[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_93":92,"_32":45,"_102":83,"_27":103,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":120,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":77,"_78":79,"_80":81,"_82":25},"version",8,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","edde57c8-50a7-11f1-a082-ee650bb23af1","name","fileType","http","content","// Val.town HTTP Val — Unified backend for SyncFlow AI\n// Env Vars: KLING_ACCESS_KEY, KLING_SECRET_KEY, ELEVENLABS_API_KEY\n// Actions: kling (submit), kling_status (poll), tts (ElevenLabs)\n\nimport { SignJWT } from \"npm:jose@5.9.6\";\n\nconst KLING_BASE = \"https://api-singapore.klingai.com\";\nconst VOICE_MAP: Record = {\n energetic: \"EXAVITQu4vr4xnSDxMaL\",\n calm: \"XB0fDUnXU5powFXDhCwa\",\n dramatic: \"onwK4e9ZLuTAKqWW03F9\",\n friendly: \"jsCqWAovK2LkecY7zXl4\",\n};\nconst cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\nconst json = (b: unknown, s = 200) =>\n new Response(JSON.stringify(b), {\n status: s,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n });\n\nasync function buildKlingJWT(): Promise {\n const a = Deno.env.get(\"KLING_ACCESS_KEY\");\n const s = Deno.env.get(\"KLING_SECRET_KEY\");\n if (!a || !s) throw new Error(\"Missing Kling keys\");\n const now = Math.floor(Date.now() / 1000);\n return await new SignJWT({})\n .setProtectedHeader({ alg: \"HS256\", typ: \"JWT\" })\n .setIssuer(a).setExpirationTime(now + 1800).setNotBefore(now - 5)\n .sign(new TextEncoder().encode(s));\n}\n\nasync function handleKlingSubmit(body: any) {\n const { prompt, duration = \"5\", aspect_ratio = \"9:16\" } = body;\n if (!prompt) return json({ error: \"prompt required\" }, 400);\n const token = await buildKlingJWT();\n const r = await fetch(`${KLING_BASE}/v1/videos/text2video`, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n model_name: \"kling-v2-6\",\n prompt,\n duration,\n aspect_ratio,\n }),\n });\n const data = await r.json();\n if (!r.ok) {\n return json(\n { error: \"Kling submit failed\", status: r.status, raw: data },\n 502,\n );\n }\n const task_id = data?.data?.task_id;\n if (!task_id) return json({ error: \"no task_id\", raw: data }, 502);\n return json({ task_id, status: \"submitted\" });\n}\n\nasync function handleKlingStatus(body: any) {\n const { task_id } = body;\n if (!task_id) return json({ error: \"task_id required\" }, 400);\n const token = await buildKlingJWT();\n const r = await fetch(`${KLING_BASE}/v1/videos/text2video/${task_id}`, {\n headers: { Authorization: `Bearer ${token}` },\n });\n const data = await r.json();\n if (!r.ok) {\n return json(\n { error: \"Kling status failed\", status: r.status, raw: data },\n 502,\n );\n }\n const status = data?.data?.task_status; // submitted | processing | succeed | failed\n const video_url = data?.data?.task_result?.videos?.[0]?.url;\n return json({ task_id, status, video_url, raw: data?.data });\n}\n\nfunction arrayBufferToBase64(buf: ArrayBuffer): string {\n const bytes = new Uint8Array(buf);\n let binary = \"\";\n for (let i = 0; i < bytes.byteLength; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n return btoa(binary);\n}\n\nasync function handleTTS(body: any) {\n const {\n text,\n voice_style = \"energetic\",\n model_id = \"eleven_multilingual_v2\",\n } = body;\n if (!text) return json({ error: \"text required\" }, 400);\n const key = Deno.env.get(\"ELEVENLABS_API_KEY\");\n if (!key) return json({ error: \"ELEVENLABS_API_KEY not set\" }, 500);\n const voice = VOICE_MAP[String(voice_style).toLowerCase()] ||\n VOICE_MAP.energetic;\n const r = await