[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":53,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",6,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","0a4dc2f8-a8e2-11f1-a6ca-1607ee4eb77e","name","fileType","http","content","// Val Town HTTP val — panel de pruebas para FazerCards API (v3: flujo de checkout con validación)\n// Requiere un secreto llamado FAZER_API_KEY configurado en tu cuenta de Val Town.\n\nconst BASE_URL = \"https://api.fzr.cards/api/v2\";\n\nconst PAGE_HTML = `\n\n\n\n\nFazerCards · Panel de pruebas\n\n\n\n

Panel de pruebas · FazerCards API

Corriendo en Val Town — tu API key vive como secreto del servidor, nunca en el navegador.

\n\n

Conexión

Confirma que el secreto FAZER_API_KEY está configurado en Val Town.

\n \n \n

\n\n

\n \n \n \n

\n\n

1. Elige el producto

GET /topups — trae todas las categorías disponibles.

\n \n \n \n

Sin cargar todavía

\n\n

2. Elige el precio / denominación

Elige un producto arriba

\n\n

3. Datos para entregar y confirmar la compra

Completa lo que pide este producto. Si el juego tiene validador de ID, primero se confirma el jugador y luego se habilita la compra.

Elige primero un precio arriba

\n\n

Respuesta cruda

\n\n

1. Juegos con validación de ID

GET /topups/validate-id — solo aparecen los juegos que el proveedor permite validar antes de comprar. No todos los juegos del catálogo de recargas tienen esta función; eso es normal.

\n \n \n \n

Sin cargar todavía

2. Verificar un jugador

POST /topups/validate-id

Elige un juego arriba

Respuesta cruda

\n\n

1. Categorías de tarjetas de regalo

GET /giftcards — trae todas las páginas automáticamente.

\n \n \n \n

Sin cargar todavía

2. Denominaciones

GET /giftcards/cards?category_id=…

Elige una categoría arriba

Respuesta cruda

\n\n

Todo pasa por tu propio val de Val Town en /api/…, que reenvía a https://api.fzr.cards/api/v2/… con la key puesta del lado del servidor.

