\n Thanks For Being at HR DevFest 2026!\n

Win Big at NorfolkJS

Drop your name and email for a chance to score one of our current raffle prizes.

\n\n

\n Current Prize Pool:\n

${sanitize(prize.name)}
No prizes configured yet.

\n\n \n

One entry per human. Must be present to win.

View Source

\n\n \n \n \n`;\n}\n\nfunction renderOdds() {\n return `\n\n \n \n \n Live Odds | NorfolkJS Raffle\n \n \n \n

Live Raffle Odds

Anonymous odds update in real time. Winners appear as they are drawn.

\n \n \n \n`;\n}\n\nfunction renderAdmin(entries: Entry[], winners: Winners, prizes: Prize[], key: string) {\n const prizeNameById = new Map(prizes.map((prize) => [prize.id, prize.name]));\n\n const winnerRows = prizes.map((prize) => {\n const winner = winners[prize.id];\n const hasWinner = Boolean(winner);\n\n return `\n \n ${sanitize(prize.name)}\n ${hasWinner ? sanitize(winner.entry.name) : \"Not drawn yet\"}\n ${hasWinner ? sanitize(winner.entry.email) : \"-\"}\n \n \n \n \n \n `;\n }).join(\"\");\n\n const prizeRows = prizes.map((prize) => `\n \n \n \n \n \n \n \n \n \n `).join(\"\");\n\n const submissionRows = [...entries].reverse().map((entry) => {\n const prizeSummary = formatEntryPrizeSummary(entry, prizeNameById, prizes);\n\n return `\n \n ${sanitize(entry.name)}\n ${sanitize(entry.email)}\n ${sanitize(entry.createdAt)}\n ${sanitize(prizeSummary) || \"-\"}\n \n `;\n }).join(\"\");\n\n const submissionCards = [...entries].reverse().map((entry) => {\n const prizeSummary = formatEntryPrizeSummary(entry, prizeNameById, prizes);\n\n return `\n

Name: ${sanitize(entry.name)}

Email: ${sanitize(entry.email)}

Submitted: ${sanitize(entry.createdAt)}

Prizes: ${sanitize(prizeSummary) || \"-\"}

\n `;\n }).join(\"\");\n\n return `\n\n \n \n \n Manage | NorfolkJS Raffle\n \n \n \n

Prize Pool Management

Total entries: ${entries.length}

Back to Admin Home

\n \n

\n\n

Winners

\n \n \n \n \n \n \n \n \n \n \n ${winnerRows || ''}\n \n

Prize	Winner Name	Winner Email	Action
No prizes configured yet.

\n\n

All Submissions

\n \n \n \n \n \n \n \n \n \n \n ${submissionRows || ''}\n \n

Name	Email	Submitted At (UTC)	Entered Prizes
No submissions yet.

\n ${submissionCards || '

No submissions yet.

'}\n

\n\n

Prize Pool

\n \n

\n \n \n \n \n \n \n \n \n ${prizeRows || ''}\n \n

Prize Name	Actions
No prizes configured yet.

\n\n

Admin key is provided via ?key=.... Keep this URL private.

View Source

\n \n \n \n`;\n}\n\nfunction renderAdminHome(entries: Entry[], winners: Winners, prizes: Prize[], key: string) {\n const prizeNameById = new Map(prizes.map((prize) => [prize.id, prize.name]));\n\n const winnerRows = prizes.map((prize) => {\n const winner = winners[prize.id];\n const hasWinner = Boolean(winner);\n\n return `\n \n ${sanitize(prize.name)}\n ${hasWinner ? sanitize(winner.entry.name) : \"Not drawn yet\"}\n ${hasWinner ? sanitize(winner.entry.email) : \"-\"}\n \n \n \n \n \n `;\n }).join(\"\");\n\n const submissionRows = [...entries].reverse().map((entry) => {\n const prizeSummary = formatEntryPrizeSummary(entry, prizeNameById, prizes);\n\n return `\n \n ${sanitize(entry.name)}\n ${sanitize(entry.email)}\n ${sanitize(entry.createdAt)}\n ${sanitize(prizeSummary) || \"-\"}\n \n `;\n }).join(\"\");\n\n const submissionCards = [...entries].reverse().map((entry) => {\n const prizeSummary = formatEntryPrizeSummary(entry, prizeNameById, prizes);\n\n return `\n

