[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":53,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",8,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","a5831fa6-a744-11f1-a2db-1607ee4eb77e","name","fileType","http","content","/**\n * confluxcon — the backend, on Val Town.\n *\n * SETUP (once, about two minutes)\n * 1. val.town ▸ sign in with GitHub ▸ New ▸ HTTP val.\n * 2. Delete what's there, paste this whole file in. It saves as you type.\n * 3. Copy the val's URL (the .web.val.run one, top right).\n * 4. Hand that URL over; seeding happens over HTTP, no pasting.\n *\n * The database is Val Town's SQLite. Guests are rows; a save writes one row,\n * so two people RSVPing at the same moment can't overwrite each other.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst G = \"confluxcon_guests_v1\";\nconst S = \"confluxcon_sessions_v1\";\n\nconst GCOLS = [\n \"ord\",\n \"slug\",\n \"first\",\n \"last\",\n \"password\",\n \"admin\",\n \"met\",\n \"org\",\n \"lane\",\n \"tier\",\n \"going\",\n \"prob\",\n \"arrive\",\n \"link\",\n \"run\",\n \"sessions\",\n \"namevote\",\n \"note\",\n \"msg\",\n \"seen\",\n \"updated\",\n];\n\nconst WORDS =\n (\"bellwether cinder driftwood ember fathom girder hearth ingot jetty keystone \" +\n \"lodestar mantle nectar obelisk parapet quiver rampart sextant tallow undertow vellum \" +\n \"wainscot xenon yardarm zenith almanac bramble copse dovetail escarpment foxglove gantry \" +\n \"harrow inglenook kestrel limber mordant nutmeg oriel pallet quarry ridgeline\")\n .split(\" \");\n\n/* ---------- plumbing ------------------------------------------------------ */\n\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${G} (\n ord INTEGER, slug TEXT PRIMARY KEY, first TEXT, last TEXT, password TEXT,\n admin TEXT, met TEXT, org TEXT, lane TEXT, tier TEXT, going TEXT, prob TEXT,\n arrive TEXT, link TEXT, run TEXT, sessions TEXT, namevote TEXT,\n note TEXT, msg TEXT, seen TEXT, updated TEXT)`);\n // Older tables predate these columns; adding one that exists throws, harmlessly.\n for (const col of [\"tier\", \"note\", \"msg\"]) {\n try {\n await sqlite.execute(`ALTER TABLE ${G} ADD COLUMN ${col} TEXT`);\n } catch (_) {}\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${S} (\n name TEXT PRIMARY KEY, by TEXT, host TEXT)`);\n}\n\nfunction objs(res: any) {\n const cols = res.columns as string[];\n return (res.rows as any[][]).map((r) => {\n const o: any = {};\n cols.forEach((c, i) => {\n o[c] = r[i] === null ? \"\" : r[i];\n });\n return o;\n });\n}\n\nconst guests = async () =>\n objs(await sqlite.execute(`SELECT * FROM ${G} ORDER BY ord`));\nconst sessions = async () =>\n objs(await sqlite.execute(`SELECT * FROM ${S} ORDER BY rowid`));\n\nasync function setField(slug: string, col: string, value: any) {\n if (!GCOLS.includes(col)) return;\n await sqlite.execute({\n sql: `UPDATE ${G} SET ${col} = ? WHERE slug = ?`,\n args: [value, slug],\n });\n}\n\nconst clean = (v: any, max = 300) =>\n String(v == null ? \"\" : v).replace(/[\\r\\n\\t]+/g, \" \").trim().slice(0, max);\n\n/** Same, but a message to the host is allowed its paragraphs. */\nconst cleanLines = (v: any, max = 2000) =>\n String(v == null ? \"\" : v).replace(/\\r/g, \"\").replace(/\\t/g, \" \")\n .replace(/\\n{3,}/g, \"\\n\\n\").trim().slice(0, max);\n\nconst num = (v: any) => {\n if (v === \"\" || v == null) return \"\";\n const n = Math.round(Number(v));\n return isNaN(n) ? \"\" : String(Math.max(0, Math.min(100, n)));\n};\n\nconst isYes = (v: any) => v === true || v === \"yes\";\n\n/* ---------- shaping ------------------------------------------------------- */\n\nfunction parseSessions(v: any) {\n try {\n return JSON.parse(v || \"{}\") || {};\n } catch {\n return {};\n }\n}\n\n/** What every signed-in guest may see about everyone else. No passwords. */\nfunction publicCard(g: any) {\n return {\n slug: g.slug,\n first: g.first,\n last: g.last,\n met: g.met,\n org: g.org,\n link: g.link,\n going: g.going,\n prob: g.prob === \"\" ? null : Number(g.prob),\n run: g.run,\n sessions: parseSessions(g.sessions),\n namevote: g.namevote || \"\",\n note: g.note || \"\",\n seen: isYes(g.seen),\n };\n}\n\n/** Everything, for