; charset=utf-8\" } });\n\nexport const STYLE_CSS = String.raw`\n:root {\n --sky: #75d7ff;\n --sky-soft: #c8f6ff;\n --sun: #ffd166;\n --sun-deep: #ff9f1c;\n --grass: #43c96f;\n --leaf: #178f52;\n --sea: #2ec4b6;\n --sand: #fff1c7;\n --cream: #fffdf2;\n --gold: #ffd166;\n --silver: #bae6fd;\n --bronze: #fdba74;\n --text: #10331f;\n --muted: rgba(16, 51, 31, 0.68);\n --glass: rgba(255, 255, 255, 0.66);\n --glass-strong: rgba(255, 255, 255, 0.88);\n --line: rgba(255, 255, 255, 0.78);\n --shadow: 0 24px 70px rgba(22, 96, 73, 0.2);\n --shadow-soft: 0 14px 36px rgba(22, 96, 73, 0.13);\n --radius: 30px;\n}\n\n* {\n box-sizing: border-box;\n margin: 0;\n padding: 0;\n}\n\nhtml {\n scroll-behavior: smooth;\n}\n\nbody {\n min-height: 100vh;\n font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif;\n color: var(--text);\n background:\n radial-gradient(circle at 12% 12%, rgba(255, 209, 102, 0.92) 0 72px, transparent 75px),\n radial-gradient(circle at 83% 12%, rgba(255, 255, 255, 0.82) 0 34px, transparent 36px),\n radial-gradient(circle at 78% 19%, rgba(255, 255, 255, 0.68) 0 26px, transparent 28px),\n linear-gradient(180deg, var(--sky), var(--sky-soft) 42%, #dbffe7 100%);\n overflow-x: hidden;\n}\n\nbody::before {\n content: \"\";\n position: fixed;\n inset: auto 0 0 0;\n height: 220px;\n pointer-events: none;\n background:\n radial-gradient(120px 50px at 12% 92%, rgba(67, 201, 111, 0.62), transparent 70%),\n radial-gradient(150px 60px at 40% 105%, rgba(23, 143, 82, 0.4), transparent 70%),\n radial-gradient(170px 70px at 78% 100%, rgba(46, 196, 182, 0.34), transparent 70%),\n linear-gradient(180deg, transparent, rgba(255, 241, 199, 0.7));\n z-index: -2;\n}\n\nbody::after {\n content: \"\";\n position: fixed;\n width: 520px;\n height: 520px;\n left: -190px;\n bottom: -250px;\n border-radius: 999px;\n background: rgba(67, 201, 111, 0.2);\n filter: blur(12px);\n z-index: -3;\n animation: floatBlob 9s ease-in-out infinite;\n}\n\n@keyframes floatBlob {\n 0%, 100% { transform: translateY(0) scale(1); }\n 50% { transform: translateY(-18px) scale(1.05); }\n}\n\n@keyframes slideDown {\n from { opacity: 0; transform: translateY(-18px); }\n to { opacity: 1; transform: translateY(0); }\n}\n\n@keyframes fadeUp {\n from { opacity: 0; transform: translateY(24px); }\n to { opacity: 1; transform: translateY(0); }\n}\n\n@keyframes gentleSpin {\n from { transform: rotate(0deg); }\n to { transform: rotate(360deg); }\n}\n\n@keyframes cardFloat {\n 0%, 100% { transform: translateY(0) rotate(0deg); }\n 50% { transform: translateY(-12px) rotate(1deg); }\n}\n\n@keyframes popIn {\n from { opacity: 0; transform: scale(0.92) translateY(20px); }\n to { opacity: 1; transform: scale(1) translateY(0); }\n}\n\n.app {\n width: min(1180px, calc(100% - 32px));\n margin: 0 auto;\n padding: 24px 0 76px;\n}\n\nheader {\n display: flex;\n align-items: center;\n justify-content: space-between;\n gap: 18px;\n margin-bottom: 34px;\n animation: slideDown 650ms ease both;\n}\n\n.logo {\n display: flex;\n align-items: center;\n gap: 12px;\n font-weight: 950;\n letter-spacing: -0.05em;\n font-size: clamp(1.35rem, 3vw, 2.05rem);\n}\n\n.logo-mark {\n width: 50px;\n height: 50px;\n display: grid;\n place-items: center;\n border-radius: 18px;\n background: linear-gradient(135deg, var(--sun), var(--sun-deep));\n box-shadow: 0 16px 32px rgba(255, 159, 28, 0.32);\n color: #5b3100;\n font-size: 1.45rem;\n animation: gentleSpin 7s linear infinite;\n}\n\nnav,\n.actions,\n.admin-actions,\n.pending-actions {\n display: flex;\n align-items: center;\n gap: 10px;\n flex-wrap: wrap;\n}\n\nnav {\n justify-content: flex-end;\n}\n\na {\n color: inherit;\n}\n\n.nav-link,\nbutton,\n.button {\n border: 0;\n color: var(--text);\n text-decoration: none;\n cursor: pointer;\n font: inherit;\n font-weight: 850;\n padding: 12px 16px;\n border-radius: 999px;\n background: var(--glass);\n backdrop-filter: blur(16px);\n box-shadow: var(--shadow-soft);\n transition: transform 180ms ease, background 180ms ease, box-shadow 180ms ease, opacity 180ms ease;\n}\n\n.nav-link:hover,\nbutton:hover,\n.button:hover {\n transform: translateY(-3px);\n background: var(--glass-strong);\n box-shadow: 0 18px 38px rgba(22, 96, 73, 0.18);\n}\n\nbutton:disabled {\n cursor: not-allowed;\n opacity: 0.55;\n transform: none !important;\n}\n\n.primary {\n background: linear-gradient(135deg, var(--leaf), var(--grass));\n color: white;\n box-shadow: 0 18px 38px rgba(23, 143, 82, 0.25);\n}\n\n.primary:hover {\n background: linear-gradient(135deg, #0f7f49, #35bd63);\n}\n\n.danger {\n background: rgba(255, 107, 107, 0.2);\n color: #7a1f1f;\n}\n\n.danger:hover {\n background: rgba(255, 107, 107, 0.32);\n}\n\n.hero {\n min-height: 52vh;\n display: grid;\n grid-template-columns: 1.04fr 0.96fr;\n gap: 30px;\n align-items: stretch;\n margin-bottom: 30px;\n}\n\n.hero-text {\n display: flex;\n flex-direction: column;\n justify-content: center;\n animation: fadeUp 700ms ease both;\n}\n\n.eyebrow {\n display: inline-flex;\n width: fit-content;\n gap: 8px;\n align-items: center;\n color: #0d5f3a;\n background: rgba(255, 255, 255, 0.66);\n border: 1px solid var(--line);\n border-radius: 999px;\n padding: 9px 13px;\n margin-bottom: 18px;\n font-weight: 950;\n box-shadow: 0 12px 26px rgba(22, 96, 73, 0.1);\n}\n\nh1 {\n font-size: clamp(3rem, 8vw, 6.6rem);\n line-height: 0.9;\n letter-spacing: -0.085em;\n margin-bottom: 20px;\n color: #0d3f2b;\n text-wrap: balance;\n}\n\nh2 {\n font-size: clamp(1.9rem, 4vw, 3.25rem);\n line-height: 1;\n letter-spacing: -0.055em;\n margin-bottom: 16px;\n color: #0d3f2b;\n}\n\n.lead {\n max-width: 650px;\n color: var(--muted);\n font-size: clamp(1.04rem, 2vw, 1.23rem);\n line-height: 1.65;\n margin-bottom: 24px;\n}\n\n.quote-preview,\n.quote-card,\n.panel,\n.home-podium-panel,\n.search-panel,\n.home-search {\n background: rgba(255, 255, 255, 0.58);\n border: 1px solid var(--line);\n border-radius: var(--radius);\n padding: 22px;\n backdrop-filter: blur(18px);\n box-shadow: 0 18px 55px rgba(22, 96, 73, 0.15);\n transition: transform 180ms ease, background 180ms ease, box-shadow 180ms ease;\n}\n\n.quote-card:hover,\n.panel:hover {\n transform: translateY(-4px);\n background: rgba(255, 255, 255, 0.76);\n box-shadow: 0 22px 60px rgba(22, 96, 73, 0.19);\n}\n\n.quote-card {\n min-width: 0;\n overflow: hidden;\n}\n\n.quote-preview {\n border-radius: 38px;\n padding: 30px;\n box-shadow: var(--shadow);\n animation: cardFloat 5s ease-in-out infinite, fadeUp 700ms ease 100ms both;\n position: relative;\n overflow: hidden;\n}\n\n.quote-preview::before {\n content: \"\";\n position: absolute;\n inset: -70px -80px auto auto;\n width: 220px;\n height: 220px;\n border-radius: 50%;\n background: radial-gradient(circle, rgba(255, 209, 102, 0.75), transparent 68%);\n}\n\n.quote-preview::after {\n content: \"\\201C\";\n position: absolute;\n bottom: -70px;\n right: 18px;\n font-size: 13rem;\n opacity: 0.12;\n font-family: Georgia, serif;\n color: #0d3f2b;\n}\n\n.champion-preview {\n background: linear-gradient(145deg, rgba(255, 247, 194, 0.86), rgba(255, 255, 255, 0.68) 48%, rgba(219, 255, 231, 0.7));\n border: 2px solid rgba(255, 209, 102, 0.92);\n box-shadow: 0 30px 90px rgba(255, 159, 28, 0.28), 0 22px 70px rgba(22, 96, 73, 0.18);\n}\n\n.champion-kicker,\n.featured-rating-pill,\n.place-label,\n.podium-ribbon {\n display: inline-flex;\n width: fit-content;\n border-radius: 999px;\n font-weight: 950;\n position: relative;\n z-index: 1;\n}\n\n.champion-kicker {\n margin-bottom: 16px;\n padding: 10px 14px;\n background: linear-gradient(135deg, #fff7b8, var(--gold));\n color: #6b3b00;\n letter-spacing: 0.04em;\n box-shadow: 0 14px 32px rgba(255, 159, 28, 0.22);\n}\n\n.big-quote,\n.quote-text {\n position: relative;\n z-index: 1;\n font-size: clamp(1.3rem, 3vw, 2.1rem);\n line-height: 1.18;\n font-weight: 950;\n letter-spacing: -0.04em;\n margin-bottom: 16px;\n}\n\n.champion-quote {\n font-size: clamp(1.65rem, 4vw, 3.35rem);\n line-height: 1.04;\n text-shadow: 0 2px 0 rgba(255, 255, 255, 0.45);\n}\n\n.quote-text {\n font-size: 1.18rem;\n line-height: 1.35;\n letter-spacing: -0.035em;\n margin-bottom: 14px;\n}\n\n.quote-author {\n color: #0d6c42;\n font-weight: 900;\n position: relative;\n z-index: 1;\n}\n\n.champion-author {\n font-size: 1.12rem;\n}\n\n.featured-rating-pill {\n margin-top: 12px;\n padding: 9px 13px;\n background: rgba(255, 255, 255, 0.68);\n color: #0d5f3a;\n}\n\n.champion-rating {\n background: linear-gradient(135deg, #0d6c42, var(--grass));\n color: white;\n box-shadow: 0 14px 30px rgba(23, 143, 82, 0.24);\n}\n\n.stats {\n position: relative;\n z-index: 1;\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 14px;\n margin-top: 24px;\n}\n\n.stat {\n padding: 16px;\n border-radius: 22px;\n background: rgba(255, 255, 255, 0.62);\n border: 1px solid var(--line);\n}\n\n.stat strong {\n display: block;\n font-size: 1.6rem;\n}\n\n.stat span,\n.small {\n color: var(--muted);\n font-size: 0.92rem;\n font-weight: 750;\n}\n\n.page {\n display: none;\n animation: fadeUp 500ms ease both;\n}\n\n.page.active {\n display: block;\n}\n\n.grid {\n display: grid;\n grid-template-columns: repeat(auto-fit, minmax(270px, 1fr));\n gap: 16px;\n align-items: start;\n}\n\n.quote-meta {\n display: flex;\n justify-content: space-between;\n gap: 14px;\n align-items: center;\n color: var(--muted);\n margin-bottom: 16px;\n font-weight: 800;\n}\n\n.rating-text {\n color: #0d6c42;\n font-weight: 950;\n}\n\n.stars-line {\n color: #d17a00;\n font-size: 1.15rem;\n letter-spacing: 0.04em;\n font-weight: 950;\n}\n\n.rating-stars {\n display: flex;\n gap: 8px;\n flex-wrap: wrap;\n margin-top: 16px;\n align-items: center;\n}\n\n.star-button {\n width: 54px;\n height: 54px;\n display: grid;\n place-items: center;\n padding: 0;\n border-radius: 18px;\n font-size: 1.55rem;\n font-weight: 1000;\n color: #8a4a00;\n background: rgba(255, 255, 255, 0.68);\n}\n\n.star-button:hover,\n.star-button.selected {\n background: linear-gradient(135deg, #fff1a8, var(--gold));\n transform: translateY(-4px) scale(1.03);\n}\n\n.rating-status,\n.rating-help,\n.hint,\n.message {\n color: var(--muted);\n font-weight: 750;\n line-height: 1.5;\n}\n\n.rating-status {\n width: 100%;\n margin-top: 6px;\n font-size: 0.92rem;\n}\n\n.rating-help {\n width: 100%;\n font-size: 0.86rem;\n margin-top: -4px;\n}\n\n.message,\n.hint {\n margin-top: 10px;\n}\n\n.message.success {\n color: #0d6c42;\n}\n\n.message.error {\n color: #a22020;\n}\n\n.home-search {\n margin-top: 18px;\n padding: 16px;\n border-radius: 24px;\n}\n\n.home-search-grid,\n.search-grid,\n.rating-gate-grid,\n.settings-grid,\n.admin-search-grid,\n.form-grid {\n display: grid;\n gap: 12px;\n align-items: end;\n}\n\n.home-search-grid,\n.rating-gate-grid,\n.settings-grid,\n.admin-search-grid {\n grid-template-columns: 1fr auto;\n}\n\n.search-grid {\n grid-template-columns: minmax(0, 1fr) minmax(0, 1fr) auto;\n}\n\n.search-grid > * {\n min-width: 0;\n}\n\n.search-panel {\n position: relative;\n z-index: 3;\n margin-bottom: 26px;\n clear: both;\n}\n\n.search-panel button {\n white-space: nowrap;\n}\n\n.search-result-text,\n.admin-search-text {\n margin-top: 12px;\n color: var(--muted);\n font-weight: 800;\n}\n\n.admin-search-box {\n margin: 14px 0 18px;\n padding: 14px;\n border-radius: 22px;\n background: rgba(255, 255, 255, 0.42);\n border: 1px solid var(--line);\n}\n\n.home-podium-panel {\n margin: 14px 0 34px;\n padding: 24px;\n overflow: hidden;\n background: rgba(255, 255, 255, 0.52);\n box-shadow: 0 18px 45px rgba(22, 96, 73, 0.12);\n}\n\n.home-podium-title,\n.admin-header-row,\n.admin-card-title {\n display: flex;\n justify-content: space-between;\n align-items: end;\n gap: 16px;\n flex-wrap: wrap;\n}\n\n.podium {\n position: relative;\n display: grid;\n grid-template-columns: 0.9fr 1.18fr 0.9fr;\n gap: 18px;\n align-items: end;\n margin: 26px 0 12px;\n padding: 18px 0 6px;\n}\n\n.podium::after {\n display: none;\n}\n\n.podium-card {\n position: relative;\n z-index: 1;\n display: flex;\n flex-direction: column;\n justify-content: space-between;\n text-align: center;\n padding: 24px;\n border-radius: 30px;\n overflow: hidden;\n border: 2px solid var(--line);\n box-shadow: 0 16px 34px rgba(22, 96, 73, 0.13);\n animation: popIn 450ms ease both;\n}\n\n.podium-card::before {\n content: \"\";\n position: absolute;\n inset: 0;\n opacity: 0.32;\n background: radial-gradient(circle at 28% 10%, white, transparent 34%);\n pointer-events: none;\n}\n\n.podium-card::after {\n display: none;\n}\n\n.podium-card > * {\n position: relative;\n z-index: 1;\n}\n\n.podium-card.first {\n min-height: 340px;\n background: linear-gradient(160deg, #fff2a8, var(--gold) 48%, #fff8d6);\n border-color: rgba(255, 159, 28, 0.88);\n transform: translateY(-8px);\n box-shadow: 0 18px 38px rgba(255, 159, 28, 0.22), 0 14px 32px rgba(22, 96, 73, 0.12);\n}\n\n.podium-card.second {\n min-height: 270px;\n background: linear-gradient(160deg, #ecfeff, var(--silver) 55%, #ffffff);\n transform: translateY(14px);\n box-shadow: 0 14px 30px rgba(14, 165, 233, 0.14), 0 12px 28px rgba(22, 96, 73, 0.1);\n}\n\n.podium-card.third {\n min-height: 245px;\n background: linear-gradient(160deg, #ffedd5, var(--bronze) 55%, #fff7ed);\n transform: translateY(24px);\n box-shadow: 0 14px 30px rgba(249, 115, 22, 0.14), 0 12px 28px rgba(22, 96, 73, 0.1);\n}\n\n.podium.compact {\n grid-template-columns: 0.92fr 1.16fr 0.92fr;\n padding: 8px 4px 22px;\n margin: 16px 0 4px;\n}\n\n.podium.compact::after {\n display: none;\n}\n\n.podium.compact .first {\n min-height: 300px;\n transform: translateY(-6px);\n}\n\n.podium.compact .second {\n min-height: 235px;\n transform: translateY(16px);\n}\n\n.podium.compact .third {\n min-height: 215px;\n transform: translateY(24px);\n}\n\n.place-number {\n width: 76px;\n height: 76px;\n display: grid;\n place-items: center;\n margin: 0 auto 12px;\n border-radius: 25px;\n background: rgba(255, 255, 255, 0.7);\n color: #0d3f2b;\n font-size: 2.4rem;\n font-weight: 1000;\n box-shadow: 0 16px 32px rgba(22, 96, 73, 0.15);\n}\n\n.first .place-number {\n width: 92px;\n height: 92px;\n font-size: 3rem;\n background: linear-gradient(135deg, #fff8d6, var(--gold));\n box-shadow: 0 18px 45px rgba(255, 159, 28, 0.32);\n}\n\n.first .quote-text {\n font-size: clamp(1.45rem, 3vw, 2.35rem);\n}\n\n.place-label {\n align-items: center;\n justify-content: center;\n gap: 8px;\n margin: 0 auto 12px;\n padding: 9px 13px;\n background: rgba(255, 255, 255, 0.68);\n color: #0d3f2b;\n}\n\n.place-label::before {\n content: \"🏆\";\n}\n\n.second .place-label::before {\n content: \"🥈\";\n}\n\n.third .place-label::before {\n content: \"🥉\";\n}\n\n.podium-ribbon {\n margin: 0 auto 14px;\n padding: 8px 13px;\n background: rgba(13, 63, 43, 0.92);\n color: white;\n letter-spacing: 0.03em;\n}\n\n.rank-list,\n.edit-list,\n.admin-side-stack {\n display: grid;\n gap: 12px;\n}\n\n.rank-list {\n gap: 10px;\n}\n\n.rank-row {\n display: grid;\n grid-template-columns: 48px 1fr auto;\n gap: 14px;\n align-items: center;\n padding: 14px;\n border-radius: 20px;\n background: rgba(255, 255, 255, 0.62);\n border: 1px solid var(--line);\n box-shadow: 0 10px 24px rgba(22, 96, 73, 0.08);\n transition: transform 180ms ease, background 180ms ease;\n}\n\n.rank-row:hover {\n transform: translateY(-2px);\n background: rgba(255, 255, 255, 0.78);\n}\n\n.rank-number {\n width: 40px;\n height: 40px;\n display: grid;\n place-items: center;\n border-radius: 14px;\n background: linear-gradient(135deg, var(--sea), var(--grass));\n color: white;\n font-weight: 950;\n box-shadow: 0 8px 18px rgba(46, 196, 182, 0.18);\n}\n\n.rank-row .stars-line {\n margin-top: 5px;\n margin-bottom: 0;\n font-size: 1rem;\n}\n\n.rank-row .rating-text {\n white-space: nowrap;\n padding: 8px 11px;\n border-radius: 999px;\n background: rgba(67, 201, 111, 0.14);\n}\n\ninput,\ntextarea {\n width: 100%;\n border: 1px solid rgba(255, 255, 255, 0.9);\n background: rgba(255, 255, 255, 0.65);\n color: var(--text);\n border-radius: 18px;\n padding: 13px 14px;\n font: inherit;\n outline: none;\n transition: 160ms ease;\n}\n\ninput:focus,\ntextarea:focus {\n border-color: rgba(23, 143, 82, 0.65);\n box-shadow: 0 0 0 4px rgba(67, 201, 111, 0.15);\n background: rgba(255, 255, 255, 0.86);\n}\n\ntextarea {\n min-height: 160px;\n resize: vertical;\n line-height: 1.45;\n}\n\nlabel {\n display: block;\n color: #0d5f3a;\n font-weight: 950;\n margin-bottom: 8px;\n}\n\n.form-grid {\n grid-template-columns: 1fr 220px auto;\n margin-bottom: 14px;\n}\n\n.admin-tools,\n.admin-section-grid {\n display: grid;\n grid-template-columns: 1fr 1fr;\n gap: 16px;\n margin: 24px 0;\n}\n\n.admin-section-grid {\n grid-template-columns: 1.35fr 0.85fr;\n margin-bottom: 18px;\n}\n\n.admin-dashboard {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 14px;\n margin-bottom: 18px;\n}\n\n.admin-stat {\n padding: 18px;\n border-radius: 24px;\n background: rgba(255, 255, 255, 0.58);\n border: 1px solid var(--line);\n box-shadow: var(--shadow-soft);\n}\n\n.admin-stat strong {\n display: block;\n font-size: 2rem;\n color: #0d6c42;\n}\n\n.admin-password-card {\n background: linear-gradient(135deg, rgba(255, 255, 255, 0.7), rgba(219, 255, 231, 0.65));\n}\n\n.admin-tool-title,\n.admin-main-heading {\n font-size: 1.7rem;\n}\n\n.admin-main-heading {\n margin-bottom: 6px;\n}\n\n.setting-row {\n display: flex;\n align-items: center;\n gap: 10px;\n flex-wrap: wrap;\n margin: 12px 0;\n}\n\n.setting-row input[type=\"checkbox\"] {\n width: auto;\n transform: scale(1.2);\n}\n\n.edit-row {\n display: grid;\n grid-template-columns: 1fr 180px 160px 110px;\n gap: 10px;\n align-items: center;\n padding: 12px;\n border-radius: 22px;\n background: rgba(255, 255, 255, 0.42);\n border: 1px solid var(--line);\n}\n\n.admin-rating-box {\n border-radius: 18px;\n padding: 12px;\n background: rgba(255, 255, 255, 0.46);\n font-weight: 900;\n color: #0d6c42;\n}\n\n.pending-row {\n display: grid;\n grid-template-columns: 1fr auto;\n gap: 14px;\n align-items: center;\n padding: 16px;\n border-radius: 24px;\n background: rgba(255, 255, 255, 0.5);\n border: 1px solid var(--line);\n}\n\n.empty {\n padding: 28px;\n color: var(--muted);\n text-align: center;\n border-radius: 28px;\n border: 2px dashed rgba(23, 143, 82, 0.24);\n background: rgba(255, 255, 255, 0.42);\n font-weight: 800;\n}\n\n.hidden {\n display: none !important;\n}\n\n.panel-title {\n font-size: 2rem;\n margin-bottom: 14px;\n}\n\n.show-more-text {\n margin-bottom: 12px;\n}\n\n@media (max-width: 1050px) {\n .search-grid,\n .form-grid {\n grid-template-columns: 1fr;\n }\n\n .search-panel button,\n .form-grid button {\n width: 100%;\n }\n}\n\n@media (max-width: 900px) {\n header {\n align-items: flex-start;\n flex-direction: column;\n }\n\n nav {\n justify-content: flex-start;\n }\n\n .hero,\n .podium,\n .admin-tools,\n .admin-section-grid,\n .admin-dashboard,\n .edit-row,\n .home-search-grid,\n .rating-gate-grid,\n .settings-grid,\n .admin-search-grid,\n .pending-row {\n grid-template-columns: 1fr;\n }\n\n .hero {\n gap: 18px;\n }\n\n .champion-preview {\n order: -1;\n padding: 24px;\n border-radius: 30px;\n }\n\n .champion-quote {\n font-size: clamp(1.9rem, 9vw, 3rem);\n }\n\n .stats {\n gap: 9px;\n }\n\n .stat {\n padding: 12px;\n }\n\n .podium {\n display: flex;\n flex-direction: column;\n gap: 14px;\n align-items: stretch;\n padding: 0;\n margin: 22px 0;\n }\n\n .podium::after {\n display: none;\n }\n\n .podium-card,\n .podium-card.first,\n .podium-card.second,\n .podium-card.third,\n .podium.compact .podium-card.first,\n .podium.compact .podium-card.second,\n .podium.compact .podium-card.third {\n min-height: auto;\n transform: none;\n }\n\n .first {\n order: 1;\n }\n\n .second {\n order: 2;\n }\n\n .third {\n order: 3;\n }\n\n .podium-card {\n padding: 20px;\n border-radius: 28px;\n }\n\n .first {\n padding: 26px;\n border-width: 3px;\n }\n\n .first .place-number {\n width: 82px;\n height: 82px;\n font-size: 2.65rem;\n }\n\n .home-podium-panel {\n padding: 18px;\n border-radius: 28px;\n }\n\n .rank-row {\n grid-template-columns: 44px 1fr;\n }\n\n .rank-row .rating-text {\n grid-column: 2;\n }\n}\n\n/* Login med skolmejl och header-status */\n.login-panel {\n max-width: 720px;\n margin: 40px auto;\n padding: clamp(24px, 5vw, 42px);\n border-radius: 38px;\n}\n\n.login-title {\n font-size: clamp(2.4rem, 7vw, 5rem);\n line-height: 0.92;\n}\n\n.login-grid {\n display: grid;\n grid-template-columns: minmax(0, 0.8fr) minmax(0, 1.2fr) auto;\n gap: 12px;\n align-items: end;\n margin-top: 18px;\n}\n\n.user-status {\n display: inline-flex;\n align-items: center;\n max-width: 230px;\n min-height: 42px;\n padding: 10px 14px;\n border-radius: 999px;\n background: rgba(255, 255, 255, 0.52);\n color: #0d5f3a;\n font-size: 0.92rem;\n font-weight: 900;\n box-shadow: 0 12px 30px rgba(22, 96, 73, 0.1);\n overflow: hidden;\n text-overflow: ellipsis;\n white-space: nowrap;\n}\n\n.auth-button {\n white-space: nowrap;\n}\n\n.locked-note {\n color: var(--muted);\n font-weight: 850;\n line-height: 1.5;\n margin-top: 10px;\n}\n\n@media (max-width: 700px) {\n .login-grid {\n grid-template-columns: 1fr;\n }\n\n .user-status {\n max-width: 100%;\n }\n}\n\n/* Admin: inloggningar och blockerade enheter */\n.login-devices-panel {\n margin: 18px 0;\n}\n\n.login-devices-list {\n display: grid;\n gap: 12px;\n margin-top: 16px;\n}\n\n.login-device-row {\n display: grid;\n grid-template-columns: 1fr auto;\n gap: 14px;\n align-items: center;\n padding: 14px;\n border-radius: 22px;\n background: rgba(255, 255, 255, 0.48);\n border: 1px solid var(--line);\n}\n\n.login-device-row.blocked {\n background: rgba(255, 107, 107, 0.16);\n border-color: rgba(255, 107, 107, 0.35);\n}\n\n.device-meta {\n display: flex;\n gap: 8px;\n flex-wrap: wrap;\n margin-top: 6px;\n}\n\n.device-pill {\n display: inline-flex;\n max-width: 100%;\n padding: 7px 10px;\n border-radius: 999px;\n background: rgba(255, 255, 255, 0.58);\n color: var(--muted);\n font-size: 0.85rem;\n font-weight: 850;\n overflow-wrap: anywhere;\n}\n\n.device-actions {\n display: flex;\n gap: 10px;\n flex-wrap: wrap;\n justify-content: flex-end;\n}\n\n@media (max-width: 800px) {\n .login-device-row {\n grid-template-columns: 1fr;\n }\n\n .device-actions {\n justify-content: flex-start;\n }\n}\n\n/* Precisa stjärnor med delvis fyllda stjärnor */\n.precise-stars {\n display: inline-flex;\n gap: 2px;\n align-items: center;\n white-space: nowrap;\n}\n\n.precise-star {\n position: relative;\n display: inline-block;\n width: 1.05em;\n height: 1.05em;\n line-height: 1.05;\n font-size: 1.12em;\n}\n\n.precise-star-base,\n.precise-star-fill {\n position: absolute;\n inset: 0;\n display: block;\n}\n\n.precise-star-base {\n color: rgba(180, 83, 9, 0.28);\n}\n\n.precise-star-fill {\n color: #b45309;\n overflow: hidden;\n white-space: nowrap;\n}\n\n/* Maintenance */\n.maintenance-panel {\n max-width: 760px;\n margin: 44px auto;\n padding: clamp(24px, 5vw, 44px);\n border-radius: 38px;\n}\n\n.maintenance-title {\n font-size: clamp(2.4rem, 7vw, 5rem);\n line-height: 0.92;\n}\n\n.maintenance-admin-panel {\n margin: 18px 0;\n}\n\n/* Renare poängvisning */\n.score-corner {\n display: inline-flex;\n align-items: flex-end;\n gap: 6px;\n flex-wrap: wrap;\n justify-content: flex-end;\n}\n\n.rating-count-small {\n display: inline-flex;\n padding: 5px 8px;\n border-radius: 999px;\n background: rgba(255, 255, 255, 0.52);\n color: var(--muted);\n font-size: 0.78rem;\n font-weight: 850;\n white-space: nowrap;\n}\n\n.rank-score {\n min-width: max-content;\n}\n\n.rating-card-top .score-corner {\n margin-left: auto;\n}\n\n/* Snyggare adminvy för inloggningar */\n.admin-wide-panel {\n width: 100%;\n margin: 18px 0;\n}\n\n.login-device-search-box {\n margin-top: 16px;\n}\n\n.login-devices-list {\n display: grid;\n gap: 14px;\n margin-top: 16px;\n}\n\n.login-user-card {\n border-radius: 26px;\n background: rgba(255, 255, 255, 0.52);\n border: 1px solid var(--line);\n overflow: hidden;\n box-shadow: 0 12px 30px rgba(22, 96, 73, 0.09);\n}\n\n.login-user-card.blocked {\n background: rgba(255, 107, 107, 0.14);\n border-color: rgba(255, 107, 107, 0.34);\n}\n\n.login-user-card.mixed {\n background: rgba(255, 209, 102, 0.18);\n border-color: rgba(255, 209, 102, 0.45);\n}\n\n.login-user-card details {\n width: 100%;\n}\n\n.login-user-card summary {\n display: grid;\n grid-template-columns: minmax(0, 1fr) auto;\n gap: 16px;\n align-items: center;\n padding: 18px;\n cursor: pointer;\n list-style: none;\n}\n\n.login-user-card summary::-webkit-details-marker {\n display: none;\n}\n\n.login-user-main {\n display: flex;\n align-items: center;\n gap: 12px;\n min-width: 0;\n}\n\n.login-user-main strong,\n.login-user-main .small {\n overflow-wrap: anywhere;\n}\n\n.login-user-avatar {\n width: 46px;\n height: 46px;\n display: grid;\n place-items: center;\n border-radius: 17px;\n color: white;\n font-weight: 950;\n background: linear-gradient(135deg, var(--sea), var(--grass));\n flex: 0 0 auto;\n}\n\n.login-user-stats,\n.device-meta,\n.device-actions {\n display: flex;\n gap: 8px;\n flex-wrap: wrap;\n justify-content: flex-end;\n}\n\n.device-detail-list {\n display: grid;\n gap: 10px;\n padding: 0 18px 18px;\n}\n\n.device-detail-row {\n display: grid;\n grid-template-columns: minmax(0, 1fr) auto;\n gap: 14px;\n align-items: center;\n padding: 14px;\n border-radius: 20px;\n background: rgba(255, 255, 255, 0.46);\n border: 1px solid rgba(255, 255, 255, 0.72);\n}\n\n.device-detail-row.blocked {\n background: rgba(255, 107, 107, 0.15);\n border-color: rgba(255, 107, 107, 0.32);\n}\n\n.device-detail-title {\n font-weight: 950;\n margin-bottom: 6px;\n}\n\n.status-pill.allowed,\n.allowed-pill {\n background: rgba(67, 201, 111, 0.18);\n color: #0d6c42;\n}\n\n.status-pill.blocked,\n.blocked-pill {\n background: rgba(255, 107, 107, 0.22);\n color: #7a1f1f;\n}\n\n.status-pill.mixed {\n background: rgba(255, 209, 102, 0.34);\n color: #7a4b00;\n}\n\n@media (max-width: 850px) {\n .login-user-card summary,\n .device-detail-row {\n grid-template-columns: 1fr;\n }\n\n .login-user-stats,\n .device-actions {\n justify-content: flex-start;\n }\n}\n\n/* Extra admin-skydd i frontend:\n Admininnehåll ska aldrig visas visuellt om sidan inte aktivt har låst upp admin. */\nbody:not(.admin-unlocked) #adminPanel {\n display: none !important;\n visibility: hidden !important;\n pointer-events: none !important;\n}\n\nbody:not(.admin-unlocked) #adminPanel * {\n pointer-events: none !important;\n}\n\n#adminPanel.hidden {\n display: none !important;\n}\n\n/* Hårdare admin-låsning:\n Själva adminverktygen finns i en template och injiceras först efter riktig admin-login. */\nbody:not(.admin-unlocked) #adminPanel {\n display: none !important;\n visibility: hidden !important;\n pointer-events: none !important;\n opacity: 0 !important;\n height: 0 !important;\n overflow: hidden !important;\n}\n\nbody.admin-unlocked #adminPanel.hidden {\n display: none !important;\n}\n\n#adminPanel[aria-hidden=\"true\"] {\n display: none !important;\n}\n\n/* Enkel men hård admin-låsning */\nbody:not(.admin-unlocked) #adminPanel,\n#adminPanel.hidden,\n#adminPanel[aria-hidden=\"true\"] {\n display: none !important;\n visibility: hidden !important;\n pointer-events: none !important;\n}\n\n/* Admin ska inte visas för någon förrän admin är inloggad */\n#adminPanelTemplate {\n display: none !important;\n}\n\nbody:not(.admin-unlocked) #adminPanel,\n#adminPanel.hidden,\n#adminPanel[aria-hidden=\"true\"] {\n display: none !important;\n visibility: hidden !important;\n pointer-events: none !important;\n opacity: 0 !important;\n height: 0 !important;\n overflow: hidden !important;\n}\n\n`;",[138],"ed7202da-5999-11f1-bf49-ee650bb23af1","main.ts",132,["D",1779865307353],52,"http","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst rawSqliteExecute = sqlite.execute.bind(sqlite);\n\ntype SqlInput = Parameters[0];\ntype SqlResult = Awaited>;\n\nlet initDbPromise: Promise | null = null;\n\nasync function ensureDb(): Promise {\n if (!initDbPromise) {\n initDbPromise = initDb().catch((error) => {\n initDbPromise = null;\n throw error;\n });\n }\n\n return initDbPromise;\n}\n\nasync function dbExecute(input: SqlInput): Promise {\n let lastError: unknown;\n\n for (let attempt = 0; attempt < 3; attempt += 1) {\n try {\n return await rawSqliteExecute(input);\n } catch (error) {\n lastError = error;\n if (attempt < 2) await sleep(180 + attempt * 260);\n }\n }\n\n throw lastError;\n}\n\nfunction sleep(ms: number): Promise {\n return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n(sqlite as unknown as { execute: (input: SqlInput) => Promise })\n .execute = dbExecute;\n\nasync function loadTextModule(\n fileBase: string,\n exportName: string,\n): Promise {\n const capitalized = fileBase.charAt(0).toUpperCase() + fileBase.slice(1);\n const paths = [\n `./${fileBase}.ts`,\n `./${fileBase}`,\n `./${capitalized}.ts`,\n `./${capitalized}`,\n ];\n\n const attempts: string[] = [];\n\n for (const path of paths) {\n try {\n const module = await import(path) as Record;\n const value = module[exportName] ?? module.default;\n const exportsFound = Object.keys(module).join(\", \") || \"inga exports\";\n attempts.push(`${path}: ${exportsFound}`);\n\n if (typeof value === \"string\" && value.trim()) return value;\n } catch (error) {\n attempts.push(\n `${path}: ${error instanceof Error ? error.message : String(error)}`,\n );\n }\n }\n\n throw new Error(\n `${fileBase}.ts saknar ${exportName}. Testade: ${attempts.join(\" | \")}`,\n );\n}\n\nconst APP_HTML = await loadTextModule(\"ui\", \"APP_HTML\");\nconst STYLE_CSS = await loadTextModule(\"style\", \"STYLE_CSS\");\nconst CLIENT_JS = await loadTextModule(\"client\", \"CLIENT_JS\");\n\ntype Quote = {\n id: string;\n text: string;\n name: string;\n rating_total: number;\n rating_count: number;\n created_at: string;\n};\n\ntype PendingQuote = {\n id: string;\n text: string;\n name: string;\n submitted_by: string;\n created_at: string;\n};\n\ntype OnlineVisitor = {\n visitor_id: string;\n display_name: string;\n page: string;\n last_seen: string;\n};\n\ntype ExtraHeaders = Record;\n\nconst ADMIN_ENV = \"ADMIN_PASSWORD\";\nconst SECRET_ENV = \"ADMIN_SESSION_SECRET\";\nconst ADMIN_COOKIE = \"sommarcitat_admin\";\nconst VOTER_COOKIE = \"sommarcitat_voter\";\nconst RATING_COOKIE = \"sommarcitat_rating_access\";\nconst ADD_COOKIE = \"sommarcitat_add_access\";\nconst DEVICE_COOKIE = \"sommarcitat_device\";\n\nconst DEFAULT_RATING_PASSWORD = \"114abc\";\nconst DAY = 24 * 60 * 60;\nconst SHORT_ACCESS_SECONDS = 10 * 60;\nconst ADD_ACCESS_SECONDS = 30 * DAY;\nconst PRESENCE_WINDOW_SECONDS = 30;\n\nexport default async function handler(req: Request): Promise {\n await ensureDb();\n\n const url = new URL(req.url);\n const path = route(url.pathname);\n const method = req.method.toUpperCase();\n\n try {\n if (method === \"GET\" && isStylePath(path)) return css();\n if (method === \"GET\" && isScriptPath(path)) return js();\n if (method === \"GET\" && !path.startsWith(\"/api/\")) return html();\n\n if (method === \"GET\" && path === \"/api/quotes\") {\n const visitorName = await getAddSubmitterName(req);\n\n if (!visitorName) {\n return json(\n {\n error: \"Logga in för att se citaten.\",\n needsName: true,\n },\n 401,\n );\n }\n\n if (await maintenanceEnabled() && !await isAdmin(req)) {\n return json(\n {\n error: await getSetting(\n \"maintenance_message\",\n \"Sidan är tillfälligt pausad för underhåll.\",\n ),\n maintenance: true,\n message: await getSetting(\n \"maintenance_message\",\n \"Sidan är tillfälligt pausad för underhåll.\",\n ),\n },\n 503,\n );\n }\n\n const device = getOrCreateDevice(req);\n const blocked = await blockedDevice(device.id);\n\n if (blocked) {\n return json(\n {\n error: \"Den här enheten är blockerad.\",\n blocked: true,\n },\n 403,\n device.cookie ? { \"set-cookie\": device.cookie } : {},\n );\n }\n\n await migrateLegacyRatingsForRequest(req, visitorName);\n\n return json(\n await payload(req),\n 200,\n device.cookie ? { \"set-cookie\": device.cookie } : {},\n );\n }\n\n if (method === \"GET\" && path === \"/api/version\") {\n const visitorName = await getAddSubmitterName(req);\n\n if (!visitorName) {\n return json(\n {\n error: \"Logga in först.\",\n needsName: true,\n },\n 401,\n );\n }\n\n if (await maintenanceEnabled() && !await isAdmin(req)) {\n return json(\n {\n error: await getSetting(\n \"maintenance_message\",\n \"Sidan är tillfälligt pausad för underhåll.\",\n ),\n maintenance: true,\n message: await getSetting(\n \"maintenance_message\",\n \"Sidan är tillfälligt pausad för underhåll.\",\n ),\n },\n 503,\n );\n }\n\n const device = getOrCreateDevice(req);\n const blocked = await blockedDevice(device.id);\n\n if (blocked) {\n return json(\n {\n error: \"Den här enheten är blockerad.\",\n blocked: true,\n },\n 403,\n device.cookie ? { \"set-cookie\": device.cookie } : {},\n );\n }\n\n return json(\n await versionPayload(),\n 200,\n device.cookie ? { \"set-cookie\": device.cookie } : {},\n );\n }\n\n if (method === \"POST\" && path === \"/api/presence/heartbeat\") {\n return presenceHeartbeat(req);\n }\n\n if (method === \"GET\" && path === \"/api/maintenance/status\") {\n return maintenanceStatusRoute(req);\n }\n\n if (method === \"GET\" && path === \"/api/admin/session\") {\n return adminSession(req);\n }\n if (method === \"POST\" && path === \"/api/admin/login\") {\n return adminLogin(req);\n }\n if (method === \"POST\" && path === \"/api/admin/logout\") {\n return json({ ok: true }, 200, {\n \"set-cookie\": clearCookie(ADMIN_COOKIE),\n });\n }\n\n if (method === \"GET\" && path === \"/api/rating-access/session\") {\n return ratingSession(req);\n }\n if (method === \"POST\" && path === \"/api/rating-access/login\") {\n return ratingLogin(req);\n }\n\n if (method === \"GET\" && path === \"/api/add-access/session\") {\n return addSession(req);\n }\n if (method === \"POST\" && path === \"/api/add-access/login\") {\n return addLogin(req);\n }\n if (method === \"POST\" && path === \"/api/add-access/logout\") {\n return json({ ok: true }, 200, {\n \"set-cookie\": clearCookie(ADD_COOKIE),\n });\n }\n if (method === \"POST\" && path === \"/api/add-pending\") {\n return addPendingRoute(req);\n }\n\n if (method === \"GET\" && path === \"/api/notifications\") {\n return notificationsRoute(req);\n }\n\n if (method === \"POST\" && path === \"/api/notifications/seen\") {\n return markNotificationsSeenRoute(req);\n }\n\n if (method === \"POST\" && path === \"/api/rate\") return rateQuote(req);\n\n if (path.startsWith(\"/api/admin/\")) {\n const guard = await requireAdmin(req);\n if (guard) return guard;\n }\n\n if (method === \"GET\" && path === \"/api/admin/presence\") {\n return adminPresenceRoute();\n }\n if (method === \"GET\" && path === \"/api/admin/pending\") {\n return pendingRoute();\n }\n\n if (method === \"GET\" && path === \"/api/admin/login-devices\") {\n return adminLoginDevicesRoute();\n }\n\n if (method === \"POST\" && path === \"/api/admin/block-device\") {\n return adminBlockDeviceRoute(req);\n }\n\n if (method === \"POST\" && path === \"/api/admin/unblock-device\") {\n return adminUnblockDeviceRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/approve-pending\") {\n return approvePendingRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/reject-pending\") {\n return rejectPendingRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/admin-password\") {\n return saveAdminPassword(req);\n }\n if (method === \"POST\" && path === \"/api/admin/rating-settings\") {\n return saveRatingSettings(req);\n }\n\n if (method === \"POST\" && path === \"/api/admin/maintenance\") {\n return saveMaintenanceSettings(req);\n }\n\n if (method === \"POST\" && path === \"/api/admin/logout-all-users\") {\n return logoutAllUsersRoute();\n }\n if (method === \"POST\" && path === \"/api/admin/add\") return addRoute(req);\n if (method === \"POST\" && path === \"/api/admin/import\") {\n return importRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/update\") {\n return updateRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/delete\") {\n return deleteRoute(req);\n }\n if (method === \"POST\" && path === \"/api/admin/reset-ratings\") {\n return resetRatingsRoute();\n }\n if (method === \"POST\" && path === \"/api/admin/clear\") return clearRoute();\n\n return json({ error: \"Sidan finns inte.\" }, 404);\n } catch (error) {\n console.error(error);\n return json({ error: \"Något gick fel på servern.\" }, 500);\n }\n}\n\nfunction route(pathname: string): string {\n const apiStart = pathname.indexOf(\"/api/\");\n if (apiStart >= 0) return pathname.slice(apiStart);\n return pathname;\n}\n\nfunction isStylePath(path: string): boolean {\n return path === \"/style.css\" || path.endsWith(\"/style.css\");\n}\n\nfunction isScriptPath(path: string): boolean {\n return path === \"/app.js\" || path.endsWith(\"/app.js\");\n}\n\nasync function initDb() {\n await sqlite.execute(\n \"create table if not exists quotes (id text primary key, text text not null, name text not null, rating_total integer not null default 0, rating_count integer not null default 0, created_at text not null)\",\n );\n await sqlite.execute(\n \"create table if not exists app_settings (key text primary key, value text not null)\",\n );\n await sqlite.execute(\n \"create table if not exists quote_ratings (quote_id text not null, voter_id text not null, rating_version text not null default '1', rating integer not null, created_at text not null, primary key (quote_id, voter_id, rating_version))\",\n );\n await sqlite.execute(\n \"create table if not exists pending_quotes (id text primary key, text text not null, name text not null, submitted_by text not null default 'Okänd', created_at text not null)\",\n );\n\n await sqlite.execute(\n \"create table if not exists quote_notifications (id text primary key, email text not null, text text not null, name text not null, status text not null, created_at text not null, seen_at text)\",\n );\n await sqlite.execute(\n \"create table if not exists visitor_presence (visitor_id text primary key, display_name text not null default 'Unknown', page text not null default 'Okänd sida', last_seen text not null)\",\n );\n\n await sqlite.execute(\n \"create table if not exists login_devices (device_id text not null, email text not null, display_name text not null default '', user_agent text not null default '', first_seen text not null, last_seen text not null, login_count integer not null default 1, primary key (device_id, email))\",\n );\n\n await sqlite.execute(\n \"create table if not exists blocked_devices (device_id text primary key, email text not null default '', reason text not null default '', blocked_at text not null)\",\n );\n\n await trySql(\n \"alter table quotes add column rating_total integer not null default 0\",\n );\n await trySql(\n \"alter table quotes add column rating_count integer not null default 0\",\n );\n await trySql(\n \"alter table quote_ratings add column rating_version text not null default '1'\",\n );\n await trySql(\n \"alter table pending_quotes add column submitted_by text not null default 'Okänd'\",\n );\n await trySql(\n \"alter table visitor_presence add column display_name text not null default 'Unknown'\",\n );\n await trySql(\n \"alter table visitor_presence add column page text not null default 'Okänd sida'\",\n );\n await trySql(\n \"alter table visitor_presence add column last_seen text not null default '1970-01-01T00:00:00.000Z'\",\n );\n await trySql(\n \"alter table login_devices add column display_name text not null default ''\",\n );\n\n await ensureSetting(\"rating_version\", \"1\");\n await ensureSetting(\"data_version\", \"1\");\n await ensureSetting(\"rating_password_required\", \"true\");\n await ensureSetting(\"rating_password_version\", \"1\");\n await ensureSetting(\"admin_password_version\", \"1\");\n await ensureSetting(\"add_access_version\", \"2\");\n await ensureSetting(\"maintenance_enabled\", \"false\");\n await ensureSetting(\n \"maintenance_message\",\n \"Sidan är tillfälligt pausad för underhåll.