\n NorfolkJS 90s Wacky Postmodern Raffle Extravaganza\n

Win Big at NorfolkJS

Drop your name and email for a chance to score one of three raffle prizes.

\n\n

\n Tonight's Prize Drop:\n

${sanitize(prize)}

\n\n \n

One entry per email. Draw happens live at NorfolkJS.

\n\n \n \n`;\n}\n\nfunction renderAdmin(entries: Entry[], winners: Winners, key: string) {\n const winnerRows = PRIZES.map((prize, prizeIndex) => {\n const winner = winners[prizeIndex];\n const hasWinner = Boolean(winner);\n\n return `\n \n ${sanitize(prize)}\n ${hasWinner ? sanitize(winner.entry.name) : \"Not drawn yet\"}\n ${hasWinner ? sanitize(winner.entry.email) : \"-\"}\n \n \n \n \n `;\n }).join(\"\");\n\n return `\n\n \n \n \n Admin | NorfolkJS Raffle\n \n \n \n

NorfolkJS Raffle Admin

Total entries: ${entries.length}

\n \n \n \n \n \n \n \n \n \n \n ${winnerRows}\n \n

Prize	Winner Name	Winner Email	Action

Admin key is provided via ?key=.... Keep this URL private.

\n \n \n`;\n}\n\nasync function handleCreateEntry(req: Request) {\n let body: { name?: string; email?: string };\n\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const name = (body.name ?? \"\").trim();\n const email = normalizeEmail(body.email ?? \"\");\n\n if (!name || !email) {\n return json({ error: \"Name and email are required.\" }, 400);\n }\n if (name.length > 80 || email.length > 140) {\n return json({ error: \"Input exceeds max length.\" }, 400);\n }\n if (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email)) {\n return json({ error: \"Email format is invalid.\" }, 400);\n }\n\n const entries = await listEntries();\n const duplicate = entries.find((entry) => normalizeEmail(entry.email) === email);\n if (duplicate) {\n return json({ error: \"That email is already entered.\" }, 409);\n }\n\n const entry = await addEntry(name, email);\n return json({ ok: true, entryId: entry.id }, 201);\n}\n\nasync function handleDrawWinner(req: Request, url: URL) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n let body: { prizeIndex?: number };\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const prizeIndex = Number(body.prizeIndex);\n if (!Number.isInteger(prizeIndex) || prizeIndex < 0 || prizeIndex >= PRIZES.length) {\n return json({ error: \"Invalid prize index.\" }, 400);\n }\n\n const entries = await listEntries();\n const winners = await getWinners();\n\n if (winners[prizeIndex]) {\n return json({ error: \"Winner already selected for this prize.\" }, 409);\n }\n\n const alreadyWonEmails = new Set(\n Object.values(winners).map((winner) => normalizeEmail(winner.entry.email)),\n );\n\n const eligible = entries.filter((entry) => !alreadyWonEmails.has(normalizeEmail(entry.email)));\n if (!eligible.length) {\n return json({ error: \"No eligible entries left to draw.\" }, 409);\n }\n\n const idx = crypto.getRandomValues(new Uint32Array(1))[0] % eligible.length;\n const winnerEntry = eligible[idx];\n\n winners[prizeIndex] = {\n prize: PRIZES[prizeIndex],\n prizeIndex,\n entry: winnerEntry,\n announcedAt: new Date().toISOString(),\n };\n\n await saveWinners(winners);\n\n return json({\n ok: true,\n prize: PRIZES[prizeIndex],\n winner: {\n name: winnerEntry.name,\n email: winnerEntry.email,\n },\n });\n}\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return new Response(renderHome(), {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/entries\") {\n return handleCreateEntry(req);\n }\n\n if (req.method === \"GET\" && url.pathname === \"/admin\") {\n if (!ensureAdmin(url)) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n const entries = await listEntries();\n const winners = await getWinners();\n return new Response(renderAdmin(entries, winners, url.searchParams.get(\"key\") ?? \"\"), {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/api/admin/state\") {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n const entries = await listEntries();\n const winners = await getWinners();\n return json({ entriesCount: entries.length, winners, prizes: PRIZES });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/admin/draw\") {\n return handleDrawWinner(req, url);\n }\n\n return new Response(\"Not found\", { status: 404 });\n}\n","label",[127],"66e12ca2-131a-11f1-9d0b-42dde27851f2",true,["D",1772113954116],[27],"pulls","branches","forks","envVars",{"_148":58,"_150":132},"connections",{"_148":132,"_149":132},"count","unfilledCount","emptyCount",{"_40":137,"_31":27,"_29":30,"_129":-5,"_38":39,"_37":14,"_130":138,"_35":157,"_13":132,"_32":20,"_33":34,"_23":24,"_135":-5,"_154":158,"_26":159},{"_40":126,"_31":127,"_29":128,"_129":-5,"_38":39,"_37":58,"_130":24,"_35":153,"_13":132,"_32":133,"_33":134,"_23":24,"_135":-5,"_154":155,"_26":156},["D",1772113954081],"children",[],[127],["D",1772113954116],[],[27],["D",1772113756582],["D",1789449035005],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":52,"_99":100,"_101":24},{"_13":84,"_31":85,"_40":39,"_86":41,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":42,"_93":94},"ctx",{"_77":-5,"_121":198,"_199":200,"_201":202,"_203":24,"_204":24,"_205":24,"_206":138,"_207":-5,"_208":-7,"_209":-7,"_210":132,"_211":24,"_212":24,"_213":-5,"_214":24,"_215":24,"_216":24,"_217":-5},"ENV",{"_169":170,"_171":172,"_173":85,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2