[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":53,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":121,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",15,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","a5715c60-62ae-11f1-9d5c-1607ee4eb77e","name","fileType","http","content","// insaver-openai-proxy — HTTP val for Val.town\n// Server-side proxy for Repost's AI features, so provider keys never ship in the app binary.\n// 1) Chat completions — hashtag suggestions + AI captions (OpenAI, unchanged).\n// 2) Image generation — AI Image Generator. PRIMARY = fal.ai Ideogram v3 TURBO\n// (great legible text, ~$0.03/img) when FAL_KEY is set; FALLS BACK to OpenAI\n// gpt-image-1 when it isn't — so image gen never breaks mid-migration.\n// 3) Balance — per-user weekly image allowance the app displays so users\n// can ration (no surprise run-outs). Phase 2 adds purchased credits (IAP).\n//\n// Required env secrets (set in the val's Environment Variables):\n// OPENAI_API_KEY — OpenAI key (chat + gpt-image-1 fallback).\n// INSAVER_APP_TOKEN — must match `appToken` in InSaver/Utils/OpenAIAPI.swift.\n// FAL_KEY — fal.ai key. When present, images route to fal Ideogram v3 TURBO.\n//\n// Client contract:\n// Chat : POST {model, messages, max_tokens, temperature} + X-App-Token -> OpenAI chat JSON passthrough.\n// Image : POST {endpoint:\"image\", prompt, size?} + X-App-Token, X-User-Id -> {data:[{url|b64_json}], remaining, resetsAt}.\n// Balance: POST {endpoint:\"balance\"} + X-App-Token, X-User-Id -> {allowance, used, remaining, resetsAt}.\n// Limits : 429 {error:\"allowance_exhausted\", remaining:0, resetsAt} | 429 {error:\"cap_reached\", scope:\"global\"}.\n//\n// NOTE: weekly allowance + global cap are COST BRAKES (best-effort, non-atomic via Val.town blob), not billing-grade.\n// Pro-gating stays app-side (only subscribers reach the generator); these bound spend.\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst ALLOWED_MODELS = new Set([\"gpt-3.5-turbo\", \"gpt-4o-mini\"]);\nconst MAX_TOKENS_CAP = 300;\nconst RATE_LIMIT_PER_MIN = 20; // per IP; in-memory (resets on cold start) — abuse brake\nconst buckets = new Map();\n\n// ---- Image config ----\n// Primary: fal.ai Ideogram v3 TURBO (legible text, ~$0.03/img). Enabled when FAL_KEY is set.\n// Fallback (no FAL_KEY): OpenAI gpt-image-1 (this account HAS gpt-image-1, NOT dall-e-3).\nconst FAL_IDEOGRAM_URL = \"https://fal.run/fal-ai/ideogram/v3\";\nconst FAL_RENDERING_SPEED = \"TURBO\"; // TURBO | BALANCED | QUALITY\nconst OPENAI_IMAGE_MODEL = \"gpt-image-1\"; // fallback only\nconst OPENAI_IMAGE_QUALITY = \"medium\"; // fallback only (gpt-image-1: low|medium|high)\nconst IMAGE_PROMPT_MAX = 1000;\n\n// ---- Allowance / cost brakes ----\nconst IMAGE_WEEKLY_ALLOWANCE = 20; // images/user/week included with the sub\nconst IMAGE_DAILY_CAP_GLOBAL = 1000; // emergency global brake/day (~$30/day @ ~$0.03/img)\n\n// ---- Purchased credit packs (D008A5) ----\n// Consumable IAP products → image-credit grants. Consumed AFTER the weekly allowance.\nconst IMAGE_PACK_CREDITS: Record = {\n \"repost_ai_image_25\": 25,\n \"repost_ai_image_75\": 75,\n \"repost_ai_image_200\": 200,\n};\n\n// ---- Purchased VIDEO packs (D008V2) — consumable IAP → video-credit grants. Consumed AFTER the weekly video. ----\nconst VIDEO_PACK_CREDITS: Record = {\n \"repost_ai_video_3\": 3,\n \"repost_ai_video_10\": 10,\n \"repost_ai_video_25\": 25,\n};\n\n// ---- Video config (D008V1: AI Video MVP) ----\n// Wan-2.1 image-to-video via fal. 480p = 0.5 billing units (cheapest tier, ~$0.05/clip),\n// no audio track (silent by nature). Video is LONG-RUNNING, so we use fal's QUEUE API\n// (submit -> poll) instead of a blocking fal.run call — keeps every proxy hop fast and\n// dodges Val.town / URLSession timeouts. Separate weekly bucket from images.\nconst FAL_WAN_I2V_QUEUE = \"https://queue.fal.run/fal-ai/wan-i2v\"; // POST submit\nconst VIDEO_WEEKLY_ALLOWANCE = 1; // videos/user/week included with the sub\nconst VIDEO_DAILY_CAP_GLOBAL = 100; // emergency global brake/day\nconst VIDEO_PROMPT_MAX = 1000;\nconst VIDEO_RESOLUTION = \"480p\"; // 480p | 720p — 480p is the cheap tier\nconst VIDEO_NUM_FRAMES = 81; // ~5s @ 16fps (81 = base billing, >81 costs 1.25x)\nconst VIDEO_FPS = 16;\n\n// ---- Sound config (D008P2: add audio to the silent Wan clip) ----\n// Path A (CEO): keep the cheap silent Wan i2v, then run a fal MMAudio-V2 video->audio\n// pass (~$0.001/s) so the delivered clip has sound. Two-stage server pipeline tracked\n// by the single app-facing requestId: stage \"video\" (Wan) -> stage \"audio\" (MMAudio).\n// Graceful: if MMAudio submit/poll fails, we deliver the SILENT Wan clip (never block).\nconst ADD_AUDIO = true;\nconst FAL_MMAUDIO_QUEUE = \"https://queue.fal.run/fal-ai/mmaudio-v2\"; // POST submit\nconst AUDIO_DURATION = 5; // seconds, ~matches the 81f/16fps clip\nconst AUDIO_PROMPT_DEFAULT =\n \"soft ambient background music and gentle natural sound matching the scene\";\n\nfunction todayKey(): string {\n return new Date().toISOString().slice(0, 10); // YYYY-MM-DD (UTC)\n}\n\n// Monday-anchored UTC week. Returns the week key + the next-reset ISO timestamp.\nfunction weekInfo(): { key: string; resetsAt: string } {\n const now = new Date();\n const daysSinceMonday = (now.getUTCDay() + 6) % 7; // Mon=0 ... Sun=6\n const monday = new Date(\n Date.UTC(\n now.getUTCFullYear(),\n now.getUTCMonth(),\n now.getUTCDate() - daysSinceMonday,\n ),\n );\n const nextMonday = new Date(monday.getTime() + 7 * 24 * 60 * 60 * 1000);\n return {\n key: monday.toISOString().slice(0, 10),\n resetsAt: nextMonday.toISOString(),\n };\n}\n\nasync function getWeeklyUsed(userId: string): Promise {\n const { key } = weekInfo();\n try {\n return ((await blob.getJSON(`wk:${key}:${userId}`)) as number) ?? 0;\n } catch {\n return 0;\n }\n}\n\nasync function bumpWeeklyUsed(userId: string): Promise {\n const { key } = weekInfo();\n const k = `wk:${key}:${userId}`;\n let n = 0;\n try {\n n = ((await blob.getJSON(k)) as number) ?? 0;\n } catch {\n n = 0;\n }\n try {\n await blob.setJSON(k, n + 1);\n } catch { /* fail-open on count write */ }\n}\n\n// ---- Purchased image credits (D008A5) — a per-user balance that does NOT weekly-reset. ----\nasync function getPurchasedCredits(userId: string): Promise {\n try {\n return ((await blob.getJSON(`credits:${userId}`)) as number) ?? 0;\n } catch {\n return 0;\n }\n}\nasync function setPurchasedCredits(userId: string, n: number): Promise {\n try {\n await blob.setJSON(`credits:${userId}`, Math.max(0, n));\n } catch { /* fail-open */ }\n}\n// Idempotent grant: a transactionId is credited at most once (txn guard blob).