Name: ${sanitize(entry.name)}

Email: ${sanitize(entry.email)}

Submitted: ${sanitize(entry.createdAt)}

Prizes: ${sanitize(prizeSummary) || \"-\"}

\n `;\n }).join(\"\");\n\n return `\n\n \n \n \n Admin | NorfolkJS Raffle\n \n \n \n

NorfolkJS Raffle Admin

Total entries: ${entries.length}

Manage Prize Pool + Detailed Data

\n \n

\n\n

Winners

\n \n \n \n \n \n \n \n \n \n \n ${winnerRows || ''}\n \n

Prize	Winner Name	Winner Email	Action
No prizes configured yet.

\n\n

All Submissions

\n \n \n \n \n \n \n \n \n \n \n ${submissionRows || ''}\n \n

Name	Email	Submitted At (UTC)	Entered Prizes
No submissions yet.

\n ${submissionCards || '

No submissions yet.

'}\n

\n\n

Admin key is provided via ?key=.... Keep this URL private.

View Source

\n \n \n \n`;\n}\n\n// ----------------------------\n// HTTP handlers (business logic)\n// ----------------------------\nasync function handleCreateEntry(req: Request) {\n const prizes = await readPrizes();\n\n let body: { name?: string; email?: string; prizeTickets?: unknown; prizeIds?: unknown };\n\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const name = String(body.name ?? \"\").trim();\n const email = normalizeEmail(String(body.email ?? \"\"));\n const ticketCap = Math.max(prizes.length, 1);\n\n let prizeTickets = normalizePrizeTickets(body.prizeTickets, prizes);\n if (!Object.keys(prizeTickets).length && Array.isArray(body.prizeIds)) {\n prizeTickets = prizeTicketsFromPrizeIds(normalizePrizeIds(body.prizeIds, prizes));\n }\n\n const totalTickets = totalPrizeTickets(prizeTickets);\n\n if (!name || !email) {\n return json({ error: \"Name and email are required.\" }, 400);\n }\n if (name.length > 80 || email.length > 140) {\n return json({ error: \"Input exceeds max length.\" }, 400);\n }\n if (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email)) {\n return json({ error: \"Email format is invalid.\" }, 400);\n }\n if (!prizes.length) {\n return json({ error: \"No prizes are configured right now.\" }, 409);\n }\n if (totalTickets !== ticketCap) {\n return json({ error: `You must allocate all ${ticketCap} tickets.` }, 400);\n }\n\n const entries = await listEntries(prizes);\n const duplicate = entries.find((entry) => normalizeEmail(entry.email) === email);\n if (duplicate) {\n return json({ error: \"That email is already entered.\" }, 409);\n }\n\n const entry = await addEntry(name, email, prizeTickets, prizes);\n return json({ ok: true, entryId: entry.id }, 201);\n}\n\nasync function handleDrawWinner(req: Request, url: URL) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n const prizes = await readPrizes();\n const prizeById = new Map(prizes.map((prize) => [prize.id, prize]));\n\n let body: { prizeId?: string };\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const prizeId = String(body.prizeId ?? \"\").trim();\n const prize = prizeById.get(prizeId);\n\n if (!prize) {\n return json({ error: \"Invalid prize ID.\" }, 400);\n }\n\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n\n if (winners[prizeId]) {\n return json({ error: \"Winner already selected for this prize.\" }, 409);\n }\n\n const eligible = buildEligibleCandidates(entries, winners, prizeId);\n\n if (!eligible.length) {\n return json({ error: \"No eligible entries left to draw for this prize.