\",\n );\n\n if (!await getSetting(\"rating_password_hash\", \"\")) {\n await setSetting(\n \"rating_password_hash\",\n await hashRatingPassword(DEFAULT_RATING_PASSWORD),\n );\n }\n\n await removeOldStarterQuotesOnce();\n}\n\nasync function trySql(sql: string) {\n try {\n await sqlite.execute(sql);\n } catch {\n // Kolumnen finns redan eller migreringen behövs inte.\n }\n}\n\nasync function ensureSetting(key: string, value: string) {\n if (!await getSetting(key, \"\")) await setSetting(key, value);\n}\n\nasync function getSetting(key: string, fallback: string): Promise {\n const result = await sqlite.execute({\n sql: \"select value from app_settings where key = :key limit 1\",\n args: { key },\n });\n\n return String(\n (result.rows[0] as { value?: string } | undefined)?.value || fallback,\n );\n}\n\nasync function setSetting(key: string, value: string) {\n await sqlite.execute({\n sql:\n \"insert into app_settings (key, value) values (:key, :value) on conflict(key) do update set value = excluded.value\",\n args: { key, value },\n });\n}\n\nasync function bumpDataVersion() {\n await setSetting(\"data_version\", String(Date.now()));\n}\n\nasync function maintenanceEnabled(): Promise {\n return await getSetting(\"maintenance_enabled\", \"false\") === \"true\";\n}\n\nasync function ratingPasswordRequired(): Promise {\n return await getSetting(\"rating_password_required\", \"true\") === \"true\";\n}\n\nasync function removeOldStarterQuotesOnce() {\n if (await getSetting(\"starter_quotes_removed_v6\", \"\")) return;\n\n await sqlite.execute(\n \"delete from quotes where (text = 'Jag är inte sen, tiden är tidig' and name = 'Wille') or (text = 'Det där var nästan smart' and name = 'Alex') or (text = 'Vi gör det enkelt och krånglar till det sen' and name = 'Nora') or (text = 'Solen skiner, men jag fattar ändå ingenting' and name = 'Sam')\",\n );\n await setSetting(\"starter_quotes_removed_v6\", \"true\");\n}\n\nasync function payload(req?: Request) {\n return {\n quotes: await getQuotes(),\n ratedMap: req ? await getRatedMapForRequest(req) : {},\n ratingVersion: await getSetting(\"rating_version\", \"1\"),\n dataVersion: await getSetting(\"data_version\", \"1\"),\n ratingPasswordRequired: await ratingPasswordRequired(),\n maintenanceEnabled: await maintenanceEnabled(),\n maintenanceMessage: await getSetting(\n \"maintenance_message\",\n \"Sidan är tillfälligt pausad för underhåll.\",\n ),\n };\n}\n\nasync function versionPayload() {\n return {\n ratingVersion: await getSetting(\"rating_version\", \"1\"),\n dataVersion: await getSetting(\"data_version\", \"1\"),\n ratingPasswordRequired: await ratingPasswordRequired(),\n maintenanceEnabled: await maintenanceEnabled(),\n maintenanceMessage: await getSetting(\n \"maintenance_message\",\n \"Sidan är tillfälligt pausad för underhåll.\",\n ),\n };\n}\n\nasync function getQuotes(): Promise {\n const result = await sqlite.execute(\n \"select id, text, name, coalesce(rating_total, 0) as rating_total, coalesce(rating_count, 0) as rating_count, created_at from quotes order by (((coalesce(rating_total, 0) + 3.2 * 5) / (coalesce(rating_count, 0) + 5)) * 20) desc, coalesce(rating_total, 0) desc, case when coalesce(rating_count, 0) > 0 then coalesce(rating_total, 0) * 1.0 / coalesce(rating_count, 0) else 0 end desc, coalesce(rating_count, 0) desc, abs(length(text) - coalesce((select avg(length(text)) from quotes), 0)) asc, text collate nocase asc\",\n );\n\n return result.rows as Quote[];\n}\n\nasync function quoteExists(id: string): Promise {\n const result = await sqlite.execute({\n sql: \"select id from quotes where id = :id limit 1\",\n args: { id },\n });\n\n return result.rows.length > 0;\n}\n\nasync function getPendingQuotes(): Promise {\n const result = await sqlite.execute(\n \"select id, text, name, submitted_by, created_at from pending_quotes order by created_at asc\",\n );\n return result.rows as PendingQuote[];\n}\n\nasync function pendingExists(id: string): Promise {\n const result = await sqlite.execute({\n sql:\n \"select id, text, name, submitted_by, created_at from pending_quotes where id = :id limit 1\",\n args: { id },\n });\n\n return result.rows.length ? result.rows[0] as PendingQuote : null;\n}\n\nasync function addQuote(text: string, name: string) {\n await addQuotesBulk([{ text, name }]);\n}\n\nasync function addQuotesBulk(quotes: Array<{ text: string; name: string }>) {\n for (let start = 0; start < quotes.length; start += 150) {\n const chunk = quotes.slice(start, start + 150);\n const args: Record = {};\n const created = new Date().toISOString();\n\n const values = chunk.map((quote, index) => {\n args[\"id\" + index] = crypto.randomUUID();\n args[\"text\" + index] = quote.text;\n args[\"name\" + index] = quote.name;\n args[\"created\" + index] = created;\n\n return \"(:id\" + index + \", :text\" + index + \", :name\" + index +\n \", 0, 0, :created\" + index + \")\";\n }).join(\", \");\n\n await sqlite.execute({\n sql:\n \"insert into quotes (id, text, name, rating_total, rating_count, created_at) values \" +\n values,\n args,\n });\n }\n}\n\nfunction parseImportLine(line: string): { text: string; name: string } | null {\n let cleaned = line.trim();\n\n while (\n cleaned.startsWith(\"-\") || cleaned.startsWith(\"•\") ||\n cleaned.startsWith(\"*\")\n ) {\n cleaned = cleaned.slice(1).trim();\n }\n\n const separators = [\" — \", \" – \", \" - \", \"—\", \"–\", \"-\"];\n let bestIndex = -1;\n let bestSeparator = \"\";\n\n for (const separator of separators) {\n const index = cleaned.lastIndexOf(separator);\n if (index > bestIndex) {\n bestIndex = index;\n bestSeparator = separator;\n }\n }\n\n if (bestIndex < 1) return null;\n\n let text = cleaned.slice(0, bestIndex).trim();\n const name = cleaned.slice(bestIndex + bestSeparator.length).trim();\n\n if (text.startsWith('\"') && text.endsWith('\"')) {\n text = text.slice(1, -1).trim();\n }\n if (text.startsWith(\"“\") && text.endsWith(\"”\")) {\n text = text.slice(1, -1).trim();\n }\n\n return text && name ? { text, name } : null;\n}\n\nasync function adminSession(req: Request) {\n const ok = await isAdmin(req);\n return json(\n { ok },\n 200,\n ok ? {} : { \"set-cookie\": clearCookie(ADMIN_COOKIE) },\n );\n}\n\nasync function adminLogin(req: Request) {\n const body = await readJson(req);\n const password = String(body.password || \"\");\n\n if (!await checkAdminPassword(password)) {\n return json({ error: \"Fel lösenord.\" }, 401, {\n \"set-cookie\": clearCookie(ADMIN_COOKIE),\n });\n }\n\n return json({ ok: true }, 200, {\n \"set-cookie\": await createAccessCookie(\n ADMIN_COOKIE,\n \"admin\",\n \"\",\n 30 * DAY,\n ),\n });\n}\n\nasync function requireAdmin(req: Request): Promise {\n if (await isAdmin(req)) return null;\n return json({ error: \"Du behöver logga in igen.\" }, 401, {\n \"set-cookie\": clearCookie(ADMIN_COOKIE),\n });\n}\n\nasync function isAdmin(req: Request): Promise {\n return await verifyAccessCookie(\n req,\n ADMIN_COOKIE,\n \"admin\",\n \"\",\n );\n}\n\nasync function checkAdminPassword(password: string): Promise {\n const savedHash = await getSetting(\"admin_password_hash\", \"\");\n if (savedHash) return safeEqual(savedHash, await hashAdminPassword(password));\n\n const configured = Deno.env.get(ADMIN_ENV);\n return Boolean(configured && password === configured);\n}\n\nasync function ratingSession(req: Request) {\n const required = await ratingPasswordRequired();\n const ok = !required ||\n await verifyAccessCookie(\n req,\n RATING_COOKIE,\n \"rating\",\n \"rating_password_version\",\n );\n\n return json(\n { required, ok },\n 200,\n ok ? {} : { \"set-cookie\": clearCookie(RATING_COOKIE) },\n );\n}\n\nasync function ratingLogin(req: Request) {\n if (!await ratingPasswordRequired()) {\n return json({ ok: true, required: false });\n }\n\n const body = await readJson(req);\n const password = String(body.password || \"\");\n const savedHash = await getSetting(\"rating_password_hash\", \"\");\n const incomingHash = await hashRatingPassword(password);\n\n if (!savedHash || !safeEqual(savedHash, incomingHash)) {\n return json({ error: \"Fel lösenord.\" }, 401, {\n \"set-cookie\": clearCookie(RATING_COOKIE),\n });\n }\n\n return json({ ok: true, required: true }, 200, {\n \"set-cookie\": await createAccessCookie(\n RATING_COOKIE,\n \"rating\",\n \"rating_password_version\",\n SHORT_ACCESS_SECONDS,\n ),\n });\n}\n\nasync function addSession(req: Request) {\n const parsed = await readAccessCookie(req, ADD_COOKIE, \"add\", \"\");\n const email = cleanEmail(String(parsed?.submitter || \"\"));\n const name = cleanName(String(parsed?.displayName || \"\")).trim();\n const ok = Boolean(email) && isValidEduLerumEmail(email);\n\n return json(\n { ok, email: ok ? email : \"\", name: ok ? (name || email) : \"\" },\n 200,\n ok ? {} : { \"set-cookie\": clearCookie(ADD_COOKIE) },\n );\n}\n\nasync function addLogin(req: Request) {\n const body = await readJson(req);\n const email = cleanEmail(String(body.email || body.name || \"\"));\n const displayName = cleanName(\n String(body.displayName || body.fullName || \"\"),\n );\n\n if (!displayName) {\n return json({ error: \"Skriv ditt namn först.\" }, 400, {\n \"set-cookie\": clearCookie(ADD_COOKIE),\n });\n }\n\n if (!email) {\n return json({ error: \"Skriv din skolmejl först.\" }, 400, {\n \"set-cookie\": clearCookie(ADD_COOKIE),\n });\n }\n\n if (!isValidEduLerumEmail(email)) {\n return json(\n {\n error:\n \"Mejlen måste ha rätt Lerum-format, till exempel wilsah0117@edu.lerum.se.\",\n },\n 403,\n {\n \"set-cookie\": clearCookie(ADD_COOKIE),\n },\n );\n }\n\n const device = getOrCreateDevice(req);\n const blocked = await blockedDevice(device.id);\n\n if (blocked) {\n return json(\n { error: \"Den här enheten är blockerad.\" },\n 403,\n device.cookie ? { \"set-cookie\": device.cookie } : {},\n );\n }\n\n await recordLoginDevice(req, device.id, email, displayName);\n await migrateLegacyRatingsForRequest(req, email);\n\n const cookies = [\n await createAccessCookie(\n ADD_COOKIE,\n \"add\",\n \"\",\n ADD_ACCESS_SECONDS,\n { submitter: email, displayName },\n ),\n ];\n\n if (device.cookie) cookies.push(device.cookie);\n\n return json(\n { ok: true, email, name: displayName, deviceId: device.id },\n 200,\n {\n \"set-cookie\": cookies,\n },\n );\n}\n\nasync function addPendingRoute(req: Request) {\n const submitter = await getAddSubmitterName(req);\n const submitterDisplayName = await getAddSubmitterDisplayName(req);\n\n if (!submitter) {\n return json(\n { error: \"Skriv ditt namn först för att lägga till citat.\" },\n 401,\n { \"set-cookie\": clearCookie(ADD_COOKIE) },\n );\n }\n\n const body = await readJson(req);\n const text = cleanQuoteText(String(body.text || \"\"));\n const name = String(body.name || \"\").trim();\n\n if (!text || !name) {\n return json({ error: \"Du behöver fylla i både citat och namn.\" }, 400);\n }\n\n await sqlite.execute({\n sql:\n \"insert into pending_quotes (id, text, name, submitted_by, created_at) values (:id, :text, :name, :submitted_by, :created)\",\n args: {\n id: crypto.randomUUID(),\n text,\n name,\n submitted_by: submitterDisplayName && submitterDisplayName !== submitter\n ? submitterDisplayName + \" (\" + submitter + \")\"\n : submitter,\n created: new Date().toISOString(),\n },\n });\n\n await bumpDataVersion();\n return json({ ok: true });\n}\n\nasync function getRatedMapForRequest(\n req: Request,\n): Promise> {\n const email = await getAddSubmitterName(req);\n const ratingVersion = await getSetting(\"rating_version\", \"1\");\n const ratedMap: Record = {};\n\n if (!email) return ratedMap;\n\n const result = await sqlite.execute({\n sql:\n \"select quote_id, rating from quote_ratings where voter_id = :email and rating_version = :version\",\n args: { email, version: ratingVersion },\n });\n\n for (\n const row of result.rows as Array<{ quote_id?: string; rating?: number }>\n ) {\n if (row.quote_id) ratedMap[String(row.quote_id)] = Number(row.rating || 0);\n }\n\n return ratedMap;\n}\n\nasync function migrateLegacyRatingsForRequest(req: Request, email: string) {\n if (!isValidEduLerumEmail(email)) return;\n\n const legacyVoter = getCookie(req, VOTER_COOKIE);\n if (!legacyVoter || !isSafeToken(legacyVoter) || legacyVoter === email) {\n return;\n }\n\n const ratingVersion = await getSetting(\"rating_version\", \"1\");\n\n const legacyRows = await sqlite.execute({\n sql:\n \"select quote_id, rating, created_at from quote_ratings where voter_id = :legacy and rating_version = :version\",\n args: { legacy: legacyVoter, version: ratingVersion },\n });\n\n for (\n const row of legacyRows.rows as Array<\n { quote_id?: string; rating?: number; created_at?: string }\n >\n ) {\n const quoteId = String(row.quote_id || \"\");\n const rating = Math.floor(Number(row.rating || 0));\n\n if (!quoteId || rating < 1 || rating > 5) continue;\n\n await sqlite.execute({\n sql:\n \"insert or ignore into quote_ratings (quote_id, voter_id, rating_version, rating, created_at) values (:quote_id, :email, :version, :rating, :created_at)\",\n args: {\n quote_id: quoteId,\n email,\n version: ratingVersion,\n rating,\n created_at: String(row.created_at || new Date().toISOString()),\n },\n });\n }\n}\n\nasync function rateQuote(req: Request) {\n const visitorName = await getAddSubmitterName(req);\n\n if (!visitorName) {\n return json(\n {\n error: \"Skriv ditt namn först för att betygsätta.\",\n needsName: true,\n },\n 401,\n );\n }\n\n await migrateLegacyRatingsForRequest(req, visitorName);\n\n if (\n await ratingPasswordRequired() &&\n !await verifyAccessCookie(\n req,\n RATING_COOKIE,\n \"rating\",\n \"rating_password_version\",\n )\n ) {\n return json(\n { error: \"Du behöver skriva lösenordet för att betygsätta.\" },\n 401,\n {\n \"set-cookie\": clearCookie(RATING_COOKIE),\n },\n );\n }\n\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n const rating = Math.floor(Number(body.rating || 0));\n\n if (!id) return json({ error: \"Citat-id saknas.\" }, 400);\n if (rating < 1 || rating > 5) {\n return json({ error: \"Betyget måste vara mellan 1 och 5.\" }, 400);\n }\n if (!await quoteExists(id)) {\n return json({ error: \"Citatet finns inte längre.\" }, 404);\n }\n\n const ratingVersion = await getSetting(\"rating_version\", \"1\");\n\n const old = await sqlite.execute({\n sql:\n \"select rating from quote_ratings where quote_id = :id and voter_id = :voter and rating_version = :version limit 1\",\n args: { id, voter: visitorName, version: ratingVersion },\n });\n\n if (old.rows.length) {\n return json(\n { error: \"Du har redan betygsatt det här citatet.\" },\n 409,\n );\n }\n\n await sqlite.execute({\n sql:\n \"insert into quote_ratings (quote_id, voter_id, rating_version, rating, created_at) values (:id, :voter, :version, :rating, :created)\",\n args: {\n id,\n voter: visitorName,\n version: ratingVersion,\n rating,\n created: new Date().toISOString(),\n },\n });\n\n await sqlite.execute({\n sql:\n \"update quotes set rating_total = coalesce(rating_total, 0) + :rating, rating_count = coalesce(rating_count, 0) + 1 where id = :id\",\n args: { id, rating },\n });\n\n await bumpDataVersion();\n\n return json(await payload(req));\n}\n\nasync function presenceHeartbeat(req: Request) {\n const visitor = getOrCreateVisitor(req);\n const body = await readJson(req);\n const rawPage = String(body.page || \"Start\").trim();\n const page = cleanName(rawPage || \"Start\");\n const addName = await getAddSubmitterDisplayName(req);\n const displayName = addName ? cleanName(addName) : \"Unknown\";\n\n await sqlite.execute({\n sql:\n \"insert into visitor_presence (visitor_id, display_name, page, last_seen) values (:visitor_id, :display_name, :page, :last_seen) on conflict(visitor_id) do update set display_name = excluded.display_name, page = excluded.page, last_seen = excluded.last_seen\",\n args: {\n visitor_id: visitor.id,\n display_name: displayName,\n page,\n last_seen: new Date().toISOString(),\n },\n });\n\n return json(\n { ok: true },\n 200,\n visitor.cookie ? { \"set-cookie\": visitor.cookie } : {},\n );\n}\n\nasync function adminPresenceRoute() {\n await cleanupOldPresence();\n\n const cutoff = new Date(Date.now() - PRESENCE_WINDOW_SECONDS * 1000)\n .toISOString();\n\n const result = await sqlite.execute({\n sql:\n \"select visitor_id, display_name, page, last_seen from visitor_presence where last_seen >= :cutoff order by last_seen desc\",\n args: { cutoff },\n });\n\n const visitors = result.rows as OnlineVisitor[];\n return json({ onlineCount: visitors.length, visitors });\n}\n\nasync function cleanupOldPresence() {\n const oldCutoff = new Date(Date.now() - 10 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: \"delete from visitor_presence where last_seen < :oldCutoff\",\n args: { oldCutoff },\n });\n}\n\nasync function blockedDevice(deviceId: string): Promise {\n const result = await sqlite.execute({\n sql:\n \"select device_id from blocked_devices where device_id = :device_id limit 1\",\n args: { device_id: deviceId },\n });\n\n return result.rows.length > 0;\n}\n\nasync function recordLoginDevice(\n req: Request,\n deviceId: string,\n email: string,\n displayName: string,\n) {\n const now = new Date().toISOString();\n const userAgent = String(req.headers.get(\"user-agent\") || \"\").slice(0, 500);\n\n await sqlite.execute({\n sql:\n \"insert into login_devices (device_id, email, display_name, user_agent, first_seen, last_seen, login_count) values (:device_id, :email, :display_name, :user_agent, :now, :now, 1) on conflict(device_id, email) do update set display_name = excluded.display_name, user_agent = excluded.user_agent, last_seen = excluded.last_seen, login_count = login_devices.login_count + 1\",\n args: {\n device_id: deviceId,\n email,\n display_name: displayName,\n user_agent: userAgent,\n now,\n },\n });\n}\n\nasync function adminLoginDevicesRoute() {\n const result = await sqlite.execute(\n \"select d.device_id, d.email, coalesce(d.display_name, '') as display_name, d.user_agent, d.first_seen, d.last_seen, d.login_count, case when b.device_id is null then 0 else 1 end as blocked, coalesce(b.reason, '') as reason, coalesce(b.blocked_at, '') as blocked_at from login_devices d left join blocked_devices b on b.device_id = d.device_id order by d.last_seen desc limit 500\",\n );\n\n const rows = result.rows as Array>;\n const grouped = new Map>();\n\n for (const row of rows) {\n const email = String(row.email || \"\");\n if (!email) continue;\n\n const displayName = String(row.display_name || email);\n const deviceId = String(row.device_id || \"\");\n const loginCount = Number(row.login_count || 0);\n const lastSeen = String(row.last_seen || \"\");\n const firstSeen = String(row.first_seen || \"\");\n const blocked = Number(row.blocked || 0) === 1;\n\n if (!grouped.has(email)) {\n grouped.set(email, {\n email,\n display_name: displayName,\n first_seen: firstSeen,\n last_seen: lastSeen,\n total_login_count: 0,\n device_count: 0,\n blocked_count: 0,\n devices: [],\n });\n }\n\n const group = grouped.get(email)!;\n const devices = group.devices as Array>;\n\n devices.push({\n device_id: deviceId,\n user_agent: String(row.user_agent || \"\"),\n first_seen: firstSeen,\n last_seen: lastSeen,\n login_count: loginCount,\n blocked,\n reason: String(row.reason || \"\"),\n blocked_at: String(row.blocked_at || \"\"),\n });\n\n group.total_login_count = Number(group.total_login_count || 0) + loginCount;\n group.device_count = devices.length;\n group.blocked_count = Number(group.blocked_count || 0) + (blocked ? 