VideoFrame Analytics

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_618":619,"_620":621},"routes/_app.x.$handle.$name",{"_100":99,"_33":47,"_108":90,"_27":38,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":125,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_45":46,"_33":47,"_40":48,"_49":-5,"_50":25,"_51":52,"_53":52,"_54":38,"_55":-5,"_18":56,"_57":58,"_59":25,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",228,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":30},"file",{"_31":32,"_33":34,"_35":36,"_37":39,"_40":41,"_42":14,"_43":44,"_24":25},"previous",{"_31":32,"_33":34,"_35":36,"_37":38},"deleted",false,"deletedHere","path","Cloudfare/new-file-2577.ts","latestPath","Cloudfare/subscription-lemon-to-superbase.ts","fileId","5b7009c0-a216-11f1-8af5-1607ee4eb77e","name","new-file-2577.ts","fileType","http","content","","import { createClient } from \"npm:@supabase/supabase-js\";\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nasync function verifySignature(\n rawBody: string,\n signature: string,\n secret: string,\n): Promise {\n try {\n const hmac = createHmac(\"sha256\", secret);\n const digest = hmac.update(rawBody).digest(\"hex\");\n\n if (signature.length !== digest.length) return false;\n\n return timingSafeEqual(\n Buffer.from(digest, \"hex\"),\n Buffer.from(signature, \"hex\"),\n );\n } catch (err) {\n console.error(\"❌ Signature error:\", err.message);\n return false;\n }\n}\n\nexport default async function (req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Signature\",\n };\n\n if (req.method === \"GET\") {\n return new Response(\"Webhook Active\", { status: 200, headers: cors });\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const rawBody = await req.text();\n const signature = req.headers.get(\"X-Signature\") ?? \"\";\n const secret = Deno.env.get(\"lemonsqueezewebhooksecret\") ?? \"\";\n\n console.log(\"─────────────────────────────────\");\n console.log(\"📨 Received webhook\");\n console.log(\"📝 Signature:\", signature ? \"present\" : \"missing\");\n console.log(\"🔑 Secret:\", secret ? \"set\" : \"MISSING!\");\n\n // ── Verify signature ───────────────────────────────────\n const valid = await verifySignature(rawBody, signature, secret);\n\n if (!valid) {\n console.error(\"❌ Invalid signature\");\n return new Response(\"Invalid signature\", { status: 401, headers: cors });\n }\n\n console.log(\"✅ Signature verified\");\n\n // Parse JSON\n let payload: any = {};\n try {\n payload = JSON.parse(rawBody);\n } catch (e) {\n console.error(\"❌ Failed to parse JSON:\", e.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const eventName = payload.meta?.event_name;\n const customData = payload.meta?.custom_data;\n const data = payload.data?.attributes;\n const lsId = String(payload.data?.id ?? \"\");\n\n console.log(\"🍋 Event:\", eventName);\n console.log(\"📦 Custom data:\", JSON.stringify(customData));\n console.log(\"🔍 variant_id:\", data?.variant_id);\n console.log(\"🔍 status:\", data?.status);\n console.log(\"🔍 lsId:\", lsId);\n\n if (!data || !eventName) {\n console.warn(\"⚠️ No data or event — skipping\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n // ── Step 1: Resolve workspace_id ──────────────────────\n let workspaceId: string | null = customData?.workspace_id ?? null;\n let workspaceSlug: string | null = customData?.workspace_slug ?? null;\n\n // If we have workspace_slug but not workspace_id, get workspace_id from slug\n if (!workspaceId && workspaceSlug) {\n console.log(\"🔍 Looking up workspace by slug:\", workspaceSlug);\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug\")\n .eq(\"slug\", workspaceSlug)\n .maybeSingle();\n\n console.log(\"🔍 Workspace by slug:\", JSON.stringify(ws));\n console.log(\"🔍 Error:\", wsErr?.message ?? \"none\");\n\n if (ws) {\n workspaceId = ws.id;\n workspaceSlug = ws.slug;\n }\n }\n\n // If we have workspace_id but not workspace_slug, get workspace_slug from id\n if (workspaceId && !workspaceSlug) {\n console.log(\"🔍 Looking up workspace by id:\", workspaceId);\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug\")\n .eq(\"id\", workspaceId)\n .maybeSingle();\n\n console.log(\"🔍 Workspace by id:\", JSON.stringify(ws));\n console.log(\"🔍 Error:\", wsErr?.message ?? \"none\");\n\n if (ws) {\n workspaceId = ws.id;\n workspaceSlug = ws.slug;\n }\n }\n\n // If still no workspace, try by email\n if (!workspaceId) {\n const email = data.user_email || data.customer_email;\n console.log(\"⚠️ No workspace_id or slug, trying email:\", email);\n\n if (email) {\n const { data: user, error: userErr } = await supabase\n .from(\"profiles\")\n .select(\"id\")\n .eq(\"email\", email)\n .maybeSingle();\n\n console.log(\"🔍 User by email:\", JSON.stringify(user));\n console.log(\"🔍 User error:\", userErr?.message ?? \"none\");\n\n if (user) {\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug\")\n .eq(\"owner_id\", user.id)\n .maybeSingle();\n\n console.log(\"🔍 Workspace by owner_id:\", JSON.stringify(ws));\n console.log(\"🔍 Error:\", wsErr?.message ?? \"none\");\n\n if (ws) {\n workspaceId = ws.id;\n workspaceSlug = ws.slug;\n }\n }\n }\n }\n\n if (!workspaceId) {\n console.error(\"❌ Could not resolve workspace_id — aborting\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"✅ workspace_id:\", workspaceId);\n console.log(\"✅ workspace_slug:\", workspaceSlug);\n\n // ── Step 2: Check if subscription exists ──────────────\n const { data: existingRow, error: findErr } = await supabase\n .from(\"subscriptions\")\n .select(\"id, workspace_id, status\")\n .eq(\"workspace_id\", workspaceId)\n .maybeSingle();\n\n console.log(\"🔍 Existing row:\", JSON.stringify(existingRow));\n console.log(\"🔍 Find error:\", findErr?.message ?? \"none\");\n\n // ── Step 3: Build update/insert data ───────────────────\n const variantId = String(data.variant_id ?? \"\");\n const variantIdExists = variantId && variantId !== \"null\" && variantId !== \"undefined\";\n \n let updateData: any = {\n updated_at: new Date().toISOString(),\n };\n\n // Only set workspace_id and workspace_slug if we're inserting\n if (!existingRow) {\n updateData.workspace_id = workspaceId;\n updateData.workspace_slug = workspaceSlug;\n updateData.created_at = new Date().toISOString();\n }\n\n switch (eventName) {\n case \"subscription_created\":\n case \"subscription_updated\":\n case \"subscription_resumed\":\n case \"subscription_unpaused\":\n Object.assign(updateData, {\n ls_subscription_id: lsId || null,\n ls_customer_id: data.customer_id ? String(data.customer_id) : null,\n ls_order_id: data.order_id ? String(data.order_id) : null,\n ls_variant_id: variantIdExists ? variantId : null,\n subscription_plan: variantIdExists ? variantId : null,\n status: data.status ?? \"active\",\n cancelled: data.cancelled ?? false,\n pause: data.pause ?? null,\n billing_anchor: data.billing_anchor ?? 1,\n reset_day: data.billing_anchor ?? 1,\n card_brand: data.card_brand ?? null,\n card_last_four: data.card_last_four ?? null,\n trial_ends_at: data.trial_ends_at ?? null,\n renews_at: data.renews_at ?? null,\n ends_at: data.ends_at ?? null,\n url_update_payment: data.urls?.update_payment_method ?? null,\n url_customer_portal: data.urls?.customer_portal ?? null,\n url_update_subscription: data.urls?.update_subscription ?? null,\n test_mode: data.test_mode ?? false,\n });\n break;\n\n case \"subscription_cancelled\":\n Object.assign(updateData, {\n status: \"canceled\",\n cancelled: true,\n ends_at: data.ends_at ?? null,\n });\n break;\n\n case \"subscription_expired\": {\n // Get free plan variant\n const { data: freePlan } = await supabase\n .from(\"plans\")\n .select(\"ls_variant_id\")\n .ilike(\"name\", \"free\")\n .maybeSingle();\n\n Object.assign(updateData, {\n status: \"expired\",\n subscription_plan: freePlan?.ls_variant_id ?? null,\n ls_subscription_id: null,\n ls_variant_id: null,\n cancelled: true,\n ends_at: new Date().toISOString(),\n });\n break;\n }\n\n case \"subscription_paused\":\n Object.assign(updateData, {\n status: \"paused\",\n pause: data.pause ?? null,\n });\n break;\n\n case \"subscription_payment_failed\":\n Object.assign(updateData, {\n status: \"past_due\",\n });\n break;\n\n case \"subscription_payment_success\":\n case \"subscription_payment_recovered\":\n Object.assign(updateData, {\n status: \"active\",\n cancelled: false,\n });\n break;\n\n default:\n console.log(\"ℹ️ Unhandled event:\", eventName);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"📝 updateData:\", JSON.stringify(updateData));\n\n // ── Step 4: UPSERT (Insert or Update) ──────────────────\n let result;\n \n if (existingRow) {\n // Update existing row\n result = await supabase\n .from(\"subscriptions\")\n .update(updateData)\n .eq(\"workspace_id\", workspaceId)\n .select();\n } else {\n // Insert new row\n // Set required fields for insert\n updateData.workspace_id = workspaceId;\n updateData.workspace_slug = workspaceSlug;\n updateData.created_at = updateData.created_at || new Date().toISOString();\n \n result = await supabase\n .from(\"subscriptions\")\n .insert(updateData)\n .select();\n }\n\n console.log(\"✅ Result:\", JSON.stringify(result.data));\n console.log(\"❌ Error:\", result.error?.message ?? \"none\");\n\n if (result.error) {\n console.error(\"❌ Operation failed:\", result.error.message);\n } else if (!result.data || result.data.length === 0) {\n console.warn(\"⚠️ No rows affected for workspace_id:\", workspaceId);\n } else {\n console.log(\"✓ Row updated:\", result.data[0]?.id);\n }\n\n console.log(\"─────────────────────────────────\");\n return new Response(\"OK\", { status: 200, headers: cors });\n } catch (err: any) {\n console.error(\"❌ Critical error:\", err.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n}","createdAt",["D",1787835346887],"branchVersion","branchId","511a679e-53b6-11f1-94f4-ee650bb23af1","id","51199440-53b6-11f1-94f4-ee650bb23af1","weweb-qencode-webhook-test",["D",1779217793497],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","ed4ac4d0-3588-11f0-872d-e3a8a6a44321","pinnedFileId","a4a1762e-6116-11f1-a12c-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","0e2bf41e-0a63-4b9e-99fc-a6d26c3922f5","tursoName","5119944053b611f194f4ee650bb23af1","tursoHostname","5119944053b611f194f4ee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789501878689],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_107":103},"org",{"_100":99,"_101":-5,"_102":103,"_18":56,"_104":105,"_106":25},"branch",{"_13":89,"_33":90,"_45":44,"_91":46,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":47,"_98":99},"isOwned",293,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","sahil8","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ4TWVFQ2NUbHJXRlUwRHhVUXdEVzM2YkdFZyJ9","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_45":46,"_33":47,"_40":613,"_49":-5,"_50":25,"_51":52,"_53":52,"_54":38,"_55":-5,"_18":56,"_57":58,"_59":25,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":614,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":615,"_84":616,"_86":617,"_88":25},"tree",[455,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493],"files",[455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493],"counts",{"_444":63,"_445":275,"_446":63,"_447":448,"_449":450},"contents",[130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_45":437,"_33":438,"_31":439,"_171":-5,"_43":44,"_42":440,"_173":125,"_40":441,"_13":275,"_35":442,"_37":-5,"_24":25,"_177":-5,"_27":443},{"_45":430,"_33":431,"_31":432,"_171":-5,"_43":44,"_42":433,"_173":125,"_40":434,"_13":304,"_35":36,"_37":435,"_24":25,"_177":-5,"_27":436},{"_45":424,"_33":425,"_31":426,"_171":-5,"_43":44,"_42":216,"_173":125,"_40":427,"_13":224,"_35":36,"_37":428,"_24":25,"_177":-5,"_27":429},{"_45":417,"_33":418,"_31":419,"_171":-5,"_43":44,"_42":420,"_173":125,"_40":421,"_13":192,"_35":36,"_37":422,"_24":25,"_177":-5,"_27":423},{"_45":410,"_33":411,"_31":412,"_171":-5,"_43":44,"_42":413,"_173":125,"_40":414,"_13":224,"_35":36,"_37":415,"_24":25,"_177":-5,"_27":416},{"_45":402,"_33":403,"_31":404,"_171":-5,"_43":44,"_42":405,"_173":125,"_40":406,"_13":407,"_35":36,"_37":408,"_24":25,"_177":-5,"_27":409},{"_45":395,"_33":396,"_31":397,"_171":-5,"_43":44,"_42":398,"_173":125,"_40":399,"_13":63,"_35":36,"_37":400,"_24":25,"_177":-5,"_27":401},{"_45":388,"_33":389,"_31":390,"_171":-5,"_43":44,"_42":391,"_173":125,"_40":392,"_13":304,"_35":36,"_37":393,"_24":25,"_177":-5,"_27":394},{"_45":381,"_33":382,"_31":383,"_171":-5,"_43":44,"_42":384,"_173":125,"_40":385,"_13":200,"_35":36,"_37":386,"_24":25,"_177":-5,"_27":387},{"_45":374,"_33":375,"_31":376,"_171":-5,"_43":44,"_42":377,"_173":125,"_40":378,"_13":192,"_35":36,"_37":379,"_24":25,"_177":-5,"_27":380},{"_45":367,"_33":368,"_31":369,"_171":-5,"_43":44,"_42":370,"_173":125,"_40":371,"_13":216,"_35":36,"_37":372,"_24":25,"_177":-5,"_27":373},{"_45":360,"_33":361,"_31":362,"_171":-5,"_43":44,"_42":363,"_173":125,"_40":364,"_13":216,"_35":36,"_37":365,"_24":25,"_177":-5,"_27":366},{"_45":353,"_33":354,"_31":355,"_171":-5,"_43":44,"_42":356,"_173":125,"_40":357,"_13":175,"_35":36,"_37":358,"_24":25,"_177":-5,"_27":359},{"_45":346,"_33":347,"_31":348,"_171":-5,"_43":44,"_42":349,"_173":125,"_40":350,"_13":224,"_35":36,"_37":351,"_24":25,"_177":-5,"_27":352},{"_45":341,"_33":342,"_31":343,"_171":-5,"_43":44,"_42":175,"_173":125,"_40":344,"_13":224,"_35":36,"_37":339,"_24":25,"_177":-5,"_27":345},{"_45":334,"_33":335,"_31":336,"_171":-5,"_43":44,"_42":337,"_173":125,"_40":338,"_13":275,"_35":36,"_37":339,"_24":25,"_177":-5,"_27":340},{"_45":328,"_33":329,"_31":58,"_171":-5,"_43":44,"_42":330,"_173":125,"_40":331,"_13":224,"_35":36,"_37":332,"_24":25,"_177":-5,"_27":333},{"_45":321,"_33":322,"_31":323,"_171":-5,"_43":44,"_42":324,"_173":125,"_40":325,"_13":216,"_35":36,"_37":326,"_24":25,"_177":-5,"_27":327},{"_45":314,"_33":315,"_31":316,"_171":-5,"_43":44,"_42":317,"_173":125,"_40":318,"_13":224,"_35":36,"_37":319,"_24":25,"_177":-5,"_27":320},{"_45":307,"_33":308,"_31":309,"_171":-5,"_43":44,"_42":310,"_173":125,"_40":311,"_13":224,"_35":36,"_37":312,"_24":25,"_177":-5,"_27":313},{"_45":299,"_33":300,"_31":301,"_171":-5,"_43":44,"_42":302,"_173":125,"_40":303,"_13":304,"_35":36,"_37":305,"_24":25,"_177":-5,"_27":306},{"_45":292,"_33":293,"_31":294,"_171":-5,"_43":44,"_42":295,"_173":125,"_40":296,"_13":224,"_35":36,"_37":297,"_24":25,"_177":-5,"_27":298},{"_45":285,"_33":286,"_31":287,"_171":-5,"_43":44,"_42":288,"_173":125,"_40":289,"_13":216,"_35":36,"_37":290,"_24":25,"_177":-5,"_27":291},{"_45":278,"_33":279,"_31":280,"_171":-5,"_43":44,"_42":281,"_173":125,"_40":282,"_13":232,"_35":36,"_37":283,"_24":25,"_177":-5,"_27":284},{"_45":270,"_33":271,"_31":272,"_171":-5,"_43":44,"_42":273,"_173":125,"_40":274,"_13":275,"_35":36,"_37":276,"_24":25,"_177":-5,"_27":277},{"_45":263,"_33":264,"_31":265,"_171":-5,"_43":44,"_42":266,"_173":125,"_40":267,"_13":224,"_35":36,"_37":268,"_24":25,"_177":-5,"_27":269},{"_45":256,"_33":257,"_31":258,"_171":-5,"_43":44,"_42":259,"_173":125,"_40":260,"_13":200,"_35":36,"_37":261,"_24":25,"_177":-5,"_27":262},{"_45":249,"_33":250,"_31":251,"_171":-5,"_43":44,"_42":252,"_173":125,"_40":253,"_13":184,"_35":36,"_37":254,"_24":25,"_177":-5,"_27":255},{"_45":242,"_33":243,"_31":244,"_171":-5,"_43":44,"_42":245,"_173":125,"_40":246,"_13":63,"_35":36,"_37":247,"_24":25,"_177":-5,"_27":248},{"_45":235,"_33":236,"_31":237,"_171":-5,"_43":44,"_42":238,"_173":125,"_40":239,"_13":200,"_35":36,"_37":240,"_24":25,"_177":-5,"_27":241},{"_45":227,"_33":228,"_31":229,"_171":-5,"_43":44,"_42":230,"_173":125,"_40":231,"_13":232,"_35":36,"_37":233,"_24":25,"_177":-5,"_27":234},{"_45":219,"_33":220,"_31":221,"_171":-5,"_43":44,"_42":222,"_173":125,"_40":223,"_13":224,"_35":36,"_37":225,"_24":25,"_177":-5,"_27":226},{"_45":211,"_33":212,"_31":213,"_171":-5,"_43":44,"_42":214,"_173":125,"_40":215,"_13":216,"_35":36,"_37":217,"_24":25,"_177":-5,"_27":218},{"_45":203,"_33":204,"_31":205,"_171":-5,"_43":44,"_42":206,"_173":125,"_40":207,"_13":208,"_35":36,"_37":209,"_24":25,"_177":-5,"_27":210},{"_45":195,"_33":196,"_31":197,"_171":-5,"_43":44,"_42":198,"_173":125,"_40":199,"_13":200,"_35":36,"_37":201,"_24":25,"_177":-5,"_27":202},{"_45":187,"_33":188,"_31":189,"_171":-5,"_43":44,"_42":190,"_173":125,"_40":191,"_13":192,"_35":36,"_37":193,"_24":25,"_177":-5,"_27":194},{"_45":179,"_33":180,"_31":181,"_171":-5,"_43":44,"_42":182,"_173":125,"_40":183,"_13":184,"_35":36,"_37":185,"_24":25,"_177":-5,"_27":186},{"_45":168,"_33":169,"_31":170,"_171":-5,"_43":44,"_42":172,"_173":125,"_40":174,"_13":175,"_35":36,"_37":176,"_24":25,"_177":-5,"_27":178},"c2d596fa-5b55-11f1-9a0f-ee650bb23af1","weweb-webhook.ts","be54ba4e-58ed-11f1-a07a-ee650bb23af1","parentId",78,"latest",["D",1780055932410],14,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\"),\n Deno.env.get(\"superbasesecretkey\"),\n);\n\nexport default async function (req: Request) {\n // Health check\n if (req.method === \"GET\") {\n return new Response(\"✅ Webhook Active\", { status: 200 });\n }\n\n // CORS\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n\n if (req.method === \"POST\") {\n try {\n // 1. Extract form fields safely\n const formData = await req.formData();\n const taskToken = formData.get(\"task_token\") as string;\n const event = formData.get(\"event\") as string;\n const statusStr = formData.get(\"status\") as string;\n\n console.log(\"─────────────────────────────────\");\n console.log(\"📥 task_token:\", taskToken);\n console.log(\"📥 event:\", event);\n\n // 2. Validate essential keys\n if (!taskToken || !event) {\n console.warn(\"⚠️ Missing fields:\", { taskToken, event });\n return new Response(\"Missing essential fields\", { status: 200 });\n }\n\n // 3. Parse status JSON safely to avoid crashing the whole execution\n let data: any = {};\n try {\n if (statusStr) data = JSON.parse(statusStr);\n } catch (jsonErr) {\n console.warn(\"⚠️ Failed to parse Qencode status JSON string:\", jsonErr.message);\n }\n\n // Extract details with fallback structures\n const qError = Number(data.error) || (event === \"error\" ? 1 : 0);\n const qErrorDesc = data.error_description || data.error_message || (event === \"error\" ? \"Unknown encoding error occurred\" : null);\n const video = data.videos?.[0] ?? null;\n const videoUrl = video?.url ?? null;\n const duration = parseFloat(data.duration) || 0;\n\n console.log(\"📥 qError code:\", qError);\n console.log(\"📥 videoUrl:\", videoUrl);\n\n // 4. Map EVENT → status + percent\n let supabaseStatus: string;\n let fakePercent: number;\n\n if (event === \"queued\") {\n supabaseStatus = \"queued\";\n fakePercent = 10;\n } else if (event === \"converting\") {\n supabaseStatus = \"transcoding\";\n fakePercent = 30;\n } else if (event === \"converted\") {\n supabaseStatus = \"transcoding\";\n fakePercent = 70;\n } else if (event === \"saving\") {\n supabaseStatus = \"transcoding\";\n fakePercent = 85;\n } else if (event === \"saved\") {\n // If an upload error happened during the saved phase, route to failed\n supabaseStatus = qError === 0 ? \"complete\" : \"failed\";\n fakePercent = 100;\n } else if (event === \"error\") {\n supabaseStatus = \"failed\";\n fakePercent = 0;\n } else {\n console.warn(\"⚠️ Unknown event received:\", event);\n supabaseStatus = \"transcoding\";\n fakePercent = 0;\n }\n\n console.log(`📊 ${event} → ${supabaseStatus} → ${fakePercent}%`);\n\n // 5. Build dynamic update object\n const updateData: any = {\n status: supabaseStatus,\n processing_progress: fakePercent,\n event,\n updated_at: new Date().toISOString(),\n };\n\n if (supabaseStatus === \"complete\") {\n updateData.video_url = videoUrl;\n updateData.duration = Math.round(duration);\n }\n\n // Capture error reason securely if either condition matches a failure path\n if (supabaseStatus === \"failed\" || qError > 0) {\n updateData.status = \"failed\"; // Force status match if qError flagged a problem\n updateData.error_description = qErrorDesc || \"Transcoding or upload pipeline failed.