[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":53,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",14,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","0a4dc2f8-a8e2-11f1-a6ca-1607ee4eb77e","name","fileType","http","content","/**\n * FazerCards ⇄ Supabase — proxy seguro (Fase 1-4 completas)\n * ---------------------------------------------------------------------\n * Esto corre en val.town, NUNCA en el navegador del cliente.\n * Las llaves secretas viven aquí escondidas — jamás se pegan en tus .html.\n *\n * Variables de entorno en val.town:\n * FAZERCARDS_API_KEY -> tu API Key de FazerCards\n * SUPABASE_URL -> https://zdefkvvodijmrlhxvlrr.supabase.co\n * SUPABASE_ANON_KEY -> la publishable key (sb_publishable_...)\n * SUPABASE_SERVICE_ROLE_KEY -> la secret key (sb_secret_...)\n * ADMIN_SYNC_KEY -> clave inventada por ti, solo para el admin\n *\n * Acciones de ADMIN (piden ?admin_key=TU_ADMIN_SYNC_KEY):\n * GET ?action=check-key\n * GET ?action=sync-categories\n * GET ?action=sync-offers&tipo=topup&category_id=X\n * GET ?action=debug-validate-id&category_id=X -> revisa si un juego admite validar ID\n * GET ?action=debug-search&tipo=topup&query=X -> busca EN VIVO en FazerCards (sin pasar por Supabase)\n *\n * Acciones de CLIENTE (piden header Authorization: Bearer ):\n * POST ?action=validate-id body:{ catalogoId, fields }\n * POST ?action=place-order body:{ catalogoId, fields, idempotencyKey }\n */\n\nconst FAZERCARDS_BASE = \"https://api.fzr.cards/api/v2\";\n\nfunction corsHeaders() {\n return {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n}\n\nfunction json(data: unknown, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders() },\n });\n}\n\nasync function esperar(ms: number) { return new Promise(res => setTimeout(res, ms)); }\n\nasync function fazercardsFetch(path: string, init: RequestInit = {}) {\n const apiKey = Deno.env.get(\"FAZERCARDS_API_KEY\")!;\n let ultimoError: any = null;\n\n for (let intento = 0; intento < 4; intento++) {\n const resp = await fetch(FAZERCARDS_BASE + path, {\n ...init,\n headers: { \"X-API-Key\": apiKey, \"Content-Type\": \"application/json\", ...(init.headers || {}) },\n });\n\n // 429 = nos pasamos del límite de peticiones por minuto de FazerCards.\n // En vez de fallar en silencio, esperamos un poco y reintentamos.\n if (resp.status === 429) {\n ultimoError = { status: 429, data: await resp.json().catch(() => ({})) };\n await esperar(600 * (intento + 1));\n continue;\n }\n\n const data = await resp.json().catch(() => ({}));\n return { ok: resp.ok && data.ok !== false, status: resp.status, data };\n }\n\n return { ok: false, status: 429, data: { error: \"Límite de peticiones de FazerCards alcanzado varias veces seguidas. Intenta de nuevo en un minuto.\", ...ultimoError } };\n}\nconst fazercardsGet = (path: string) => fazercardsFetch(path);\n\n/* Recorre TODAS las páginas de un listado paginado por cursor y junta\n sus \"items\" en un solo arreglo. Sin esto, cualquier categoría que no\n estuviera en la primera página (ej. \"validate-id\") se perdía en silencio. */\nasync function fazercardsGetAll(path: string, limit = 200) {\n let items: any[] = [];\n let cursor: string | null = null;\n let paginas = 0;\n\n do {\n const sep = path.includes(\"?\") ? \"&\" : \"?\";\n const cursorParam = cursor ? `&cursor=${encodeURIComponent(cursor)}` : \"\";\n const r = await fazercardsGet(`${path}${sep}limit=${limit}${cursorParam}`);\n if (!r.ok) return { ok: false, status: r.status, data: r.data, items };\n items = items.concat(r.data.items || []);\n const meta = r.data.meta || {};\n cursor = meta.has_more ? meta.next_cursor : null;\n paginas++;\n } while (cursor && paginas < 50);\n\n return { ok: true, items };\n}\n\n/* ---------- Supabase helpers (usan la Service Role Key) ---------- */\nfunction sbHeaders() {\n const key = Deno.env.get(\"SUPABASE_SERVICE_ROLE_KEY\")!;\n return { \"apikey\": key, \"Authorization\": `Bearer ${key}`, \"Content-Type\": \"application/json\" };\n}\n\nasync function supabaseUpsert(table: string, rows: Record[]) {\n if (!rows.length) return { ok: true, count: 0 };\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const TAMANO_LOTE = 200; // mandar todo de un jalón (ej. 1200 filas) se puede cortar o fallar\n let guardadas = 0;\n const errores: string[] = [];\n\n for (let i = 0; i < rows.length; i += TAMANO_LOTE) {\n const lote = rows.slice(i, i + TAMANO_LOTE);\n const resp = await fetch(`${url}/rest/v1/${table}`, {\n method: \"POST\",\n headers: { ...sbHeaders(), \"Prefer\": \"resolution=merge-duplicates\" },\n body: JSON.stringify(lote),\n });\n if (!resp.ok) {\n errores.push(`lote ${i}-${i + lote.length}: ${await resp.text()}`);\n } else {\n guardadas += lote.length;\n }\n }\n\n if (errores.length) return { ok: false, count: guardadas, error: errores.join(\" | \") };\n return { ok: true, count: guardadas };\n}\n\nasync function supabaseSelect(table: string, query: string) {\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const resp = await fetch(`${url}/rest/v1/${table}?${query}`, { headers: sbHeaders() });\n if (!resp.ok) return { ok: false, error: await resp.text(), data: [] };\n return { ok: true, data: await resp.json() };\n}\n\nasync function supabaseInsert(table: string, row: Record) {\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const resp = await fetch(`${url}/rest/v1/${table}`, {\n method: \"POST\",\n headers: { ...sbHeaders(), \"Prefer\": \"return=representation\" },\n body: JSON.stringify(row),\n });\n if (!resp.ok) return { ok: false, error: await resp.text() };\n const data = await resp.json();\n return { ok: true, row: data[0] };\n}\n\n/* ---------- verificar quién está llamando (cliente logueado) ---------- */\nasync function verificarUsuario(req: Request) {\n const auth = req.headers.get(\"Authorization\") || \"\";\n const token = auth.replace(/^Bearer\\s+/i, \"\");\n if (!token) return null;\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const anon = Deno.env.get(\"SUPABASE_ANON_KEY\")!;\n const resp = await fetch(`${url}/auth/v1/user`, {\n headers: { \"apikey\": anon, \"Authorization\": `Bearer ${token}` },\n });\n if (!resp.ok) return null;\n return await resp.json(); // { id, email, ... }\n}\n\nasync function calcularSaldo(userId: string) {\n const recargas = await supabaseSelect(\"recargas\", `user_id=eq.