[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_116":-5,"_20":117,"_22":118,"_119":120,"_121":122,"_26":123,"_24":124,"_125":-5,"_126":-5,"_127":52,"_128":129,"_130":43,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","demiacapital","name","fazercard","branchName","main","version","path","main.ts","project",{"_33":60,"_13":14,"_44":61,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":52},"tree",[55],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":54},"contents",[],"upstream","pull","ahead","behind","envVars","id","46cecc11-fedb-4df9-9f5c-fcad2f3dca9a","fileId","0a4dc2f8-a8e2-11f1-a6ca-1607ee4eb77e","parentId","branchId","30f36066-0856-4b89-a886-0b913da56af3","branchVersion",19,"latest",true,"createdAt",["D",1789125279891],18,"fileType","http","content","/**\n * FazerCards ⇄ Supabase — proxy seguro (Fase 1-4 completas)\n * ---------------------------------------------------------------------\n * Esto corre en val.town, NUNCA en el navegador del cliente.\n * Las llaves secretas viven aquí escondidas — jamás se pegan en tus .html.\n *\n * Variables de entorno en val.town:\n * FAZERCARDS_API_KEY -> tu API Key de FazerCards\n * SUPABASE_URL -> https://zdefkvvodijmrlhxvlrr.supabase.co\n * SUPABASE_ANON_KEY -> la publishable key (sb_publishable_...)\n * SUPABASE_SERVICE_ROLE_KEY -> la secret key (sb_secret_...)\n * ADMIN_SYNC_KEY -> clave inventada por ti, solo para el admin\n *\n * Acciones de ADMIN (piden ?admin_key=TU_ADMIN_SYNC_KEY):\n * GET ?action=check-key\n * GET ?action=sync-categories\n * GET ?action=sync-offers&tipo=topup&category_id=X\n * GET ?action=debug-validate-id&category_id=X -> revisa si un juego admite validar ID\n * GET ?action=debug-search&tipo=topup&query=X -> busca EN VIVO en FazerCards (sin pasar por Supabase)\n * GET ?action=debug-list-validate-id -> lista los juegos con validación tal cual los da FazerCards\n *\n * Acciones de CLIENTE (piden header Authorization: Bearer ):\n * POST ?action=validate-id body:{ catalogoId, fields }\n * POST ?action=place-order body:{ catalogoId, fields, idempotencyKey }\n */\n\nconst FAZERCARDS_BASE = \"https://api.fzr.cards/api/v2\";\n\nfunction corsHeaders() {\n return {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n}\n\nfunction json(data: unknown, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...corsHeaders() },\n });\n}\n\nasync function esperar(ms: number) { return new Promise(res => setTimeout(res, ms)); }\n\nasync function fazercardsFetch(path: string, init: RequestInit = {}) {\n const apiKey = Deno.env.get(\"FAZERCARDS_API_KEY\")!;\n let ultimoError: any = null;\n\n for (let intento = 0; intento < 4; intento++) {\n const resp = await fetch(FAZERCARDS_BASE + path, {\n ...init,\n headers: { \"X-API-Key\": apiKey, \"Content-Type\": \"application/json\", ...(init.headers || {}) },\n });\n\n // 429 = nos pasamos del límite de peticiones por minuto de FazerCards.\n // En vez de fallar en silencio, esperamos un poco y reintentamos.\n if (resp.status === 429) {\n ultimoError = { status: 429, data: await resp.json().catch(() => ({})) };\n await esperar(600 * (intento + 1));\n continue;\n }\n\n const data = await resp.json().catch(() => ({}));\n return { ok: resp.ok && data.ok !== false, status: resp.status, data };\n }\n\n return { ok: false, status: 429, data: { error: \"Límite de peticiones de FazerCards alcanzado varias veces seguidas. Intenta de nuevo en un minuto.\", ...ultimoError } };\n}\nconst fazercardsGet = (path: string) => fazercardsFetch(path);\n\n/* Recorre TODAS las páginas de un listado paginado por cursor y junta\n sus \"items\" en un solo arreglo. Sin esto, cualquier categoría que no\n estuviera en la primera página (ej. \"validate-id\") se perdía en silencio. */\nasync function fazercardsGetAll(path: string, limit = 200) {\n let items: any[] = [];\n let cursor: string | null = null;\n let paginas = 0;\n\n do {\n const sep = path.includes(\"?