\";\n }\n\n // 6. Execute update against Supabase\n const { data: updated, error } = await supabase\n .from(\"videos\")\n .update(updateData)\n .eq(\"task_token\", taskToken)\n .select();\n\n if (error) {\n console.error(\"❌ Supabase DB error:\", error.message);\n return new Response(\"Database Error\", { status: 200 });\n }\n\n if (!updated || updated.length === 0) {\n console.warn(\"⚠️ No video row matching task_token:\", taskToken);\n } else {\n console.log(\n \"✅ Successfully updated row:\",\n taskToken,\n \"→\",\n updateData.status,\n fakePercent + \"%\",\n );\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err) {\n console.error(\"❌ Critical system failure inside webhook:\", err.message);\n return new Response(\"Internal Processing Error\", { status: 200 });\n }\n }\n\n return new Response(\"Method not allowed\", { status: 405 });\n}","label",[169],"4b75b11d-0e2b-4064-a43d-a96722e3b2dc","weweb-webhook-3.2.ts","991e8726-81cb-11f1-b717-1607ee4eb77e",192,["D",1784284741296],2,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\n// Bunny Database — dedicated \"videos\" pipeline endpoint (per your Bruno collection)\nconst BUNNY_VIDEOS_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!; // e.g. https://01KT270SNQ0T40DJR9YX9WS01J-videos.lite.bunnydb.net/v2/pipeline\nconst BUNNY_VIDEOS_DB_TOKEN = Deno.env.get(\"bunnyVideosDbToken\")!;\n\nexport default async function (req: Request) {\n if (req.method === \"GET\") {\n return new Response(\"Webhook Active\", { status: 200 });\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const formData = await req.formData();\n const taskToken = formData.get(\"task_token\") as string;\n const event = formData.get(\"event\") as string;\n const callbackType = formData.get(\"callback_type\") as string;\n const statusStr = formData.get(\"status\") as string;\n const payloadStr = formData.get(\"payload\") as string;\n\n console.log(\"─────────────────────────────────\");\n console.log(\"callback_type:\", callbackType);\n console.log(\"event:\", event);\n console.log(\"task_token:\", taskToken);\n console.log(\"status raw:\", statusStr);\n\n if (!taskToken || !event) {\n return new Response(\"OK\", { status: 200 });\n }\n\n // Parse status JSON safely — handle null\n let data: any = {};\n try {\n if (statusStr && statusStr !== \"null\") {\n data = JSON.parse(statusStr);\n }\n } catch (e) {\n console.warn(\"Failed to parse status JSON\");\n }\n\n // Parse payload safely\n let payload: any = {};\n try {\n if (payloadStr && payloadStr !== \"null\") {\n payload = JSON.parse(payloadStr);\n }\n } catch (e) {}\n\n const videoId = payload.video_id ?? null;\n console.log(\"video_id from payload:\", videoId);\n\n // ── Progress map ──────────────────────────────────────────────────\n const progressMap: Record = {\n \"task|queued\": { status: \"queued\", pct: 5 },\n \"subtask|queued\": { status: \"queued\", pct: 10 },\n \"subtask|converting\": { status: \"converting\", pct: 30 },\n \"subtask|converted\": { status: \"converted\", pct: 70 },\n \"subtask|saving\": { status: \"saving\", pct: 85 },\n \"subtask|saved\": { status: \"saved\", pct: 95 },\n \"task|saved\": { status: \"complete\", pct: 100 },\n \"task|error\": { status: \"failed\", pct: 0 },\n \"subtask|error\": { status: \"failed\", pct: 0 },\n };\n\n const key = `${callbackType}|${event}`;\n const mapped = progressMap[key];\n\n if (!mapped) {\n console.log(\"Unknown key:\", key, \"skipping\");\n return new Response(\"OK\", { status: 200 });\n }\n\n console.log(`${key} → ${mapped.status} ${mapped.pct}%`);\n\n // ── Safely read from data (may be empty {}) ───────────────────────\n const qError = data && data.error ? Number(data.error) : 0;\n const qErrorDesc = data && data.error_description\n ? data.error_description\n : null;\n const duration = data && data.duration ? parseFloat(data.duration) : 0;\n\n // For task|saved: videos array is in data.videos\n // For subtask: data itself is the video object\n const videos = (data && Array.isArray(data.videos)) ? data.videos : [];\n const firstVideo = videos[0] ?? (callbackType === \"subtask\" ? data : null);\n const videoUrl = firstVideo && (firstVideo.url || firstVideo.download_url)\n ? (firstVideo.url || firstVideo.download_url)\n : null;\n const videoSize = firstVideo && firstVideo.size ? firstVideo.size : null;\n const bitrate = firstVideo && firstVideo.bitrate\n ? firstVideo.bitrate\n : null;\n const meta = firstVideo && firstVideo.meta ? firstVideo.meta : null;\n const width = meta ? (meta.resolution_width || meta.width || null) : null;\n const height = meta\n ? (meta.resolution_height || meta.height || null)\n : null;\n\n // Override if error\n const finalStatus = qError > 0 ? \"failed\" : mapped.status;\n const finalPct = qError > 0 ? 0 : mapped.pct;\n\n // ── Build update ──────────────────────────────────────────────────\n const updateData: any = {\n status: finalStatus,\n processing_progress: finalPct,\n task_token: taskToken,\n updated_at: new Date().toISOString(),\n };\n\n if (videoUrl) {\n updateData.video_url = videoUrl;\n }\n\n let finalDuration: number | null = null;\n let finalWidth: number | null = null;\n let finalHeight: number | null = null;\n let finalBitrate: number | null = null;\n let finalTranscodedSize: number | null = null;\n\n if (key === \"task|saved\") {\n if (duration) updateData.duration = finalDuration = Math.round(duration);\n if (width) updateData.width = finalWidth = width;\n if (height) updateData.height = finalHeight = height;\n if (bitrate) updateData.bitrate = finalBitrate = bitrate;\n if (videoSize) {\n finalTranscodedSize = Math.round(parseFloat(String(videoSize)) * 1024 * 1024);\n updateData.transcoded_size = finalTranscodedSize;\n // IMPORTANT: the workspace storage trigger watches file_size, not\n // transcoded_size — set both, or storage_used_bytes never updates.\n updateData.file_size = String(finalTranscodedSize);\n }\n }\n\n if (finalStatus === \"failed\") {\n updateData.error_description = qErrorDesc || \"Transcoding failed\";\n }\n\n console.log(\"updateData:\", JSON.stringify(updateData));\n\n // ── Update Supabase (source of truth) ──────────────────────────────\n // select workspaces(slug) too — needed to sync to Bunny Database below,\n // which keys videos by workspace_slug (text), not workspace_id (uuid)\n const query = videoId\n ? supabase.from(\"videos\").update(updateData).eq(\"id\", videoId)\n : supabase.from(\"videos\").update(updateData).eq(\"task_token\", taskToken);\n\n const { data: updated, error: dbError } = await query\n .select(\"id, task_token, workspace_id, folder_id, title, status, video_url, thumbnail_url, duration, workspaces(slug)\")\n ;\n\n if (dbError) {\n console.error(\"DB error:\", dbError.message);\n return new Response(\"OK\", { status: 200 });\n }\n\n if (!updated || updated.length === 0) {\n console.warn(\"No row found — task_token:\", taskToken, \"video_id:\", videoId);\n return new Response(\"OK\", { status: 200 });\n }\n\n const video = updated[0];\n console.log(\"✓ Updated:\", video.id, \"→\", finalStatus, finalPct + \"%\");\n\n // ── Sync to Bunny Database \"Video\" table (edge mirror) ─────────────\n // Explicit-call layer of the 3-layer sync pattern. Uses the same\n // /v2/pipeline format confirmed working in your Bruno collection.\n try {\n const workspaceSlug = (video as any).workspaces?.slug ?? null;\n\n if (!workspaceSlug) {\n console.warn(\"⚠️ No workspace_slug resolved — skipping Bunny Database sync\");\n } else {\n const bunnyRes = await fetch(BUNNY_VIDEOS_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_VIDEOS_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `\n INSERT INTO \"Video\" (\n video_id, workspace_id, workspace_slug, folder_id, file_name,\n mp4_url, thumbnail_url, duration, status,\n output_size_bytes, width, height, error_message, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(video_id) DO UPDATE SET\n status = excluded.status,\n mp4_url = excluded.mp4_url,\n thumbnail_url = excluded.thumbnail_url,\n duration = excluded.duration,\n output_size_bytes = excluded.output_size_bytes,\n width = excluded.width,\n height = excluded.height,\n error_message = excluded.error_message,\n updated_at = excluded.updated_at\n `,\n args: [\n { type: \"text\", value: String(video.id) },\n { type: \"text\", value: String(video.workspace_id) },\n { type: \"text\", value: workspaceSlug },\n { type: video.folder_id ? \"text\" : \"null\", value: video.folder_id ? String(video.folder_id) : null },\n { type: \"text\", value: video.title ?? \"untitled\" },\n { type: videoUrl ? \"text\" : \"null\", value: videoUrl },\n { type: video.thumbnail_url ? \"text\" : \"null\", value: video.thumbnail_url },\n { type: \"float\", value: finalDuration ?? 0 },\n { type: \"text\", value: finalStatus },\n { type: \"integer\", value: finalTranscodedSize ?? 0 },\n { type: \"integer\", value: finalWidth ?? 0 },\n { type: \"integer\", value: finalHeight ?? 0 },\n { type: finalStatus === \"failed\" ? \"text\" : \"null\", value: finalStatus === \"failed\" ? (qErrorDesc || \"Transcoding failed\") : null },\n { type: \"text\", value: new Date().toISOString() },\n ],\n },\n },\n ],\n }),\n });\n\n if (!bunnyRes.ok) {\n console.error(\"⚠️ Bunny Database sync failed:\", await bunnyRes.text());\n } else {\n console.log(\"✓ Synced to Bunny Database:\", video.id);\n }\n }\n } catch (bunnyErr: any) {\n // Never fail the webhook over an edge-sync error — Supabase already\n // has the correct data; the hourly cron safety net reconciles this.\n console.error(\"⚠️ Bunny Database sync error:\", bunnyErr.message);\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Critical error:\", err.message);\n return new Response(\"OK\", { status: 200 });\n }\n}",[180],"b1e89e07-6566-4076-a6b7-f4e192f799b4","weweb-webhook-3.1.ts","b14690de-6333-11f1-9917-1607ee4eb77e",190,["D",1784284722251],5,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nexport default async function (req: Request) {\n if (req.method === \"GET\") {\n return new Response(\"Webhook Active\", { status: 200 });\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const formData = await req.formData();\n const taskToken = formData.get(\"task_token\") as string;\n const event = formData.get(\"event\") as string;\n const callbackType = formData.get(\"callback_type\") as string;\n const statusStr = formData.get(\"status\") as string;\n const payloadStr = formData.get(\"payload\") as string;\n\n console.log(\"─────────────────────────────────\");\n console.log(\"callback_type:\", callbackType);\n console.log(\"event:\", event);\n console.log(\"task_token:\", taskToken);\n console.log(\"status raw:\", statusStr);\n\n if (!taskToken || !event) {\n return new Response(\"OK\", { status: 200 });\n }\n\n // Parse status JSON safely — handle null\n let data: any = {};\n try {\n if (statusStr && statusStr !== \"null\") {\n data = JSON.parse(statusStr);\n }\n } catch (e) {\n console.warn(\"Failed to parse status JSON\");\n }\n\n // Parse payload safely\n let payload: any = {};\n try {\n if (payloadStr && payloadStr !== \"null\") {\n payload = JSON.parse(payloadStr);\n }\n } catch (e) {}\n\n const videoId = payload.video_id ?? null;\n console.log(\"video_id from payload:\", videoId);\n\n // ── Progress map ──────────────────────────────────────────────────\n const progressMap: Record = {\n \"task|queued\": { status: \"queued\", pct: 5 },\n \"subtask|queued\": { status: \"queued\", pct: 10 },\n \"subtask|converting\": { status: \"converting\", pct: 30 },\n \"subtask|converted\": { status: \"converted\", pct: 70 },\n \"subtask|saving\": { status: \"saving\", pct: 85 },\n \"subtask|saved\": { status: \"saved\", pct: 95 },\n \"task|saved\": { status: \"complete\", pct: 100 },\n \"task|error\": { status: \"failed\", pct: 0 },\n \"subtask|error\": { status: \"failed\", pct: 0 },\n };\n\n const key = `${callbackType}|${event}`;\n const mapped = progressMap[key];\n\n if (!mapped) {\n console.log(\"Unknown key:\", key, \"skipping\");\n return new Response(\"OK\", { status: 200 });\n }\n\n console.log(`${key} → ${mapped.status} ${mapped.pct}%`);\n\n // ── Safely read from data (may be empty {}) ───────────────────────\n const qError = data && data.error ? Number(data.error) : 0;\n const qErrorDesc = data && data.error_description\n ? data.error_description\n : null;\n const duration = data && data.duration ? parseFloat(data.duration) : 0;\n\n // For task|saved: videos array is in data.videos\n // For subtask: data itself is the video object\n const videos = (data && Array.isArray(data.videos)) ? data.videos : [];\n const firstVideo = videos[0] ?? (callbackType === \"subtask\" ? data : null);\n const videoUrl = firstVideo && (firstVideo.url || firstVideo.download_url)\n ? (firstVideo.url || firstVideo.download_url)\n : null;\n const videoSize = firstVideo && firstVideo.size ? firstVideo.size : null;\n const bitrate = firstVideo && firstVideo.bitrate\n ? firstVideo.bitrate\n : null;\n const meta = firstVideo && firstVideo.meta ? firstVideo.meta : null;\n const width = meta ? (meta.resolution_width || meta.width || null) : null;\n const height = meta\n ? (meta.resolution_height || meta.height || null)\n : null;\n\n // Override if error\n const finalStatus = qError > 0 ? \"failed\" : mapped.status;\n const finalPct = qError > 0 ? 0 : mapped.pct;\n\n // ── Build update ──────────────────────────────────────────────────\n const updateData: any = {\n status: finalStatus,\n processing_progress: finalPct,\n task_token: taskToken,\n updated_at: new Date().toISOString(),\n };\n\n // Save video URL when available\n if (videoUrl) {\n updateData.video_url = videoUrl;\n }\n\n // Save full details only on task completion\n if (key === \"task|saved\") {\n if (duration) updateData.duration = Math.round(duration);\n if (width) updateData.width = width;\n if (height) updateData.height = height;\n if (bitrate) updateData.bitrate = bitrate;\n if (videoSize) {\n updateData.transcoded_size = Math.round(\n parseFloat(String(videoSize)) * 1024 * 1024,\n );\n }\n }\n\n if (finalStatus === \"failed\") {\n updateData.error_description = qErrorDesc || \"Transcoding failed\";\n }\n\n console.log(\"updateData:\", JSON.stringify(updateData));\n\n // ── Update Supabase ───────────────────────────────────────────────\n const query = videoId\n ? supabase.from(\"videos\").update(updateData).eq(\"id\", videoId)\n : supabase.from(\"videos\").update(updateData).eq(\"task_token\", taskToken);\n\n const { data: updated, error: dbError } = await query.select();\n\n if (dbError) {\n console.error(\"DB error:\", dbError.message);\n return new Response(\"OK\", { status: 200 });\n }\n\n if (!updated || updated.length === 0) {\n console.warn(\n \"No row found — task_token:\",\n taskToken,\n \"video_id:\",\n videoId,\n );\n } else {\n console.log(\n \"✓ Updated:\",\n updated[0].id,\n \"→\",\n finalStatus,\n finalPct + \"%\",\n );\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Critical error:\", err.message);\n return new Response(\"OK\", { status: 200 });\n }\n}",[188],"d565eefb-0893-46a6-affd-a7cf586b4707","weweb-security_json-superbase.ts","f87bcefa-83a0-11f1-8091-1607ee4eb77e",203,["D",1784544235309],6,"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Content-Type\": \"application/json\",\n};\n\n// Fields in security_json that are arrays (support add/remove/replace)\nconst ARRAY_FIELDS = [\"geo_blocking\", \"allowed_domains\"];\n// Fields that are plain booleans (support set only)\nconst BOOLEAN_FIELDS = [\"hotlink_protection\", \"signed_url_enabled\"];\n\nexport default async function (req: Request): Promise {\n console.log(\"═══════════════════════════════════════\");\n console.log(\"📥 Incoming request:\", req.method);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS });\n }\n\n try {\n // ── Log the RAW body text before attempting to parse it ────────────\n const rawText = await req.text();\n console.log(\"📄 Raw body text:\", rawText);\n console.log(\"📄 Raw body type:\", typeof rawText);\n console.log(\"📄 Raw body length:\", rawText?.length);\n\n let body: any;\n try {\n body = JSON.parse(rawText);\n } catch (parseErr: any) {\n console.error(\"❌ JSON.parse failed:\", parseErr.message);\n console.error(\"❌ This means the request body was not valid JSON text.\");\n console.error(\n \"❌ Raw text that failed to parse:\",\n JSON.stringify(rawText),\n );\n return new Response(\n JSON.stringify({\n error: \"Invalid JSON in request body\",\n details: parseErr.message,\n received: rawText,\n }),\n { status: 400, headers: CORS },\n );\n }\n\n console.log(\"✅ Parsed body:\", JSON.stringify(body));\n\n const { workspace_id, field, action, values } = body;\n console.log(\n \"🔍 workspace_id:\",\n workspace_id,\n \"| type:\",\n typeof workspace_id,\n );\n console.log(\"🔍 field:\", field, \"| type:\", typeof field);\n console.log(\"🔍 action:\", action, \"| type:\", typeof action);\n console.log(\"🔍 values:\", JSON.stringify(values), \"| type:\", typeof values);\n\n if (!workspace_id || !field || !action) {\n console.warn(\"⚠️ Missing required field(s)\");\n return new Response(\n JSON.stringify({\n error: \"workspace_id, field, and action are required\",\n received: { workspace_id, field, action, values },\n }),\n { status: 400, headers: CORS },\n );\n }\n\n if (!ARRAY_FIELDS.includes(field) && !BOOLEAN_FIELDS.includes(field)) {\n console.warn(\"⚠️ Unknown field:\", field);\n return new Response(\n JSON.stringify({\n error: `Unknown field \"${field}\". Must be one of: ${\n [...ARRAY_FIELDS, ...BOOLEAN_FIELDS].join(\", \")\n }`,\n }),\n { status: 400, headers: CORS },\n );\n }\n\n // ── Step 1: Find the workspace by ID ──────────────────────────────\n console.log(\"🔎 Looking up workspace with id:\", workspace_id);\n\n const { data: workspace, error: readError } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug, security_json\")\n .eq(\"id\", workspace_id)\n .single();\n\n if (readError) {\n console.error(\"❌ Supabase read error:\", JSON.stringify(readError));\n }\n console.log(\"📦 Workspace found:\", JSON.stringify(workspace));\n\n if (readError || !workspace) {\n return new Response(\n JSON.stringify({\n error: \"Workspace not found\",\n details: readError?.message,\n }),\n { status: 404, headers: CORS },\n );\n }\n\n const current = workspace.security_json ?? {};\n console.log(\"📋 Current security_json:\", JSON.stringify(current));\n\n let updatedValue: any;\n\n // ── Step 2: Apply the change based on field type + action ─────────\n if (BOOLEAN_FIELDS.includes(field)) {\n console.log(\"🔘 Processing as BOOLEAN field\");\n if (action !