\" }, 409);\n }\n\n const winnerEntry = pickWeightedWinner(eligible);\n\n winners[prizeId] = {\n prizeId,\n prize: prize.name,\n entry: winnerEntry,\n announcedAt: new Date().toISOString(),\n excludedEntryIds: [],\n };\n\n await saveWinners(winners);\n\n return json({\n ok: true,\n prize: prize.name,\n winner: {\n name: winnerEntry.name,\n email: winnerEntry.email,\n },\n });\n}\n\nasync function handleRedrawWinner(req: Request, url: URL) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n const prizes = await readPrizes();\n const prizeById = new Map(prizes.map((prize) => [prize.id, prize]));\n\n let body: { prizeId?: string };\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const prizeId = String(body.prizeId ?? \"\").trim();\n const prize = prizeById.get(prizeId);\n if (!prize) {\n return json({ error: \"Invalid prize ID.\" }, 400);\n }\n\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n const previousWinner = winners[prizeId];\n\n if (!previousWinner) {\n return json({ error: \"No winner exists yet for this prize.\" }, 409);\n }\n\n const winnersForEligibility: Winners = { ...winners };\n delete winnersForEligibility[prizeId];\n\n const excludedEntryIds = Array.from(new Set([\n ...(previousWinner.excludedEntryIds ?? []),\n previousWinner.entry.id,\n ]));\n\n const eligible = buildEligibleCandidates(entries, winnersForEligibility, prizeId, excludedEntryIds);\n if (!eligible.length) {\n return json({ error: \"No alternate eligible entries left for redraw.\" }, 409);\n }\n\n const winnerEntry = pickWeightedWinner(eligible);\n winnersForEligibility[prizeId] = {\n prizeId,\n prize: prize.name,\n entry: winnerEntry,\n announcedAt: new Date().toISOString(),\n excludedEntryIds,\n };\n\n await saveWinners(winnersForEligibility);\n\n return json({\n ok: true,\n prize: prize.name,\n previousWinner: {\n name: previousWinner.entry.name,\n email: previousWinner.entry.email,\n },\n winner: {\n name: winnerEntry.name,\n email: winnerEntry.email,\n },\n });\n}\n\nasync function handleOddsState() {\n const prizes = await readPrizes();\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n return json(buildOddsState(prizes, entries, winners));\n}\n\nasync function handleResetRaffle(url: URL) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n await writeEntries([]);\n await saveWinners({});\n\n return json({ ok: true });\n}\n\nasync function handleAddPrize(req: Request, url: URL) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n let body: { name?: string };\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const name = normalizePrizeName(body.name);\n if (!name) {\n return json({ error: \"Prize name is required.\" }, 400);\n }\n if (name.length > 80) {\n return json({ error: \"Prize name exceeds max length.\" }, 400);\n }\n\n const prizes = await readPrizes();\n const next: Prize[] = [...prizes, { id: createPrizeId(), name }];\n await writePrizes(next);\n\n return json({ ok: true, prizes: next }, 201);\n}\n\nasync function handleRenamePrize(req: Request, url: URL, prizeId: string) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n let body: { name?: string };\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON body.\" }, 400);\n }\n\n const name = normalizePrizeName(body.name);\n if (!name) {\n return json({ error: \"Prize name is required.\" }, 400);\n }\n if (name.length > 80) {\n return json({ error: \"Prize name exceeds max length.\" }, 400);\n }\n\n const prizes = await readPrizes();\n const exists = prizes.some((prize) => prize.id === prizeId);\n if (!exists) {\n return json({ error: \"Prize not found.