${userId}&estado=eq.confirmado&select=monto`);\n const pedidos = await supabaseSelect(\"pedidos\", `user_id=eq.${userId}&metodo_pago=eq.Saldo%20FariPlay&select=total`);\n const recargado = (recargas.data || []).reduce((s: number, r: any) => s + Number(r.monto), 0);\n const gastado = (pedidos.data || []).reduce((s: number, p: any) => s + Number(p.total), 0);\n return recargado - gastado;\n}\n\n/* ---------- sincronización (admin) ---------- */\nasync function syncCategories() {\n const resultados: Record[] = [];\n const errores: Record[] = [];\n\n const idsConValidacion = new Set();\n const validacion = await fazercardsGetAll(\"/topups/validate-id\");\n if (validacion.ok) {\n for (const item of validacion.items) idsConValidacion.add(item.category_id);\n } else {\n errores.push({ fuente: \"validate-id\", detalle: validacion.data });\n }\n\n const topups = await fazercardsGetAll(\"/topups\");\n if (!topups.ok) errores.push({ fuente: \"topups\", status: topups.status, detalle: topups.data });\n for (const item of topups.items) {\n resultados.push({\n id: `topup:${item.category_id}`, tipo: \"topup\", category_id: item.category_id,\n nombre: item.name, sincronizado: false,\n soporta_validacion: idsConValidacion.has(item.category_id),\n });\n }\n\n const giftcards = await fazercardsGetAll(\"/giftcards\");\n if (!giftcards.ok) errores.push({ fuente: \"giftcards\", status: giftcards.status, detalle: giftcards.data });\n for (const item of giftcards.items) {\n resultados.push({ id: `giftcard:${item.category_id}`, tipo: \"giftcard\", category_id: item.category_id, nombre: item.name, sincronizado: false });\n }\n\n const gamekeys = await fazercardsGetAll(\"/gamekeys\");\n if (!gamekeys.ok) errores.push({ fuente: \"gamekeys\", status: gamekeys.status, detalle: gamekeys.data });\n for (const item of gamekeys.items) {\n resultados.push({ id: `gamekey:${item.game_id}`, tipo: \"gamekey\", category_id: item.game_id, nombre: item.name, sincronizado: false });\n }\n\n const guardado = resultados.length ? await supabaseUpsert(\"catalogo_categorias\", resultados) : { ok: true, count: 0 };\n return { total: resultados.length, conValidacion: idsConValidacion.size, guardado, errores: errores.length ? errores : undefined };\n}\n\nasync function syncOffers(tipo: string, categoryId: string) {\n let productos: Record[] = [];\n let categoryName = categoryId;\n let soportaValidacion = false;\n let avisoValidacion: string | undefined;\n\n if (tipo === \"topup\") {\n const r = await fazercardsGet(`/topups/offers?category_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.name || categoryId;\n const campos = r.data.fields || [];\n\n const validacion = await fazercardsGetAll(\"/topups/validate-id\");\n if (validacion.ok) {\n soportaValidacion = validacion.items.some((it: any) => it.category_id === categoryId);\n } else {\n // No pudimos confirmar si admite validación (probablemente límite de peticiones).\n // Avisamos en vez de guardar \"false\" como si fuera un hecho comprobado.\n avisoValidacion = \"No se pudo confirmar si este juego admite validación de ID (\" + JSON.stringify(validacion.data) + \"). Vuelve a importar esta categoría en un minuto para confirmarlo.\";\n }\n\n productos = (r.data.offers || []).map((o: any) => ({\n id: `topup:${categoryId}:${o.offer_id}`, tipo: \"topup\", category_id: categoryId, category_name: categoryName,\n offer_id: o.offer_id, offer_name: o.name, precio_mayorista: Number(o.price_usd),\n campos, soporta_validacion: soportaValidacion, activo: false,\n }));\n } else if (tipo === \"giftcard\") {\n const r = await fazercardsGet(`/giftcards/cards?category_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.name || categoryId;\n productos = (r.data.offers || []).map((o: any) => ({\n id: `giftcard:${categoryId}:${o.card_id}`, tipo: \"giftcard\", category_id: categoryId, category_name: categoryName,\n offer_id: o.card_id, offer_name: o.name, precio_mayorista: Number(o.price_usd), activo: false,\n }));\n } else if (tipo === \"gamekey\") {\n const r = await fazercardsGet(`/gamekeys/keys?game_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.GameName || categoryId;\n productos = (r.data.keys || []).map((k: any) => ({\n id: `gamekey:${categoryId}:${k.key_id}`, tipo: \"gamekey\", category_id: categoryId, category_name: categoryName,\n offer_id: k.key_id, offer_name: k.name, precio_mayorista: Number(k.price_usd), activo: false,\n }));\n } else {\n return { error: \"tipo inválido\" };\n }\n\n const guardado = await supabaseUpsert(\"catalogo\", productos);\n await supabaseUpsert(\"catalogo_categorias\", [{\n id: `${tipo}:${categoryId}`, tipo, category_id: categoryId, nombre: categoryName,\n sincronizado: true, soporta_validacion: soportaValidacion,\n }]);\n\n return { total: productos.length, guardado, aviso: avisoValidacion };\n}\n\n/* ---------- validar ID (cliente) ---------- */\nasync function validarId(user: any, catalogoId: string, fields: Record) {\n const prod = await supabaseSelect(\"catalogo\", `id=eq.${encodeURIComponent(catalogoId)}&select=*`);\n const producto = (prod.data || [])[0];\n if (!producto) return { ok: false, error: \"Producto no encontrado\" };\n if (producto.tipo !== \"topup\" || !producto.soporta_validacion) {\n return { ok: false, error: \"Este producto no admite validación de ID\" };\n }\n\n const r = await fazercardsFetch(\"/topups/validate-id\", {\n method: \"POST\",\n body: JSON.stringify({ category_id: producto.category_id, fields }),\n });\n if (!r.ok) return { ok: false, error: r.data?.error || \"No se pudo validar el ID\" };\n return { ok: true, valido: r.data.valid, nombre: r.data.username || r.data.player_name || null, detalle: r.data };\n}\n\n/* ---------- procesar compra (cliente) ---------- */\nasync function procesarCompra(user: any, catalogoId: string, fields: Record, idempotencyKey: string) {\n const prod = await supabaseSelect(\"catalogo\", `id=eq.