== \"set\") {\n console.warn(\"⚠️ Boolean field with wrong action:\", action);\n return new Response(\n JSON.stringify({\n error: `Boolean field \"${field}\" only supports action \"set\"`,\n received_action: action,\n }),\n { status: 400, headers: CORS },\n );\n }\n updatedValue = Boolean(values);\n console.log(\"🔘 Converted to boolean:\", updatedValue);\n } else {\n console.log(\"📚 Processing as ARRAY field\");\n const currentList: string[] = current[field] ?? [];\n const incoming: string[] = Array.isArray(values)\n ? values\n : [values].filter(Boolean);\n console.log(\n \"📚 currentList:\",\n JSON.stringify(currentList),\n \"| incoming:\",\n JSON.stringify(incoming),\n );\n\n if (action === \"add\") {\n updatedValue = Array.from(new Set([...currentList, ...incoming]));\n } else if (action === \"remove\") {\n updatedValue = currentList.filter((v) => !incoming.includes(v));\n } else if (action === \"replace\") {\n updatedValue = incoming;\n } else {\n console.warn(\"⚠️ Array field with unsupported action:\", action);\n return new Response(\n JSON.stringify({\n error:\n `Array field \"${field}\" supports action \"add\", \"remove\", or \"replace\"`,\n received_action: action,\n }),\n { status: 400, headers: CORS },\n );\n }\n }\n\n console.log(\"✅ updatedValue:\", JSON.stringify(updatedValue));\n\n const newSecurityJson = { ...current, [field]: updatedValue };\n console.log(\n \"📝 newSecurityJson to write:\",\n JSON.stringify(newSecurityJson),\n );\n\n // ── Step 3: Write it back ──────────────────────────────────────────\n const { error: writeError } = await supabase\n .from(\"workspaces\")\n .update({ security_json: newSecurityJson })\n .eq(\"id\", workspace_id);\n\n if (writeError) {\n console.error(\"❌ Supabase write error:\", JSON.stringify(writeError));\n return new Response(\n JSON.stringify({\n error: \"Failed to update\",\n details: writeError.message,\n }),\n { status: 500, headers: CORS },\n );\n }\n\n console.log(\"✅ Write succeeded\");\n\n const responseBody = {\n success: true,\n workspace_id,\n slug: workspace.slug,\n field,\n value: updatedValue,\n security_json: newSecurityJson,\n };\n console.log(\"📤 Sending response:\", JSON.stringify(responseBody));\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\n JSON.stringify(responseBody),\n { status: 200, headers: CORS },\n );\n } catch (err: any) {\n console.error(\"💥 UNCAUGHT ERROR:\", err.message);\n console.error(\"💥 Stack:\", err.stack);\n return new Response(\n JSON.stringify({ error: err.message, stack: err.stack }),\n { status: 500, headers: CORS },\n );\n }\n}",[196],"a3337e15-f724-4f0b-95ea-c986eed7f6df","weweb-api-2.ts","5deed3e2-58e8-11f1-904c-ee650bb23af1",95,["D",1780920954441],8,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\"),\n Deno.env.get(\"superbasesecretkey\"),\n);\n\nexport default async function (req: Request) {\n const headers = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers });\n }\n\n try {\n const body = await req.json();\n console.log(\"📥 Received from WeWeb:\", JSON.stringify(body));\n\n const {\n task_token,\n tus_id,\n source_url,\n workspace_id,\n folder_id,\n file_size,\n file_name,\n user_id,\n } = body;\n\n // Only task_token is required\n if (!task_token) {\n return new Response(\n JSON.stringify({ error: \"task_token is required\" }),\n { status: 400, headers },\n );\n }\n\n // Source — tus upload or external URL\n const source = tus_id ? `tus:${tus_id}` : source_url;\n\n if (!source) {\n return new Response(\n JSON.stringify({ error: \"tus_id or source_url required\" }),\n { status: 400, headers },\n );\n }\n\n // 1. Create Supabase row — only task_token required\n const insertData: any = {\n task_token,\n status: \"transcoding\",\n created_at: new Date().toISOString(),\n };\n\n // Add optional fields only if provided\n if (workspace_id) insertData.workspace_id = workspace_id;\n if (folder_id) insertData.folder_id = folder_id;\n if (file_size) insertData.file_size = file_size;\n if (file_name) insertData.title = file_name;\n\n const { data: video, error: dbError } = await supabase\n .from(\"videos\")\n .insert(insertData)\n .select()\n .single();\n\n if (dbError) {\n console.error(\"❌ Supabase error:\", dbError.message);\n return new Response(\n JSON.stringify({ error: dbError.message }),\n { status: 500, headers },\n );\n }\n\n console.log(\"✅ Supabase row created:\", video.id);\n\n // 2. Start Qencode encode\n const queryPayload = {\n query: {\n source,\n callback_url:\n \"https://sahil8--b14690de633311f199171607ee4eb77e.web.val.run\",\n use_subtask_callback: 1,\n format: [\n {\n output: \"mp4\",\n video_codec: \"libx264\",\n destination: {\n url: `b2://backblaze.com/Vvideos/${user_id ?? \"guest\"}/${\n file_name ?? \"video\"\n }.mp4`,\n key: Deno.env.get(\"b2key\"),\n secret: Deno.env.get(\"b2secret\"),\n },\n },\n ],\n },\n };\n\n const params = new URLSearchParams();\n params.append(\"task_token\", task_token);\n params.append(\"payload\", user_id ?? \"guest\");\n params.append(\"query\", JSON.stringify(queryPayload));\n\n console.log(`🚀 Starting Qencode for: ${task_token}`);\n\n const qencodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n body: params,\n });\n const qencodeData = await qencodeRes.json();\n\n if (qencodeData.error !== 0) {\n console.error(\"❌ Qencode error:\", qencodeData.message);\n\n // Rollback Supabase row\n await supabase.from(\"videos\").delete().eq(\"id\", video.id);\n\n return new Response(\n JSON.stringify({ error: qencodeData.message }),\n { status: 400, headers },\n );\n }\n\n console.log(\"✅ Qencode accepted job!\");\n\n return new Response(\n JSON.stringify({\n success: true,\n video_id: video.id,\n task_token,\n status: \"transcoding\",\n }),\n { headers },\n );\n } catch (err) {\n console.error(\"❌ Error:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers },\n );\n }\n}",[204],"b5aa0955-d705-40dd-b9ca-25c81ec966ae","weweb-api-2.1-url.ts","c207ed22-7eb4-11f1-afa6-1607ee4eb77e",178,["D",1783945164859],4,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\"),\n Deno.env.get(\"superbasesecretkey\"),\n);\n\nconst CORS_HEADERS = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\n// Derive a filename from the URL path if the caller didn't supply one\nfunction deriveFileNameFromUrl(url: string): string {\n try {\n const pathname = new URL(url).pathname;\n const last = pathname.split(\"/\").filter(Boolean).pop();\n return last || \"imported-video\";\n } catch {\n return \"imported-video\";\n }\n}\n\n// HEAD request to the remote URL to read Content-Length / filename hints\n// without downloading the full file yet\nasync function probeRemoteFile(url: string) {\n let fileSize: number | null = null;\n let fileName: string | null = null;\n\n try {\n const headRes = await fetch(url, { method: \"HEAD\" });\n\n const contentLength = headRes.headers.get(\"content-length\");\n if (contentLength) fileSize = parseInt(contentLength, 10);\n\n const disposition = headRes.headers.get(\"content-disposition\");\n const match = disposition?.match(/filename=\"?([^\"]+)\"?/i);\n if (match?.[1]) fileName = match[1];\n } catch (err) {\n console.warn(\"⚠️ HEAD request failed, will proceed without size/name hints:\", err.message);\n }\n\n return { fileSize, fileName };\n}\n\nexport default async function (req: Request) {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n try {\n const body = await req.json();\n console.log(\"📥 [url-import] Received from WeWeb:\", JSON.stringify(body));\n\n const {\n task_token,\n source_url,\n workspace_id,\n folder_id, // optional — no error if empty/missing\n file_name: providedFileName,\n user_id,\n } = body;\n\n if (!task_token) {\n return new Response(\n JSON.stringify({ error: \"task_token is required\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n if (!source_url) {\n return new Response(\n JSON.stringify({ error: \"source_url is required for the url-import endpoint\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n // Basic sanity check before we try anything else\n try {\n new URL(source_url);\n } catch {\n return new Response(\n JSON.stringify({ error: \"source_url is not a valid URL\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n // Extract file_size (and optionally file_name) from the remote file itself\n const { fileSize, fileName: probedFileName } = await probeRemoteFile(source_url);\n const file_name = providedFileName || probedFileName || deriveFileNameFromUrl(source_url);\n const file_size = fileSize; // may be null if the remote server didn't return Content-Length\n\n // 1. Create Supabase row\n const insertData: any = {\n task_token,\n status: \"transcoding\",\n created_at: new Date().toISOString(),\n };\n if (workspace_id) insertData.workspace_id = workspace_id;\n if (folder_id) insertData.folder_id = folder_id; // stays empty/omitted if not sent — no error\n if (file_size) insertData.file_size = file_size;\n if (file_name) insertData.title = file_name;\n\n const { data: video, error: dbError } = await supabase\n .from(\"videos\")\n .insert(insertData)\n .select()\n .single();\n\n if (dbError) {\n console.error(\"❌ Supabase error:\", dbError.message);\n return new Response(\n JSON.stringify({ error: dbError.message }),\n { status: 500, headers: CORS_HEADERS },\n );\n }\n console.log(\"✅ Supabase row created:\", video.id);\n\n // 2. Start Qencode encode — source is the remote URL directly, Qencode fetches it\n const queryPayload = {\n query: {\n source: source_url,\n callback_url: \"https://sahil8--b14690de633311f199171607ee4eb77e.web.val.run\",\n use_subtask_callback: 1,\n format: [\n {\n output: \"mp4\",\n video_codec: \"libx264\",\n destination: {\n url: `b2://backblaze.com/Vvideos/${user_id ?? \"guest\"}/${file_name}.mp4`,\n key: Deno.env.get(\"b2key\"),\n secret: Deno.env.get(\"b2secret\"),\n },\n },\n ],\n },\n };\n\n const params = new URLSearchParams();\n params.append(\"task_token\", task_token);\n params.append(\"payload\", user_id ?? \"guest\");\n params.append(\"query\", JSON.stringify(queryPayload));\n\n console.log(`🚀 [url-import] Starting Qencode for: ${task_token}`);\n const qencodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n body: params,\n });\n const qencodeData = await qencodeRes.json();\n\n if (qencodeData.error !== 0) {\n console.error(\"❌ Qencode error:\", qencodeData.message);\n await supabase.from(\"videos\").delete().eq(\"id\", video.id); // rollback\n\n // Distinguish \"bad/unreachable URL\" vs \"unsupported file\" for the WeWeb error states\n const isFetchError = /fetch|resolve|connect|url|download/i.test(qencodeData.message || \"\");\n return new Response(\n JSON.stringify({\n error: qencodeData.message,\n error_type: isFetchError ? \"bad_url\" : \"unsupported_file\",\n }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n console.log(\"✅ Qencode accepted job!\");\n return new Response(\n JSON.stringify({\n success: true,\n video_id: video.id,\n task_token,\n file_size,\n file_name,\n status: \"transcoding\",\n }),\n { headers: CORS_HEADERS },\n );\n } catch (err) {\n console.error(\"❌ Error:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: CORS_HEADERS },\n );\n }\n}",[212],"bc841b1a-7b04-4f35-ae74-9abb06c52e14","weweb-api-2.1-upload.ts","e651fede-7eb4-11f1-a645-1607ee4eb77e",224,["D",1787250847785],3,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\"),\n Deno.env.get(\"superbasesecretkey\"),\n);\n\nconst CORS_HEADERS = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\nexport default async function (req: Request) {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n try {\n const body = await req.json();\n console.log(\n \"📥 [upload-complete] Received from WeWeb:\",\n JSON.stringify(body),\n );\n\n const {\n task_token,\n tus_id,\n workspace_id,\n folder_id, // optional — no error if empty/missing\n file_size,\n file_name,\n user_id,\n } = body;\n\n if (!task_token) {\n return new Response(\n JSON.stringify({ error: \"task_token is required\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n if (!tus_id) {\n return new Response(\n JSON.stringify({\n error: \"tus_id is required for the upload-complete endpoint\",\n }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n const source = `tus:${tus_id}`;\n\n // 1. Create Supabase row\n const insertData: any = {\n task_token,\n status: \"transcoding\",\n created_at: new Date().toISOString(),\n };\n if (workspace_id) insertData.workspace_id = workspace_id;\n if (folder_id) insertData.folder_id = folder_id; // stays empty/omitted if not sent — no error\n if (file_size) insertData.file_size = file_size;\n if (file_name) insertData.title = file_name;\n\n const { data: video, error: dbError } = await supabase\n .from(\"videos\")\n .insert(insertData)\n .select()\n .single();\n\n if (dbError) {\n console.error(\"❌ Supabase error:\", dbError.message);\n return new Response(\n JSON.stringify({ error: dbError.message }),\n { status: 500, headers: CORS_HEADERS },\n );\n }\n console.log(\"✅ Supabase row created:\", video.id);\n\n // 2. Start Qencode encode\n const queryPayload = {\n query: {\n source,\n callback_url:\n \"https://sahil8--be54ba4e58ed11f1a07aee650bb23af1.web.val.run\",\n use_subtask_callback: 1,\n format: [\n {\n output: \"mp4\",\n video_codec: \"libx264\",\n destination: {\n url: `b2://backblaze.com/Vvideos/${user_id ?? \"guest\"}/${\n file_name ?? \"video\"\n }.mp4`,\n key: Deno.env.get(\"b2key\"),\n secret: Deno.env.get(\"b2secret\"),\n },\n },\n ],\n },\n };\n\n const params = new URLSearchParams();\n params.append(\"task_token\", task_token);\n params.append(\"payload\", user_id ?? \"guest\");\n params.append(\"query\", JSON.stringify(queryPayload));\n\n console.log(`🚀 [upload-complete] Starting Qencode for: ${task_token}`);\n const qencodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n body: params,\n });\n const qencodeData = await qencodeRes.json();\n\n if (qencodeData.error !== 0) {\n console.error(\"❌ Qencode error:\", qencodeData.message);\n await supabase.from(\"videos\").delete().eq(\"id\", video.id); // rollback\n return new Response(\n JSON.stringify({ error: qencodeData.message }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n console.log(\"✅ Qencode accepted job!\");\n return new Response(\n JSON.stringify({\n success: true,\n video_id: video.id,\n task_token,\n status: \"transcoding\",\n }),\n { headers: CORS_HEADERS },\n );\n } catch (err) {\n console.error(\"❌ Error:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: CORS_HEADERS },\n );\n }\n}",[220],"e7cbb80a-5b9a-11f1-8b7a-ee650bb23af1","weweb-api-2-transparent.ts","7fff3c30-59a9-11f1-acfc-ee650bb23af1",84,["D",1780085629696],10,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\"),\n Deno.env.get(\"superbasesecretkey\"),\n);\n\nexport default async function (req: Request) {\n const headers = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n // Handle preflight OPTIONS request for WeWeb/CORS\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers });\n }\n\n try {\n const body = await req.json();\n console.log(\"📥 Received from WeWeb:\", JSON.stringify(body));\n\n const {\n task_token,\n tus_id,\n source_url,\n workspace_id,\n folder_id,\n file_size,\n file_name,\n user_id,\n } = body;\n\n // Validation: task_token is required\n if (!task_token) {\n return new Response(\n JSON.stringify({ error: \"task_token is required\" }),\n { status: 400, headers },\n );\n }\n\n // Source selection: TUS direct upload or external source URL\n const source = tus_id ? `tus:${tus_id}` : source_url;\n\n if (!source) {\n return new Response(\n JSON.stringify({ error: \"tus_id or source_url required\" }),\n { status: 400, headers },\n );\n }\n\n // ==========================================================\n // 1. CREATE SUPABASE ROW (LOG AS TRANSCODING)\n // ==========================================================\n const insertData: any = {\n task_token,\n status: \"transcoding\",\n created_at: new Date().toISOString(),\n };\n\n // Add optional payload fields safely\n if (workspace_id) insertData.workspace_id = workspace_id;\n if (folder_id) insertData.folder_id = folder_id;\n if (file_size) insertData.file_size = file_size;\n if (file_name) insertData.title = file_name;\n\n const { data: video, error: dbError } = await supabase\n .from(\"videos\")\n .insert(insertData)\n .select()\n .single();\n\n if (dbError) {\n console.error(\"❌ Supabase insertion error:\", dbError.message);\n return new Response(\n JSON.stringify({ error: dbError.message }),\n { status: 500, headers },\n );\n }\n\n console.log(\"✅ Supabase row created successfully:\", video.id);\n\n // Parse the filename base to append clean transparent extensions\n const baseFileName = file_name\n ? file_name.replace(/\\.[^/.]+$/, \"\")\n : \"video\";\n const storagePath = `b2://backblaze.com/Vvideos/${\n user_id ?? \"guest\"\n }/${baseFileName}`;\n\n // ==========================================================\n // 2. DISPATCH TRULY TRANSPARENT WEBM PIPELINE TO QENCODE\n // ==========================================================\n const queryPayload = {\n query: {\n source,\n encoder_version: 1, // Ensures modern container rules are enforced\n callback_url:\n \"https://sahil8--be54ba4e58ed11f18a21ee650bb23af1.web.val.run\",\n use_subtask_callback: 1,\n format: [\n // 🌐 SINGLE OUTPUT: Google/Chromium Ecosystem (VP9 WebM with Alpha)\n {\n output: \"webm\",\n video_codec: \"libvpx-vp9\", // High-efficiency VP9 profile\n source_has_alpha: 1, // FORCES Qencode to extract and preserve alpha streams\n pix_format: \"yuva420p\", // Hardcodes the required video stream Alpha channel map\n color_space: 1, // Matches explicit color profiles\n color_range: 1,\n color_primaries: 1,\n color_trc: 1,\n destination: {\n url: `${storagePath}-chrome.webm`,\n key: Deno.env.get(\"b2key\"),\n secret: Deno.env.get(\"b2secret\"),\n },\n },\n ],\n },\n };\n\n // Serialize parameters into exact application/x-www-form-urlencoded format\n const params = new URLSearchParams();\n params.append(\"task_token\", task_token);\n params.append(\"payload\", user_id ?? \"guest\");\n params.append(\"query\", JSON.stringify(queryPayload));\n\n console.log(\n `🚀 Dispatching verified transparent WebM job to Qencode for token: ${task_token}`,\n );\n\n const qencodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n body: params,\n });\n const qencodeData = await qencodeRes.json();\n\n // ==========================================================\n // 3. ERROR HANDLER & SUPABASE ROLLBACK WRAPPER\n // ==========================================================\n if (qencodeData.error !== 0) {\n console.error(\"❌ Qencode payload rejected job:\", qencodeData.message);\n\n // Roll back the broken database record so your UI doesn't freeze on \"transcoding\" forever\n await supabase.from(\"videos\").delete().eq(\"id\", video.id);\n\n return new Response(\n JSON.stringify({ error: qencodeData.message }),\n { status: 400, headers },\n );\n }\n\n // ==========================================================\n // 4. SUCCESS RESPONSE\n // ==========================================================\n console.log(\"✅ Qencode job dispatched successfully:\", qencodeData);\n\n return new Response(\n JSON.stringify({\n success: true,\n message: \"Transparent video encoding started\",\n task_token: task_token,\n video_id: video.id,\n qencode_response: qencodeData,\n }),\n { status: 200, headers },\n );\n\n } catch (error) {\n console.error(\"❌ Unexpected error:\", error.message);\n\n return new Response(\n JSON.stringify({\n error: \"Internal server error\",\n message: error.message,\n }),\n { status: 500, headers },\n );\n }\n}",[228],"990f606e-efbd-4082-9288-907e03839136","val-ingest-dashboard-single.ts","85b71d74-718b-11f1-8351-1607ee4eb77e",151,["D",1782499025250],"/**\n * VideoFrame — Individual Video Analytics\n * ─────────────────────────────────────────────────────────────\n * Embed as iframe in WeWeb video page Analytics tab\n * OR open directly as a standalone page\n *\n * Usage:\n * ?video_id=vid_high_end_portfolio_01\n * ?video_id=vid_high_end_portfolio_01&days=7\n * ?video_id=vid_high_end_portfolio_01&workspace_slug=ws_xxx\n */\n\nimport sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function videoAnalytics(req: Request): Promise {\n\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"video_id\");\n const workspaceSlug = url.searchParams.get(\"workspace_slug\") ?? \"\";\n const days = parseInt(url.searchParams.get(\"days\") ?? \"30\");\n\n // ── No video_id — show picker ──────────────────────────────\n if (!videoId) {\n const videos = await sqlite.execute(\n `SELECT video_id, workspace_slug, COUNT(*) AS views, MAX(created_at) AS last_view\n FROM video_views\n GROUP BY video_id, workspace_slug\n ORDER BY views DESC`\n );\n\n const rows = videos.rows as any[];\n const links = rows.length === 0\n ? `