fetch(\n `https://api.elevenlabs.io/v1/text-to-speech/${voice}`,\n {\n method: \"POST\",\n headers: {\n \"xi-api-key\": key,\n \"Content-Type\": \"application/json\",\n \"Accept\": \"audio/mpeg\",\n },\n body: JSON.stringify({\n text,\n model_id,\n voice_settings: {\n stability: 0.5,\n similarity_boost: 0.75,\n style: 0.5,\n use_speaker_boost: true,\n },\n }),\n },\n );\n if (!r.ok) {\n let errBody: any;\n try {\n errBody = await r.json();\n } catch {\n errBody = await r.text();\n }\n return json(\n { error: \"ElevenLabs failed\", status: r.status, body: errBody },\n 502,\n );\n }\n const buf = await r.arrayBuffer();\n return json({\n audio_base64: arrayBufferToBase64(buf),\n mime: \"audio/mpeg\",\n bytes: buf.byteLength,\n voice_id: voice,\n });\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: cors });\n if (req.method !== \"POST\") return json({ error: \"POST required\" }, 405);\n try {\n const body = await req.json();\n const action = (body?.action || \"kling\").toLowerCase();\n if (action === \"kling\") return await handleKlingSubmit(body);\n if (action === \"kling_status\") return await handleKlingStatus(body);\n if (action === \"tts\") return await handleTTS(body);\n return json({ error: \"unknown action\" }, 400);\n } catch (err) {\n return json({ error: String(err) }, 500);\n }\n}","// SyncFlow AI — Val.town backend v2\n// REPLACES 05-val-town-main.ts. Adds:\n// - FIXED ElevenLabs TTS (was hitting V8 stack overflow on base64 encoding)\n// - TikTok OAuth flow\n// - TikTok Content Posting API publish\n//\n// REQUIRED ENV VARS in Val.town:\n// KLING_ACCESS_KEY\n// KLING_SECRET_KEY\n// ELEVENLABS_API_KEY\n// STRIPE_SECRET_KEY\n// STRIPE_WEBHOOK_SECRET\n// STRIPE_PRICE_MONTHLY\n// STRIPE_PRICE_ANNUAL\n// TIKTOK_CLIENT_KEY (from TikTok developer portal)\n// TIKTOK_CLIENT_SECRET (from TikTok developer portal)\n// TIKTOK_REDIRECT_URI https://.web.val.run/?action=tiktok_callback\n// BASE44_APP_URL https://snap-knowing-sync-flow.base44.app\n// VAL_URL https://jamesdowdican--edde57c850a711f1a082ee650bb23af1.web.val.run\n\nimport { SignJWT } from \"https://esm.sh/jose@5\";\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Stripe-Signature\",\n};\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: CORS });\n\n const url = new URL(req.url);\n\n // ---- GET requests: TikTok OAuth callback comes in as GET with ?code=... ----\n if (req.method === \"GET\") {\n const action = url.searchParams.get(\"action\");\n if (action === \"tiktok_callback\") {\n return tiktokCallback(url);\n }\n if (action === \"audio\") {\n const key = url.searchParams.get(\"key\");\n if (!key) return new Response(\"Missing key\", { status: 400 });\n return serveAudioBlob(key);\n }\n if (action === \"health\") {\n return json({ ok: true, ts: Date.now(), version: \"v2\" });\n }\n return json(\n { error: \"GET only supports tiktok_callback, audio, health\" },\n 405,\n );\n }\n\n // ---- Stripe webhook ----\n if (req.headers.get(\"stripe-signature\")) {\n return handleStripeWebhook(req);\n }\n\n // ---- POST JSON body ----\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON\" }, 400);\n }\n\n try {\n switch (body.action) {\n case \"kling\":\n return json(await klingSubmit(body));\n case \"kling_status\":\n return json(await klingStatus(body));\n case \"tts\":\n return json(await elevenLabsTTS(body));\n case \"tts_voices\":\n return json(await elevenLabsVoices());\n case \"stripe_checkout\":\n return json(await stripeCheckout(body));\n case \"stripe_portal\":\n return json(await stripePortal(body));\n case \"tiktok_auth_url\":\n return