\nasync function creditPurchase(\n userId: string,\n transactionId: string,\n credits: number,\n): Promise<{ credited: boolean; balance: number }> {\n const guard = `txn:${transactionId}`;\n try {\n if (await blob.getJSON(guard)) {\n return { credited: false, balance: await getPurchasedCredits(userId) };\n }\n } catch { /* not seen */ }\n const next = (await getPurchasedCredits(userId)) + credits;\n await setPurchasedCredits(userId, next);\n try {\n await blob.setJSON(guard, { userId, credits, ts: Date.now() });\n } catch { /* best-effort */ }\n return { credited: true, balance: next };\n}\n\n// ---- Video weekly ledger (D008V1) — separate from images; consumed at SUBMIT, refunded on failure. ----\nasync function getVideoWeeklyUsed(userId: string): Promise {\n const { key } = weekInfo();\n try {\n return ((await blob.getJSON(`vwk:${key}:${userId}`)) as number) ?? 0;\n } catch {\n return 0;\n }\n}\nasync function bumpVideoWeeklyUsed(userId: string): Promise {\n const { key } = weekInfo();\n const k = `vwk:${key}:${userId}`;\n let n = 0;\n try {\n n = ((await blob.getJSON(k)) as number) ?? 0;\n } catch {\n n = 0;\n }\n try {\n await blob.setJSON(k, n + 1);\n } catch { /* fail-open */ }\n}\nasync function refundVideoWeekly(userId: string): Promise {\n const { key } = weekInfo();\n const k = `vwk:${key}:${userId}`;\n let n = 0;\n try {\n n = ((await blob.getJSON(k)) as number) ?? 0;\n } catch {\n n = 0;\n }\n try {\n await blob.setJSON(k, Math.max(0, n - 1));\n } catch { /* fail-open */ }\n}\n\n// ---- Purchased VIDEO credits (D008V2) — non-resetting, consumed AFTER the weekly video. ----\nasync function getPurchasedVideoCredits(userId: string): Promise {\n try {\n return ((await blob.getJSON(`vcredits:${userId}`)) as number) ?? 0;\n } catch {\n return 0;\n }\n}\nasync function setPurchasedVideoCredits(\n userId: string,\n n: number,\n): Promise {\n try {\n await blob.setJSON(`vcredits:${userId}`, Math.max(0, n));\n } catch { /* fail-open */ }\n}\nasync function creditVideoPurchase(\n userId: string,\n transactionId: string,\n credits: number,\n): Promise<{ credited: boolean; balance: number }> {\n const guard = `txn:${transactionId}`;\n try {\n if (await blob.getJSON(guard)) {\n return {\n credited: false,\n balance: await getPurchasedVideoCredits(userId),\n };\n }\n } catch { /* not seen */ }\n const next = (await getPurchasedVideoCredits(userId)) + credits;\n await setPurchasedVideoCredits(userId, next);\n try {\n await blob.setJSON(guard, {\n userId,\n kind: \"video\",\n credits,\n ts: Date.now(),\n });\n } catch { /* best-effort */ }\n return { credited: true, balance: next };\n}\n// Refund one video credit to the bucket it was consumed from.\nasync function refundVideoBucket(\n userId: string,\n bucket: string,\n): Promise {\n if (bucket === \"purchased\") {\n await setPurchasedVideoCredits(\n userId,\n (await getPurchasedVideoCredits(userId)) + 1,\n );\n } else await refundVideoWeekly(userId);\n}\n\n// Best-effort daily counter via Val.town blob. Returns true if allowed (under limit).\nasync function underDailyCap(key: string, limit: number): Promise {\n const k = `imgcap:${key}`;\n let n = 0;\n try {\n n = ((await blob.getJSON(k)) as number) ?? 0;\n } catch {\n n = 0;\n }\n if (n >= limit) return false;\n try {\n await blob.setJSON(k, n + 1);\n } catch { /* fail-open */ }\n return true;\n}\n\n// Map the app's \"WxH\" size (currently always \"1024x1024\") to a fal image_size.\nfunction falImageSize(size: unknown): unknown {\n if (typeof size === \"string\") {\n const m = size.match(/^(\\d+)x(\\d+)$/);\n if (m) {\n const w = parseInt(m[1], 10), h = parseInt(m[2], 10);\n return w === h ? \"square_hd\" : { width: w, height: h };\n }\n }\n return \"square_hd\";\n}\n\nexport default async function (req: Request): Promise {\n const json = (obj: unknown, status = 200) =>\n new Response(JSON.stringify(obj), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n if (req.method !== \"POST\") return json({ error: \"method_not_allowed\" }, 405);\n\n const appToken = Deno.env.get(\"INSAVER_APP_TOKEN\");\n if (!appToken || req.headers.get(\"x-app-token\") !== appToken) {\n return json({ error: \"unauthorized\" }, 401);\n }\n\n // Per-IP rate limit (abuse brake)\n const ip = req.headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ??\n \"unknown\";\n const now = Date.now();\n const b = buckets.get(ip);\n if (!b || now - b.t > 60_000) {\n buckets.set(ip, { n: 1, t: now });\n } else if (++b.n > RATE_LIMIT_PER_MIN) {\n return json({ error: \"rate_limited\" }, 429);\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"bad_json\" }, 400);\n }\n\n const userId = (req.headers.get(\"x-user-id\") || ip).slice(0, 128);\n\n // ---- Balance branch ----\n if (body?.endpoint === \"balance\") {\n const used = await getWeeklyUsed(userId);\n const purchased = await getPurchasedCredits(userId);\n const vUsed = await getVideoWeeklyUsed(userId);\n const vPurchased = await getPurchasedVideoCredits(userId);\n const { resetsAt } = weekInfo();\n const weeklyRemaining = Math.max(0, IMAGE_WEEKLY_ALLOWANCE - used);\n const videoRemaining = Math.max(0, VIDEO_WEEKLY_ALLOWANCE - vUsed);\n return json({\n allowance: IMAGE_WEEKLY_ALLOWANCE,\n used,\n remaining: weeklyRemaining,\n purchased,\n totalRemaining: weeklyRemaining + purchased,\n resetsAt,\n videoAllowance: VIDEO_WEEKLY_ALLOWANCE,\n videoUsed: vUsed,\n videoRemaining,\n videoPurchased: vPurchased,\n videoTotalRemaining: videoRemaining + vPurchased,\n });\n }\n\n // ---- Credit branch (D008A5): grant purchased pack credits, idempotent by transactionId. ----\n // ⚠ SECURITY TODO before App Store submission: validate the purchase via a RevenueCat webhook\n // or the App Store Server API. This version trusts the client transactionId but is idempotent —\n // acceptable for INTERNAL/sandbox TestFlight only (no real money), per CEO \"build+TestFlight now\".\n if (body?.endpoint === \"credit\") {\n const productId = typeof body?.productId === \"string\" ? body.productId : \"\";\n const transactionId = typeof body?.transactionId === \"string\"\n ? body.transactionId.slice(0, 200)\n : \"\";\n if (!transactionId) return json({ error: \"missing_transaction_id\" }, 400);\n const { resetsAt } = weekInfo();\n // Video pack (D008V2) → credit the non-resetting VIDEO ledger.\n const vCredits = VIDEO_PACK_CREDITS[productId];\n if (vCredits) {\n const res = await creditVideoPurchase(userId, transactionId, vCredits);\n const vUsed = await getVideoWeeklyUsed(userId);\n const videoRemaining = Math.max(0, VIDEO_WEEKLY_ALLOWANCE - vUsed);\n return json({\n ok: true,\n credited: res.credited,\n productId,\n kind: \"video\",\n addedCredits: res.credited ? vCredits : 0,\n videoPurchased: res.balance,\n videoRemaining,\n videoTotalRemaining: videoRemaining + res.balance,\n resetsAt,\n });\n }\n // Image pack (D008A5).\n const credits = IMAGE_PACK_CREDITS[productId];\n if (!credits) return json({ error: \"unknown_product\", productId }, 400);\n const res = await creditPurchase(userId, transactionId, credits);\n const used = await getWeeklyUsed(userId);\n const weeklyRemaining = Math.max(0, IMAGE_WEEKLY_ALLOWANCE - used);\n return json({\n ok: true,\n credited: res.credited,\n productId,\n kind: \"image\",\n addedCredits: res.credited ? credits : 0,\n purchased: res.balance,\n remaining: weeklyRemaining,\n totalRemaining: weeklyRemaining + res.balance,\n resetsAt,\n });\n }\n\n // ---- Video submit branch (D008V1): image -> video via fal Wan-2.1 queue. ----\n // Consumes 1 weekly video credit AT SUBMIT (so parallel submits can't all pass the\n // allowance check); refunds if fal rejects the submission. Returns a requestId the\n // app polls via endpoint:\"video_status\".