${body}

`,\n { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } },\n );\n}\n\n// ── App ─────────────────────────────────────────────────────────────\nconst app = new Hono();\n\n// ── Landing page ────────────────────────────────────────────────────\napp.get(\"/\", (c) => {\n return page(\n \"Blind Vote\",\n `\n

🗳️

Blind Vote

Anonymous group votes with a simultaneous reveal

\n\n

\n \n

\n\n

Already have a room code?

\n \n

\n\n

\n No signup. No tracking. Votes are hidden until the creator reveals them.\n

\n `,\n );\n});\n\n// ── Create room ─────────────────────────────────────────────────────\napp.post(\"/create\", async (c) => {\n const form = await c.req.formData();\n const question = (form.get(\"question\") as string || \"\").trim();\n const options = (form.get(\"options\") as string || \"\").trim();\n\n if (!question) {\n return page(\n \"Error\",\n `

Please enter a question.

← Back`,\n );\n }\n\n const code = randomCode(6);\n const adminToken = randomCode(24);\n\n await sqlite.execute(\n `INSERT INTO rooms (code, question, admin_token) VALUES (?, ?, ?)`,\n [code, question, adminToken],\n );\n\n // Store options as individual rows in a separate table (create on demand)\n if (options) {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS room_options (\n room_code TEXT, option_text TEXT,\n FOREIGN KEY (room_code) REFERENCES rooms(code)\n )`);\n const lines = options.split(\"\\n\").map((l) => l.trim()).filter(Boolean);\n for (const opt of lines) {\n await sqlite.execute(\n `INSERT INTO room_options (room_code, option_text) VALUES (?, ?)`,\n [code, opt],\n );\n }\n }\n\n const baseUrl = new URL(c.req.url).origin;\n const voteLink = `${baseUrl}/room/${code}`;\n const adminLink = `${baseUrl}/room/${code}/admin?token=${adminToken}`;\n\n return page(\n \"Room Created\",\n `\n

✅

Room Created

\n\n

\n Room Code\n

${code}

\n Share this link with voters\n

\n \n \n

\n\n

\n 🔑 Your Admin Link (save this — it's the only way to reveal votes)\n

\n \n \n

⚠️ Don't share this link. Only you should have it.

\n\n \n Go to Admin Dashboard →\n \n `,\n );\n});\n\n// ── Join redirect ───────────────────────────────────────────────────\napp.get(\"/join\", (c) => {\n const code = (c.req.query(\"code\") || \"\").trim().toUpperCase();\n if (!code) {\n return new Response(null, { status: 302, headers: { Location: \"/\" } });\n }\n return new Response(null, {\n status: 302,\n headers: { Location: `/room/${code}` },\n });\n});\n\n// ── Voter page ──────────────────────────────────────────────────────\napp.get(\"/room/:code\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase();\n const room =\n (await sqlite.execute(`SELECT * FROM rooms WHERE code = ?`, [code]))\n .rows[0];\n if (!room) {\n return page(\n \"Not Found\",\n `

Room ${\n escapeHtml(code)\n } not found.

← Home`,\n );\n }\n\n // Check for options\n let options: string[] = [];\n try {\n const res = await sqlite.execute(\n `SELECT option_text FROM room_options WHERE room_code = ?`,\n [code],\n );\n options = res.rows.map((r: any) => r.option_text || r[0]);\n } catch { /* table might not exist */ }\n\n const votes =\n (await sqlite.execute(\n `SELECT voter_name, vote FROM votes WHERE room_code = ?`,\n [code],\n )).rows;\n const revealed = room.revealed || room[3];\n const question = room.question || room[1];\n\n // If revealed, show results\n if (revealed) {\n const voteList = votes.map((v: any) => {\n const name = escapeHtml(v.voter_name || v[0]);\n const vote = escapeHtml(v.vote || v[1]);\n return `

${name}${vote}

`;\n }).join(\"\");\n\n return page(\n \"Results\",\n `\n

📊

Results Revealed

${escapeHtml(question)}

\n Revealed\n ${votes.length} vote${\n votes.length !== 1 ? \"s\" : \"\"\n }\n

\n ${voteList || '

No votes were cast.