1 : 0);\n\n if (\n !String(group.last_seen || \"\") || lastSeen > String(group.last_seen || \"\")\n ) {\n group.last_seen = lastSeen;\n }\n\n if (\n !String(group.first_seen || \"\") ||\n firstSeen < String(group.first_seen || \"\")\n ) {\n group.first_seen = firstSeen;\n }\n }\n\n const logins = Array.from(grouped.values()).sort((a, b) => {\n return String(b.last_seen || \"\").localeCompare(String(a.last_seen || \"\"));\n });\n\n return json({ logins, devices: rows });\n}\n\nasync function adminBlockDeviceRoute(req: Request) {\n const body = await readJson(req);\n const deviceId = String(body.deviceId || \"\").trim();\n const reason = cleanName(String(body.reason || \"Blockerad av admin\"));\n\n if (!deviceId || !isSafeToken(deviceId)) {\n return json({ error: \"Ogiltigt device-id.\" }, 400);\n }\n\n const emailResult = await sqlite.execute({\n sql:\n \"select email from login_devices where device_id = :device_id order by last_seen desc limit 1\",\n args: { device_id: deviceId },\n });\n\n const email = String(\n (emailResult.rows[0] as { email?: string } | undefined)?.email || \"\",\n );\n\n await sqlite.execute({\n sql:\n \"insert into blocked_devices (device_id, email, reason, blocked_at) values (:device_id, :email, :reason, :blocked_at) on conflict(device_id) do update set email = excluded.email, reason = excluded.reason, blocked_at = excluded.blocked_at\",\n args: {\n device_id: deviceId,\n email,\n reason,\n blocked_at: new Date().toISOString(),\n },\n });\n\n await bumpDataVersion();\n return adminLoginDevicesRoute();\n}\n\nasync function adminUnblockDeviceRoute(req: Request) {\n const body = await readJson(req);\n const deviceId = String(body.deviceId || \"\").trim();\n\n if (!deviceId || !isSafeToken(deviceId)) {\n return json({ error: \"Ogiltigt device-id.\" }, 400);\n }\n\n await sqlite.execute({\n sql: \"delete from blocked_devices where device_id = :device_id\",\n args: { device_id: deviceId },\n });\n\n await bumpDataVersion();\n return adminLoginDevicesRoute();\n}\n\nfunction extractEduEmail(text: string): string {\n const match = String(text || \"\").toLowerCase().match(\n /[a-zåäö]{6}\\d{4}@edu\\.lerum\\.se/i,\n );\n return match ? cleanEmail(match[0]) : \"\";\n}\n\nasync function createQuoteNotification(\n pending: PendingQuote,\n status: \"approved\" | \"rejected\",\n) {\n const email = extractEduEmail(pending.submitted_by);\n\n if (!email || !isValidEduLerumEmail(email)) return;\n\n await sqlite.execute({\n sql:\n \"insert into quote_notifications (id, email, text, name, status, created_at, seen_at) values (:id, :email, :text, :name, :status, :created_at, null)\",\n args: {\n id: crypto.randomUUID(),\n email,\n text: pending.text,\n name: pending.name,\n status,\n created_at: new Date().toISOString(),\n },\n });\n}\n\nasync function notificationsRoute(req: Request) {\n const email = await getAddSubmitterName(req);\n\n if (!email) {\n return json({ notifications: [] }, 200);\n }\n\n const result = await sqlite.execute({\n sql:\n \"select id, text, name, status, created_at from quote_notifications where email = :email and seen_at is null order by created_at desc limit 20\",\n args: { email },\n });\n\n return json({ notifications: result.rows });\n}\n\nasync function markNotificationsSeenRoute(req: Request) {\n const email = await getAddSubmitterName(req);\n\n if (!email) {\n return json({ ok: true });\n }\n\n await sqlite.execute({\n sql:\n \"update quote_notifications set seen_at = :seen_at where email = :email and seen_at is null\",\n args: {\n email,\n seen_at: new Date().toISOString(),\n },\n });\n\n return json({ ok: true });\n}\n\nasync function pendingRoute() {\n return json({ pendingQuotes: await getPendingQuotes() });\n}\n\nasync function approvePendingRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n\n if (!id) return json({ error: \"Saknar väntliste-id.\" }, 400);\n\n const pending = await pendingExists(id);\n if (!pending) {\n return json({ error: \"Citatet finns inte i väntlistan längre.\" }, 404);\n }\n\n await addQuote(cleanQuoteText(pending.text), pending.name);\n await createQuoteNotification(pending, \"approved\");\n\n await sqlite.execute({\n sql: \"delete from pending_quotes where id = :id\",\n args: { id },\n });\n await bumpDataVersion();\n\n return json({\n ...(await payload()),\n pendingQuotes: await getPendingQuotes(),\n });\n}\n\nasync function rejectPendingRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n\n if (!id) return json({ error: \"Saknar väntliste-id.\" }, 400);\n\n const pending = await pendingExists(id);\n\n if (pending) {\n await createQuoteNotification(pending, \"rejected\");\n }\n\n await sqlite.execute({\n sql: \"delete from pending_quotes where id = :id\",\n args: { id },\n });\n await bumpDataVersion();\n\n return json({ pendingQuotes: await getPendingQuotes() });\n}\n\nasync function saveAdminPassword(req: Request) {\n const body = await readJson(req);\n const password = String(body.password || \"\").trim();\n\n if (password.length < 4) {\n return json({ error: \"Adminlösenordet måste vara minst 4 tecken.\" }, 400);\n }\n\n await setSetting(\"admin_password_hash\", await hashAdminPassword(password));\n await setSetting(\"admin_password_version\", String(Date.now()));\n await bumpDataVersion();\n\n return json({ ok: true }, 200, { \"set-cookie\": clearCookie(ADMIN_COOKIE) });\n}\n\nasync function maintenanceStatusRoute(req: Request) {\n return json({\n enabled: await maintenanceEnabled(),\n message: await getSetting(\n \"maintenance_message\",\n \"Sidan är tillfälligt pausad för underhåll.\",\n ),\n admin: await isAdmin(req),\n });\n}\n\nasync function logoutAllUsersRoute() {\n await setSetting(\"add_access_version\", String(Date.now()));\n await bumpDataVersion();\n\n return json({ ok: true });\n}\n\nasync function saveMaintenanceSettings(req: Request) {\n const body = await readJson(req);\n const enabled = Boolean(body.enabled);\n const message = cleanName(\n String(body.message || \"Sidan är tillfälligt pausad för underhåll.\"),\n );\n\n await setSetting(\"maintenance_enabled\", enabled ? \"true\" : \"false\");\n await setSetting(\n \"maintenance_message\",\n message || \"Sidan är tillfälligt pausad för underhåll.\",\n );\n await bumpDataVersion();\n\n return json({\n ok: true,\n maintenanceEnabled: await maintenanceEnabled(),\n maintenanceMessage: await getSetting(\n \"maintenance_message\",\n \"Sidan är tillfälligt pausad för underhåll.\",\n ),\n });\n}\n\nasync function saveRatingSettings(req: Request) {\n const body = await readJson(req);\n const required = Boolean(body.passwordRequired);\n const password = String(body.password || \"\").trim();\n\n await setSetting(\"rating_password_required\", required ? \"true\" : \"false\");\n\n if (password) {\n await setSetting(\n \"rating_password_hash\",\n await hashRatingPassword(password),\n );\n await setSetting(\"rating_password_version\", String(Date.now()));\n }\n\n await bumpDataVersion();\n\n return json(\n { ok: true, ratingPasswordRequired: await ratingPasswordRequired() },\n 200,\n password\n ? {\n \"set-cookie\": clearCookie(RATING_COOKIE),\n }\n : {},\n );\n}\n\nasync function addRoute(req: Request) {\n const body = await readJson(req);\n const text = cleanQuoteText(String(body.text || \"\"));\n const name = String(body.name || \"\").trim();\n\n if (!text || !name) {\n return json({ error: \"Du behöver fylla i både citat och namn.\" }, 400);\n }\n\n await addQuote(text, name);\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function importRoute(req: Request) {\n const body = await readJson(req);\n const lines = String(body.text || \"\").split(String.fromCharCode(10)).map((\n line,\n ) => line.trim()).filter(Boolean);\n\n const failedLines: number[] = [];\n const parsedQuotes: Array<{ text: string; name: string }> = [];\n\n for (const [index, line] of lines.entries()) {\n const parsed = parseImportLine(line);\n if (parsed) parsedQuotes.push(parsed);\n else failedLines.push(index + 1);\n }\n\n if (parsedQuotes.length) {\n await addQuotesBulk(parsedQuotes);\n await bumpDataVersion();\n }\n\n const response: Record = {\n imported: parsedQuotes.length,\n failedLines,\n };\n\n if (body.returnQuotes !== false) Object.assign(response, await payload());\n\n return json(response);\n}\n\nasync function updateRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n const field = String(body.field || \"\").trim();\n const value = field === \"text\"\n ? cleanQuoteText(String(body.value || \"\"))\n : String(body.value || \"\").trim();\n\n if (!id) return json({ error: \"Citat-id saknas.\" }, 400);\n if (!value) return json({ error: \"Fältet får inte vara tomt.\" }, 400);\n if (field !== \"text\" && field !== \"name\") {\n return json({ error: \"Okänt fält.\" }, 400);\n }\n\n await sqlite.execute({\n sql: \"update quotes set \" + field + \" = :value where id = :id\",\n args: { value, id },\n });\n\n await bumpDataVersion();\n return json(await payload());\n}\n\nasync function deleteRoute(req: Request) {\n const body = await readJson(req);\n const id = String(body.id || \"\").trim();\n\n if (!id) return json({ error: \"Citat-id saknas.\" }, 400);\n\n await sqlite.execute({\n sql: \"delete from quote_ratings where quote_id = :id\",\n args: { id },\n });\n await sqlite.execute({\n sql: \"delete from quotes where id = :id\",\n args: { id },\n });\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function resetRatingsRoute() {\n await sqlite.execute(\"delete from quote_ratings\");\n await sqlite.execute(\"update quotes set rating_total = 0, rating_count = 0\");\n await setSetting(\"rating_version\", String(Date.now()));\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function clearRoute() {\n await sqlite.execute(\"delete from quote_ratings\");\n await sqlite.execute(\"delete from quotes\");\n await setSetting(\"rating_version\", String(Date.now()));\n await bumpDataVersion();\n\n return json(await payload());\n}\n\nasync function hashRatingPassword(password: string): Promise {\n return await signText(\"rating-password:\" + password);\n}\n\nasync function hashAdminPassword(password: string): Promise {\n return await signText(\"admin-password:\" + password);\n}\n\nfunction cleanName(name: string): string {\n return name.replaceAll(\"<\", \"\").replaceAll(\">\", \"\").trim().slice(0, 60);\n}\n\nfunction cleanQuoteText(text: string): string {\n let cleaned = String(text || \"\").trim();\n\n const quotePairs: Array<[string, string]> = [\n ['\"', '\"'],\n [\"'\", \"'\"],\n [\"“\", \"”\"],\n [\"”\", \"”\"],\n [\"„\", \"“\"],\n [\"«\", \"»\"],\n [\"»\", \"«\"],\n ];\n\n let changed = true;\n\n while (changed && cleaned.length >= 2) {\n changed = false;\n\n for (const [start, end] of quotePairs) {\n if (cleaned.startsWith(start) && cleaned.endsWith(end)) {\n cleaned = cleaned.slice(start.length, cleaned.length - end.length)\n .trim();\n changed = true;\n }\n }\n }\n\n return cleaned;\n}\n\nfunction cleanEmail(email: string): string {\n return email\n .replaceAll(\"<\", \"\")\n .replaceAll(\">\", \"\")\n .trim()\n .toLowerCase()\n .slice(0, 120);\n}\n\nfunction isValidEduLerumEmail(email: string): boolean {\n const match = email.match(/^([a-zåäö]{6})(\\d{2})(\\d{2})@edu\\.lerum\\.se$/i);\n\n if (!match) return false;\n\n const month = Number(match[2]);\n const day = Number(match[3]);\n\n if (month < 1 || month > 12) return false;\n if (day < 1 || day > 31) return false;\n\n return true;\n}\n\nasync function createAccessCookie(\n name: string,\n type: string,\n versionKey: string,\n maxAge: number,\n extra: Record = {},\n): Promise {\n const payloadData: Record = {\n ...extra,\n type,\n exp: Date.now() + maxAge * 1000,\n };\n\n if (versionKey) payloadData.version = await getSetting(versionKey, \"1\");\n\n const payload = base64UrlEncode(JSON.stringify(payloadData));\n const signature = await signText(payload);\n\n return buildCookie(name, payload + \".\" + signature, maxAge, true);\n}\n\nasync function verifyAccessCookie(\n req: Request,\n name: string,\n type: string,\n versionKey: string,\n): Promise {\n return Boolean(await readAccessCookie(req, name, type, versionKey));\n}\n\nasync function readAccessCookie(\n req: Request,\n name: string,\n type: string,\n versionKey: string,\n): Promise | null> {\n const token = getCookie(req, name);\n if (!token) return null;\n\n const parts = token.split(\".\");\n if (parts.length !== 2) return null;\n\n const [payload, signature] = parts;\n if (!safeEqual(signature, await signText(payload))) return null;\n\n try {\n const parsed = JSON.parse(base64UrlDecode(payload)) as\n & Record\n & {\n type?: string;\n version?: string;\n exp?: number;\n };\n\n if (parsed.type !== type) return null;\n if (Number(parsed.exp || 0) <= Date.now()) return null;\n if (\n versionKey &&\n String(parsed.version || \"\") !== await getSetting(versionKey, \"1\")\n ) return null;\n\n return parsed;\n } catch {\n return null;\n }\n}\n\nasync function getAddSubmitterName(req: Request): Promise {\n const parsed = await readAccessCookie(req, ADD_COOKIE, \"add\", \"\");\n const submitter = cleanEmail(String(parsed?.submitter || \"\"));\n\n if (!isValidEduLerumEmail(submitter)) return null;\n\n return submitter;\n}\n\nasync function getAddSubmitterDisplayName(\n req: Request,\n): Promise {\n const parsed = await readAccessCookie(req, ADD_COOKIE, \"add\", \"\");\n const displayName = cleanName(String(parsed?.displayName || \"\")).trim();\n const submitter = cleanEmail(String(parsed?.submitter || \"\"));\n\n if (!isValidEduLerumEmail(submitter)) return null;\n\n return displayName || submitter;\n}\n\nasync function signText(text: string): Promise {\n const secret = Deno.env.get(SECRET_ENV) || Deno.env.get(ADMIN_ENV) ||\n \"sommarcitat-fallback-secret\";\n\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n\n const signature = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(text),\n );\n return base64UrlEncodeBytes(new Uint8Array(signature));\n}\n\nfunction safeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n\n let result = 0;\n\n for (let i = 0; i < a.length; i += 1) {\n result |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n\n return result === 0;\n}\n\nfunction getOrCreateDevice(req: Request): { id: string; cookie?: string } {\n const existing = getCookie(req, DEVICE_COOKIE);\n if (existing && isSafeToken(existing)) return { id: existing };\n\n const id = crypto.randomUUID();\n return { id, cookie: buildCookie(DEVICE_COOKIE, id, 365 * DAY, true) };\n}\n\nfunction getOrCreateVoter(req: Request): { id: string; cookie?: string } {\n const existing = getCookie(req, VOTER_COOKIE);\n if (existing && isSafeToken(existing)) return { id: existing };\n\n const id = crypto.randomUUID();\n return { id, cookie: buildCookie(VOTER_COOKIE, id, 365 * DAY, true) };\n}\n\nfunction getOrCreateVisitor(req: Request): { id: string; cookie?: string } {\n const existing = getCookie(req, \"sommarcitat_visitor\");\n if (existing && isSafeToken(existing)) return { id: existing };\n\n const id = crypto.randomUUID();\n return {\n id,\n cookie: buildCookie(\"sommarcitat_visitor\", id, 365 * DAY, true),\n };\n}\n\nfunction isSafeToken(value: string): boolean {\n if (value.length < 10 || value.length > 80) return false;\n\n const allowed =\n \"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_-\";\n\n for (const char of value) {\n if (!allowed.includes(char)) return false;\n }\n\n return true;\n}\n\nfunction getCookie(req: Request, name: string): string | null {\n const prefix = name + \"=\";\n\n const found = (req.headers.get(\"cookie\") || \"\")\n .split(\";\")\n .map((part) => part.trim())\n .find((part) => part.startsWith(prefix));\n\n return found ? decodeURIComponent(found.slice(prefix.length)) : null;\n}\n\nfunction buildCookie(\n name: string,\n value: string,\n maxAge: number,\n httpOnly: boolean,\n): string {\n const parts = [\n name + \"=\" + encodeURIComponent(value),\n \"Path=/\",\n \"Max-Age=\" + maxAge,\n \"SameSite=Lax\",\n \"Secure\",\n ];\n\n if (httpOnly) parts.push(\"HttpOnly\");\n\n return parts.join(\"; \");\n}\n\nfunction clearCookie(name: string): string {\n return name + \"=; Path=/; Max-Age=0; SameSite=Lax; Secure; HttpOnly\";\n}\n\nfunction base64UrlEncode(text: string): string {\n return base64UrlEncodeBytes(new TextEncoder().encode(text));\n}\n\nfunction base64UrlEncodeBytes(bytes: Uint8Array): string {\n let binary = \"\";\n\n for (const byte of bytes) binary += String.fromCharCode(byte);\n\n return btoa(binary).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replaceAll(\n \"=\",\n \"\",\n );\n}\n\nfunction base64UrlDecode(text: string): string {\n const normalized = text.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\");\n return atob(normalized + \"=\".repeat((4 - normalized.length % 4) % 4));\n}\n\nasync function readJson(req: Request): Promise> {\n try {\n return await req.json();\n } catch {\n return {};\n }\n}\n\nfunction json(\n data: unknown,\n status = 200,\n extraHeaders: ExtraHeaders = {},\n): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: securityHeaders(\"application/json; charset=utf-8\", extraHeaders),\n });\n}\n\nfunction html(): Response {\n const nonce = createNonce();\n\n const page = APP_HTML\n .replace(\n '',\n ``,\n )\n .replace(\n '',\n ``,\n );\n\n return new Response(page, {\n headers: securityHeaders(\"text/html; charset=utf-8\", {}, false, nonce),\n });\n}\n\nfunction css(): Response {\n return new Response(STYLE_CSS, {\n headers: securityHeaders(\"text/css; charset=utf-8\", {}, true),\n });\n}\n\nfunction js(): Response {\n return new Response(CLIENT_JS, {\n headers: securityHeaders(\"application/javascript; charset=utf-8\", {}, true),\n });\n}\n\nfunction createNonce(): string {\n const bytes = new Uint8Array(16);\n crypto.getRandomValues(bytes);\n\n return base64UrlEncodeBytes(bytes);\n}\n\nfunction securityHeaders(\n contentType: string,\n extraHeaders: ExtraHeaders = {},\n allowCache = false,\n nonce = \"\",\n): Headers {\n const headers = new Headers();\n\n headers.set(\"content-type\", contentType);\n headers.set(\"x-content-type-options\", \"nosniff\");\n headers.set(\"referrer-policy\", \"no-referrer\");\n headers.set(\n \"permissions-policy\",\n \"camera=(), microphone=(), geolocation=(), payment=(), usb=(), fullscreen=(self)\",\n );\n headers.set(\"cross-origin-opener-policy\", \"same-origin\");\n headers.set(\"cross-origin-resource-policy\", \"same-origin\");\n headers.set(\"cache-control\", allowCache ? \"public, max-age=60\" : \"no-store\");\n\n headers.set(\n \"content-security-policy\",\n nonce\n ? `default-src 'self'; script-src 'self' 'nonce-${nonce}'; style-src 'self' 'nonce-${nonce}'; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'`\n : \"default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'\",\n );\n\n for (const [key, value] of Object.entries(extraHeaders)) {\n if (Array.isArray(value)) {\n value.forEach((item) => headers.append(key, item));\n } else headers.append(key, value);\n }\n\n return headers;\n}","citatchattenhemlig",[146],"53792120-599b-11f1-b91a-ee650bb23af1","client.ts","ac1df5d2-55ac-11f1-b2d4-ee650bb23af1",["D",1779865908030],37,"// client.ts\n// Frontend-JavaScript för Sommarcitat.