\n if (body?.endpoint === \"video\") {\n const prompt = typeof body?.prompt === \"string\" ? body.prompt.trim() : \"\";\n const imageUrl = typeof body?.imageUrl === \"string\"\n ? body.imageUrl.trim()\n : \"\";\n if (!prompt) return json({ error: \"bad_prompt\" }, 400);\n if (prompt.length > VIDEO_PROMPT_MAX) {\n return json({ error: \"prompt_too_long\" }, 400);\n }\n if (!/^https?:\\/\\//.test(imageUrl)) {\n return json({ error: \"bad_image_url\" }, 400);\n }\n const audioPrompt =\n (typeof body?.audioPrompt === \"string\" && body.audioPrompt.trim())\n ? body.audioPrompt.trim().slice(0, VIDEO_PROMPT_MAX)\n : \"\";\n\n const falKey = Deno.env.get(\"FAL_KEY\");\n if (!falKey) return json({ error: \"video_unavailable\" }, 503);\n\n const { resetsAt } = weekInfo();\n const vUsed = await getVideoWeeklyUsed(userId);\n const vWeeklyRemaining = Math.max(0, VIDEO_WEEKLY_ALLOWANCE - vUsed);\n const vPurchased = await getPurchasedVideoCredits(userId);\n if (vWeeklyRemaining <= 0 && vPurchased <= 0) {\n return json({\n error: \"video_allowance_exhausted\",\n videoRemaining: 0,\n videoPurchased: 0,\n videoTotalRemaining: 0,\n resetsAt,\n }, 429);\n }\n if (\n !(await underDailyCap(\n `${todayKey()}:__vglobal__`,\n VIDEO_DAILY_CAP_GLOBAL,\n ))\n ) {\n return json({ error: \"cap_reached\", scope: \"video_global\" }, 429);\n }\n\n // Consume first (block parallel-submit abuse): weekly allowance first, then a purchased credit.\n const consumedBucket = vWeeklyRemaining > 0 ? \"weekly\" : \"purchased\";\n if (consumedBucket === \"weekly\") await bumpVideoWeeklyUsed(userId);\n else await setPurchasedVideoCredits(userId, vPurchased - 1);\n let upstream: Response;\n try {\n upstream = await fetch(FAL_WAN_I2V_QUEUE, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Key ${falKey}`,\n },\n body: JSON.stringify({\n prompt,\n image_url: imageUrl,\n resolution: VIDEO_RESOLUTION,\n num_frames: VIDEO_NUM_FRAMES,\n frames_per_second: VIDEO_FPS,\n acceleration: \"regular\",\n enable_safety_checker: true,\n aspect_ratio: \"auto\",\n }),\n });\n } catch (e) {\n await refundVideoBucket(userId, consumedBucket);\n return json({ error: \"video_submit_failed\", detail: String(e) }, 502);\n }\n const j: any = await upstream.json().catch(() => null);\n const requestId = j?.request_id;\n if (!upstream.ok || !requestId) {\n await refundVideoBucket(userId, consumedBucket);\n return json(\n { error: \"video_submit_failed\", detail: j },\n upstream.status || 502,\n );\n }\n // Remember owner + the fal-provided status/result URLs for the poll endpoint.\n try {\n await blob.setJSON(`vidreq:${requestId}`, {\n userId,\n stage: \"video\",\n audioPrompt,\n consumedBucket,\n statusUrl: j?.status_url ??\n `${FAL_WAN_I2V_QUEUE}/requests/${requestId}/status`,\n responseUrl: j?.response_url ??\n `${FAL_WAN_I2V_QUEUE}/requests/${requestId}`,\n ts: Date.now(),\n });\n } catch { /* best-effort */ }\n const weeklyAfter = consumedBucket === \"weekly\"\n ? vWeeklyRemaining - 1\n : vWeeklyRemaining;\n const purchasedAfter = consumedBucket === \"purchased\"\n ? vPurchased - 1\n : vPurchased;\n return json({\n requestId,\n status: \"IN_QUEUE\",\n videoRemaining: weeklyAfter,\n videoPurchased: purchasedAfter,\n videoTotalRemaining: weeklyAfter + purchasedAfter,\n resetsAt,\n });\n }\n\n // ---- Video status branch (D008V1 + D008P2 sound): two-stage poll. ----\n // Stage \"video\" = Wan i2v (silent). On completion we kick off the MMAudio audio pass\n // (stage \"audio\") under the SAME app-facing requestId, so the app polls one id and only\n // sees COMPLETED once the clip has sound. Graceful: any MMAudio failure delivers the\n // SILENT clip as COMPLETED (never block the user's video).\n if (body?.endpoint === \"video_status\") {\n const requestId = typeof body?.requestId === \"string\"\n ? body.requestId.slice(0, 200)\n : \"\";\n if (!requestId) return json({ error: \"missing_request_id\" }, 400);\n const falKey = Deno.env.get(\"FAL_KEY\");\n if (!falKey) return json({ error: \"video_unavailable\" }, 503);\n\n let meta: any = null;\n try {\n meta = await blob.getJSON(`vidreq:${requestId}`);\n } catch { /* unknown */ }\n const ownerId = meta?.userId ?? userId;\n const stage = meta?.stage ?? \"video\";\n const { resetsAt } = weekInfo();\n const remainingNow = async () =>\n Math.max(0, VIDEO_WEEKLY_ALLOWANCE - (await getVideoWeeklyUsed(ownerId)));\n const refundOnce = async () => {\n const g = `vidrefunded:${requestId}`;\n try {\n if (await blob.getJSON(g)) return;\n } catch { /* not refunded */ }\n await refundVideoBucket(ownerId, meta?.consumedBucket ?? \"weekly\");\n try {\n await blob.setJSON(g, { ts: Date.now() });\n } catch { /* best-effort */ }\n };\n const pollFal = async (url: string) => {\n try {\n const st = await fetch(url, {\n headers: { Authorization: `Key ${falKey}` },\n });\n return {\n ok: true,\n sj: (await st.json().catch(() => null)) as any,\n code: st.status,\n };\n } catch (e) {\n return { ok: false, sj: null as any, code: 0, detail: String(e) };\n }\n };\n const falVideoUrl = async (url: string): Promise => {\n try {\n const r = await fetch(url, {\n headers: { Authorization: `Key ${falKey}` },\n });\n const rj: any = await r.json().catch(() => null);\n return r.ok ? (rj?.video?.url ?? null) : null;\n } catch {\n return null;\n }\n };\n\n // ----- Stage AUDIO: MMAudio pass over the finished silent clip -----\n if (stage === \"audio\") {\n const silentUrl = meta?.silentUrl ?? null;\n const p = await pollFal(meta?.audioStatusUrl ?? \"\");\n const status = p.sj?.status;\n if (status === \"COMPLETED\") {\n const url = await falVideoUrl(meta?.audioResponseUrl ?? \"\");\n return json({\n status: \"COMPLETED\",\n video: { url: url ?? silentUrl },\n hasAudio: !!url,\n videoRemaining: await remainingNow(),\n resetsAt,\n });\n }\n if (status === \"IN_QUEUE\" || status === \"IN_PROGRESS\") {\n return json({\n status: \"IN_PROGRESS\",\n stage: \"audio\",\n queuePosition: p.sj?.queue_position ?? null,\n });\n }\n // MMAudio failed/unknown → deliver the silent clip (user still gets a video; no refund).\n return json({\n status: \"COMPLETED\",\n video: { url: silentUrl },\n hasAudio: false,\n videoRemaining: await remainingNow(),\n resetsAt,\n });\n }\n\n // ----- Stage VIDEO: Wan i2v -----\n const statusUrl = meta?.statusUrl ??\n `${FAL_WAN_I2V_QUEUE}/requests/${requestId}/status`;\n const responseUrl = meta?.responseUrl ??