[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_163":164,"_165":166},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_61":133,"_16":-7,"_134":-5,"_17":135,"_136":137,"_28":138,"_21":139,"_23":140,"_141":-5,"_142":-5,"_143":-5,"_144":36,"_145":146,"_147":34,"_148":-5,"_149":-5,"_150":151},"routes/_app.x.$handle.$name._index",{"_11":12,"_13":14,"_15":-7,"_16":-7,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-7,"_26":-5,"_27":-5,"_28":29,"_30":-5,"_31":-5,"_32":-5,"_33":34,"_35":36,"_37":34},"handle","sbsb04","name","CPC","branchName","version","project",{"_39":78,"_13":14,"_50":79,"_80":-5,"_81":36,"_82":83,"_84":83,"_85":86,"_87":-5,"_88":89,"_90":-5,"_91":36,"_92":-5,"_93":-5,"_94":67,"_95":96,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":102,"_103":102,"_104":105,"_106":105,"_107":105,"_108":102,"_109":102,"_110":111,"_112":113,"_114":115,"_116":36},"tags",[],"counts",{"_66":67,"_68":69,"_70":67,"_71":72,"_73":74},"contents",[63],"readme","upstream","pull","files",[38],"preview","ahead","behind","showHomeCustomizationHint",true,"showHTTPPreviewSettingsHint",false,"hasHTTPFiles",{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":34,"_50":51,"_16":52,"_53":54,"_55":56,"_57":36,"_58":-5,"_59":60,"_61":62},"id","4bb814c3-ea57-4f34-89cf-259a31e9c996","main.ts","fileId","b93d996c-63f2-11f1-81e7-1607ee4eb77e","parentId","branchId","405ef55a-db6d-4fee-80d1-5fdfa41b8346","branchVersion",25,"latest","createdAt",["D",1781008071768],24,"fileType","http","content","// ============================================================\n// Chai pe Charcha -- Live Promotion Poem Generator\n// Val.Town HTTP Val -- NO API KEY REQUIRED\n//\n// SETUP (takes 2 minutes):\n// 1. Paste this file into a new HTTP Val on Val.Town\n// 2. Val.Town sidebar -> Env vars -> add: HOST_KEY = pick-any-password\n// 3. Set Val visibility to UNLISTED (Settings tab), then hit Run\n//\n// PARTICIPANT URL: https://YOUR_VAL.web.val.run\n// HOST URL: https://YOUR_VAL.web.val.run/?host=true&key=YOUR_HOST_KEY\n//\n// SECURITY AUDIT:\n// [OK] HOST_KEY lives only in Env vars -- never in source code\n// [OK] /api/brew and /api/clear return 401 without correct x-host-key header\n// [OK] Words are fully anonymous -- no names, no IPs stored anywhere\n// [OK] 3-word limit enforced server-side via anonymous session token\n// [OK] /api/state returns words[] and poem only -- tokens never exposed\n// [OK] All DB queries use parameterised statements -- no SQL injection risk\n// [OK] Input length capped server-side (word: 40 chars, token: 36 chars)\n// [OK] Set Val to UNLISTED so your source code is not publicly browseable\n// ============================================================\n\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\n\nconst TONES: Record = {\n playful:\n \"a warm cheeky consulting-life tone (late nights, decks, chai, wins)\",\n bollywood:\n \"a playful Bollywood-shayari Hinglish style -- light and celebratory\",\n inspirational:\n \"an uplifting motivational tone -- warm and human, not generic corporate\",\n};\n\n// HTML served to participants (anonymous word submission + live wall + poem reveal)\nconst HTML_PARTICIPANT: string =\n '\\n\\n\\n\\n\\nChai pe Charcha\\n\\n\\n\\n

\\n

☕

\\n

Chai pe Charcha

\\n

Drop up to 3 words anonymously — the host brews a poem for everyone

\\n

0 words collected

\\n

\\n Drop Your Word\\n

\\n \\n \\n

\\n

One word or short phrase — fully anonymous, no name needed

\\n

Your words: 0 / 3

\\n

Live Word Wall — 0 words

\\n

Waiting for the first word...

\\n

\\n “”\\n

Brewing over a cup of chai...

\\n

Your Promotion Poem

\\n

Chai pe Charcha — Promotion Cohort FY27

\\n

\\n\\n\\n';\n\n// HTML served to the host (same as above + tone picker + Brew + Clear All buttons)\nconst HTML_HOST: string =\n '\\n\\n\\n\\n\\nChai pe Charcha -- Host\\n\\n\\n\\n

\\n

☕

\\n

Chai pe Charcha

\\n

Drop up to 3 words anonymously — brew a poem from everyone\\'s contributions

\\n

🎙 Host View

\\n

0 words collected

\\n

\\n Drop Your Word\\n

\\n \\n \\n

\\n

You can also add words as host

\\n

Your words: 0 / 3

\\n

Live Word Wall — 0 words

\\n

Waiting for the first word...