\n// Servera den här som /app.js från main/server-filen:\n// import { CLIENT_JS } from \"./client.ts\";\n// if (path === \"/app.js\") return new Response(CLIENT_JS, { headers: { \"content-type\": \"application/javascript; charset=utf-8\" } });\n\nexport const CLIENT_JS = String.raw`\nvar quotesCache = [];\nvar pendingCache = [];\nvar loginDevicesCache = [];\nvar loginLoginsCache = [];\nvar loginDevicesSearchTerm = \"\";\nvar quoteNotifications = [];\nvar starSvgCounter = 0;\nvar onlineCache = { onlineCount: 0, visitors: [] };\nvar voteOrderIds = null;\nvar serverRatedMap = {};\nvar ratingVersion = \"1\";\nvar dataVersion = \"1\";\nvar autoRefreshTimer = null;\nvar presenceTimer = null;\nvar isAutoRefreshing = false;\nvar isPresenceLoading = false;\nvar isLoading = false;\nvar voteVisibleCount = 60;\nvar adminVisibleCount = 80;\nvar VOTE_PAGE_SIZE = 60;\nvar ADMIN_PAGE_SIZE = 80;\nvar adminSearchTerm = \"\";\nvar adminUnlocked = false;\nvar ratingPasswordRequired = true;\nvar ratingAccessOk = false;\nvar addAccessOk = false;\nvar nameLoginRequired = false;\nvar maintenanceEnabled = false;\nvar maintenanceMessage = \"Sidan är tillfälligt pausad för underhåll.\";\nvar visitorEmail = \"\";\nvar visitorName = \"\";\nvar quickSearchTerm = \"\";\nvar RATED_KEY_BASE = \"sommarcitat_rated_map\";\nvar BASE_PATH = window.location.pathname.replace(/\\/$/, \"\");\n\nfunction apiUrl(path) {\n if (!BASE_PATH || BASE_PATH.indexOf(\"/api/\") >= 0) return path;\n return BASE_PATH + path;\n}\n\nfunction readableErrorMessage(value) {\n if (!value) return \"Något gick fel.\";\n if (typeof value === \"string\") return value;\n if (value.message && typeof value.message === \"string\") return value.message;\n if (value.error && typeof value.error === \"string\") return value.error;\n\n try {\n return JSON.stringify(value);\n } catch (error) {\n return \"Något gick fel.\";\n }\n}\n\nasync function api(path, options) {\n options = options || {};\n var headers = options.headers || {};\n headers[\"content-type\"] = \"application/json\";\n\n var response = await fetch(apiUrl(path), Object.assign({}, options, {\n headers: headers,\n credentials: \"include\",\n }));\n\n var data = await response.json().catch(function () {\n return {};\n });\n\n if (!response.ok) {\n var error = new Error(readableErrorMessage(data.error || data.message || data));\n error.status = response.status;\n error.needsName = Boolean(data.needsName);\n error.blocked = Boolean(data.blocked);\n error.maintenance = Boolean(data.maintenance);\n error.data = data;\n throw error;\n }\n\n return data;\n}\n\nasync function loadQuotes() {\n try {\n var data = await api(\"/api/quotes\");\n\n nameLoginRequired = false;\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || \"1\");\n serverRatedMap = data.ratedMap || {};\n\n var mergedRatedMap = getRatedMap();\n\n Object.keys(serverRatedMap).forEach(function (id) {\n mergedRatedMap[id] = serverRatedMap[id];\n });\n\n saveRatedMap(mergedRatedMap);\n dataVersion = String(data.dataVersion || dataVersion || \"1\");\n ratingPasswordRequired = Boolean(data.ratingPasswordRequired);\n maintenanceEnabled = Boolean(data.maintenanceEnabled);\n maintenanceMessage = data.maintenanceMessage || maintenanceMessage;\n\n return quotesCache;\n } catch (error) {\n if (error && error.needsName) {\n nameLoginRequired = true;\n quotesCache = [];\n return quotesCache;\n }\n\n if (error && error.maintenance) {\n maintenanceEnabled = true;\n maintenanceMessage = error.data && error.data.message ? error.data.message : maintenanceMessage;\n quotesCache = [];\n return quotesCache;\n }\n\n if (error && error.blocked) {\n handleBlockedAccess(error.message);\n return quotesCache;\n }\n\n throw error;\n }\n}\n\nasync function loadPending() {\n if (!adminUnlocked || nameLoginRequired) return;\n\n try {\n var data = await api(\"/api/admin/pending\", { method: \"GET\" });\n pendingCache = data.pendingQuotes || [];\n } catch (error) {\n pendingCache = [];\n }\n}\n\nasync function loadLoginDevices() {\n if (!adminUnlocked || nameLoginRequired) return;\n\n try {\n var data = await api(\"/api/admin/login-devices\", { method: \"GET\" });\n loginDevicesCache = data.devices || [];\n loginLoginsCache = data.logins || groupLoginDevices(loginDevicesCache);\n } catch (error) {\n loginDevicesCache = [];\n loginLoginsCache = [];\n }\n}\n\nasync function loadPresence() {\n if (!adminUnlocked || isPresenceLoading || nameLoginRequired) return;\n isPresenceLoading = true;\n\n try {\n var data = await api(\"/api/admin/presence\", { method: \"GET\" });\n onlineCache = {\n onlineCount: Number(data.onlineCount || 0),\n visitors: data.visitors || [],\n };\n } catch (error) {\n onlineCache = { onlineCount: 0, visitors: [] };\n } finally {\n isPresenceLoading = false;\n }\n}\n\nasync function sendPresenceHeartbeat() {\n try {\n await api(\"/api/presence/heartbeat\", {\n method: \"POST\",\n body: JSON.stringify({ page: currentPageLabel() }),\n });\n } catch (error) {\n // Tyst. Online-räkningen ska inte störa vanliga besökare.\n }\n}\n\nfunction currentPageLabel() {\n var pageName = (location.hash || \"#home\").replace(\"#\", \"\");\n var labels = {\n home: \"Start\",\n vote: \"Citat\",\n add: \"Lägg till\",\n top: \"Topplista\",\n admin: \"Admin\",\n login: \"Logga in\",\n };\n return labels[pageName] || pageName || \"Start\";\n}\n\nasync function checkMaintenanceStatus() {\n try {\n var data = await api(\"/api/maintenance/status\", { method: \"GET\" });\n maintenanceEnabled = Boolean(data.enabled) && !Boolean(data.admin);\n maintenanceMessage = data.message || maintenanceMessage;\n } catch (error) {\n // Tyst. Om status inte kan hämtas låter vi sidan fortsätta.\n }\n}\n\nasync function checkAdminSession() {\n try {\n var data = await api(\"/api/admin/session\", { method: \"GET\" });\n\n if (data.ok) {\n adminUnlocked = true;\n return;\n }\n\n adminUnlocked = false;\n } catch (error) {\n // Behåll nuvarande adminläge vid tillfälligt nät/server-glapp.\n }\n}\n\nasync function checkRatingAccess() {\n try {\n var data = await api(\"/api/rating-access/session\", { method: \"GET\" });\n ratingPasswordRequired = Boolean(data.required);\n ratingAccessOk = Boolean(data.ok);\n } catch (error) {\n ratingAccessOk = false;\n }\n}\n\nasync function checkAddAccess() {\n try {\n var data = await api(\"/api/add-access/session\", { method: \"GET\" });\n\n if (data.ok) {\n addAccessOk = true;\n visitorEmail = data.email || \"\";\n visitorName = data.name || data.email || \"\";\n nameLoginRequired = false;\n return;\n }\n\n addAccessOk = false;\n visitorEmail = \"\";\n visitorName = \"\";\n nameLoginRequired = true;\n } catch (error) {\n // Behåll nuvarande loginläge vid tillfälligt nät/server-glapp.\n }\n}\n\nfunction ratedKey() {\n return RATED_KEY_BASE + \"_\" + ratingVersion;\n}\n\nfunction getRatedMap() {\n var localMap = {};\n\n try {\n localMap = JSON.parse(localStorage.getItem(ratedKey()) || \"{}\");\n } catch (error) {\n localMap = {};\n }\n\n Object.keys(serverRatedMap || {}).forEach(function (id) {\n localMap[id] = serverRatedMap[id];\n });\n\n return localMap;\n}\n\nfunction saveRatedMap(map) {\n localStorage.setItem(ratedKey(), JSON.stringify(map));\n}\n\nfunction removeRatedId(id) {\n var ratedMap = getRatedMap();\n delete ratedMap[id];\n saveRatedMap(ratedMap);\n}\n\nfunction averageRating(quote) {\n var count = Number(quote.rating_count || 0);\n return count ? Number(quote.rating_total || 0) / count : 0;\n}\n\nfunction fairScore(quote) {\n var total = Number(quote.rating_total || 0);\n var count = Number(quote.rating_count || 0);\n\n // Rättvis score:\n // - börjar runt normalnivå så en ensam femma inte vinner direkt\n // - rör sig ändå tydligt uppåt när många ger höga betyg\n // - visas som 0-100 poäng för att kännas tydligare än 3.6 av 5\n var priorAverage = 3.2;\n var priorVotes = 5;\n var weightedAverage = (total + priorAverage * priorVotes) / (count + priorVotes);\n var confidenceBonus = Math.min(8, Math.log2(count + 1) * 2.2);\n\n return Math.max(0, Math.min(100, weightedAverage * 20 + confidenceBonus));\n}\n\nfunction totalPoints(quote) {\n return Number(quote.rating_total || 0);\n}\n\nfunction averageQuoteLength(quotes) {\n var list = [].concat(quotes || []).filter(function (quote) {\n return String(quote.text || \"\").trim().length > 0;\n });\n\n if (!list.length) return 0;\n\n var total = list.reduce(function (sum, quote) {\n return sum + String(quote.text || \"\").length;\n }, 0);\n\n return total / list.length;\n}\n\nfunction quoteLengthScore(quote, averageLength) {\n return Math.abs(String(quote.text || \"\").length - averageLength);\n}\n\nfunction sortQuotes(quotes) {\n var list = [].concat(quotes || []);\n var avgLength = averageQuoteLength(list);\n\n return list.sort(function (a, b) {\n var scoreDiff = fairScore(b) - fairScore(a);\n if (scoreDiff !== 0) return scoreDiff;\n\n var pointsDiff = totalPoints(b) - totalPoints(a);\n if (pointsDiff !== 0) return pointsDiff;\n\n var ratingDiff = averageRating(b) - averageRating(a);\n if (ratingDiff !== 0) return ratingDiff;\n\n var countDiff = Number(b.rating_count || 0) - Number(a.rating_count || 0);\n if (countDiff !== 0) return countDiff;\n\n var lengthDiff = quoteLengthScore(a, avgLength) - quoteLengthScore(b, avgLength);\n if (lengthDiff !== 0) return lengthDiff;\n\n return String(a.text).localeCompare(String(b.text), \"sv\");\n });\n}\n\nfunction getVoteOrderedQuotes() {\n if (!voteOrderIds) {\n voteOrderIds = sortQuotes(quotesCache).map(function (quote) {\n return quote.id;\n });\n }\n\n var byId = {};\n var seen = {};\n var output = [];\n\n quotesCache.forEach(function (quote) {\n byId[quote.id] = quote;\n });\n\n voteOrderIds.forEach(function (id) {\n if (byId[id]) {\n output.push(byId[id]);\n seen[id] = true;\n }\n });\n\n sortQuotes(quotesCache).forEach(function (quote) {\n if (!seen[quote.id]) output.push(quote);\n });\n\n return output;\n}\n\nfunction getSearchTerms() {\n var personInput = document.getElementById(\"personSearch\");\n var quoteInput = document.getElementById(\"quoteSearch\");\n\n return {\n person: personInput ? personInput.value.trim().toLowerCase() : \"\",\n quote: quoteInput ? quoteInput.value.trim().toLowerCase() : \"\",\n quick: quickSearchTerm.trim().toLowerCase(),\n };\n}\n\nfunction filterQuotes(quotes) {\n var terms = getSearchTerms();\n\n return [].concat(quotes || []).filter(function (quote) {\n var name = String(quote.name || \"\").toLowerCase();\n var text = String(quote.text || \"\").toLowerCase();\n\n return (!terms.quick || name.includes(terms.quick) || text.includes(terms.quick)) &&\n (!terms.person || name.includes(terms.person)) &&\n (!terms.quote || text.includes(terms.quote));\n });\n}\n\nfunction showPage() {\n var pageName = (location.hash || \"#home\").replace(\"#\", \"\");\n\n if (pageName === \"vote\") {\n voteOrderIds = null;\n }\n\n if (maintenanceEnabled && !adminUnlocked && pageName !== \"admin\") {\n pageName = \"maintenance\";\n if (location.hash !== \"#maintenance\") location.hash = \"#maintenance\";\n }\n\n if (nameLoginRequired && (pageName === \"vote\" || pageName === \"add\" || pageName === \"top\")) {\n pageName = \"login\";\n if (location.hash !== \"#login\") location.hash = \"#login\";\n }\n\n document.querySelectorAll(\".page\").forEach(function (page) {\n page.classList.remove(\"active\");\n });\n\n var page = document.getElementById(pageName) || document.getElementById(\"home\");\n page.classList.add(\"active\");\n sendPresenceHeartbeat();\n rerenderFromCache();\n}\n\nasync function boot() {\n if (isLoading) return;\n isLoading = true;\n\n try {\n await checkAddAccess();\n await checkMaintenanceStatus();\n await loadQuotes();\n\n if (!nameLoginRequired) {\n await checkRatingAccess();\n await checkAdminSession();\n await loadPending();\n await sendPresenceHeartbeat();\n await loadPresence();\n await loadQuoteNotifications();\n }\n\n showPage();\n showQuoteNotifications();\n startAutoRefresh();\n startPresenceRefresh();\n } catch (error) {\n document.getElementById(\"featuredQuote\").textContent = \"Kunde inte ladda citaten.\";\n document.getElementById(\"featuredAuthor\").textContent = error.message;\n document.getElementById(\"featuredRating\").textContent = \"Försök uppdatera sidan\";\n } finally {\n isLoading = false;\n }\n}\n\nasync function refreshAll() {\n await loadQuotes();\n\n if (!nameLoginRequired) {\n await sendPresenceHeartbeat();\n\n if (adminUnlocked) {\n await loadPending();\n await loadLoginDevices();\n await loadPresence();\n }\n }\n\n rerenderFromCache();\n}\n\nfunction startAutoRefresh() {\n if (autoRefreshTimer) return;\n autoRefreshTimer = setInterval(checkForUpdates, 30000);\n}\n\nfunction startPresenceRefresh() {\n if (presenceTimer) return;\n\n var lastHeartbeat = 0;\n var lastAdminPresenceLoad = 0;\n\n presenceTimer = setInterval(async function () {\n if (document.hidden || nameLoginRequired) return;\n\n var now = Date.now();\n\n // Viktigt när många är inne samtidigt:\n // annars skriver alla till databasen för ofta och sidan kan börja glappa.\n if (now - lastHeartbeat > 25000) {\n lastHeartbeat = now;\n await sendPresenceHeartbeat();\n }\n\n // Admin behöver fortfarande kunna se folk online, men vi laddar inte databasen varje sekund.\n if (adminUnlocked) {\n if (now - lastAdminPresenceLoad > 8000) {\n lastAdminPresenceLoad = now;\n await loadPresence();\n }\n\n renderOnlineList();\n }\n }, 5000);\n}\n\nasync function checkForUpdates() {\n if (isAutoRefreshing || document.hidden) return;\n isAutoRefreshing = true;\n\n try {\n await checkMaintenanceStatus();\n\n if (maintenanceEnabled && !adminUnlocked) {\n rerenderFromCache();\n return;\n }\n\n if (nameLoginRequired) return;\n\n var version = await api(\"/api/version\", { method: \"GET\" });\n var nextDataVersion = String(version.dataVersion || \"1\");\n\n if (nextDataVersion !== dataVersion) {\n await loadQuotes();\n\n if (nameLoginRequired) {\n rerenderFromCache();\n return;\n }\n\n // När många röstar samtidigt ska vi inte kontrollera login/session i onödan.\n // Det räcker att citaten laddas om. Login kollas vid start, login, logout och vid riktiga 401-fel.\n if (adminUnlocked) {\n await loadPending();\n await loadPresence();\n }\n\n // Om man är inne på Citat-sidan ska listan inte hoppa runt medan andra röstar.\n var activePage = (location.hash || \"#home\").replace(\"#\", \"\");\n if (activePage !== \"vote\") rerenderFromCache();\n }\n } catch (error) {\n if (error && error.needsName) {\n await checkAddAccess();\n\n // Bara logga ut visuellt om session-checken verkligen säger nej.\n // Vid serverglapp behåller checkAddAccess nu befintligt läge.\n if (!addAccessOk && !visitorEmail) {\n nameLoginRequired = true;\n visitorEmail = \"\";\n visitorName = \"\";\n rerenderFromCache();\n }\n\n return;\n }\n\n if (error && error.blocked) {\n handleBlockedAccess(error.message);\n return;\n }\n\n if (error && error.maintenance) {\n maintenanceEnabled = true;\n maintenanceMessage = error.data && error.data.message ? error.data.message : maintenanceMessage;\n rerenderFromCache();\n return;\n }\n\n // Tyst auto-refresh. Sidan ska inte störa användaren om nätet hackar.\n } finally {\n isAutoRefreshing = false;\n }\n}\n\nfunction renderAuthHeader() {\n var status = document.getElementById(\"userStatus\");\n var button = document.getElementById(\"siteAuthButton\");\n\n if (status) {\n status.textContent = visitorName ? \"Inloggad: \" + visitorName : \"Inte inloggad\";\n }\n\n if (button) {\n button.textContent = visitorEmail ? \"Logga ut\" : \"Logga in\";\n }\n}\n\nfunction renderMaintenance() {\n var message = document.getElementById(\"maintenanceMessage\");\n if (message) message.textContent = maintenanceMessage || \"Sidan är tillfälligt pausad för underhåll.\";\n\n var toggle = document.getElementById(\"maintenanceToggle\");\n var input = document.getElementById(\"maintenanceMessageInput\");\n\n if (toggle) toggle.checked = Boolean(maintenanceEnabled);\n if (input && !input.value) input.value = maintenanceMessage || \"Sidan är tillfälligt pausad för underhåll.\";\n}\n\nfunction activePageName() {\n return (location.hash || \"#home\").replace(\"#\", \"\") || \"home\";\n}\n\nfunction rerenderFromCache() {\n renderAuthHeader();\n renderMaintenance();\n\n var pageName = activePageName();\n\n if (pageName === \"home\" || pageName === \"maintenance\" || pageName === \"login\") {\n renderHome();\n renderPodiums();\n return;\n }\n\n if (pageName === \"vote\") {\n renderVoteList();\n return;\n }\n\n if (pageName === \"add\") {\n renderAddPage();\n return;\n }\n\n if (pageName === \"top\") {\n renderPodiums();\n renderTopList();\n return;\n }\n\n if (pageName === \"admin\") {\n renderAdmin();\n return;\n }\n\n renderHome();\n}\n\nfunction renderHome() {\n if (nameLoginRequired) {\n var quotesStat = document.getElementById(\"statQuotes\");\n var ratingsStat = document.getElementById(\"statRatings\");\n var leadersStat = document.getElementById(\"statLeaders\");\n var featuredQuote = document.getElementById(\"featuredQuote\");\n var featuredAuthor = document.getElementById(\"featuredAuthor\");\n var featuredRating = document.getElementById(\"featuredRating\");\n\n if (quotesStat) quotesStat.textContent = \"0\";\n if (ratingsStat) ratingsStat.textContent = \"0\";\n if (leadersStat) leadersStat.textContent = \"0\";\n\n if (featuredQuote) featuredQuote.textContent = \"Logga in för att se citaten.\";\n if (featuredAuthor) {\n featuredAuthor.innerHTML = '';\n }\n if (featuredRating) featuredRating.textContent = \"\";\n\n return;\n }\n\n var sorted = sortQuotes(quotesCache);\n var best = sorted[0];\n var totalRatings = quotesCache.reduce(function (sum, quote) {\n return sum + Number(quote.rating_total || 0);\n }, 0);\n\n document.getElementById(\"statQuotes\").textContent = quotesCache.length;\n document.getElementById(\"statRatings\").textContent = totalRatings;\n document.getElementById(\"statLeaders\").textContent = Math.min(3, quotesCache.length);\n\n if (best) {\n document.getElementById(\"featuredQuote\").textContent = \"“\" + best.text + \"”\";\n document.getElementById(\"featuredAuthor\").textContent = \"👑 Förstaplats · sagt av \" + best.name;\n document.getElementById(\"featuredRating\").textContent = ratingLabel(best);\n } else {\n document.getElementById(\"featuredQuote\").textContent = \"Här kommer vinnarcitatet synas.\";\n document.getElementById(\"featuredAuthor\").textContent = \"Lägg till första citatet\";\n document.getElementById(\"featuredRating\").textContent = \"Inga poäng ännu\";\n }\n}\n\nfunction renderPodiums() {\n if (nameLoginRequired) {\n var locked = '