\n `${FAL_WAN_I2V_QUEUE}/requests/${requestId}`;\n const p = await pollFal(statusUrl);\n if (!p.ok) return json({ status: \"IN_PROGRESS\", detail: p.detail });\n const status = p.sj?.status;\n\n if (status === \"COMPLETED\") {\n const silentUrl = await falVideoUrl(responseUrl);\n if (!silentUrl) {\n await refundOnce();\n return json({\n status: \"FAILED\",\n error: \"no_video\",\n videoRemaining: await remainingNow(),\n resetsAt,\n }, 502);\n }\n if (ADD_AUDIO) {\n try {\n const sub = await fetch(FAL_MMAUDIO_QUEUE, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Key ${falKey}`,\n },\n body: JSON.stringify({\n video_url: silentUrl,\n prompt: meta?.audioPrompt || AUDIO_PROMPT_DEFAULT,\n duration: AUDIO_DURATION,\n }),\n });\n const asj: any = await sub.json().catch(() => null);\n const aid = asj?.request_id;\n if (sub.ok && aid) {\n await blob.setJSON(`vidreq:${requestId}`, {\n userId: ownerId,\n stage: \"audio\",\n silentUrl,\n audioStatusUrl: asj?.status_url ??\n `${FAL_MMAUDIO_QUEUE}/requests/${aid}/status`,\n audioResponseUrl: asj?.response_url ??\n `${FAL_MMAUDIO_QUEUE}/requests/${aid}`,\n ts: Date.now(),\n });\n return json({ status: \"IN_PROGRESS\", stage: \"audio\" });\n }\n } catch { /* fall through to deliver the silent clip */ }\n }\n // Audio disabled or submit failed → deliver the silent clip now.\n return json({\n status: \"COMPLETED\",\n video: { url: silentUrl },\n hasAudio: false,\n videoRemaining: await remainingNow(),\n resetsAt,\n });\n }\n if (status === \"IN_QUEUE\" || status === \"IN_PROGRESS\") {\n return json({\n status: \"IN_PROGRESS\",\n queuePosition: p.sj?.queue_position ?? null,\n });\n }\n await refundOnce();\n return json({\n status: \"FAILED\",\n error: \"video_failed\",\n detail: p.sj,\n videoRemaining: await remainingNow(),\n resetsAt,\n }, p.code || 502);\n }\n\n // ---- Image generation branch ----\n if (body?.endpoint === \"image\") {\n const prompt = typeof body?.prompt === \"string\" ? body.prompt.trim() : \"\";\n if (!prompt) return json({ error: \"bad_prompt\" }, 400);\n if (prompt.length > IMAGE_PROMPT_MAX) {\n return json({ error: \"prompt_too_long\" }, 400);\n }\n\n const { resetsAt } = weekInfo();\n const used = await getWeeklyUsed(userId);\n const purchased = await getPurchasedCredits(userId);\n const weeklyRemaining = Math.max(0, IMAGE_WEEKLY_ALLOWANCE - used);\n if (weeklyRemaining <= 0 && purchased <= 0) {\n return json({\n error: \"allowance_exhausted\",\n remaining: 0,\n purchased: 0,\n totalRemaining: 0,\n resetsAt,\n }, 429);\n }\n // Global emergency cost brake.\n if (\n !(await underDailyCap(`${todayKey()}:__global__`, IMAGE_DAILY_CAP_GLOBAL))\n ) {\n return json({ error: \"cap_reached\", scope: \"global\" }, 429);\n }\n // On success, consume one credit: weekly allowance first, then a purchased credit.\n const consumeOne = async (): Promise<\n { remaining: number; purchased: number }\n > => {\n if (weeklyRemaining > 0) {\n await bumpWeeklyUsed(userId);\n return { remaining: weeklyRemaining - 1, purchased };\n }\n await setPurchasedCredits(userId, purchased - 1);\n return { remaining: 0, purchased: purchased - 1 };\n };\n\n const falKey = Deno.env.get(\"FAL_KEY\");\n\n if (falKey) {\n // PRIMARY: fal.ai Ideogram v3 TURBO (legible text).\n const upstream = await fetch(FAL_IDEOGRAM_URL, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Key ${falKey}`,\n },\n body: JSON.stringify({\n prompt,\n rendering_speed: FAL_RENDERING_SPEED,\n image_size: falImageSize(body?.size),\n num_images: 1,\n }),\n });\n const j: any = await upstream.json().catch(() => null);\n const url = j?.images?.[0]?.url;\n if (upstream.ok && url) {\n const t = await consumeOne();\n return json({\n data: [{ url }],\n remaining: t.remaining,\n purchased: t.purchased,\n totalRemaining: t.remaining + t.purchased,\n resetsAt,\n });\n }\n return json(\n { error: \"image_failed\", provider: \"fal\", detail: j },\n upstream.status || 502,\n );\n }\n\n // FALLBACK: OpenAI gpt-image-1 (until FAL_KEY is set).\n const size = (typeof body?.size === \"string\" && /^\\d+x\\d+$/.test(body.size))\n ? body.size\n : \"1024x1024\";\n const upstream = await fetch(\n \"https://api.openai.com/v1/images/generations\",\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${Deno.env.get(\"OPENAI_API_KEY\")}`,\n },\n body: JSON.stringify({\n model: OPENAI_IMAGE_MODEL,\n prompt,\n n: 1,\n size,\n quality: OPENAI_IMAGE_QUALITY,\n }),\n },\n );\n const t = await upstream.text();\n let obj: any = null;\n try {\n obj = JSON.parse(t);\n } catch { /* leave null */ }\n const first = obj?.data?.[0];\n if (upstream.ok && (first?.b64_json || first?.url)) {\n const t = await consumeOne();\n return json({\n data: obj.data,\n remaining: t.remaining,\n purchased: t.purchased,\n totalRemaining: t.remaining + t.purchased,\n resetsAt,\n });\n }\n return new Response(t || JSON.stringify({ error: \"image_failed\" }), {\n status: upstream.status || 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Chat completions branch (unchanged) ----\n if (\n !Array.isArray(body?.messages) || body.messages.length === 0 ||\n body.messages.length > 8\n ) {\n return json({ error: \"bad_messages\" }, 400);\n }\n const totalChars = body.messages.reduce(\n (s: number, m: any) =>\n s + (typeof m?.content === \"string\" ? m.content.length : 0),\n 0,\n );\n if (totalChars > 6000) return json({ error: \"input_too_long\" }, 400);\n\n const model = ALLOWED_MODELS.has(body?.model) ? body.model : \"gpt-3.5-turbo\";\n const maxTokens = Math.min(\n Math.max(Number(body?.max_tokens) || 220, 1),\n MAX_TOKENS_CAP,\n );\n const temperature = Math.min(\n Math.max(Number(body?.temperature) || 0.7, 0),\n 1.2,\n );\n\n const upstream = await fetch(\"https://api.openai.com/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${Deno.env.get(\"OPENAI_API_KEY\")}`,\n },\n body: JSON.stringify({\n model,\n messages: body.messages,\n max_tokens: maxTokens,\n temperature,\n }),\n });\n\n return new Response(await upstream.text(), {\n status: upstream.status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}","// insaver-openai-proxy — HTTP val for Val.town\n// Server-side proxy for Repost's AI features, so provider keys never ship in the app binary.\n// 1) Chat completions — hashtag suggestions + AI captions (OpenAI, unchanged).\n// 2) Image generation — AI Image Generator. PRIMARY = fal.ai Ideogram v3 TURBO\n// (great legible text, ~$0.03/img) when FAL_KEY is set; FALLS BACK to OpenAI\n// gpt-image-1 when it isn't — so image gen never breaks mid-migration.\n// 3) Balance — per-user weekly image allowance the app displays so users\n// can ration (no surprise run-outs). Phase 2 adds purchased credits (IAP).\n//\n// Required env secrets (set in the val's Environment Variables):\n// OPENAI_API_KEY — OpenAI key (chat + gpt-image-1 fallback).\n// INSAVER_APP_TOKEN — must match `appToken` in InSaver/Utils/OpenAIAPI.swift.\n// FAL_KEY — fal.ai key. When present, images route to fal Ideogram v3 TURBO.\n//\n// Client contract:\n// Chat : POST {model, messages, max_tokens, temperature} + X-App-Token -> OpenAI chat JSON passthrough.\n// Image : POST {endpoint:\"image\", prompt, size?} + X-App-Token, X-User-Id -> {data:[{url|b64_json}], remaining, resetsAt}.\n// Balance: POST {endpoint:\"balance\"} + X-App-Token, X-User-Id -> {allowance, used, remaining, resetsAt}.