VideoFrame Analytics

No video views recorded yet.

`\n : rows.map((r: any[]) => `\n \n

${r[0]}

${r[1] ?? \"—\"} · Last view: ${String(r[3]).split(\" \")[0]}

\n ${r[2]} views\n \n `).join(\"\");\n\n return new Response(`\nVideoFrame Analytics\n\n

Select a video

${links}

`,\n { headers: { \"Content-Type\": \"text/html\" } }\n );\n }\n\n // ── Helpers ────────────────────────────────────────────────\n const cutoff = (() => {\n const d = new Date();\n d.setDate(d.getDate() - days);\n return d.toISOString().split(\"T\")[0] + \" 00:00:00\";\n })();\n\n function fmt(sec: number): string {\n const s = Math.round(sec || 0);\n return `${Math.floor(s / 60)}:${String(s % 60).padStart(2, \"0\")}`;\n }\n\n function pctColor(pct: number): string {\n return pct >= 80 ? \"#1baf7a\" : pct >= 40 ? \"#eda100\" : \"#e24b4a\";\n }\n\n // ── Run all queries in parallel ────────────────────────────\n const [statsRes, chartRes, countryRes, bucketsRes, sessRes, hourlyRes] =\n await Promise.all([\n\n // 1. Summary stats\n sqlite.execute({\n sql: `\n SELECT\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views,\n ROUND(AVG(percent_watched)) AS avg_pct,\n ROUND(AVG(watch_duration)) AS avg_duration,\n ROUND(AVG(total_duration)) AS avg_length,\n MAX(watch_duration) AS max_duration,\n COUNT(CASE WHEN percent_watched >= 80 THEN 1 END) AS completed,\n COUNT(CASE WHEN percent_watched < 25 THEN 1 END) AS bounced,\n MIN(created_at) AS first_view,\n MAX(created_at) AS last_view\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n `,\n args: [videoId, cutoff],\n }),\n\n // 2. Views by day\n sqlite.execute({\n sql: `\n SELECT DATE(created_at) AS day,\n COUNT(*) AS total,\n COUNT(DISTINCT session_id) AS unique_v,\n ROUND(AVG(percent_watched)) AS avg_pct\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY day ORDER BY day ASC\n `,\n args: [videoId, cutoff],\n }),\n\n // 3. Countries\n sqlite.execute({\n sql: `\n SELECT country, COUNT(*) AS views, COUNT(DISTINCT session_id) AS unique_v\n FROM video_views\n WHERE video_id = ? AND created_at >= ?\n GROUP BY country ORDER BY views DESC LIMIT 8\n `,\n args: [videoId, cutoff],\n }),\n\n // 4. Watch depth buckets\n sqlite.execute({\n sql: `\n SELECT\n CASE\n WHEN percent_watched < 25 THEN '0–25%'\n WHEN percent_watched < 50 THEN '25–50%'\n WHEN percent_watched < 75 THEN '50–75%'\n WHEN percent_watched < 100 THEN '75–100%'\n ELSE '100%'\n END AS bucket,\n COUNT(*) AS views\n FROM video_views\n WHERE video_id = ? AND created_at >= ?\n GROUP BY bucket ORDER BY bucket ASC\n `,\n args: [videoId, cutoff],\n }),\n\n // 5. Recent sessions\n sqlite.execute({\n sql: `\n SELECT session_id, percent_watched, watch_duration,\n current_position, total_duration, country, created_at\n FROM video_views\n WHERE video_id = ?\n ORDER BY created_at DESC LIMIT 20\n `,\n args: [videoId],\n }),\n\n // 6. Views by hour of day (engagement pattern)\n sqlite.execute({\n sql: `\n SELECT CAST(strftime('%H', created_at) AS INTEGER) AS hour,\n COUNT(*) AS views\n FROM video_views\n WHERE video_id = ? AND created_at >= ?