[{"_1":2,"_170":-5,"_171":-5},"loaderData",{"_3":4,"_92":93},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20,"_34":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","20d05c705b6097b8b67aaed22e5ff0a688314dca","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":20,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":20,"_91":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":20,"_19":20,"_83":73,"_84":85,"_86":73,"_87":46,"_88":20,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_94":95,"_96":97,"_98":99,"_100":101,"_148":149,"_167":168,"_169":-5},"handle","kliv","name","te37es1q4t14es4ts9sf6v7s5513362v11","path","fu2e2tt5st3qq64t58q0s90t941740sv75.ts","project",{"_102":103,"_96":97,"_104":105,"_106":-5,"_107":20,"_108":109,"_110":-5,"_111":-5,"_12":112,"_113":-5,"_114":20,"_115":-5,"_116":-5,"_117":32,"_14":118,"_119":120,"_121":120,"_122":123,"_124":123,"_125":123,"_126":120,"_127":120,"_23":128,"_131":132,"_134":135,"_147":20},"id","67861a7c-edc3-11f0-ac52-42dde27851f2","createdAt",["D",1768008395969],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","0199d9f9-8fb9-705d-a1be-150ee5ea0145","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","0199d9f9-8fb9-705d-a1be-18ed6d1d02d7","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_129":130},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzMzeW9MdTZSSlZXdUFyNHFTckJtSlg1b3paYiJ9","org",{"_94":95,"_133":130,"_12":112},"avatar","branch",{"_136":137,"_96":44,"_102":138,"_139":103,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":-5,"_145":97,"_146":95},"version",7,"678668b0-edc3-11f0-ac52-42dde27851f2","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_102":150,"_96":99,"_151":152,"_153":-5,"_154":138,"_155":137,"_156":157,"_104":158,"_136":159,"_160":161,"_162":163,"_164":20,"_165":-5,"_98":166},"b4721a14-f112-11f0-88a3-42dde27851f2","fileId","1c8c5128-f078-11f0-af8a-42dde27851f2","parentId","branchId","branchVersion","latest",true,["D",1768372308746],4,"fileType","http","content","export default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n try {\n const userUuid = req.headers.get('x-user-uuid');\n if (!userUuid) {\n return Response.json({ \n success: false, \n error: 'Authentication required' \n }, { status: 401 });\n }\n \n const body = await req.json();\n const { email, artistName, labelName, verificationCode, issueDate, verificationType } = body;\n \n if (!email || !artistName || !labelName || !verificationCode) {\n return Response.json({ \n success: false, \n error: 'Missing required fields' \n }, { status: 400 });\n }\n \n const sdkUrl = req.headers.get(\"x-sdk-url\");\n const platformToken = req.headers.get(\"x-platform-token\");\n const apiBaseUrl = req.headers.get(\"x-api-base-url\");\n \n if (!sdkUrl || !platformToken || !apiBaseUrl) {\n return Response.json({ \n success: false, \n error: 'Server configuration error' \n }, { status: 500 });\n }\n \n const { PlatformClient } = await import(sdkUrl);\n const platform = new PlatformClient(platformToken, apiBaseUrl);\n \n // Sanitize inputs to prevent SVG injection\n const sanitizeText = (text) => {\n if (!text) return '';\n return text.toString()\n .replace(/&/g, '&')\n .replace(//g, '>')\n .replace(/\"/g, '"')\n .replace(/'/g, ''')\n .replace(/[^\\x20-\\x7E]/g, ''); // Remove non-ASCII\n };\n \n const safeArtistName = sanitizeText(artistName);\n const safeLabelName = sanitizeText(labelName);\n const safeVerificationCode = sanitizeText(verificationCode);\n const safeVerificationType = sanitizeText(verificationType || 'Artist');\n \n let formattedDate = 'N/A';\n try {\n const dateNum = typeof issueDate === 'number' ? issueDate : parseInt(issueDate);\n if (!isNaN(dateNum)) {\n formattedDate = new Date(dateNum * 1000).toLocaleDateString('en-US', {\n year: 'numeric',\n month: 'long',\n day: 'numeric'\n });\n } else {\n formattedDate = new