[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_156":157,"_158":159},"routes/_app.x.$handle.$name",{"_98":97,"_32":44,"_106":88,"_26":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":24,"_121":122,"_123":24,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",1,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":29},"file",{"_30":31,"_32":27,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","main.tsx","latestPath","main.http.tsx","fileId","ba6b72c0-ad88-11f1-81e2-1607ee4eb77e","name","fileType","script","content","/**\n * Haptic Tuner — a public poll for the nine semantic haptic names.\n *\n * The web has no semantic haptics: `navigator.vibrate` takes a list of\n * milliseconds and nothing else. This collects, per device, what each of\n * iOS's nine named haptics *should* feel like as one of those lists.\n *\n * Dedupe is two-layered, because neither layer is sufficient alone:\n * - device_id a random id kept in the browser; resubmitting REVISES that\n * row rather than adding one.\n * - ip_hash a salted hash of the client IP, capped at a few devices\n * per network. Never the raw address, and never sent to\n * clients — households and offices legitimately share one.\n */\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst HAPTICS = [\n \"selection\", \"light\", \"soft\", \"medium\", \"rigid\", \"heavy\",\n \"success\", \"warning\", \"error\",\n] as const;\n\nconst PULSE_MIN = 5, PULSE_MAX = 120;\nconst GAP_MIN = 10, GAP_MAX = 180;\nconst MAX_PULSES = 5;\nconst MAX_DEVICES_PER_IP = 3; /* one person, one phone + tablet + laptop */\nconst MAX_ROWS = 5000;\nconst NOTE_MAX = 140;\n\ntype Pattern = { pulses: number[]; gaps: number[] };\n\n/* ------------------------------------------------------------------ *\n * Schema\n * ------------------------------------------------------------------ */\nlet ready: Promise | null = null;\nfunction init(): Promise {\n if (!ready) {\n ready = (async () => {\n await sqlite.execute(`create table if not exists submissions (\n device_id text primary key,\n fp text not null,\n ip_hash text not null,\n device_json text not null,\n patterns_json text not null,\n tuned_json text not null,\n felt integer not null,\n note text not null default '',\n created_at text not null,\n updated_at text not null\n )`);\n await sqlite.execute(`create index if not exists submissions_ip on submissions(ip_hash)`);\n await sqlite.execute(`create index if not exists submissions_fp on submissions(fp)`);\n })();\n }\n return ready;\n}\n\n/* ------------------------------------------------------------------ *\n * Identity\n * ------------------------------------------------------------------ */\nfunction clientIp(req: Request): string {\n const h = (n: string) => req.headers.get(n) || \"\";\n const fwd = h(\"x-forwarded-for\").split(\",\")[0].trim();\n return h(\"cf-connecting-ip\") || fwd || h(\"x-real-ip\") || \"unknown\";\n}\n\nasync function hashIp(ip: string): Promise {\n const salt = Deno.env.get(\"IP_SALT\") || \"haptic-tuner-unsalted\";\n const bytes = new TextEncoder().encode(salt + \"|\" + ip);\n const digest = await crypto.subtle.digest(\"SHA-256\", bytes);\n return Array.from(new Uint8Array(digest))\n .map((b) => b.toString(16).padStart(2, \"0\")).join(\"\").slice(0, 32);\n}\n\n/* ------------------------------------------------------------------ *\n * Validation — the client is not trusted with any of this\n * ------------------------------------------------------------------ */\nfunction num(v: unknown): number | null {\n const n = Number(v);\n return Number.isFinite(n) ? Math.round(n) : null;\n}\n\nfunction validPattern(raw: unknown): Pattern | null {\n const p = raw as Pattern;\n if (!p || !Array.isArray(p.pulses) || !Array.isArray(p.gaps)) return null;\n if (p.pulses.length < 1 || p.pulses.length > MAX_PULSES) return null;\n if (p.gaps.length !== p.pulses.length - 1) return null;\n\n const pulses: number[] = [], gaps: number[] = [];\n for (const v of p.pulses) {\n const n = num(v);\n if (n === null || n < PULSE_MIN || n > PULSE_MAX) return null;\n pulses.push(n);\n }\n for (const v of p.gaps) {\n const n = num(v);\n if (n === null || n < GAP_MIN || n > GAP_MAX) return null;\n gaps.push(n);\n }\n return { pulses, gaps };\n}\n\nfunction str(v: unknown, max: number): string {\n return typeof v === \"string\" ? v.slice(0, max) : \"\";\n}\n\nconst DEVICE_FIELDS = [\n \"label\", \"platform\", \"browser\", \"model\", \"osVersion\",\n \"screen\", \"timezone\",\n] as const;\n\nfunction cleanDevice(raw: unknown) {\n const d = (raw || {}) as Record;\n const out: Record = {};\n for (const f of DEVICE_FIELDS) out[f] = str(d[f], 120);\n out.platform = [\"android\", \"ios\", \"desktop\", \"other\"].includes(String(out.platform))\n ? out.platform : \"other\";\n out.dpr = Math.min(8, Math.max(0, Number(d.dpr) || 0));\n out.cores = Math.min(256, Math.max(0, num(d.cores) ?? 