'}\n

\n ← Create a new vote\n `,\n );\n }\n\n // Voting form\n const voterNames = new Set(\n votes.map((v: any) => (v.voter_name || v[0] || \"\").toLowerCase()),\n );\n\n let inputHtml: string;\n if (options.length > 0) {\n const opts = options.map((o) =>\n ``\n ).join(\"\");\n inputHtml =\n `Your vote`;\n } else {\n inputHtml =\n `Your vote`;\n }\n\n return page(\n `Vote: ${question}`,\n `\n

🗳️

${escapeHtml(question)}

Room ${code}

\n\n

\n Waiting for reveal\n ${votes.length} voted\n

\n\n

\n ${\n votes.map((v: any) =>\n `${escapeHtml(v.voter_name || v[0])}`\n ).join(\" \")\n }\n

\n\n \n

\n Your vote is hidden until the room creator reveals all votes at once.\n

\n `,\n ``,\n );\n});\n\n// ── Submit vote ─────────────────────────────────────────────────────\napp.post(\"/room/:code/vote\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase();\n const form = await c.req.formData();\n const name = (form.get(\"name\") as string || \"\").trim();\n const vote = (form.get(\"vote\") as string || \"\").trim();\n\n if (!name || !vote) {\n return page(\n \"Error\",\n `

Name and vote are required.

← Back`,\n );\n }\n\n const room =\n (await sqlite.execute(`SELECT * FROM rooms WHERE code = ?`, [code]))\n .rows[0];\n if (!room) {\n return page(\n \"Error\",\n `

Room not found.

← Home`,\n );\n }\n\n const revealed = room.revealed || room[3];\n if (revealed) {\n return page(\n \"Error\",\n `

Voting is closed — results have already been revealed.

← See Results`,\n );\n }\n\n // Check for duplicate name\n const existing = (await sqlite.execute(\n `SELECT id FROM votes WHERE room_code = ? AND LOWER(voter_name) = LOWER(?)`,\n [code, name],\n )).rows;\n if (existing.length > 0) {\n return page(\n \"Already Voted\",\n `

Someone named \"${\n escapeHtml(name)\n }\" has already voted in this room. Use a different name or ask the room creator to reset.

← Back`,\n );\n }\n\n await sqlite.execute(\n `INSERT INTO votes (room_code, voter_name, vote) VALUES (?, ?, ?)`,\n [code, name, vote],\n );\n\n return page(\n \"Vote Cast\",\n `\n

✓

Vote Submitted

Thanks, ${escapeHtml(name)}!

Your vote is locked in and hidden.

This page will automatically redirect when results are revealed.

\n `,\n ``,\n );\n});\n\n// ── Admin page ──────────────────────────────────────────────────────\napp.get(\"/room/:code/admin\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase();\n const token = c.req.query(\"token\") || \"\";\n\n const room =\n (await sqlite.execute(`SELECT * FROM rooms WHERE code = ?`, [code]))\n .rows[0];\n if (!room) {\n return page(\n \"Not Found\",\n `

Room not found.

← Home`,\n );\n }\n\n const adminToken = room.admin_token || room[2];\n if (token !== adminToken) {\n return page(\n \"Unauthorized\",\n `

Invalid admin token.

← Home`,\n );\n }\n\n const question = room.question || room[1];\n const revealed = room.revealed || room[3];\n const votes =\n (await sqlite.execute(\n `SELECT voter_name, vote FROM votes WHERE room_code = ?`,\n [code],\n )).rows;\n\n const baseUrl = new URL(c.req.url).origin;\n const voteLink = `${baseUrl}/room/${code}`;\n\n if (revealed) {\n const voteList = votes.map((v: any) => {\n const name = escapeHtml(v.voter_name || v[0]);\n const answer = escapeHtml(v.vote || v[1]);\n return `

${name}${answer}

`;\n }).join(\"\");\n\n return page(\n \"Admin — Results\",\n `\n

📊

${escapeHtml(question)}

Revealed

\n ${voteList || '

No votes.