\" }, 404);\n }\n\n const updated = prizes.map((prize) => prize.id === prizeId ? { ...prize, name } : prize);\n await writePrizes(updated);\n\n const winners = await readWinners(updated);\n if (winners[prizeId]) {\n winners[prizeId].prize = name;\n await saveWinners(winners);\n }\n\n return json({ ok: true, prizes: updated });\n}\n\nasync function handleRemovePrize(url: URL, prizeId: string) {\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n const prizes = await readPrizes();\n const exists = prizes.some((prize) => prize.id === prizeId);\n if (!exists) {\n return json({ error: \"Prize not found.\" }, 404);\n }\n\n const updatedPrizes = prizes.filter((prize) => prize.id !== prizeId);\n await writePrizes(updatedPrizes);\n\n // Prune entry selections and winner records for deleted prize IDs.\n const entries = await readEntries(updatedPrizes);\n await writeEntries(entries);\n\n const winners = await readWinners(updatedPrizes);\n await saveWinners(winners);\n\n return json({ ok: true, prizes: updatedPrizes });\n}\n\n// ----------------------------\n// Routing\n// ----------------------------\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, _c) => {\n throw err;\n});\n\napp.get(\"/\", async (c) => {\n const prizes = await readPrizes();\n return c.html(renderHome(prizes));\n});\n\napp.get(\"/odds\", async (c) => {\n return c.html(renderOddsPomoSSE());\n});\n\napp.post(\"/api/entries\", async (c) => {\n return await handleCreateEntry(c.req.raw);\n});\n\napp.get(\"/api/odds\", async () => {\n return await handleOddsState();\n});\n\napp.get(\"/api/odds/stream\", async (c) => {\n return await handleOddsStream(c.req.raw);\n});\n\napp.get(\"/admin\", async (c) => {\n const url = new URL(c.req.url);\n if (!ensureAdmin(url)) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n\n const prizes = await readPrizes();\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n return c.html(renderAdminHome(entries, winners, prizes, url.searchParams.get(\"key\") ?? \"\"));\n});\n\napp.get(\"/admin/manage\", async (c) => {\n const url = new URL(c.req.url);\n if (!ensureAdmin(url)) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n\n const prizes = await readPrizes();\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n return c.html(renderAdmin(entries, winners, prizes, url.searchParams.get(\"key\") ?? \"\"));\n});\n\napp.get(\"/api/admin/state\", async (c) => {\n const url = new URL(c.req.url);\n if (!ensureAdmin(url)) {\n return json({ error: \"Unauthorized.\" }, 401);\n }\n\n const prizes = await readPrizes();\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n return json({ entriesCount: entries.length, winners, prizes });\n});\n\napp.post(\"/api/admin/draw\", async (c) => {\n return await handleDrawWinner(c.req.raw, new URL(c.req.url));\n});\n\napp.post(\"/api/admin/redraw\", async (c) => {\n return await handleRedrawWinner(c.req.raw, new URL(c.req.url));\n});\n\napp.post(\"/api/admin/reset\", async (c) => {\n return await handleResetRaffle(new URL(c.req.url));\n});\n\napp.post(\"/api/admin/prizes\", async (c) => {\n return await handleAddPrize(c.req.raw, new URL(c.req.url));\n});\n\napp.patch(\"/api/admin/prizes/:prizeId\", async (c) => {\n return await handleRenamePrize(c.req.raw, new URL(c.req.url), c.req.param(\"prizeId\"));\n});\n\napp.delete(\"/api/admin/prizes/:prizeId\", async (c) => {\n return await handleRemovePrize(new URL(c.req.url), c.req.param(\"prizeId\"));\n});\n\napp.notFound(() => new Response(\"Not found\", { status: 404 }));\n\nexport default app.fetch;\n\nfunction renderOddsV2() {\n return `\n\n \n \n \n Live Odds | NorfolkJS Raffle\n \n \n \n