0));\n out.memoryGb = Math.min(1024, Math.max(0, Number(d.memoryGb) || 0));\n out.touchPoints = Math.min(64, Math.max(0, num(d.touchPoints) ?? 0));\n out.vibrateApi = !!d.vibrateApi;\n return out;\n}\n\n/* ------------------------------------------------------------------ *\n * Routes\n * ------------------------------------------------------------------ */\nconst app = new Hono();\n\napp.get(\"/\", async (c) => {\n const html = await readFile(\"/index.html\", import.meta.url);\n return c.html(html);\n});\n\napp.post(\"/api/submit\", async (c) => {\n await init();\n\n let body: Record;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid\", message: \"Body was not JSON.\" }, 400);\n }\n\n const deviceId = str(body.deviceId, 64);\n if (!/^[A-Za-z0-9_.:@+-]{8,64}$/.test(deviceId)) {\n return c.json({ error: \"invalid\", message: \"Missing or malformed device id.\" }, 400);\n }\n if (body.felt !== true) {\n return c.json({\n error: \"not_felt\",\n message: \"Only devices that actually vibrated can submit.\",\n }, 400);\n }\n\n const patterns: Record = {};\n const raw = (body.patterns || {}) as Record;\n for (const name of HAPTICS) {\n const p = validPattern(raw[name]);\n if (!p) {\n return c.json({\n error: \"invalid\",\n message: `The pattern for \"${name}\" is missing or out of range.`,\n }, 400);\n }\n patterns[name] = p;\n }\n\n const tuned = Array.isArray(body.tuned)\n ? (body.tuned as unknown[]).map(String).filter((n) => (HAPTICS as readonly string[]).includes(n))\n : [];\n\n const now = new Date().toISOString();\n const ipHash = await hashIp(clientIp(c.req.raw));\n\n const existing = await sqlite.execute({\n sql: `select device_id, created_at from submissions where device_id = ?`,\n args: [deviceId],\n });\n const revised = existing.rows.length > 0;\n\n if (!revised) {\n const perIp = await sqlite.execute({\n sql: `select count(*) as n from submissions where ip_hash = ?`,\n args: [ipHash],\n });\n if (Number(perIp.rows[0]?.n || 0) >= MAX_DEVICES_PER_IP) {\n return c.json({\n error: \"ip_limit\",\n message:\n `This network has already submitted ${MAX_DEVICES_PER_IP} devices, which is the cap. ` +\n `If that was you on another device, tune from that device instead — resubmitting there updates its row.`,\n }, 429);\n }\n const total = await sqlite.execute(`select count(*) as n from submissions`);\n if (Number(total.rows[0]?.n || 0) >= MAX_ROWS) {\n return c.json({\n error: \"full\",\n message: \"The poll has hit its row cap and is closed to new devices.\",\n }, 507);\n }\n }\n\n await sqlite.execute({\n sql: `insert into submissions\n (device_id, fp, ip_hash, device_json, patterns_json, tuned_json, felt, note, created_at, updated_at)\n values (?, ?, ?, ?, ?, ?, 1, ?, ?, ?)\n on conflict(device_id) do update set\n fp = excluded.fp,\n ip_hash = excluded.ip_hash,\n device_json = excluded.device_json,\n patterns_json = excluded.patterns_json,\n tuned_json = excluded.tuned_json,\n note = excluded.note,\n updated_at = excluded.updated_at`,\n args: [\n deviceId,\n str(body.fp, 32),\n ipHash,\n JSON.stringify(cleanDevice(body.device)),\n JSON.stringify(patterns),\n JSON.stringify(tuned),\n str(body.note, NOTE_MAX),\n String(existing.rows[0]?.created_at || now),\n now,\n ],\n });\n\n return c.json({ ok: true, revised });\n});\n\napp.get(\"/api/results\", async (c) => {\n await init();\n const res = await sqlite.execute(\n `select device_id, fp, ip_hash, device_json, patterns_json, tuned_json, note, created_at, updated_at\n from submissions order by updated_at desc limit 1000`,\n );\n\n /* Networks become opaque group numbers: enough to spot ballot-stuffing,\n not enough to identify anyone. The hash itself never leaves here. */\n const groups = new Map();\n const submissions = res.rows.map((r) => {\n const ip = String(r.ip_hash);\n if (!groups.has(ip)) groups.set(ip, groups.size + 1);\n return {\n id: String(r.device_id),\n fp: String(r.fp),\n ipGroup: groups.get(ip),\n device: JSON.parse(String(r.device_json)),\n patterns: JSON.parse(String(r.patterns_json)),\n tuned: JSON.parse(String(r.tuned_json)),\n note: String(r.note || \"\"),\n createdAt: String(r.created_at),\n updatedAt: String(r.updated_at),\n };\n });\n\n return c.json({ count: submissions.length, submissions }, 200, {\n \"cache-control\": \"no-store\",\n });\n});\n\napp.get(\"/api/export.csv\", async (c) => {\n await init();\n const res = await sqlite.execute(\n `select device_id, fp, device_json, patterns_json, tuned_json, note, updated_at\n from submissions order by updated_at desc limit 5000`,\n );\n const esc = (v: unknown) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`;\n const head = [\n \"device_id\", \"fingerprint\", \"device\", \"platform\", \"model\", \"browser\",\n ...HAPTICS.map((h) => `${h}_pattern`),\n ...HAPTICS.map((h) => `${h}_total_ms`),\n \"tuned\", \"note\", \"updated_at\",\n ];\n const lines = [head.join(\",\")];\n for (const r of res.rows) {\n const d = JSON.parse(String(r.device_json));\n const p = JSON.parse(String(r.patterns_json)) as Record;\n const flat = (h: string) => {\n const pat = p[h];\n if (!pat) return \"\";\n const out: number[] = [];\n pat.pulses.forEach((ms, i) => {\n out.push(ms);\n if (i < pat.gaps.length) out.push(pat.gaps[i]);\n });\n return out.join(\" \");\n };\n const totalOf = (h: string) => {\n const pat = p[h];\n if (!pat) return \"\";\n return String([...pat.pulses, ...pat.gaps].reduce((a, b) => a + b, 0));\n };\n lines.push([\n esc(r.device_id), esc(r.fp), esc(d.label), esc(d.platform), esc(d.model), esc(d.browser),\n ...HAPTICS.map((h) => esc(flat(h))),\n ...HAPTICS.map((h) => esc(totalOf(h))),\n esc(JSON.parse(String(r.tuned_json)).join(\" \")), esc(r.note), esc(r.updated_at),\n ].join(\",\"));\n }\n return new Response(lines.join(\"\\n\"), {\n headers: {\n \"content-type\": \"text/csv; charset=utf-8\",\n \"content-disposition\": 'attachment; filename=\"haptic-tuner.csv\"',\n \"cache-control\": \"no-store\",\n },\n });\n});\n\nexport default app.fetch;\n","createdAt",["D",1789093817985],"branchVersion","branchId","092e24ba-655f-4eaf-95a8-d4b1b3d6dad3","id","6e28f75c-cbcd-4bf7-895e-fe842aacf354","haptic-tuner",["D",1789093612980],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Crowdsourced navigator.vibrate patterns for iOS haptics","imageUrl","775b6fc5-77e3-4b7f-9e42-7d90dcc2ee2b","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","38f17bec-4f68-41c6-b2f6-47b6e76d6ac3","tursoName","6e28f75ccbcd4bf7895efe842aacf354","tursoHostname","6e28f75ccbcd4bf7895efe842aacf354-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789532458193],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_105":101},"org",{"_98":97,"_99":-5,"_100":101,"_18":54,"_102":103,"_104":24},"branch",{"_13":87,"_32":88,"_42":41,"_89":43,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":44,"_96":97},"isOwned",9,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","orta","handle","displayName","avatar","https://images.clerk.dev/oauth_github/img_2TLdzT53pqqxz62skugdQ5kw4Is.jpeg","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":151,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":152,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":153,"_82":154,"_84":155,"_86":24},"tree",[146],"files",[146],"counts",{"_135":61,"_136":14,"_137":61,"_138":139,"_140":141},"contents",[128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":129,"_32":27,"_30":31,"_130":-5,"_40":41,"_39":14,"_131":24,"_37":132,"_13":61,"_33":34,"_35":36,"_23":24,"_133":-5,"_26":134},"e0b96c0f-f468-4c11-b5ed-149b342b6549","parentId","latest",["D",1789093817985],"label",[27],"pulls","branches","forks","envVars",{"_142":144,"_145":61},"connections",{"_142":61,"_143":61},"count","unfilledCount",2,"emptyCount",{"_42":129,"_32":27,"_30":31,"_130":-5,"_40":41,"_39":14,"_131":24,"_37":147,"_13":61,"_33":34,"_35":36,"_23":24,"_133":-5,"_148":149,"_26":150},["D",1789093817985],"children",[],[27],["D",1789093612980],["D",1789532458193],{"_98":97,"_105":101},{"_98":97,"_99":-5,"_100":101,"_18":54,"_102":103,"_104":24},{"_13":87,"_32":88,"_42":41,"_89":43,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":44,"_96":97},"ctx",{"_80":-5,"_125":189,"_190":191,"_192":193,"_194":24,"_195":24,"_196":24,"_197":57,"_198":-5,"_199":-7,"_200":-7,"_201":61,"_202":24,"_203":24,"_204":-5,"_205":24,"_206":24,"_207":24,"_208":-5},"ENV",{"_160":161,"_162":163,"_164":88,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v1