${encodeURIComponent(catalogoId)}&select=*`);\n const producto = (prod.data || [])[0];\n if (!producto) return { ok: false, error: \"Producto no encontrado\" };\n if (!producto.activo) return { ok: false, error: \"Este producto ya no está disponible\" };\n if (producto.precio_venta == null || producto.precio_venta <= 0) return { ok: false, error: \"Este producto no tiene precio configurado\" };\n\n const saldo = await calcularSaldo(user.id);\n const total = Number(producto.precio_venta);\n if (saldo < total) return { ok: false, error: \"Saldo insuficiente\" };\n\n let orderResp;\n if (producto.tipo === \"topup\") {\n orderResp = await fazercardsFetch(\"/topups/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ category_id: producto.category_id, offer_id: producto.offer_id, fields }),\n });\n } else if (producto.tipo === \"giftcard\") {\n orderResp = await fazercardsFetch(\"/giftcards/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ category_id: producto.category_id, card_id: producto.offer_id, quantity: 1 }),\n });\n } else if (producto.tipo === \"gamekey\") {\n orderResp = await fazercardsFetch(\"/gamekeys/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ game_id: producto.category_id, key_id: producto.offer_id, quantity: 1 }),\n });\n } else {\n return { ok: false, error: \"Tipo de producto desconocido\" };\n }\n\n if (!orderResp.ok) {\n return { ok: false, error: orderResp.data?.error || \"FazerCards rechazó el pedido\", detalle: orderResp.data };\n }\n\n const estadoLocal = orderResp.data.status === \"completed\" ? \"entregado\" : \"confirmado\";\n\n // El código (tarjetas de regalo / llaves) a veces viene de una vez, y a veces\n // hay que consultar el estado del pedido justo después de crearlo.\n let codigoEntrega = orderResp.data.code || (Array.isArray(orderResp.data.codes) ? orderResp.data.codes.join(\", \") : null);\n if (!codigoEntrega && (producto.tipo === \"giftcard\" || producto.tipo === \"gamekey\") && orderResp.data.id) {\n const detalle = await fazercardsGet(`/orders/${orderResp.data.id}`);\n if (detalle.ok) {\n codigoEntrega = detalle.data.code || (Array.isArray(detalle.data.codes) ? detalle.data.codes.join(\", \") : null);\n }\n }\n\n const guardado = await supabaseInsert(\"pedidos\", {\n user_id: user.id,\n user_email: user.email,\n paquete: `${producto.category_name} — ${producto.offer_name}`,\n bono: 0,\n precio: total,\n metodo_pago: \"Saldo FariPlay\",\n banco: null,\n codigo_cupon: null,\n descuento: 0,\n total: total,\n player_id: fields?.player_id || fields?.user_id || null,\n comprobante_url: null,\n estado: estadoLocal,\n tipo: producto.tipo,\n/**\n * FazerCards ⇄ Supabase — proxy seguro (Fase 1-4 completas)\n * ---------------------------------------------------------------------\n * Esto corre en val.town, NUNCA en el navegador del cliente.\n * Las llaves secretas viven aquí escondidas — jamás se pegan en tus .html.\n *\n * Variables de entorno en val.town:\n * FAZERCARDS_API_KEY -> tu API Key de FazerCards\n * SUPABASE_URL -> https://zdefkvvodijmrlhxvlrr.supabase.co\n * SUPABASE_ANON_KEY -> la publishable key (sb_publishable_...)\n * SUPABASE_SERVICE_ROLE_KEY -> la secret key (sb_secret_...)\n * ADMIN_SYNC_KEY -> clave inventada por ti, solo para el admin\n *\n * Acciones de ADMIN (piden ?admin_key=TU_ADMIN_SYNC_KEY):\n * GET ?action=check-key\n * GET ?action=sync-categories\n * GET ?action=sync-offers&tipo=topup&category_id=X\n * GET ?action=debug-validate-id&category_id=X -> revisa si un juego admite validar ID\n * GET ?action=debug-search&tipo=topup&query=X -> busca EN VIVO en FazerCards (sin pasar por Supabase)\n *\n * Acciones de CLIENTE (piden header Authorization: Bearer ):\n * POST ?action=validate-id body:{ catalogoId, fields }\n * POST ?action=place-order body:{ catalogoId, fields, idempotencyKey }\n */\n\nconst FAZERCARDS_BASE = \"https://api.fzr.cards/api/v2\";\n\nfunction corsHeaders() {\n return {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n}\n\nfunction json(data: unknown, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders() },\n });\n}\n\nasync function esperar(ms: number) { return new Promise(res => setTimeout(res, ms)); }\n\nasync function fazercardsFetch(path: string, init: RequestInit = {}) {\n const apiKey = Deno.env.get(\"FAZERCARDS_API_KEY\")!;\n let ultimoError: any = null;\n\n for (let intento = 0; intento < 4; intento++) {\n const resp = await fetch(FAZERCARDS_BASE + path, {\n ...init,\n headers: { \"X-API-Key\": apiKey, \"Content-Type\": \"application/json\", ...(init.headers || {}) },\n });\n\n // 429 = nos pasamos del límite de peticiones por minuto de FazerCards.\n // En vez de fallar en silencio, esperamos un poco y reintentamos.\n if (resp.status === 429) {\n ultimoError = { status: 429, data: await resp.json().catch(() => ({})) };\n await esperar(600 * (intento + 1));\n continue;\n }\n\n const data = await resp.json().catch(() => ({}));\n return { ok: resp.ok && data.ok !== false, status: resp.status, data };\n }\n\n return { ok: false, status: 429, data: { error: \"Límite de peticiones de FazerCards alcanzado varias veces seguidas. Intenta de nuevo en un minuto.\", ...ultimoError } };\n}\nconst fazercardsGet = (path: string) => fazercardsFetch(path);\n\n/* Recorre TODAS las páginas de un listado paginado por cursor y junta\n sus \"items\" en un solo arreglo. Sin esto, cualquier categoría que no\n estuviera en la primera página (ej. \"validate-id\") se perdía en silencio. */\nasync function fazercardsGetAll(path: string, limit = 200) {\n let items: any[] = [];\n let cursor: string | null = null;\n let paginas = 0;\n\n do {\n const sep = path.includes(\"?\") ? \"&\" : \"?