the one admin. */\nfunction adminRow(g: any) {\n const c: any = publicCard(g);\n c.password = g.password;\n c.lane = g.lane || \"invited\";\n c.tier = g.tier == null ? \"\" : String(g.tier);\n c.msg = g.msg || \"\"; // never leaves adminRow\n c.arrive = g.arrive;\n c.order = Number(g.ord) || 0;\n c.admin = isYes(g.admin);\n return c;\n}\n\nasync function payload(me: any, all: any[], isAdmin: boolean) {\n const sess = (await sessions()).map((s) => ({\n name: s.name,\n by: s.by,\n host: isYes(s.host),\n }));\n const out: any = {\n ok: true,\n slug: me.slug,\n admin: isAdmin,\n me: adminRow(me),\n sessions: sess,\n guests: all.filter((g) => (g.lane || \"invited\") === \"invited\").map(\n publicCard,\n ),\n };\n if (isAdmin) {\n out.roster = [...all].sort((a, b) =>\n (Number(a.ord) || 0) - (Number(b.ord) || 0)\n ).map(adminRow);\n }\n return out;\n}\n\nconst byPassword = (all: any[], pw: any) => {\n const p = String(pw || \"\").trim().toLowerCase();\n if (!p) return null;\n return all.find((g) => String(g.password || \"\").trim().toLowerCase() === p) ||\n null;\n};\n\n/* ---------- entry point --------------------------------------------------- */\n\nconst HEADERS = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Headers\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n};\n\nconst json = (o: any) => new Response(JSON.stringify(o), { headers: HEADERS });\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: HEADERS });\n await init();\n\n if (req.method !== \"POST\") return json({ ok: true, hello: \"confluxcon\" });\n\n let body: any = {};\n try {\n body = JSON.parse(await req.text() || \"{}\");\n } catch {\n return json({ ok: false, error: \"bad_json\" });\n }\n\n let all = await guests();\n\n /* Seeding. Open only while the table is empty; after that it takes the admin\n password and an explicit force, because it drops everything. */\n if (body.action === \"seed\") {\n const data = body.data || {};\n if (!data.guests?.length) return json({ ok: false, error: \"no_guests\" });\n if (all.length) {\n const who = byPassword(all, body.password);\n if (!who || !isYes(who.admin) || body.force !== true) {\n return json({ ok: false, error: \"already_seeded\" });\n }\n }\n await sqlite.execute(`DELETE FROM ${G}`);\n await sqlite.execute(`DELETE FROM ${S}`);\n for (const [i, g] of data.guests.entries()) {\n await sqlite.execute({\n sql:\n `INSERT INTO ${G} (ord,slug,first,last,password,admin,met,org,lane,tier,\n going,prob,arrive,link,run,sessions,namevote,note,msg,seen,updated)\n VALUES (?,?,?,?,?,?,?,?,?,?,'','','',?,'','{}','','','','','')`,\n args: [\n i + 1,\n g.slug,\n g.first,\n g.last,\n g.password,\n g.admin ? \"yes\" : \"\",\n g.met || \"\",\n g.org || \"\",\n g.lane || \"invited\",\n String(g.tier ?? \"\"),\n g.link || \"\",\n ],\n });\n }\n for (const n of (data.sessions || [])) {\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO ${S} (name,by,host) VALUES (?,'','')`,\n args: [n],\n });\n }\n return json({\n ok: true,\n seeded: data.guests.length,\n sessions: (data.sessions || []).length,\n });\n }\n\n const me0 = byPassword(all, body.password);\n if (!me0) return json({ ok: false, error: \"bad_password\" });\n const isAdmin = isYes(me0.admin);\n const slug = me0.slug;\n\n const reread = async () => {\n all = await guests();\n return all.find((g) => g.slug === slug);\n };\n\n switch (body.action) {\n case \"auth\":\n return json(await payload(me0, all, isAdmin));\n\n /* a guest editing their own RSVP */\n case \"save\": {\n const p = body.patch || {};\n const fields: Record = {\n first: clean(p.first, 40),\n last: clean(p.last, 40),\n met: clean(p.met, 60),\n org: clean(p.org, 60),\n arrive: clean(p.arrive, 40),\n link: clean(p.link, 200),\n going: [\"yes\", \"likely\", \"maybe\", \"no\", \"\"].includes(p.going)\n ? p.going\n : me0.going,\n prob: num(p.prob),\n namevote: [\"confluxcon\", \"fluxcon\", \"\"].includes(p.namevote)\n ? p.namevote\n : me0.namevote,\n note: clean(p.note, 140),\n msg: cleanLines(p.msg, 2000),\n };\n for (const k in fields) await setField(slug, k, fields[k]);\n if (p.sessions) {\n await setField(\n slug,\n \"sessions\",\n JSON.stringify(p.sessions).slice(0, 4000),\n );\n }\n await setField(slug, \"seen\", \"yes\");\n await setField(slug, \"updated\", new Date().toISOString());\n const me = await reread();\n return json(await payload(me, all, isAdmin));\n }\n\n /* proposing a session — it joins the one shared list */\n case \"addSession\": {\n const name = clean(body.name, 60);\n if (!name) return json({ ok: false, error: \"no_name\" });\n const existing = await sessions();\n if (\n !existing.some((s) =>\n String(s.name).toLowerCase() === name.toLowerCase()\n )\n ) {\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO ${S} (name,by,host) VALUES (?,?,?)