\n GROUP BY hour ORDER BY hour ASC\n `,\n args: [videoId, cutoff],\n }),\n ]);\n\n // ── Parse stats ────────────────────────────────────────────\n const s = statsRes.rows[0] as any[];\n const total = Number(s[0]) || 0;\n const unique = Number(s[1]) || 0;\n const avgPct = Number(s[2]) || 0;\n const avgDur = Number(s[3]) || 0;\n const avgLen = Number(s[4]) || 0;\n const completed = Number(s[6]) || 0;\n const bounced = Number(s[7]) || 0;\n const firstView = String(s[8] ?? \"—\").split(\" \")[0];\n const lastView = String(s[9] ?? \"—\").split(\" \")[0];\n const compPct = total > 0 ? Math.round((completed / total) * 100) : 0;\n const bouncePct = total > 0 ? Math.round((bounced / total) * 100) : 0;\n\n // ── Chart data ─────────────────────────────────────────────\n const chartRows = chartRes.rows as any[];\n const dayMap: Record = {};\n chartRows.forEach((r: any[]) => { dayMap[r[0]] = r; });\n\n const labels: string[] = [];\n const totals: number[] = [];\n const uniqs: number[] = [];\n for (let i = days - 1; i >= 0; i--) {\n const d = new Date();\n d.setDate(d.getDate() - i);\n const key = d.toISOString().split(\"T\")[0];\n const short = d.toLocaleDateString(\"en\", { month: \"short\", day: \"numeric\" });\n labels.push(short);\n totals.push(dayMap[key] ? Number(dayMap[key][1]) : 0);\n uniqs.push( dayMap[key] ? Number(dayMap[key][2]) : 0);\n }\n\n const maxBar = Math.max(...totals, 1);\n\n // ── Hourly data ────────────────────────────────────────────\n const hourlyRows = hourlyRes.rows as any[];\n const hourMap: Record = {};\n hourlyRows.forEach((r: any[]) => { hourMap[Number(r[0])] = Number(r[1]); });\n const maxHour = Math.max(...Object.values(hourMap), 1);\n\n // ── Flag / name maps ───────────────────────────────────────\n const FLAGS: Record = {\n IN:\"🇮🇳\",US:\"🇺🇸\",GB:\"🇬🇧\",DE:\"🇩🇪\",CA:\"🇨🇦\",AU:\"🇦🇺\",\n FR:\"🇫🇷\",SG:\"🇸🇬\",AE:\"🇦🇪\",NL:\"🇳🇱\",JP:\"🇯🇵\",BR:\"🇧🇷\",\n PK:\"🇵🇰\",NZ:\"🇳🇿\",ZA:\"🇿🇦\",NG:\"🇳🇬\",KE:\"🇰🇪\",BD:\"🇧🇩\",UNKNOWN:\"🌍\",\n };\n const CNAMES: Record = {\n IN:\"India\",US:\"United States\",GB:\"United Kingdom\",DE:\"Germany\",\n CA:\"Canada\",AU:\"Australia\",FR:\"France\",SG:\"Singapore\",\n AE:\"UAE\",NL:\"Netherlands\",JP:\"Japan\",BR:\"Brazil\",\n PK:\"Pakistan\",NZ:\"New Zealand\",ZA:\"South Africa\",UNKNOWN:\"Unknown\",\n };\n const BCOLORS: Record = {\n \"0–25%\":\"#e24b4a\",\"25–50%\":\"#eda100\",\"50–75%\":\"#2a78d6\",\"75–100%\":\"#1baf7a\",\"100%\":\"#4a3aa7\",\n };\n\n // ── Country rows ───────────────────────────────────────────\n const countryRows = countryRes.rows as any[];\n const totalCountry = countryRows.reduce((a: number, r: any[]) => a + Number(r[1]), 0) || 1;\n\n // ── Bucket rows ────────────────────────────────────────────\n const bucketRows = bucketsRes.rows as any[];\n const maxBucket = Math.max(...bucketRows.map((r: any[]) => Number(r[1])), 1);\n\n // ── Session rows ───────────────────────────────────────────\n const sessRows = sessRes.rows as any[];\n\n // ── Build HTML ─────────────────────────────────────────────\n const barW = Math.max(16, Math.floor(620 / Math.max(days, 7)) - 4);\n const barH = 120;\n\n const barChart = labels.map((label, i) => {\n const t = totals[i];\n const u = uniqs[i];\n const th = t > 0 ? Math.max(3, Math.round((t / maxBar) * barH)) : 0;\n const uh = u > 0 ? Math.max(3, Math.round((u / maxBar) * barH)) : 0;\n return `