\";\n const cursorParam = cursor ? `&cursor=${encodeURIComponent(cursor)}` : \"\";\n const r = await fazercardsGet(`${path}${sep}limit=${limit}${cursorParam}`);\n if (!r.ok) return { ok: false, status: r.status, data: r.data, items };\n items = items.concat(r.data.items || []);\n const meta = r.data.meta || {};\n cursor = meta.has_more ? meta.next_cursor : null;\n paginas++;\n } while (cursor && paginas < 50);\n\n return { ok: true, items };\n}\n\n/* ---------- Supabase helpers (usan la Service Role Key) ---------- */\nfunction sbHeaders() {\n const key = Deno.env.get(\"SUPABASE_SERVICE_ROLE_KEY\")!;\n return { \"apikey\": key, \"Authorization\": `Bearer ${key}`, \"Content-Type\": \"application/json\" };\n}\n\nasync function supabaseUpsert(table: string, rows: Record[]) {\n if (!rows.length) return { ok: true, count: 0 };\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const TAMANO_LOTE = 200; // mandar todo de un jalón (ej. 1200 filas) se puede cortar o fallar\n let guardadas = 0;\n const errores: string[] = [];\n\n for (let i = 0; i < rows.length; i += TAMANO_LOTE) {\n const lote = rows.slice(i, i + TAMANO_LOTE);\n const resp = await fetch(`${url}/rest/v1/${table}`, {\n method: \"POST\",\n headers: { ...sbHeaders(), \"Prefer\": \"resolution=merge-duplicates\" },\n body: JSON.stringify(lote),\n });\n if (!resp.ok) {\n errores.push(`lote ${i}-${i + lote.length}: ${await resp.text()}`);\n } else {\n guardadas += lote.length;\n }\n }\n\n if (errores.length) return { ok: false, count: guardadas, error: errores.join(\" | \") };\n return { ok: true, count: guardadas };\n}\n\nasync function supabaseSelect(table: string, query: string) {\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const resp = await fetch(`${url}/rest/v1/${table}?${query}`, { headers: sbHeaders() });\n if (!resp.ok) return { ok: false, error: await resp.text(), data: [] };\n return { ok: true, data: await resp.json() };\n}\n\nasync function supabaseInsert(table: string, row: Record) {\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const resp = await fetch(`${url}/rest/v1/${table}`, {\n method: \"POST\",\n headers: { ...sbHeaders(), \"Prefer\": \"return=representation\" },\n body: JSON.stringify(row),\n });\n if (!resp.ok) return { ok: false, error: await resp.text() };\n const data = await resp.json();\n return { ok: true, row: data[0] };\n}\n\n/* ---------- verificar quién está llamando (cliente logueado) ---------- */\nasync function verificarUsuario(req: Request) {\n const auth = req.headers.get(\"Authorization\") || \"\";\n const token = auth.replace(/^Bearer\\s+/i, \"\");\n if (!token) return null;\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const anon = Deno.env.get(\"SUPABASE_ANON_KEY\")!;\n const resp = await fetch(`${url}/auth/v1/user`, {\n headers: { \"apikey\": anon, \"Authorization\": `Bearer ${token}` },\n });\n if (!resp.ok) return null;\n return await resp.json(); // { id, email, ... }\n}\n\nasync function calcularSaldo(userId: string) {\n const recargas = await supabaseSelect(\"recargas\", `user_id=eq.${userId}&estado=eq.confirmado&select=monto`);\n const pedidos = await supabaseSelect(\"pedidos\", `user_id=eq.${userId}&metodo_pago=eq.Saldo%20FariPlay&select=total`);\n const recargado = (recargas.data || []).reduce((s: number, r: any) => s + Number(r.monto), 0);\n const gastado = (pedidos.data || []).reduce((s: number, p: any) => s + Number(p.total), 0);\n return recargado - gastado;\n}\n\n/* ---------- sincronización (admin) ---------- */\nasync function syncCategories() {\n const resultados: Record[] = [];\n const errores: Record[] = [];\n\n const idsConValidacion = new Set();\n const validacion = await fazercardsGetAll(\"/topups/validate-id\");\n if (validacion.ok) {\n for (const item of validacion.items) idsConValidacion.add(item.category_id);\n } else {\n errores.push({ fuente: \"validate-id\", detalle: validacion.data });\n }\n\n const topups = await fazercardsGetAll(\"/topups\");\n if (!topups.ok) errores.push({ fuente: \"topups\", status: topups.status, detalle: topups.data });\n for (const item of topups.items) {\n resultados.push({\n id: `topup:${item.category_id}`, tipo: \"topup\", category_id: item.category_id,\n nombre: item.name, sincronizado: false,\n soporta_validacion: idsConValidacion.has(item.category_id),\n });\n }\n\n const giftcards = await fazercardsGetAll(\"/giftcards\");\n if (!giftcards.ok) errores.push({ fuente: \"giftcards\", status: giftcards.status, detalle: giftcards.data });\n for (const item of giftcards.items) {\n resultados.push({ id: `giftcard:${item.category_id}`, tipo: \"giftcard\", category_id: item.category_id, nombre: item.name, sincronizado: false, soporta_validacion: false });\n }\n\n const gamekeys = await fazercardsGetAll(\"/gamekeys\");\n if (!gamekeys.ok) errores.push({ fuente: \"gamekeys\", status: gamekeys.status, detalle: gamekeys.data });\n for (const item of gamekeys.items) {\n resultados.push({ id: `gamekey:${item.game_id}`, tipo: \"gamekey\", category_id: item.game_id, nombre: item.name, sincronizado: false, soporta_validacion: false });\n }\n\n const guardado = resultados.length ? await supabaseUpsert(\"catalogo_categorias\", resultados) : { ok: true, count: 0 };\n return { total: resultados.length, conValidacion: idsConValidacion.size, guardado, errores: errores.length ? errores : undefined };\n}\n\nasync function syncOffers(tipo: string, categoryId: string) {\n let productos: Record[] = [];\n let categoryName = categoryId;\n let soportaValidacion = false;\n let avisoValidacion: string | undefined;\n\n if (tipo === \"topup\") {\n const r = await fazercardsGet(`/topups/offers?category_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.name || categoryId;\n const campos = r.data.fields || [];\n\n const validacion = await fazercardsGetAll(\"/topups/validate-id\");\n if (validacion.ok) {\n soportaValidacion = validacion.items.some((it: any) => it.category_id === categoryId);\n } else {\n // No pudimos confirmar si admite validación (probablemente límite de peticiones).