[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_94":93,"_32":45,"_102":84,"_27":103,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":120,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":77,"_78":79,"_80":81,"_82":25},"version",15,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","new-file-323.ts","latestPath","fileId","40a945b6-1a5d-11f1-bcbb-42dde27851f2","name","fileType","http","content","import { blob } from \"https://esm.town/v/std/blob\";\n\nasync function loadDB() {\n try {\n var data = await blob.getJSON(\"ascend_db\");\n if (data && data.users && data.sessions) return data;\n return { users: {}, sessions: {} };\n } catch (e) {\n return { users: {}, sessions: {} };\n }\n}\n\nasync function saveDB(data) {\n await blob.setJSON(\"ascend_db\", data);\n}\n\nfunction createToken() {\n var chars = \"abcdefghijklmnopqrstuvwxyz0123456789\";\n var result = \"\";\n for (var i = 0; i < 40; i++) {\n result += chars.charAt(Math.floor(Math.random() * chars.length));\n }\n return result;\n}\n\nasync function hashPassword(password) {\n var encoder = new TextEncoder();\n var data = encoder.encode(password + \"_ascend_salt_2026\");\n var hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n var hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(function (b) {\n return b.toString(16).padStart(2, \"0\");\n }).join(\"\");\n}\n\nfunction sendJSON(data, statusCode) {\n return new Response(JSON.stringify(data), {\n status: statusCode || 200,\n headers: {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n}\n\nasync function callStripe(endpoint, params) {\n var response = await fetch(\"https://api.stripe.com/v1/\" + endpoint, {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer \" + Deno.env.get(\"STRIPE_SECRET_KEY\"),\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams(params).toString(),\n });\n return await response.json();\n}\n\nasync function getFromStripe(endpoint) {\n var response = await fetch(\"https://api.stripe.com/v1/\" + endpoint, {\n headers: {\n \"Authorization\": \"Bearer \" + Deno.env.get(\"STRIPE_SECRET_KEY\"),\n },\n });\n return await response.json();\n}\n\nvar ASCEND_AI_PROMPT =\n 'You are Ascend AI by Ascend Solutions — an expert AI business advisor for beginners. You ONLY discuss entrepreneurship. Give structured, specific, actionable advice.\\n\\nGiven a user\\'s business idea, skills, goals, budget, and timeline, respond with ONLY valid JSON (no markdown, no backticks):\\n\\n{\"viability\":{\"score\":<1-10>,\"summary\":\"<2 sentences>\",\"strengths\":[\"\",\"\",\"\"],\"risks\":[\"\",\"\",\"\"]},\"monetization\":[{\"strategy\":\"\",\"description\":\"<1 sentence>\",\"potential\":\"\"},{\"strategy\":\"\",\"description\":\"<1 sentence>\",\"potential\":\"\"},{\"strategy\":\"\",\"description\":\"<1 sentence>\",\"potential\":\"\"}],\"actionPlan\":[{\"week\":\"Week 1\",\"title\":\"\",\"tasks\":[\"\",\"\",\"\"]},{\"week\":\"Week 2\",\"title\":\"\",\"tasks\":[\"\",\"\",\"\"]},{\"week\":\"Week 3\",\"title\":\"\",\"tasks\":[\"\",\"\",\"\"]},{\"week\":\"Week 4\",\"title\":\"\",\"tasks\":[\"\",\"\",\"\"]}],\"tools\":[{\"name\":\"\",\"purpose\":\"\",\"cost\":\"\"},{\"name\":\"\",\"purpose\":\"\",\"cost\":\"\"},{\"name\":\"\",\"purpose\":\"\",\"cost\":\"\"}],\"nextStep\":\"\"}\\n\\nBe specific to their idea. No generic advice.';\n\nexport default async function (req) {\n if (req.method === \"OPTIONS\") {\n return sendJSON({ ok: true });\n }\n\n var url = new URL(req.url);\n var path = url.pathname;\n var SITE = Deno.env.get(\"SITE_URL\");\n\n // ---- POST /checkout ----\n if (path === \"/checkout\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var checkoutParams = {\n \"mode\": \"subscription\",\n \"line_items[0][price]\": Deno.env.get(\"STRIPE_PRICE_ID\"),\n \"line_items[0][quantity]\": \"1\",\n \"success_url\": SITE + \"/success.html?session_id={CHECKOUT_SESSION_ID}\",\n \"cancel_url\": SITE + \"/cancel.html\",\n };\n if (body.email) {\n checkoutParams[\"customer_email\"] = body.email;\n }\n\n var session = await callStripe(\"checkout/sessions\", checkoutParams);\n if (session.error) {\n