${label}

`;\n }).join(\"\");\n\n const hourChart = Array.from({ length: 24 }, (_, h) => {\n const v = hourMap[h] ?? 0;\n const hh = v > 0 ? Math.max(3, Math.round((v / maxHour) * 50)) : 0;\n const label = h === 0 ? \"12a\" : h < 12 ? `${h}a` : h === 12 ? \"12p\" : `${h-12}p`;\n return `

0?3:0}px\">

${[0,6,12,18].includes(h)?label:\"\"}

`;\n }).join(\"\");\n\n const countryHTML = countryRows.length === 0\n ? `

No country data

`\n : countryRows.map((r: any[]) => {\n const code = String(r[0]);\n const n = Number(r[1]);\n const pct = Math.round((n / totalCountry) * 100);\n return `

\n ${FLAGS[code]??\"🌍\"}\n ${CNAMES[code]??code}\n

\n ${pct}%\n

`;\n }).join(\"\");\n\n const bucketHTML = bucketRows.length === 0\n ? `

No data yet

`\n : bucketRows.map((r: any[]) => {\n const bucket = String(r[0]);\n const n = Number(r[1]);\n const w = Math.round((n / maxBucket) * 100);\n const col = BCOLORS[bucket] ?? \"#2a78d6\";\n return `

\n ${bucket}\n

\n ${n} view${n!==1?\"s\":\"\"}\n

`;\n }).join(\"\");\n\n const sessHTML = sessRows.length === 0\n ? `

No sessions yet

`\n : `\n \n \n \n \n \n \n \n \n \n \n \n ${sessRows.map((r: any[]) => {\n const pct = Number(r[1]) || 0;\n const col = pctColor(pct);\n const date = String(r[6] ?? \"\").split(\" \")[0];\n return `\n \n \n \n \n \n \n `;\n }).join(\"\")}\n \n

Session	Watched	Duration	Stopped at	Country	Date
${String(r[0]).slice(0,18)}…	${pct}%	${fmt(Number(r[2]))}	${fmt(Number(r[3]))}	${FLAGS[String(r[5])] ?? r[5] ?? \"—\"}	${date}

`;\n\n const dayLinks = [7, 14, 30, 90].map(d =>\n `${d}d`\n ).join(\"\");\n\n const html = `\n\n\n \n \n Analytics — ${videoId}\n \n\n\n\n\n\n

\n\n \n

Total views

${total.toLocaleString()}

${unique} unique sessions

Avg watched

${avgPct}%

${compPct}% completed (80%+)

