\n\n

STRATA-FIT

EULAR Big Data & AI Study Group · 18 September 2026, 17:00 CEST

\n \n

\n\n \n

On screen now

\n\n

We are showing a federated analysis dashboard running on vantage6 across six rheumatology centres. Tell us what you would need from it — or what you think is wrong with it. Everything lands on our screen while we talk.

\n\n

\n \n \n \n \n \n

\n \n

\n \n \n

Free text only — please don't paste patient data. Your note is visible to everyone on this page. Notes stay on the STRATA-FIT board for this session. Leave the name fields empty to stay anonymous.

\n\n

On the board

\n 0 notes\n

Press +1 on anything you agree with — it moves that note up our list.

\n\n \n

\n Passcode\n

\n \n \n

The PRESENTER_TOKEN from the server environment. It is checked on the server and never appears in this page.

\n\n

0notes

0last 5 min

0on the page

0concerns

0collab offers

\n\n

Question on the audience screen

\n \n \n \n

\n\n

\n \n Download JSON\n Download markdown\n

Pull \"Download JSON\" whenever you want a read on the room — paste it into a Claude chat with the summary prompt to get themes, objections and who to follow up with.

\n\n

Raw notes

\n Open big-screen view\n

\n\n \n

STRATA-FIT · the room is saying

\n 0 notes\n

Question on screen

\n\n

\n\n\n\n\n",[140],"a094953a-037c-4b8d-8ff2-af2cfbff0ea3","http.ts",25,["D",1789582241541],"http","// http.ts — the val's HTTP entry point. Same routes as server.js\n// (minus /api/agent, which we dropped along with the summaries),\n// rebuilt on Web-standard Request/Response instead of Node's http\n// module, and on db.ts instead of in-memory state.\n\nimport { readFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport * as db from \"./db.ts\";\nimport { toMarkdown } from \"./markdown.ts\";\n\nconst KINDS = [\"idea\", \"usecase\", \"concern\", \"question\", \"offer\"];\nconst TOKEN = Deno.env.get(\"PRESENTER_TOKEN\") || \"\";\nconst MAX_NOTES = 1000;\n\nfunction json(body: unknown, status = 200): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"content-type\": \"application/json; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\n// Same-length, full-scan comparison — not exploitably timing-sensitive\n// at this traffic scale, and avoids pulling in Node's crypto module.\nfunction sameToken(given: unknown): boolean {\n if (!TOKEN || typeof given !== \"string\" || given.length !== TOKEN.length) {\n return false;\n }\n let diff = 0;\n for (let i = 0; i < TOKEN.length; i++) {\n diff |= given.charCodeAt(i) ^ TOKEN.charCodeAt(i);\n }\n return diff === 0;\n}\n\nfunction clientIp(req: Request): string {\n return (\n req.headers.get(\"x-forwarded-for\")?.split(\",\")[0].trim() ||\n req.headers.get(\"cf-connecting-ip\") ||\n \"unknown\"\n );\n}\n\nasync function readJson(req: Request): Promise {\n try {\n return await req.json();\n } catch {\n return {};\n }\n}\n\nexport default async function (req: Request): Promise {\n if (!TOKEN) {\n return json({ error: \"PRESENTER_TOKEN is not set on this val\" }, 500);\n }\n\n const url = new URL(req.url);\n const ip = clientIp(req);\n\n if (\n req.method === \"GET\" &&\n (url.pathname === \"/\" || url.pathname === \"/index.html\")\n ) {\n const html = await readFile(\"index.html\", import.meta.url);\n return new Response(html, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/api/state\") {\n await db.touchPresence(ip);\n const since = Number(url.searchParams.get(\"since\") || 0);\n const [notes, votes, seq, online, total, prompt] = await Promise.all([\n db.notesSince(since),\n db.votesUpTo(since),\n db.maxSeq(),\n db.onlineCount(),\n db.totalCount(),\n db.getPrompt(),\n ]);\n return json({ notes, votes, seq, prompt, online, total });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/notes\") {\n const okToPost = await db.checkRate(ip, 2500);\n if (!okToPost) {\n return json({ error: \"One at a time — try again in a moment.\" }, 429);\n }\n if ((await db.totalCount()) >= MAX_NOTES) {\n return json({ error: \"The board is full.\" }, 507);\n }\n\n const b = await readJson(req);\n const text = String(b.text || \"\").trim().slice(0, 600);\n if (text.length < 3) {\n return json({ error: \"Add a line of text first.