console.log(\"Checkout error: \" + session.error.message);\n return sendJSON({ error: session.error.message }, 400);\n }\n console.log(\"Checkout session created: \" + session.id);\n return sendJSON({ url: session.url });\n }\n\n // ---- POST /verify-payment ----\n if (path === \"/verify-payment\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var sessionId = body.session_id;\n if (!sessionId) {\n return sendJSON({ error: \"No session ID provided\" }, 400);\n }\n\n try {\n var session = await getFromStripe(\"checkout/sessions/\" + sessionId);\n if (session.error) {\n return sendJSON({ error: session.error.message }, 400);\n }\n if (session.payment_status !== \"paid\") {\n return sendJSON({ error: \"Payment not confirmed\" }, 400);\n }\n\n var email = \"unknown\";\n if (session.customer_email) {\n email = session.customer_email;\n } else if (session.customer_details && session.customer_details.email) {\n email = session.customer_details.email;\n }\n\n // Check if user already exists (returning customer)\n var db = await loadDB();\n if (db.users[email] && db.users[email].passwordHash) {\n // Existing user resubscribing — reactivate and log them in\n db.users[email].subscriptionActive = true;\n db.users[email].stripeCustomer = session.customer;\n var tk = createToken();\n db.sessions[tk] = { email: email, created: Date.now() };\n await saveDB(db);\n console.log(\"Resubscribed: \" + email);\n return sendJSON({\n success: true,\n token: tk,\n email: email,\n needsPassword: false,\n });\n }\n\n // New user — needs to set password\n db.users[email] = {\n stripeCustomer: session.customer,\n subscriptionActive: true,\n passwordHash: null,\n created: Date.now(),\n };\n await saveDB(db);\n console.log(\"New subscriber (needs password): \" + email);\n return sendJSON({ success: true, email: email, needsPassword: true });\n } catch (e) {\n console.log(\"Verify payment error: \" + e.message);\n return sendJSON({ error: e.message }, 500);\n }\n }\n\n // ---- POST /set-password ----\n if (path === \"/set-password\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var email = body.email;\n var password = body.password;\n\n if (!email || !password) {\n return sendJSON({ error: \"Email and password required\" }, 400);\n }\n if (password.length < 6) {\n return sendJSON({ error: \"Password must be at least 6 characters\" }, 400);\n }\n\n var db = await loadDB();\n var user = db.users[email];\n if (!user) {\n return sendJSON({ error: \"Account not found\" }, 404);\n }\n\n user.passwordHash = await hashPassword(password);\n var tk = createToken();\n db.sessions[tk] = { email: email, created: Date.now() };\n await saveDB(db);\n\n console.log(\"Password set for: \" + email);\n return sendJSON({ success: true, token: tk, email: email });\n }\n\n // ---- POST /login ----\n if (path === \"/login\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var email = body.email;\n var password = body.password;\n\n if (!email || !password) {\n return sendJSON({ error: \"Email and password required\" }, 400);\n }\n\n var db = await loadDB();\n var user = db.users[email];\n\n if (!user) {\n return sendJSON({ error: \"No account found with this email.\" }, 401);\n }\n if (!user.subscriptionActive) {\n return sendJSON({\n error: \"Your subscription is inactive. Please resubscribe.\",\n }, 401);\n }\n if (!user.passwordHash) {\n return sendJSON({\n error:\n \"Please complete your account setup. Check your email for the setup link.\",\n }, 401);\n }\n\n var inputHash = await hashPassword(password);\n if (inputHash !== user.passwordHash) {\n return sendJSON({ error: \"Incorrect password.