\") ? \"&\" : \"?\";\n const cursorParam = cursor ? `&cursor=${encodeURIComponent(cursor)}` : \"\";\n const r = await fazercardsGet(`${path}${sep}limit=${limit}${cursorParam}`);\n if (!r.ok) return { ok: false, status: r.status, data: r.data, items };\n items = items.concat(r.data.items || []);\n const meta = r.data.meta || {};\n cursor = meta.has_more ? meta.next_cursor : null;\n paginas++;\n } while (cursor && paginas < 50);\n\n return { ok: true, items };\n}\n\n/* ---------- Supabase helpers (usan la Service Role Key) ---------- */\nfunction sbHeaders() {\n const key = Deno.env.get(\"SUPABASE_SERVICE_ROLE_KEY\")!;\n return { \"apikey\": key, \"Authorization\": `Bearer ${key}`, \"Content-Type\": \"application/json\" };\n}\n\nasync function supabaseUpsert(table: string, rows: Record[]) {\n if (!rows.length) return { ok: true, count: 0 };\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const TAMANO_LOTE = 200; // mandar todo de un jalón (ej. 1200 filas) se puede cortar o fallar\n let guardadas = 0;\n const errores: string[] = [];\n\n for (let i = 0; i < rows.length; i += TAMANO_LOTE) {\n const lote = rows.slice(i, i + TAMANO_LOTE);\n const resp = await fetch(`${url}/rest/v1/${table}`, {\n method: \"POST\",\n headers: { ...sbHeaders(), \"Prefer\": \"resolution=merge-duplicates\" },\n body: JSON.stringify(lote),\n });\n if (!resp.ok) {\n errores.push(`lote ${i}-${i + lote.length}: ${await resp.text()}`);\n } else {\n guardadas += lote.length;\n }\n }\n\n if (errores.length) return { ok: false, count: guardadas, error: errores.join(\" | \") };\n return { ok: true, count: guardadas };\n}\n\nasync function supabaseSelect(table: string, query: string) {\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const resp = await fetch(`${url}/rest/v1/${table}?${query}`, { headers: sbHeaders() });\n if (!resp.ok) return { ok: false, error: await resp.text(), data: [] };\n return { ok: true, data: await resp.json() };\n}\n\nasync function supabaseInsert(table: string, row: Record) {\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const resp = await fetch(`${url}/rest/v1/${table}`, {\n method: \"POST\",\n headers: { ...sbHeaders(), \"Prefer\": \"return=representation\" },\n body: JSON.stringify(row),\n });\n if (!resp.ok) return { ok: false, error: await resp.text() };\n const data = await resp.json();\n return { ok: true, row: data[0] };\n}\n\n/* ---------- verificar quién está llamando (cliente logueado) ---------- */\nasync function verificarUsuario(req: Request) {\n const auth = req.headers.get(\"Authorization\") || \"\";\n const token = auth.replace(/^Bearer\\s+/i, \"\");\n if (!token) return null;\n const url = Deno.env.get(\"SUPABASE_URL\")!;\n const anon = Deno.env.get(\"SUPABASE_ANON_KEY\")!;\n const resp = await fetch(`${url}/auth/v1/user`, {\n headers: { \"apikey\": anon, \"Authorization\": `Bearer ${token}` },\n });\n if (!resp.ok) return null;\n return await resp.json(); // { id, email, ... }\n}\n\nasync function calcularSaldo(userId: string) {\n const recargas = await supabaseSelect(\"recargas\", `user_id=eq.${userId}&estado=eq.confirmado&select=monto`);\n const pedidos = await supabaseSelect(\"pedidos\", `user_id=eq.${userId}&metodo_pago=eq.Saldo%20FariPlay&select=total`);\n const recargado = (recargas.data || []).reduce((s: number, r: any) => s + Number(r.monto), 0);\n const gastado = (pedidos.data || []).reduce((s: number, p: any) => s + Number(p.total), 0);\n return recargado - gastado;\n}\n\nfunction normalizarNombre(s: string) {\n return (s || \"\").toLowerCase().replace(/[^a-z0-9]/g, \"\");\n}\n\n/* La lista de validación a veces tiene UNA entrada genérica (\"Free Fire\")\n que aplica a TODAS las variantes regionales del catálogo de compra\n (\"Free Fire (LATAM)\", \"Free Fire (BR)\", etc.) — por eso comparamos si\n el nombre del catálogo EMPIEZA CON el nombre genérico de validación,\n en vez de exigir que sean