Date().toLocaleDateString('en-US', {\n year: 'numeric',\n month: 'long',\n day: 'numeric'\n });\n }\n } catch (e) {\n formattedDate = new Date().toLocaleDateString('en-US', {\n year: 'numeric',\n month: 'long',\n day: 'numeric'\n });\n }\n \n // Generate SVG certificate with sanitized values\n const svgCertificate = `\n`;\n \n // Upload certificate to content filesystem\n let certificateImageUrl = '';\n let certificateUrl = '';\n \n try {\n const svgBuffer = new TextEncoder().encode(svgCertificate);\n const contentPath = `/content/certificates/${safeVerificationCode}.svg`;\n \n await platform.uploadContentFile({\n path: contentPath,\n content: svgBuffer,\n contentType: 'image/svg+xml'\n });\n \n const siteUrl = 'https://artist-label-kyc-verification.kliv.site';\n certificateImageUrl = `${siteUrl}${contentPath}`;\n certificateUrl = `${siteUrl}/verify-status?code=${safeVerificationCode}`;\n \n await platform.log('info', 'Certificate uploaded', {\n verificationCode: safeVerificationCode,\n path: contentPath,\n url: certificateImageUrl\n });\n } catch (uploadError) {\n await platform.log('error', 'Certificate upload failed', {\n error: uploadError.message,\n verificationCode: safeVerificationCode\n });\n console.error('Upload error:', uploadError);\n \n // Fallback to verification URL only\n const siteUrl = 'https://artist-label-kyc-verification.kliv.site';\n certificateUrl = `${siteUrl}/verify-status?code=${safeVerificationCode}`;\n }\n \n // Try to send email with better error handling\n try {\n const emailResult = await platform.sendEmail({\n templateName: 'certificate_awarded',\n recipientEmail: email,\n recipientName: safeArtistName,\n customVariables: {\n artistName: safeArtistName,\n labelName: safeLabelName,\n verificationCode: safeVerificationCode,\n verificationType: safeVerificationType,\n issueDate: formattedDate,\n certificateUrl,\n certificateImageUrl: certificateImageUrl || certificateUrl,\n currentYear: new Date().getFullYear().toString()\n }\n });\n \n if (emailResult.responseCode === 'email_sent') {\n return Response.json({ \n success: true, \n message: 'Certificate email sent successfully',\n sentAt: new Date().toISOString(),\n certificateImageUrl,\n certificateUrl\n });\n } else {\n // Email failed but certificate was generated\n return Response.json({ \n success: true,\n message: 'Certificate generated but email could not be sent',\n warning: 'Certificate URL available below',\n sentAt: new Date().toISOString(),\n certificateImageUrl,\n certificateUrl,\n emailError: emailResult.message\n });\n }\n } catch (emailError) {\n await platform.log('error', 'Email send failed', {\n error: emailError.message,\n recipientEmail: email,\n verificationCode: safeVerificationCode\n });\n \n // Check for rate limit errors\n const errorMessage = emailError.message || emailError.toString();\n if (errorMessage.toLowerCase().includes('rate limit') || \n errorMessage.toLowerCase().includes('daily limit')) {\n return Response.json({ \n success: false, \n error: '⚠️ Rate limit: 2 emails per day in dev mode. Deploy to production for unlimited emails!',\n rateLimit: true,\n isDevLimit: true,\n certificateImageUrl,\n certificateUrl\n }, { status: 429 });\n }\n \n // Email failed but certificate was generated\n return Response.json({ \n success: true,\n message: 'Certificate generated! Email failed but you can use the links below:',\n warning: 'Email service unavailable in dev mode',\n certificateImageUrl,\n certificateUrl\n });\n }\n \n } catch (error) {\n console.error('Certificate email error:', error.message);\n \n return Response.json({ \n success: false, \n error: 'Internal server error',\n details: error.message\n }, { status: 500 });\n }\n}","deleted","label",[99],"permalink","https://www.val.town/x/kliv/te37es1q4t14es4ts9sf6v7s5513362v11/code/fu2e2tt5st3qq64t58q0s90t941740sv75.ts","extension","actionData","errors"]