`,\n args: [name, me0.first, body.host ? \"yes\" : \"\"],\n });\n }\n return json(await payload(me0, all, isAdmin));\n }\n\n case \"dropSession\": {\n const target = clean(body.name, 60).toLowerCase();\n const list = await sessions();\n const row = list.find((s) => String(s.name).toLowerCase() === target);\n if (row && (String(row.by || \"\") === String(me0.first) || isAdmin)) {\n await sqlite.execute({\n sql: `DELETE FROM ${S} WHERE name = ?`,\n args: [row.name],\n });\n }\n return json(await payload(me0, all, isAdmin));\n }\n\n /* everything below here is Jacob only */\n case \"admin\": {\n if (!isAdmin) return json({ ok: false, error: \"not_admin\" });\n\n if (body.op === \"set\") {\n const g = all.find((x) => x.slug === body.slug);\n if (!g) return json({ ok: false, error: \"no_guest\" });\n let field = body.field === \"pw\" ? \"password\" : body.field;\n const allowed = [\n \"first\",\n \"last\",\n \"password\",\n \"met\",\n \"org\",\n \"lane\",\n \"tier\",\n \"going\",\n \"prob\",\n \"arrive\",\n \"link\",\n \"run\",\n \"namevote\",\n \"note\",\n \"msg\",\n ];\n if (!allowed.includes(field)) {\n return json({ ok: false, error: \"bad_field\" });\n }\n\n // A password names a person, so two guests may never share one.\n if (field === \"password\") {\n const want = clean(body.value, 60).toLowerCase();\n if (!want) return json({ ok: false, error: \"password_empty\" });\n if (\n all.some((x) =>\n x.slug !== g.slug &&\n String(x.password || \"\").trim().toLowerCase() === want\n )\n ) {\n return json({ ok: false, error: \"password_taken\" });\n }\n }\n await setField(\n g.slug,\n field,\n field === \"prob\" ? num(body.value) : clean(body.value, 200),\n );\n }\n\n if (body.op === \"add\") {\n const nm = clean(body.name, 80);\n if (!nm) return json({ ok: false, error: \"no_name\" });\n const parts = nm.split(/\\s+/);\n const taken = new Set(all.map((x) => x.slug));\n const pwTaken = new Set(\n all.map((x) => String(x.password).toLowerCase()),\n );\n const maxOrder = all.reduce(\n (m, x) => Math.max(m, Number(x.ord) || 0),\n 0,\n );\n let s = parts[0].toLowerCase().replace(/[^a-z]/g, \"\");\n if (taken.has(s)) s = nm.toLowerCase().replace(/[^a-z]+/g, \"\");\n let n = 2;\n while (taken.has(s)) {\n s = parts[0].toLowerCase().replace(/[^a-z]/g, \"\") + n++;\n }\n const pw = WORDS.find((w) => !pwTaken.has(w)) ||\n \"spare\" + (all.length + 1);\n await sqlite.execute({\n sql:\n `INSERT INTO ${G} (ord,slug,first,last,password,admin,met,org,lane,tier,\n going,prob,arrive,link,run,sessions,namevote,note,msg,seen,updated)\n VALUES (?,?,?,?,?,'',?,?,'prospect',?,'','','','','{}','','','','','')`,\n args: [\n maxOrder + 1,\n s,\n parts[0],\n parts.slice(1).join(\" \"),\n pw,\n clean(body.met, 60),\n clean(body.org, 60),\n clean(body.tier, 4),\n ],\n });\n }\n\n if (body.op === \"remove\") {\n const g = all.find((x) => x.slug === body.slug);\n if (!g) return json({ ok: false, error: \"no_guest\" });\n if (g.slug === slug) {\n return json({ ok: false, error: \"cannot_remove_self\" });\n }\n if (isYes(g.admin)) {\n return json({ ok: false, error: \"cannot_remove_admin\" });\n }\n await sqlite.execute({\n sql: `DELETE FROM ${G} WHERE slug = ?`,\n args: [g.slug],\n });\n }\n\n if (body.op === \"move\") {\n const lane = all.filter((x) => (x.lane || \"invited\") === body.lane)\n .sort((a, b) => (Number(a.ord) || 0) - (Number(b.ord) || 0));\n const at = lane.findIndex((x) => x.slug === body.slug);\n const to = body.dir === \"up\" ? at - 1 : at + 1;\n if (at >= 0 && to >= 0 && to < lane.length) {\n const a = lane[at], b = lane[to];\n await setField(a.slug, \"ord\", Number(b.ord) || 0);\n await setField(b.slug, \"ord\", Number(a.ord) || 0);\n }\n }\n\n const me = await reread();\n return json(await payload(me, all, isAdmin));\n }\n }\n\n return json({ ok: false, error: \"unknown_action\" });\n}","/**\n * confluxcon — the backend, on Val Town.