exactamente iguales. */\nfunction buscarValidacionParaNombre(nombreCatalogo: string, listaValidacion: { nombreNormalizado: string; category_id: string }[]) {\n const normalizado = normalizarNombre(nombreCatalogo);\n // primero probamos coincidencia exacta (más precisa), y si no hay,\n // probamos \"empieza con\" (para las variantes regionales)\n let match = listaValidacion.find(v => v.nombreNormalizado === normalizado);\n if (!match) match = listaValidacion.find(v => normalizado.startsWith(v.nombreNormalizado) && v.nombreNormalizado.length >= 4);\n return match ? match.category_id : null;\n}\n\n/* ---------- sincronización (admin) ---------- */\nasync function syncCategories() {\n const resultados: Record[] = [];\n const errores: Record[] = [];\n\n // FazerCards usa un category_id DISTINTO para el mismo juego entre su\n // catálogo de recargas y su lista de validación — hay que emparejar por\n // NOMBRE (normalizado), no por category_id.\n const validacion = await fazercardsGetAll(\"/topups/validate-id\");\n const listaValidacion = validacion.ok\n ? validacion.items.map((it: any) => ({ nombreNormalizado: normalizarNombre(it.name), category_id: it.category_id }))\n : [];\n if (!validacion.ok) errores.push({ fuente: \"validate-id\", detalle: validacion.data });\n\n const topups = await fazercardsGetAll(\"/topups\");\n if (!topups.ok) errores.push({ fuente: \"topups\", status: topups.status, detalle: topups.data });\n for (const item of topups.items) {\n const idValidacion = buscarValidacionParaNombre(item.name, listaValidacion);\n resultados.push({\n id: `topup:${item.category_id}`, tipo: \"topup\", category_id: item.category_id,\n nombre: item.name, sincronizado: false,\n soporta_validacion: !!idValidacion,\n validacion_category_id: idValidacion,\n });\n }\n\n const giftcards = await fazercardsGetAll(\"/giftcards\");\n if (!giftcards.ok) errores.push({ fuente: \"giftcards\", status: giftcards.status, detalle: giftcards.data });\n for (const item of giftcards.items) {\n resultados.push({ id: `giftcard:${item.category_id}`, tipo: \"giftcard\", category_id: item.category_id, nombre: item.name, sincronizado: false, soporta_validacion: false, validacion_category_id: null });\n }\n\n const gamekeys = await fazercardsGetAll(\"/gamekeys\");\n if (!gamekeys.ok) errores.push({ fuente: \"gamekeys\", status: gamekeys.status, detalle: gamekeys.data });\n for (const item of gamekeys.items) {\n resultados.push({ id: `gamekey:${item.game_id}`, tipo: \"gamekey\", category_id: item.game_id, nombre: item.name, sincronizado: false, soporta_validacion: false, validacion_category_id: null });\n }\n\n const guardado = resultados.length ? await supabaseUpsert(\"catalogo_categorias\", resultados) : { ok: true, count: 0 };\n return { total: resultados.length, conValidacion: listaValidacion.length, guardado, errores: errores.length ? errores : undefined };\n}\n\nasync function syncOffers(tipo: string, categoryId: string) {\n let productos: Record[] = [];\n let categoryName = categoryId;\n let soportaValidacion = false;\n let idValidacionEncontrado: string | null = null;\n let avisoValidacion: string | undefined;\n\n if (tipo === \"topup\") {\n const r = await fazercardsGet(`/topups/offers?category_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.name || categoryId;\n const campos = r.data.fields || [];\n\n const validacion = await fazercardsGetAll(\"/topups/validate-id\");\n if (validacion.ok) {\n const listaValidacion = validacion.items.map((it: any) => ({ nombreNormalizado: normalizarNombre(it.name), category_id: it.category_id }));\n idValidacionEncontrado = buscarValidacionParaNombre(categoryName, listaValidacion);\n soportaValidacion = !!idValidacionEncontrado;\n } else {\n // No pudimos confirmar si admite validación (probablemente límite de peticiones).\n // Avisamos en vez de guardar \"false\" como si fuera un hecho comprobado.