No video views recorded yet.

`\n : rows.map((r: any[]) => `\n \n

${r[0]}

${r[1] ?? \"—\"} · Last view: ${String(r[3]).split(\" \")[0]}

\n ${r[2]} views\n \n `).join(\"\");\n\n return new Response(`\nVideoFrame Analytics\n\n

Select a video

${links}

`,\n { headers: { \"Content-Type\": \"text/html\" } }\n );\n }\n\n // ── Helpers ────────────────────────────────────────────────\n const cutoff = (() => {\n const d = new Date();\n d.setDate(d.getDate() - days);\n return d.toISOString().split(\"T\")[0] + \" 00:00:00\";\n })();\n\n function fmt(sec: number): string {\n const s = Math.round(sec || 0);\n return `${Math.floor(s / 60)}:${String(s % 60).padStart(2, \"0\")}`;\n }\n\n function pctColor(pct: number): string {\n return pct >= 80 ? \"#1baf7a\" : pct >= 40 ? \"#eda100\" : \"#e24b4a\";\n }\n\n // ── Run all queries in parallel ────────────────────────────\n const [statsRes, chartRes, countryRes, bucketsRes, sessRes, hourlyRes] =\n await Promise.all([\n\n // 1. Summary stats\n sqlite.execute({\n sql: `\n SELECT\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views,\n ROUND(AVG(percent_watched)) AS avg_pct,\n ROUND(AVG(watch_duration)) AS avg_duration,\n ROUND(AVG(total_duration)) AS avg_length,\n MAX(watch_duration) AS max_duration,\n COUNT(CASE WHEN percent_watched >= 80 THEN 1 END) AS completed,\n COUNT(CASE WHEN percent_watched < 25 THEN 1 END) AS bounced,\n MIN(created_at) AS first_view,\n MAX(created_at) AS last_view\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n `,\n args: [videoId, cutoff],\n }),\n\n // 2. Views by day\n sqlite.execute({\n sql: `\n SELECT DATE(created_at) AS day,\n COUNT(*) AS total,\n COUNT(DISTINCT session_id) AS unique_v,\n ROUND(AVG(percent_watched)) AS avg_pct\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY day ORDER BY day ASC\n `,\n args: [videoId, cutoff],\n }),\n\n // 3. Countries\n sqlite.execute({\n sql: `\n SELECT country, COUNT(*) AS views, COUNT(DISTINCT session_id) AS unique_v\n FROM video_views\n WHERE video_id = ? AND created_at >= ?\n GROUP BY country ORDER BY views DESC LIMIT 8\n `,\n args: [videoId, cutoff],\n }),\n\n // 4. Watch depth buckets\n sqlite.execute({\n sql: `\n SELECT\n CASE\n WHEN percent_watched < 25 THEN '0–25%'\n WHEN percent_watched < 50 THEN '25–50%'\n WHEN percent_watched < 75 THEN '50–75%'\n WHEN percent_watched < 100 THEN '75–100%'\n ELSE '100%'\n END AS bucket,\n COUNT(*) AS views\n FROM video_views\n WHERE video_id = ? AND created_at >= ?\n GROUP BY bucket ORDER BY bucket ASC\n `,\n args: [videoId, cutoff],\n }),\n\n // 5. Recent sessions\n sqlite.execute({\n sql: `\n SELECT session_id, percent_watched, watch_duration,\n current_position, total_duration, country, created_at\n FROM video_views\n WHERE video_id = ?\n ORDER BY created_at DESC LIMIT 20\n `,\n args: [videoId],\n }),\n\n // 6. Views by hour of day (engagement pattern)\n sqlite.execute({\n sql: `\n SELECT CAST(strftime('%H', created_at) AS INTEGER) AS hour,\n COUNT(*) AS views\n FROM video_views\n WHERE video_id = ? AND created_at >= ?\n GROUP BY hour ORDER BY hour ASC\n `,\n args: [videoId, cutoff],\n }),\n ]);\n\n // ── Parse stats ────────────────────────────────────────────\n const s = statsRes.rows[0] as any[];\n const total = Number(s[0]) || 0;\n const unique = Number(s[1]) || 0;\n const avgPct = Number(s[2]) || 0;\n const avgDur = Number(s[3]) || 0;\n const avgLen = Number(s[4]) || 0;\n const completed = Number(s[6]) || 0;\n const bounced = Number(s[7]) || 0;\n const firstView = String(s[8] ?? \"—\").split(\" \")[0];\n const lastView = String(s[9] ?? \"—\").split(\" \")[0];\n const compPct = total > 0 ? Math.round((completed / total) * 100) : 0;\n const bouncePct = total > 0 ? Math.round((bounced / total) * 100) : 0;\n\n // ── Chart data ─────────────────────────────────────────────\n const chartRows = chartRes.rows as any[];\n const dayMap: Record = {};\n chartRows.forEach((r: any[]) => { dayMap[r[0]] = r; });\n\n const labels: string[] = [];\n const totals: number[] = [];\n const uniqs: number[] = [];\n for (let i = days - 1; i >= 0; i--) {\n const d = new Date();\n d.setDate(d.getDate() - i);\n const key = d.toISOString().split(\"T\")[0];\n const short = d.toLocaleDateString(\"en\", { month: \"short\", day: \"numeric\" });\n labels.push(short);\n totals.push(dayMap[key] ? Number(dayMap[key][1]) : 0);\n uniqs.push( dayMap[key] ? Number(dayMap[key][2]) : 0);\n }\n\n const maxBar = Math.max(...totals, 1);\n\n // ── Hourly data ────────────────────────────────────────────\n const hourlyRows = hourlyRes.rows as any[];\n const hourMap: Record = {};\n hourlyRows.forEach((r: any[]) => { hourMap[Number(r[0])] = Number(r[1]); });\n const maxHour = Math.max(...Object.values(hourMap), 1);\n\n // ── Flag / name maps ───────────────────────────────────────\n const FLAGS: Record = {\n IN:\"🇮🇳\",US:\"🇺🇸\",GB:\"🇬🇧\",DE:\"🇩🇪\",CA:\"🇨🇦\",AU:\"🇦🇺\",\n FR:\"🇫🇷\",SG:\"🇸🇬\",AE:\"🇦🇪\",NL:\"🇳🇱\",JP:\"🇯🇵\",BR:\"🇧🇷\",\n PK:\"🇵🇰\",NZ:\"🇳🇿\",ZA:\"🇿🇦\",NG:\"🇳🇬\",KE:\"🇰🇪\",BD:\"🇧🇩\",UNKNOWN:\"🌍\",\n };\n const CNAMES: Record = {\n IN:\"India\",US:\"United States\",GB:\"United Kingdom\",DE:\"Germany\",\n CA:\"Canada\",AU:\"Australia\",FR:\"France\",SG:\"Singapore\",\n AE:\"UAE\",NL:\"Netherlands\",JP:\"Japan\",BR:\"Brazil\",\n PK:\"Pakistan\",NZ:\"New Zealand\",ZA:\"South Africa\",UNKNOWN:\"Unknown\",\n };\n const BCOLORS: Record = {\n \"0–25%\":\"#e24b4a\",\"25–50%\":\"#eda100\",\"50–75%\":\"#2a78d6\",\"75–100%\":\"#1baf7a\",\"100%\":\"#4a3aa7\",\n };\n\n // ── Country rows ───────────────────────────────────────────\n const countryRows = countryRes.rows as any[];\n const totalCountry = countryRows.reduce((a: number, r: any[]) => a + Number(r[1]), 0) || 1;\n\n // ── Bucket rows ────────────────────────────────────────────\n const bucketRows = bucketsRes.rows as any[];\n const maxBucket = Math.max(...bucketRows.map((r: any[]) => Number(r[1])), 1);\n\n // ── Session rows ───────────────────────────────────────────\n const sessRows = sessRes.rows as any[];\n\n // ── Build HTML ─────────────────────────────────────────────\n const barW = Math.max(16, Math.floor(620 / Math.max(days, 7)) - 4);\n const barH = 120;\n\n const barChart = labels.map((label, i) => {\n const t = totals[i];\n const u = uniqs[i];\n const th = t > 0 ? Math.max(3, Math.round((t / maxBar) * barH)) : 0;\n const uh = u > 0 ? Math.max(3, Math.round((u / maxBar) * barH)) : 0;\n return `

${label}

`;\n }).join(\"\");\n\n const hourChart = Array.from({ length: 24 }, (_, h) => {\n const v = hourMap[h] ?? 0;\n const hh = v > 0 ? Math.max(3, Math.round((v / maxHour) * 50)) : 0;\n const label = h === 0 ? \"12a\" : h < 12 ? `${h}a` : h === 12 ? \"12p\" : `${h-12}p`;\n return `

0?3:0}px\">

${[0,6,12,18].includes(h)?label:\"\"}

`;\n }).join(\"\");\n\n const countryHTML = countryRows.length === 0\n ? `

No country data

`\n : countryRows.map((r: any[]) => {\n const code = String(r[0]);\n const n = Number(r[1]);\n const pct = Math.round((n / totalCountry) * 100);\n return `

\n ${FLAGS[code]??\"🌍\"}\n ${CNAMES[code]??code}\n

\n ${pct}%\n

`;\n }).join(\"\");\n\n const bucketHTML = bucketRows.length === 0\n ? `

No data yet

`\n : bucketRows.map((r: any[]) => {\n const bucket = String(r[0]);\n const n = Number(r[1]);\n const w = Math.round((n / maxBucket) * 100);\n const col = BCOLORS[bucket] ?? \"#2a78d6\";\n return `

\n ${bucket}\n

\n ${n} view${n!==1?\"s\":\"\"}\n

`;\n }).join(\"\");\n\n const sessHTML = sessRows.length === 0\n ? `

No sessions yet

`\n : `\n \n \n \n \n \n \n \n \n \n \n \n ${sessRows.map((r: any[]) => {\n const pct = Number(r[1]) || 0;\n const col = pctColor(pct);\n const date = String(r[6] ?? \"\").split(\" \")[0];\n return `\n \n \n \n \n \n \n `;\n }).join(\"\")}\n \n

Session	Watched	Duration	Stopped at	Country	Date
${String(r[0]).slice(0,18)}…	${pct}%	${fmt(Number(r[2]))}	${fmt(Number(r[3]))}	${FLAGS[String(r[5])] ?? r[5] ?? \"—\"}	${date}

`;\n\n const dayLinks = [7, 14, 30, 90].map(d =>\n `${d}d`\n ).join(\"\");\n\n const html = `\n\n\n \n \n Analytics — ${videoId}\n \n\n\n\n\n\n

\n\n \n

Total views

${total.toLocaleString()}

${unique} unique sessions

Avg watched

${avgPct}%

${compPct}% completed (80%+)

Avg watch time

${fmt(avgDur)}

of ${fmt(avgLen)} total length

Bounced

0?\"#e24b4a\":\"#1baf7a\"}\">${bounced}

${bouncePct}% watched under 25%

\n\n \n

\n Views over time\n

\n Total\n Unique\n

\n ${barChart}\n

\n First view ${firstView}\n Last view ${lastView}\n Period ${days} days\n

\n\n \n

Top countries${countryRows.length} countries

${countryHTML}

Watch depthby % watched

${bucketHTML}

\n\n \n

Views by hour of dayUTC

\n ${hourChart}\n

\n\n \n

\n Recent sessions\n ${sessRows.length} shown\n

${sessHTML}

\n\n

\n\n`;\n\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" }\n });\n}",[236],"af75c357-af9d-4ff3-b376-1f6817912571","val-ingest-dashboard-copy.ts","f3b84206-718d-11f1-8131-1607ee4eb77e",149,["D",1782498991828],"import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function analyticsDashboard(\n req: Request,\n): Promise {\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"video_id\") ??\n \"vid_high_end_portfolio_01\";\n const days = parseInt(url.searchParams.get(\"days\") ?? \"30\");\n const cutoff = (() => {\n const d = new Date();\n d.setDate(d.getDate() - days);\n return d.toISOString().split(\"T\")[0] + \" 00:00:00\";\n })();\n\n // ── Helpers ────────────────────────────────────────────────\n function fmt(sec: number): string {\n const s = Math.round(sec || 0);\n return `${Math.floor(s / 60)}:${String(s % 60).padStart(2, \"0\")}`;\n }\n\n // ── Query 1: Summary stats ─────────────────────────────────\n const statsRes = await sqlite.execute({\n sql: `\n SELECT\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views,\n ROUND(AVG(percent_watched)) AS avg_pct,\n ROUND(AVG(watch_duration)) AS avg_duration,\n ROUND(AVG(total_duration)) AS avg_length,\n COUNT(CASE WHEN percent_watched >= 80 THEN 1 END) AS completed,\n COUNT(CASE WHEN percent_watched < 25 THEN 1 END) AS bounced\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n `,\n args: [videoId, cutoff],\n });\n const s = statsRes.rows[0] as any[];\n const total = Number(s[0]) || 0;\n const unique = Number(s[1]) || 0;\n const avgPct = Number(s[2]) || 0;\n const avgDur = Number(s[3]) || 0;\n const avgLen = Number(s[4]) || 0;\n const completed = Number(s[5]) || 0;\n const bounced = Number(s[6]) || 0;\n\n // ── Query 2: Views by day ──────────────────────────────────\n const chartRes = await sqlite.execute({\n sql: `\n SELECT\n DATE(created_at) AS day,\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY day\n ORDER BY day ASC\n `,\n args: [videoId, cutoff],\n });\n const chartRows = chartRes.rows as any[];\n\n // Fill all days with 0\n const dayMap: Record = {};\n chartRows.forEach((r: any[]) => {\n dayMap[r[0]] = { t: Number(r[1]), u: Number(r[2]) };\n });\n const chartLabels: string[] = [];\n const chartTotals: number[] = [];\n const chartUniqs: number[] = [];\n for (let i = days - 1; i >= 0; i--) {\n const d = new Date();\n d.setDate(d.getDate() - i);\n const key = d.toISOString().split(\"T\")[0];\n const short = d.toLocaleDateString(\"en\", {\n month: \"short\",\n day: \"numeric\",\n });\n chartLabels.push(short);\n chartTotals.push(dayMap[key]?.t ?? 0);\n chartUniqs.push(dayMap[key]?.u ?? 0);\n }\n\n // ── Query 3: Countries ─────────────────────────────────────\n const countryRes = await sqlite.execute({\n sql: `\n SELECT country, COUNT(*) AS views\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY country\n ORDER BY views DESC\n LIMIT 8\n `,\n args: [videoId, cutoff],\n });\n const countryRows = countryRes.rows as any[];\n\n // ── Query 4: Watch depth buckets ───────────────────────────\n const bucketsRes = await sqlite.execute({\n sql: `\n SELECT\n CASE\n WHEN percent_watched < 25 THEN '0–25%'\n WHEN percent_watched < 50 THEN '25–50%'\n WHEN percent_watched < 75 THEN '50–75%'\n WHEN percent_watched < 100 THEN '75–100%'\n ELSE '100%'\n END AS bucket,\n COUNT(*) AS views\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY bucket\n ORDER BY bucket ASC\n `,\n args: [videoId, cutoff],\n });\n const bucketRows = bucketsRes.rows as any[];\n const maxBucket = Math.max(...bucketRows.map((r: any[]) => Number(r[1])), 1);\n\n // ── Query 5: Recent sessions ───────────────────────────────\n const sessRes = await sqlite.execute({\n sql: `\n SELECT session_id, percent_watched, watch_duration,\n current_position, total_duration, country, created_at\n FROM video_views\n WHERE video_id = ?\n ORDER BY created_at DESC\n LIMIT 15\n `,\n args: [videoId],\n });\n const sessRows = sessRes.rows as any[];\n\n // ── Query 6: All video IDs (for switcher) ──────────────────\n const videosRes = await sqlite.execute(\n `SELECT DISTINCT video_id, COUNT(*) AS views\n FROM video_views\n GROUP BY video_id\n ORDER BY views DESC\n LIMIT 20`,\n );\n const videoList = videosRes.rows as any[];\n\n // ── Build flag map ─────────────────────────────────────────\n const FLAGS: Record = {\n IN: \"🇮🇳\",\n US: \"🇺🇸\",\n GB: \"🇬🇧\",\n DE: \"🇩🇪\",\n CA: \"🇨🇦\",\n AU: \"🇦🇺\",\n FR: \"🇫🇷\",\n SG: \"🇸🇬\",\n AE: \"🇦🇪\",\n NL: \"🇳🇱\",\n JP: \"🇯🇵\",\n BR: \"🇧🇷\",\n PK: \"🇵🇰\",\n NZ: \"🇳🇿\",\n ZA: \"🇿🇦\",\n NG: \"🇳🇬\",\n KE: \"🇰🇪\",\n BD: \"🇧🇩\",\n UNKNOWN: \"🌍\",\n };\n const CNAMES: Record = {\n IN: \"India\",\n US: \"United States\",\n GB: \"United Kingdom\",\n DE: \"Germany\",\n CA: \"Canada\",\n AU: \"Australia\",\n FR: \"France\",\n SG: \"Singapore\",\n AE: \"UAE\",\n NL: \"Netherlands\",\n JP: \"Japan\",\n BR: \"Brazil\",\n PK: \"Pakistan\",\n NZ: \"New Zealand\",\n ZA: \"South Africa\",\n UNKNOWN: \"Unknown\",\n };\n\n // ── HTML builders ──────────────────────────────────────────\n function statCards(): string {\n const completedPct = total > 0 ? Math.round((completed / total) * 100) : 0;\n const bouncedPct = total > 0 ? Math.round((bounced / total) * 100) : 0;\n return `\n

Total views

${total.toLocaleString()}

${unique} unique sessions

Avg watched

${avgPct}%

${completedPct}% completed (80%+)

Avg duration

${fmt(avgDur)}

of ${fmt(avgLen)} total

Bounced

${bounced}

${bouncedPct}% watched under 25%

\n `;\n }\n\n function chartSection(): string {\n const barMax = Math.max(...chartTotals, 1);\n const barW = Math.max(20, Math.floor(560 / days) - 4);\n const barMaxH = 140;\n\n const bars = chartLabels.map((label, i) => {\n const t = chartTotals[i];\n const u = chartUniqs[i];\n const th = t > 0 ? Math.max(4, Math.round((t / barMax) * barMaxH)) : 0;\n const uh = u > 0 ? Math.max(4, Math.round((u / barMax) * barMaxH)) : 0;\n return `\n

0 ? 4 : 0\n }px\">

${label}

\n `;\n }).join(\"\");\n\n return `\n

\n Views over time\n

\n ${\n [7, 14, 30, 90].map((d) =>\n `${d}d`\n ).join(\"\")\n }\n

\n ${bars}\n

\n Total views\n Unique views\n

\n `;\n }\n\n function countriesSection(): string {\n if (countryRows.length === 0) {\n return `

No country data yet

`;\n }\n const totalC =\n countryRows.reduce((a: number, r: any[]) => a + Number(r[1]), 0) || 1;\n return countryRows.map((r: any[]) => {\n const code = String(r[0]);\n const n = Number(r[1]);\n const pct = Math.round((n / totalC) * 100);\n const flag = FLAGS[code] ?? \"🌍\";\n const name = CNAMES[code] ?? code;\n return `\n

\n ${flag}\n ${name}\n

\n ${pct}%\n

\n `;\n }).join(\"\");\n }\n\n function bucketsSection(): string {\n if (bucketRows.length === 0) {\n return `