\n *\n * SETUP (once, about two minutes)\n * 1. val.town ▸ sign in with GitHub ▸ New ▸ HTTP val.\n * 2. Delete what's there, paste this whole file in. It saves as you type.\n * 3. Copy the val's URL (the .web.val.run one, top right).\n * 4. Hand that URL over; seeding happens over HTTP, no pasting.\n *\n * The database is Val Town's SQLite. Guests are rows; a save writes one row,\n * so two people RSVPing at the same moment can't overwrite each other.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\n/* Bumped whenever this file changes, so a plain GET on the val says which\n version is actually pasted in. */\nconst BUILD = \"2026-09-03 · details, log, rsvped\";\n\nconst G = \"confluxcon_guests_v1\";\nconst S = \"confluxcon_sessions_v1\";\nconst L = \"confluxcon_log_v1\";\n\nconst GCOLS = [\n \"ord\",\n \"slug\",\n \"first\",\n \"last\",\n \"password\",\n \"admin\",\n \"met\",\n \"org\",\n \"lane\",\n \"tier\",\n \"going\",\n \"prob\",\n \"arrive\",\n \"link\",\n \"run\",\n \"sessions\",\n \"namevote\",\n \"note\",\n \"msg\",\n \"pay\",\n \"seen\",\n \"updated\",\n \"rsvped\",\n];\n\nconst WORDS =\n (\"bellwether cinder driftwood ember fathom girder hearth ingot jetty keystone \" +\n \"lodestar mantle nectar obelisk parapet quiver rampart sextant tallow undertow vellum \" +\n \"wainscot xenon yardarm zenith almanac bramble copse dovetail escarpment foxglove gantry \" +\n \"harrow inglenook kestrel limber mordant nutmeg oriel pallet quarry ridgeline\")\n .split(\" \");\n\n/* ---------- plumbing ------------------------------------------------------ */\n\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${G} (\n ord INTEGER, slug TEXT PRIMARY KEY, first TEXT, last TEXT, password TEXT,\n admin TEXT, met TEXT, org TEXT, lane TEXT, tier TEXT, going TEXT, prob TEXT,\n arrive TEXT, link TEXT, run TEXT, sessions TEXT, namevote TEXT,\n note TEXT, msg TEXT, pay TEXT, seen TEXT, updated TEXT)`);\n // Older tables predate these columns; adding one that exists throws, harmlessly.\n for (const col of [\"tier\", \"note\", \"msg\", \"pay\", \"rsvped\"]) {\n try {\n await sqlite.execute(`ALTER TABLE ${G} ADD COLUMN ${col} TEXT`);\n } catch (_) {}\n }\n /* \"rsvped\" is when someone first answered, which is the order the guest wall\n reads in. Anyone who answered before the column existed gets their last\n edit instead — the best guess available, and only ever set once. */\n try {\n await sqlite.execute(`UPDATE ${G} SET rsvped = updated\n WHERE (rsvped IS NULL OR rsvped = '') AND going <> '' AND updated <> ''`);\n } catch (_) {}\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${S} (\n name TEXT PRIMARY KEY, by TEXT, host TEXT, descr TEXT, sched TEXT)`);\n // Same story as the guest table: older session tables predate these two.\n // \"descr\", not \"desc\" — DESC is a keyword SQLite won't take bare.\n for (const col of [\"descr\", \"sched\"]) {\n try {\n await sqlite.execute(`ALTER TABLE ${S} ADD COLUMN ${col} TEXT`);\n } catch (_) {}\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${L} (\n id INTEGER PRIMARY KEY AUTOINCREMENT, at TEXT, who TEXT, what TEXT)`);\n}\n\n/* ---------- the log -------------------------------------------------------\n Every write leaves one line behind, so the console can show what everyone\n has been doing. Read by the admin only; nothing here is shown to guests. */\n\nconst full = (g: any) => `${g.first || \"\"} ${g.last || \"\"}`.trim() || g.slug;\n\nasync function log(who: string, what: string) {\n if (!what) return;\n try {\n await sqlite.execute({\n sql: `INSERT INTO ${L} (at, who, what) VALUES (?, ?, ?)