json(await tiktokAuthURL(body));\n case \"tiktok_publish\":\n return json(await tiktokPublish(body));\n case \"tiktok_status\":\n return json(await tiktokPublishStatus(body));\n case \"health\":\n return json({ ok: true, ts: Date.now(), version: \"v2\" });\n default:\n return json({ error: `Unknown action: ${body.action}` }, 400);\n }\n } catch (err) {\n console.error(\"Action failed:\", err);\n return json({ error: String(err) }, 500);\n }\n}\n\n// ============================================================\n// Kling\n// ============================================================\n\nasync function klingJWT(): Promise {\n const access = Deno.env.get(\"KLING_ACCESS_KEY\")!;\n const secret = Deno.env.get(\"KLING_SECRET_KEY\")!;\n const key = new TextEncoder().encode(secret);\n return await new SignJWT({ iss: access })\n .setProtectedHeader({ alg: \"HS256\", typ: \"JWT\" })\n .setIssuedAt()\n .setExpirationTime(Math.floor(Date.now() / 1000) + 1800)\n .setNotBefore(Math.floor(Date.now() / 1000) - 5)\n .sign(key);\n}\n\nasync function klingSubmit(\n { prompt, image_url, duration = 5, mode = \"std\" }: any,\n) {\n const token = await klingJWT();\n const endpoint = image_url\n ? \"https://api-singapore.klingai.com/v1/videos/image2video\"\n : \"https://api-singapore.klingai.com/v1/videos/text2video\";\n const payload: any = {\n model_name: \"kling-v1\",\n prompt,\n duration: String(duration),\n mode,\n };\n if (image_url) payload.image = image_url;\n const res = await fetch(endpoint, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${token}`,\n },\n body: JSON.stringify(payload),\n });\n return await res.json();\n}\n\nasync function klingStatus({ task_id }: any) {\n const token = await klingJWT();\n const res = await fetch(\n `https://api-singapore.klingai.com/v1/videos/text2video/${task_id}`,\n {\n headers: { Authorization: `Bearer ${token}` },\n },\n );\n return await res.json();\n}\n\n// ============================================================\n// ElevenLabs — FIXED (v1 hit stack overflow on base64 encoding)\n// ============================================================\n\nasync function elevenLabsTTS(\n { text, voice_id = \"21m00Tcm4TlvDq8ikWAM\", project_id }: any,\n) {\n const key = Deno.env.get(\"ELEVENLABS_API_KEY\");\n if (!key) {\n return { error: \"ELEVENLABS_API_KEY not configured in Val.town env\" };\n }\n if (!text || typeof text !== \"string\") return { error: \"text required\" };\n if (text.length > 5000) return { error: \"text too long (max 5000 chars)\" };\n\n console.log(`[tts] generating ${text.length} chars with voice ${voice_id}`);\n\n const res = await fetch(\n `https://api.elevenlabs.io/v1/text-to-speech/${voice_id}/stream`,\n {\n method: \"POST\",\n headers: {\n \"xi-api-key\": key,\n \"Content-Type\": \"application/json\",\n Accept: \"audio/mpeg\",\n },\n body: JSON.stringify({\n text,\n model_id: \"eleven_multilingual_v2\",\n output_format: \"mp3_44100_128\",\n voice_settings: {\n stability: 0.45,\n similarity_boost: 0.85,\n style: 0.30,\n use_speaker_boost: true,\n },\n }),\n },\n );\n\n if (!res.ok) {\n const errText = await res.text().catch(() => \"no body\");\n console.error(`[tts] ElevenLabs ${res.status}: ${errText.slice(0, 500)}`);\n return { error: `ElevenLabs ${res.status}: ${errText.slice(0, 500)}` };\n }\n\n const ab = await res.arrayBuffer();\n const bytes = new Uint8Array(ab);\n console.log(`[tts] got ${bytes.length} bytes from ElevenLabs`);\n\n const blobKey = `tts/${project_id || crypto.randomUUID()}.mp3`;\n await blob.set(blobKey, bytes);\n console.log(`[tts] stored as blob ${blobKey}`);\n\n const valUrl = Deno.env.get(\"VAL_URL\") || \"\";\n const audioUrl = `${valUrl}?action=audio&key=${encodeURIComponent(blobKey)}`;\n\n return {\n audio_url: audioUrl,\n blob_key: blobKey,\n duration_estimate_sec: Math.ceil(text.length / 16),\n bytes: bytes.length,\n };\n}\n\nasync function serveAudioBlob(key: string): Promise {\n try {\n const bytes = await blob.get(key);\n if (!bytes) return new Response(\"Not found\", { status: 404 });\n const buffer = await bytes.arrayBuffer();\n return new Response(buffer, {\n status: 200,\n headers: {\n \"Content-Type\": \"audio/mpeg\",\n \"Cache-Control\": \"public, max-age=31536000\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n } catch (e) {\n console.error(\"Blob fetch failed:\", e);\n return new Response(\"Error\", { status: 500 });\n }\n}\n\nasync function elevenLabsVoices() {\n const key = Deno.env.get(\"ELEVENLABS_API_KEY\");\n if (!key) return { voices: HARDCODED_VOICES };\n try {\n const res = await fetch(\"https://api.elevenlabs.io/v1/voices\", {\n headers: { \"xi-api-key\": key },\n });\n if (!res.ok) return { voices: HARDCODED_VOICES };\n const data = await res.json();\n return {\n voices: (data.voices || []).slice(0, 12).map((v: any) => ({\n id: v.voice_id,\n name: v.name,\n labels: v.labels || {},\n preview: v.preview_url,\n })),\n };\n } catch (e) {\n return { voices: HARDCODED_VOICES };\n }\n}\n\nconst HARDCODED_VOICES = [\n {\n id: \"21m00Tcm4TlvDq8ikWAM\",\n name: \"Rachel\",\n labels: { gender: \"female\", accent: \"american\" },\n },\n {\n id: \"AZnzlk1XvdvUeBnXmlld\",\n name: \"Domi\",\n labels: { gender: \"female\", accent: \"american\" },\n },\n {\n id: \"EXAVITQu4vr4xnSDxMaL\",\n name: \"Bella\",\n labels: { gender: \"female\", accent: \"american\" },\n },\n {\n id: \"ErXwobaYiN019PkySvjV\",\n name: \"Antoni\",\n labels: { gender: \"male\", accent: \"american\" },\n },\n {\n id: \"MF3mGyEYCl7XYWbV9V6O\",\n name: \"Elli\",\n labels: { gender: \"female\", accent: \"american\" },\n },\n {\n id: \"TxGEqnHWrfWFTfGW9XjX\",\n name: \"Josh\",\n labels: { gender: \"male\", accent: \"american\" },\n },\n {\n id: \"VR6AewLTigWG4xSOukaG\",\n name: \"Arnold\",\n labels: { gender: \"male\", accent: \"american\" },\n },\n {\n id: \"pNInz6obpgDQGcFmaJgB\",\n name: \"Adam\",\n labels: {\n gender: \"male\",\n accent: \"american\",\n best_for: \"conspiracy/mystery\",\n },\n },\n {\n id: \"yoZ06aMxZJJ28mfd3POQ\",\n name: \"Sam\",\n labels: { gender: \"male\", accent: \"american\" },\n },\n {\n id: \"ThT5KcBeYPX3keUQqHPh\",\n name: \"Dorothy\",\n labels: { gender: \"female\", accent: \"british\" },\n },\n];\n\n// ============================================================\n// TikTok OAuth\n// ============================================================\n\nasync function tiktokAuthURL({ user_id, return_to }: any) {\n const clientKey = Deno.env.get(\"TIKTOK_CLIENT_KEY\")!;\n const redirectUri = Deno.env.get(\"TIKTOK_REDIRECT_URI\")!;\n const state = btoa(JSON.stringify({\n user_id: user_id || \"\",\n return_to: return_to || \"/Account\",\n nonce: crypto.randomUUID(),\n ts: Date.now(),\n }));\n const params = new URLSearchParams({\n client_key: clientKey,\n response_type: \"code\",\n scope: \"user.info.basic,video.upload,video.publish\",\n redirect_uri: redirectUri,\n state,\n });\n return { auth_url: `https://www.tiktok.com/v2/auth/authorize/?