\n // Avisamos en vez de guardar \"false\" como si fuera un hecho comprobado.\n avisoValidacion = \"No se pudo confirmar si este juego admite validación de ID (\" + JSON.stringify(validacion.data) + \"). Vuelve a importar esta categoría en un minuto para confirmarlo.\";\n }\n\n productos = (r.data.offers || []).map((o: any) => ({\n id: `topup:${categoryId}:${o.offer_id}`, tipo: \"topup\", category_id: categoryId, category_name: categoryName,\n offer_id: o.offer_id, offer_name: o.name, precio_mayorista: Number(o.price_usd),\n campos, soporta_validacion: soportaValidacion, activo: false,\n }));\n } else if (tipo === \"giftcard\") {\n const r = await fazercardsGet(`/giftcards/cards?category_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.name || categoryId;\n productos = (r.data.offers || []).map((o: any) => ({\n id: `giftcard:${categoryId}:${o.card_id}`, tipo: \"giftcard\", category_id: categoryId, category_name: categoryName,\n offer_id: o.card_id, offer_name: o.name, precio_mayorista: Number(o.price_usd), activo: false,\n }));\n } else if (tipo === \"gamekey\") {\n const r = await fazercardsGet(`/gamekeys/keys?game_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.GameName || categoryId;\n productos = (r.data.keys || []).map((k: any) => ({\n id: `gamekey:${categoryId}:${k.key_id}`, tipo: \"gamekey\", category_id: categoryId, category_name: categoryName,\n offer_id: k.key_id, offer_name: k.name, precio_mayorista: Number(k.price_usd), activo: false,\n }));\n } else {\n return { error: \"tipo inválido\" };\n }\n\n const guardado = await supabaseUpsert(\"catalogo\", productos);\n await supabaseUpsert(\"catalogo_categorias\", [{\n id: `${tipo}:${categoryId}`, tipo, category_id: categoryId, nombre: categoryName,\n sincronizado: true, soporta_validacion: soportaValidacion,\n }]);\n\n return { total: productos.length, guardado, aviso: avisoValidacion };\n}\n\n/* ---------- validar ID (cliente) ---------- */\nasync function validarId(user: any, catalogoId: string, fields: Record) {\n const prod = await supabaseSelect(\"catalogo\", `id=eq.${encodeURIComponent(catalogoId)}&select=*`);\n const producto = (prod.data || [])[0];\n if (!producto) return { ok: false, error: \"Producto no encontrado\" };\n if (producto.tipo !== \"topup\" || !producto.soporta_validacion) {\n return { ok: false, error: \"Este producto no admite validación de ID\" };\n }\n\n const r = await fazercardsFetch(\"/topups/validate-id\", {\n method: \"POST\",\n body: JSON.stringify({ category_id: producto.category_id, fields }),\n });\n if (!r.ok) return { ok: false, error: r.data?.error || \"No se pudo validar el ID\" };\n return { ok: true, valido: r.data.valid, nombre: r.data.username || r.data.player_name || null, detalle: r.data };\n}\n\n/* ---------- procesar compra (cliente) ---------- */\nasync function procesarCompra(user: any, catalogoId: string, fields: Record, idempotencyKey: string) {\n const prod = await supabaseSelect(\"catalogo\", `id=eq.${encodeURIComponent(catalogoId)}&select=*`);\n const producto = (prod.data || [])[0];\n if (!producto) return { ok: false, error: \"Producto no encontrado\" };\n if (!producto.activo) return { ok: false, error: \"Este producto ya no está disponible\" };\n if (producto.precio_venta == null || producto.precio_venta <= 0) return { ok: false, error: \"Este producto no tiene precio configurado\" };\n\n const saldo = await calcularSaldo(user.id);\n const total = Number(producto.precio_venta);\n if (saldo < total) return { ok: false, error: \"Saldo insuficiente\" };\n\n let orderResp;\n if (producto.tipo === \"topup\") {\n orderResp = await fazercardsFetch(\"/topups/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ category_id: producto.category_id, offer_id: producto.offer_id, fields }),\n });\n } else if (producto.tipo === \"giftcard\") {\n orderResp = await fazercardsFetch(\"/giftcards/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ category_id: producto.category_id, card_id: producto.offer_id, quantity: 1 }),\n });\n } else if (producto.tipo === \"gamekey\") {\n orderResp = await fazercardsFetch(\"/gamekeys/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ game_id: producto.category_id, key_id: producto.offer_id, quantity: 1 }),\n });\n } else {\n return { ok: false, error: \"Tipo de producto desconocido\" };\n }\n\n if (!orderResp.ok) {\n return { ok: false, error: orderResp.data?.error || \"FazerCards rechazó el pedido\", detalle: orderResp.data };\n }\n\n const estadoLocal = orderResp.data.status === \"completed\" ? \"entregado\" : \"confirmado\";\n\n // El código (tarjetas de regalo / llaves) a veces viene de una vez, y a veces\n // hay que consultar el estado del pedido justo después de crearlo.\n let codigoEntrega = orderResp.data.code || (Array.isArray(orderResp.data.codes) ? orderResp.data.codes.join(\", \") : null);\n if (!codigoEntrega && (producto.tipo === \"giftcard\" || producto.tipo === \"gamekey\") && orderResp.data.id) {\n const detalle = await fazercardsGet(`/orders/${orderResp.data.id}`);\n if (detalle.ok) {\n codigoEntrega = detalle.data.code || (Array.isArray(detalle.data.codes) ? detalle.data.codes.join(\", \") : null);\n }\n }\n\n const guardado = await supabaseInsert(\"pedidos\", {\n user_id: user.id,\n user_email: user.email,\n paquete: `${producto.category_name} — ${producto.offer_name}`,\n bono: 0,\n precio: total,\n metodo_pago: \"Saldo FariPlay\",\n banco: null,\n codigo_cupon: null,\n descuento: 0,\n total: total,\n player_id: fields?.player_id || fields?.user_id || null,\n comprobante_url: null,\n estado: estadoLocal,\n tipo: producto.tipo,\n category_name: producto.category_name,\n offer_name: producto.offer_name,\n catalogo_id: producto.id,\n fazercards_order_id: String(orderResp.data.id ?? \"\"),\n campos_comprador: fields || {},\n entrega_codigo: codigoEntrega,\n });\n\n return { ok: true, order: orderResp.data, codigo: codigoEntrega, pedido: guardado.row };\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: corsHeaders() });\n\n const url = new URL(req.url);\n const action = url.searchParams.get(\"action\");\n\n try {\n /* ---- acciones de administrador ---- */\n if (action === \"check-key\" || action === \"sync-categories\" || action === \"sync-offers\" || action === \"debug-validate-id\" || action === \"debug-search\") {\n const adminKey = url.searchParams.get(\"admin_key\");\n if (adminKey !