`,\n args: [new Date().toISOString(), clean(who, 60), clean(what, 400)],\n });\n } catch (_) { /* a log that fails must never fail the write it describes */ }\n}\n\nconst VISIT = \"opened the site\";\n\n/** Opening the site writes one line, not one per refresh. */\nasync function logVisit(who: string) {\n try {\n const res = await sqlite.execute({\n sql: `SELECT at, what FROM ${L} WHERE who = ? ORDER BY id DESC LIMIT 1`,\n args: [clean(who, 60)],\n });\n const last: any = (res.rows as any[][])[0];\n if (\n last && String(last[1]) === VISIT &&\n Date.now() - Date.parse(String(last[0])) < 30 * 60 * 1000\n ) return;\n } catch (_) {}\n await log(who, VISIT);\n}\n\n/** Values go in the log short, whatever their length in the sheet. */\nconst brief = (v: any) => {\n const t = String(v == null ? \"\" : v).replace(/\\s+/g, \" \").trim();\n return !t ? \"\\u2014\" : t.length > 44 ? t.slice(0, 43) + \"\\u2026\" : t;\n};\n\nfunction objs(res: any) {\n const cols = res.columns as string[];\n return (res.rows as any[][]).map((r) => {\n const o: any = {};\n cols.forEach((c, i) => {\n o[c] = r[i] === null ? \"\" : r[i];\n });\n return o;\n });\n}\n\nconst guests = async () =>\n objs(await sqlite.execute(`SELECT * FROM ${G} ORDER BY ord`));\nconst sessions = async () =>\n objs(await sqlite.execute(`SELECT * FROM ${S} ORDER BY rowid`));\n\nasync function setField(slug: string, col: string, value: any) {\n if (!GCOLS.includes(col)) return;\n await sqlite.execute({\n sql: `UPDATE ${G} SET ${col} = ? WHERE slug = ?`,\n args: [value, slug],\n });\n}\n\nconst clean = (v: any, max = 300) =>\n String(v == null ? \"\" : v).replace(/[\\r\\n\\t]+/g, \" \").trim().slice(0, max);\n\n/** Digits and one point, for a dollar figure. */\nconst money = (v: any) => {\n const t = String(v == null ? \"\" : v).replace(/[^0-9.]/g, \"\").slice(0, 9);\n return t === \"\" || isNaN(Number(t)) ? \"\" : String(Math.max(0, Number(t)));\n};\n\n/** Same as clean, but a message to the host is allowed its paragraphs. */\nconst cleanLines = (v: any, max = 2000) =>\n String(v == null ? \"\" : v).replace(/\\r/g, \"\").replace(/\\t/g, \" \")\n .replace(/\\n{3,}/g, \"\\n\\n\").trim().slice(0, max);\n\nconst num = (v: any) => {\n if (v === \"\" || v == null) return \"\";\n const n = Math.round(Number(v));\n return isNaN(n) ? \"\" : String(Math.max(0, Math.min(100, n)));\n};\n\nconst isYes = (v: any) => v === true || v === \"yes\";\n\n/* ---------- shaping ------------------------------------------------------- */\n\nfunction parseSessions(v: any) {\n try {\n return JSON.parse(v || \"{}\") || {};\n } catch {\n return {};\n }\n}\n\n/** What every signed-in guest may see about everyone else. No passwords. */\nfunction publicCard(g: any) {\n return {\n slug: g.slug,\n first: g.first,\n last: g.last,\n met: g.met,\n org: g.org,\n link: g.link,\n going: g.going,\n prob: g.prob === \"\" ? null : Number(g.prob),\n run: g.run,\n sessions: parseSessions(g.sessions),\n namevote: g.namevote || \"\",\n note: g.note || \"\",\n rsvped: g.rsvped || g.updated || \"\",\n seen: isYes(g.seen),\n };\n}\n\n/** Everything, for the one admin. */\nfunction adminRow(g: any) {\n const c: any = publicCard(g);\n c.password = g.password;\n c.lane = g.lane || \"invited\";\n c.tier = g.tier == null ? \"\" : String(g.tier);\n c.msg = g.msg || \"\"; // never leaves adminRow\n c.pay = g.pay || \"\"; // nor does this\n c.arrive = g.arrive;\n c.order = Number(g.ord) || 0;\n c.admin = isYes(g.admin);\n return c;\n}\n\nasync function payload(me: any, all: any[], isAdmin: boolean) {\n /* Whoever put a session up may rewrite its details, and so may the host —\n which is what lets Jacob edit the four that were seeded with no owner. */\n const owns = (s: any) =>\n isAdmin || (!!s.by && String(s.by) === String(me.first));\n const sess = (await sessions()).map((s) => ({\n name: s.name,\n by: s.by,\n host: isYes(s.host),\n descr: s.descr || \"\", // shown to everyone\n sched: owns(s) ? (s.sched || \"\") : \"\", // only to whoever runs it\n mine: owns(s),\n }));\n const out: any = {\n ok: true,\n slug: me.slug,\n admin: isAdmin,\n me: adminRow(me),\n sessions: sess,\n guests: all.filter((g) => (g.lane || \"invited\") === \"invited\").map(\n publicCard,\n ),\n };\n if (isAdmin) {\n out.roster = [...all].sort((a, b) =>\n (Number(a.ord) || 0) - (Number(b.ord) || 0)\n ).map(adminRow);\n }\n return out;\n}\n\nconst byPassword = (all: any[], pw: any) => {\n const p = String(pw || \"\").trim().toLowerCase();\n if (!p) return null;\n return all.find((g) => String(g.password || \"\").trim().toLowerCase() === p) ||\n null;\n};\n\n/* ---------- entry point --------------------------------------------------- */\n\nconst HEADERS = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Headers\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n};\n\nconst json = (o: any) => new Response(JSON.stringify(o), { headers: HEADERS });\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: HEADERS });\n await init();\n\n if (req.method !