${params}` };\n}\n\nasync function tiktokCallback(url: URL): Promise {\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\");\n const error = url.searchParams.get(\"error\");\n const appUrl = Deno.env.get(\"BASE44_APP_URL\") ||\n \"https://snap-knowing-sync-flow.base44.app\";\n\n if (error) {\n return Response.redirect(\n `${appUrl}/Account?tiktok_error=${encodeURIComponent(error)}`,\n 302,\n );\n }\n if (!code || !state) {\n return Response.redirect(\n `${appUrl}/Account?tiktok_error=missing_code`,\n 302,\n );\n }\n\n let decodedState: any;\n try {\n decodedState = JSON.parse(atob(state));\n } catch {\n return Response.redirect(`${appUrl}/Account?tiktok_error=bad_state`, 302);\n }\n\n const tokenRes = await fetch(\"https://open.tiktokapis.com/v2/oauth/token/\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n client_key: Deno.env.get(\"TIKTOK_CLIENT_KEY\")!,\n client_secret: Deno.env.get(\"TIKTOK_CLIENT_SECRET\")!,\n code,\n grant_type: \"authorization_code\",\n redirect_uri: Deno.env.get(\"TIKTOK_REDIRECT_URI\")!,\n }).toString(),\n });\n\n const tokens = await tokenRes.json();\n if (!tokens.access_token) {\n console.error(\"[tiktok] token exchange failed:\", tokens);\n return Response.redirect(\n `${appUrl}/Account?tiktok_error=token_exchange_failed`,\n 302,\n );\n }\n\n const payload = encodeURIComponent(JSON.stringify({\n access_token: tokens.access_token,\n refresh_token: tokens.refresh_token,\n expires_in: tokens.expires_in,\n open_id: tokens.open_id,\n scope: tokens.scope,\n user_id: decodedState.user_id,\n }));\n\n return Response.redirect(\n `${appUrl}${\n decodedState.return_to || \"/Account\"\n }#tiktok_connected=${payload}`,\n 302,\n );\n}\n\n// ============================================================\n// TikTok Content Posting\n// ============================================================\n\nasync function tiktokPublish({\n access_token,\n video_url,\n caption,\n is_ai_generated = true,\n privacy = \"SELF_ONLY\",\n disable_duet = false,\n disable_comment = false,\n disable_stitch = false,\n}: any) {\n if (!access_token) return { error: \"access_token required\" };\n if (!video_url) return { error: \"video_url required\" };\n\n console.log(`[tiktok] publishing ${video_url}`);\n\n const res = await fetch(\n \"https://open.tiktokapis.com/v2/post/publish/video/init/\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${access_token}`,\n \"Content-Type\": \"application/json; charset=UTF-8\",\n },\n body: JSON.stringify({\n post_info: {\n title: caption || \"\",\n privacy_level: privacy,\n disable_duet,\n disable_comment,\n disable_stitch,\n brand_content_toggle: false,\n brand_organic_toggle: false,\n ai_generated: is_ai_generated,\n },\n source_info: { source: \"PULL_FROM_URL\", video_url },\n }),\n },\n );\n\n const data = await res.json();\n if (!res.ok || data.error?.code !== \"ok\") {\n console.error(\"[tiktok] publish init failed:\", data);\n return { error: data.error?.message || `TikTok ${res.status}`, raw: data };\n }\n return { publish_id: data.data?.publish_id };\n}\n\nasync function tiktokPublishStatus({ access_token, publish_id }: any) {\n if (!access_token || !publish_id) {\n return { error: \"access_token and publish_id required\" };\n }\n const res = await fetch(\n \"https://open.tiktokapis.com/v2/post/publish/status/fetch/\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${access_token}`,\n \"Content-Type\": \"application/json; charset=UTF-8\",\n },\n body: JSON.stringify({ publish_id }),\n },\n );\n const data = await res.json();\n if (!res.ok) return { error: `TikTok ${res.status}`, raw: data };\n return {\n status: data.data?.status,\n publicaly_available_post_id: data.data?.publicaly_available_post_id,\n fail_reason: data.data?.fail_reason,\n };\n}\n\n// ============================================================\n// Stripe\n// ============================================================\n\nconst STRIPE_BASE = \"https://api.stripe.com/v1\";\n\nasync function stripeForm(path: string, body: Record) {\n const key = Deno.env.get(\"STRIPE_SECRET_KEY\")!;\n const res = await fetch(`${STRIPE_BASE}${path}`, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${key}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams(body).toString(),\n });\n const data = await res.json();\n if (!res.ok) throw new Error(`Stripe ${res.status}: ${JSON.stringify(data)}`);\n return data;\n}\n\nasync function stripeGet(path: string, params?: Record) {\n const key = Deno.env.get(\"STRIPE_SECRET_KEY\")!;\n const qs = params ? \"?\" + new URLSearchParams(params).toString() : \"\";\n const res = await fetch(`${STRIPE_BASE}${path}${qs}`, {\n headers: { Authorization: `Bearer ${key}` },\n });\n const data = await res.json();\n if (!res.ok) throw new Error(`Stripe ${res.status}: ${JSON.stringify(data)}`);\n return data;\n}\n\nasync function stripeCheckout({ user_id, email, plan, return_url }: any) {\n const priceId = plan === \"pro_annual\"\n ? Deno.env.get(\"STRIPE_PRICE_ANNUAL\")!\n : Deno.env.get(\"STRIPE_PRICE_MONTHLY\")!;\n const appUrl = Deno.env.get(\"BASE44_APP_URL\") || return_url ||\n \"https://snap-knowing-sync-flow.base44.app\";\n\n const existing = await stripeGet(\"/customers\", { email, limit: \"1\" });\n let customerId = existing.data?.[0]?.id;\n if (!customerId) {\n const created = await stripeForm(\"/customers\", {\n email,\n \"metadata[user_id]\": user_id || \"\",\n \"metadata[source]\": \"syncflow_ai\",\n });\n customerId = created.id;\n }\n\n const session = await stripeForm(\"/checkout/sessions\", {\n mode: \"subscription\",\n customer: customerId,\n \"line_items[0][price]\": priceId,\n \"line_items[0][quantity]\": \"1\",\n success_url:\n `${appUrl}/Account?trial_started=1&session_id={CHECKOUT_SESSION_ID}`,\n cancel_url: `${appUrl}/Pricing?cancelled=1`,\n allow_promotion_codes: \"true\",\n \"metadata[user_id]\": user_id || \"\",\n \"subscription_data[metadata][user_id]\": user_id || \"\",\n \"subscription_data[trial_period_days]\": \"14\",\n \"payment_method_collection\": \"always\",\n });\n return { checkout_url: session.url, session_id: session.id };\n}\n\nasync function stripePortal({ email, return_url }: any) {\n const existing = await stripeGet(\"/customers\", { email, limit: \"1\" });\n const customer = existing.data?.[0];\n if (!customer) return { error: \"No Stripe customer for this email\" };\n const portal = await stripeForm(\"/billing_portal/sessions\", {\n customer: customer.id,\n return_url: return_url ||\n \"https://snap-knowing-sync-flow.base44.app/Account\",\n });\n return { portal_url: portal.url };\n}\n\nasync function handleStripeWebhook(req: Request): Promise {\n const sig = req.headers.get(\"stripe-signature\");\n const secret = Deno.env.get(\"STRIPE_WEBHOOK_SECRET\");\n if (!sig || !secret) {\n return new Response(\"Missing signature/secret\", { status: 400 });\n }\n\n const rawBody = await req.text();\n const verified = await verifyStripeSignature(rawBody, sig, secret);\n if (!verified) return new Response(\"Bad signature\", { status: 400 });\n\n const event = JSON.parse(rawBody);\n console.log(\"Stripe webhook:\", event.type, event.id);\n\n switch (event.type) {\n case \"checkout.session.completed\":\n case \"customer.subscription.created\":\n case \"customer.subscription.updated\":\n case \"customer.subscription.trial_will_end\": {\n const sub = event.data.object;\n