No data yet

`;\n }\n const colors: Record = {\n \"0–25%\": \"#e24b4a\",\n \"25–50%\": \"#eda100\",\n \"50–75%\": \"#2a78d6\",\n \"75–100%\": \"#1baf7a\",\n \"100%\": \"#4a3aa7\",\n };\n return bucketRows.map((r: any[]) => {\n const bucket = String(r[0]);\n const n = Number(r[1]);\n const pct = Math.round((n / maxBucket) * 100);\n const col = colors[bucket] ?? \"#2a78d6\";\n return `\n

\n ${bucket}\n

\n ${n} view${\n n !== 1 ? \"s\" : \"\"\n }\n

\n `;\n }).join(\"\");\n }\n\n function sessionsSection(): string {\n if (sessRows.length === 0) {\n return `

No sessions yet

`;\n }\n const header = `\n

\n SessionWatchedDurationPositionCountryTime\n

\n `;\n const rows = sessRows.map((r: any[]) => {\n const pct = Number(r[1]) || 0;\n const col = pct >= 80 ? \"#1baf7a\" : pct >= 40 ? \"#eda100\" : \"#e24b4a\";\n const date = String(r[6] ?? \"\").split(\" \")[0];\n return `\n

\n ${\n String(r[0]).slice(0, 20)\n }…\n ${pct}%\n ${fmt(Number(r[2]))}\n ${fmt(Number(r[3]))}\n ${FLAGS[String(r[5])] ?? r[5]}\n ${date}\n

\n `;\n }).join(\"\");\n return header + rows;\n }\n\n function videoSwitcher(): string {\n if (videoList.length <= 1) return \"\";\n const links = videoList.map((r: any[]) => {\n const vid = String(r[0]);\n const views = Number(r[1]);\n const active = vid === videoId;\n return `\n ${vid}\n ${views}\n `;\n }).join(\"\");\n return `\n

Videos

${links}

\n `;\n }\n\n // ── Full HTML page ─────────────────────────────────────────\n const html = `\n\n\n \n \n VideoFrame Analytics — ${videoId}\n \n\n\n\n \n\n

\n\n ${\n videoList.length > 1 ? `` : \"\"\n }\n\n

\n\n ${statCards()}\n ${chartSection()}\n\n

Top countries

${countriesSection()}

Watch depth

${bucketsSection()}

\n\n

\n Recent sessions\n ${sessRows.length} shown\n

${sessionsSection()}

\n\n

\n\n\n`;\n\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}",[243],"94cb8732-c8f7-4e08-8c4d-b72d23d60923","user-api-verify.ts","0d9a19a0-6bd6-11f1-9898-1607ee4eb77e",132,["D",1781870375796],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!\n);\n\nexport default async function handler(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n // ── Extract API key from Authorization header ──────────────────────\n const authHeader = req.headers.get(\"Authorization\") ?? \"\";\n const rawKey = authHeader.replace(\"Bearer \", \"\").trim();\n\n if (!rawKey) {\n return new Response(\n JSON.stringify({ error: \"Missing API key\", code: \"UNAUTHORIZED\" }),\n { status: 401, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"Verifying key:\", rawKey.slice(0, 14) + \"...\");\n\n // ── Call verify function via Supabase RPC ───────────────────────────\n const { data, error } = await supabase\n .rpc(\"verify_workspace_api_key\", { p_raw_key: rawKey });\n\n if (error) {\n console.error(\"RPC error:\", error.message);\n return new Response(\n JSON.stringify({ error: \"Verification failed\" }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n const result = data?.[0];\n\n if (!result || !result.valid) {\n console.log(\"Invalid API key\");\n return new Response(\n JSON.stringify({ error: \"Invalid API key\", code: \"UNAUTHORIZED\" }),\n { status: 401, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"✓ Valid key for workspace:\", result.slug);\n\n // ── Key is valid — proceed with your actual logic ───────────────────\n // Example: return workspace info\n return new Response(\n JSON.stringify({\n ok: true,\n workspace_id: result.workspace_id,\n slug: result.slug,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n}",[250],"6c43c1e9-fd09-4938-9704-8c3ea711b54e","user-api-gen.ts","96963980-6bd3-11f1-bc05-1607ee4eb77e",131,["D",1781870347128],"// Separate Val.town endpoint for key generation\nimport { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nexport default async function generateKey(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n const { workspace_id } = await req.json();\n\n if (!workspace_id) {\n return new Response(\n JSON.stringify({ error: \"Missing workspace_id\" }),\n { status: 400, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n const { data, error } = await supabase\n .rpc(\"generate_workspace_api_key\", { p_workspace_id: workspace_id });\n\n if (error) {\n return new Response(\n JSON.stringify({ error: error.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n const result = data?.[0];\n\n return new Response(\n JSON.stringify({\n raw_key: result.raw_key, // show ONCE to user\n prefix: result.prefix,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n}",[257],"7377c18a-cff9-42c5-af29-07c6e8ffe555","turso-1.ts","47dff6d8-7de8-11f1-9c3f-1607ee4eb77e",168,["D",1783857236190],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nexport default async function (req: Request): Promise {\n // 1. Enforce that only POST requests are processed\n if (req.method !== \"POST\") {\n return new Response(\n JSON.stringify({ error: \"Method not allowed. Use POST.\" }),\n {\n status: 405,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n try {\n // 2. Read the raw incoming body payload\n const payload = await req.json();\n\n // Extract the flat operational columns\n const {\n workspace_id,\n slug,\n plan_tier,\n subscription_status,\n bandwidth_used_gb,\n bandwidth_limit_gb,\n bandwidth_status,\n } = payload;\n\n // 3. Isolate and package the dynamic security properties\n const securityObj = {\n signed_url_enabled: payload.signed_url_enabled ?? false,\n geo_blocking: payload.geo_blocking ||\n { enabled: false, allowed_countries: [] },\n allowed_domains: payload.allowed_domains || [],\n };\n\n // 4. Execute the DB update statement using standard bindings\n await sqlite.execute({\n sql: `INSERT INTO workspaces (\n workspace_id, slug, plan_tier, subscription_status, \n bandwidth_used_gb, bandwidth_limit_gb, bandwidth_status, security_json\n ) VALUES (:id, :slug, :tier, :status, :used, :limit, :b_status, :security)\n ON CONFLICT(workspace_id) DO UPDATE SET\n slug = excluded.slug,\n plan_tier = excluded.plan_tier,\n subscription_status = excluded.subscription_status,\n bandwidth_used_gb = excluded.bandwidth_used_gb,\n bandwidth_limit_gb = excluded.bandwidth_limit_gb,\n bandwidth_status = excluded.bandwidth_status,\n security_json = excluded.security_json,\n updated_at = cast(strftime('%s', 'now') as integer);`,\n args: {\n id: workspace_id,\n slug: slug,\n tier: plan_tier || \"free\",\n status: subscription_status || \"active\",\n used: bandwidth_used_gb || 0.0,\n limit: bandwidth_limit_gb || 100.0,\n b_status: bandwidth_status || \"ok\",\n // The magic step: turns the JS object cleanly into a valid text string for SQLite\n security: JSON.stringify(securityObj),\n },\n });\n\n return new Response(\n JSON.stringify({ success: true, message: \"Workspace sync completed.\" }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n } catch (err) {\n return new Response(\n JSON.stringify({\n error: \"Failed to process request\",\n details: err.message,\n }),\n {\n status: 500,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n}",[264],"7c061a45-1f2d-4900-8b47-d08f69ade354","turso-1-copy.ts","95cb97b0-7dea-11f1-af20-1607ee4eb77e",170,["D",1783858221881],1,"export default async function () {\n // 1. Replace this with your actual live HTTP Val URL\n const targetUrl =\n \"https://sahil8--47dff6d87de811f19c3f1607ee4eb77e.web.val.run\";\n\n // 2. Your exact test payload mirroring your schema properties\n const testPayload = {\n workspace_id: \"2bc2838e-4d28-4c38-8329-615ea34f4654\",\n slug: \"acme-portfolio\",\n plan_tier: \"pro\",\n subscription_status: \"active\",\n bandwidth_used_gb: 842.3,\n bandwidth_limit_gb: 1000,\n bandwidth_status: \"ok\",\n signed_url_enabled: true,\n geo_blocking: {\n enabled: true,\n allowed_countries: [\"US\", \"CA\", \"IN\"],\n },\n allowed_domains: [\"myportfolio.com\", \"www.myportfolio.com\"],\n };\n\n // 3. Fire the request using a true POST method block\n const response = await fetch(targetUrl, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(testPayload),\n });\n\n // 4. Print out what the HTTP Val returns to check if it succeeded\n const result = await response.json();\n console.log(\"Response from your endpoint:\", result);\n}",[271],"5f12fd7c-579c-11f1-b1b8-ee650bb23af1","transparent-video.ts","e74f3afa-578f-11f1-a17e-ee650bb23af1",47,["D",1779646454305],"export default async function (req: Request) {\n if (req.method === \"GET\") {\n return new Response(\"🚀 POST to trigger alpha test\", { status: 200 });\n }\n\n try {\n const taskToken = \"678e72f8ddf002f1ac9c010badc5b08\"; // 👈 Ensure this is a fresh unconsumed token\n\n const qencodeQuery = {\n query: {\n encoder_version: \"2\",\n source: \"https://nyc3.s3.qencode.com/qencode/samples/4k-sample.mov\",\n format: [\n {\n output: \"webm\",\n video_codec: \"libvpx-vp9\",\n height: 360,\n optimize_bitrate: 0,\n video_codec_parameters: {\n pixel_format: \"yuva420p\",\n },\n destination: {\n url: \"b2://backblaze.com/Vvideos/alpha-sample-chrome.webm\",\n key: \"b2key\",\n secret: \"b2secret\",\n },\n },\n {\n output: \"mp4\",\n video_codec: \"libx265\",\n height: 360,\n optimize_bitrate: 0,\n video_codec_parameters: {\n pixel_format: \"yuva420p10le\",\n vtag: \"hvc1\",\n },\n destination: {\n url: \"b2://backblaze.com/Vvideos/alpha-sample-safari.mp4\",\n key: \"b2key\",\n secret: \"b2secret\",\n },\n },\n ],\n },\n };\n\n const formParams = new URLSearchParams();\n formParams.append(\"task_token\", taskToken);\n formParams.append(\"payload\", \"alpha_test\");\n formParams.append(\"query\", JSON.stringify(qencodeQuery));\n\n const response = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: formParams,\n });\n\n const responseText = await response.text();\n console.log(\"📥 Server Response:\", responseText);\n\n return new Response(responseText, {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n } catch (error) {\n return new Response(JSON.stringify({ error: error.message }), {\n status: 500,\n });\n }\n}",[279],"335616e8-4e4e-46df-b1c7-f8c2bb357fad","tinybird.ts","a0d5ba70-7190-11f1-ad8a-1607ee4eb77e",156,["D",1782500485465],"// Add this inside your existing ingest val\n// After the SQLite insert — send to Tinybird as well\n\nconst TINYBIRD_TOKEN = Deno.env.get(\"tinybird\")!;\nconst TINYBIRD_URL =\n \"https://api.europe-west2.gcp.tinybird.co/v0/events?name=video_events\";\n\nawait fetch(TINYBIRD_URL, {\n method: \"POST\",\n headers: { \"Authorization\": `Bearer ${TINYBIRD_TOKEN}` },\n body: JSON.stringify({\n video_id: String(vid_high_end_portfolio_01),\n workspace_slug: String(workspace_slug),\n percent_watched: pct,\n watch_duration: finalDuration,\n current_position: finalPosition,\n total_duration: finalTotal,\n country: finalCountry,\n session_id: finalSessionId,\n timestamp: new Date().toISOString().replace(\"T\", \" \").split(\".\")[0],\n }),\n});\n\nconsole.log(\"✓ Sent to Tinybird\");",[286],"de040b42-2a85-4c5b-85a1-fa113567aee6","test-val.ts","743077a0-853e-11f1-9a8f-1607ee4eb77e",221,["D",1784663887637],"// Minimal test receiver — logs whatever gets POSTed to it, returns it back.\n// Use this to confirm what a webhook/API call is actually sending,\n// before wiring it into a real endpoint.\n\nexport default async function testReceiver(req: Request): Promise {\n const CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Content-Type\": \"application/json\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS });\n }\n\n if (req.method === \"GET\") {\n return new Response(JSON.stringify({ status: \"Test receiver is active\" }), {\n status: 200,\n headers: CORS,\n });\n }\n\n try {\n const rawText = await req.text();\n console.log(\"═══════════════════════════════════════\");\n console.log(\"Method:\", req.method);\n console.log(\"Headers:\", JSON.stringify(Object.fromEntries(req.headers)));\n console.log(\"Raw body:\", rawText);\n\n let parsed: any = null;\n try {\n parsed = JSON.parse(rawText);\n console.log(\"Parsed JSON:\", JSON.stringify(parsed, null, 2));\n } catch {\n console.log(\"Body is not valid JSON — treating as plain text/form data\");\n }\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\n JSON.stringify({\n received: true,\n method: req.method,\n raw_body: rawText,\n parsed_body: parsed,\n headers: Object.fromEntries(req.headers),\n }),\n { status: 200, headers: CORS },\n );\n } catch (err: any) {\n console.error(\"Error reading request:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: CORS },\n );\n }\n}",[293],"f8bc3ce7-ebae-47ea-b7d8-3c94f84997ec","sync-sbase-bunny-setting.json.ts","f04331d8-84f4-11f1-b1fb-1607ee4eb77e",217,["D",1784637667486],9,"// Receives Supabase's Database Webhook, fired when setting_json changes\n// on the workspaces table. Finds the matching row in Bunny Database by\n// workspace id, updates its setting_json column to match.\n\nconst BUNNY_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!;\nconst BUNNY_DB_TOKEN = Deno.env.get(\"bunny_db_token\")!;\n\nexport default async function settingJsonWebhook(req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const payload = await req.json();\n const { type, record, old_record } = payload;\n\n console.log(\"═══════════════════════════════════════\");\n console.log(\"Supabase webhook fired:\", type);\n\n if (type === \"DELETE\") {\n console.log(\"Workspace deleted, nothing to sync:\", old_record?.id);\n return new Response(\"OK\", { status: 200 });\n }\n\n const workspaceId = record?.id;\n const settingJson = record?.setting_json;\n\n console.log(\"workspace id:\", workspaceId);\n console.log(\"setting_json:\", JSON.stringify(settingJson));\n\n if (!workspaceId || !settingJson) {\n console.warn(\"Missing workspace id or setting_json — skipping\");\n return new Response(\"OK\", { status: 200 });\n }\n\n const bunnyRes = await fetch(BUNNY_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `UPDATE \"Workspace\" SET \"setting_json\" = ? WHERE \"workspace_id\" = ?`,\n args: [\n { type: \"text\", value: JSON.stringify(settingJson) },\n { type: \"text\", value: String(workspaceId) },\n ],\n },\n },\n ],\n }),\n });\n\n const bunnyText = await bunnyRes.text();\n\n if (!bunnyRes.ok) {\n console.error(\"Bunny Database update failed:\", bunnyText);\n return new Response(\"OK\", { status: 200 });\n }\n\n console.log(\"Bunny Database response:\", bunnyText);\n console.log(\"Synced setting_json for workspace:\", workspaceId);\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Webhook error:\", err.message);\n return new Response(\"OK\", { status: 200 });\n }\n}",[300],"2187a7a0-9a22-4cd5-829d-df607bb04f9c","sync-sbase-bunny-security.json-copy.ts","4f01ae76-84fe-11f1-a8f5-1607ee4eb77e",214,["D",1784637434026],"// Receives Supabase's Database Webhook, fired ONLY when security_json\n// changes on the workspaces table (see trigger_workspace_security_sync,\n// which has a WHEN clause filtering to just this column — so this\n// endpoint never fires for unrelated updates like bandwidth_used).\n//\n// Flow: Supabase workspaces.security_json changes\n// → Postgres trigger fires automatically\n// → THIS endpoint receives { type, record, old_record }\n// → finds the matching row in Bunny Database by workspace id\n// → updates security_json there too\n\nconst BUNNY_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!; // e.g. https://your-db.bunnydb.net/v2/pipeline\nconst BUNNY_DB_TOKEN = Deno.env.get(\"bunny_db_token\")!;\n\nexport default async function securityJsonWebhook(req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n // Supabase Database Webhook payload shape: { type, table, record, old_record, schema }\n const payload = await req.json();\n const { type, record, old_record } = payload;\n\n console.log(\"═══════════════════════════════════════\");\n console.log(\"Supabase webhook fired:\", type);\n\n // DELETE: nothing to sync — a deleted workspace has no security settings to mirror\n if (type === \"DELETE\") {\n console.log(\"Workspace deleted, nothing to sync:\", old_record?.id);\n return new Response(\"OK\", { status: 200 });\n }\n\n // INSERT or UPDATE — record has the full current row\n const workspaceId = record?.id;\n const securityJson = record?.security_json;\n\n console.log(\"workspace id:\", workspaceId);\n console.log(\"security_json:\", JSON.stringify(securityJson));\n\n if (!workspaceId || !securityJson) {\n console.warn(\"Missing workspace id or security_json — skipping\");\n return new Response(\"OK\", { status: 200 });\n }\n\n // ── Find the matching row in Bunny Database by workspace id, then update ──\n const bunnyRes = await fetch(BUNNY_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `UPDATE \"Workspace\" SET \"security_json\" = ? WHERE \"workspace_id\" = ?`,\n args: [\n { type: \"text\", value: JSON.stringify(securityJson) },\n { type: \"text\", value: String(workspaceId) },\n ],\n },\n },\n ],\n }),\n });\n\n const bunnyText = await bunnyRes.text();\n\n if (!bunnyRes.ok) {\n console.error(\"Bunny Database update failed:\", bunnyText);\n // Don't fail the webhook response over this — Supabase already has the\n // correct data, and your hourly reconciliation cron is the safety net.\n return new Response(\"OK\", { status: 200 });\n }\n\n console.log(\"Bunny Database response:\", bunnyText);\n console.log(\"Synced security_json for workspace:\", workspaceId);\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Webhook error:\", err.message);\n return new Response(\"OK\", { status: 200 }); // always 200 so Supabase doesn't retry-storm\n }\n}",[308],"d97fc039-beba-4e55-9fd3-c38bef4d1134","superbase-webhook.ts","44c3b722-81e0-11f1-98a1-1607ee4eb77e",196,["D",1784293740578],"// Receives Supabase's native Database Webhook payload (fires automatically\n// on INSERT/UPDATE/DELETE to the videos table — no manual call needed from\n// api-2/api-3/anywhere else). This is Layer 2 of the 3-layer sync pattern:\n// Layer 1 = explicit call at mutation point (already built in api-3, update-video-settings)\n// Layer 2 = this file — catches changes from ANY source, not just your own endpoints\n// Layer 3 = hourly cron reconciliation (not yet built)\n\nconst BUNNY_VIDEOS_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!;\nconst BUNNY_VIDEOS_DB_TOKEN = Deno.env.get(\"bunny_db_token\")!;\n\nexport default async function supabaseVideosWebhook(\n req: Request,\n): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n // Supabase Database Webhook payload shape:\n // { type: \"INSERT\" | \"UPDATE\" | \"DELETE\", table, record, old_record, schema }\n const payload = await req.json();\n const { type, record, old_record } = payload;\n\n console.log(\"Supabase webhook fired:\", type, record?.id ?? old_record?.id);\n\n if (type === \"DELETE\") {\n // Remove from Bunny Database too\n const videoId = old_record?.id;\n if (!videoId) return new Response(\"OK\", { status: 200 });\n\n await fetch(BUNNY_VIDEOS_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_VIDEOS_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [{\n type: \"execute\",\n stmt: {\n sql: `DELETE FROM \"Video\" WHERE video_id = ?`,\n args: [{ type: \"text\", value: String(videoId) }],\n },\n }],\n }),\n });\n\n return new Response(\"OK\", { status: 200 });\n }\n\n // INSERT or UPDATE — record has the full current row\n if (!record?.id) return new Response(\"OK\", { status: 200 });\n\n // Need workspace_slug, which isn't on the videos row itself —\n // Supabase's webhook payload only gives you the raw row, no joins.\n // Fetch it separately (small extra query, but keeps this endpoint\n // simple and not dependent on payload shape assumptions).\n const wsRes = await fetch(\n `${\n Deno.env.get(\"superbaseurl\")\n }/rest/v1/workspaces?id=eq.${record.workspace_id}&select=slug`,\n {\n headers: {\n \"apikey\": Deno.env.get(\"superbasesecretkey\")!,\n \"Authorization\": `Bearer ${Deno.env.get(\"superbasesecretkey\")}`,\n },\n },\n );\n const wsData = await wsRes.json();\n const workspaceSlug = wsData?.[0]?.slug;\n\n if (!workspaceSlug) {\n console.warn(\n \"⚠️ No workspace_slug found — skipping Bunny sync for video\",\n record.id,\n );\n return new Response(\"OK\", { status: 200 });\n }\n\n const bunnyRes = await fetch(BUNNY_VIDEOS_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_VIDEOS_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [{\n type: \"execute\",\n stmt: {\n sql: `\n INSERT INTO \"Video\" (\n video_id, workspace_id, workspace_slug, folder_id, file_name,\n mp4_url, thumbnail_url, duration, status,\n output_size_bytes, width, height, bitrate, error_message,\n seo_title, player_config_json, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(video_id) DO UPDATE SET\n workspace_slug = excluded.workspace_slug,\n folder_id = excluded.folder_id,\n file_name = excluded.file_name,\n mp4_url = excluded.mp4_url,\n thumbnail_url = excluded.thumbnail_url,\n duration = excluded.duration,\n status = excluded.status,\n output_size_bytes = excluded.output_size_bytes,\n width = excluded.width,\n height = excluded.height,\n bitrate = excluded.bitrate,\n error_message = excluded.error_message,\n seo_title = excluded.seo_title,\n player_config_json = excluded.player_config_json,\n updated_at = excluded.updated_at\n `,\n args: [\n { type: \"text\", value: String(record.id) },\n { type: \"text\", value: String(record.workspace_id) },\n { type: \"text\", value: workspaceSlug },\n {\n type: record.folder_id ? \"text\" : \"null\",\n value: record.folder_id ? String(record.folder_id) : null,\n },\n { type: \"text\", value: record.title ?? \"untitled\" },\n {\n type: record.video_url ? \"text\" : \"null\",\n value: record.video_url ?? null,\n },\n {\n type: record.thumbnail_url ? \"text\" : \"null\",\n value: record.thumbnail_url ?? null,\n },\n { type: \"float\", value: record.duration ?? 0 },\n { type: \"text\", value: record.status ?? \"pending\" },\n { type: \"integer\", value: record.transcoded_size ?? 0 },\n { type: \"integer\", value: record.width ?? 0 },\n { type: \"integer\", value: record.height ?? 0 },\n { type: \"integer\", value: record.bitrate ?? 0 },\n {\n type: record.error_description ? \"text\" : \"null\",\n value: record.error_description ?? null,\n },\n { type: \"text\", value: record.title ?? \"\" },\n {\n type: \"text\",\n value: JSON.stringify(record.player_config ?? {}),\n },\n { type: \"text\", value: new Date().toISOString() },\n ],\n },\n }],\n }),\n });\n\n if (!bunnyRes.ok) {\n console.error(\"⚠️ Bunny Database sync failed:\", await bunnyRes.text());\n } else {\n console.log(\"✓ Synced via Supabase webhook:\", record.id);\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Webhook error:\", err.message);\n return new Response(\"OK\", { status: 200 }); // always 200 so Supabase doesn't retry-storm\n }\n}",[315],"a6736b62-45ab-4d6d-932b-5659c010bc8b","superbase-dashbaord.ts","2437eede-60ce-11f1-9b6d-1607ee4eb77e",89,["D",1780688339092],"export default async function handler(req) {\n const SUPABASE_URL = Deno.env.get(\"superbaseurl\");\n const SUPABASE_KEY = Deno.env.get(\"superbasesecretkey\");\n const TABLE = \"bw_hourly\";\n\n const res = await fetch(`${SUPABASE_URL}/rest/v1/${TABLE}?limit=1000`, {\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n });\n\n const data = await res.json();\n\n function buildStats(data) {\n if (!data?.length) {\n return `