\n avisoValidacion = \"No se pudo confirmar si este juego admite validación de ID (\" + JSON.stringify(validacion.data) + \"). Vuelve a importar esta categoría en un minuto para confirmarlo.\";\n }\n\n productos = (r.data.offers || []).map((o: any) => ({\n id: `topup:${categoryId}:${o.offer_id}`, tipo: \"topup\", category_id: categoryId, category_name: categoryName,\n offer_id: o.offer_id, offer_name: o.name, precio_mayorista: Number(o.price_usd),\n campos, soporta_validacion: soportaValidacion, validacion_category_id: idValidacionEncontrado, activo: false,\n }));\n } else if (tipo === \"giftcard\") {\n const r = await fazercardsGet(`/giftcards/cards?category_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.name || categoryId;\n productos = (r.data.offers || []).map((o: any) => ({\n id: `giftcard:${categoryId}:${o.card_id}`, tipo: \"giftcard\", category_id: categoryId, category_name: categoryName,\n offer_id: o.card_id, offer_name: o.name, precio_mayorista: Number(o.price_usd), activo: false,\n }));\n } else if (tipo === \"gamekey\") {\n const r = await fazercardsGet(`/gamekeys/keys?game_id=${encodeURIComponent(categoryId)}`);\n if (!r.ok) return { error: r.data, status: r.status };\n categoryName = r.data.GameName || categoryId;\n productos = (r.data.keys || []).map((k: any) => ({\n id: `gamekey:${categoryId}:${k.key_id}`, tipo: \"gamekey\", category_id: categoryId, category_name: categoryName,\n offer_id: k.key_id, offer_name: k.name, precio_mayorista: Number(k.price_usd), activo: false,\n }));\n } else {\n return { error: \"tipo inválido\" };\n }\n\n const guardado = await supabaseUpsert(\"catalogo\", productos);\n await supabaseUpsert(\"catalogo_categorias\", [{\n id: `${tipo}:${categoryId}`, tipo, category_id: categoryId, nombre: categoryName,\n sincronizado: true, soporta_validacion: soportaValidacion, validacion_category_id: idValidacionEncontrado,\n }]);\n\n return { total: productos.length, guardado, aviso: avisoValidacion };\n}\n\n/* ---------- validar ID (cliente) ---------- */\nasync function validarId(user: any, catalogoId: string, fields: Record) {\n const prod = await supabaseSelect(\"catalogo\", `id=eq.${encodeURIComponent(catalogoId)}&select=*`);\n const producto = (prod.data || [])[0];\n if (!producto) return { ok: false, error: \"Producto no encontrado\" };\n if (producto.tipo !== \"topup\" || !producto.soporta_validacion) {\n return { ok: false, error: \"Este producto no admite validación de ID\" };\n }\n\n const r = await fazercardsFetch(\"/topups/validate-id\", {\n method: \"POST\",\n body: JSON.stringify({ category_id: producto.validacion_category_id || producto.category_id, fields }),\n });\n if (!r.ok) return { ok: false, error: r.data?.error || \"No se pudo validar el ID\" };\n return { ok: true, valido: r.data.valid, nombre: r.data.username || r.data.player_name || null, detalle: r.data };\n}\n\n/* ---------- procesar compra (cliente) ---------- */\nasync function procesarCompra(user: any, catalogoId: string, fields: Record, idempotencyKey: string) {\n const prod = await supabaseSelect(\"catalogo\", `id=eq.${encodeURIComponent(catalogoId)}&select=*`);\n const producto = (prod.data || [])[0];\n if (!producto) return { ok: false, error: \"Producto no encontrado\" };\n if (!producto.activo) return { ok: false, error: \"Este producto ya no está disponible\" };\n if (producto.precio_venta == null || producto.precio_venta <= 0) return { ok: false, error: \"Este producto no tiene precio configurado\" };\n\n const saldo = await calcularSaldo(user.id);\n const total = Number(producto.precio_venta);\n if (saldo < total) return { ok: false, error: \"Saldo insuficiente\" };\n\n let orderResp;\n if (producto.tipo === \"topup\") {\n orderResp = await fazercardsFetch(\"/topups/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ category_id: producto.category_id, offer_id: producto.offer_id, fields }),\n });\n } else if (producto.tipo === \"giftcard\") {\n