\" }, 400);\n }\n\n const n = await db.addNote({\n id: crypto.randomUUID().slice(0, 8),\n t: Date.now(),\n kind: KINDS.includes(b.kind) ? b.kind : \"idea\",\n text,\n name: String(b.name || \"\").trim().slice(0, 40),\n centre: String(b.centre || \"\").trim().slice(0, 60),\n });\n return json({ ok: true, id: n.id });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/vote\") {\n const b = await readJson(req);\n const votes = await db.castVote(String(b.id || \"\"), ip);\n if (votes === null) return json({ error: \"no such note\" }, 404);\n return json({ ok: true, votes });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/unlock\") {\n const b = await readJson(req);\n return sameToken(b.token)\n ? json({ ok: true })\n : json({ error: \"wrong passcode\" }, 403);\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/prompt\") {\n const b = await readJson(req);\n if (!sameToken(b.token)) return json({ error: \"wrong passcode\" }, 403);\n const prompt = await db.setPrompt(\n String(b.text || \"\").trim().slice(0, 200),\n );\n return json({ ok: true, prompt });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/api/export\") {\n if (!sameToken(url.searchParams.get(\"token\"))) {\n return json({ error: \"wrong passcode\" }, 403);\n }\n const notes = await db.allNotes();\n if (url.searchParams.get(\"format\") === \"md\") {\n return new Response(toMarkdown(notes), {\n headers: {\n \"content-type\": \"text/markdown; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n return json({\n session: \"EULAR Big Data & AI Study Group, 18 September 2026\",\n exported: new Date().toISOString(),\n notes: notes.map((n) => ({\n at: new Date(n.t).toISOString(),\n kind: n.kind,\n votes: n.votes,\n text: n.text,\n name: n.name,\n centre: n.centre,\n })),\n });\n }\n\n return json({ error: \"not found\" }, 404);\n}\n",[148],"6c13aec2-edb3-4033-b33a-4f2fa715d25a","db.ts","ee938882-b1f5-11f1-b8b2-1607ee4eb77e",["D",1789583127113],3,"// db.ts — persistence for the STRATA-FIT board.\n//\n// server.js kept everything in memory (an array, a couple of Maps) and\n// only used notes.jsonl as a replay log on boot, because it was one\n// always-running process. A Val Town HTTP val is NOT always running —\n// the worker can cold-start between requests (10s idle timeout) and\n// wipe any in-memory state. So here, *everything* server.js held in\n// memory has to live in SQLite instead: notes, per-note vote dedup,\n// the \"who's online\" tracker, and the per-IP post rate limit.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nlet ready: Promise | null = null;\n\nexport function ensureSchema(): Promise {\n if (!ready) {\n ready = (async () => {\n await sqlite.execute(`create table if not exists notes (\n seq integer primary key autoincrement,\n id text unique not null,\n t integer not null,\n kind text not null,\n text text not null,\n name text default '',\n centre text default '',\n votes integer default 0\n )`);\n await sqlite.execute(`create table if not exists votes (\n note_id text not null,\n ip text not null,\n primary key (note_id, ip)\n )`);\n await sqlite.execute(`create table if not exists presence (\n ip text primary key,\n last_seen integer not null\n )`);\n await sqlite.execute(`create table if not exists rate_limit (\n ip text primary key,\n last_post integer not null\n )`);\n await sqlite.execute(`create table if not exists state (\n key text primary key,\n value text\n )`);\n })();\n }\n return ready;\n}\n\n// Different std/sqlite versions return rows as arrays or as objects.\n// Normalize to objects so the rest of the code doesn't care.\nfunction rowsAsObjects(result: any): any[] {\n return result.rows.map((row: any) =>\n Array.isArray(row)\n ? Object.fromEntries(\n result.columns.map((c: string, i: number) => [c, row[i]]),\n )\n : row\n );\n}\n\nexport async function addNote(n: {\n id: string;\n t: number;\n kind: string;\n text: string;\n name: string;\n centre: string;\n}) {\n await ensureSchema();\n await sqlite.execute({\n sql:\n `insert into notes (id, t, kind, text, name, centre, votes) values (?, ?, ?, ?, ?, ?, 0)`,\n args: [n.id, n.t, n.kind, n.text, n.name, n.centre],\n });\n const r = await sqlite.execute({\n sql: `select * from notes where id = ?`,\n args: [n.id],\n });\n return rowsAsObjects(r)[0];\n}\n\nexport async function notesSince(seq: number) {\n await ensureSchema();\n const r = await sqlite.execute({\n sql: `select * from notes where seq > ? order by seq asc`,\n args: [seq],\n });\n return rowsAsObjects(r);\n}\n\nexport async function votesUpTo(seq: number) {\n await ensureSchema();\n const r = await sqlite.execute({\n sql: `select id, votes from notes where seq <= ? and votes > 0`,\n args: [seq],\n });\n return rowsAsObjects(r);\n}\n\nexport async function allNotes() {\n await ensureSchema();\n const r = await sqlite.execute(`select * from notes order by seq asc`);\n return rowsAsObjects(r);\n}\n\nexport async function maxSeq(): Promise {\n await ensureSchema();\n const r = await sqlite.execute(\n `select coalesce(max(seq), 0) as m from notes`,\n );\n return Number(rowsAsObjects(r)[0].m);\n}\n\nexport async function totalCount(): Promise {\n await ensureSchema();\n const r = await sqlite.execute(`select count(*) as n from notes`);\n return Number(rowsAsObjects(r)[0].n);\n}\n\n// Returns the new vote count, or null if the note doesn't exist.