Rows

`;\n }\n const cols = Object.keys(data[0]);\n const urlCol = cols.find((c) =>\n c.toLowerCase().includes(\"url\") || c.toLowerCase().includes(\"domain\")\n );\n const urls = urlCol\n ? [...new Set(data.map((r) => r[urlCol]).filter(Boolean))]\n : [];\n return `

Total rows

${data.length}

Unique URLs

${\n urls.length || \"—\"\n }

Columns

${cols.length}

Table

bandwidth_hours

`;\n }\n\n function buildURLPanel(data) {\n if (!data?.length) {\n return `

URLs

No data

`;\n }\n const cols = Object.keys(data[0]);\n const urlCol = cols.find((c) =>\n c.toLowerCase().includes(\"url\") || c.toLowerCase().includes(\"domain\") ||\n c.toLowerCase().includes(\"host\")\n );\n if (!urlCol) {\n return `

URLs no url column found

No URL-type column detected

`;\n }\n const urls = [...new Set(data.map((r) => r[urlCol]).filter(Boolean))];\n const items = urls.map((u) => {\n const count = data.filter((r) => r[urlCol] === u).length;\n return `

${u}${count} rows

`;\n }).join(\"\");\n return `

URL list ${urls.length} urls

${items}

`;\n }\n\n function buildTablePanel(data) {\n if (!data?.length) {\n return `

Data

No rows returned

`;\n }\n const cols = Object.keys(data[0]);\n const headers = cols.map((c) => `${c}`).join(\"\");\n const rows = data.slice(0, 100).map((row) =>\n \"\" + cols.map((c) => {\n const v = row[c];\n return v === null\n ? `null`\n : `${String(v)}`;\n }).join(\"\") + \"\"\n ).join(\"\");\n return `

Table data ${data.length} rows

${headers}${rows}

`;\n }\n\n const html = `\n\n\n Bandwidth Hours Dashboard\n \n \n\n\n \n

\n ${buildStats(data)}\n

\n ${buildURLPanel(data)}\n ${buildTablePanel(data)}\n

\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html\" } });\n}",[322],"df0bb576-cc9e-4efe-8595-5e7b311b573b","superbase-dashbaord-copy.ts",99,["D",1781118645231],"export default async function handler(req) {\n const SUPABASE_URL = Deno.env.get(\"superbaseurl\");\n const SUPABASE_KEY = Deno.env.get(\"superbasesecretkey\");\n const TABLE = \"bw_hourly\";\n\n const res = await fetch(\n `${SUPABASE_URL}/rest/v1/${TABLE}?limit=1000&order=date_hour.asc`,\n {\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n },\n );\n\n const data = await res.json();\n\n // Group bytes_used by date (day)\n const byDate = {};\n const byWorkspace = {};\n\n for (const row of data) {\n const day = row.date_hour?.slice(0, 10) || \"unknown\";\n const ws = row.workspace_slug || \"unknown\";\n const bytes = Number(row.bytes_used) || 0;\n\n byDate[day] = (byDate[day] || 0) + bytes;\n byWorkspace[ws] = (byWorkspace[ws] || 0) + bytes;\n }\n\n const dates = Object.keys(byDate).sort();\n const byteValues = dates.map((d) => byDate[d]);\n const maxBytes = Math.max(...byteValues, 1);\n\n function fmtBytes(b) {\n if (b >= 1e9) return (b / 1e9).toFixed(2) + \" GB\";\n if (b >= 1e6) return (b / 1e6).toFixed(1) + \" MB\";\n if (b >= 1e3) return (b / 1e3).toFixed(0) + \" KB\";\n return b + \" B\";\n }\n\n const totalBytes = byteValues.reduce((a, b) => a + b, 0);\n const totalHits = data.reduce((a, r) => a + (Number(r.hits) || 0), 0);\n\n // Top workspaces\n const topWS = Object.entries(byWorkspace)\n .sort((a, b) => b[1] - a[1])\n .slice(0, 8);\n\n const wsMax = topWS[0]?.[1] || 1;\n\n // Build chart bars\n const bars = dates.map((d, i) => {\n const pct = (byteValues[i] / maxBytes * 100).toFixed(1);\n const label = d.slice(5); // MM-DD\n return `\n

${fmtBytes(byteValues[i])}

${label}

`;\n }).join(\"\");\n\n // Workspace rows\n const wsRows = topWS.map(([name, bytes]) => {\n const pct = (bytes / wsMax * 100).toFixed(1);\n return `\n

${name}

${fmtBytes(bytes)}

`;\n }).join(\"\");\n\n const html = `\n\n\n Bandwidth Dashboard\n \n \n\n\n \n\n

Total bandwidth

${fmtBytes(totalBytes)}

all time

Total hits

${totalHits.toLocaleString()}

requests

Days tracked

${dates.length}

unique days

Workspaces

${topWS.length}

active

\n\n

Bytes used by date

\n ${bars}\n

\n\n

Top workspaces by bandwidth

\n ${wsRows}\n

Raw data — ${data.length} rows

\n \n \n \n \n \n \n \n \n \n ${\n data.slice(0, 200).map((r) =>\n `\n \n \n \n \n \n `\n ).join(\"\")\n }\n \n

workspace	date_hour	bytes	hits	country
${\n r.workspace_slug \|\| 'null'\n }	${r.date_hour?.slice(0, 16) \|\| \"\"}	${fmtBytes(Number(r.bytes_used) \|\| 0)}	${r.hits \|\| 0}	${r.country \|\| \"—\"}