Logga in för att se prispallen.

';\n if (document.getElementById(\"homePodium\")) document.getElementById(\"homePodium\").innerHTML = locked;\n if (document.getElementById(\"podium\")) document.getElementById(\"podium\").innerHTML = locked;\n return;\n }\n\n var sorted = sortQuotes(quotesCache);\n document.getElementById(\"homePodium\").innerHTML = buildPodiumHtml(sorted);\n document.getElementById(\"podium\").innerHTML = buildPodiumHtml(sorted);\n}\n\nfunction buildPodiumHtml(sorted) {\n var podiumData = [sorted[1], sorted[0], sorted[2]];\n var podiumClasses = [\"second\", \"first\", \"third\"];\n var labels = [\"ANDRA PLATS\", \"FÖRSTA PLATS\", \"TREDJE PLATS\"];\n var numbers = [2, 1, 3];\n\n if (!sorted.length) {\n return '

Ingen prispall ännu. Lägg till citat i Admin.

';\n }\n\n return podiumData.map(function (quote, index) {\n if (!quote) {\n return '

' +\n '

' + numbers[index] + '

' +\n '

' + labels[index] + '

' +\n '

Tom plats

' +\n '

Behöver fler citat

' +\n '

';\n }\n\n var ribbon = index === 1 ? '

VINNAREN JUST NU

' : '';\n\n return '

' +\n ribbon +\n '

' +\n '

' + numbers[index] + '

' +\n '

' + labels[index] + '

' +\n '

“' + escapeHtml(quote.text) + '”

' +\n '

' + starText(averageRating(quote)) + '

' +\n '

' + escapeHtml(quote.name) + ' · ' + ratingLabel(quote) + ' · ' + ratingCountLabel(quote) + '

' +\n '

';\n }).join(\"\");\n}\n\nfunction renderVoteList() {\n var container = document.getElementById(\"voteList\");\n\n if (nameLoginRequired) {\n if (container) {\n container.innerHTML = '

Logga in för att betygsätta citaten.

';\n }\n return;\n }\n\n var gate = document.getElementById(\"ratingGate\");\n var searchPanel = document.getElementById(\"voteSearchPanel\");\n\n if (ratingPasswordRequired && !ratingAccessOk) {\n gate.classList.remove(\"hidden\");\n searchPanel.classList.add(\"hidden\");\n container.innerHTML = \"\";\n return;\n }\n\n gate.classList.add(\"hidden\");\n searchPanel.classList.remove(\"hidden\");\n\n var allSorted = getVoteOrderedQuotes();\n var quotes = filterQuotes(allSorted);\n var visibleQuotes = quotes.slice(0, voteVisibleCount);\n var ratedMap = getRatedMap();\n var searchText = document.getElementById(\"searchResultText\");\n\n if (searchText) {\n var activeQuickText = quickSearchTerm ? ' Snabbsökning: ”' + quickSearchTerm + '”.' : \"\";\n var baseText = quotes.length === allSorted.length\n ? \"Visar \" + Math.min(visibleQuotes.length, quotes.length) + \" av \" + allSorted.length + \" citat. Sorterat på poäng.\" + activeQuickText\n : \"Visar \" + Math.min(visibleQuotes.length, quotes.length) + \" av \" + quotes.length + \" träffar. Sorterat på poäng.\" + activeQuickText;\n\n searchText.textContent = baseText + (quotes.length > visibleQuotes.length ? \" Tryck på Visa fler för att ladda fler.\" : \"\");\n }\n\n if (!allSorted.length) {\n container.innerHTML = '

Det finns inga citat ännu. Gå till Admin och lägg till första citatet.

';\n return;\n }\n\n if (!quotes.length) {\n container.innerHTML = '

Inga citat matchade din sökning.

';\n return;\n }\n\n var cardsHtml = visibleQuotes.map(function (quote) {\n var givenRating = Number(ratedMap[quote.id] || 0);\n\n return '

' +\n '

“' + escapeHtml(quote.text) + '”

' +\n '

' +\n '' + escapeHtml(quote.name) + '' +\n '

' + ratingLabel(quote) + '' + ratingCountLabel(quote) + '

' +\n '

' + starText(averageRating(quote)) + '

' +\n buildRatingButtons(quote.id, givenRating) +\n '

';\n }).join(\"\");\n\n if (quotes.length > visibleQuotes.length) {\n cardsHtml += '

' +\n '

Visar ' + visibleQuotes.length + ' av ' + quotes.length + ' citat.

' +\n '' +\n '

';\n }\n\n container.innerHTML = cardsHtml;\n}\n\nfunction buildRatingButtons(id, givenRating) {\n var html = '

Tryck på ett betyg:

';\n\n for (var i = 1; i <= 5; i += 1) {\n var selected = givenRating && i <= givenRating;\n\n html += '';\n }\n\n html += '

' + (givenRating ? 'Du gav ' + givenRating + ' av 5 stjärnor.' : 'Välj 1-5 stjärnor.') + '

';\n return html;\n}\n\nfunction renderAddPage() {\n var gate = document.getElementById(\"addGate\");\n var panel = document.getElementById(\"publicAddPanel\");\n if (!gate || !panel) return;\n\n if (nameLoginRequired || !addAccessOk) {\n gate.classList.remove(\"hidden\");\n panel.classList.add(\"hidden\");\n gate.innerHTML =\n '

Logga in först

' +\n '

För att skriva citat behöver du logga in först.

' +\n '';\n return;\n }\n\n gate.classList.add(\"hidden\");\n panel.classList.remove(\"hidden\");\n}\n\nfunction renderPending() {\n var list = document.getElementById(\"pendingList\");\n if (!list) return;\n\n if (!pendingCache.length) {\n list.innerHTML = '

Inga citat väntar på godkännande.

';\n return;\n }\n\n list.innerHTML = pendingCache.map(function (item) {\n return '

' +\n '

' +\n '“' + escapeHtml(item.text) + '”' +\n '

Sagt av ' + escapeHtml(item.name) + '

' +\n '

Inskickat av ' + escapeHtml(item.submitted_by || 'Okänd') + ' · väntar på admin-godkännande

' +\n '

' +\n '' +\n '' +\n '

' +\n '

';\n }).join(\"\");\n}\n\nfunction renderOnlineList() {\n var countElement = document.getElementById(\"onlineCount\");\n var listElement = document.getElementById(\"onlineList\");\n if (!countElement || !listElement) return;\n\n var visitors = onlineCache.visitors || [];\n countElement.textContent = String(onlineCache.onlineCount || visitors.length || 0);\n\n if (!visitors.length) {\n listElement.innerHTML = '

Ingen online-data ännu.

';\n return;\n }\n\n listElement.innerHTML = visitors.map(function (visitor) {\n var name = visitor.display_name || \"Unknown\";\n var page = visitor.page || \"Okänd sida\";\n var seenText = timeAgo(visitor.last_seen);\n var isUnknown = name === \"Unknown\";\n\n return '

' +\n '

' + escapeHtml(name.slice(0, 1).toUpperCase()) + '

' +\n '

' +\n '' + escapeHtml(name) + '' +\n '

' + escapeHtml(page) + ' · ' + escapeHtml(seenText) + '

' +\n '

' +\n '' +\n '

';\n }).join(\"\");\n}\n\n\nfunction groupLoginDevices(devices) {\n var map = {};\n\n (devices || []).forEach(function (device) {\n var email = String(device.email || \"\");\n if (!email) return;\n\n if (!map[email]) {\n map[email] = {\n email: email,\n display_name: device.display_name || email,\n first_seen: device.first_seen || \"\",\n last_seen: device.last_seen || \"\",\n total_login_count: 0,\n device_count: 0,\n blocked_count: 0,\n devices: [],\n };\n }\n\n map[email].devices.push(device);\n map[email].total_login_count += Number(device.login_count || 0);\n map[email].device_count = map[email].devices.length;\n\n if (Number(device.blocked || 0) === 1 || device.blocked === true) {\n map[email].blocked_count += 1;\n }\n\n if (!map[email].last_seen || String(device.last_seen || \"\") > map[email].last_seen) {\n map[email].last_seen = device.last_seen || \"\";\n }\n\n if (!map[email].first_seen || String(device.first_seen || \"\") < map[email].first_seen) {\n map[email].first_seen = device.first_seen || \"\";\n }\n });\n\n return Object.keys(map).map(function (email) {\n return map[email];\n }).sort(function (a, b) {\n return String(b.last_seen || \"\").localeCompare(String(a.last_seen || \"\"));\n });\n}\n\nfunction renderLoginDevices() {\n var list = document.getElementById(\"loginDevicesList\");\n var searchInput = document.getElementById(\"loginDevicesSearchInput\");\n var searchText = document.getElementById(\"loginDevicesSearchText\");\n\n if (!list) return;\n\n var term = (searchInput ? searchInput.value : loginDevicesSearchTerm).trim().toLowerCase();\n loginDevicesSearchTerm = term;\n\n var logins = loginLoginsCache.length ? loginLoginsCache : groupLoginDevices(loginDevicesCache);\n\n var filtered = logins.filter(function (login) {\n if (!term) return true;\n\n var text = [\n login.display_name,\n login.email,\n login.last_seen,\n login.first_seen,\n (login.devices || []).map(function (device) {\n return [\n device.device_id,\n device.user_agent,\n device.reason,\n ].join(\" \");\n }).join(\" \"),\n ].join(\" \").toLowerCase();\n\n return text.includes(term);\n });\n\n if (searchText) {\n searchText.textContent = term\n ? \"Visar \" + filtered.length + \" av \" + logins.length + \" inloggade mejlar.\"\n : \"Visar \" + logins.length + \" inloggade mejlar.\";\n }\n\n if (!logins.length) {\n list.innerHTML = '

Inga inloggningar ännu.