\n// Limits : 429 {error:\"allowance_exhausted\", remaining:0, resetsAt} | 429 {error:\"cap_reached\", scope:\"global\"}.\n//\n// NOTE: weekly allowance + global cap are COST BRAKES (best-effort, non-atomic via Val.town blob), not billing-grade.\n// Pro-gating stays app-side (only subscribers reach the generator); these bound spend.\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst ALLOWED_MODELS = new Set([\"gpt-3.5-turbo\", \"gpt-4o-mini\"]);\nconst MAX_TOKENS_CAP = 300;\nconst RATE_LIMIT_PER_MIN = 20; // per IP; in-memory (resets on cold start) — abuse brake\nconst buckets = new Map();\n\n// ---- Image config ----\n// Primary: fal.ai Ideogram v3 TURBO (legible text, ~$0.03/img). Enabled when FAL_KEY is set.\n// Fallback (no FAL_KEY): OpenAI gpt-image-1 (this account HAS gpt-image-1, NOT dall-e-3).\nconst FAL_IDEOGRAM_URL = \"https://fal.run/fal-ai/ideogram/v3\";\nconst FAL_RENDERING_SPEED = \"TURBO\"; // TURBO | BALANCED | QUALITY\nconst OPENAI_IMAGE_MODEL = \"gpt-image-1\"; // fallback only\nconst OPENAI_IMAGE_QUALITY = \"medium\"; // fallback only (gpt-image-1: low|medium|high)\nconst IMAGE_PROMPT_MAX = 1000;\n\n// ---- Allowance / cost brakes ----\nconst IMAGE_WEEKLY_ALLOWANCE = 20; // images/user/week included with the sub\nconst IMAGE_DAILY_CAP_GLOBAL = 1000; // emergency global brake/day (~$30/day @ ~$0.03/img)\n\n// ---- Purchased credit packs (D008A5) ----\n// Consumable IAP products → image-credit grants. Consumed AFTER the weekly allowance.\nconst IMAGE_PACK_CREDITS: Record = {\n \"repost_ai_image_25\": 25,\n \"repost_ai_image_75\": 75,\n \"repost_ai_image_200\": 200,\n};\n\n// ---- Purchased VIDEO packs (D008V2) — consumable IAP → video-credit grants. Consumed AFTER the weekly video. ----\nconst VIDEO_PACK_CREDITS: Record = {\n \"repost_ai_video_3\": 3,\n \"repost_ai_video_10\": 10,\n \"repost_ai_video_25\": 25,\n};\n\n// ---- Video config (D008V1: AI Video MVP) ----\n// Wan-2.1 image-to-video via fal. 480p = 0.5 billing units (cheapest tier, ~$0.05/clip),\n// no audio track (silent by nature). Video is LONG-RUNNING, so we use fal's QUEUE API\n// (submit -> poll) instead of a blocking fal.run call — keeps every proxy hop fast and\n// dodges Val.town / URLSession timeouts. Separate weekly bucket from images.\nconst FAL_WAN_I2V_QUEUE = \"https://queue.fal.run/fal-ai/wan-i2v\"; // POST submit\nconst VIDEO_WEEKLY_ALLOWANCE = 1; // videos/user/week included with the sub\nconst VIDEO_DAILY_CAP_GLOBAL = 100; // emergency global brake/day\nconst VIDEO_PROMPT_MAX = 1000;\nconst VIDEO_RESOLUTION = \"480p\"; // 480p | 720p — 480p is the cheap tier\nconst VIDEO_NUM_FRAMES = 81; // ~5s @ 16fps (81 = base billing, >81 costs 1.25x)\nconst VIDEO_FPS = 16;\n\n// ---- Sound config (D008P2: add audio to the silent Wan clip) ----\n// Path A (CEO): keep the cheap silent Wan i2v, then run a fal MMAudio-V2 video->audio\n// pass (~$0.001/s) so the delivered clip has sound. Two-stage server pipeline tracked\n// by the single app-facing requestId: stage \"video\" (Wan) -> stage \"audio\" (MMAudio).\n// Graceful: if MMAudio submit/poll fails, we deliver the SILENT Wan clip (never block).\nconst ADD_AUDIO = true;\nconst FAL_MMAUDIO_QUEUE = \"https://queue.fal.run/fal-ai/mmaudio-v2\"; // POST submit\nconst AUDIO_DURATION = 5; // seconds, ~matches the 81f/16fps clip\nconst AUDIO_PROMPT_DEFAULT =\n \"soft ambient background music and gentle natural sound matching the scene\";\n\nfunction todayKey(): string {\n return new Date().toISOString().slice(0, 10); // YYYY-MM-DD (UTC)\n}\n\n// Monday-anchored UTC week. Returns the week key + the next-reset ISO timestamp.\nfunction weekInfo(): { key: string; resetsAt: string } {\n const now = new Date();\n const daysSinceMonday = (now.getUTCDay() + 6) % 7; // Mon=0 ... Sun=6\n const monday = new Date(\n Date.UTC(\n now.getUTCFullYear(),\n now.getUTCMonth(),\n now.getUTCDate() - daysSinceMonday,\n ),\n );\n const nextMonday = new Date(monday.getTime() + 7 * 24 * 60 * 60 * 1000);\n return {\n key: monday.toISOString().slice(0, 10),\n resetsAt: nextMonday.toISOString(),\n };\n}\n\nasync function getWeeklyUsed(userId: string): Promise {\n const { key } = weekInfo();\n try {\n return ((await blob.getJSON(`wk:${key}:${userId}`)) as number) ?? 0;\n } catch {\n return 0;\n }\n}\n\nasync function bumpWeeklyUsed(userId: string): Promise {\n const { key } = weekInfo();\n const k = `wk:${key}:${userId}`;\n let n = 0;\n try {\n n = ((await blob.getJSON(k)) as number) ?? 0;\n } catch {\n n = 0;\n }\n try {\n await blob.setJSON(k, n + 1);\n } catch { /* fail-open on count write */ }\n}\n\n// ---- Purchased image credits (D008A5) — a per-user balance that does NOT weekly-reset. ----\nasync function getPurchasedCredits(userId: string): Promise {\n try {\n return ((await blob.getJSON(`credits:${userId}`)) as number) ?? 0;\n } catch {\n return 0;\n }\n}\nasync function setPurchasedCredits(userId: string, n: number): Promise {\n try {\n await blob.setJSON(`credits:${userId}`, Math.max(0, n));\n } catch { /* fail-open */ }\n}\n// Idempotent grant: a transactionId is credited at most once (txn guard blob).\nasync function creditPurchase(\n userId: string,\n transactionId: string,\n credits: number,\n): Promise<{ credited: boolean; balance: number }> {\n const guard = `txn:${transactionId}`;\n try {\n if (await blob.getJSON(guard)) {\n return { credited: false, balance: await getPurchasedCredits(userId) };\n }\n } catch { /* not seen */ }\n const next = (await getPurchasedCredits(userId)) + credits;\n await setPurchasedCredits(userId, next);\n try {\n await blob.setJSON(guard, { userId, credits, ts: Date.now() });\n } catch { /* best-effort */ }\n return { credited: true, balance: next };\n}\n\n// ---- Video weekly ledger (D008V1) — separate from images; consumed at SUBMIT, refunded on failure. ----\nasync function getVideoWeeklyUsed(userId: string): Promise {\n const { key } = weekInfo();\n try {\n return ((await blob.getJSON(`vwk:${key}:${userId}`)) as number) ?? 0;\n } catch {\n return 0;\n }\n}\nasync function bumpVideoWeeklyUsed(userId: string): Promise {\n const { key } = weekInfo();\n const k = `vwk:${key}:${userId}`;\n let n = 0;\n try {\n n = ((await blob.getJSON(k)) as number) ?? 0;\n } catch {\n n = 0;\n }\n try {\n await blob.setJSON(k, n + 1);\n } catch { /* fail-open */ }\n}\nasync function refundVideoWeekly(userId: string): Promise {\n const { key } = weekInfo();\n const k = `vwk:${key}:${userId}`;\n let n = 0;\n try {\n n = ((await blob.getJSON(k)) as number) ?? 0;\n } catch {\n n = 0;\n }\n try {\n await blob.setJSON(k, Math.max(0, n - 1));\n } catch { /* fail-open */ }\n}\n\n// ---- Purchased VIDEO credits (D008V2) — non-resetting, consumed AFTER the weekly video. ----\nasync function getPurchasedVideoCredits(userId: string): Promise {\n try {\n return ((await blob.getJSON(`vcredits:${userId}`)) as number) ?? 