New one-time code generated

${code}

Grants ${credits} credits. Works exactly once. Give this to the customer — don't reuse it yourself.

\n `,\n { status: 200, headers: { ...corsHeaders, \"Content-Type\": \"text/html\" } }\n );\n }\n\n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"Use POST.\" }), {\n status: 405, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n\n const apiKey = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!apiKey) {\n return new Response(JSON.stringify({ error: \"ANTHROPIC_API_KEY is not set\" }), {\n status: 500, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n\n try {\n const body = await req.json();\n\n // ── Redeem a one-time support code ──────────────────────────────────\n if (body.action === \"redeem_code\") {\n const code = String(body.code || \"\").trim().toUpperCase();\n if (!code) {\n return new Response(JSON.stringify({ success: false, error: \"Please enter a code.\" }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n const rows = await sqlite.execute(\"SELECT credits, used FROM redemption_codes WHERE code = ?\", [code]);\n if (rows.rows.length === 0) {\n return new Response(JSON.stringify({ success: false, error: \"Invalid code. Please check and try again.\" }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n const row: any = rows.rows[0];\n if (Number(row.used)) {\n return new Response(JSON.stringify({ success: false, error: \"This code has already been used.\" }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n await sqlite.execute(\n \"UPDATE redemption_codes SET used = 1, used_at = ? WHERE code = ?\",\n [new Date().toISOString(), code]\n );\n return new Response(JSON.stringify({ success: true, credits: Number(row.credits) }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n\n // ── Free-credit gate — one per network address ───────────────────────\n // Note: this raises the bar (stops \"clear storage / go incognito and get another\n // free credit\"), it doesn't make abuse impossible (a VPN or phone data can still\n // look like a new visitor). That's an accepted tradeoff of not requiring accounts.\n if (body.action === \"claim_free_credit\") {\n const ip = getClientIp(req);\n const existing = await sqlite.execute(\"SELECT ip FROM free_credit_claims WHERE ip = ?\", [ip]);\n if (existing.rows.length > 0) {\n return new Response(JSON.stringify({ granted: false }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n await sqlite.execute(\n \"INSERT INTO free_credit_claims (ip, claimed_at) VALUES (?, ?)\",\n [ip, new Date().toISOString()]\n );\n return new Response(JSON.stringify({ granted: true }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n\n // ── Page-fetch passthrough (unchanged) ────────────────────────────────\n if (body.fetch_url) {\n const pageRes = await fetch(body.fetch_url, {\n headers: { \"User-Agent\": \"Mozilla/5.0 (compatible; ResumeAI/1.0)\" }\n });\n const html = await pageRes.text();\n const text = html\n .replace(/]*>[\\s\\S]*?<\\/script>/gi, '')\n .replace(/]*>[\\s\\S]*?<\\/style>/gi, '')\n .replace(/<[^>]+>/g, ' ')\n .replace(/\\s+/g, ' ')\n .trim()\n .slice(0, 8000);\n return new Response(JSON.stringify({ text }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n\n // ── Normal Anthropic API passthrough (unchanged) ──────────────────────\n const response = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": apiKey,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify(body),\n });\n const data = await response.json();\n return new Response(JSON.stringify(data), {\n status: response.status,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: String(err) }), {\n status: 500, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n}",[133],"pulls","branches",1,"forks","envVars",{"_149":151,"_152":59},"connections",{"_149":59,"_150":59},"count","unfilledCount",3,"emptyCount",{"_42":132,"_32":133,"_30":134,"_127":-5,"_40":41,"_39":135,"_128":26,"_37":159,"_13":137,"_33":138,"_35":139,"_23":26,"_130":-5,"_156":160,"_27":161},{"_42":126,"_32":28,"_30":31,"_127":-5,"_40":41,"_39":14,"_128":26,"_37":155,"_13":59,"_33":34,"_35":36,"_23":26,"_130":-5,"_156":157,"_27":158},["D",1784649390819],"children",[],[28],["D",1784257323609],[],[133],["D",1781118109437],["D",1789515657103],{"_96":95,"_102":36},{"_96":95,"_97":36,"_98":36,"_18":53,"_99":100,"_101":26},{"_13":85,"_32":86,"_42":41,"_87":43,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":44,"_94":95},"ctx",{"_78":-5,"_121":200,"_201":202,"_203":204,"_205":26,"_206":26,"_207":26,"_208":24,"_209":-5,"_210":-7,"_211":-7,"_212":59,"_213":26,"_214":26,"_215":-5,"_216":26,"_217":26,"_218":26,"_219":-5},"ENV",{"_171":172,"_173":174,"_175":86,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v14