Avg watch time

${fmt(avgDur)}

of ${fmt(avgLen)} total length

Bounced

0?\"#e24b4a\":\"#1baf7a\"}\">${bounced}

${bouncePct}% watched under 25%

\n\n \n

\n Views over time\n

\n Total\n Unique\n

\n ${barChart}\n

\n First view ${firstView}\n Last view ${lastView}\n Period ${days} days\n

\n\n \n

Top countries${countryRows.length} countries

${countryHTML}

Watch depthby % watched

${bucketHTML}

\n\n \n

Views by hour of dayUTC

\n ${hourChart}\n

\n\n \n

\n Recent sessions\n ${sessRows.length} shown\n

${sessHTML}

\n\n

\n\n`;\n\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" }\n });\n}",[236],"af75c357-af9d-4ff3-b376-1f6817912571","val-ingest-dashboard-copy.ts","f3b84206-718d-11f1-8131-1607ee4eb77e",149,["D",1782498991828],"import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function analyticsDashboard(\n req: Request,\n): Promise {\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"video_id\") ??\n \"vid_high_end_portfolio_01\";\n const days = parseInt(url.searchParams.get(\"days\") ?? \"30\");\n const cutoff = (() => {\n const d = new Date();\n d.setDate(d.getDate() - days);\n return d.toISOString().split(\"T\")[0] + \" 00:00:00\";\n })();\n\n // ── Helpers ────────────────────────────────────────────────\n function fmt(sec: number): string {\n const s = Math.round(sec || 0);\n return `${Math.floor(s / 60)}:${String(s % 60).padStart(2, \"0\")}`;\n }\n\n // ── Query 1: Summary stats ─────────────────────────────────\n const statsRes = await sqlite.execute({\n sql: `\n SELECT\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views,\n ROUND(AVG(percent_watched)) AS avg_pct,\n ROUND(AVG(watch_duration)) AS avg_duration,\n ROUND(AVG(total_duration)) AS avg_length,\n COUNT(CASE WHEN percent_watched >= 80 THEN 1 END) AS completed,\n COUNT(CASE WHEN percent_watched < 25 THEN 1 END) AS bounced\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n `,\n args: [videoId, cutoff],\n });\n const s = statsRes.rows[0] as any[];\n const total = Number(s[0]) || 0;\n const unique = Number(s[1]) || 0;\n const avgPct = Number(s[2]) || 0;\n const avgDur = Number(s[3]) || 0;\n const avgLen = Number(s[4]) || 0;\n const completed = Number(s[5]) || 0;\n const bounced = Number(s[6]) || 0;\n\n // ── Query 2: Views by day ──────────────────────────────────\n const chartRes = await sqlite.execute({\n sql: `\n SELECT\n DATE(created_at) AS day,\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY day\n ORDER BY day ASC\n `,\n args: [videoId, cutoff],\n });\n const chartRows = chartRes.rows as any[];\n\n // Fill all days with 0\n const dayMap: Record = {};\n chartRows.forEach((r: any[]) => {\n dayMap[r[0]] = { t: Number(r[1]), u: Number(r[2]) };\n });\n const chartLabels: string[] = [];\n const chartTotals: number[] = [];\n const chartUniqs: number[] = [];\n for (let i = days - 1; i >= 0; i--) {\n const d = new Date();\n d.setDate(d.getDate() - i);\n const key = d.toISOString().split(\"T\")[0];\n const short = d.toLocaleDateString(\"en\", {\n month: \"short\",\n day: \"numeric\",\n });\n chartLabels.push(short);\n chartTotals.push(dayMap[key]?.t ?? 0);\n chartUniqs.push(dayMap[key]?.u ?? 0);\n }\n\n // ── Query 3: Countries ─────────────────────────────────────\n const countryRes = await sqlite.execute({\n sql: `\n SELECT country, COUNT(*) AS views\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY country\n ORDER BY views DESC\n LIMIT 8\n `,\n args: [videoId, cutoff],\n });\n const countryRows = countryRes.rows as any[];\n\n // ── Query 4: Watch depth buckets ───────────────────────────\n const bucketsRes = await sqlite.execute({\n sql: `\n SELECT\n CASE\n WHEN percent_watched < 25 THEN '0–25%'\n WHEN percent_watched < 50 THEN '25–50%'\n WHEN percent_watched < 75 THEN '50–75%'\n WHEN percent_watched < 100 THEN '75–100%'\n ELSE '100%'\n END AS bucket,\n COUNT(*) AS views\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY bucket\n ORDER BY bucket ASC\n `,\n args: [videoId, cutoff],\n });\n const bucketRows = bucketsRes.rows as any[];\n const maxBucket = Math.max(...bucketRows.map((r: any[]) => Number(r[1])), 1);\n\n // ── Query 5: Recent sessions ───────────────────────────────\n const sessRes = await sqlite.execute({\n sql: `\n SELECT session_id, percent_watched, watch_duration,\n current_position, total_duration, country, created_at\n FROM video_views\n WHERE video_id = ?\n ORDER BY created_at DESC\n LIMIT 15\n `,\n args: [videoId],\n });\n const sessRows = sessRes.rows as any[];\n\n // ── Query 6: All video IDs (for switcher) ──────────────────\n const videosRes = await sqlite.execute(\n `SELECT DISTINCT video_id, COUNT(*) AS views\n FROM video_views\n GROUP BY video_id\n ORDER BY views DESC\n LIMIT 20`,\n );\n const videoList = videosRes.rows as any[];\n\n // ── Build flag map ─────────────────────────────────────────\n const FLAGS: Record = {\n IN: \"🇮🇳\",\n US: \"🇺🇸\",\n GB: \"🇬🇧\",\n DE: \"🇩🇪\",\n CA: \"🇨🇦\",\n AU: \"🇦🇺\",\n FR: \"🇫🇷\",\n SG: \"🇸🇬\",\n AE: \"🇦🇪\",\n NL: \"🇳🇱\",\n JP: \"🇯🇵\",\n BR: \"🇧🇷\",\n PK: \"🇵🇰\",\n NZ: \"🇳🇿\",\n ZA: \"🇿🇦\",\n NG: \"🇳🇬\",\n KE: \"🇰🇪\",\n BD: \"🇧🇩\",\n UNKNOWN: \"🌍\",\n };\n const CNAMES: Record = {\n IN: \"India\",\n US: \"United States\",\n GB: \"United Kingdom\",\n DE: \"Germany\",\n CA: \"Canada\",\n AU: \"Australia\",\n FR: \"France\",\n SG: \"Singapore\",\n AE: \"UAE\",\n NL: \"Netherlands\",\n JP: \"Japan\",\n BR: \"Brazil\",\n PK: \"Pakistan\",\n NZ: \"New Zealand\",\n ZA: \"South Africa\",\n UNKNOWN: \"Unknown\",\n };\n\n // ── HTML builders ──────────────────────────────────────────\n function statCards(): string {\n const completedPct = total > 0 ? Math.round((completed / total) * 100) : 0;\n const bouncedPct = total > 0 ? Math.round((bounced / total) * 100) : 0;\n return `\n