\n\n\n\n`;\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname === \"/\" || url.pathname === \"\") {\n return new Response(PAGE_HTML, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (url.pathname.startsWith(\"/api/\")) {\n const apiKey = Deno.env.get(\"FAZER_API_KEY\");\n if (!apiKey) {\n return Response.json(\n { ok: false, error: \"Falta el secreto FAZER_API_KEY en Val Town (icono de llave en tu cuenta).\" },\n { status: 500 },\n );\n }\n\n const subpath = url.pathname.replace(\"/api/\", \"\");\n const upstreamUrl = `${BASE_URL}/${subpath}${url.search}`;\n\n const headers: Record = { \"X-API-Key\": apiKey };\n const incomingIdem = req.headers.get(\"Idempotency-Key\");\n if (incomingIdem) headers[\"Idempotency-Key\"] = incomingIdem;\n\n let body: string | undefined;\n if (req.method === \"POST\" || req.method === \"PATCH\") {\n headers[\"Content-Type\"] = \"application/json\";\n body = await req.text();\n }\n\n try {\n const upstream = await fetch(upstreamUrl, { method: req.method, headers, body });\n const data = await upstream.json().catch(() => ({ ok: false, error: \"Respuesta no era JSON válido\" }));\n return Response.json(data, { status: upstream.status });\n } catch (err) {\n return Response.json(\n { ok: false, error: `No se pudo contactar FazerCards: ${err}` },\n { status: 502 },\n );\n }\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","/**\n * FazerCards ⇄ Supabase — proxy seguro (Fase 1: catálogo)\n * ---------------------------------------------------------------------\n * Esto corre en val.town, NUNCA en el navegador del cliente.\n * La API Key de FazerCards y la Service Role Key de Supabase viven aquí\n * escondidas — jamás se pegan en tus archivos .html.\n *\n * Variables de entorno que debes crear en val.town (panel izquierdo del val):\n * FAZERCARDS_API_KEY -> tu API Key de FazerCards\n * SUPABASE_URL -> https://zdefkvvodijmrlhxvlrr.supabase.co\n * SUPABASE_SERVICE_ROLE_KEY-> Service Role Key (Supabase → Settings → API)\n * ADMIN_SYNC_KEY -> una clave inventada por ti, solo para\n * proteger este endpoint (no la compartas)\n *\n * Acciones disponibles (todas piden ?admin_key=TU_ADMIN_SYNC_KEY):\n * GET ?action=sync-categories -> trae la lista de categorías\n * GET ?action=sync-offers&tipo=topup&category_id=X -> importa productos de una categoría\n */\n\nconst FAZERCARDS_BASE = \"https://api.fzr.cards/api/v2\";\n\nfunction corsHeaders() {\n return {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n}\n\nfunction json(data: unknown, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders() },\n });\n}\n\nasync function fazercardsGet(path: string) {\n const apiKey = Deno.env.get(\"FAZERCARDS_API_KEY\")!;\n const resp = await fetch(FAZERCARDS_BASE + path, {\n headers: { \"X-API-Key\": apiKey },\n });\n const data = await resp.json();\n return { ok: resp.ok, data };\n}\n\nasync function supabaseUpsert(table: string, rows: Record[]) {\n if (!rows.length) return { ok: true, count: 0 };\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const key = Deno.env.get(\"SUPABASE_SERVICE_ROLE_KEY\")!;\n const resp = await fetch(`${url}/rest/v1/${table}`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"apikey\": key,\n \"Authorization\": `Bearer ${key}`,\n \"Prefer\": \"resolution=merge-duplicates\",\n },\n body: JSON.stringify(rows),\n });\n if (!resp.ok) {\n const errText = await resp.text();\n return { ok: false, error: errText };\n }\n return { ok: true, count: rows.length };\n}\n\nasync function syncCategories() {\n const resultados: Record[] = [];\n\n // topups\n const topups = await fazercardsGet(\"/topups?limit=200\");\n for (const item of (topups.data.items || [])) {\n resultados.push({\n id: `topup:${item.category_id}`,\n tipo: \"topup\",\n category_id: item.category_id,\n nombre: item.name,\n sincronizado: false,\n });\n }\n\n // giftcards\n const giftcards = await fazercardsGet(\"/giftcards?limit=200\");\n for (const item of (giftcards.data.items || [])) {\n resultados.push({\n id: `giftcard:${item.category_id}`,\n tipo: \"giftcard\",\n category_id: item.category_id,\n nombre: item.name,\n sincronizado: false,\n });\n }\n\n // gamekeys\n const gamekeys = await fazercardsGet(\"/gamekeys?limit=200\");\n for (const item of (gamekeys.data.items || [])) {\n resultados.push({\n id: `gamekey:${item.game_id}`,\n tipo: \"gamekey\",\n category_id: item.game_id,\n nombre: item.name,\n sincronizado: false,\n });\n }\n\n const guardado = await supabaseUpsert(\"catalogo_categorias\", resultados);\n return { total: resultados.length, guardado };\n}\n\nasync function