== Deno.env.get(\"ADMIN_SYNC_KEY\")) return json({ ok: false, error: \"No autorizado\" }, 401);\n\n if (action === \"check-key\") {\n const r = await fazercardsGet(\"/me\");\n return json({ ok: r.ok, status: r.status, respuesta: r.data });\n }\n if (action === \"debug-search\") {\n // busca EN VIVO directo en FazerCards (sin pasar por Supabase) para saber\n // si algo falta porque no se sincronizó, o porque de plano no existe en tu cuenta\n const query = (url.searchParams.get(\"query\") || \"\").toLowerCase();\n const tipo = url.searchParams.get(\"tipo\") || \"topup\";\n const rutaBase = tipo === \"giftcard\" ? \"/giftcards\" : tipo === \"gamekey\" ? \"/gamekeys\" : \"/topups\";\n const r = await fazercardsGetAll(rutaBase);\n if (!r.ok) return json({ ok: false, error: r.data });\n const campoId = tipo === \"gamekey\" ? \"game_id\" : \"category_id\";\n const coincidencias = r.items.filter((it: any) => (it.name || \"\").toLowerCase().includes(query));\n return json({\n ok: true,\n total_en_fazercards: r.items.length,\n coincidencias: coincidencias.map((it: any) => ({ category_id: it[campoId], name: it.name })),\n });\n }\n if (action === \"debug-validate-id\") {\n const categoryId = url.searchParams.get(\"category_id\") || \"\";\n const r = await fazercardsGetAll(\"/topups/validate-id\");\n const encontrado = r.items.find((it: any) => it.category_id === categoryId);\n return json({\n ok: r.ok,\n total_juegos_con_validacion: r.items.length,\n buscabas: categoryId,\n encontrado: !!encontrado,\n detalle: encontrado || null,\n primeros_10_category_id: r.items.slice(0, 10).map((it: any) => it.category_id),\n });\n }\n if (action === \"sync-categories\") {\n const r = await syncCategories();\n return json({ ok: true, ...r });\n }\n if (action === \"sync-offers\") {\n const tipo = url.searchParams.get(\"tipo\") || \"\";\n const categoryId = url.searchParams.get(\"category_id\") || \"\";\n if (!tipo || !categoryId) return json({ ok: false, error: \"Faltan tipo o category_id\" }, 400);\n const r = await syncOffers(tipo, categoryId);\n return json({ ok: true, ...r });\n }\n }\n\n /* ---- acciones de cliente (requieren sesión válida) ---- */\n if (action === \"validate-id\" || action === \"place-order\") {\n const user = await verificarUsuario(req);\n if (!user) return json({ ok: false, error: \"Sesión inválida, inicia sesión de nuevo\" }, 401);\n\n const body = req.method === \"POST\" ? await req.json().catch(() => ({})) : {};\n\n if (action === \"validate-id\") {\n const r = await validarId(user, body.catalogoId, body.fields || {});\n return json(r);\n }\n if (action === \"place-order\") {\n const idempotencyKey = body.idempotencyKey || crypto.randomUUID();\n const r = await procesarCompra(user, body.catalogoId, body.fields || {}, idempotencyKey);\n return json(r);\n }\n }\n\n return json({ ok: false, error: \"Acción desconocida\" }, 400);\n } catch (e) {\n return json({ ok: false, error: String(e) }, 500);\n }\n}","/**\n * FazerCards ⇄ Supabase — proxy seguro (Fase 1-4 completas)\n * ---------------------------------------------------------------------\n * Esto corre en val.town, NUNCA en el navegador del cliente.\n * Las llaves secretas viven aquí escondidas — jamás se pegan en tus .html.\n *\n * Variables de entorno en val.town:\n * FAZERCARDS_API_KEY -> tu API Key de FazerCards\n * SUPABASE_URL -> https://zdefkvvodijmrlhxvlrr.supabase.co\n * SUPABASE_ANON_KEY -> la publishable key (sb_publishable_...)\n * SUPABASE_SERVICE_ROLE_KEY -> la secret key (sb_secret_...)\n * ADMIN_SYNC_KEY -> clave inventada por ti, solo para el admin\n *\n * Acciones de ADMIN (piden ?admin_key=TU_ADMIN_SYNC_KEY):\n * GET ?action=check-key\n * GET ?action=sync-categories\n * GET ?action=sync-offers&tipo=topup&category_id=X\n * GET ?action=debug-validate-id&category_id=X -> revisa si un juego admite validar ID\n * GET ?action=debug-search&tipo=topup&query=X -> busca EN VIVO en FazerCards (sin pasar por Supabase)\n *\n * Acciones de CLIENTE (piden header Authorization: Bearer ):\n * POST ?action=validate-id body:{ catalogoId, fields }\n * POST ?action=place-order body:{ catalogoId, fields, idempotencyKey }\n */\n\nconst FAZERCARDS_BASE = \"https://api.fzr.cards/api/v2\";\n\nfunction corsHeaders() {\n return {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n}\n\nfunction json(data: unknown, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders() },\n });\n}\n\nasync function esperar(ms: number) { return new Promise(res => setTimeout(res, ms)); }\n\nasync function fazercardsFetch(path: string, init: RequestInit = {}) {\n const apiKey = Deno.env.get(\"FAZERCARDS_API_KEY\")!;\n let ultimoError: any = null;\n\n for (let intento = 0; intento < 4; intento++) {\n const resp = await fetch(FAZERCARDS_BASE + path, {\n ...init,\n headers: { \"X-API-Key\": apiKey, \"Content-Type\": \"application/json\", ...(init.headers || {}) },\n });\n\n // 429 = nos pasamos del límite de peticiones por minuto de FazerCards.\n // En vez de fallar en silencio, esperamos un poco y reintentamos.\n if (resp.status === 429) {\n ultimoError = { status: 429, data: await resp.json().catch(() => ({})) };\n await esperar(600 * (intento + 1));\n continue;\n }\n\n const data = await resp.json().catch(() => ({}));\n return { ok: resp.ok && data.ok !== false, status: resp.status, data };\n }\n\n return { ok: false, status: 429, data: { error: \"Límite de peticiones de FazerCards alcanzado varias veces seguidas. Intenta de nuevo en un minuto.