Total views

${total.toLocaleString()}

${unique} unique sessions

Avg watched

${avgPct}%

${completedPct}% completed (80%+)

Avg duration

${fmt(avgDur)}

of ${fmt(avgLen)} total

Bounced

${bounced}

${bouncedPct}% watched under 25%

\n `;\n }\n\n function chartSection(): string {\n const barMax = Math.max(...chartTotals, 1);\n const barW = Math.max(20, Math.floor(560 / days) - 4);\n const barMaxH = 140;\n\n const bars = chartLabels.map((label, i) => {\n const t = chartTotals[i];\n const u = chartUniqs[i];\n const th = t > 0 ? Math.max(4, Math.round((t / barMax) * barMaxH)) : 0;\n const uh = u > 0 ? Math.max(4, Math.round((u / barMax) * barMaxH)) : 0;\n return `\n

0 ? 4 : 0\n }px\">

${label}

\n `;\n }).join(\"\");\n\n return `\n

\n Views over time\n

\n ${\n [7, 14, 30, 90].map((d) =>\n `${d}d`\n ).join(\"\")\n }\n

\n ${bars}\n

\n Total views\n Unique views\n

\n `;\n }\n\n function countriesSection(): string {\n if (countryRows.length === 0) {\n return `

No country data yet

`;\n }\n const totalC =\n countryRows.reduce((a: number, r: any[]) => a + Number(r[1]), 0) || 1;\n return countryRows.map((r: any[]) => {\n const code = String(r[0]);\n const n = Number(r[1]);\n const pct = Math.round((n / totalC) * 100);\n const flag = FLAGS[code] ?? \"🌍\";\n const name = CNAMES[code] ?? code;\n return `\n

\n ${flag}\n ${name}\n

\n ${pct}%\n

\n `;\n }).join(\"\");\n }\n\n function bucketsSection(): string {\n if (bucketRows.length === 0) {\n return `

No data yet

`;\n }\n const colors: Record = {\n \"0–25%\": \"#e24b4a\",\n \"25–50%\": \"#eda100\",\n \"50–75%\": \"#2a78d6\",\n \"75–100%\": \"#1baf7a\",\n \"100%\": \"#4a3aa7\",\n };\n return bucketRows.map((r: any[]) => {\n const bucket = String(r[0]);\n const n = Number(r[1]);\n const pct = Math.round((n / maxBucket) * 100);\n const col = colors[bucket] ?? \"#2a78d6\";\n return `\n

\n ${bucket}\n

\n ${n} view${\n n !== 1 ? \"s\" : \"\"\n }\n

\n `;\n }).join(\"\");\n }\n\n function sessionsSection(): string {\n if (sessRows.length === 0) {\n return `