\\n

\\n Poem Tone\\n

\\n \\n \\n \\n

\\n

\\n \\n \\n

\\n

\\n “”\\n

Brewing over a cup of chai...

\\n

Your Promotion Poem

\\n

Chai pe Charcha — Promotion Cohort FY27

\\n

\\n\\n\\n';\n\n// DB: one table for words (anonymous), one row for the poem\nasync function initDB() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS cpc_words (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n word TEXT NOT NULL,\n session_token TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS cpc_poem (\n id INTEGER PRIMARY KEY CHECK (id=1),\n poem TEXT,\n tone TEXT,\n generated_at INTEGER\n )`);\n await sqlite.execute(\"INSERT OR IGNORE INTO cpc_poem (id) VALUES (1)\");\n}\n\nexport default async function handler(req: Request): Promise {\n await initDB();\n const url = new URL(req.url);\n const path = url.pathname;\n const J = { \"Content-Type\": \"application/json\" };\n const hostKey = Deno.env.get(\"HOST_KEY\");\n\n // ── GET / : serve the right HTML ──────────────────────────────────────────\n if (req.method === \"GET\" && path === \"/\") {\n const isHost = !!hostKey &&\n url.searchParams.get(\"host\") === \"true\" &&\n url.searchParams.get(\"key\") === hostKey;\n return new Response(isHost ? HTML_HOST : HTML_PARTICIPANT, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // ── GET /api/state : words list + poem -- tokens never included ────────────\n if (req.method === \"GET\" && path === \"/api/state\") {\n const wr = await sqlite.execute(\n \"SELECT word FROM cpc_words ORDER BY created_at ASC\",\n );\n const pr = await sqlite.execute(\"SELECT poem FROM cpc_poem WHERE id=1\");\n return new Response(\n JSON.stringify({\n words: wr.rows.map((r) => r[0] as string),\n poem: (pr.rows[0]?.[0] as string) || null,\n }),\n { headers: J },\n );\n }\n\n // ── POST /api/add : anonymous word submission ──────────────────────────────\n if (req.method === \"POST\" && path === \"/api/add\") {\n let body: { word?: string; token?: string };\n try {\n body = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"Invalid request.\" }), {\n status: 400,\n headers: J,\n });\n }\n const word = (body.word || \"\").trim().slice(0, 40);\n const token = (body.token || \"\").trim().slice(0, 36);\n if (!word || !token) {\n return new Response(JSON.stringify({ error: \"Missing word.\" }), {\n status: 400,\n headers: J,\n });\n }\n const tc = await sqlite.execute(\n \"SELECT COUNT(*) FROM cpc_words WHERE session_token=?\",\n [token],\n );\n if ((tc.rows[0][0] as number) >= 3) {\n return new Response(\n JSON.stringify({\n error: \"You have already submitted 3 words -- that's the max!\",\n }),\n { status: 400, headers: J },\n );\n }\n const dc = await sqlite.execute(\n \"SELECT COUNT(*) FROM cpc_words WHERE LOWER(word)=LOWER(?)\",\n [word],\n );\n if ((dc.rows[0][0] as number) > 0) {\n return new Response(\n JSON.stringify({ error: \"That word is already on the wall!\" }),\n { status: 400, headers: J },\n );\n }\n const tot = await sqlite.execute(\"SELECT COUNT(*) FROM cpc_words\");\n if ((tot.rows[0][0] as number) >= 90) {\n return new Response(\n JSON.stringify({ error: \"Wall is full -- 90 words max!\" }),\n { status: 400, headers: J },\n );\n }\n await sqlite.execute(\n \"INSERT INTO cpc_words (word, session_token, created_at) VALUES (?, ?, ?)\",\n [word, token, Date.now()],\n );\n return new Response(JSON.stringify({ ok: true }), { headers: J });\n }\n\n // ── POST /api/brew : HOST ONLY -- generate poem ────────────────────────────\n if (req.method === \"POST\" && path === \"/api/brew\") {\n if (!hostKey || req.headers.get(\"x-host-key\") !== hostKey) {\n return new Response(JSON.stringify({ error: \"Unauthorized.\" }), {\n status: 401,\n headers: J,\n });\n }\n let body: { tone?: string };\n try {\n body = await req.json();\n } catch {\n body = {};\n }\n const wr = await sqlite.execute(\n \"SELECT word FROM cpc_words ORDER BY created_at ASC\",\n );\n const words = wr.rows.map((r) => r[0] as string);\n if (words.length < 3) {\n return new Response(\n JSON.stringify({ error: \"Need at least 3 words to brew!