const userId = sub.metadata?.user_id;\n const status = sub.status || \"trialing\";\n const isPro = status === \"active\" || status === \"trialing\";\n console.log(\n `[webhook] user=${userId} status=${status} tier=${\n isPro ? \"pro\" : \"free\"\n }`,\n );\n break;\n }\n case \"customer.subscription.deleted\": {\n const sub = event.data.object;\n console.log(`[webhook] cancellation user=${sub.metadata?.user_id}`);\n break;\n }\n }\n return new Response(\"ok\", { status: 200 });\n}\n\nasync function verifyStripeSignature(\n body: string,\n header: string,\n secret: string,\n): Promise {\n const parts = Object.fromEntries(header.split(\",\").map((p) => p.split(\"=\")));\n const t = parts.t, v1 = parts.v1;\n if (!t || !v1) return false;\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const expected = await crypto.subtle.sign(\n \"HMAC\",\n key,\n enc.encode(`${t}.${body}`),\n );\n const expectedHex = Array.from(new Uint8Array(expected)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n if (expectedHex.length !== v1.length) return false;\n let r = 0;\n for (let i = 0; i < expectedHex.length; i++) {\n r |= expectedHex.charCodeAt(i) ^ v1.charCodeAt(i);\n }\n return r === 0;\n}\n\n// ============================================================\n// Helpers\n// ============================================================\n\nfunction json(data: any, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...CORS },\n });\n}","createdAt",["D",1778889604806],"branchVersion","branchId","eddc70a2-50a7-11f1-a082-ee650bb23af1","id","eddbd32c-50a7-11f1-a082-ee650bb23af1","untitled-3581",["D",1778881760555],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","c811023e-0582-4811-8d6e-056a272ec06f","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e2d9c-962f-76de-8730-dd87a9a499ba","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_93":92,"_101":97},"org",{"_93":92,"_94":95,"_96":97,"_18":54,"_98":99,"_100":25},"branch",{"_13":14,"_32":83,"_43":42,"_84":44,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":45,"_91":92},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","jamesdowdican","handle","displayName","James Dowdican","avatar","https://lh3.googleusercontent.com/a/ACg8ocJ1dQyHQhxi3KdXFoPiLmqltSEhikK9KunpfuZYkFdMiivoAg=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":150,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":151,"_78":152,"_80":153,"_82":25},"tree",[145],"files",[145],"counts",{"_133":60,"_134":135,"_136":60,"_137":138,"_139":140},"contents",[125],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":120,"_38":129,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_27":132},"316767fc-50ba-11f1-bc46-ee650bb23af1","parentId","latest",["D",1778889604806],7,"label",[28],"pulls","branches",1,"forks","envVars",{"_141":143,"_144":60},"connections",{"_141":60,"_142":60},"count","unfilledCount",4,"emptyCount",{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":120,"_38":146,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_147":148,"_27":149},["D",1778889604806],"children",[],[28],["D",1778881760555],{"_93":92,"_101":97},{"_93":92,"_94":95,"_96":97,"_18":54,"_98":99,"_100":25},{"_13":14,"_32":83,"_43":42,"_84":44,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":45,"_91":92},"ctx",{"_76":-5,"_122":187,"_188":189,"_190":191,"_192":25,"_193":25,"_194":25,"_195":120,"_196":-5,"_197":-7,"_198":-7,"_199":60,"_200":25,"_201":25,"_202":-5,"_203":25,"_204":25,"_205":25,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":83,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v8