No sessions yet

`;\n }\n const header = `\n

\n SessionWatchedDurationPositionCountryTime\n

\n `;\n const rows = sessRows.map((r: any[]) => {\n const pct = Number(r[1]) || 0;\n const col = pct >= 80 ? \"#1baf7a\" : pct >= 40 ? \"#eda100\" : \"#e24b4a\";\n const date = String(r[6] ?? \"\").split(\" \")[0];\n return `\n

\n ${\n String(r[0]).slice(0, 20)\n }…\n ${pct}%\n ${fmt(Number(r[2]))}\n ${fmt(Number(r[3]))}\n ${FLAGS[String(r[5])] ?? r[5]}\n ${date}\n

\n `;\n }).join(\"\");\n return header + rows;\n }\n\n function videoSwitcher(): string {\n if (videoList.length <= 1) return \"\";\n const links = videoList.map((r: any[]) => {\n const vid = String(r[0]);\n const views = Number(r[1]);\n const active = vid === videoId;\n return `\n ${vid}\n ${views}\n `;\n }).join(\"\");\n return `\n

Videos

${links}

\n `;\n }\n\n // ── Full HTML page ─────────────────────────────────────────\n const html = `\n\n\n \n \n VideoFrame Analytics — ${videoId}\n \n\n\n\n \n\n