orderResp = await fazercardsFetch(\"/giftcards/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ category_id: producto.category_id, card_id: producto.offer_id, quantity: 1 }),\n });\n } else if (producto.tipo === \"gamekey\") {\n orderResp = await fazercardsFetch(\"/gamekeys/order\", {\n method: \"POST\",\n headers: { \"Idempotency-Key\": idempotencyKey },\n body: JSON.stringify({ game_id: producto.category_id, key_id: producto.offer_id, quantity: 1 }),\n });\n } else {\n return { ok: false, error: \"Tipo de producto desconocido\" };\n }\n\n if (!orderResp.ok) {\n return { ok: false, error: orderResp.data?.error || \"FazerCards rechazó el pedido\", detalle: orderResp.data };\n }\n\n const estadoLocal = orderResp.data.status === \"completed\" ? \"entregado\" : \"confirmado\";\n\n // El código (tarjetas de regalo / llaves) a veces viene de una vez, y a veces\n // hay que consultar el estado del pedido justo después de crearlo.\n let codigoEntrega = orderResp.data.code || (Array.isArray(orderResp.data.codes) ? orderResp.data.codes.join(\", \") : null);\n if (!codigoEntrega && (producto.tipo === \"giftcard\" || producto.tipo === \"gamekey\") && orderResp.data.id) {\n const detalle = await fazercardsGet(`/orders/${orderResp.data.id}`);\n if (detalle.ok) {\n codigoEntrega = detalle.data.code || (Array.isArray(detalle.data.codes) ? detalle.data.codes.join(\", \") : null);\n }\n }\n\n const guardado = await supabaseInsert(\"pedidos\", {\n user_id: user.id,\n user_email: user.email,\n paquete: `${producto.category_name} — ${producto.offer_name}`,\n bono: 0,\n precio: total,\n metodo_pago: \"Saldo FariPlay\",\n banco: null,\n codigo_cupon: null,\n descuento: 0,\n total: total,\n player_id: fields?.player_id || fields?.user_id || null,\n comprobante_url: null,\n estado: estadoLocal,\n tipo: producto.tipo,\n category_name: producto.category_name,\n offer_name: producto.offer_name,\n catalogo_id: producto.id,\n fazercards_order_id: String(orderResp.data.id ?? \"\"),\n campos_comprador: fields || {},\n entrega_codigo: codigoEntrega,\n });\n\n return { ok: true, order: orderResp.data, codigo: codigoEntrega, pedido: guardado.row };\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: corsHeaders() });\n\n const url = new URL(req.url);\n const action = url.searchParams.get(\"action\");\n\n try {\n /* ---- acciones de administrador ---- */\n if (action === \"check-key\" || action === \"sync-categories\" || action === \"sync-offers\" || action === \"debug-validate-id\" || action === \"debug-search\" || action === \"debug-list-validate-id\") {\n const adminKey = url.searchParams.get(\"admin_key\");\n if (adminKey !== Deno.env.get(\"ADMIN_SYNC_KEY\")) return json({ ok: false, error: \"No autorizado\" }, 401);\n\n if (action === \"check-key\") {\n const r = await fazercardsGet(\"/me\");\n return json({ ok: r.ok, status: r.status, respuesta: r.data });\n }\n if (action === \"debug-search\") {\n // busca EN VIVO directo en FazerCards (sin pasar por Supabase) para saber\n // si algo falta porque no se sincronizó, o porque de plano no existe en tu cuenta\n const query = (url.searchParams.get(\"query\") || \"\").toLowerCase();\n const tipo = url.searchParams.get(\"tipo\") || \"topup\";\n const rutaBase = tipo === \"giftcard\" ? \"/giftcards\" : tipo === \"gamekey\" ? \"/gamekeys\" : \"/topups\";\n const r = await fazercardsGetAll(rutaBase);\n if (!r.ok) return json({ ok: false, error: r.data });\n const campoId = tipo === \"gamekey\" ? \"game_id\" : \"category_id\";\n const coincidencias = r.items.filter((it: any) => (it.name || \"\").toLowerCase().includes(query));\n return json({\n ok: true,\n total_en_fazercards: r.items.length,\n coincidencias: coincidencias.map((it: any) => ({ category_id: it[campoId], name: it.name })),\n });\n }\n if (action === \"debug-validate-id\") {\n const categoryId = url.searchParams.get(\"category_id\") || \"\";\n const r = await