0;\n } catch {\n return 0;\n }\n}\nasync function setPurchasedVideoCredits(\n userId: string,\n n: number,\n): Promise {\n try {\n await blob.setJSON(`vcredits:${userId}`, Math.max(0, n));\n } catch { /* fail-open */ }\n}\nasync function creditVideoPurchase(\n userId: string,\n transactionId: string,\n credits: number,\n): Promise<{ credited: boolean; balance: number }> {\n const guard = `txn:${transactionId}`;\n try {\n if (await blob.getJSON(guard)) {\n return {\n credited: false,\n balance: await getPurchasedVideoCredits(userId),\n };\n }\n } catch { /* not seen */ }\n const next = (await getPurchasedVideoCredits(userId)) + credits;\n await setPurchasedVideoCredits(userId, next);\n try {\n await blob.setJSON(guard, {\n userId,\n kind: \"video\",\n credits,\n ts: Date.now(),\n });\n } catch { /* best-effort */ }\n return { credited: true, balance: next };\n}\n// Refund one video credit to the bucket it was consumed from.\nasync function refundVideoBucket(\n userId: string,\n bucket: string,\n): Promise {\n if (bucket === \"purchased\") {\n await setPurchasedVideoCredits(\n userId,\n (await getPurchasedVideoCredits(userId)) + 1,\n );\n } else await refundVideoWeekly(userId);\n}\n\n// Best-effort daily counter via Val.town blob. Returns true if allowed (under limit).\nasync function underDailyCap(key: string, limit: number): Promise {\n const k = `imgcap:${key}`;\n let n = 0;\n try {\n n = ((await blob.getJSON(k)) as number) ?? 0;\n } catch {\n n = 0;\n }\n if (n >= limit) return false;\n try {\n await blob.setJSON(k, n + 1);\n } catch { /* fail-open */ }\n return true;\n}\n\n// Map the app's \"WxH\" size (currently always \"1024x1024\") to a fal image_size.\nfunction falImageSize(size: unknown): unknown {\n if (typeof size === \"string\") {\n const m = size.match(/^(\\d+)x(\\d+)$/);\n if (m) {\n const w = parseInt(m[1], 10), h = parseInt(m[2], 10);\n return w === h ? \"square_hd\" : { width: w, height: h };\n }\n }\n return \"square_hd\";\n}\n\nexport default async function (req: Request): Promise {\n const json = (obj: unknown, status = 200) =>\n new Response(JSON.stringify(obj), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n if (req.method !== \"POST\") return json({ error: \"method_not_allowed\" }, 405);\n\n const appToken = Deno.env.get(\"INSAVER_APP_TOKEN\");\n if (!appToken || req.headers.get(\"x-app-token\") !== appToken) {\n return json({ error: \"unauthorized\" }, 401);\n }\n\n // Per-IP rate limit (abuse brake)\n const ip = req.headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ??\n \"unknown\";\n const now = Date.now();\n const b = buckets.get(ip);\n if (!b || now - b.t > 60_000) {\n buckets.set(ip, { n: 1, t: now });\n } else if (++b.n > RATE_LIMIT_PER_MIN) {\n return json({ error: \"rate_limited\" }, 429);\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"bad_json\" }, 400);\n }\n\n const userId = (req.headers.get(\"x-user-id\") || ip).slice(0, 128);\n\n // ---- Balance branch ----\n if (body?.endpoint === \"balance\") {\n const used = await getWeeklyUsed(userId);\n const purchased = await getPurchasedCredits(userId);\n const vUsed = await getVideoWeeklyUsed(userId);\n const vPurchased = await getPurchasedVideoCredits(userId);\n const { resetsAt } = weekInfo();\n const weeklyRemaining = Math.max(0, IMAGE_WEEKLY_ALLOWANCE - used);\n const videoRemaining = Math.max(0, VIDEO_WEEKLY_ALLOWANCE - vUsed);\n return json({\n allowance: IMAGE_WEEKLY_ALLOWANCE,\n used,\n remaining: weeklyRemaining,\n purchased,\n totalRemaining: weeklyRemaining + purchased,\n resetsAt,\n videoAllowance: VIDEO_WEEKLY_ALLOWANCE,\n videoUsed: vUsed,\n videoRemaining,\n videoPurchased: vPurchased,\n videoTotalRemaining: videoRemaining + vPurchased,\n });\n }\n\n // ---- Credit branch (D008A5): grant purchased pack credits, idempotent by transactionId. ----\n // ⚠ SECURITY TODO before App Store submission: validate the purchase via a RevenueCat webhook\n // or the App Store Server API. This version trusts the client transactionId but is idempotent —\n // acceptable for INTERNAL/sandbox TestFlight only (no real money), per CEO \"build+TestFlight now\".\n if (body?.endpoint === \"credit\") {\n const productId = typeof body?.productId === \"string\" ? body.productId : \"\";\n const transactionId = typeof body?.transactionId === \"string\"\n ? body.transactionId.slice(0, 200)\n : \"\";\n if (!transactionId) return json({ error: \"missing_transaction_id\" }, 400);\n const { resetsAt } = weekInfo();\n // Video pack (D008V2) → credit the non-resetting VIDEO ledger.\n const vCredits = VIDEO_PACK_CREDITS[productId];\n if (vCredits) {\n const res = await creditVideoPurchase(userId, transactionId, vCredits);\n const vUsed = await getVideoWeeklyUsed(userId);\n const videoRemaining = Math.max(0, VIDEO_WEEKLY_ALLOWANCE - vUsed);\n return json({\n ok: true,\n credited: res.credited,\n productId,\n kind: \"video\",\n addedCredits: res.credited ? vCredits : 0,\n videoPurchased: res.balance,\n videoRemaining,\n videoTotalRemaining: videoRemaining + res.balance,\n resetsAt,\n });\n }\n // Image pack (D008A5).\n const credits = IMAGE_PACK_CREDITS[productId];\n if (!credits) return json({ error: \"unknown_product\", productId }, 400);\n const res = await creditPurchase(userId, transactionId, credits);\n const used = await getWeeklyUsed(userId);\n const weeklyRemaining = Math.max(0, IMAGE_WEEKLY_ALLOWANCE - used);\n return json({\n ok: true,\n credited: res.credited,\n productId,\n kind: \"image\",\n addedCredits: res.credited ? credits : 0,\n purchased: res.balance,\n remaining: weeklyRemaining,\n totalRemaining: weeklyRemaining + res.balance,\n resetsAt,\n });\n }\n\n // ---- Video submit branch (D008V1): image -> video via fal Wan-2.1 queue. ----\n // Consumes 1 weekly video credit AT SUBMIT (so parallel submits can't all pass the\n // allowance check); refunds if fal rejects the submission. Returns a requestId the\n // app polls via endpoint:\"video_status\".\n if (body?.endpoint === \"video\") {\n const prompt = typeof body?.prompt === \"string\" ? body.prompt.trim() : \"\";\n let imageUrl = typeof body?.imageUrl === \"string\"\n ? body.imageUrl.trim()\n : \"\";\n if (!prompt) return json({ error: \"bad_prompt\" }, 400);\n if (prompt.length > VIDEO_PROMPT_MAX) {\n return json({ error: \"prompt_too_long\" }, 400);\n }\n // D008V3 standalone path: imageUrl is OPTIONAL. If absent, we generate an internal\n // starting image from the prompt below (NOT charged as an image credit).\n const standalone = !/^https?:\\/\\//.test(imageUrl);\n const audioPrompt =\n (typeof body?.audioPrompt === \"string\" && body.audioPrompt.trim())\n ? body.audioPrompt.trim().slice(0, VIDEO_PROMPT_MAX)\n : \"\";\n\n const falKey = Deno.env.get(\"FAL_KEY\");\n if (!falKey) return json({ error: \"video_unavailable\" }, 503);\n\n const { resetsAt } = weekInfo();\n const vUsed = await getVideoWeeklyUsed(userId);\n const vWeeklyRemaining = Math.max(0, VIDEO_WEEKLY_ALLOWANCE - vUsed);\n const vPurchased = await getPurchasedVideoCredits(userId);\n if (vWeeklyRemaining <= 0 && vPurchased <= 0) {\n return json({\n error: \"video_allowance_exhausted\",\n videoRemaining: 0,\n videoPurchased: 0,\n videoTotalRemaining: 0,\n resetsAt,\n }, 429);\n }\n // D008V3 standalone: generate the internal starting image from the prompt (fal Ideogram,\n // NOT charged to the image allowance). After the allowance check (don't generate for users\n // with no video credit), before consume/Wan-submit (a failure here costs nothing).