\" }, 401);\n }\n\n var tk = createToken();\n db.sessions[tk] = { email: email, created: Date.now() };\n await saveDB(db);\n\n console.log(\"Login: \" + email);\n return sendJSON({ token: tk, email: email });\n }\n\n // ---- POST /verify ----\n if (path === \"/verify\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var tk = body.token;\n if (!tk) return sendJSON({ valid: false });\n\n var db = await loadDB();\n var session = db.sessions[tk];\n if (!session) return sendJSON({ valid: false });\n\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) return sendJSON({ valid: false });\n\n return sendJSON({ valid: true, email: session.email });\n }\n\n // ---- POST /generate ----\n if (path === \"/generate\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var tk = body.token;\n var db = await loadDB();\n var session = db.sessions[tk];\n if (!session) return sendJSON({ error: \"Not authenticated\" }, 401);\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) {\n return sendJSON({ error: \"Subscription inactive\" }, 403);\n }\n\n if (\n !body.idea || !body.skills || !body.goals || !body.budget ||\n !body.timeline\n ) {\n return sendJSON({ error: \"Missing fields\" }, 400);\n }\n\n var MONTHLY_LIMIT = 50;\n var now = new Date();\n var monthKey = now.getFullYear() + \"-\" + now.getMonth();\n if (!user.usage) user.usage = {};\n if (!user.usage[monthKey]) user.usage[monthKey] = 0;\n if (user.usage[monthKey] >= MONTHLY_LIMIT) {\n return sendJSON({\n error: \"You've reached your limit of \" + MONTHLY_LIMIT +\n \" generations this month.\",\n }, 429);\n }\n user.usage[monthKey] = user.usage[monthKey] + 1;\n await saveDB(db);\n\n console.log(\n \"Ascend AI for \" + session.email + \" (\" + user.usage[monthKey] + \"/\" +\n MONTHLY_LIMIT + \")\",\n );\n\n try {\n var aiResponse = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": Deno.env.get(\"ANTHROPIC_API_KEY\"),\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: \"claude-sonnet-4-20250514\",\n max_tokens: 4096,\n system: ASCEND_AI_PROMPT,\n messages: [{\n role: \"user\",\n content: \"Business Idea: \" + body.idea + \"\\nSkills: \" +\n body.skills + \"\\nGoals: \" + body.goals + \"\\nBudget: \" +\n body.budget + \"\\nTimeline: \" + body.timeline +\n \"\\n\\nGenerate my startup plan as JSON.\",\n }],\n }),\n });\n if (!aiResponse.ok) {\n return sendJSON({ error: \"AI error \" + aiResponse.status }, 500);\n }\n var aiData = await aiResponse.json();\n return sendJSON(aiData);\n } catch (e) {\n return sendJSON({ error: \"AI error: \" + e.message }, 500);\n }\n }\n\n // ---- POST /generate-deck ----\n if (path === \"/generate-deck\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var tk = body.token;\n var db = await loadDB();\n var session = db.sessions[tk];\n if (!session) return sendJSON({ error: \"Not authenticated\" }, 401);\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) {\n return sendJSON({ error: \"Subscription inactive\" }, 403);\n }\n if (!body.prompt) return sendJSON({ error: \"Missing prompt\" }, 400);\n\n var MONTHLY_LIMIT = 50;\n var now = new Date();\n var monthKey = now.getFullYear() + \"-\" + now.getMonth();\n if (!user.usage) user.usage = {};\n if (!user.usage[monthKey]) user.usage[monthKey] = 0;\n if (user.usage[monthKey] >= MONTHLY_LIMIT) {\n return sendJSON({\n error: \"You've reached your limit of \" + MONTHLY_LIMIT +\n \" generations this month.\",\n }, 429);\n }\n user.usage[monthKey] = user.usage[monthKey] + 1;\n await saveDB(db);\n\n console.log(\n \"Generate-deck for \" + session.email + \" (\" + user.usage[monthKey] + \"/\" +\n MONTHLY_LIMIT + \")\",\n );\n\n try {\n var aiResponse = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": Deno.env.get(\"ANTHROPIC_API_KEY\"),\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: \"claude-sonnet-4-20250514\",\n max_tokens: 4096,\n system: body.systemPrompt,\n messages: [{ role: \"user\", content: body.prompt }],\n }),\n });\n if (!aiResponse.ok) {\n return sendJSON({ error: \"AI error \" + aiResponse.status }, 500);\n }\n var aiData = await aiResponse.json();\n return sendJSON(aiData);\n } catch (e) {\n return sendJSON({ error: \"AI error: \" + e.message }, 500);\n }\n }\n\n // ---- POST /save-tasks ----\n if (path === \"/save-tasks\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n var db = await loadDB();\n var session = db.sessions[body.token];\n if (!session) return sendJSON({ error: \"Not authenticated\" }, 401);\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) {\n return sendJSON({ error: \"Subscription inactive\" }, 403);\n }\n if (!user.taskCoach) user.taskCoach = {};\n user.taskCoach = body.taskData;\n await saveDB(db);\n return sendJSON({ success: true });\n }\n\n // ---- POST /load-tasks ----\n if (path === \"/load-tasks\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n var db = await loadDB();\n var session = db.sessions[body.token];\n if (!session) return sendJSON({ error: \"Not authenticated\" }, 401);\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) {\n return sendJSON({ error: \"Subscription inactive\" }, 403);\n }\n return sendJSON({ success: true, taskData: user.taskCoach || {} });\n }\n\n // ---- POST /webhook ----\n if (path === \"/webhook\" && req.method === \"POST\") {\n var event = {};\n try {\n event = await req.json();\n } catch (e) {}\n if (event.type === \"customer.subscription.deleted\") {\n var customerId = event.data.object.customer;\n var db = await loadDB();\n var emails = Object.keys(db.users);\n for (var i = 0; i < emails.length; i++) {\n if (db.users[emails[i]].stripeCustomer === customerId) {\n db.users[emails[i]].subscriptionActive = false;\n console.log(\"Webhook cancelled: \" + emails[i]);\n break;\n }\n }\n await saveDB(db);\n }\n return sendJSON({ received: true });\n }\n\n // ---- POST /cancel ----\n if (path === \"/cancel\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n var db = await loadDB();\n var session = db.sessions[body.token];\n if (!session) return sendJSON({ error: \"Not authenticated\" }, 401);\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) {\n return sendJSON({ error: \"No active subscription\" }, 400);\n }\n try {\n var subs = await getFromStripe(\n \"subscriptions?customer=\" + user.stripeCustomer + \"&status=active\",\n );\n if (subs.data && subs.data.length > 0) {\n await fetch(\n \"https://api.stripe.com/v1/subscriptions/\" + subs.data[0].id,\n {\n method: \"DELETE\",\n headers: {\n \"Authorization\": \"Bearer \" + Deno.env.get(\"STRIPE_SECRET_KEY\"),\n },\n },\n );\n }\n user.subscriptionActive = false;\n await saveDB(db);\n console.log(\"User cancelled: \" + session.email);\n return sendJSON({ success: true });\n } catch (e) {\n return sendJSON({ error: e.message }, 500);\n }\n }\n\n // ---- GET /stats ----\n if (path === \"/stats\") {\n var db = await loadDB();\n var emails = Object.keys(db.users);\n var totalUsers = emails.length;\n var activeCount = 0;\n for (var i = 0; i < emails.length; i++) {\n if (db.users[emails[i]].subscriptionActive) activeCount++;\n }\n return sendJSON({ totalUsers: totalUsers, activeSubscribers: activeCount });\n }\n\n return sendJSON({ error: \"Not found\" }, 404);\n}","import { blob } from \"https://esm.town/v/std/blob\";\n\nasync function loadDB() {\n try {\n var data = await blob.getJSON(\"ascend_db\");\n if (data && data.users && data.sessions) return data;\n return { users: {}, sessions: {} };\n } catch (e) {\n return { users: {}, sessions: {} };\n }\n}\n\nasync function saveDB(data) {\n await blob.setJSON(\"ascend_db\", data);\n}\n\nfunction createToken() {\n var chars = \"abcdefghijklmnopqrstuvwxyz0123456789\";\n var result = \"\";\n for (var i = 0; i < 40; i++) {\n result += chars.charAt(Math.floor(Math.random() * chars.length));\n }\n return result;\n}\n\nasync function hashPassword(password) {\n var encoder = new TextEncoder();\n var data = encoder.encode(password + \"_ascend_salt_2026\");\n var hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n var hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(function (b) {\n return b.toString(16).padStart(2, \"0\");\n }).join(\"\");\n}\n\nfunction sendJSON(data, statusCode) {\n return new Response(JSON.stringify(data), {\n status: statusCode || 200,\n headers: {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n}\n\nasync function callStripe(endpoint, params) {\n var response = await fetch(\"https://api.stripe.com/v1/\" + endpoint, {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer \" + Deno.env.get(\"STRIPE_SECRET_KEY\"),\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams(params).toString(),\n });\n return await response.json();\n}\n\nasync function getFromStripe(endpoint) {\n var response = await fetch(\"https://api.stripe.com/v1/\" + endpoint, {\n headers: {\n \"Authorization\": \"Bearer \" + Deno.env.get(\"STRIPE_SECRET_KEY\"),\n },\n });\n return await response.json();\n}\n\nvar ASCEND_AI_PROMPT =\n 'You are Ascend AI by Ascend Solutions — an expert AI business advisor for beginners. You ONLY discuss entrepreneurship. Give structured, specific, actionable advice.