\n\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html\" } });\n}",[329],"c24878b4-5476-11f1-b9b8-ee650bb23af1","sseconsole.ts","a66fad06-5476-11f1-888c-ee650bb23af1",16,["D",1779300446748],"export default async function (req: Request): Promise {\n let count = 0;\n let intervalId: any;\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n start(controller) {\n // Send a fake update every 2 seconds\n intervalId = setInterval(() => {\n count++;\n \n const payload = { \n message: `Hello from Val Town! Test message #${count}`, \n progress: count * 20 \n };\n \n // SSE requires formatting text exactly like: \"data: {your json}\\n\\n\"\n controller.enqueue(encoder.encode(`data: ${JSON.stringify(payload)}\\n\\n`));\n\n // Stop streaming once we hit 5 updates\n if (count >= 5) {\n clearInterval(intervalId);\n controller.close();\n }\n }, 2000);\n },\n cancel() {\n clearInterval(intervalId);\n },\n });\n\n // Return the special event-stream headers\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/event-stream\",\n \"Cache-Control\": \"no-cache\",\n \"Connection\": \"keep-alive\",\n \"Access-Control-Allow-Origin\": \"*\", // Allows WeWeb to read it\n },\n });\n}",[335],"5a159f9c-5476-11f1-b3fe-ee650bb23af1","serve-test-event.ts","2159923a-5476-11f1-8a21-ee650bb23af1",["D",1779300271932],[342],"8ad1199c-5609-11f1-bb17-ee650bb23af1","serve-side-test-3.ts","6f7eeec0-5605-11f1-932e-ee650bb23af1",35,["D",1779473440824],"import { sqlite } from \"https://esm.town/v/std/sqlite@14-main/main.ts\";\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"videoId\");\n\n if (!videoId) return new Response(\"videoId required\", { status: 400 });\n\n // SSE stream setup\n let intervalId: any;\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n async start(controller) {\n // Read latest status from SQLite for this video\n const poll = async () => {\n try {\n const result = await sqlite.execute({\n sql: `SELECT status, percent FROM qencode WHERE task_token = ?`,\n args: [videoId],\n });\n\n const row = result.rows[0];\n if (!row) return;\n\n const percent = Number(row[1]);\n const status = String(row[0]);\n\n // Push to WeWeb\n controller.enqueue(encoder.encode(\n `data: ${\n JSON.stringify({\n videoId,\n progress: percent,\n status,\n })\n }\\n\\n`,\n ));\n\n // Close when done\n if (status === \"completed\" || status === \"error\") {\n clearInterval(intervalId);\n controller.close();\n }\n } catch (e) {\n console.error(\"SQLite error:\", e);\n }\n };\n\n // Run immediately + every 2s\n await poll();\n intervalId = setInterval(poll, 2000);\n },\n cancel() {\n clearInterval(intervalId);\n },\n });\n\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/event-stream\",\n \"Cache-Control\": \"no-cache\",\n \"Connection\": \"keep-alive\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n}",[347],"08ebfbd2-55e0-11f1-a144-ee650bb23af1","serve-side-test-2.ts","71533b8a-55be-11f1-a96e-ee650bb23af1",31,["D",1779455613548],"export default async function (req: Request): Promise {\n const url = new URL(req.url)\n const videoId = url.searchParams.get('video_id') // ← receive from WeWeb\n\n let count = 0;\n let intervalId: any;\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n start(controller) {\n intervalId = setInterval(() => {\n count++;\n\n const progress = count * 20\n\n const payload = {\n progress,\n video_id: videoId, // ← send back to WeWeb\n done: count >= 5 ? true : false // ← signals WeWeb to stop\n };\n\n controller.enqueue(encoder.encode(`data: ${JSON.stringify(payload)}\\n\\n`));\n\n if (count >= 5) {\n clearInterval(intervalId);\n controller.close();\n }\n }, 2000);\n },\n cancel() {\n clearInterval(intervalId);\n },\n });\n\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/event-stream\",\n \"Cache-Control\": \"no-cache\",\n \"Connection\": \"keep-alive\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n}",[354],"a3a32fdd-62a4-4478-8ee9-3df5ca8008a0","lm-webhook.ts","3a4aae8e-6752-11f1-b6e2-1607ee4eb77e",117,["D",1781374100672],"import { createHmac, timingSafeEqual } from \"node:crypto\"\n\nexport default async function(req: Request): Promise {\n const cors = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Signature\",\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors })\n }\n\n try {\n const rawBody = await req.text()\n const signature = req.headers.get(\"X-Signature\") ?? \"\"\n const secret = Deno.env.get(\"lemonsqueezewebhooksecret\")!\n\n // ── Verify signature ───────────────────────────────\n const hmac = createHmac(\"sha256\", secret)\n const digest = hmac.update(rawBody).digest(\"hex\")\n\n const valid = signature.length === digest.length &&\n timingSafeEqual(Buffer.from(digest, \"hex\"), Buffer.from(signature, \"hex\"))\n\n if (!valid) {\n console.error(\"❌ Invalid signature\")\n console.log(\"Expected:\", digest)\n console.log(\"Received:\", signature)\n return new Response(\"Invalid signature\", { status: 401, headers: cors })\n }\n\n console.log(\"✅ Signature verified\")\n\n const payload = JSON.parse(rawBody)\n\n console.log(\"─────────────────────────────\")\n console.log(\"🍋 Event:\", payload.meta?.event_name)\n console.log(\"📦 Custom data:\", JSON.stringify(payload.meta?.custom_data))\n console.log(\"─────────────────────────────\")\n\n return new Response(\"OK\", { status: 200, headers: cors })\n\n } catch (err) {\n console.error(\"❌ Error:\", err.message)\n return new Response(JSON.stringify({ error: err.message }), {\n status: 500,\n headers: cors\n })\n }\n}",[361],"a826b71a-b63a-48ff-9415-b4d83ccc5b43","lm-4.ts","89684f78-67f0-11f1-a9d0-1607ee4eb77e",122,["D",1781441928237],"import { createClient } from \"npm:@supabase/supabase-js\";\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nasync function verifySignature(\n rawBody: string,\n signature: string,\n secret: string,\n): Promise {\n try {\n const hmac = createHmac(\"sha256\", secret);\n const digest = hmac.update(rawBody).digest(\"hex\");\n\n if (signature.length !== digest.length) return false;\n\n return timingSafeEqual(\n Buffer.from(digest, \"hex\"),\n Buffer.from(signature, \"hex\"),\n );\n } catch (err) {\n console.error(\"❌ Signature error:\", err.message);\n return false;\n }\n}\n\nexport default async function (req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Signature\",\n };\n\n if (req.method === \"GET\") {\n return new Response(\"Webhook Active\", { status: 200, headers: cors });\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const rawBody = await req.text();\n const signature = req.headers.get(\"X-Signature\") ?? \"\";\n const secret = Deno.env.get(\"lemonsqueezewebhooksecret\") ?? \"\";\n\n console.log(\"─────────────────────────────────\");\n console.log(\"📨 Received webhook\");\n console.log(\"📝 Signature:\", signature ? \"present\" : \"missing\");\n console.log(\"🔑 Secret:\", secret ? \"set\" : \"MISSING!\");\n\n // ── Verify signature ───────────────────────────────────\n const valid = await verifySignature(rawBody, signature, secret);\n\n if (!valid) {\n console.error(\"❌ Invalid signature\");\n return new Response(\"Invalid signature\", { status: 401, headers: cors });\n }\n\n console.log(\"✅ Signature verified\");\n\n // Parse JSON\n let payload: any = {};\n try {\n payload = JSON.parse(rawBody);\n } catch (e) {\n console.error(\"❌ Failed to parse JSON:\", e.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const eventName = payload.meta?.event_name;\n const customData = payload.meta?.custom_data;\n const data = payload.data?.attributes;\n const lsId = String(payload.data?.id ?? \"\");\n\n console.log(\"🍋 Event:\", eventName);\n console.log(\"📦 Custom data:\", JSON.stringify(customData));\n console.log(\"🔍 variant_id:\", data?.variant_id);\n console.log(\"🔍 status:\", data?.status);\n console.log(\"🔍 lsId:\", lsId);\n\n if (!data || !eventName) {\n console.warn(\"⚠️ No data or event — skipping\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n // ── Step 1: Resolve workspace_id ──────────────────────\n let workspaceId: string | null = customData?.workspace_id ?? null;\n\n if (!workspaceId) {\n const email = data.user_email || data.customer_email;\n console.log(\"⚠️ No workspace_id in custom_data, trying email:\", email);\n\n if (email) {\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id\")\n .eq(\"owner_email\", email)\n .single();\n\n console.log(\n \"🔍 Workspace by email:\",\n JSON.stringify(ws),\n wsErr?.message,\n );\n workspaceId = ws?.id ?? null;\n }\n }\n\n if (!workspaceId) {\n console.error(\"❌ Could not resolve workspace_id — aborting\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"✅ workspace_id:\", workspaceId);\n\n // ── Step 2: Find subscription row by workspace_id ─────\n const { data: existingRow, error: findErr } = await supabase\n .from(\"subscriptions\")\n .select(\"id, workspace_id, status\")\n .eq(\"workspace_id\", workspaceId)\n .single();\n\n console.log(\"🔍 Existing row:\", JSON.stringify(existingRow));\n console.log(\"🔍 Find error:\", findErr?.message ?? \"none\");\n\n if (!existingRow) {\n console.warn(\"⚠️ No row found — creating default row\");\n\n const { data: inserted, error: insertErr } = await supabase\n .from(\"subscriptions\")\n .insert({\n workspace_id: workspaceId,\n status: \"active\",\n created_at: new Date().toISOString(),\n updated_at: new Date().toISOString(),\n })\n .select()\n .single();\n\n console.log(\"✅ Inserted:\", JSON.stringify(inserted));\n console.log(\"❌ Insert error:\", insertErr?.message ?? \"none\");\n\n if (insertErr) {\n console.error(\"❌ Could not create row:\", insertErr.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n }\n\n // ── Step 3: Build update data ─────────────────────────\n const variantId = String(data.variant_id ?? \"\");\n const updateData: any = {\n updated_at: new Date().toISOString(),\n };\n\n switch (eventName) {\n case \"subscription_created\":\n case \"subscription_updated\":\n case \"subscription_resumed\":\n case \"subscription_unpaused\":\n Object.assign(updateData, {\n ls_subscription_id: lsId,\n ls_customer_id: String(data.customer_id ?? \"\"),\n ls_order_id: data.order_id ? String(data.order_id) : null,\n ls_variant_id: variantId || null,\n subscription_plan: variantId || null,\n status: data.status ?? \"active\",\n cancelled: data.cancelled ?? false,\n pause: data.pause ?? null,\n card_brand: data.card_brand ?? null,\n card_last_four: data.card_last_four ?? null,\n trial_ends_at: data.trial_ends_at ?? null,\n renews_at: data.renews_at ?? null,\n ends_at: data.ends_at ?? null,\n billing_anchor: new Date().getDate(),\n reset_day: new Date().getDate(),\n url_update_payment: data.urls?.update_payment_method ?? null,\n url_customer_portal: data.urls?.customer_portal ?? null,\n url_update_subscription:\n data.urls?.customer_portal_update_subscription ?? null,\n test_mode: data.test_mode ?? false,\n });\n break;\n\n case \"subscription_cancelled\":\n Object.assign(updateData, {\n status: \"cancelled\",\n cancelled: true,\n ends_at: data.ends_at ?? null,\n });\n break;\n\n case \"subscription_expired\": {\n const { data: freePlan } = await supabase\n .from(\"plans\")\n .select(\"ls_variant_id\")\n .eq(\"name\", \"free\")\n .single();\n\n Object.assign(updateData, {\n status: \"expired\",\n subscription_plan: freePlan?.ls_variant_id ?? null,\n ls_subscription_id: null,\n });\n break;\n }\n\n case \"subscription_paused\":\n Object.assign(updateData, {\n status: \"paused\",\n pause: data.pause ?? null,\n });\n break;\n\n case \"subscription_payment_failed\":\n Object.assign(updateData, { status: \"past_due\" });\n break;\n\n case \"subscription_payment_success\":\n case \"subscription_payment_recovered\":\n Object.assign(updateData, { status: \"active\" });\n break;\n\n default:\n console.log(\"ℹ️ Unhandled event:\", eventName);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"📝 updateData:\", JSON.stringify(updateData));\n\n // ── Step 4: Update row by workspace_id ───────────────\n const { data: updated, error: updateErr } = await supabase\n .from(\"subscriptions\")\n .update(updateData)\n .eq(\"workspace_id\", workspaceId)\n .select();\n\n console.log(\"✅ Updated:\", JSON.stringify(updated));\n console.log(\"❌ Update error:\", updateErr?.message ?? \"none\");\n\n if (updateErr) {\n console.error(\"❌ Update failed:\", updateErr.message);\n } else if (!updated || updated.length === 0) {\n console.warn(\"⚠️ No rows updated for workspace_id:\", workspaceId);\n } else {\n console.log(\"✓ Row updated:\", updated[0]?.id, \"→\", updateData.status);\n }\n\n console.log(\"─────────────────────────────────\");\n return new Response(\"OK\", { status: 200, headers: cors });\n } catch (err: any) {\n console.error(\"❌ Critical error:\", err.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n}",[368],"7df9053a-7a4d-47ca-af29-3140cb66c58b","lemonsqueeze.ts","35696194-65cc-11f1-b16a-1607ee4eb77e",105,["D",1781263384100],"export default async function createCheckout(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405, headers: cors });\n }\n\n try {\n const body = await req.json();\n\n const workspace_id = body.workspace_id;\n const variant_id = body.variant_id;\n const email = body.email ?? null; // prefill email\n const name = body.name ?? null; // prefill name\n\n if (!workspace_id || !variant_id) {\n return new Response(\n JSON.stringify({ error: \"Missing workspace_id or variant_id\" }),\n {\n status: 400,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n const LS_API_KEY = Deno.env.get(\"lemonsqueezeapi\")!;\n const LS_STORE_ID = Deno.env.get(\"47660\")!;\n\n console.log(\"Creating checkout for workspace:\", workspace_id);\n console.log(\"variant_id:\", variant_id);\n console.log(\"email:\", email);\n\n // ── Build checkout_data ───────────────────────────────────────────\n const checkout_data: any = {\n // Custom data — available in webhook meta.custom_data\n custom: {\n workspace_id: String(workspace_id),\n },\n };\n\n // Prefill email if provided\n if (email) checkout_data.email = email;\n\n // Prefill name if provided\n if (name) checkout_data.name = name;\n\n // ── Build checkout attributes ─────────────────────────────────────\n const attributes: any = {\n checkout_data,\n\n // Checkout options\n checkout_options: {\n embed: false, // true = overlay, false = hosted page\n media: true, // show product media\n logo: true, // show store logo\n desc: true, // show product description\n discount: true, // allow discount codes\n button_color: \"#5B4CF5\", // checkout button color\n },\n\n // Product options\n product_options: {\n name: null, // override product name (null = use LS default)\n description: null, // override description\n media: [],\n redirect_url: `${Deno.env.get(\"APP_URL\")}/dashboard?upgraded=true`,\n receipt_button_text: \"Go to dashboard\",\n receipt_link_url: `${Deno.env.get(\"APP_URL\")}/dashboard`,\n receipt_thank_you_note: \"Thank you for upgrading VideoFrame!\",\n enabled_variants: [], // empty = show all variants\n },\n\n // Expiry — checkout link expires in 24 hours\n expires_at: new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString(),\n\n // Test mode\n test_mode: Deno.env.get(\"LS_TEST_MODE\") === \"true\",\n };\n\n // ── Call Lemon Squeezy API ────────────────────────────────────────\n const res = await fetch(\"https://api.lemonsqueezy.com/v1/checkouts\", {\n method: \"POST\",\n headers: {\n \"Accept\": \"application/vnd.api+json\",\n \"Content-Type\": \"application/vnd.api+json\",\n \"Authorization\": `Bearer ${LS_API_KEY}`,\n },\n body: JSON.stringify({\n data: {\n type: \"checkouts\",\n attributes,\n relationships: {\n store: {\n data: {\n type: \"stores\",\n id: String(LS_STORE_ID),\n },\n },\n variant: {\n data: {\n type: \"variants\",\n id: String(273481),\n },\n },\n },\n },\n }),\n });\n\n const data = await res.json();\n\n if (!res.ok) {\n console.error(\"LS API error:\", JSON.stringify(data));\n return new Response(\n JSON.stringify({ error: \"Lemon Squeezy error\", details: data }),\n {\n status: 500,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n const checkoutUrl = data?.data?.attributes?.url;\n const expiresAt = data?.data?.attributes?.expires_at;\n\n console.log(\"✓ Checkout URL:\", checkoutUrl);\n console.log(\"✓ Expires at:\", expiresAt);\n\n return new Response(\n JSON.stringify({\n url: checkoutUrl,\n expires_at: expiresAt,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n } catch (err: any) {\n console.error(\"Error:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n}",[375],"2f7844ad-f6bc-4213-ac7f-a5ba16c56b88","lemonsqueeze-copy.ts","a6939656-674c-11f1-9715-1607ee4eb77e",112,["D",1781372753937],"export default async function(req: Request): Promise {\n const cors = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors })\n }\n\n try {\n const text = await req.text()\n console.log(\"📦 Raw body:\", text)\n\n if (!text) {\n return new Response(JSON.stringify({ error: \"Empty request body\" }), {\n status: 400,\n headers: cors\n })\n }\n\n const { workspace_id } = JSON.parse(text)\n const workspaceId = workspace_id\n\n if (!workspaceId) {\n return new Response(JSON.stringify({ error: \"Missing workspace_id\" }), {\n status: 400,\n headers: cors\n })\n }\n\n const lemonsqueezeapi = Deno.env.get(\"lemonsqueezeapi\")\n\n const res = await fetch(\"https://api.lemonsqueezy.com/v1/checkouts\", {\n method: \"POST\",\n headers: {\n \"Accept\": \"application/vnd.api+json\",\n \"Content-Type\": \"application/vnd.api+json\",\n \"Authorization\": `Bearer ${lemonsqueezeapi}`\n },\n body: JSON.stringify({\n data: {\n type: \"checkouts\",\n attributes: {\n checkout_data: {\n custom: { workspace_id: workspaceId }\n }\n },\n relationships: {\n store: { data: { type: \"stores\", id: String(47660) } },\n variant: { data: { type: \"variants\", id: String(385499) } }\n }\n }\n })\n })\n\n const data = await res.json()\n\n if (!res.ok) {\n console.error(\"LS error:\", JSON.stringify(data))\n return new Response(JSON.stringify({ error: \"Lemon Squeezy error\", details: data }), {\n status: 500,\n headers: cors\n })\n }\n\n const checkoutUrl = data.data.attributes.url\n\n return new Response(JSON.stringify({ url: checkoutUrl }), { headers: cors })\n\n } catch (err) {\n console.error(\"Error:\", err.message)\n return new Response(JSON.stringify({ error: err.message }), {\n status: 500,\n headers: cors\n })\n }\n}",[382],"73646f01-cc93-4dca-9db0-03dd8474f2f1","ingest-valtown.ts","1cbcac0e-6fc3-11f1-b799-1607ee4eb77e",143,["D",1782495636163],"import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function ingestVideoAnalytics(\n req: Request,\n): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n // ── Ensure table exists ───────────────────────────────────────\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS video_views (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n video_id TEXT NOT NULL,\n workspace_slug TEXT NOT NULL,\n percent_watched INTEGER NOT NULL,\n watch_duration INTEGER NOT NULL,\n current_position INTEGER NOT NULL DEFAULT 0,\n total_duration INTEGER NOT NULL DEFAULT 0,\n country TEXT NOT NULL DEFAULT 'UNKNOWN',\n session_id TEXT NOT NULL DEFAULT 'unknown',\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )\n `);\n\n // Patch existing table — add any missing columns silently\n const patches = [\n `ALTER TABLE video_views ADD COLUMN session_id TEXT NOT NULL DEFAULT 'unknown'`,\n `ALTER TABLE video_views ADD COLUMN current_position INTEGER NOT NULL DEFAULT 0`,\n `ALTER TABLE video_views ADD COLUMN total_duration INTEGER NOT NULL DEFAULT 0`,\n ];\n for (const sql of patches) {\n try {\n await sqlite.execute(sql);\n } catch (e) { /* column already exists — ignore */ }\n }\n\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_video_id ON video_views (video_id)`,\n );\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_session_id ON video_views (session_id)`,\n );\n\n // ── GET — stats ───────────────────────────────────────────────\n if (req.method === \"GET\") {\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"video_id\");\n\n if (videoId) {\n const stats = await sqlite.execute({\n sql: `\n SELECT\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views,\n ROUND(AVG(percent_watched)) AS avg_pct,\n ROUND(AVG(watch_duration)) AS avg_watch_duration,\n ROUND(AVG(total_duration)) AS avg_total_duration,\n ROUND(AVG(current_position)) AS avg_position_stopped\n FROM video_views\n WHERE video_id = ?\n `,\n args: [videoId],\n });\n\n const row = stats.rows[0];\n\n return Response.json({\n video_id: videoId,\n total_views: row[0],\n unique_views: row[1],\n avg_pct: row[2],\n avg_watch_duration: row[3],\n avg_total_duration: row[4],\n avg_position_stopped: row[5],\n }, { headers: cors });\n }\n\n // No video_id — return all rows\n const all = await sqlite.execute(\n `SELECT * FROM video_views ORDER BY created_at DESC LIMIT 50`,\n );\n return Response.json({ rows: all.rows }, { headers: cors });\n }\n\n // ── POST — ingest ─────────────────────────────────────────────\n if (req.method !== \"POST\") {\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n let body: any = {};\n try {\n const text = await req.text();\n body = JSON.parse(text);\n } catch (e) {\n console.error(\"Failed to parse body:\", e);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const {\n video_id,\n workspace_slug,\n percent_watched,\n watch_duration,\n current_position,\n total_duration,\n country,\n session_id,\n } = body;\n\n console.log(\"Received:\", {\n video_id,\n workspace_slug,\n percent_watched,\n watch_duration,\n current_position,\n total_duration,\n country,\n session_id,\n });\n\n // ── Validate ──────────────────────────────────────────────────\n if (!video_id || !workspace_slug) {\n console.warn(\"Missing required fields — dropping\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n if (!watch_duration || watch_duration < 2) {\n console.log(\"Skipping — watch_duration too short:\", watch_duration);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const pct = Math.min(100, Math.max(0, Math.round(percent_watched ?? 0)));\n const finalCountry = String(country ?? \"UNKNOWN\");\n const finalDuration = Math.round(watch_duration);\n const finalPosition = Math.round(current_position ?? 0);\n const finalTotal = Math.round(total_duration ?? 0);\n const finalSessionId = String(session_id ?? \"unknown\");\n\n // ── Dedup — update if same session already exists ─────────────\n const existing = await sqlite.execute({\n sql:\n `SELECT id FROM video_views WHERE video_id = ? AND session_id = ? LIMIT 1`,\n args: [String(video_id), finalSessionId],\n });\n\n if (existing.rows.length > 0) {\n await sqlite.execute({\n sql: `\n UPDATE video_views\n SET\n percent_watched = ?,\n watch_duration = ?,\n current_position = ?,\n total_duration = ?,\n created_at = CURRENT_TIMESTAMP\n WHERE video_id = ?\n AND session_id = ?\n `,\n args: [\n pct,\n finalDuration,\n finalPosition,\n finalTotal,\n String(video_id),\n finalSessionId,\n ],\n });\n console.log(\n `✓ Updated — video: ${video_id} | pct: ${pct}% | pos: ${finalPosition}s / ${finalTotal}s`,\n );\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n // ── Insert new row ────────────────────────────────────────────\n try {\n await sqlite.execute({\n sql: `\n INSERT INTO video_views\n (video_id, workspace_slug, percent_watched, watch_duration, current_position, total_duration, country, session_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)\n `,\n args: [\n String(video_id),\n String(workspace_slug),\n pct,\n finalDuration,\n finalPosition,\n finalTotal,\n finalCountry,\n finalSessionId,\n ],\n });\n console.log(\n `✓ View recorded — video: ${video_id} | pct: ${pct}% | pos: ${finalPosition}s / ${finalTotal}s | session: ${finalSessionId}`,\n );\n } catch (error: any) {\n console.error(\"SQLite error:\", error.message);\n }\n\n return new Response(\"OK\", { status: 200, headers: cors });\n}",[389],"44196fc4-09e8-44a9-b66f-2011df1c26b0","ingest-for-superbase-copy.ts","09792324-6fc4-11f1-bff3-1607ee4eb77e",137,["D",1782302318829],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"SUPABASE_URL\")!,\n Deno.env.get(\"SUPABASE_SERVICE_KEY\")!,\n);\n\nexport default async function ingestVideoAnalytics(\n req: Request,\n): Promise {\n // Always return 200 — sendBeacon ignores response anyway\n const ok = new Response(\"OK\", {\n status: 200,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n\n if (req.method === \"OPTIONS\") return ok;\n if (req.method !