\n if (standalone) {\n const imagePrompt =\n (typeof body?.imagePrompt === \"string\" && body.imagePrompt.trim())\n ? body.imagePrompt.trim().slice(0, IMAGE_PROMPT_MAX)\n : prompt.slice(0, IMAGE_PROMPT_MAX);\n try {\n const ig = await fetch(FAL_IDEOGRAM_URL, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Key ${falKey}`,\n },\n body: JSON.stringify({\n prompt: imagePrompt,\n rendering_speed: FAL_RENDERING_SPEED,\n image_size: \"square_hd\",\n num_images: 1,\n }),\n });\n const ij: any = await ig.json().catch(() => null);\n const u = ij?.images?.[0]?.url;\n if (!ig.ok || !u) {\n return json(\n { error: \"video_image_failed\", detail: ij },\n ig.status || 502,\n );\n }\n imageUrl = u;\n } catch (e) {\n return json({ error: \"video_image_failed\", detail: String(e) }, 502);\n }\n }\n if (\n !(await underDailyCap(\n `${todayKey()}:__vglobal__`,\n VIDEO_DAILY_CAP_GLOBAL,\n ))\n ) {\n return json({ error: \"cap_reached\", scope: \"video_global\" }, 429);\n }\n\n // Consume first (block parallel-submit abuse): weekly allowance first, then a purchased credit.\n const consumedBucket = vWeeklyRemaining > 0 ? \"weekly\" : \"purchased\";\n if (consumedBucket === \"weekly\") await bumpVideoWeeklyUsed(userId);\n else await setPurchasedVideoCredits(userId, vPurchased - 1);\n let upstream: Response;\n try {\n upstream = await fetch(FAL_WAN_I2V_QUEUE, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Key ${falKey}`,\n },\n body: JSON.stringify({\n prompt,\n image_url: imageUrl,\n resolution: VIDEO_RESOLUTION,\n num_frames: VIDEO_NUM_FRAMES,\n frames_per_second: VIDEO_FPS,\n acceleration: \"regular\",\n enable_safety_checker: true,\n aspect_ratio: \"auto\",\n }),\n });\n } catch (e) {\n await refundVideoBucket(userId, consumedBucket);\n return json({ error: \"video_submit_failed\", detail: String(e) }, 502);\n }\n const j: any = await upstream.json().catch(() => null);\n const requestId = j?.request_id;\n if (!upstream.ok || !requestId) {\n await refundVideoBucket(userId, consumedBucket);\n return json(\n { error: \"video_submit_failed\", detail: j },\n upstream.status || 502,\n );\n }\n // Remember owner + the fal-provided status/result URLs for the poll endpoint.\n try {\n await blob.setJSON(`vidreq:${requestId}`, {\n userId,\n stage: \"video\",\n audioPrompt,\n consumedBucket,\n statusUrl: j?.status_url ??\n `${FAL_WAN_I2V_QUEUE}/requests/${requestId}/status`,\n responseUrl: j?.response_url ??\n `${FAL_WAN_I2V_QUEUE}/requests/${requestId}`,\n ts: Date.now(),\n });\n } catch { /* best-effort */ }\n const weeklyAfter = consumedBucket === \"weekly\"\n ? vWeeklyRemaining - 1\n : vWeeklyRemaining;\n const purchasedAfter = consumedBucket === \"purchased\"\n ? vPurchased - 1\n : vPurchased;\n return json({\n requestId,\n status: \"IN_QUEUE\",\n videoRemaining: weeklyAfter,\n videoPurchased: purchasedAfter,\n videoTotalRemaining: weeklyAfter + purchasedAfter,\n resetsAt,\n });\n }\n\n // ---- Video status branch (D008V1 + D008P2 sound): two-stage poll. ----\n // Stage \"video\" = Wan i2v (silent). On completion we kick off the MMAudio audio pass\n // (stage \"audio\") under the SAME app-facing requestId, so the app polls one id and only\n // sees COMPLETED once the clip has sound. Graceful: any MMAudio failure delivers the\n // SILENT clip as COMPLETED (never block the user's video).\n if (body?.endpoint === \"video_status\") {\n const requestId = typeof body?.requestId === \"string\"\n ? body.requestId.slice(0, 200)\n : \"\";\n if (!requestId) return json({ error: \"missing_request_id\" }, 400);\n const falKey = Deno.env.get(\"FAL_KEY\");\n if (!falKey) return json({ error: \"video_unavailable\" }, 503);\n\n let meta: any = null;\n try {\n meta = await blob.getJSON(`vidreq:${requestId}`);\n } catch { /* unknown */ }\n const ownerId = meta?.userId ?? userId;\n const stage = meta?.stage ?? \"video\";\n const { resetsAt } = weekInfo();\n const remainingNow = async () =>\n Math.max(0, VIDEO_WEEKLY_ALLOWANCE - (await getVideoWeeklyUsed(ownerId)));\n const refundOnce = async () => {\n const g = `vidrefunded:${requestId}`;\n try {\n if (await blob.getJSON(g)) return;\n } catch { /* not refunded */ }\n await refundVideoBucket(ownerId, meta?.consumedBucket ?? \"weekly\");\n try {\n await blob.setJSON(g, { ts: Date.now() });\n } catch { /* best-effort */ }\n };\n const pollFal = async (url: string) => {\n try {\n const st = await fetch(url, {\n headers: { Authorization: `Key ${falKey}` },\n });\n return {\n ok: true,\n sj: (await st.json().catch(() => null)) as any,\n code: st.status,\n };\n } catch (e) {\n return { ok: false, sj: null as any, code: 0, detail: String(e) };\n }\n };\n const falVideoUrl = async (url: string): Promise => {\n try {\n const r = await fetch(url, {\n headers: { Authorization: `Key ${falKey}` },\n });\n const rj: any = await r.json().catch(() => null);\n return r.ok ? (rj?.video?.url ?? null) : null;\n } catch {\n return null;\n }\n };\n\n // ----- Stage AUDIO: MMAudio pass over the finished silent clip -----\n if (stage === \"audio\") {\n const silentUrl = meta?.silentUrl ?? null;\n const p = await pollFal(meta?.audioStatusUrl ?? \"\");\n const status = p.sj?.status;\n if (status === \"COMPLETED\") {\n const url = await falVideoUrl(meta?.audioResponseUrl ?? \"\");\n return json({\n status: \"COMPLETED\",\n video: { url: url ?? silentUrl },\n hasAudio: !!url,\n videoRemaining: await remainingNow(),\n resetsAt,\n });\n }\n if (status === \"IN_QUEUE\" || status === \"IN_PROGRESS\") {\n return json({\n status: \"IN_PROGRESS\",\n stage: \"audio\",\n queuePosition: p.sj?.queue_position ?? null,\n });\n }\n // MMAudio failed/unknown → deliver the silent clip (user still gets a video; no refund).\n return json({\n status: \"COMPLETED\",\n video: { url: silentUrl },\n hasAudio: false,\n videoRemaining: await remainingNow(),\n resetsAt,\n });\n }\n\n // ----- Stage VIDEO: Wan i2v -----\n const statusUrl = meta?.statusUrl ??\n `${FAL_WAN_I2V_QUEUE}/requests/${requestId}/status`;\n const responseUrl = meta?.responseUrl ??\n `${FAL_WAN_I2V_QUEUE}/requests/${requestId}`;\n const p = await pollFal(statusUrl);\n if (!p.ok) return json({ status: \"IN_PROGRESS\", detail: p.detail });\n const status = p.sj?.status;\n\n if (status === \"COMPLETED\") {\n const silentUrl = await falVideoUrl(responseUrl);\n if (!silentUrl) {\n await refundOnce();\n return json({\n status: \"FAILED\",\n error: \"no_video\",\n videoRemaining: await remainingNow(),\n resetsAt,\n }, 502);\n }\n if (ADD_AUDIO) {\n try {\n const sub = await fetch(FAL_MMAUDIO_QUEUE, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Key ${falKey}`,\n },\n body: JSON.stringify({\n video_url: silentUrl,\n prompt: meta?.audioPrompt || AUDIO_PROMPT_DEFAULT,\n duration: AUDIO_DURATION,\n }),\n });\n const asj: any = await sub.json().catch(() => null);\n const aid = asj?.request_id;\n if (sub.ok && aid) {\n await blob.setJSON(`vidreq:${requestId}`, {\n userId: ownerId,\n stage: \"audio\",\n silentUrl,\n audioStatusUrl: asj?.status_url ??