';\n return;\n }\n\n if (!filtered.length) {\n list.innerHTML = '

Inga inloggningar matchade din sökning.

';\n return;\n }\n\n list.innerHTML = filtered.map(function (login) {\n var devices = login.devices || [];\n var blockedCount = Number(login.blocked_count || 0);\n var allBlocked = devices.length > 0 && blockedCount === devices.length;\n var statusText = allBlocked ? \"Alla enheter blockerade\" : blockedCount ? blockedCount + \" blockerad(e)\" : \"Tillåten\";\n var statusClass = allBlocked ? \"blocked\" : blockedCount ? \"mixed\" : \"allowed\";\n\n var deviceHtml = devices.map(function (device, index) {\n var blocked = Number(device.blocked || 0) === 1 || device.blocked === true;\n var deviceId = String(device.device_id || \"\");\n var shortDevice = deviceId ? deviceId.slice(0, 8) + \"...\" + deviceId.slice(-6) : \"Okänd\";\n var userAgent = String(device.user_agent || \"Okänd enhet\");\n var lastSeen = device.last_seen ? timeAgo(device.last_seen) : \"okänt\";\n\n return '

' +\n '

Enhet ' + (index + 1) + ' · ' + escapeHtml(shortDevice) + '

' +\n '

' +\n 'Senast: ' + escapeHtml(lastSeen) + '' +\n 'Inloggningar: ' + Number(device.login_count || 0) + '' +\n (blocked ? 'Blockerad' : 'Tillåten') +\n '

' +\n '

' + escapeHtml(userAgent) + '

' +\n (blocked && device.reason ? '

' + escapeHtml(device.reason) + '

' : '') +\n '

' +\n '

' +\n (blocked\n ? ''\n : '') +\n '

' +\n '

';\n }).join(\"\");\n\n return '

' +\n '

' +\n '' +\n '' +\n '

' +\n '

' + deviceHtml + '

' +\n '

';\n }).join(\"\");\n}\n\n\nfunction renderTopList() {\n var topList = document.getElementById(\"topList\");\n\n if (nameLoginRequired) {\n if (topList) topList.innerHTML = '

Logga in för att se topplistan.

';\n return;\n }\n\n var sorted = sortQuotes(quotesCache);\n\n if (!sorted.length) {\n topList.innerHTML = '

Inga citat i topplistan ännu.

';\n return;\n }\n\n var listQuotes = sorted.slice(3, 10);\n\n if (!listQuotes.length) {\n topList.innerHTML = '

När det finns fler än tre citat visas plats 4 till 10 här.

';\n return;\n }\n\n topList.innerHTML = listQuotes.map(function (quote, index) {\n var place = index + 4;\n\n return '

' +\n '

' + place + '

' +\n '

' +\n '“' + escapeHtml(quote.text) + '”' +\n '

' + escapeHtml(quote.name) + '

' +\n '

' + starText(averageRating(quote)) + '

' +\n '

' + ratingLabel(quote) + '' + ratingCountLabel(quote) + '

' +\n '

';\n }).join(\"\");\n}\n\nfunction renderAdmin() {\n var loginPanel = document.getElementById(\"loginPanel\");\n var adminPanel = document.getElementById(\"adminPanel\");\n var adminTemplate = document.getElementById(\"adminPanelTemplate\");\n\n document.body.classList.toggle(\"admin-unlocked\", Boolean(adminUnlocked));\n\n if (!loginPanel || !adminPanel) return;\n\n if (!adminUnlocked) {\n loginPanel.classList.remove(\"hidden\");\n adminPanel.classList.add(\"hidden\");\n adminPanel.setAttribute(\"aria-hidden\", \"true\");\n adminPanel.innerHTML = \"\";\n return;\n }\n\n if (!adminPanel.innerHTML.trim() && adminTemplate) {\n adminPanel.innerHTML = adminTemplate.innerHTML;\n }\n\n loginPanel.classList.add(\"hidden\");\n adminPanel.classList.remove(\"hidden\");\n adminPanel.setAttribute(\"aria-hidden\", \"false\");\n\n var totalRatings = quotesCache.reduce(function (sum, quote) {\n return sum + Number(quote.rating_total || 0);\n }, 0);\n\n var pendingStat = document.getElementById(\"adminStatPending\");\n var quotesStat = document.getElementById(\"adminStatQuotes\");\n var ratingsStat = document.getElementById(\"adminStatRatings\");\n\n if (pendingStat) pendingStat.textContent = pendingCache.length;\n if (quotesStat) quotesStat.textContent = quotesCache.length;\n if (ratingsStat) ratingsStat.textContent = totalRatings;\n\n renderOnlineList();\n renderPending();\n renderLoginDevices();\n\n var ratingToggle = document.getElementById(\"ratingPasswordRequiredToggle\");\n if (ratingToggle) ratingToggle.checked = ratingPasswordRequired;\n\n var editList = document.getElementById(\"editList\");\n var searchBox = document.getElementById(\"adminSearchInput\");\n var searchInfo = document.getElementById(\"adminSearchText\");\n\n if (!editList) return;\n\n var term = (searchBox ? searchBox.value : adminSearchTerm).trim().toLowerCase();\n\n var adminQuotes = quotesCache.filter(function (quote) {\n return !term ||\n String(quote.text || \"\").toLowerCase().includes(term) ||\n String(quote.name || \"\").toLowerCase().includes(term);\n });\n\n var visibleQuotes = adminQuotes.slice(0, adminVisibleCount);\n adminSearchTerm = term;\n\n if (searchInfo) {\n searchInfo.textContent = term\n ? \"Visar \" + visibleQuotes.length + \" av \" + adminQuotes.length + \" träffar.\"\n : \"Visar \" + Math.min(visibleQuotes.length, quotesCache.length) + \" av \" + quotesCache.length + \" citat.\";\n }\n\n if (!quotesCache.length) {\n editList.innerHTML = '

Det finns inga citat att ändra ännu.

';\n return;\n }\n\n if (!adminQuotes.length) {\n editList.innerHTML = '

Inga citat matchade din sökning.

';\n return;\n }\n\n var rowsHtml = visibleQuotes.map(function (quote) {\n return '

' +\n '' +\n '' +\n '

' + ratingLabel(quote) + '

' +\n '' +\n '

';\n }).join(\"\");\n\n var hasMore = visibleQuotes.length < adminQuotes.length;\n\n editList.innerHTML = rowsHtml + (hasMore\n ? '

Visar ' + visibleQuotes.length + ' av ' + adminQuotes.length + ' citat.

'\n : '');\n}\n\n\n\nfunction handleBlockedAccess(message) {\n addAccessOk = false;\n visitorEmail = \"\";\n visitorName = \"\";\n nameLoginRequired = true;\n quotesCache = [];\n pendingCache = [];\n voteOrderIds = null;\n alert(message || \"Den här enheten är blockerad.\");\n location.hash = \"#login\";\n rerenderFromCache();\n}\n\n\nfunction isValidEduLerumEmail(email) {\n var match = String(email).trim().toLowerCase().match(/^([a-zåäö]{6})(\\d{2})(\\d{2})@edu\\.lerum\\.se$/i);\n\n if (!match) return false;\n\n var month = Number(match[2]);\n var day = Number(match[3]);\n\n if (month < 1 || month > 12) return false;\n if (day < 1 || day > 31) return false;\n\n return true;\n}\n\nasync function siteEmailLogin(button) {\n var nameInput = document.getElementById(\"siteDisplayNameInput\");\n var input = document.getElementById(\"siteEmailInput\");\n var message = document.getElementById(\"siteNameMessage\");\n\n if (!input || !nameInput) return;\n\n var displayName = nameInput.value.trim();\n var email = input.value.trim().toLowerCase();\n\n if (!displayName) {\n setMessage(message, \"Skriv ditt namn först.\", \"error\");\n return;\n }\n\n if (!email) {\n setMessage(message, \"Skriv din skolmejl först.\", \"error\");\n return;\n }\n\n if (!isValidEduLerumEmail(email)) {\n setMessage(message, \"Mejlen måste ha rätt Lerum-format, till exempel wilsah0117@edu.lerum.se.\", \"error\");\n return;\n }\n\n try {\n setButtonBusy(button, \"Loggar in...\");\n\n await api(\"/api/add-access/login\", {\n method: \"POST\",\n body: JSON.stringify({ email: email, displayName: displayName }),\n });\n\n addAccessOk = true;\n visitorEmail = email;\n visitorName = displayName;\n nameLoginRequired = false;\n input.value = \"\";\n nameInput.value = \"\";\n\n setMessage(message, \"Klart. Laddar citaten...\", \"success\");\n\n await loadQuotes();\n await checkRatingAccess();\n await checkAdminSession();\n\n if (adminUnlocked) {\n await loadPending();\n await loadLoginDevices();\n await loadPresence();\n }\n\n await sendPresenceHeartbeat();\n await loadQuoteNotifications();\n\n location.hash = \"#home\";\n showPage();\n showQuoteNotifications();\n startAutoRefresh();\n startPresenceRefresh();\n } catch (error) {\n setMessage(message, error.message || \"Kunde inte logga in.\", \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function siteLogout(button) {\n try {\n setButtonBusy(button, \"Loggar ut...\");\n\n await api(\"/api/add-access/logout\", {\n method: \"POST\",\n body: JSON.stringify({}),\n });\n } catch (error) {\n // Logga ändå ut i frontend.\n } finally {\n addAccessOk = false;\n visitorEmail = \"\";\n visitorName = \"\";\n nameLoginRequired = true;\n quotesCache = [];\n pendingCache = [];\n voteOrderIds = null;\n if (typeof serverRatedMap !== \"undefined\") serverRatedMap = {};\n quoteNotifications = [];\n var noteBox = document.getElementById(\"quoteNotificationBox\");\n if (noteBox) noteBox.remove();\n location.hash = \"#home\";\n clearButtonBusy(button);\n showPage();\n }\n}\n\n\n\nasync function loadQuoteNotifications() {\n if (nameLoginRequired || !addAccessOk) {\n quoteNotifications = [];\n return;\n }\n\n try {\n var data = await api(\"/api/notifications\", { method: \"GET\" });\n quoteNotifications = data.notifications || [];\n } catch (error) {\n quoteNotifications = [];\n }\n}\n\nfunction showQuoteNotifications() {\n if (!quoteNotifications.length) return;\n if (document.getElementById(\"quoteNotificationBox\")) return;\n\n var box = document.createElement(\"div\");\n box.id = \"quoteNotificationBox\";\n box.setAttribute(\"role\", \"dialog\");\n box.setAttribute(\"aria-live\", \"polite\");\n box.style.position = \"fixed\";\n box.style.right = \"18px\";\n box.style.bottom = \"18px\";\n box.style.zIndex = \"9999\";\n box.style.maxWidth = \"min(420px, calc(100vw - 36px))\";\n box.style.padding = \"18px\";\n box.style.borderRadius = \"26px\";\n box.style.background = \"rgba(255, 255, 255, 0.94)\";\n box.style.boxShadow = \"0 24px 70px rgba(22, 96, 73, 0.28)\";\n box.style.border = \"1px solid rgba(255, 255, 255, 0.95)\";\n box.style.backdropFilter = \"blur(18px)\";\n\n var rows = quoteNotifications.map(function (item) {\n var isApproved = item.status === \"approved\";\n var title = isApproved ? \"Godkänt\" : \"Nekat\";\n var color = isApproved ? \"#0d6c42\" : \"#a22020\";\n\n return '

' +\n '' + title + '' +\n '

“' + escapeHtml(item.text || \"\") + '”

' +\n '

Sagt av ' + escapeHtml(item.name || \"\") + '

' +\n '

';\n }).join(\"\");\n\n box.innerHTML =\n '

Dina inskickade citat

' +\n '

Admin har svarat på citat du skickat in.