== \"POST\") return ok;\n\n // ── Parse body ────────────────────────────────────────────────\n // sendBeacon sends as text/plain — must use req.text() not req.json()\n let body: any = {};\n try {\n const text = await req.text();\n body = JSON.parse(text);\n } catch (e) {\n console.error(\"Failed to parse body:\", e);\n return ok;\n }\n\n const {\n video_id,\n workspace_slug,\n percent_watched, // 0-100\n watch_duration, // seconds actually watched\n country, // ISO country code e.g. \"IN\"\n } = body;\n\n console.log(\"━━━━━━━━━━━━━━━━━━━━━━━━━━━━\");\n console.log(\"video_id: \", video_id);\n console.log(\"workspace_slug: \", workspace_slug);\n console.log(\"percent_watched:\", percent_watched);\n console.log(\"watch_duration: \", watch_duration, \"seconds\");\n console.log(\"country: \", country);\n\n // ── Validate ──────────────────────────────────────────────────\n if (!video_id || !workspace_slug) {\n console.warn(\"Missing required fields — dropping\");\n return ok;\n }\n\n // Drop accidental loads under 2 seconds — bots, preloads\n if (!watch_duration || watch_duration < 2) {\n console.log(\"Skipping — watch_duration too short:\", watch_duration);\n return ok;\n }\n\n // Clamp percent to 0-100\n const pct = Math.min(100, Math.max(0, Math.round(percent_watched ?? 0)));\n\n // ── Insert into Supabase ──────────────────────────────────────\n const { error } = await supabase\n .from(\"video_views\")\n .insert({\n video_id: String(video_id),\n workspace_slug: String(workspace_slug),\n percent_watched: pct,\n watch_duration: Math.round(watch_duration),\n country: country ?? \"UNKNOWN\",\n });\n\n if (error) {\n console.error(\"Supabase error:\", error.message);\n } else {\n console.log(\n \"✓ View recorded — video:\",\n video_id,\n \"| pct:\",\n pct + \"% | dur:\",\n watch_duration + \"s\",\n );\n }\n\n return ok;\n}",[396],"c0a84d9e-03f3-4959-9e94-c4b879bac861","bunny-database.ts","796997a0-7851-11f1-ab66-1607ee4eb77e",164,["D",1783244283696],7,"// insertWorkspaceRow.ts\n// Val.town — POST call to insert a row into the \"Workspace\" table on Bunny Database\n\nconst BUNNY_DB_URL =\n \"https://01KT270SNQ0T40DJR9YX9WS01J-videos.lite.bunnydb.net/v2/pipeline\";\nconst BUNNY_DB_TOKEN = Deno.env.get(\"bunny_access_token\")!;\n\nexport default async function insertWorkspaceRow(\n req: Request,\n): Promise {\n try {\n const row = await req.json();\n\n const res = await fetch(BUNNY_DB_URL, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${BUNNY_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `insert into \"Workspace\"\n (workspace_slug, workspace_id, video_id, seo_title, seo_description,\n duration, updated_time, thumbnail_url, mp4_url, plan, plan_status, \"column\")\n values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n { type: \"text\", value: row.workspace_slug },\n { type: \"text\", value: row.workspace_id },\n { type: \"text\", value: row.video_id },\n { type: \"text\", value: row.seo_title },\n { type: \"text\", value: row.seo_description },\n { type: \"text\", value: row.duration },\n {\n type: \"text\",\n value: row.updated_time ?? new Date().toISOString(),\n },\n { type: \"text\", value: row.thumbnail_url },\n { type: \"text\", value: row.mp4_url },\n { type: \"text\", value: row.plan },\n { type: \"text\", value: row.plan_status },\n { type: \"text\", value: row.column ?? \"\" },\n ],\n },\n },\n { type: \"close\" },\n ],\n }),\n });\n\n if (!res.ok) {\n const errText = await res.text();\n return new Response(`Insert failed: ${res.status} ${errText}`, {\n status: 500,\n });\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err) {\n return new Response(`Insert error: ${err}`, { status: 500 });\n }\n}",[403],"f8646824-579e-11f1-8f37-ee650bb23af1","api-3.ts","101cb63e-5447-11f1-a49d-ee650bb23af1",50,["D",1779647570879],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"SUPABASE_URL\")!,\n Deno.env.get(\"SUPABASE_SERVICE_KEY\")!\n);\n\nconst B2_BUCKET = Deno.env.get(\"B2_BUCKET\")!;\nconst CDN_URL = Deno.env.get(\"CDN_URL\")!; // your Bunny CDN domain\n\nexport default async function qencodeWebhook(req: Request): Promise {\n try {\n const body = await req.json();\n console.log(\"Qencode webhook:\", JSON.stringify(body));\n\n const {\n task_token,\n status,\n percent,\n error,\n error_description,\n payload,\n videos,\n } = body;\n\n // Parse payload\n const { workspace_slug, video_id } = JSON.parse(payload ?? \"{}\");\n\n // ── Processing (in progress) ──────────────────────────────────────\n if (status === \"processing\") {\n await supabase\n .from(\"videos\")\n .update({\n status: \"processing\",\n progress: percent ?? 0,\n })\n .eq(\"qencode_task_id\", task_token);\n\n console.log(`Processing: ${percent}% for video ${video_id}`);\n }\n\n // ── Complete ──────────────────────────────────────────────────────\n if (status === \"completed\") {\n // Extract output URLs from Qencode response\n const mp4Video = videos?.find((v: any) => v.output === \"mp4\");\n const thumbnail = videos?.find((v: any) => v.output === \"thumbnail\");\n\n // Build CDN URLs\n const videoUrl = mp4Video?.url ?? null;\n const thumbnailUrl = thumbnail?.url ?? null;\n\n // Update video to live\n await supabase\n .from(\"videos\")\n .update({\n status: \"live\",\n progress: 100,\n url: videoUrl,\n thumbnail_url: thumbnailUrl,\n updated_at: new Date().toISOString(),\n })\n .eq(\"qencode_task_id\", task_token);\n\n // Insert notification\n const { data: video } = await supabase\n .from(\"videos\")\n .select(\"title, workspace_id\")\n .eq(\"qencode_task_id\", task_token)\n .single();\n\n if (video) {\n await supabase.from(\"notifications\").insert({\n workspace_id: video.workspace_id,\n type: \"upload_complete\",\n title: \"Video ready\",\n body: `${video.title} has finished processing.`,\n });\n }\n\n console.log(`✓ Video ${video_id} is live`);\n }\n\n // ── Failed ────────────────────────────────────────────────────────\n if (status === \"error\" || status === \"failed\") {\n await supabase\n .from(\"videos\")\n .update({\n status: \"failed\",\n error_message: error_description ?? error ?? \"Unknown error\",\n updated_at: new Date().toISOString(),\n })\n .eq(\"qencode_task_id\", task_token);\n\n // Insert failure notification\n const { data: video } = await supabase\n .from(\"videos\")\n .select(\"title, workspace_id\")\n .eq(\"qencode_task_id\", task_token)\n .single();\n\n if (video) {\n await supabase.from(\"notifications\").insert({\n workspace_id: video.workspace_id,\n type: \"transcoding_failed\",\n title: \"Transcoding failed\",\n body: `${video.title} failed to process. ${error_description ?? \"\"}`,\n });\n }\n\n console.error(`✗ Video ${video_id} failed: ${error_description}`);\n }\n\n return new Response(\"ok\", { status: 200 });\n\n } catch (err) {\n console.error(\"Webhook error:\", err);\n return new Response(\"error\", { status: 500 });\n }\n}",[411],"5e7af9d0-579e-11f1-b183-ee650bb23af1","api-2.ts","ebf3a362-5446-11f1-b53e-ee650bb23af1",49,["D",1779647312657],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nconst B2_KEY = Deno.env.get(\"b2key\")!;\nconst B2_SECRET = Deno.env.get(\"b2secret\")!;\nconst B2_BUCKET = Deno.env.get(\"b2bucket\")!;\n\nexport default async function startEncoding(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n try {\n const {\n task_token,\n tus_id,\n file_name,\n workspace_slug,\n video_id,\n } = await req.json();\n\n if (!task_token || !tus_id || !file_name) {\n return new Response(\n JSON.stringify({\n error: \"Missing required fields\",\n required: [\"task_token\", \"tus_id\", \"file_name\"],\n }),\n {\n status: 400,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // Build file paths\n const baseName = file_name.replace(/\\.[^/.]+$/, \"\");\n const mp4Path =\n `b2://backblaze.com/${B2_BUCKET}/${workspace_slug}/${baseName}.mp4`;\n const thumbPath =\n `b2://backblaze.com/${B2_BUCKET}/${workspace_slug}/${baseName}.jpg`;\n\n // Build Qencode query\n const query = {\n source: `tus:${tus_id}`,\n encoder_version: \"2\",\n callback_url: `${Deno.env.get(\"VALTOWN_BASE_URL\")}/qencode-webhook`,\n use_subtask_callback: 1,\n format: [\n {\n output: \"mp4\",\n video_codec: \"libx264\",\n height: 1080,\n optimize_bitrate: 0,\n destination: {\n url: mp4Path,\n key: B2_KEY,\n secret: B2_SECRET,\n },\n },\n {\n output: \"thumbnail\",\n image_format: \"jpg\",\n time: \".15\",\n height: \"500\",\n width: \"700\",\n destination: {\n url: thumbPath,\n key: B2_KEY,\n secret: B2_SECRET,\n },\n },\n ],\n };\n\n // Send to Qencode\n const encodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n task_token,\n query: JSON.stringify(query),\n payload: JSON.stringify({ workspace_slug, video_id }),\n }),\n });\n\n const encodeData = await encodeRes.json();\n\n if (encodeData.error) {\n return new Response(\n JSON.stringify({ error: \"Qencode error\", details: encodeData }),\n {\n status: 500,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // Update video status in Supabase\n await supabase\n .from(\"videos\")\n .update({\n status: \"processing\",\n qencode_task_id: task_token,\n updated_at: new Date().toISOString(),\n })\n .eq(\"id\", video_id);\n\n console.log(`✓ Encoding started for video ${video_id}`);\n\n return new Response(\n JSON.stringify({\n ok: true,\n task_token,\n status: \"processing\",\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n } catch (err) {\n console.error(\"Error:\", err);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n}",[418],"d174b116-5446-11f1-8340-ee650bb23af1","api-1.ts","511c575c-53b6-11f1-94f4-ee650bb23af1",["D",1779279856359],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!\n);\n\nconst QENCODE_API_KEY = Deno.env.get(\"qencodeapi\")!;\n\nexport default async function getTaskToken(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n\n if (req.method === \"OPTIONS\") return new Response(null, { status: 204, headers: cors });\n\n try {\n // ── Step 1: Get access token ──────────────────────────────────────\n const tokenRes = await fetch(\"https://api.qencode.com/v1/access_token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ api_key: QENCODE_API_KEY }),\n });\n\n const tokenData = await tokenRes.json();\n\n if (!tokenData.token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get access token\", details: tokenData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"✓ Access token received\");\n\n // ── Step 2: Create task + get task token ──────────────────────────\n const taskRes = await fetch(\"https://api.qencode.com/v1/create_task\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ token: tokenData.token }),\n });\n\n const taskData = await taskRes.json();\n\n if (!taskData.task_token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get task token\", details: taskData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"✓ Task token received\");\n\n return new Response(\n JSON.stringify({\n task_token: taskData.task_token,\n access_token: tokenData.token,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n\n } catch (err) {\n console.error(\"Error:\", err);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n}",[425],"303ac45a-9cbf-47a9-a246-ba09a54be155","api-1.1-plan-check.ts","f296ce04-7f72-11f1-b4ad-1607ee4eb77e",188,["D",1784111048120],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\nconst QENCODE_API_KEY = Deno.env.get(\"qencodeapi\")!;\n\nexport default async function getTaskToken(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n if (req.method === \"OPTIONS\") return new Response(null, { status: 204, headers: cors });\n\n try {\n const { workspace_slug } = await req.json();\n\n if (!workspace_slug) {\n return new Response(\n JSON.stringify({ error: \"workspace_slug is required\" }),\n { status: 400, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ── Step 0: Confirmed join — workspaces → subscriptions → plans ──\n // (via subscriptions.subscription_plan = plans.ls_variant_id)\n // NOTE: subscriptions has TWO foreign keys to workspaces\n // (workspace_id AND workspace_slug), so the relationship must be\n // named explicitly below — otherwise Supabase can't disambiguate\n // which FK to embed on, and the whole query silently fails,\n // surfacing as a false \"Workspace not found\".\n const { data: workspace, error: wsError } = await supabase\n .from(\"workspaces\")\n .select(`\n id,\n slug,\n bandwidth_used,\n storage_used_bytes,\n subscriptions!subscriptions_workspace_id_fkey (\n status,\n subscription_plan,\n plans!subscriptions_subscription_plan_fkey ( name, bytes_limit, storage_limit, video_limit, member_limit )\n )\n `)\n .eq(\"slug\", workspace_slug)\n .single();\n\n if (wsError) console.error(\"Supabase error detail:\", JSON.stringify(wsError));\n\n if (wsError || !workspace) {\n return new Response(\n JSON.stringify({ error: \"Workspace not found\" }),\n { status: 404, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // subscriptions comes back as an array (Supabase doesn't assume 1:1 unless\n // there's a unique constraint on subscriptions.workspace_id)\n const sub = workspace.subscriptions?.[0];\n const plan = sub?.plans;\n\n if (!sub || (sub.status !== \"active\" && sub.status !== \"cancelled\")) {\n return new Response(\n JSON.stringify({ error: \"No active subscription for this workspace\" }),\n { status: 402, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // sub.subscription_plan can be null even when status is \"active\" (seen in real data)\n // — treat \"active sub with no linked plan\" as blocked rather than silently\n // falling back, since a silent fallback could let someone bypass limits entirely.\n // Flip this if you'd rather default null plans to \"free\" tier behavior.\n if (!plan) {\n return new Response(\n JSON.stringify({ error: \"No plan linked to this subscription — contact support\" }),\n { status: 402, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n const bandwidthReached = workspace.bandwidth_used >= plan.bytes_limit;\n const storageReached = workspace.storage_used_bytes >= plan.storage_limit;\n\n if (bandwidthReached) {\n return new Response(\n JSON.stringify({\n error: \"Bandwidth limit reached for this billing cycle\",\n error_code: \"bandwidth_limit_reached\",\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n bandwidth: {\n used: workspace.bandwidth_used,\n limit: plan.bytes_limit,\n reached: true,\n },\n }),\n { status: 403, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n if (storageReached) {\n return new Response(\n JSON.stringify({\n error: \"Storage limit reached for this plan\",\n error_code: \"storage_limit_reached\",\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n storage: {\n used: workspace.storage_used_bytes,\n limit: plan.storage_limit,\n reached: true,\n },\n }),\n { status: 403, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ── Resolve transcoding settings from plan cap only ──\n // workspace_settings column doesn't exist on workspaces yet — once it's\n // added, re-introduce the parsing block here to layer workspace-level\n // overrides on top of the plan cap (see earlier version for that logic).\n const PLAN_RESOLUTION_CAPS: Record = {\n free: 480,\n starter: 720,\n creator: 1080,\n \"creator-test-1-month\": 1080,\n \"creator-test-1-year\": 1080,\n agency: 1080,\n business: 1080,\n };\n const maxHeight = PLAN_RESOLUTION_CAPS[plan.name] ?? 480;\n const crf = 23; // default \"balanced\" CRF until workspace_settings/optimise_for exists\n\n // ── Step 1: Get access token ──────────────────────────────────────\n const tokenRes = await fetch(\"https://api.qencode.com/v1/access_token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ api_key: QENCODE_API_KEY }),\n });\n const tokenData = await tokenRes.json();\n if (!tokenData.token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get access token\", details: tokenData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ── Step 2: Create task + get task token ──────────────────────────\n const taskRes = await fetch(\"https://api.qencode.com/v1/create_task\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ token: tokenData.token }),\n });\n const taskData = await taskRes.json();\n if (!taskData.task_token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get task token\", details: taskData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n return new Response(\n JSON.stringify({\n task_token: taskData.task_token,\n access_token: tokenData.token,\n\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n\n plan: {\n name: plan.name,\n video_limit: plan.video_limit,\n member_limit: plan.member_limit,\n bandwidth_limit_bytes: plan.bytes_limit,\n storage_limit_bytes: plan.storage_limit,\n },\n\n bandwidth: {\n used: workspace.bandwidth_used,\n limit: plan.bytes_limit,\n used_pct: Number(((workspace.bandwidth_used / plan.bytes_limit) * 100).toFixed(1)),\n reached: bandwidthReached,\n },\n\n storage: {\n used: workspace.storage_used_bytes,\n limit: plan.storage_limit,\n used_pct: Number(((workspace.storage_used_bytes / plan.storage_limit) * 100).toFixed(1)),\n reached: storageReached,\n },\n\n // Forward this straight into api-2's (upload-complete / url-import)\n // request body — no need for api-2 to re-query workspace_settings itself.\n transcode_settings: {\n max_height: maxHeight,\n crf: crf,\n },\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n } catch (err) {\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n}",[431],"d46fae37-3acc-4415-a136-ca938681f6c3","Cloudfare","6841248c-9c98-11f1-b6db-1607ee4eb77e",223,["D",1787231416441],"directory",[438],"pulls","branches","forks","envVars",{"_451":453,"_454":63},"connections",{"_451":275,"_452":63},"count","unfilledCount",22,"emptyCount",{"_45":437,"_33":438,"_31":439,"_171":-5,"_43":44,"_42":440,"_173":125,"_40":610,"_13":275,"_35":442,"_37":-5,"_24":25,"_177":-5,"_495":611,"_27":612},{"_45":606,"_33":34,"_31":32,"_171":439,"_43":44,"_42":14,"_173":25,"_40":607,"_13":224,"_35":36,"_37":39,"_24":25,"_177":-5,"_495":608,"_27":609},{"_45":430,"_33":431,"_31":432,"_171":-5,"_43":44,"_42":433,"_173":125,"_40":603,"_13":304,"_35":36,"_37":435,"_24":25,"_177":-5,"_495":604,"_27":605},{"_45":424,"_33":425,"_31":426,"_171":-5,"_43":44,"_42":216,"_173":125,"_40":600,"_13":224,"_35":36,"_37":428,"_24":25,"_177":-5,"_495":601,"_27":602},{"_45":417,"_33":418,"_31":419,"_171":-5,"_43":44,"_42":420,"_173":125,"_40":597,"_13":192,"_35":36,"_37":422,"_24":25,"_177":-5,"_495":598,"_27":599},{"_45":410,"_33":411,"_31":412,"_171":-5,"_43":44,"_42":413,"_173":125,"_40":594,"_13":224,"_35":36,"_37":415,"_24":25,"_177":-5,"_495":595,"_27":596},{"_45":402,"_33":403,"_31":404,"_171":-5,"_43":44,"_42":405,"_173":125,"_40":591,"_13":407,"_35":36,"_37":408,"_24":25,"_177":-5,"_495":592,"_27":593},{"_45":395,"_33":396,"_31":397,"_171":-5,"_43":44,"_42":398,"_173":125,"_40":588,"_13":63,"_35":36,"_37":400,"_24":25,"_177":-5,"_495":589,"_27":590},{"_45":388,"_33":389,"_31":390,"_171":-5,"_43":44,"_42":391,"_173":125,"_40":585,"_13":304,"_35":36,"_37":393,"_24":25,"_177":-5,"_495":586,"_27":587},{"_45":381,"_33":382,"_31":383,"_171":-5,"_43":44,"_42":384,"_173":125,"_40":582,"_13":200,"_35":36,"_37":386,"_24":25,"_177":-5,"_495":583,"_27":584},{"_45":374,"_33":375,"_31":376,"_171":-5,"_43":44,"_42":377,"_173":125,"_40":579,"_13":192,"_35":36,"_37":379,"_24":25,"_177":-5,"_495":580,"_27":581},{"_45":367,"_33":368,"_31":369,"_171":-5,"_43":44,"_42":370,"_173":125,"_40":576,"_13":216,"_35":36,"_37":372,"_24":25,"_177":-5,"_495":577,"_27":578},{"_45":360,"_33":361,"_31":362,"_171":-5,"_43":44,"_42":363,"_173":125,"_40":573,"_13":216,"_35":36,"_37":365,"_24":25,"_177":-5,"_495":574,"_27":575},{"_45":353,"_33":354,"_31":355,"_171":-5,"_43":44,"_42":356,"_173":125,"_40":570,"_13":175,"_35":36,"_37":358,"_24":25,"_177":-5,"_495":571,"_27":572},{"_45":346,"_33":347,"_31":348,"_171":-5,"_43":44,"_42":349,"_173":125,"_40":567,"_13":224,"_35":36,"_37":351,"_24":25,"_177":-5,"_495":568,"_27":569},{"_45":341,"_33":342,"_31":343,"_171":-5,"_43":44,"_42":175,"_173":125,"_40":564,"_13":224,"_35":36,"_37":339,"_24":25,"_177":-5,"_495":565,"_27":566},{"_45":334,"_33":335,"_31":336,"_171":-5,"_43":44,"_42":337,"_173":125,"_40":561,"_13":275,"_35":36,"_37":339,"_24":25,"_177":-5,"_495":562,"_27":563},{"_45":328,"_33":329,"_31":58,"_171":-5,"_43":44,"_42":330,"_173":125,"_40":558,"_13":224,"_35":36,"_37":332,"_24":25,"_177":-5,"_495":559,"_27":560},{"_45":321,"_33":322,"_31":323,"_171":-5,"_43":44,"_42":324,"_173":125,"_40":555,"_13":216,"_35":36,"_37":326,"_24":25,"_177":-5,"_495":556,"_27":557},{"_45":314,"_33":315,"_31":316,"_171":-5,"_43":44,"_42":317,"_173":125,"_40":552,"_13":224,"_35":36,"_37":319,"_24":25,"_177":-5,"_495":553,"_27":554},{"_45":307,"_33":308,"_31":309,"_171":-5,"_43":44,"_42":310,"_173":125,"_40":549,"_13":224,"_35":36,"_37":312,"_24":25,"_177":-5,"_495":550,"_27":551},{"_45":299,"_33":300,"_31":301,"_171":-5,"_43":44,"_42":302,"_173":125,"_40":546,"_13":304,"_35":36,"_37":305,"_24":25,"_177":-5,"_495":547,"_27":548},{"_45":292,"_33":293,"_31":294,"_171":-5,"_43":44,"_42":295,"_173":125,"_40":543,"_13":224,"_35":36,"_37":297,"_24":25,"_177":-5,"_495":544,"_27":545},{"_45":285,"_33":286,"_31":287,"_171":-5,"_43":44,"_42":288,"_173":125,"_40":540,"_13":216,"_35":36,"_37":290,"_24":25,"_177":-5,"_495":541,"_27":542},{"_45":278,"_33":279,"_31":280,"_171":-5,"_43":44,"_42":281,"_173":125,"_40":537,"_13":232,"_35":36,"_37":283,"_24":25,"_177":-5,"_495":538,"_27":539},{"_45":270,"_33":271,"_31":272,"_171":-5,"_43":44,"_42":273,"_173":125,"_40":534,"_13":275,"_35":36,"_37":276,"_24":25,"_177":-5,"_495":535,"_27":536},{"_45":263,"_33":264,"_31":265,"_171":-5,"_43":44,"_42":266,"_173":125,"_40":531,"_13":224,"_35":36,"_37":268,"_24":25,"_177":-5,"_495":532,"_27":533},{"_45":256,"_33":257,"_31":258,"_171":-5,"_43":44,"_42":259,"_173":125,"_40":528,"_13":200,"_35":36,"_37":261,"_24":25,"_177":-5,"_495":529,"_27":530},{"_45":249,"_33":250,"_31":251,"_171":-5,"_43":44,"_42":252,"_173":125,"_40":525,"_13":184,"_35":36,"_37":254,"_24":25,"_177":-5,"_495":526,"_27":527},{"_45":242,"_33":243,"_31":244,"_171":-5,"_43":44,"_42":245,"_173":125,"_40":522,"_13":63,"_35":36,"_37":247,"_24":25,"_177":-5,"_495":523,"_27":524},{"_45":235,"_33":236,"_31":237,"_171":-5,"_43":44,"_42":238,"_173":125,"_40":519,"_13":200,"_35":36,"_37":240,"_24":25,"_177":-5,"_495":520,"_27":521},{"_45":227,"_33":228,"_31":229,"_171":-5,"_43":44,"_42":230,"_173":125,"_40":516,"_13":232,"_35":36,"_37":233,"_24":25,"_177":-5,"_495":517,"_27":518},{"_45":219,"_33":220,"_31":221,"_171":-5,"_43":44,"_42":222,"_173":125,"_40":513,"_13":224,"_35":36,"_37":225,"_24":25,"_177":-5,"_495":514,"_27":515},{"_45":211,"_33":212,"_31":213,"_171":-5,"_43":44,"_42":214,"_173":125,"_40":510,"_13":216,"_35":36,"_37":217,"_24":25,"_177":-5,"_495":511,"_27":512},{"_45":203,"_33":204,"_31":205,"_171":-5,"_43":44,"_42":206,"_173":125,"_40":507,"_13":208,"_35":36,"_37":209,"_24":25,"_177":-5,"_495":508,"_27":509},{"_45":195,"_33":196,"_31":197,"_171":-5,"_43":44,"_42":198,"_173":125,"_40":504,"_13":200,"_35":36,"_37":201,"_24":25,"_177":-5,"_495":505,"_27":506},{"_45":187,"_33":188,"_31":189,"_171":-5,"_43":44,"_42":190,"_173":125,"_40":501,"_13":192,"_35":36,"_37":193,"_24":25,"_177":-5,"_495":502,"_27":503},{"_45":179,"_33":180,"_31":181,"_171":-5,"_43":44,"_42":182,"_173":125,"_40":498,"_13":184,"_35":36,"_37":185,"_24":25,"_177":-5,"_495":499,"_27":500},{"_45":168,"_33":169,"_31":170,"_171":-5,"_43":44,"_42":172,"_173":125,"_40":494,"_13":175,"_35":36,"_37":176,"_24":25,"_177":-5,"_495":496,"_27":497},["D",1780055932410],"children",[],[169],["D",1784284741296],[],[180],["D",1784284722251],[],[188],["D",1784544235309],[],[196],["D",1780920954441],[],[204],["D",1783945164859],[],[212],["D",1787250847785],[],[220],["D",1780085629696],[],[228],["D",1782499025250],[],[236],["D",1782498991828],[],[243],["D",1781870375796],[],[250],["D",1781870347128],[],[257],["D",1783857236190],[],[264],["D",1783858221881],[],[271],["D",1779646454305],[],[279],["D",1782500485465],[],[286],["D",1784663887637],[],[293],["D",1784637667486],[],[300],["D",1784637434026],[],[308],["D",1784293740578],[],[315],["D",1780688339092],[],[322],["D",1781118645231],[],[329],["D",1779300446748],[],[335],["D",1779300271932],[],[342],["D",1779473440824],[],[347],["D",1779455613548],[],[354],["D",1781374100672],[],[361],["D",1781441928237],[],[368],["D",1781263384100],[],[375],["D",1781372753937],[],[382],["D",1782495636163],[],[389],["D",1782302318829],[],[396],["D",1783244283696],[],[403],["D",1779647570879],[],[411],["D",1779647312657],[],[418],["D",1779279856359],[],[425],["D",1784111048120],[],[431],"f60168fd-fe2c-414e-aa1d-88576bc9b166",["D",1787835346887],[],[438,34],["D",1787231416441],[456],[438],["D",1779217793497],["D",1789501878689],{"_100":99,"_107":103},{"_100":99,"_101":-5,"_102":103,"_18":56,"_104":105,"_106":25},{"_13":89,"_33":90,"_45":44,"_91":46,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":47,"_98":99},"ctx",{"_82":-5,"_127":651,"_652":653,"_654":655,"_656":25,"_657":25,"_658":25,"_659":125,"_660":-5,"_661":-7,"_662":-7,"_663":63,"_664":25,"_665":25,"_666":-5,"_667":25,"_668":25,"_669":25,"_670":-5},"ENV",{"_622":623,"_624":625,"_626":90,"_627":628,"_629":630,"_631":632,"_633":634,"_635":636,"_637":638,"_639":640,"_641":642,"_643":644,"_645":646,"_647":648,"_649":650},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

VideoFrame Analytics

Bandwidth hours dashboard

Bandwidth Dashboard

Diff · v228