\\n\\nGiven a user\\'s business idea, skills, goals, budget, and timeline, respond with ONLY valid JSON (no markdown, no backticks):\\n\\n{\"viability\":{\"score\":<1-10>,\"summary\":\"<2 sentences>\",\"strengths\":[\"\",\"\",\"\"],\"risks\":[\"\",\"\",\"\"]},\"monetization\":[{\"strategy\":\"\",\"description\":\"<1 sentence>\",\"potential\":\"\"},{\"strategy\":\"\",\"description\":\"<1 sentence>\",\"potential\":\"\"},{\"strategy\":\"\",\"description\":\"<1 sentence>\",\"potential\":\"\"}],\"actionPlan\":[{\"week\":\"Week 1\",\"title\":\"\",\"tasks\":[\"\",\"\",\"\"]},{\"week\":\"Week 2\",\"title\":\"\",\"tasks\":[\"\",\"\",\"\"]},{\"week\":\"Week 3\",\"title\":\"\",\"tasks\":[\"\",\"\",\"\"]},{\"week\":\"Week 4\",\"title\":\"\",\"tasks\":[\"\",\"\",\"\"]}],\"tools\":[{\"name\":\"\",\"purpose\":\"\",\"cost\":\"\"},{\"name\":\"\",\"purpose\":\"\",\"cost\":\"\"},{\"name\":\"\",\"purpose\":\"\",\"cost\":\"\"}],\"nextStep\":\"\"}\\n\\nBe specific to their idea. No generic advice.';\n\nexport default async function (req) {\n if (req.method === \"OPTIONS\") {\n return sendJSON({ ok: true });\n }\n\n var url = new URL(req.url);\n var path = url.pathname;\n var SITE = Deno.env.get(\"SITE_URL\");\n\n // ---- POST /checkout ----\n if (path === \"/checkout\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n // Check if user is already logged in and has active subscription\n var existingToken = body.token;\n if (existingToken) {\n var db = await loadDB();\n var existingSession = db.sessions[existingToken];\n if (existingSession) {\n var existingUser = db.users[existingSession.email];\n if (existingUser && existingUser.subscriptionActive) {\n return sendJSON(\n { error: \"You already have an active subscription.\" },\n 400,\n );\n }\n }\n }\n\n var checkoutParams = {\n \"mode\": \"subscription\",\n \"line_items[0][price]\": Deno.env.get(\"STRIPE_PRICE_ID\"),\n \"line_items[0][quantity]\": \"1\",\n \"success_url\": SITE + \"/success.html?session_id={CHECKOUT_SESSION_ID}\",\n \"cancel_url\": SITE + \"/cancel.html\",\n };\n if (body.email) {\n checkoutParams[\"customer_email\"] = body.email;\n }\n\n var session = await callStripe(\"checkout/sessions\", checkoutParams);\n if (session.error) {\n console.log(\"Checkout error: \" + session.error.message);\n return sendJSON({ error: session.error.message }, 400);\n }\n console.log(\"Checkout session created: \" + session.id);\n return sendJSON({ url: session.url });\n }\n\n // ---- POST /verify-payment ----\n if (path === \"/verify-payment\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var sessionId = body.session_id;\n if (!sessionId) {\n return sendJSON({ error: \"No session ID provided\" }, 400);\n }\n\n try {\n var session = await getFromStripe(\"checkout/sessions/\" + sessionId);\n if (session.error) {\n return sendJSON({ error: session.error.message }, 400);\n }\n if (session.payment_status !== \"paid\") {\n return sendJSON({ error: \"Payment not confirmed\" }, 400);\n }\n\n var email = \"unknown\";\n if (session.customer_email) {\n email = session.customer_email;\n } else if (session.customer_details && session.customer_details.email) {\n email = session.customer_details.email;\n }\n\n // Check if user already exists (returning customer)\n var db = await loadDB();\n if (db.users[email] && db.users[email].passwordHash) {\n // Existing user resubscribing — reactivate and log them in\n db.users[email].subscriptionActive = true;\n db.users[email].stripeCustomer = session.customer;\n var tk = createToken();\n db.sessions[tk] = { email: email, created: Date.now() };\n await saveDB(db);\n console.log(\"Resubscribed: \" + email);\n return sendJSON({\n success: true,\n token: tk,\n email: email,\n needsPassword: false,\n });\n }\n\n // New user — needs to set password\n db.users[email] = {\n stripeCustomer: session.customer,\n subscriptionActive: true,\n passwordHash: null,\n created: Date.now(),\n };\n await saveDB(db);\n console.log(\"New subscriber (needs password): \" + email);\n return sendJSON({ success: true, email: email, needsPassword: true });\n } catch (e) {\n console.log(\"Verify payment error: \" + e.message);\n return sendJSON({ error: e.message }, 500);\n }\n }\n\n // ---- POST /set-password ----\n if (path === \"/set-password\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var email = body.email;\n var password = body.password;\n\n if (!email || !password) {\n return sendJSON({ error: \"Email and password required\" }, 400);\n }\n if (password.length < 6) {\n return sendJSON({ error: \"Password must be at least 6 characters\" }, 400);\n }\n\n var db = await loadDB();\n var user = db.users[email];\n if (!user) {\n return sendJSON({ error: \"Account not found\" }, 404);\n }\n\n user.passwordHash = await hashPassword(password);\n var tk = createToken();\n db.sessions[tk] = { email: email, created: Date.now() };\n await saveDB(db);\n\n console.log(\"Password set for: \" + email);\n return sendJSON({ success: true, token: tk, email: email });\n }\n\n // ---- POST /login ----\n if (path === \"/login\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var email = body.email;\n var password = body.password;\n\n if (!email || !password) {\n return sendJSON({ error: \"Email and password required\" }, 400);\n }\n\n var db = await loadDB();\n var user = db.users[email];\n\n if (!user) {\n return sendJSON({ error: \"No account found with this email.\" }, 401);\n }\n if (!user.subscriptionActive) {\n return sendJSON({\n error: \"Your subscription is inactive. Please resubscribe.\",\n }, 401);\n }\n if (!user.passwordHash) {\n return sendJSON({\n error:\n \"Please complete your account setup. Check your email for the setup link.\",\n }, 401);\n }\n\n var inputHash = await hashPassword(password);\n if (inputHash !== user.passwordHash) {\n return sendJSON({ error: \"Incorrect password.\" }, 401);\n }\n\n var tk = createToken();\n db.sessions[tk] = { email: email, created: Date.now() };\n await saveDB(db);\n\n console.log(\"Login: \" + email);\n return sendJSON({ token: tk, email: email });\n }\n\n // ---- POST /verify ----\n if (path === \"/verify\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var tk = body.token;\n if (!tk) return sendJSON({ valid: false });\n\n var db = await loadDB();\n var session = db.sessions[tk];\n if (!session) return sendJSON({ valid: false });\n\n var user = db.users[session.email];\n if (!user) return sendJSON({ valid: false });\n\n // Check if subscription was cancelled and period has ended\n if (user.cancelAtPeriodEnd && user.accessExpiresAt) {\n if (Date.now() > user.accessExpiresAt) {\n user.subscriptionActive = false;\n user.cancelAtPeriodEnd = false;\n await saveDB(db);\n return sendJSON({ valid: false });\n }\n }\n\n if (!user.subscriptionActive) return sendJSON({ valid: false });\n\n var result = { valid: true, email: session.email };\n if (user.cancelAtPeriodEnd) {\n var expDate = new Date(user.accessExpiresAt);\n result.cancelPending = true;\n result.expiresAt = expDate.toLocaleDateString(\"en-US\", {\n month: \"long\",\n day: \"numeric\",\n year: \"numeric\",\n });\n }\n return sendJSON(result);\n }\n\n // ---- POST /generate ----\n if (path === \"/generate\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var tk = body.token;\n var db = await loadDB();\n var session = db.sessions[tk];\n if (!session) return sendJSON({ error: \"Not authenticated\" }, 401);\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) {\n return sendJSON({ error: \"Subscription inactive\" }, 403);\n }\n\n if (\n !body.idea || !body.skills || !body.goals || !body.budget ||\n !body.timeline\n ) {\n return sendJSON({ error: \"Missing fields\" }, 400);\n }\n\n var MONTHLY_LIMIT = 50;\n var now = new Date();\n var monthKey = now.getFullYear() + \"-\" + now.getMonth();\n if (!user.usage) user.usage = {};\n if (!user.usage[monthKey]) user.usage[monthKey] = 0;\n if (user.usage[monthKey] >= MONTHLY_LIMIT) {\n return sendJSON({\n error: \"You've reached your limit of \" + MONTHLY_LIMIT +\n \" generations this month.