' +\n rows +\n '';\n\n document.body.appendChild(box);\n}\n\nasync function dismissQuoteNotifications(button) {\n try {\n setButtonBusy(button, \"Stänger...\");\n\n await api(\"/api/notifications/seen\", {\n method: \"POST\",\n body: JSON.stringify({}),\n });\n } catch (error) {\n // Stäng ändå i frontend.\n } finally {\n quoteNotifications = [];\n var box = document.getElementById(\"quoteNotificationBox\");\n if (box) box.remove();\n clearButtonBusy(button);\n }\n}\n\n\nfunction siteAuth(button) {\n if (visitorEmail) {\n siteLogout(button);\n return;\n }\n\n location.hash = \"#login\";\n setTimeout(function () {\n var input = document.getElementById(\"siteEmailInput\");\n if (input) input.focus();\n }, 50);\n}\n\n\nasync function unlockRating(button) {\n var input = document.getElementById(\"ratingPasswordInput\");\n var message = document.getElementById(\"ratingPasswordMessage\");\n\n try {\n setButtonBusy(button, \"Låser upp...\");\n await api(\"/api/rating-access/login\", {\n method: \"POST\",\n body: JSON.stringify({ password: input.value }),\n });\n ratingAccessOk = true;\n input.value = \"\";\n setMessage(message, \"\", \"\");\n await sendPresenceHeartbeat();\n rerenderFromCache();\n } catch (error) {\n ratingAccessOk = false;\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function unlockAdd(button) {\n location.hash = \"#login\";\n return;\n\n var input = document.getElementById(\"addPasswordInput\");\n var message = document.getElementById(\"addPasswordMessage\");\n\n try {\n setButtonBusy(button, \"Sparar...\");\n await api(\"/api/add-access/login\", {\n method: \"POST\",\n body: JSON.stringify({ name: input.value }),\n });\n addAccessOk = true;\n input.value = \"\";\n setMessage(message, \"Du är inloggad för att skicka citat i 30 dagar.\", \"success\");\n await sendPresenceHeartbeat();\n await loadPresence();\n rerenderFromCache();\n } catch (error) {\n addAccessOk = false;\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function submitPendingQuote(button) {\n var textInput = document.getElementById(\"publicQuoteText\");\n var nameInput = document.getElementById(\"publicQuoteName\");\n var message = document.getElementById(\"publicAddMessage\");\n var text = textInput.value.trim();\n var name = nameInput.value.trim();\n\n if (!text || !name) {\n setMessage(message, \"Du behöver fylla i både citat och namn.\", \"error\");\n return;\n }\n\n try {\n setButtonBusy(button, \"Skickar...\");\n await api(\"/api/add-pending\", {\n method: \"POST\",\n body: JSON.stringify({ text: text, name: name }),\n });\n textInput.value = \"\";\n nameInput.value = \"\";\n setMessage(message, \"Citatet skickades till väntlistan.\", \"success\");\n await loadPending();\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n await checkAddAccess();\n rerenderFromCache();\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function approvePending(id, button) {\n try {\n setButtonBusy(button, \"Godkänner...\");\n var data = await api(\"/api/admin/approve-pending\", {\n method: \"POST\",\n body: JSON.stringify({ id: id }),\n });\n quotesCache = data.quotes || quotesCache;\n pendingCache = data.pendingQuotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n dataVersion = String(data.dataVersion || dataVersion);\n rerenderFromCache();\n } catch (error) {\n alert(readableErrorMessage(error && error.message ? error.message : error));\n await loadPending();\n rerenderFromCache();\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function rejectPending(id, button) {\n try {\n setButtonBusy(button, \"Tar bort...\");\n var data = await api(\"/api/admin/reject-pending\", {\n method: \"POST\",\n body: JSON.stringify({ id: id }),\n });\n pendingCache = data.pendingQuotes || [];\n rerenderFromCache();\n } catch (error) {\n alert(readableErrorMessage(error && error.message ? error.message : error));\n await loadPending();\n rerenderFromCache();\n } finally {\n clearButtonBusy(button);\n }\n}\n\n\nasync function logoutAllUsers(button) {\n if (!confirm(\"Vill du logga ut alla användare? De måste logga in igen med namn och skolmejl.\")) return;\n\n try {\n setButtonBusy(button, \"Loggar ut alla...\");\n\n await api(\"/api/admin/logout-all-users\", {\n method: \"POST\",\n body: JSON.stringify({}),\n });\n\n alert(\"Alla användare loggas ut och måste logga in igen.\");\n } catch (error) {\n alert(readableErrorMessage(error && error.message ? error.message : error));\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function saveMaintenanceSettings(button) {\n var toggle = document.getElementById(\"maintenanceToggle\");\n var input = document.getElementById(\"maintenanceMessageInput\");\n var message = document.getElementById(\"maintenanceSettingsMessage\");\n\n try {\n setButtonBusy(button, \"Sparar...\");\n\n var data = await api(\"/api/admin/maintenance\", {\n method: \"POST\",\n body: JSON.stringify({\n enabled: Boolean(toggle && toggle.checked),\n message: input ? input.value : \"\",\n }),\n });\n\n maintenanceEnabled = Boolean(data.maintenanceEnabled);\n maintenanceMessage = data.maintenanceMessage || maintenanceMessage;\n\n setMessage(message, \"Maintenance-inställningen sparades.\", \"success\");\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function blockDevice(deviceId, button) {\n var reason = prompt(\"Varför blockas enheten?\", \"Blockerad av admin\");\n if (reason === null) return;\n\n try {\n setButtonBusy(button, \"Blockar...\");\n\n var data = await api(\"/api/admin/block-device\", {\n method: \"POST\",\n body: JSON.stringify({ deviceId: deviceId, reason: reason }),\n });\n\n loginDevicesCache = data.devices || [];\n loginLoginsCache = data.logins || groupLoginDevices(loginDevicesCache);\n renderLoginDevices();\n } catch (error) {\n alert(readableErrorMessage(error && error.message ? error.message : error));\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function unblockDevice(deviceId, button) {\n try {\n setButtonBusy(button, \"Avblockar...\");\n\n var data = await api(\"/api/admin/unblock-device\", {\n method: \"POST\",\n body: JSON.stringify({ deviceId: deviceId }),\n });\n\n loginDevicesCache = data.devices || [];\n loginLoginsCache = data.logins || groupLoginDevices(loginDevicesCache);\n renderLoginDevices();\n } catch (error) {\n alert(readableErrorMessage(error && error.message ? error.message : error));\n } finally {\n clearButtonBusy(button);\n }\n}\n\n\nasync function saveAdminPassword(button) {\n var input = document.getElementById(\"adminPasswordNewInput\");\n var message = document.getElementById(\"adminPasswordMessage\");\n var password = input.value.trim();\n\n if (!password) {\n setMessage(message, \"Skriv ett nytt adminlösenord först.\", \"error\");\n return;\n }\n\n try {\n setButtonBusy(button, \"Sparar...\");\n await api(\"/api/admin/admin-password\", {\n method: \"POST\",\n body: JSON.stringify({ password: password }),\n });\n input.value = \"\";\n adminUnlocked = false;\n setMessage(document.getElementById(\"loginMessage\"), \"Adminlösenordet är ändrat. Logga in igen med det nya.\", \"success\");\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function saveRatingSettings(button) {\n var toggle = document.getElementById(\"ratingPasswordRequiredToggle\");\n var input = document.getElementById(\"ratingPasswordAdminInput\");\n var message = document.getElementById(\"ratingSettingsMessage\");\n\n try {\n setButtonBusy(button, \"Sparar...\");\n var data = await api(\"/api/admin/rating-settings\", {\n method: \"POST\",\n body: JSON.stringify({\n passwordRequired: Boolean(toggle.checked),\n password: input.value.trim(),\n }),\n });\n ratingPasswordRequired = Boolean(data.ratingPasswordRequired);\n ratingAccessOk = !ratingPasswordRequired;\n input.value = \"\";\n setMessage(message, \"Inställningarna sparades.\", \"success\");\n await checkRatingAccess();\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function rateQuote(id, rating, button) {\n var ratedMap = getRatedMap();\n if (ratedMap[id]) return;\n\n try {\n if (button) {\n button.disabled = true;\n button.textContent = \"...\";\n }\n\n var data = await api(\"/api/rate\", {\n method: \"POST\",\n body: JSON.stringify({ id: id, rating: rating }),\n });\n\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n serverRatedMap = data.ratedMap || serverRatedMap;\n ratedMap = getRatedMap();\n ratedMap[id] = rating;\n saveRatedMap(ratedMap);\n setMessage(document.getElementById(\"ratingPasswordMessage\"), \"Betyget sparades.\", \"success\");\n renderVoteList();\n } catch (error) {\n if (error && error.needsName) {\n nameLoginRequired = true;\n location.hash = \"#login\";\n rerenderFromCache();\n return;\n }\n\n alert(readableErrorMessage(error && error.message ? error.message : error));\n renderVoteList();\n }\n}\n\nasync function loginAdmin(button) {\n var input = document.getElementById(\"passwordInput\");\n var message = document.getElementById(\"loginMessage\");\n\n try {\n setButtonBusy(button, \"Loggar in...\");\n\n await api(\"/api/admin/login\", {\n method: \"POST\",\n body: JSON.stringify({ password: input.value }),\n });\n\n adminUnlocked = true;\n document.body.classList.add(\"admin-unlocked\");\n\n input.value = \"\";\n setMessage(message, \"\", \"\");\n\n renderAdmin();\n\n try { await loadPending(); } catch (error) { console.warn(\"Kunde inte ladda väntlistan\", error); }\n try { await loadLoginDevices(); } catch (error) { console.warn(\"Kunde inte ladda inloggningar\", error); }\n try { await loadPresence(); } catch (error) { console.warn(\"Kunde inte ladda online-listan\", error); }\n\n rerenderFromCache();\n startPresenceRefresh();\n } catch (error) {\n adminUnlocked = false;\n document.body.classList.remove(\"admin-unlocked\");\n setMessage(message, error.message || \"Kunde inte logga in.\", \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\n\nasync function logoutAdmin() {\n document.body.classList.remove(\"admin-unlocked\");\n\n var adminPanel = document.getElementById(\"adminPanel\");\n if (adminPanel) {\n adminPanel.classList.add(\"hidden\");\n adminPanel.setAttribute(\"aria-hidden\", \"true\");\n adminPanel.style.setProperty(\"display\", \"none\", \"important\");\n }\n\n try {\n await api(\"/api/admin/logout\", {\n method: \"POST\",\n body: JSON.stringify({}),\n });\n } catch (error) {\n // Logga ändå ut i frontend.\n } finally {\n adminUnlocked = false;\n pendingCache = [];\n onlineCache = { onlineCount: 0, visitors: [] };\n renderAdmin();\n }\n}\n\n\nasync function addSingleQuote(button) {\n var textInput = document.getElementById(\"newQuoteText\");\n var nameInput = document.getElementById(\"newQuoteName\");\n var message = document.getElementById(\"addMessage\");\n var text = textInput.value.trim();\n var name = nameInput.value.trim();\n\n if (!text || !name) {\n setMessage(message, \"Du behöver fylla i både citat och namn.\", \"error\");\n return;\n }\n\n try {\n setButtonBusy(button, \"Lägger till...\");\n var data = await api(\"/api/admin/add\", {\n method: \"POST\",\n body: JSON.stringify({ text: text, name: name }),\n });\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n textInput.value = \"\";\n nameInput.value = \"\";\n setMessage(message, \"Citatet lades till.\", \"success\");\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function importQuotes(button) {\n var textarea = document.getElementById(\"importText\");\n var message = document.getElementById(\"importMessage\");\n var lines = textarea.value.split(String.fromCharCode(10)).map(function (line) {\n return line.trim();\n }).filter(Boolean);\n var chunkSize = 150;\n var totalImported = 0;\n var failedLines = [];\n\n if (!lines.length) {\n setMessage(message, \"Klistra in minst en rad att importera.\", \"error\");\n return;\n }\n\n try {\n setButtonBusy(button, \"Importerar 0 / \" + lines.length + \"...\");\n\n for (var start = 0; start < lines.length; start += chunkSize) {\n var chunk = lines.slice(start, start + chunkSize);\n var data = await api(\"/api/admin/import\", {\n method: \"POST\",\n body: JSON.stringify({\n text: chunk.join(String.fromCharCode(10)),\n returnQuotes: false,\n }),\n });\n\n totalImported += Number(data.imported || 0);\n\n if (data.failedLines && data.failedLines.length) {\n data.failedLines.forEach(function (lineNumber) {\n failedLines.push(start + Number(lineNumber));\n });\n }\n\n if (button) button.textContent = \"Importerar \" + Math.min(start + chunk.length, lines.length) + \" / \" + lines.length + \"...\";\n setMessage(message, \"Importerar... \" + Math.min(start + chunk.length, lines.length) + \" av \" + lines.length + \" rader klara.\", \"success\");\n }\n\n await loadQuotes();\n if (!failedLines.length) textarea.value = \"\";\n\n var failedCount = failedLines.length;\n var failedPreview = failedLines.slice(0, 20).join(\", \");\n var extraFailedText = failedCount > 20 ? \" och \" + (failedCount - 20) + \" till\" : \"\";\n var text = failedCount\n ? totalImported + \" importerades. \" + failedCount + \" rader hade fel format, till exempel rad \" + failedPreview + extraFailedText + \". Format: Vad de säger - Namn eller Vad de säger — Namn.\"\n : totalImported + \" citat importerades.\";\n\n setMessage(message, text, failedCount ? \"error\" : \"success\");\n rerenderFromCache();\n } catch (error) {\n setMessage(message, error.message, \"error\");\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function updateQuote(id, field, value, input) {\n var oldValue = input ? input.defaultValue : value;\n if (String(value).trim() === String(oldValue).trim()) return;\n\n try {\n if (input) input.disabled = true;\n var data = await api(\"/api/admin/update\", {\n method: \"POST\",\n body: JSON.stringify({ id: id, field: field, value: value }),\n });\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n rerenderFromCache();\n } catch (error) {\n alert(readableErrorMessage(error && error.message ? error.message : error));\n renderVoteList();\n } finally {\n if (input) input.disabled = false;\n }\n}\n\nasync function deleteQuote(id, button) {\n if (!confirm(\"Vill du ta bort citatet?\")) return;\n\n try {\n setButtonBusy(button, \"Tar bort...\");\n var data = await api(\"/api/admin/delete\", {\n method: \"POST\",\n body: JSON.stringify({ id: id }),\n });\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n removeRatedId(id);\n rerenderFromCache();\n } catch (error) {\n alert(readableErrorMessage(error && error.message ? error.message : error));\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function resetRatings(button) {\n if (!confirm(\"Vill du nollställa alla betyg?\")) return;\n\n try {\n setButtonBusy(button, \"Nollställer...\");\n var data = await api(\"/api/admin/reset-ratings\", {\n method: \"POST\",\n body: JSON.stringify({}),\n });\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n rerenderFromCache();\n } catch (error) {\n alert(readableErrorMessage(error && error.message ? error.message : error));\n } finally {\n clearButtonBusy(button);\n }\n}\n\nasync function clearAllQuotes(button) {\n if (!confirm(\"Vill du ta bort alla citat?\")) return;\n\n try {\n setButtonBusy(button, \"Tar bort...\");\n var data = await api(\"/api/admin/clear\", {\n method: \"POST\",\n body: JSON.stringify({}),\n });\n quotesCache = data.quotes || [];\n ratingVersion = String(data.ratingVersion || ratingVersion);\n rerenderFromCache();\n } catch (error) {\n alert(readableErrorMessage(error && error.message ? error.message : error));\n } finally {\n clearButtonBusy(button);\n }\n}\n\nfunction clearSearch() {\n var personInput = document.getElementById(\"personSearch\");\n var quoteInput = document.getElementById(\"quoteSearch\");\n var homeInput = document.getElementById(\"homeSearch\");\n\n if (personInput) personInput.value = \"\";\n if (quoteInput) quoteInput.value = \"\";\n if (homeInput) homeInput.value = \"\";\n\n quickSearchTerm = \"\";\n voteVisibleCount = VOTE_PAGE_SIZE;\n voteOrderIds = null;\n rerenderFromCache();\n}\n\nfunction homeSearch() {\n var homeInput = document.getElementById(\"homeSearch\");\n var personInput = document.getElementById(\"personSearch\");\n var quoteInput = document.getElementById(\"quoteSearch\");\n\n quickSearchTerm = homeInput ? homeInput.value.trim() : \"\";\n if (personInput) personInput.value = \"\";\n if (quoteInput) quoteInput.value = \"\";\n\n voteVisibleCount = VOTE_PAGE_SIZE;\n voteOrderIds = null;\n\n if (location.hash !== \"#vote\") location.hash = \"#vote\";\n else rerenderFromCache();\n}\n\nfunction timeAgo(isoDate) {\n var diff = Math.max(0, Date.now() - new Date(isoDate).getTime());\n var seconds = Math.floor(diff / 1000);\n\n if (seconds < 5) return \"nu\";\n if (seconds < 60) return seconds + \" sek sedan\";\n\n var minutes = Math.floor(seconds / 60);\n if (minutes === 1) return \"1 min sedan\";\n return minutes + \" min sedan\";\n}\n\nfunction setButtonBusy(button, label) {\n if (!button) return;\n button.dataset.oldText = button.textContent;\n button.textContent = label;\n button.disabled = true;\n}\n\nfunction clearButtonBusy(button) {\n if (!button) return;\n button.textContent = button.dataset.oldText || button.textContent;\n button.disabled = false;\n delete button.dataset.oldText;\n}\n\nfunction setMessage(element, text, type) {\n if (!element) return;\n element.textContent = readableErrorMessage(text || \"\");\n element.className = type ? \"message \" + type : \"message\";\n}\n\nfunction ratingLabel(quote) {\n var count = Number(quote.rating_count || 0);\n\n if (!count) return \"Inga poäng ännu\";\n\n return Math.round(fairScore(quote)) + \" poäng\";\n}\n\nfunction ratingCountLabel(quote) {\n var count = Number(quote.rating_count || 0);\n return count === 1 ? \"1 betyg\" : count + \" betyg\";\n}\n\nfunction formatAverage(value) {\n return value.toFixed(1).replace(\".0\", \"\");\n}\n\nfunction starText(value) {\n return starRatingHtml(value);\n}\n\nfunction starRatingHtml(value) {\n var rating = Math.max(0, Math.min(5, Number(value || 0)));\n var idBase = \"avgStar\" + (++starSvgCounter);\n var html = '';\n\n for (var i = 1; i <= 5; i += 1) {\n var fill = Math.round(Math.max(0, Math.min(1, rating - (i - 1))) * 100);\n var clipId = idBase + \"_\" + i;\n\n html += '';\n }\n\n html += '' + formatAverage(rating) + '';\n html += '';\n return html;\n}\n\nfunction escapeHtml(text) {\n return String(text)\n .replaceAll(\"&\", \"&\")\n .replaceAll(\"<\", \"<\")\n .replaceAll(\">\", \">\")\n .replaceAll('\"', \""\")\n .replaceAll(\"'\", \"'\");\n}\n\nfunction escapeAttr(text) {\n return escapeHtml(text).replaceAll(String.fromCharCode(96), \"`\");\n}\n\ndocument.addEventListener(\"click\", function (event) {\n var button = event.target.closest(\"button[data-action]\");\n if (!button) return;\n\n var action = button.dataset.action;\n var id = button.dataset.id;\n var rating = Number(button.dataset.rating || 0);\n\n if (action === \"site-name-login\") siteEmailLogin(button);\n if (action === \"dismiss-quote-notifications\") dismissQuoteNotifications(button);\n if (action === \"site-auth\") siteAuth(button);\n if (action === \"rate\") rateQuote(id, rating, button);\n if (action === \"unlock-rating\") unlockRating(button);\n if (action === \"unlock-add\") unlockAdd(button);\n if (action === \"submit-pending\") submitPendingQuote(button);\n if (action === \"approve-pending\") approvePending(id, button);\n if (action === \"reject-pending\") rejectPending(id, button);\n if (action === \"block-device\") blockDevice(id, button);\n if (action === \"unblock-device\") unblockDevice(id, button);\n if (action === \"refresh-login-devices\") loadLoginDevices().then(rerenderFromCache);\n if (action === \"save-admin-password\") saveAdminPassword(button);\n if (action === \"save-rating-settings\") saveRatingSettings(button);\n if (action === \"save-maintenance\") saveMaintenanceSettings(button);\n if (action === \"logout-all-users\") logoutAllUsers(button);\n if (action === \"login\") loginAdmin(button);\n if (action === \"add\") addSingleQuote(button);\n if (action === \"import\") importQuotes(button);\n if (action === \"delete\") deleteQuote(id, button);\n if (action === \"reset-ratings\") resetRatings(button);\n if (action === \"clear\") clearAllQuotes(button);\n if (action === \"logout\") logoutAdmin();\n if (action === \"refresh\") refreshAll();\n if (action === \"refresh-pending\") loadPending().then(rerenderFromCache);\n if (action === \"clear-search\") clearSearch();\n\n if (action === \"clear-login-devices-search\") {\n var loginSearch = document.getElementById(\"loginDevicesSearchInput\");\n\n if (loginSearch) loginSearch.value = \"\";\n\n loginDevicesSearchTerm = \"\";\n renderLoginDevices();\n }\n\n if (action === \"admin-clear-search\") {\n var adminSearch = document.getElementById(\"adminSearchInput\");\n if (adminSearch) adminSearch.value = \"\";\n adminSearchTerm = \"\";\n adminVisibleCount = ADMIN_PAGE_SIZE;\n rerenderFromCache();\n }\n\n if (action === \"home-search\") homeSearch();\n\n if (action === \"show-more-vote\") {\n voteVisibleCount += VOTE_PAGE_SIZE;\n rerenderFromCache();\n }\n\n if (action === \"show-more-admin\") {\n adminVisibleCount += ADMIN_PAGE_SIZE;\n rerenderFromCache();\n }\n});\n\ndocument.addEventListener(\"change\", function (event) {\n var input = event.target.closest(\"input[data-action='edit']\");\n if (!input) return;\n updateQuote(input.dataset.id, input.dataset.field, input.value, input);\n});\n\ndocument.addEventListener(\"input\", function (event) {\n if (event.target && (event.target.id === \"personSearch\" || event.target.id === \"quoteSearch\")) {\n quickSearchTerm = \"\";\n voteVisibleCount = VOTE_PAGE_SIZE;\n voteOrderIds = null;\n rerenderFromCache();\n }\n\n if (event.target && event.target.id === \"adminSearchInput\") {\n adminVisibleCount = ADMIN_PAGE_SIZE;\n rerenderFromCache();\n }\n\n if (event.target && event.target.id === \"loginDevicesSearchInput\") {\n renderLoginDevices();\n }\n});\n\nfunction bindEnter(id, callback) {\n var element = document.getElementById(id);\n if (!element) return;\n\n element.addEventListener(\"keydown\", function (event) {\n if (event.key === \"Enter\") callback();\n });\n}\n\nbindEnter(\"siteDisplayNameInput\", function () {\n var input = document.getElementById(\"siteEmailInput\");\n if (input) input.focus();\n});\n\nbindEnter(\"siteEmailInput\", function () {\n siteEmailLogin(document.querySelector('button[data-action=\"site-name-login\"]'));\n});\n\nbindEnter(\"passwordInput\", function () {\n loginAdmin(document.querySelector('button[data-action=\"login\"]'));\n});\n\nbindEnter(\"homeSearch\", function () {\n homeSearch();\n});\n\nbindEnter(\"ratingPasswordInput\", function () {\n unlockRating(document.querySelector('button[data-action=\"unlock-rating\"]'));\n});\n\nbindEnter(\"addPasswordInput\", function () {\n unlockAdd(document.querySelector('button[data-action=\"unlock-add\"]'));\n});\n\nbindEnter(\"publicQuoteName\", function () {\n submitPendingQuote(document.querySelector('button[data-action=\"submit-pending\"]'));\n});\n\ndocument.addEventListener(\"visibilitychange\", function () {\n if (!document.hidden) {\n sendPresenceHeartbeat();\n checkForUpdates();\n }\n});\n\nwindow.addEventListener(\"hashchange\", showPage);\nwindow.addEventListener(\"DOMContentLoaded\", boot);\n`;",[155],"pulls",1,"forks","envVars",{"_168":162,"_170":54},"connections",{"_168":54,"_169":54},"count","unfilledCount","emptyCount",{"_20":154,"_13":155,"_121":156,"_123":-5,"_124":21,"_125":30,"_127":50,"_22":185,"_29":158,"_130":131,"_132":159,"_134":38,"_135":-5,"_176":186,"_93":187},{"_20":145,"_13":146,"_121":48,"_123":-5,"_124":21,"_125":147,"_127":50,"_22":182,"_29":149,"_130":150,"_132":151,"_134":38,"_135":152,"_176":183,"_93":184},{"_20":137,"_13":138,"_121":139,"_123":-5,"_124":21,"_125":140,"_127":50,"_22":179,"_29":142,"_130":131,"_132":143,"_134":38,"_135":-5,"_176":180,"_93":181},{"_20":119,"_13":120,"_121":122,"_123":-5,"_124":21,"_125":126,"_127":50,"_22":175,"_29":129,"_130":131,"_132":133,"_134":38,"_135":-5,"_176":177,"_93":178},["D",1779816592608],"children",[],[120],["D",1779816585916],[],[138],["D",1779865307353],[],[146],["D",1779865908030],[],[155],["D",1779361955862],["D",1789489305251],{"_11":12,"_91":86},{"_11":12,"_85":86,"_87":86,"_45":46,"_88":89,"_90":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_80":-5,"_81":-5,"_82":-5,"_83":14,"_84":12},"ctx",{"_73":-5,"_112":226,"_227":228,"_229":230,"_231":38,"_232":38,"_233":38,"_234":50,"_235":-5,"_236":-7,"_237":-7,"_238":54,"_239":38,"_240":38,"_241":-5,"_242":38,"_243":38,"_244":38,"_245":-5},"ENV",{"_197":198,"_199":200,"_201":26,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Sidan är pausad just nu

Citat som glänser i solen.

Prispallen

Citat

Lösenord krävs

Lägg till citat

Skriv ditt namn

Skicka in citat

Prispall och plats 4-10

Plats 4-10

Admin

Online just nu

Maintenance-läge

Inloggade användare

Väntlista för nya citat

Adminlösenord

Betygsätt-lösenord

Lägg till ett citat

Importera citat

Ändra citat

Logga in först

Dina inskickade citat

Sidan är pausad just nu

Skolmejl krävs

Citat som glänser i solen.

Prispallen

Citat

Lösenord krävs

Lägg till citat

Skriv ditt namn

Skicka in citat

Prispall och plats 4-10

Plats 4-10

Admin

Online just nu

Maintenance-läge

Inloggade användare

Väntlista för nya citat

Adminlösenord

Betygsätt-lösenord

Lägg till ett citat

Importera citat

Ändra citat

Logga in först

Dina inskickade citat

Branches1

Branches
1