== \"POST\") {\n return json({ ok: true, hello: \"confluxcon\", build: BUILD });\n }\n\n let body: any = {};\n try {\n body = JSON.parse(await req.text() || \"{}\");\n } catch {\n return json({ ok: false, error: \"bad_json\" });\n }\n\n let all = await guests();\n\n /* Seeding. Open only while the table is empty; after that it takes the admin\n password and an explicit force, because it drops everything. */\n if (body.action === \"seed\") {\n const data = body.data || {};\n if (!data.guests?.length) return json({ ok: false, error: \"no_guests\" });\n if (all.length) {\n const who = byPassword(all, body.password);\n if (!who || !isYes(who.admin) || body.force !== true) {\n return json({ ok: false, error: \"already_seeded\" });\n }\n }\n await sqlite.execute(`DELETE FROM ${G}`);\n await sqlite.execute(`DELETE FROM ${S}`);\n for (const [i, g] of data.guests.entries()) {\n await sqlite.execute({\n sql:\n `INSERT INTO ${G} (ord,slug,first,last,password,admin,met,org,lane,tier,\n going,prob,arrive,link,run,sessions,namevote,note,msg,pay,seen,updated)\n VALUES (?,?,?,?,?,?,?,?,?,?,'','','',?,'','{}','','','','','','')`,\n args: [\n i + 1,\n g.slug,\n g.first,\n g.last,\n g.password,\n g.admin ? \"yes\" : \"\",\n g.met || \"\",\n g.org || \"\",\n g.lane || \"invited\",\n String(g.tier ?? \"\"),\n g.link || \"\",\n ],\n });\n }\n for (const n of (data.sessions || [])) {\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO ${S} (name,by,host) VALUES (?,'','')`,\n args: [n],\n });\n }\n return json({\n ok: true,\n seeded: data.guests.length,\n sessions: (data.sessions || []).length,\n });\n }\n\n const me0 = byPassword(all, body.password);\n if (!me0) return json({ ok: false, error: \"bad_password\" });\n const isAdmin = isYes(me0.admin);\n const slug = me0.slug;\n\n const reread = async () => {\n all = await guests();\n return all.find((g) => g.slug === slug);\n };\n\n switch (body.action) {\n case \"auth\":\n await logVisit(full(me0));\n return json(await payload(me0, all, isAdmin));\n\n /* a guest editing their own RSVP */\n case \"save\": {\n const p = body.patch || {};\n const fields: Record = {\n first: clean(p.first, 40),\n last: clean(p.last, 40),\n met: clean(p.met, 60),\n org: clean(p.org, 60),\n arrive: clean(p.arrive, 40),\n link: clean(p.link, 200),\n going: [\"yes\", \"likely\", \"maybe\", \"no\", \"\"].includes(p.going)\n ? p.going\n : me0.going,\n prob: num(p.prob),\n namevote: [\"confluxcon\", \"fluxcon\", \"\"].includes(p.namevote)\n ? p.namevote\n : me0.namevote,\n note: clean(p.note, 140),\n msg: cleanLines(p.msg, 2000),\n pay: money(p.pay),\n };\n const LABEL: Record = {\n first: \"first name\",\n last: \"last name\",\n met: \"how they know Jacob\",\n org: \"affiliation\",\n arrive: \"arrival\",\n link: \"link\",\n going: \"answer\",\n prob: \"probability\",\n namevote: \"name vote\",\n note: \"public comment\",\n msg: \"private note\",\n pay: \"willingness to pay\",\n };\n const changed: string[] = [];\n for (const k in fields) {\n if (String(me0[k] ?? \"\") === String(fields[k] ?? \"\")) continue;\n changed.push(\n `${LABEL[k] || k}: ${brief(me0[k])} \\u2192 ${brief(fields[k])}`,\n );\n }\n for (const k in fields) await setField(slug, k, fields[k]);\n if (p.sessions) {\n const was = parseSessions(me0.sessions);\n for (\n const k of new Set([...Object.keys(was), ...Object.keys(p.sessions)])\n ) {\n if (String(was[k] || \"\") === String(p.sessions[k] || \"\")) continue;\n changed.push(\n `${brief(k)}: ${brief(was[k])} \\u2192 ${brief(p.sessions[k])}`,\n );\n }\n await setField(\n slug,\n \"sessions\",\n JSON.stringify(p.sessions).slice(0, 4000),\n );\n }\n await log(full(me0), changed.join(\"; \"));\n await setField(slug, \"seen\", \"yes\");\n const now = new Date().toISOString();\n // Stamped the first time an answer lands, and never moved after that.