New one-time code generated

${code}

Grants ${credits} credits. Works exactly once. Give this to the customer — don't reuse it yourself.

\n `,\n { status: 200, headers: { ...corsHeaders, \"Content-Type\": \"text/html\" } }\n );\n }\n \n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"Use POST.\" }), {\n status: 405, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n \n // ── Request-secret gate — applies to EVERY POST action below ─────────\n // If RESUMEFIT_REQUEST_KEY isn't set as an env var yet, this check is\n // skipped (so nothing breaks mid-rollout) — but it should be set before\n // any public launch.\n if (REQUEST_KEY) {\n const provided = req.headers.get(\"x-resumefit-key\") || \"\";\n if (provided !== REQUEST_KEY) {\n return new Response(JSON.stringify({ error: \"Unauthorized.\" }), {\n status: 401, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n }\n \n const apiKey = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!apiKey) {\n return new Response(JSON.stringify({ error: \"ANTHROPIC_API_KEY is not set\" }), {\n status: 500, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n \n try {\n const body = await req.json();\n \n // ── Redeem a one-time support code ──────────────────────────────────\n if (body.action === \"redeem_code\") {\n const code = String(body.code || \"\").trim().toUpperCase();\n if (!code) {\n return new Response(JSON.stringify({ success: false, error: \"Please enter a code.\" }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n const rows = await sqlite.execute(\"SELECT credits, used FROM redemption_codes WHERE code = ?\", [code]);\n if (rows.rows.length === 0) {\n return new Response(JSON.stringify({ success: false, error: \"Invalid code. Please check and try again.\" }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n const row: any = rows.rows[0];\n if (Number(row.used)) {\n return new Response(JSON.stringify({ success: false, error: \"This code has already been used.\" }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n await sqlite.execute(\n \"UPDATE redemption_codes SET used = 1, used_at = ? WHERE code = ?\",\n [new Date().toISOString(), code]\n );\n return new Response(JSON.stringify({ success: true, credits: Number(row.credits) }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n \n // ── Free-credit gate — one per network address ───────────────────────\n if (body.action === \"claim_free_credit\") {\n const ip = getClientIp(req);\n const existing = await sqlite.execute(\"SELECT ip FROM free_credit_claims WHERE ip = ?\", [ip]);\n if (existing.rows.length > 0) {\n return new Response(JSON.stringify({ granted: false }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n await sqlite.execute(\n \"INSERT INTO free_credit_claims (ip, claimed_at) VALUES (?, ?)\",\n [ip, new Date().toISOString()]\n );\n return new Response(JSON.stringify({ granted: true }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n \n // ── Page-fetch passthrough (unchanged) ────────────────────────────────\n if (body.fetch_url) {\n const pageRes = await fetch(body.fetch_url, {\n headers: { \"User-Agent\": \"Mozilla/5.0 (compatible; ResumeAI/1.0)\" }\n });\n const html = await pageRes.text();\n const text = html\n .replace(/]*>[\\s\\S]*?<\\/script>/gi, '')\n .replace(/]*>[\\s\\S]*?<\\/style>/gi, '')\n .replace(/<[^>]+>/g, ' ')\n .replace(/\\s+/g, ' ')\n .trim()\n .slice(0, 8000);\n return new Response(JSON.stringify({ text }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n \n // ── Normal Anthropic API passthrough (unchanged) ──────────────────────\n const response = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": apiKey,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify(body),\n });\n const data = await response.json();\n return new Response(JSON.stringify(data), {\n status: response.status,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: String(err) }), {\n status: 500, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n}","label",[73],"pulls","branches","forks","envVars",{"_276":89,"_278":20},"connections",{"_276":20,"_277":20},"count","unfilledCount","emptyCount",{"_42":261,"_13":73,"_71":72,"_52":-5,"_44":45,"_262":177,"_263":189,"_46":280,"_48":161,"_74":94,"_265":266,"_76":24,"_267":-5,"_281":282,"_239":283},["D",1784649488589],"children",[],[73],["D",1781118109437],["D",1789515657103],{"_11":12,"_238":79},{"_11":12,"_234":79,"_78":79,"_25":77,"_235":236,"_237":24},{"_48":184,"_13":16,"_42":45,"_226":190,"_227":-5,"_228":-5,"_229":-5,"_230":-5,"_231":-5,"_232":14,"_233":12},"ctx",{"_60":-5,"_257":322,"_323":324,"_325":326,"_327":24,"_328":24,"_329":24,"_330":189,"_331":-5,"_332":-7,"_333":-7,"_334":20,"_335":24,"_336":24,"_337":-5,"_338":24,"_339":24,"_340":24,"_341":-5},"ENV",{"_293":294,"_295":296,"_297":16,"_298":299,"_300":301,"_302":303,"_304":305,"_306":307,"_308":309,"_310":311,"_312":313,"_314":315,"_316":317,"_318":319,"_320":321},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History