\",\n }, 429);\n }\n user.usage[monthKey] = user.usage[monthKey] + 1;\n await saveDB(db);\n\n console.log(\n \"Ascend AI for \" + session.email + \" (\" + user.usage[monthKey] + \"/\" +\n MONTHLY_LIMIT + \")\",\n );\n\n try {\n var aiResponse = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": Deno.env.get(\"ANTHROPIC_API_KEY\"),\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: \"claude-sonnet-4-20250514\",\n max_tokens: 4096,\n system: ASCEND_AI_PROMPT,\n messages: [{\n role: \"user\",\n content: \"Business Idea: \" + body.idea + \"\\nSkills: \" +\n body.skills + \"\\nGoals: \" + body.goals + \"\\nBudget: \" +\n body.budget + \"\\nTimeline: \" + body.timeline +\n \"\\n\\nGenerate my startup plan as JSON.\",\n }],\n }),\n });\n if (!aiResponse.ok) {\n return sendJSON({ error: \"AI error \" + aiResponse.status }, 500);\n }\n var aiData = await aiResponse.json();\n return sendJSON(aiData);\n } catch (e) {\n return sendJSON({ error: \"AI error: \" + e.message }, 500);\n }\n }\n\n // ---- POST /generate-deck ----\n if (path === \"/generate-deck\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n\n var tk = body.token;\n var db = await loadDB();\n var session = db.sessions[tk];\n if (!session) return sendJSON({ error: \"Not authenticated\" }, 401);\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) {\n return sendJSON({ error: \"Subscription inactive\" }, 403);\n }\n if (!body.prompt) return sendJSON({ error: \"Missing prompt\" }, 400);\n\n var MONTHLY_LIMIT = 50;\n var now = new Date();\n var monthKey = now.getFullYear() + \"-\" + now.getMonth();\n if (!user.usage) user.usage = {};\n if (!user.usage[monthKey]) user.usage[monthKey] = 0;\n if (user.usage[monthKey] >= MONTHLY_LIMIT) {\n return sendJSON({\n error: \"You've reached your limit of \" + MONTHLY_LIMIT +\n \" generations this month.\",\n }, 429);\n }\n user.usage[monthKey] = user.usage[monthKey] + 1;\n await saveDB(db);\n\n console.log(\n \"Generate-deck for \" + session.email + \" (\" + user.usage[monthKey] + \"/\" +\n MONTHLY_LIMIT + \")\",\n );\n\n try {\n var aiResponse = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": Deno.env.get(\"ANTHROPIC_API_KEY\"),\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: \"claude-sonnet-4-20250514\",\n max_tokens: 4096,\n system: body.systemPrompt,\n messages: [{ role: \"user\", content: body.prompt }],\n }),\n });\n if (!aiResponse.ok) {\n return sendJSON({ error: \"AI error \" + aiResponse.status }, 500);\n }\n var aiData = await aiResponse.json();\n return sendJSON(aiData);\n } catch (e) {\n return sendJSON({ error: \"AI error: \" + e.message }, 500);\n }\n }\n\n // ---- POST /save-tasks ----\n if (path === \"/save-tasks\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n var db = await loadDB();\n var session = db.sessions[body.token];\n if (!session) return sendJSON({ error: \"Not authenticated\" }, 401);\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) {\n return sendJSON({ error: \"Subscription inactive\" }, 403);\n }\n if (!user.taskCoach) user.taskCoach = {};\n user.taskCoach = body.taskData;\n await saveDB(db);\n return sendJSON({ success: true });\n }\n\n // ---- POST /load-tasks ----\n if (path === \"/load-tasks\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n var db = await loadDB();\n var session = db.sessions[body.token];\n if (!session) return sendJSON({ error: \"Not authenticated\" }, 401);\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) {\n return sendJSON({ error: \"Subscription inactive\" }, 403);\n }\n return sendJSON({ success: true, taskData: user.taskCoach || {} });\n }\n\n // ---- POST /webhook ----\n if (path === \"/webhook\" && req.method === \"POST\") {\n var event = {};\n try {\n event = await req.json();\n } catch (e) {}\n if (event.type === \"customer.subscription.deleted\") {\n var customerId = event.data.object.customer;\n var db = await loadDB();\n var emails = Object.keys(db.users);\n