\n if (fields.going && !String(me0.rsvped || \"\")) {\n await setField(slug, \"rsvped\", now);\n }\n await setField(slug, \"updated\", now);\n const me = await reread();\n return json(await payload(me, all, isAdmin));\n }\n\n /* proposing a session — it joins the one shared list */\n case \"addSession\": {\n const name = clean(body.name, 60);\n if (!name) return json({ ok: false, error: \"no_name\" });\n const existing = await sessions();\n if (\n !existing.some((s) =>\n String(s.name).toLowerCase() === name.toLowerCase()\n )\n ) {\n await sqlite.execute({\n sql:\n `INSERT OR IGNORE INTO ${S} (name,by,host,descr,sched) VALUES (?,?,?,?,?)`,\n args: [\n name,\n me0.first,\n body.host ? \"yes\" : \"\",\n cleanLines(body.descr, 600),\n cleanLines(body.sched, 600),\n ],\n });\n await log(\n full(me0),\n `added the activity \\u201c${name}\\u201d${\n body.host ? \", and will run it\" : \"\"\n }`,\n );\n }\n return json(await payload(me0, all, isAdmin));\n }\n\n /* the blurb and the scheduling notes, after the fact */\n case \"editSession\": {\n const target = clean(body.name, 60).toLowerCase();\n const list = await sessions();\n const row = list.find((s) => String(s.name).toLowerCase() === target);\n if (!row) return json({ ok: false, error: \"no_session\" });\n const owns = isAdmin ||\n (!!row.by && String(row.by) === String(me0.first));\n if (!owns) return json({ ok: false, error: \"not_yours\" });\n for (const col of [\"descr\", \"sched\"]) {\n if (!(col in body)) continue;\n const value = cleanLines(body[col], 600);\n if (value === String(row[col] || \"\")) continue;\n await sqlite.execute({\n sql: `UPDATE ${S} SET ${col} = ? WHERE name = ?`,\n args: [value, row.name],\n });\n await log(\n full(me0),\n `${col === \"descr\" ? \"description\" : \"scheduling notes\"} for ` +\n `\\u201c${row.name}\\u201d: ${brief(row[col])} \\u2192 ${\n brief(value)\n }`,\n );\n }\n return json(await payload(me0, all, isAdmin));\n }\n\n case \"dropSession\": {\n const target = clean(body.name, 60).toLowerCase();\n const list = await sessions();\n const row = list.find((s) => String(s.name).toLowerCase() === target);\n if (row && (String(row.by || \"\") === String(me0.first) || isAdmin)) {\n await sqlite.execute({\n sql: `DELETE FROM ${S} WHERE name = ?`,\n args: [row.name],\n });\n await log(full(me0), `removed the activity \\u201c${row.name}\\u201d`);\n }\n return json(await payload(me0, all, isAdmin));\n }\n\n /* everything below here is Jacob only */\n case \"admin\": {\n if (!isAdmin) return json({ ok: false, error: \"not_admin\" });\n\n if (body.op === \"set\") {\n const g = all.find((x) => x.slug === body.slug);\n if (!g) return json({ ok: false, error: \"no_guest\" });\n let field = body.field === \"pw\" ? \"password\" : body.field;\n const allowed = [\n \"first\",\n \"last\",\n \"password\",\n \"met\",\n \"org\",\n \"lane\",\n \"tier\",\n \"going\",\n \"prob\",\n \"arrive\",\n \"link\",\n \"run\",\n \"namevote\",\n \"note\",\n \"msg\",\n \"pay\",\n ];\n if (!allowed.includes(field)) {\n return json({ ok: false, error: \"bad_field\" });\n }\n\n // A password names a person, so two guests may never share one.\n if (field === \"password\") {\n const want = clean(body.value, 60).toLowerCase();\n if (!want) return json({ ok: false, error: \"password_empty\" });\n if (\n all.some((x) =>\n x.slug !== g.slug &&\n String(x.password || \"\").trim().toLowerCase() === want\n )\n ) {\n return json({ ok: false, error: \"password_taken\" });\n }\n }\n // The console edits the long fields in a wrapping box now, so a note to\n // the host must not be flattened to one 200-character line on the way in.\n const value = field === \"prob\"\n ? num(body.value)\n : field === \"msg\"\n ? cleanLines(body.value, 2000)\n : clean(body.value, 200);\n if (value !