'}\n

\n ← Create another vote\n `,\n );\n }\n\n // Not yet revealed\n const voterTags = votes.map((v: any) =>\n `${escapeHtml(v.voter_name || v[0])}`\n ).join(\" \");\n\n return page(\n \"Admin Dashboard\",\n `\n

🔒

${escapeHtml(question)}

Admin Dashboard

\n\n

\n Share this link with voters\n

\n \n \n

${code}

\n\n

\n Waiting for votes\n ${votes.length} vote${\n votes.length !== 1 ? \"s\" : \"\"\n }\n

${\n voterTags || 'No votes yet...'\n }

\n\n

Once everyone has voted, reveal all answers at once.

\n \n

This cannot be undone.

\n `,\n ``,\n );\n});\n\n// ── Reveal votes ────────────────────────────────────────────────────\napp.post(\"/room/:code/reveal\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase();\n const token = c.req.query(\"token\") || \"\";\n\n const room =\n (await sqlite.execute(`SELECT * FROM rooms WHERE code = ?`, [code]))\n .rows[0];\n if (!room) {\n return page(\"Error\", `

Room not found.

`);\n }\n\n const adminToken = room.admin_token || room[2];\n if (token !== adminToken) {\n return page(\"Error\", `

Invalid admin token.

`);\n }\n\n await sqlite.execute(`UPDATE rooms SET revealed = 1 WHERE code = ?`, [code]);\n\n return new Response(null, {\n status: 302,\n headers: { Location: `/room/${code}/admin?token=${token}` },\n });\n});\n\n// ── Status API (for polling) ────────────────────────────────────────\napp.get(\"/api/room/:code/status\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase();\n const room =\n (await sqlite.execute(`SELECT revealed FROM rooms WHERE code = ?`, [code]))\n .rows[0];\n if (!room) return c.json({ error: \"not found\" }, 404);\n\n const votes =\n (await sqlite.execute(`SELECT voter_name FROM votes WHERE room_code = ?`, [\n code,\n ])).rows;\n\n return c.json({\n revealed: !!(room.revealed || room[0]),\n count: votes.length,\n voters: votes.map((v: any) => v.voter_name || v[0]),\n });\n});\n\n// ── 404 ─────────────────────────────────────────────────────────────\napp.notFound((c) => {\n return page(\n \"404\",\n `

Page not found.

← Home`,\n );\n});\n\nexport default app.fetch;","label",[59],"pulls","branches","forks","envVars",{"_161":20,"_163":20},"connections",{"_161":20,"_162":20},"count","unfilledCount","emptyCount",{"_28":145,"_13":59,"_57":58,"_38":-5,"_30":31,"_146":68,"_147":148,"_32":165,"_34":35,"_60":61,"_150":151,"_62":24,"_152":-5,"_166":167,"_122":168},["D",1772213651836],"children",[],[59],["D",1772213633257],["D",1789540832752],{"_11":12,"_121":65},{"_11":12,"_117":-5,"_64":65,"_25":63,"_118":119,"_120":24},{"_34":68,"_13":16,"_28":31,"_109":73,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":-5,"_115":14,"_116":12},"ctx",{"_46":-5,"_141":207,"_208":209,"_210":211,"_212":24,"_213":24,"_214":24,"_215":148,"_216":-5,"_217":-7,"_218":-7,"_219":20,"_220":24,"_221":24,"_222":-5,"_223":24,"_224":24,"_225":24,"_226":-5},"ENV",{"_178":179,"_180":181,"_182":16,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History