[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_157":158,"_159":160},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_105":88,"_27":53,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":122,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",12,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","d5ae17d6-64fe-11f1-a8a2-1607ee4eb77e","name","fileType","http","content","export default async function handler(req: Request): Promise {\n const corsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders });\n }\n\n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"Use POST.\" }), {\n status: 405, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n\n const apiKey = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!apiKey) {\n return new Response(JSON.stringify({ error: \"ANTHROPIC_API_KEY is not set\" }), {\n status: 500, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n\n try {\n const body = await req.json();\n\n if (body.fetch_url) {\n const pageRes = await fetch(body.fetch_url, {\n headers: { \"User-Agent\": \"Mozilla/5.0 (compatible; ResumeAI/1.0)\" }\n });\n const html = await pageRes.text();\n const text = html\n .replace(/]*>[\\s\\S]*?<\\/script>/gi, '')\n .replace(/]*>[\\s\\S]*?<\\/style>/gi, '')\n .replace(/<[^>]+>/g, ' ')\n .replace(/\\s+/g, ' ')\n .trim()\n .slice(0, 8000);\n return new Response(JSON.stringify({ text }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n\n const response = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": apiKey,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify(body),\n });\n\n const data = await response.json();\n return new Response(JSON.stringify(data), {\n status: response.status,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n\n } catch (err) {\n return new Response(JSON.stringify({ error: String(err) }), {\n status: 500, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n}","import sqlite from \"https://esm.town/v/std/sqlite/global.ts\";\n\n// One-time table setup — safe to run on every request, only creates the tables if missing.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS redemption_codes (\n code TEXT PRIMARY KEY,\n credits INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL,\n used_at TEXT\n)`);\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS free_credit_claims (\n ip TEXT PRIMARY KEY,\n claimed_at TEXT NOT NULL\n)`);\n\nfunction getClientIp(req: Request): string {\n const fwd = req.headers.get(\"x-forwarded-for\");\n if (fwd) return fwd.split(\",\")[0].trim();\n return req.headers.get(\"x-real-ip\") || \"unknown\";\n}\n\nexport default async function handler(req: Request): Promise {\n const corsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders });\n }\n\n const url = new URL(req.url);\n const ADMIN_KEY = Deno.env.get(\"RESUMEFIT_ADMIN_KEY\") || \"\";\n\n // ── ADMIN: generate a one-time support code ──────────────────────────\n // Visit this in your own browser when you need to hand a customer a manual\n // code (e.g. a Stripe hiccup):\n // https://?admin_key=YOUR_KEY&generate_code=5\n // (use 5 or 10 for the credits value)\n if (req.method === \"GET\" && url.searchParams.get(\"admin_key\")) {\n if (!ADMIN_KEY || url.searchParams.get(\"admin_key\") !== ADMIN_KEY) {\n return new Response(JSON.stringify({ error: \"Invalid admin key.\" }), {\n status: 403,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n });\n }\n const credits = parseInt(url.searchParams.get(\"generate_code\") || \"0\");\n if (!credits || credits <= 0) {\n return new Response(\n JSON.stringify({ error: \"Add &generate_code=5 (or 10) to the URL.\" }),\n {\n status: 400,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n },\n );\n }\n const code = \"SUPPORT-\" + crypto.randomUUID().slice(0, 8).toUpperCase();\n await sqlite.execute(\n \"INSERT INTO redemption_codes (code, credits, used, created_at) VALUES (?, ?, 0, ?)\",\n [code, credits, new Date().toISOString()],\n );\n return new Response(\n `\n

New one-time code generated

${code}

Grants ${credits} credits. Works exactly once. Give this to the customer — don't reuse it yourself.