syncOffers(tipo: string, categoryId: string) {\n let productos: Record[] = [];\n let categoryName = categoryId;\n\n if (tipo === \"topup\") {\n const r = await fazercardsGet(\n `/topups/offers?category_id=${encodeURIComponent(categoryId)}`,\n );\n categoryName = r.data.name || categoryId;\n const campos = r.data.fields || [];\n productos = (r.data.offers || []).map((o: any) => ({\n id: `topup:${categoryId}:${o.offer_id}`,\n tipo: \"topup\",\n category_id: categoryId,\n category_name: categoryName,\n offer_id: o.offer_id,\n offer_name: o.name,\n precio_mayorista: Number(o.price_usd),\n campos,\n activo: false,\n }));\n } else if (tipo === \"giftcard\") {\n const r = await fazercardsGet(\n `/giftcards/cards?category_id=${encodeURIComponent(categoryId)}`,\n );\n categoryName = r.data.name || categoryId;\n productos = (r.data.offers || []).map((o: any) => ({\n id: `giftcard:${categoryId}:${o.card_id}`,\n tipo: \"giftcard\",\n category_id: categoryId,\n category_name: categoryName,\n offer_id: o.card_id,\n offer_name: o.name,\n precio_mayorista: Number(o.price_usd),\n activo: false,\n }));\n } else if (tipo === \"gamekey\") {\n const r = await fazercardsGet(\n `/gamekeys/keys?game_id=${encodeURIComponent(categoryId)}`,\n );\n categoryName = r.data.GameName || categoryId;\n productos = (r.data.keys || []).map((k: any) => ({\n id: `gamekey:${categoryId}:${k.key_id}`,\n tipo: \"gamekey\",\n category_id: categoryId,\n category_name: categoryName,\n offer_id: k.key_id,\n offer_name: k.name,\n precio_mayorista: Number(k.price_usd),\n activo: false,\n }));\n } else {\n return { error: \"tipo inválido\" };\n }\n\n const guardado = await supabaseUpsert(\"catalogo\", productos);\n\n // marcar la categoría como sincronizada\n await supabaseUpsert(\"catalogo_categorias\", [{\n id: `${tipo}:${categoryId}`,\n tipo,\n category_id: categoryId,\n nombre: categoryName,\n sincronizado: true,\n }]);\n\n return { total: productos.length, guardado };\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { headers: corsHeaders() });\n }\n\n const url = new URL(req.url);\n const adminKey = url.searchParams.get(\"admin_key\");\n if (adminKey !== Deno.env.get(\"ADMIN_SYNC_KEY\")) {\n return json({ ok: false, error: \"No autorizado\" }, 401);\n }\n\n const action = url.searchParams.get(\"action\");\n\n try {\n if (action === \"sync-categories\") {\n const r = await syncCategories();\n return json({ ok: true, ...r });\n }\n\n if (action === \"sync-offers\") {\n const tipo = url.searchParams.get(\"tipo\") || \"\";\n const categoryId = url.searchParams.get(\"category_id\") || \"\";\n if (!tipo || !categoryId) {\n return json({ ok: false, error: \"Faltan tipo o category_id\" }, 400);\n }\n const r = await syncOffers(tipo, categoryId);\n return json({ ok: true, ...r });\n }\n\n return json({ ok: false, error: \"Acción desconocida\" }, 400);\n } catch (e) {\n return json({ ok: false, error: String(e) }, 500);\n }\n}","createdAt",["D",1788926384226],"branchVersion","branchId","30f36066-0856-4b89-a886-0b913da56af3","id","cbdbfc15-c684-4928-994c-ff60c31f59ab","fazercard",["D",1788582421376],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","9cf84734-7769-47ee-9ecc-3096d2f59093","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a06fc2-1cba-71e9-add3-08d3d2822b52","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",19,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","demiacapital","handle","displayName","Demia Capital","avatar","https://lh3.googleusercontent.com/a/ACg8ocJhlxqS72LO66hzRVfljlDXsqzy3yUCqMD1Ozpqz6KsVFGEy2I=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":150,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":151,"_80":152,"_82":153,"_84":25},"tree",[145],"files",[145],"counts",{"_134":62,"_135":136,"_137":62,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"8d27661d-7b69-4540-a00a-fb3ebef43d5d","parentId","latest",["D",1788926384226],5,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":131,"_144":62},"connections",{"_142":62,"_143":62},"count","unfilledCount","emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":146,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_147":148,"_27":149},["D",1788926384226],"children",[],[28],["D",1788582421376],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_123":187,"_188":189,"_190":191,"_192":25,"_193":25,"_194":25,"_195":58,"_196":-5,"_197":-7,"_198":-7,"_199":62,"_200":25,"_201":25,"_202":-5,"_203":25,"_204":25,"_205":25,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":86,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v6