for (var i = 0; i < emails.length; i++) {\n if (db.users[emails[i]].stripeCustomer === customerId) {\n db.users[emails[i]].subscriptionActive = false;\n console.log(\"Webhook cancelled: \" + emails[i]);\n break;\n }\n }\n await saveDB(db);\n }\n return sendJSON({ received: true });\n }\n\n // ---- POST /cancel ----\n if (path === \"/cancel\" && req.method === \"POST\") {\n var body = {};\n try {\n body = await req.json();\n } catch (e) {}\n var db = await loadDB();\n var session = db.sessions[body.token];\n if (!session) return sendJSON({ error: \"Not authenticated\" }, 401);\n var user = db.users[session.email];\n if (!user || !user.subscriptionActive) {\n return sendJSON({ error: \"No active subscription\" }, 400);\n }\n try {\n var subs = await getFromStripe(\n \"subscriptions?customer=\" + user.stripeCustomer + \"&status=active\",\n );\n if (subs.data && subs.data.length > 0) {\n // Cancel at end of billing period instead of immediately\n await callStripe(\"subscriptions/\" + subs.data[0].id, {\n \"cancel_at_period_end\": \"true\",\n });\n // Store when access expires\n user.cancelAtPeriodEnd = true;\n user.accessExpiresAt = subs.data[0].current_period_end * 1000;\n // Keep subscriptionActive = true so they have access until period ends\n }\n await saveDB(db);\n console.log(\"Subscription set to cancel at period end: \" + session.email);\n\n var expDate = new Date(user.accessExpiresAt);\n var expStr = expDate.toLocaleDateString(\"en-US\", {\n month: \"long\",\n day: \"numeric\",\n year: \"numeric\",\n });\n return sendJSON({ success: true, expiresAt: expStr });\n } catch (e) {\n return sendJSON({ error: e.message }, 500);\n }\n }\n\n // ---- GET /stats ----\n if (path === \"/stats\") {\n var db = await loadDB();\n var emails = Object.keys(db.users);\n var totalUsers = emails.length;\n var activeCount = 0;\n for (var i = 0; i < emails.length; i++) {\n if (db.users[emails[i]].subscriptionActive) activeCount++;\n }\n return sendJSON({ totalUsers: totalUsers, activeSubscribers: activeCount });\n }\n\n return sendJSON({ error: \"Not found\" }, 404);\n}","createdAt",["D",1776956277533],"branchVersion","branchId","ba2a690c-1a5c-11f1-b7b3-42dde27851f2","id","ba2a22e4-1a5c-11f1-b7b3-42dde27851f2","ascend",["D",1772912098779],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","019cc6af-d31c-709b-94d5-361390ba7044","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",1,"orgId","019cc6af-d31c-709b-94d5-3a994057bf86","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_94":93,"_101":97},"org",{"_94":93,"_95":-5,"_96":97,"_18":54,"_98":99,"_100":25},"branch",{"_13":83,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"isOwned",18,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","ramerdfs","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18zQWJTa0V5WEZGMW4zSG4ySkk5R2FsVVhGcFMifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":150,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":151,"_78":152,"_80":153,"_82":25},"tree",[145],"files",[145],"counts",{"_133":134,"_135":60,"_136":134,"_137":138,"_139":140},"contents",[125],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":129,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_27":132},"d0981d0a-3f24-11f1-8f86-42b51c65c3df","parentId","latest",["D",1776956277533],12,"label",[28],"pulls",0,"branches","forks","envVars",{"_141":143,"_144":134},"connections",{"_141":134,"_142":134},"count","unfilledCount",5,"emptyCount",{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":146,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_147":148,"_27":149},["D",1776956277533],"children",[],[28],["D",1772912098779],{"_94":93,"_101":97},{"_94":93,"_95":-5,"_96":97,"_18":54,"_98":99,"_100":25},{"_13":83,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"ctx",{"_76":-5,"_122":187,"_188":189,"_190":191,"_192":25,"_193":25,"_194":25,"_195":120,"_196":-5,"_197":-7,"_198":-7,"_199":134,"_200":25,"_201":25,"_202":-5,"_203":25,"_204":25,"_205":25,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":84,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v15