Live Raffle Odds

Anonymous odds update in real time. Winners appear as they are drawn.

\n \n \n \n`;\n}\n\nfunction renderOddsPomo() {\n return `\n\n \n \n \n Live Odds | NorfolkJS Raffle\n \n \n \n \n \n \n

Live Raffle Odds

Anonymous odds update in real time. Winners appear as they are drawn.

\n \n \n \n`;\n}\n\nfunction renderOddsPomoSSE() {\n return `\n\n \n \n \n Live Odds | NorfolkJS Raffle\n \n \n \n \n \n \n

Live Raffle Odds

Anonymous odds update in real time. Winners appear as they are drawn.

\n \n \n \n`;\n}\n\nasync function handleOddsStream(req: Request) {\n const encoder = new TextEncoder();\n\n const stream = new ReadableStream({\n start(controller) {\n let closed = false;\n let intervalId: number | undefined;\n\n const close = () => {\n if (closed) {\n return;\n }\n closed = true;\n if (intervalId !== undefined) {\n clearInterval(intervalId);\n }\n try {\n controller.close();\n } catch {\n // Stream may already be closed.\n }\n };\n\n const publish = async () => {\n if (closed) {\n return;\n }\n\n const prizes = await readPrizes();\n const entries = await listEntries(prizes);\n const winners = await readWinners(prizes);\n const payload = JSON.stringify(buildOddsState(prizes, entries, winners));\n controller.enqueue(encoder.encode(`event: odds\\ndata: ${payload}\\n\\n`));\n };\n\n publish().catch(() => close());\n intervalId = setInterval(() => {\n publish().catch(() => close());\n }, 2000) as unknown as number;\n\n req.signal.addEventListener(\"abort\", () => close());\n },\n cancel() {\n // No-op: handled via abort/close lifecycle.\n },\n });\n\n return new Response(stream, {\n headers: {\n \"content-type\": \"text/event-stream; charset=utf-8\",\n \"cache-control\": \"no-cache, no-transform\",\n connection: \"keep-alive\",\n },\n });\n}\n",[],[73],"66fb5c58-131a-11f1-95e3-42dde27851f2","deno.json","66fb5d34-131a-11f1-95e3-42dde27851f2",5,["D",1772113954130],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/98f62cee78e85bfc47c62ed703777c6bc8794f1c/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": true,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"include\": [\"deno:/https/esm.town/**/*\"],\n \"rules\": {\n \"exclude\": [\"no-explicit-any\"]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}",[],[83],"b7d4e200-1344-11f1-bfb9-42dde27851f2","README.md","66ed50ea-131a-11f1-a2b8-42dde27851f2",72,["D",1772132128786],6,"# NorfolkJS Raffle (Val Town)\n\nRaffle app for live events with:\n- Public entry page (`/`)\n- Public live odds board (`/odds`)\n- Admin Home (`/admin?key=...`) for draw/reset\n- Admin Manage (`/admin/manage?key=...`) for prize CRUD and submission review\n\n## Current Behavior\n- Dynamic prize pool\n- One entry per email (enforced server-side)\n- Each entrant gets exactly `N` tickets where `N = number of prizes`\n- Tickets are allocated per prize via `- / +` controls\n- Submission is only valid when all tickets are allocated\n- Winner selection is weighted by ticket count for that prize\n- A person can only win once across different prizes\n- Redraw supported for no-show winners\n\n## Local Run (Deno)\n```bash\ndeno run -A --watch main.http.ts\n```\n\nOpen:\n- Public entry: `http://localhost:8000/`\n- Live odds: `http://localhost:8000/odds`\n- Admin home: `http://localhost:8000/admin?key=`\n- Admin manage: `http://localhost:8000/admin/manage?key=`\n\n## Environment\nSet admin auth key:\n```bash\nexport ADMIN_KEY=\"replace-with-your-own-secret\"\n```\n\nIn Val Town, add `ADMIN_KEY` in Environment Variables.\n\n## Routes\n- `GET /`: raffle entry UI\n- `GET /odds`: public live odds board\n- `POST /api/entries`: create entry\n- `GET /api/odds`: anonymous odds + winner state JSON\n\nAdmin-protected (`?key=...