\", ...ultimoError } };\n}\nconst fazercardsGet = (path: string) => fazercardsFetch(path);\n\n/* Recorre TODAS las páginas de un listado paginado por cursor y junta\n sus \"items\" en un solo arreglo. Sin esto, cualquier categoría que no\n estuviera en la primera página (ej. \"validate-id\") se perdía en silencio. */\nasync function fazercardsGetAll(path: string, limit = 200) {\n let items: any[] = [];\n let cursor: string | null = null;\n let paginas = 0;\n\n do {\n const sep = path.includes(\"?\") ? \"&\" : \"?\";\n const cursorParam = cursor ? `&cursor=${encodeURIComponent(cursor)}` : \"\";\n const r = await fazercardsGet(`${path}${sep}limit=${limit}${cursorParam}`);\n if (!r.ok) return { ok: false, status: r.status, data: r.data, items };\n items = items.concat(r.data.items || []);\n const meta = r.data.meta || {};\n cursor = meta.has_more ? meta.next_cursor : null;\n paginas++;\n } while (cursor && paginas < 50);\n\n return { ok: true, items };\n}\n\n/* ---------- Supabase helpers (usan la Service Role Key) ---------- */\nfunction sbHeaders() {\n const key = Deno.env.get(\"SUPABASE_SERVICE_ROLE_KEY\")!;\n return { \"apikey\": key, \"Authorization\": `Bearer ${key}`, \"Content-Type\": \"application/json\" };\n}\n\nasync function supabaseUpsert(table: string, rows: Record[]) {\n if (!rows.length) return { ok: true, count: 0 };\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const TAMANO_LOTE = 200; // mandar todo de un jalón (ej. 1200 filas) se puede cortar o fallar\n let guardadas = 0;\n const errores: string[] = [];\n\n for (let i = 0; i < rows.length; i += TAMANO_LOTE) {\n const lote = rows.slice(i, i + TAMANO_LOTE);\n const resp = await fetch(`${url}/rest/v1/${table}`, {\n method: \"POST\",\n headers: { ...sbHeaders(), \"Prefer\": \"resolution=merge-duplicates\" },\n body: JSON.stringify(lote),\n });\n if (!resp.ok) {\n errores.push(`lote ${i}-${i + lote.length}: ${await resp.text()}`);\n } else {\n guardadas += lote.length;\n }\n }\n\n if (errores.length) return { ok: false, count: guardadas, error: errores.join(\" | \") };\n return { ok: true, count: guardadas };\n}\n\nasync function supabaseSelect(table: string, query: string) {\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const resp = await fetch(`${url}/rest/v1/${table}?${query}`, { headers: sbHeaders() });\n if (!resp.ok) return { ok: false, error: await resp.text(), data: [] };\n return { ok: true, data: await resp.json() };\n}\n\nasync function supabaseInsert(table: string, row: Record) {\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const resp = await fetch(`${url}/rest/v1/${table}`, {\n method: \"POST\",\n headers: { ...sbHeaders(), \"Prefer\": \"return=representation\" },\n body: JSON.stringify(row),\n });\n if (!resp.ok) return { ok: false, error: await resp.text() };\n const data = await resp.json();\n return { ok: true, row: data[0] };\n}\n\n/* ---------- verificar quién está llamando (cliente logueado) ---------- */\nasync function verificarUsuario(req: Request) {\n const auth = req.headers.get(\"Authorization\") || \"\";\n const token = auth.replace(/^Bearer\\s+/i, \"\");\n if (!token) return null;\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const anon = Deno.env.get(\"SUPABASE_ANON_KEY\")!;\n const resp = await fetch(`${url}/auth/v1/user`, {\n headers: { \"apikey\": anon, \"Authorization\": `Bearer ${token}` },\n });\n if (!resp.ok) return null;\n return await resp.json(); // { id, email, ... }\n}\n\nasync function calcularSaldo(userId: string) {\n const recargas = await supabaseSelect(\"recargas\", `user_id=eq.${userId}&estado=eq.confirmado&select=monto`);\n const pedidos = await supabaseSelect(\"pedidos\", `user_id=eq.${userId}&metodo_pago=eq.Saldo%20FariPlay&select=total`);\n const recargado = (recargas.data || []).reduce((s: number, r: any) => s + Number(r.monto), 0);\n const gastado = (pedidos.data || []).reduce((s: number, p: any) => s + Number(p.total), 0);\n return recargado - gastado;\n}\n\n/* ---------- sincronización (admin) ---------- */\nasync function syncCategories() {\n const resultados: Record[] = [];\n const errores: Record[] = [];\n\n const idsConValidacion = new Set();\n const validacion = await fazercardsGetAll(\"/topups/validate-id\");\n if (validacion.ok) {\n for (const item of validacion.items) idsConValidacion.add(item.category_id);\n } else {\n errores.push({ fuente: \"validate-id\", detalle: validacion.data });\n }\n\n const topups = await fazercardsGetAll(\"/topups\");\n if (!topups.ok) errores.push({ fuente: \"topups\", status: topups.status, detalle: topups.data });\n for (const item of topups.items) {\n resultados.push({\n id: `topup:${item.category_id}`, tipo: \"topup\", category_id: item.category_id,\n nombre: item.name, sincronizado: false,\n soporta_validacion: idsConValidacion.has(item.category_id),\n });\n }\n\n const giftcards = await fazercardsGetAll(\"/giftcards\");\n if (!giftcards.ok) errores.push({ fuente: \"giftcards\", status: giftcards.status, detalle: giftcards.data });\n for (const item of giftcards.items) {\n resultados.push({ id: `giftcard:${item.category_id}`, tipo: \"giftcard\", category_id: item.category_id, nombre: item.name, sincronizado: false });\n }\n\n const gamekeys = await fazercardsGetAll(\"/gamekeys\");\n if (!gamekeys.ok) errores.push({ fuente: \"gamekeys\", status: gamekeys.status, detalle: gamekeys.data });\n for (const item of gamekeys.items) {\n resultados.push({ id: `gamekey:${item.game_id}`, tipo: \"gamekey\", category_id: item.game_id, nombre: item.name, sincronizado: false });\n }\n\n const guardado = resultados.length ? await supabaseUpsert(\"catalogo_categorias\", resultados) : { ok: true, count: 0 };\n return { total: resultados.length, conValidacion: idsConValidacion.size, guardado, errores: errores.length ? errores : undefined };\n}\n\nasync function syncOffers(tipo: string, categoryId: string) {\n let productos: Record[] = [];\n let categoryName = categoryId;\n let soportaValidacion = false;\n let avisoValidacion: string | undefined;\n\n if (tipo === \"topup\") {\n const r = await fazercardsGet(`/topups/offers?category_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.name || categoryId;\n const campos = r.data.fields || [];\n\n const validacion = await fazercardsGetAll(\"/topups/validate-id\");\n if (validacion.ok) {\n soportaValidacion = validacion.items.some((it: any) => it.category_id === categoryId);\n } else {\n // No pudimos confirmar si admite validación (probablemente límite de peticiones).