\n `,\n { status: 200, headers: { ...corsHeaders, \"Content-Type\": \"text/html\" } },\n );\n }\n\n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"Use POST.\" }), {\n status: 405,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n });\n }\n\n const apiKey = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!apiKey) {\n return new Response(\n JSON.stringify({ error: \"ANTHROPIC_API_KEY is not set\" }),\n {\n status: 500,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n try {\n const body = await req.json();\n\n // ── Redeem a one-time support code ──────────────────────────────────\n if (body.action === \"redeem_code\") {\n const code = String(body.code || \"\").trim().toUpperCase();\n if (!code) {\n return new Response(\n JSON.stringify({ success: false, error: \"Please enter a code.\" }),\n {\n status: 200,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n },\n );\n }\n const rows = await sqlite.execute(\n \"SELECT credits, used FROM redemption_codes WHERE code = ?\",\n [code],\n );\n if (rows.rows.length === 0) {\n return new Response(\n JSON.stringify({\n success: false,\n error: \"Invalid code. Please check and try again.\",\n }),\n {\n status: 200,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n },\n );\n }\n const row: any = rows.rows[0];\n if (Number(row.used)) {\n return new Response(\n JSON.stringify({\n success: false,\n error: \"This code has already been used.\",\n }),\n {\n status: 200,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n },\n );\n }\n await sqlite.execute(\n \"UPDATE redemption_codes SET used = 1, used_at = ? WHERE code = ?\",\n [new Date().toISOString(), code],\n );\n return new Response(\n JSON.stringify({ success: true, credits: Number(row.credits) }),\n {\n status: 200,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // ── Free-credit gate — one per network address ───────────────────────\n // Note: this raises the bar (stops \"clear storage / go incognito and get another\n // free credit\"), it doesn't make abuse impossible (a VPN or phone data can still\n // look like a new visitor). That's an accepted tradeoff of not requiring accounts.\n if (body.action === \"claim_free_credit\") {\n const ip = getClientIp(req);\n const existing = await sqlite.execute(\n \"SELECT ip FROM free_credit_claims WHERE ip = ?\",\n [ip],\n );\n if (existing.rows.length > 0) {\n return new Response(JSON.stringify({ granted: false }), {\n status: 200,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n });\n }\n await sqlite.execute(\n \"INSERT INTO free_credit_claims (ip, claimed_at) VALUES (?, ?)\",\n [ip, new Date().toISOString()],\n );\n return new Response(JSON.stringify({ granted: true }), {\n status: 200,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n });\n }\n\n // ── Page-fetch passthrough (unchanged) ────────────────────────────────\n if (body.fetch_url) {\n const pageRes = await fetch(body.fetch_url, {\n headers: { \"User-Agent\": \"Mozilla/5.0 (compatible; ResumeAI/1.0)\" },\n });\n const html = await pageRes.text();\n const text = html\n .replace(/]*>[\\s\\S]*?<\\/script>/gi, \"\")\n .replace(/]*>[\\s\\S]*?<\\/style>/gi, \"\")\n .replace(/<[^>]+>/g, \" \")\n .replace(/\\s+/g, \" \")\n .trim()\n .slice(0, 8000);\n return new Response(JSON.stringify({ text }), {\n status: 200,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n });\n }\n\n // ── Normal Anthropic API passthrough (unchanged) ──────────────────────\n const response = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": apiKey,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify(body),\n });\n const data = await response.json();\n return new Response(JSON.stringify(data), {\n status: response.status,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: String(err) }), {\n status: 500,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" },\n });\n }\n}","createdAt",["D",1784257203262],"branchVersion","branchId","6699b953-0f3e-4421-800e-14fa2a44ff3b","id","f9b2de14-9c17-4b0a-8886-7e38d782ead7","claudeproxy",["D",1781118109437],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","217a39d1-8e1f-4084-a733-3accee59bd50","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019eb2e4-3d2f-70f8-bae7-009b433efbb0","tursoName","f9b2de149c174b0a88867e38d782ead7","tursoHostname","f9b2de149c174b0a88867e38d782ead7-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789515657103],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_104":53},"org",{"_98":97,"_99":53,"_100":53,"_18":55,"_101":102,"_103":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",16,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","klhearn74","handle","displayName","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":152,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":153,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":154,"_82":155,"_84":156,"_86":25},"tree",[147],"files",[147],"counts",{"_135":61,"_136":137,"_138":61,"_139":140,"_141":142},"contents",[127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":131,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_27":134},"6b8482c4-089e-4f16-bf7e-3fce52487c97","parentId","latest",["D",1784257203262],11,"label",[28],"pulls","branches",1,"forks","envVars",{"_143":145,"_146":61},"connections",{"_143":61,"_144":61},"count","unfilledCount",3,"emptyCount",{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":148,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_149":150,"_27":151},["D",1784257203262],"children",[],[28],["D",1781118109437],["D",1789515657103],{"_98":97,"_104":53},{"_98":97,"_99":53,"_100":53,"_18":55,"_101":102,"_103":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_124":190,"_191":192,"_193":194,"_195":25,"_196":25,"_197":25,"_198":122,"_199":-5,"_200":-7,"_201":-7,"_202":61,"_203":25,"_204":25,"_205":-5,"_206":25,"_207":25,"_208":25,"_209":-5},"ENV",{"_161":162,"_163":164,"_165":88,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v12