` required):\n- `GET /admin`: draw + redraw + reset + submissions\n- `GET /admin/manage`: prize management + detailed submissions\n- `GET /api/admin/state`: admin snapshot\n- `POST /api/admin/draw`: draw winner for one prize\n- `POST /api/admin/redraw`: redraw winner for one prize\n- `POST /api/admin/reset`: clear entries + winners\n- `POST /api/admin/prizes`: add prize\n- `PATCH /api/admin/prizes/:prizeId`: rename prize\n- `DELETE /api/admin/prizes/:prizeId`: remove prize\n\n## Blob Storage Keys\nCurrent canonical keys:\n- `devfest26_raffle_prizes`\n- `devfest26_raffle_entries`\n- `devfest26_raffle_winners`\n\n## Operator Flow\n1. Configure prizes in `/admin/manage?key=...`\n2. Share `/` for entries and `/odds` on screen\n3. Draw from `/admin?key=...`\n4. If winner is absent, use `Redraw` for that prize\n5. Use `Reset` only for test cycles\n",[],[91],"03b036a6-1337-11f1-9a09-42dde27851f2","DOCS.md","03b03782-1337-11f1-9a09-42dde27851f2",22,["D",1772126243113],"# Raffle Docs\n\n## 1. System Overview\nThis val is a single HTTP app (`main.http.ts`) built with Hono. It serves both UI and API routes.\n\nThere are three UX surfaces:\n- Public page (`/`) for entry creation\n- Admin home (`/admin`) for live operations (draw/reset)\n- Admin management (`/admin/manage`) for prize pool CRUD and deeper inspection\n\n## 2. Data Model\n### Prize\n- `id: string` stable identifier\n- `name: string` display name\n\n### Entry\n- `id: string`\n- `name: string`\n- `email: string`\n- `createdAt: ISO string`\n- `prizeIds: string[]` selected prize IDs\n\n### WinnerRecord\n- `prizeId: string`\n- `prize: string` denormalized name\n- `entry: Entry`\n- `announcedAt: ISO string`\n\n### Winners\n- `Record` keyed by `prizeId`\n\n## 3. Persistence Strategy\nBlob keys:\n- `devfest26_raffle_prizes_v1`\n- `devfest26_raffle_entries_v2`\n- `devfest26_raffle_winners_v2`\n\nIn-memory mirrors are maintained:\n- `memoryPrizes`\n- `memoryEntries`\n- `memoryWinners`\n\nReason: local/dev resilience and graceful behavior if blob reads fail.\n\n## 4. Compatibility Rules\nNormalization functions (`normalizeEntry`, `normalizeWinners`) handle older payload shapes:\n- Legacy `prizeIndexes` converted to current `prizeIds`\n- Missing prize selection defaults to \"all current prizes\"\n- Winner records keyed/indexed by older formats are mapped to current `prizeId`\n\n## 5. Core Business Rules\n- One entry per email\n- Entrants may select one or more prizes\n- One winner per prize\n- Entrant can win at most one prize total\n- Admin key required for all admin pages/APIs\n\n## 6. Admin Views\n### `/admin`\n- Fast event operations\n- Winner draw controls\n- Submissions overview\n- Reset action\n- Link to management view\n\n### `/admin/manage`\n- Add prize\n- Rename prize\n- Remove prize (two-click confirmation)\n- Submissions + winners visibility\n- Prize Pool section intentionally placed lower (less frequent action)\n\n## 7. API Reference\n### Public\n`POST /api/entries`\n- Body: `{ name: string, email: string, prizeIds: string[] }`\n- 201 on success, errors on validation/duplicates\n\n### Admin\nAll admin routes require `?key=`.\n\n`GET /api/admin/state`\n- Returns `{ entriesCount, winners, prizes }`\n\n`POST /api/admin/draw`\n- Body: `{ prizeId: string }`\n- Draws winner among eligible entrants for that prize\n\n`POST /api/admin/reset`\n- Clears entries + winners (prizes remain)\n\n`POST /api/admin/prizes`\n- Body: `{ name: string }`\n- Adds prize\n\n`PATCH /api/admin/prizes/:prizeId`\n- Body: `{ name: string }`\n- Renames prize\n\n`DELETE /api/admin/prizes/:prizeId`\n- Removes prize and prunes related entry/winner references\n\n## 8. Route/Handler Mapping\n- `renderHome` -> `GET /`\n- `renderAdminHome` -> `GET /admin`\n- `renderAdmin` -> `GET /admin/manage`\n- `handleCreateEntry` -> `POST /api/entries`\n- `handleDrawWinner` -> `POST /api/admin/draw`\n- `handleResetRaffle` -> `POST /api/admin/reset`\n- `handleAddPrize` -> `POST /api/admin/prizes`\n- `handleRenamePrize` -> `PATCH /api/admin/prizes/:prizeId`\n- `handleRemovePrize` -> `DELETE /api/admin/prizes/:prizeId`\n\n## 9. Operational Notes\n- If UI seems stale, hard refresh browser.