== String(g[field] ?? \"\")) {\n await setField(g.slug, field, value);\n await log(\n full(me0),\n `set ${field} for ${full(g)}: ${brief(g[field])} \\u2192 ${\n brief(value)\n }`,\n );\n }\n }\n\n if (body.op === \"add\") {\n const nm = clean(body.name, 80);\n if (!nm) return json({ ok: false, error: \"no_name\" });\n const parts = nm.split(/\\s+/);\n const taken = new Set(all.map((x) => x.slug));\n const pwTaken = new Set(\n all.map((x) => String(x.password).toLowerCase()),\n );\n const maxOrder = all.reduce(\n (m, x) => Math.max(m, Number(x.ord) || 0),\n 0,\n );\n let s = parts[0].toLowerCase().replace(/[^a-z]/g, \"\");\n if (taken.has(s)) s = nm.toLowerCase().replace(/[^a-z]+/g, \"\");\n let n = 2;\n while (taken.has(s)) {\n s = parts[0].toLowerCase().replace(/[^a-z]/g, \"\") + n++;\n }\n const pw = WORDS.find((w) => !pwTaken.has(w)) ||\n \"spare\" + (all.length + 1);\n await sqlite.execute({\n sql:\n `INSERT INTO ${G} (ord,slug,first,last,password,admin,met,org,lane,tier,\n going,prob,arrive,link,run,sessions,namevote,note,msg,pay,seen,updated)\n VALUES (?,?,?,?,?,'',?,?,'prospect',?,'','','','','{}','','','','','','')`,\n args: [\n maxOrder + 1,\n s,\n parts[0],\n parts.slice(1).join(\" \"),\n pw,\n clean(body.met, 60),\n clean(body.org, 60),\n clean(body.tier, 4),\n ],\n });\n await log(full(me0), `added ${nm} to the maybe pile`);\n }\n\n if (body.op === \"remove\") {\n const g = all.find((x) => x.slug === body.slug);\n if (!g) return json({ ok: false, error: \"no_guest\" });\n if (g.slug === slug) {\n return json({ ok: false, error: \"cannot_remove_self\" });\n }\n if (isYes(g.admin)) {\n return json({ ok: false, error: \"cannot_remove_admin\" });\n }\n await sqlite.execute({\n sql: `DELETE FROM ${G} WHERE slug = ?`,\n args: [g.slug],\n });\n await log(full(me0), `removed ${full(g)} from the list`);\n }\n\n if (body.op === \"move\") {\n const lane = all.filter((x) => (x.lane || \"invited\") === body.lane)\n .sort((a, b) => (Number(a.ord) || 0) - (Number(b.ord) || 0));\n const at = lane.findIndex((x) => x.slug === body.slug);\n const to = body.dir === \"up\" ? at - 1 : at + 1;\n if (at >= 0 && to >= 0 && to < lane.length) {\n const a = lane[at], b = lane[to];\n await setField(a.slug, \"ord\", Number(b.ord) || 0);\n await setField(b.slug, \"ord\", Number(a.ord) || 0);\n await log(\n full(me0),\n `moved ${full(a)} ${body.dir === \"up\" ? \"up\" : \"down\"} the list`,\n );\n }\n }\n\n const me = await reread();\n return json(await payload(me, all, isAdmin));\n }\n\n /* what everyone has been doing — the console's live log */\n case \"log\": {\n if (!isAdmin) return json({ ok: false, error: \"not_admin\" });\n const res = await sqlite.execute(\n `SELECT id, at, who, what FROM ${L} ORDER BY id DESC LIMIT 200`,\n );\n return json({ ok: true, log: objs(res) });\n }\n }\n\n return json({ ok: false, error: \"unknown_action\" });\n}","createdAt",["D",1788503965033],"branchVersion","branchId","a6081b17-be19-4cf0-a9cb-c22007b2eaa4","id","abc058ff-5274-489b-bdf8-c89a64220eee","confluxcon",["D",1788404870127],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","432168e9-61f0-48c7-837a-1d1b852d7edb","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a06537-b182-70ec-a8a7-a330bdc9abac","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",11,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","conflux","handle","displayName","Jacob Cohen","avatar","https://avatars.githubusercontent.com/u/130943810?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":150,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":151,"_80":152,"_82":153,"_84":25},"tree",[145],"files",[145],"counts",{"_134":62,"_135":136,"_137":62,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"957fe091-4198-4678-9150-b003f5ce3e49","parentId","latest",["D",1788503965033],7,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":62,"_144":62},"connections",{"_142":62,"_143":62},"count","unfilledCount","emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":146,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_147":148,"_27":149},["D",1788503965033],"children",[],[28],["D",1788404870127],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_123":187,"_188":189,"_190":191,"_192":25,"_193":25,"_194":25,"_195":58,"_196":-5,"_197":-7,"_198":-7,"_199":62,"_200":25,"_201":25,"_202":-5,"_203":25,"_204":25,"_205":25,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":86,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v8