\n `${FAL_MMAUDIO_QUEUE}/requests/${aid}/status`,\n audioResponseUrl: asj?.response_url ??\n `${FAL_MMAUDIO_QUEUE}/requests/${aid}`,\n ts: Date.now(),\n });\n return json({ status: \"IN_PROGRESS\", stage: \"audio\" });\n }\n } catch { /* fall through to deliver the silent clip */ }\n }\n // Audio disabled or submit failed → deliver the silent clip now.\n return json({\n status: \"COMPLETED\",\n video: { url: silentUrl },\n hasAudio: false,\n videoRemaining: await remainingNow(),\n resetsAt,\n });\n }\n if (status === \"IN_QUEUE\" || status === \"IN_PROGRESS\") {\n return json({\n status: \"IN_PROGRESS\",\n queuePosition: p.sj?.queue_position ?? null,\n });\n }\n await refundOnce();\n return json({\n status: \"FAILED\",\n error: \"video_failed\",\n detail: p.sj,\n videoRemaining: await remainingNow(),\n resetsAt,\n }, p.code || 502);\n }\n\n // ---- Image generation branch ----\n if (body?.endpoint === \"image\") {\n const prompt = typeof body?.prompt === \"string\" ? body.prompt.trim() : \"\";\n if (!prompt) return json({ error: \"bad_prompt\" }, 400);\n if (prompt.length > IMAGE_PROMPT_MAX) {\n return json({ error: \"prompt_too_long\" }, 400);\n }\n\n const { resetsAt } = weekInfo();\n const used = await getWeeklyUsed(userId);\n const purchased = await getPurchasedCredits(userId);\n const weeklyRemaining = Math.max(0, IMAGE_WEEKLY_ALLOWANCE - used);\n if (weeklyRemaining <= 0 && purchased <= 0) {\n return json({\n error: \"allowance_exhausted\",\n remaining: 0,\n purchased: 0,\n totalRemaining: 0,\n resetsAt,\n }, 429);\n }\n // Global emergency cost brake.\n if (\n !(await underDailyCap(`${todayKey()}:__global__`, IMAGE_DAILY_CAP_GLOBAL))\n ) {\n return json({ error: \"cap_reached\", scope: \"global\" }, 429);\n }\n // On success, consume one credit: weekly allowance first, then a purchased credit.\n const consumeOne = async (): Promise<\n { remaining: number; purchased: number }\n > => {\n if (weeklyRemaining > 0) {\n await bumpWeeklyUsed(userId);\n return { remaining: weeklyRemaining - 1, purchased };\n }\n await setPurchasedCredits(userId, purchased - 1);\n return { remaining: 0, purchased: purchased - 1 };\n };\n\n const falKey = Deno.env.get(\"FAL_KEY\");\n\n if (falKey) {\n // PRIMARY: fal.ai Ideogram v3 TURBO (legible text).\n const upstream = await fetch(FAL_IDEOGRAM_URL, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Key ${falKey}`,\n },\n body: JSON.stringify({\n prompt,\n rendering_speed: FAL_RENDERING_SPEED,\n image_size: falImageSize(body?.size),\n num_images: 1,\n }),\n });\n const j: any = await upstream.json().catch(() => null);\n const url = j?.images?.[0]?.url;\n if (upstream.ok && url) {\n const t = await consumeOne();\n return json({\n data: [{ url }],\n remaining: t.remaining,\n purchased: t.purchased,\n totalRemaining: t.remaining + t.purchased,\n resetsAt,\n });\n }\n return json(\n { error: \"image_failed\", provider: \"fal\", detail: j },\n upstream.status || 502,\n );\n }\n\n // FALLBACK: OpenAI gpt-image-1 (until FAL_KEY is set).\n const size = (typeof body?.size === \"string\" && /^\\d+x\\d+$/.test(body.size))\n ? body.size\n : \"1024x1024\";\n const upstream = await fetch(\n \"https://api.openai.com/v1/images/generations\",\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${Deno.env.get(\"OPENAI_API_KEY\")}`,\n },\n body: JSON.stringify({\n model: OPENAI_IMAGE_MODEL,\n prompt,\n n: 1,\n size,\n quality: OPENAI_IMAGE_QUALITY,\n }),\n },\n );\n const t = await upstream.text();\n let obj: any = null;\n try {\n obj = JSON.parse(t);\n } catch { /* leave null */ }\n const first = obj?.data?.[0];\n if (upstream.ok && (first?.b64_json || first?.url)) {\n const t = await consumeOne();\n return json({\n data: obj.data,\n remaining: t.remaining,\n purchased: t.purchased,\n totalRemaining: t.remaining + t.purchased,\n resetsAt,\n });\n }\n return new Response(t || JSON.stringify({ error: \"image_failed\" }), {\n status: upstream.status || 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Chat completions branch (unchanged) ----\n if (\n !Array.isArray(body?.messages) || body.messages.length === 0 ||\n body.messages.length > 8\n ) {\n return json({ error: \"bad_messages\" }, 400);\n }\n const totalChars = body.messages.reduce(\n (s: number, m: any) =>\n s + (typeof m?.content === \"string\" ? m.content.length : 0),\n 0,\n );\n if (totalChars > 6000) return json({ error: \"input_too_long\" }, 400);\n\n const model = ALLOWED_MODELS.has(body?.model) ? body.model : \"gpt-3.5-turbo\";\n const maxTokens = Math.min(\n Math.max(Number(body?.max_tokens) || 220, 1),\n MAX_TOKENS_CAP,\n );\n const temperature = Math.min(\n Math.max(Number(body?.temperature) || 0.7, 0),\n 1.2,\n );\n\n const upstream = await fetch(\"https://api.openai.com/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${Deno.env.get(\"OPENAI_API_KEY\")}`,\n },\n body: JSON.stringify({\n model,\n messages: body.messages,\n max_tokens: maxTokens,\n temperature,\n }),\n });\n\n return new Response(await upstream.text(), {\n status: upstream.status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}","createdAt",["D",1782091238989],"branchVersion","branchId","581bca56-3fe2-43cb-9ed8-064ea4413c8f","id","b4e46750-40df-46b5-9f97-230b8b67645f","insaver-openai-proxy",["D",1780863766400],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","ef639710-6be3-4f7a-aea0-8f3185f8ce48","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e9e9a-8327-7119-82bb-89fc2b7333a8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",16,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","iosvaultdev","handle","displayName","iosvault-dev","avatar","https://avatars.githubusercontent.com/u/287475057?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":151,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":152,"_79":153,"_81":154,"_83":25},"tree",[146],"files",[146],"counts",{"_134":61,"_135":136,"_137":61,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"03dacb0a-2e29-4647-9f5e-7a64ab02269f","parentId","latest",["D",1782091238989],14,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":144,"_145":61},"connections",{"_142":61,"_143":61},"count","unfilledCount",3,"emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":147,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_148":149,"_27":150},["D",1782091238989],"children",[],[28],["D",1780863766400],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_123":188,"_189":190,"_191":192,"_193":25,"_194":25,"_195":25,"_196":121,"_197":-5,"_198":-7,"_199":-7,"_200":61,"_201":25,"_202":25,"_203":-5,"_204":25,"_205":25,"_206":25,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":85,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v15