\n- If admin pages return `401`, key mismatch.\n- If a fetch tool URL encodes `?key=...`, route may look like `404` even when real route works in browser.\n",[],[100],"66e6441c-131a-11f1-bc5e-42dde27851f2","AGENTS.md","66e64624-131a-11f1-bc5e-42dde27851f2",3,["D",1772113954121],"You are an advanced assistant specialized in generating Val Town code.\n\n## Core Guidelines\n\n- Ask clarifying questions when requirements are ambiguous\n- Provide complete, functional solutions rather than skeleton implementations\n- Test your logic against edge cases before presenting the final solution\n- Ensure all code follows Val Town's specific platform requirements\n- If a section of code that you're working on is getting too complex, consider refactoring it into subcomponents\n\n## Code Standards\n\n- Generate code in TypeScript or TSX\n- Add appropriate TypeScript types and interfaces for all data structures\n- Prefer official SDKs or libraries than writing API calls directly\n- Ask the user to supply API or library documentation if you are at all unsure about it\n- **Never bake in secrets into the code** - always use environment variables\n- Include comments explaining complex logic (avoid commenting obvious operations)\n- Follow modern ES6+ conventions and functional programming practices if possible\n\n## Types of triggers\n\n### 1. HTTP Trigger\n\n- Create web APIs and endpoints\n- Handle HTTP requests and responses\n- Example structure:\n\n```ts\nexport default async function (req: Request) {\n return new Response(\"Hello World\");\n}\n```\n\nFiles that are HTTP triggers have http in their name like `foobar.http.tsx`\n\n### 2. Cron Triggers\n\n- Run on a schedule\n- Use cron expressions for timing\n- Example structure:\n\n```ts\nexport default async function () {\n // Scheduled task code\n}\n```\n\nFiles that are Cron triggers have cron in their name like `foobar.cron.tsx`\n\n### 3. Email Triggers\n\n- Process incoming emails\n- Handle email-based workflows\n- Example structure:\n\n```ts\nexport default async function (email: Email) {\n // Process email\n}\n```\n\nFiles that are Email triggers have email in their name like `foobar.email.tsx`\n\n\n## Val Town Standard Libraries\n\nVal Town provides several hosted services and utility functions.\n\n### Blob Storage\n\n```ts\nimport { blob } from \"https://esm.town/v/std/blob\";\nawait blob.setJSON(\"myKey\", { hello: \"world\" });\nlet blobDemo = await blob.getJSON(\"myKey\");\nlet appKeys = await blob.list(\"app_\");\nawait blob.delete(\"myKey\");\n```\n\n### SQLite\n\n```ts\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nconst TABLE_NAME = 'todo_app_users_2';\n// Create table - do this before usage and change table name when modifying schema\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE_NAME} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL\n)`);\n// Query data\nconst result = await sqlite.execute(`SELECT * FROM ${TABLE_NAME} WHERE id = ?`, [1]);\n```\n\nNote: When changing a SQLite table's schema, change the table's name (e.g., add _2 or _3) to create a fresh table.\n\n### OpenAI\n\n```ts\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nconst openai = new OpenAI();\nconst completion = await openai.chat.completions.create({\n messages: [\n { role: \"user\", content: \"Say hello in a creative way\" },\n ],\n model: \"gpt-4o-mini\",\n max_tokens: 30,\n});\n```\n\n### Email\n\n```ts\nimport { email } from \"https://esm.town/v/std/email\";\n// By default emails the owner of the val\nawait email({ \n subject: \"Hi\", \n text: \"Hi\", \n html: \"