\n// One vote per (note, ip) — same rule as server.js's in-memory Set,\n// just backed by a unique constraint instead.\nexport async function castVote(\n noteId: string,\n ip: string,\n): Promise {\n await ensureSchema();\n const existing = await sqlite.execute({\n sql: `select votes from notes where id = ?`,\n args: [noteId],\n });\n const rows = rowsAsObjects(existing);\n if (!rows.length) return null;\n try {\n await sqlite.execute({\n sql: `insert into votes (note_id, ip) values (?, ?)`,\n args: [noteId, ip],\n });\n await sqlite.execute({\n sql: `update notes set votes = votes + 1 where id = ?`,\n args: [noteId],\n });\n } catch {\n // already voted — unique constraint rejected it, fall through\n }\n const r = await sqlite.execute({\n sql: `select votes from notes where id = ?`,\n args: [noteId],\n });\n return Number(rowsAsObjects(r)[0].votes);\n}\n\nexport async function touchPresence(ip: string) {\n await ensureSchema();\n await sqlite.execute({\n sql: `insert into presence (ip, last_seen) values (?, ?)\n on conflict(ip) do update set last_seen = excluded.last_seen`,\n args: [ip, Date.now()],\n });\n}\n\nexport async function onlineCount(): Promise {\n await ensureSchema();\n const cutoff = Date.now() - 45000;\n const r = await sqlite.execute({\n sql: `select count(*) as n from presence where last_seen > ?`,\n args: [cutoff],\n });\n return Number(rowsAsObjects(r)[0].n);\n}\n\n// Returns true if this ip is allowed to post now, and records the attempt.\nexport async function checkRate(\n ip: string,\n minGapMs: number,\n): Promise {\n await ensureSchema();\n const r = await sqlite.execute({\n sql: `select last_post from rate_limit where ip = ?`,\n args: [ip],\n });\n const rows = rowsAsObjects(r);\n const last = rows.length ? Number(rows[0].last_post) : 0;\n const now = Date.now();\n if (now - last < minGapMs) return false;\n await sqlite.execute({\n sql: `insert into rate_limit (ip, last_post) values (?, ?)\n on conflict(ip) do update set last_post = excluded.last_post`,\n args: [ip, now],\n });\n return true;\n}\n\nexport async function getPrompt(): Promise<{ text: string; t: number } | null> {\n await ensureSchema();\n const r = await sqlite.execute({\n sql: `select value from state where key = 'prompt'`,\n args: [],\n });\n const rows = rowsAsObjects(r);\n if (!rows.length || !rows[0].value) return null;\n return JSON.parse(rows[0].value as string);\n}\n\nexport async function setPrompt(text: string) {\n await ensureSchema();\n const value = text ? JSON.stringify({ text, t: Date.now() }) : null;\n await sqlite.execute({\n sql: `insert into state (key, value) values ('prompt', ?)\n on conflict(key) do update set value = excluded.value`,\n args: [value],\n });\n return value ? JSON.parse(value) : null;\n}",[155],"pulls",1,"forks","envVars",{"_168":162,"_170":54},"connections",{"_168":54,"_169":54},"count","unfilledCount","emptyCount",{"_20":154,"_13":155,"_123":156,"_125":-5,"_126":21,"_127":30,"_129":50,"_22":185,"_29":158,"_132":133,"_134":159,"_136":38,"_137":-5,"_176":186,"_94":187},{"_20":147,"_13":148,"_123":48,"_125":-5,"_126":21,"_127":149,"_129":50,"_22":182,"_29":144,"_132":151,"_134":152,"_136":38,"_137":-5,"_176":183,"_94":184},{"_20":139,"_13":140,"_123":141,"_125":-5,"_126":21,"_127":142,"_129":50,"_22":179,"_29":144,"_132":106,"_134":145,"_136":38,"_137":-5,"_176":180,"_94":181},{"_20":121,"_13":122,"_123":124,"_125":-5,"_126":21,"_127":128,"_129":50,"_22":175,"_29":131,"_132":133,"_134":135,"_136":38,"_137":-5,"_176":177,"_94":178},["D",1789580761831],"children",[],[122],["D",1789581220008],[],[140],["D",1789582241541],[],[148],["D",1789583127113],[],[155],["D",1789580405959],["D",1789582272237],{"_11":12,"_92":88},{"_11":12,"_85":86,"_87":88,"_45":46,"_89":90,"_91":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_80":-5,"_81":-5,"_82":-5,"_83":14,"_84":12},"ctx",{"_73":-5,"_114":226,"_227":228,"_229":230,"_231":38,"_232":38,"_233":38,"_234":50,"_235":-5,"_236":-7,"_237":-7,"_238":54,"_239":38,"_240":38,"_241":-5,"_242":38,"_243":38,"_244":38,"_245":-5},"ENV",{"_197":198,"_199":200,"_201":26,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","c73f21da490985bff19c279eb0e09db24d688e4f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1