Comedy Night Vote

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_116":-5,"_20":117,"_22":118,"_119":120,"_121":122,"_25":123,"_24":-5,"_124":-5,"_125":-5,"_126":53,"_127":128,"_129":44,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","danielbeaver","name","untitled-7644","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":-5,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","6969d132-5248-11f1-9e4f-ee650bb23af1","main.ts","fileId","51bd08f6-5248-11f1-a14b-ee650bb23af1","parentId","branchId","51ba1ad8-5248-11f1-a14b-ee650bb23af1","branchVersion",4,"latest",true,"createdAt",["D",1779060638460],3,"fileType","http","content","import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst ADMIN_PASSWORD = \"comedy2026\";\n\n// ── DB SETUP ──────────────────────────────────────────────────────\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS comedians (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n bio TEXT DEFAULT '',\n country TEXT DEFAULT 'Ireland',\n photo TEXT DEFAULT ''\n)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS votes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n comedian_id INTEGER NOT NULL\n)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL\n)`);\nawait sqlite.execute(\n `INSERT OR IGNORE INTO settings (key, value) VALUES ('voting_open', 'false')`,\n);\n\n// ── HELPERS ───────────────────────────────────────────────────────\nasync function getComedians() {\n const r = await sqlite.execute(`SELECT * FROM comedians ORDER BY id ASC`);\n return r.rows.map(([id, name, bio, country, photo]) => ({\n id,\n name,\n bio,\n country,\n photo,\n }));\n}\nasync function getVotes() {\n const r = await sqlite.execute(\n `SELECT comedian_id, COUNT(*) as count FROM votes GROUP BY comedian_id`,\n );\n const out: Record = {};\n r.rows.forEach(([id, count]) => {\n out[Number(id)] = Number(count);\n });\n return out;\n}\nasync function getVotingOpen() {\n const r = await sqlite.execute(\n `SELECT value FROM settings WHERE key='voting_open'`,\n );\n return r.rows[0][0] === \"true\";\n}\n\n// ── ROUTER ────────────────────────────────────────────────────────\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": \"application/json\",\n };\n\n // GET /api/state — full state for polling\n if (req.method === \"GET\" && path === \"/api/state\") {\n const [comedians, votes, votingOpen] = await Promise.all([\n getComedians(),\n getVotes(),\n getVotingOpen(),\n ]);\n return new Response(JSON.stringify({ comedians, votes, votingOpen }), {\n headers: cors,\n });\n }\n\n // POST /api/vote\n if (req.method === \"POST\" && path === \"/api/vote\") {\n const { comedian_id } = await req.json();\n const open = await getVotingOpen();\n if (!open) {\n return new Response(JSON.stringify({ error: \"Voting is closed\" }), {\n status: 403,\n headers: cors,\n });\n }\n await sqlite.execute(`INSERT INTO votes (comedian_id) VALUES (?)`, [\n comedian_id,\n ]);\n return new Response(JSON.stringify({ ok: true }), { headers: cors });\n }\n\n // POST /api/admin — all admin actions require password\n if (req.method === \"POST\" && path === \"/api/admin\") {\n let body: any;\n try {\n body = await req.json();\n } catch (e) {\n return new Response(JSON.stringify({ error: \"Invalid JSON\" }), {\n status: 400,\n headers: cors,\n });\n }\n console.log(\"Admin request body:\", JSON.stringify(body));\n console.log(\"Password match:\", body.password === ADMIN_PASSWORD);\n if (body.password !== ADMIN_PASSWORD) {\n return new Response(JSON.stringify({ error: \"Unauthorized\" }), {\n status: 401,\n headers: cors,\n });\n }\n const { action } = body;\n console.log(\"Action:\", action);\n\n if (action === \"add_comedian\") {\n console.log(\"add_comedian body:\", JSON.stringify(body));\n const name = body.name ? String(body.name).trim() : null;\n const bio = body.bio ? String(body.bio) : \"\";\n const country = body.country ? String(body.country) : \"Ireland\";\n const photo = body.photo ? String(body.photo) : \"\";\n console.log(\"Parsed values:\", { name, bio, country, photo });\n if (!name) {\n return new Response(\n JSON.stringify({ error: \"Name is missing on server\" }),\n { status: 400, headers: cors },\n );\n }\n try {\n await sqlite.execute(\n `INSERT INTO comedians (name,bio,country,photo) VALUES (?,?,?,?)`,\n [name, bio, country, photo],\n );\n return new Response(JSON.stringify({ ok: true }), { headers: cors });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e) }), {\n status: 500,\n headers: cors,\n });\n }\n }\n if (action === \"edit_comedian\") {\n try {\n await sqlite.execute(\n `UPDATE comedians SET name=?,bio=?,country=?,photo=? WHERE id=?`,\n [\n body.name,\n body.bio || \"\",\n body.country || \"Ireland\",\n body.photo || \"\",\n body.id,\n ],\n );\n return new Response(JSON.stringify({ ok: true }), { headers: cors });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e) }), {\n status: 500,\n headers: cors,\n });\n }\n }\n if (action === \"remove_comedian\") {\n try {\n await sqlite.execute(`DELETE FROM comedians WHERE id=?`, [body.id]);\n await sqlite.execute(`DELETE FROM votes WHERE comedian_id=?`, [\n body.id,\n ]);\n return new Response(JSON.stringify({ ok: true }), { headers: cors });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e) }), {\n status: 500,\n headers: cors,\n });\n }\n }\n if (action === \"reset_votes\") {\n try {\n await sqlite.execute(`DELETE FROM votes`);\n return new Response(JSON.stringify({ ok: true }), { headers: cors });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e) }), {\n status: 500,\n headers: cors,\n });\n }\n }\n if (action === \"set_voting\") {\n try {\n await sqlite.execute(\n `UPDATE settings SET value=? WHERE key='voting_open'`,\n [body.open ? \"true\" : \"false\"],\n );\n return new Response(JSON.stringify({ ok: true }), { headers: cors });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e) }), {\n status: 500,\n headers: cors,\n });\n }\n }\n return new Response(JSON.stringify({ error: \"Unknown action\" }), {\n status: 400,\n headers: cors,\n });\n }\n\n // Serve HTML for all other requests\n return new Response(getHTML(), {\n headers: { \"Content-Type\": \"text/html;charset=utf-8\" },\n });\n}\n\n// ── FRONTEND HTML ─────────────────────────────────────────────────\nfunction getHTML(): string {\n return 'Comedy Night Vote' +\n '

Code