\" }),\n { status: 400, headers: J },\n );\n }\n const tone = (body.tone || \"playful\") as string;\n const toneDesc = TONES[tone] || TONES.playful;\n const wordList = words.map((w) => '\"' + w + '\"').join(\", \");\n const prompt = [\n \"You are a witty cohort poet for celebrating promotions on Chai pe Charcha with your leader.\",\n \"\",\n \"Write a celebratory poem (12-16 lines, AABB rhyme scheme) that:\",\n \"- Weaves in as many of these words naturally: \" + wordList,\n \"- Does NOT mention a specific number of promotees\",\n \"- Has \" + toneDesc,\n \"- Ends on a forward-looking note for FY27\",\n \"- Is suitable to read aloud in under 60 seconds\",\n \"\",\n \"Output only the poem, no preamble.\",\n ].join(\"\\n\");\n try {\n const openai = new OpenAI();\n const comp = await openai.chat.completions.create({\n model: \"gpt-4o-mini\",\n max_tokens: 800,\n messages: [{ role: \"user\", content: prompt }],\n });\n const poem = comp.choices[0]?.message?.content?.trim() || \"\";\n if (!poem) throw new Error(\"empty\");\n await sqlite.execute(\n \"UPDATE cpc_poem SET poem=?, tone=?, generated_at=? WHERE id=1\",\n [poem, tone, Date.now()],\n );\n return new Response(JSON.stringify({ poem }), { headers: J });\n } catch {\n return new Response(\n JSON.stringify({ error: \"AI generation failed -- try again.\" }),\n { status: 500, headers: J },\n );\n }\n }\n\n // ── POST /api/clear : HOST ONLY -- wipe everything ────────────────────────\n if (req.method === \"POST\" && path === \"/api/clear\") {\n if (!hostKey || req.headers.get(\"x-host-key\") !== hostKey) {\n return new Response(JSON.stringify({ error: \"Unauthorized.\" }), {\n status: 401,\n headers: J,\n });\n }\n await sqlite.execute(\"DELETE FROM cpc_words\");\n await sqlite.execute(\n \"UPDATE cpc_poem SET poem=NULL, tone=NULL, generated_at=NULL WHERE id=1\",\n );\n return new Response(JSON.stringify({ ok: true }), { headers: J });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","deleted","label","children",[],"path",[41],{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":34,"_50":64,"_16":52,"_53":54,"_55":56,"_57":36,"_58":-5,"_61":65},["D",1781008071768],[41],"pulls",0,"branches",1,"forks","envVars",{"_75":69,"_77":67},"connections",{"_75":67,"_76":67},"count","unfilledCount","emptyCount","886a49c3-b7a2-48f2-a0a9-f14989a7d11c",["D",1781002956600],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Cohort Connect Brew a Poem","imageUrl","userId","dc779bd4-7015-4d5d-b2ae-f96d046acd17","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019e97d0-e15a-7481-b4c3-8ccba5e7f01f","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_132":128},"org",{"_11":12,"_126":-5,"_127":128,"_88":89,"_129":130,"_131":36},"branch",{"_16":48,"_13":117,"_39":46,"_118":78,"_119":-5,"_120":-5,"_121":-5,"_122":-5,"_123":-5,"_124":14,"_125":12},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://lh3.googleusercontent.com/a/ACg8ocJVFV0v8FiCT9QKCB2kq3hTUB_bDl5tnQY9gEZtjwU3l0eC7w=s96-c","tier","free","canRestrictVals","profileImageUrl","","adoptOrgId",{"_39":78,"_13":14,"_50":159,"_80":-5,"_81":36,"_82":83,"_84":83,"_85":86,"_87":-5,"_88":89,"_90":-5,"_91":36,"_92":-5,"_93":-5,"_94":67,"_95":96,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":102,"_103":102,"_104":105,"_106":105,"_107":105,"_108":102,"_109":102,"_110":160,"_112":161,"_114":162,"_116":36},"tree",[156],[156],{"_66":67,"_68":69,"_70":67,"_71":154,"_73":155},[152],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":34,"_50":64,"_16":52,"_53":54,"_55":56,"_57":36,"_58":-5,"_61":153},[41],{"_75":69,"_77":67},{"_75":67,"_76":67},{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":34,"_50":51,"_16":52,"_53":54,"_55":56,"_57":36,"_58":-5,"_59":157,"_61":158},[],[41],["D",1781002956600],{"_11":12,"_132":128},{"_11":12,"_126":-5,"_127":128,"_88":89,"_129":130,"_131":36},{"_16":48,"_13":117,"_39":46,"_118":78,"_119":-5,"_120":-5,"_121":-5,"_122":-5,"_123":-5,"_124":14,"_125":12},"ctx",{"_110":-5,"_149":196,"_197":198,"_199":200,"_201":36,"_202":36,"_203":36,"_204":34,"_205":-5,"_206":-7,"_207":-7,"_208":67,"_209":36,"_210":36,"_211":-5,"_212":36,"_213":36,"_214":36,"_215":-5},"ENV",{"_167":168,"_169":170,"_171":117,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]