\n // Avisamos en vez de guardar \"false\" como si fuera un hecho comprobado.\n avisoValidacion = \"No se pudo confirmar si este juego admite validación de ID (\" + JSON.stringify(validacion.data) + \"). Vuelve a importar esta categoría en un minuto para confirmarlo.\";\n }\n\n productos = (r.data.offers || []).map((o: any) => ({\n id: `topup:${categoryId}:${o.offer_id}`, tipo: \"topup\", category_id: categoryId, category_name: categoryName,\n offer_id: o.offer_id, offer_name: o.name, precio_mayorista: Number(o.price_usd),\n campos, soporta_validacion: soportaValidacion, activo: false,\n }));\n } else if (tipo === \"giftcard\") {\n const r = await fazercardsGet(`/giftcards/cards?category_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.name || categoryId;\n productos = (r.data.offers || []).map((o: any) => ({\n id: `giftcard:${categoryId}:${o.card_id}`, tipo: \"giftcard\", category_id: categoryId, category_name: categoryName,\n offer_id: o.card_id, offer_name: o.name, precio_mayorista: Number(o.price_usd), activo: false,\n }));\n } else if (tipo === \"gamekey\") {\n const r = await fazercardsGet(`/gamekeys/keys?game_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.GameName || categoryId;\n productos = (r.data.keys || []).map((k: any) => ({\n id: `gamekey:${categoryId}:${k.key_id}`, tipo: \"gamekey\", category_id: categoryId, category_name: categoryName,\n offer_id: k.key_id, offer_name: k.name, precio_mayorista: Number(k.price_usd), activo: false,\n }));\n } else {\n return { error: \"tipo inválido\" };\n }\n\n const guardado = await supabaseUpsert(\"catalogo\", productos);\n await supabaseUpsert(\"catalogo_categorias\", [{\n id: `${tipo}:${categoryId}`, tipo, category_id: categoryId, nombre: categoryName,\n sincronizado: true, soporta_validacion: soportaValidacion,\n }]);\n\n return { total: productos.length, guardado, aviso: avisoValidacion };\n}\n\n/* ---------- validar ID (cliente) ---------- */\nasync function validarId(user: any, catalogoId: string, fields: Record) {\n const prod = await supabaseSelect(\"catalogo\", `id=eq.${encodeURIComponent(catalogoId)}&select=*`);\n const producto = (prod.data || [])[0];\n if (!producto) return { ok: false, error: \"Producto no encontrado\" };\n if (producto.tipo !== \"topup\" || !producto.soporta_validacion) {\n return { ok: false, error: \"Este producto no admite validación de ID\" };\n }\n\n const r = await fazercardsFetch(\"/topups/validate-id\", {\n method: \"POST\",\n body: JSON.stringify({ category_id: producto.category_id, fields }),\n });\n if (!r.ok) return { ok: false, error: r.data?.error || \"No se pudo validar el ID\" };\n return { ok: true, valido: r.data.valid, nombre: r.data.username || r.data.player_name || null, detalle: r.data };\n}\n\n/* ---------- procesar compra (cliente) ---------- */\nasync function procesarCompra(user: any, catalogoId: string, fields: Record, idempotencyKey: string) {\n const prod = await supabaseSelect(\"catalogo\", `id=eq.${encodeURIComponent(catalogoId)}&select=*`);\n const producto = (prod.data || [])[0];\n if (!producto) return { ok: false, error: \"Producto no encontrado\" };\n if (!producto.activo) return { ok: false, error: \"Este producto ya no está disponible\" };\n if (producto.precio_venta == null || producto.precio_venta <= 0) return { ok: false, error: \"Este producto no tiene precio configurado\" };\n\n const saldo = await calcularSaldo(user.id);\n const total = Number(producto.precio_venta);\n if (saldo < total) return { ok: false, error: \"Saldo insuficiente\" };\n\n let orderResp;\n if (producto.tipo === \"topup\") {\n orderResp = await fazercardsFetch(\"/topups/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ category_id: producto.category_id, offer_id: producto.offer_id, fields }),\n });\n } else if (producto.tipo === \"giftcard\") {\n orderResp = await fazercardsFetch(\"/giftcards/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ category_id: producto.category_id, card_id: producto.offer_id, quantity: 1 }),","createdAt",["D",1789066122493],"branchVersion","branchId","30f36066-0856-4b89-a886-0b913da56af3","id","cbdbfc15-c684-4928-994c-ff60c31f59ab","fazercard",["D",1788582421376],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","9cf84734-7769-47ee-9ecc-3096d2f59093","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a06fc2-1cba-71e9-add3-08d3d2822b52","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",19,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","demiacapital","handle","displayName","Demia Capital","avatar","https://lh3.googleusercontent.com/a/ACg8ocJhlxqS72LO66hzRVfljlDXsqzy3yUCqMD1Ozpqz6KsVFGEy2I=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":151,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":152,"_80":153,"_82":154,"_84":25},"tree",[146],"files",[146],"counts",{"_134":62,"_135":136,"_137":62,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"10c917b4-e121-45f9-9e0b-d81309df6edb","parentId","latest",["D",1789066122493],13,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":144,"_145":62},"connections",{"_142":62,"_143":62},"count","unfilledCount",5,"emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":147,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_148":149,"_27":150},["D",1789066122493],"children",[],[28],["D",1788582421376],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_123":188,"_189":190,"_191":192,"_193":25,"_194":25,"_195":25,"_196":58,"_197":-5,"_198":-7,"_199":-7,"_200":62,"_201":25,"_202":25,"_203":-5,"_204":25,"_205":25,"_206":25,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":86,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v14