New one-time code generated

${code}

Grants ${credits} credits. Works exactly once. Give this to the customer — don't reuse it yourself.

\n `,\n { status: 200, headers: { ...corsHeaders, \"Content-Type\": \"text/html\" } }\n );\n }\n \n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"Use POST.\" }), {\n status: 405, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n \n // ── Request-secret gate — applies to EVERY POST action below ─────────\n // If RESUMEFIT_REQUEST_KEY isn't set as an env var yet, this check is\n // skipped (so nothing breaks mid-rollout) — but it should be set before\n // any public launch.\n if (REQUEST_KEY) {\n const provided = req.headers.get(\"x-resumefit-key\") || \"\";\n if (provided !== REQUEST_KEY) {\n return new Response(JSON.stringify({ error: \"Unauthorized.\" }), {\n status: 401, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n }\n \n const apiKey = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!apiKey) {\n return new Response(JSON.stringify({ error: \"ANTHROPIC_API_KEY is not set\" }), {\n status: 500, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n \n try {\n const body = await req.json();\n \n // ── Redeem a one-time support code ──────────────────────────────────\n if (body.action === \"redeem_code\") {\n const code = String(body.code || \"\").trim().toUpperCase();\n if (!code) {\n return new Response(JSON.stringify({ success: false, error: \"Please enter a code.\" }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n const rows = await sqlite.execute(\"SELECT credits, used FROM redemption_codes WHERE code = ?\", [code]);\n if (rows.rows.length === 0) {\n return new Response(JSON.stringify({ success: false, error: \"Invalid code. Please check and try again.\" }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n const row: any = rows.rows[0];\n if (Number(row.used)) {\n return new Response(JSON.stringify({ success: false, error: \"This code has already been used.\" }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n await sqlite.execute(\n \"UPDATE redemption_codes SET used = 1, used_at = ? WHERE code = ?\",\n [new Date().toISOString(), code]\n );\n return new Response(JSON.stringify({ success: true, credits: Number(row.credits) }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n \n // ── Free-credit gate — one per network address ───────────────────────\n if (body.action === \"claim_free_credit\") {\n const ip = getClientIp(req);\n const existing = await sqlite.execute(\"SELECT ip FROM free_credit_claims WHERE ip = ?\", [ip]);\n if (existing.rows.length > 0) {\n return new Response(JSON.stringify({ granted: false }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n await sqlite.execute(\n \"INSERT INTO free_credit_claims (ip, claimed_at) VALUES (?, ?)\",\n [ip, new Date().toISOString()]\n );\n return new Response(JSON.stringify({ granted: true }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n \n // ── Page-fetch passthrough (unchanged) ────────────────────────────────\n if (body.fetch_url) {\n const pageRes = await fetch(body.fetch_url, {\n headers: { \"User-Agent\": \"Mozilla/5.0 (compatible; ResumeAI/1.0)\" }\n });\n const html = await pageRes.text();\n const text = html\n .replace(/]*>[\\s\\S]*?<\\/script>/gi, '')\n .replace(/]*>[\\s\\S]*?<\\/style>/gi, '')\n .replace(/<[^>]+>/g, ' ')\n .replace(/\\s+/g, ' ')\n .trim()\n .slice(0, 8000);\n return new Response(JSON.stringify({ text }), {\n status: 200, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n \n // ── Normal Anthropic API passthrough (unchanged) ──────────────────────\n const response = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": apiKey,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify(body),\n });\n const data = await response.json();\n return new Response(JSON.stringify(data), {\n status: response.status,\n headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: String(err) }), {\n status: 500, headers: { ...corsHeaders, \"Content-Type\": \"application/json\" }\n });\n }\n}","deleted","label",[115],"pulls",1,"forks","envVars",{"_139":141,"_142":52},"connections",{"_139":52,"_140":52},"count","unfilledCount",3,"emptyCount",{"_20":114,"_13":115,"_116":117,"_118":-5,"_119":21,"_120":121,"_122":108,"_22":144,"_29":124,"_125":126,"_127":128,"_129":38,"_130":-5,"_145":146,"_90":147},["D",1784649488589],"children",[],[115],["D",1781118109437],["D",1789515657103],{"_11":12,"_88":43},{"_11":12,"_83":43,"_84":43,"_45":46,"_85":86,"_87":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_78":-5,"_79":-5,"_80":-5,"_81":14,"_82":12},"ctx",{"_71":-5,"_110":186,"_187":188,"_189":190,"_191":38,"_192":38,"_193":38,"_194":108,"_195":-5,"_196":-7,"_197":-7,"_198":52,"_199":38,"_200":38,"_201":-5,"_202":38,"_203":38,"_204":38,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":26,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1