fazercardsGetAll(\"/topups/validate-id\");\n const encontrado = r.items.find((it: any) => it.category_id === categoryId);\n return json({\n ok: r.ok,\n total_juegos_con_validacion: r.items.length,\n buscabas: categoryId,\n encontrado: !!encontrado,\n detalle: encontrado || null,\n primeros_10_category_id: r.items.slice(0, 10).map((it: any) => it.category_id),\n });\n }\n if (action === \"debug-list-validate-id\") {\n // muestra los juegos con validación TAL CUAL los da FazerCards (nombre + id),\n // sin necesidad de adivinar qué category_id buscar\n const r = await fazercardsGetAll(\"/topups/validate-id\");\n return json({\n ok: r.ok,\n total: r.items.length,\n juegos: r.items.map((it: any) => ({ name: it.name, category_id: it.category_id, nombre_normalizado: normalizarNombre(it.name) })),\n });\n }\n if (action === \"sync-categories\") {\n const r = await syncCategories();\n return json({ ok: true, ...r });\n }\n if (action === \"sync-offers\") {\n const tipo = url.searchParams.get(\"tipo\") || \"\";\n const categoryId = url.searchParams.get(\"category_id\") || \"\";\n if (!tipo || !categoryId) return json({ ok: false, error: \"Faltan tipo o category_id\" }, 400);\n const r = await syncOffers(tipo, categoryId);\n return json({ ok: true, ...r });\n }\n }\n\n /* ---- acciones de cliente (requieren sesión válida) ---- */\n if (action === \"validate-id\" || action === \"place-order\") {\n const user = await verificarUsuario(req);\n if (!user) return json({ ok: false, error: \"Sesión inválida, inicia sesión de nuevo\" }, 401);\n\n const body = req.method === \"POST\" ? await req.json().catch(() => ({})) : {};\n\n if (action === \"validate-id\") {\n const r = await validarId(user, body.catalogoId, body.fields || {});\n return json(r);\n }\n if (action === \"place-order\") {\n const idempotencyKey = body.idempotencyKey || crypto.randomUUID();\n const r = await procesarCompra(user, body.catalogoId, body.fields || {}, idempotencyKey);\n return json(r);\n }\n }\n\n return json({ ok: false, error: \"Acción desconocida\" }, 400);\n } catch (e) {\n return json({ ok: false, error: String(e) }, 500);\n }\n}","deleted",false,"label",[19],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":58,"_18":59},["D",1789125279891],"children",[],[19],"cbdbfc15-c684-4928-994c-ff60c31f59ab",["D",1788582421376],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","9cf84734-7769-47ee-9ecc-3096d2f59093","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a06fc2-1cba-71e9-add3-08d3d2822b52","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_115":111},"org",{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":52},"branch",{"_17":41,"_13":16,"_33":39,"_100":60,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Demia Capital","avatar","https://lh3.googleusercontent.com/a/ACg8ocJhlxqS72LO66hzRVfljlDXsqzy3yUCqMD1Ozpqz6KsVFGEy2I=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":60,"_13":14,"_44":150,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":151,"_95":152,"_97":153,"_99":52},[147],"files",[147],"counts",{"_136":77,"_137":138,"_139":77,"_32":140,"_141":142},[],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":135},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],"pulls","branches",1,"forks",{"_143":145,"_146":77},"connections",{"_143":77,"_144":77},"count","unfilledCount",5,"emptyCount",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":148,"_18":149},[],[19],["D",1788582421376],{"_11":12,"_115":111},{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":52},{"_17":41,"_13":16,"_33":39,"_100":60,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_132":187,"_188":189,"_190":191,"_192":52,"_193":52,"_194":52,"_195":43,"_196":-5,"_197":-7,"_198":-7,"_199":77,"_200":52,"_201":52,"_202":-5,"_203":52,"_204":52,"_205":52,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":16,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]