Hi

\"\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport { parseProject, readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\" urls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's *extremely importing* to note that `parseProject` and other Standard Library utilities ONLY RUN ON THE SERVER.\nIf you need access to this data on the client, run it in the server and pass it to the client by splicing it into the HTML page\nor by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})` instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use: `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys) unless otherwise specified\n- **View Source:** Add a view source link by importing & using `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the client) and include `target=\"_top\"` attribute\n- **Error Debugging:** Add `` to HTML to capture client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local resolution; Avoid catches that merely log or return 500s. Let errors bubble up with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with `?deps=react@18.2.0,react-dom@18.2.0` and start the file with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same version\n- **Styling:** Default to using TailwindCSS via `` unless otherwise specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project files:\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n \n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n \n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to see full stack traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:** \n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with `export default app.fetch // This is the entry point for HTTP vals`\n\n",[],[108],["D",1772113954116],[],[19],"f1226bde-1319-11f1-93ae-42dde27851f2",["D",1772113756582],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","40e69d1a-3254-4858-920b-7b1449761575","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","54bae3d1-8223-41e5-b22d-81eb28a263c7","tursoName","f1226bde131911f193ae42dde27851f2","tursoHostname","f1226bde131911f193ae42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789449035005],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_174":170},"org",{"_11":12,"_168":-5,"_169":170,"_128":129,"_171":172,"_173":68},"branch",{"_17":75,"_13":16,"_33":36,"_160":118,"_161":-5,"_162":-5,"_163":-5,"_164":-5,"_165":-5,"_166":14,"_167":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://images.clerk.dev/oauth_github/img_2OaSpooJk6yZ5KFqyjtIVA4z3SH.jpeg","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":118,"_13":14,"_44":226,"_120":-5,"_121":68,"_122":123,"_124":123,"_125":126,"_127":-5,"_128":129,"_130":-5,"_131":68,"_132":-5,"_133":-5,"_134":64,"_135":136,"_137":138,"_139":140,"_141":227,"_143":-5,"_144":145,"_146":145,"_147":148,"_149":148,"_150":148,"_151":145,"_152":145,"_153":228,"_155":229,"_157":230,"_159":68},[205,206,207,208,209,210,211],"files",[205,206,207,208,209,210,211],"counts",{"_196":42,"_197":64,"_198":42,"_32":199,"_200":201},[],{"_33":34,"_35":36,"_37":38,"_13":19,"_39":40,"_41":24,"_17":42,"_43":-5,"_44":194,"_46":47,"_48":-5,"_18":195},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1772113954116],[19],"pulls","branches","forks",{"_202":64,"_204":42},"connections",{"_202":42,"_203":42},"count","unfilledCount","emptyCount",{"_33":34,"_13":19,"_37":38,"_43":-5,"_35":36,"_46":47,"_61":62,"_44":115,"_17":42,"_41":24,"_39":40,"_67":68,"_48":-5,"_69":224,"_18":225},{"_33":107,"_13":108,"_37":109,"_43":-5,"_35":36,"_46":110,"_61":62,"_44":111,"_17":42,"_41":24,"_39":112,"_67":68,"_48":-5,"_69":222,"_18":223},{"_33":99,"_13":100,"_37":101,"_43":-5,"_35":36,"_46":102,"_61":62,"_44":103,"_17":42,"_41":24,"_39":104,"_67":68,"_48":-5,"_69":220,"_18":221},{"_33":90,"_13":91,"_37":92,"_43":-5,"_35":36,"_46":93,"_61":62,"_44":94,"_17":95,"_41":24,"_39":96,"_67":68,"_48":-5,"_69":218,"_18":219},{"_33":82,"_13":83,"_37":84,"_43":-5,"_35":36,"_46":85,"_61":62,"_44":86,"_17":42,"_41":24,"_39":87,"_67":68,"_48":-5,"_69":216,"_18":217},{"_33":72,"_13":73,"_37":74,"_43":-5,"_35":36,"_46":75,"_61":62,"_44":76,"_17":77,"_41":78,"_39":79,"_67":68,"_48":-5,"_69":214,"_18":215},{"_33":57,"_13":58,"_37":59,"_43":-5,"_35":36,"_46":60,"_61":62,"_44":63,"_17":64,"_41":65,"_39":66,"_67":68,"_48":-5,"_69":212,"_18":213},[],[58],[],[73],[],[83],[],[91],[],[100],[],[108],[],[19],["D",1772113756582],["D",1789449035005],{"_11":12,"_174":170},{"_11":12,"_168":-5,"_169":170,"_128":129,"_171":172,"_173":68},{"_17":75,"_13":16,"_33":36,"_160":118,"_161":-5,"_162":-5,"_163":-5,"_164":-5,"_165":-5,"_166":14,"_167":12},"ctx",{"_153":-5,"_191":264,"_265":266,"_267":268,"_269":68,"_270":68,"_271":68,"_272":62,"_273":-5,"_274":-7,"_275":-7,"_276":42,"_277":68,"_278":68,"_279":-5,"_280":68,"_281":68,"_282":68,"_283":-5},"ENV",{"_235":236,"_237":238,"_239":16,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]