\n\n ${\n videoList.length > 1 ? `` : \"\"\n }\n\n

\n\n ${statCards()}\n ${chartSection()}\n\n

Top countries

${countriesSection()}

Watch depth

${bucketsSection()}

\n\n

\n Recent sessions\n ${sessRows.length} shown\n

${sessionsSection()}

\n\n

\n\n\n`;\n\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}",[243],"94cb8732-c8f7-4e08-8c4d-b72d23d60923","user-api-verify.ts","0d9a19a0-6bd6-11f1-9898-1607ee4eb77e",132,["D",1781870375796],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!\n);\n\nexport default async function handler(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n // ── Extract API key from Authorization header ──────────────────────\n const authHeader = req.headers.get(\"Authorization\") ?? \"\";\n const rawKey = authHeader.replace(\"Bearer \", \"\").trim();\n\n if (!rawKey) {\n return new Response(\n JSON.stringify({ error: \"Missing API key\", code: \"UNAUTHORIZED\" }),\n { status: 401, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"Verifying key:\", rawKey.slice(0, 14) + \"...\");\n\n // ── Call verify function via Supabase RPC ───────────────────────────\n const { data, error } = await supabase\n .rpc(\"verify_workspace_api_key\", { p_raw_key: rawKey });\n\n if (error) {\n console.error(\"RPC error:\", error.message);\n return new Response(\n JSON.stringify({ error: \"Verification failed\" }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n const result = data?.[0];\n\n if (!result || !result.valid) {\n console.log(\"Invalid API key\");\n return new Response(\n JSON.stringify({ error: \"Invalid API key\", code: \"UNAUTHORIZED\" }),\n { status: 401, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"✓ Valid key for workspace:\", result.slug);\n\n // ── Key is valid — proceed with your actual logic ───────────────────\n // Example: return workspace info\n return new Response(\n JSON.stringify({\n ok: true,\n workspace_id: result.workspace_id,\n slug: result.slug,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n}",[250],"6c43c1e9-fd09-4938-9704-8c3ea711b54e","user-api-gen.ts","96963980-6bd3-11f1-bc05-1607ee4eb77e",131,["D",1781870347128],"// Separate Val.town endpoint for key generation\nimport { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nexport default async function generateKey(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n const { workspace_id } = await req.json();\n\n if (!workspace_id) {\n return new Response(\n JSON.stringify({ error: \"Missing workspace_id\" }),\n { status: 400, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n const { data, error } = await supabase\n .rpc(\"generate_workspace_api_key\", { p_workspace_id: workspace_id });\n\n if (error) {\n return new Response(\n JSON.stringify({ error: error.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n const result = data?.[0];\n\n return new Response(\n JSON.stringify({\n raw_key: result.raw_key, // show ONCE to user\n prefix: result.prefix,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n}",[257],"7377c18a-cff9-42c5-af29-07c6e8ffe555","turso-1.ts","47dff6d8-7de8-11f1-9c3f-1607ee4eb77e",168,["D",1783857236190],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nexport default async function (req: Request): Promise {\n // 1. Enforce that only POST requests are processed\n if (req.method !== \"POST\") {\n return new Response(\n JSON.stringify({ error: \"Method not allowed. Use POST.\" }),\n {\n status: 405,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n try {\n // 2. Read the raw incoming body payload\n const payload = await req.json();\n\n // Extract the flat operational columns\n const {\n workspace_id,\n slug,\n plan_tier,\n subscription_status,\n bandwidth_used_gb,\n bandwidth_limit_gb,\n bandwidth_status,\n } = payload;\n\n // 3. Isolate and package the dynamic security properties\n const securityObj = {\n signed_url_enabled: payload.signed_url_enabled ?? false,\n geo_blocking: payload.geo_blocking ||\n { enabled: false, allowed_countries: [] },\n allowed_domains: payload.allowed_domains || [],\n };\n\n // 4. Execute the DB update statement using standard bindings\n await sqlite.execute({\n sql: `INSERT INTO workspaces (\n workspace_id, slug, plan_tier, subscription_status, \n bandwidth_used_gb, bandwidth_limit_gb, bandwidth_status, security_json\n ) VALUES (:id, :slug, :tier, :status, :used, :limit, :b_status, :security)\n ON CONFLICT(workspace_id) DO UPDATE SET\n slug = excluded.slug,\n plan_tier = excluded.plan_tier,\n subscription_status = excluded.subscription_status,\n bandwidth_used_gb = excluded.bandwidth_used_gb,\n bandwidth_limit_gb = excluded.bandwidth_limit_gb,\n bandwidth_status = excluded.bandwidth_status,\n security_json = excluded.security_json,\n updated_at = cast(strftime('%s', 'now') as integer);`,\n args: {\n id: workspace_id,\n slug: slug,\n tier: plan_tier || \"free\",\n status: subscription_status || \"active\",\n used: bandwidth_used_gb || 0.0,\n limit: bandwidth_limit_gb || 100.0,\n b_status: bandwidth_status || \"ok\",\n // The magic step: turns the JS object cleanly into a valid text string for SQLite\n security: JSON.stringify(securityObj),\n },\n });\n\n return new Response(\n JSON.stringify({ success: true, message: \"Workspace sync completed.\" }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n } catch (err) {\n return new Response(\n JSON.stringify({\n error: \"Failed to process request\",\n details: err.message,\n }),\n {\n status: 500,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n}",[264],"7c061a45-1f2d-4900-8b47-d08f69ade354","turso-1-copy.ts","95cb97b0-7dea-11f1-af20-1607ee4eb77e",170,["D",1783858221881],1,"export default async function () {\n // 1. Replace this with your actual live HTTP Val URL\n const targetUrl =\n \"https://sahil8--47dff6d87de811f19c3f1607ee4eb77e.web.val.run\";\n\n // 2. Your exact test payload mirroring your schema properties\n const testPayload = {\n workspace_id: \"2bc2838e-4d28-4c38-8329-615ea34f4654\",\n slug: \"acme-portfolio\",\n plan_tier: \"pro\",\n subscription_status: \"active\",\n bandwidth_used_gb: 842.3,\n bandwidth_limit_gb: 1000,\n bandwidth_status: \"ok\",\n signed_url_enabled: true,\n geo_blocking: {\n enabled: true,\n allowed_countries: [\"US\", \"CA\", \"IN\"],\n },\n allowed_domains: [\"myportfolio.com\", \"www.myportfolio.com\"],\n };\n\n // 3. Fire the request using a true POST method block\n const response = await fetch(targetUrl, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(testPayload),\n });\n\n // 4. Print out what the HTTP Val returns to check if it succeeded\n const result = await response.json();\n console.log(\"Response from your endpoint:\", result);\n}",[271],"5f12fd7c-579c-11f1-b1b8-ee650bb23af1","transparent-video.ts","e74f3afa-578f-11f1-a17e-ee650bb23af1",47,["D",1779646454305],"export default async function (req: Request) {\n if (req.method === \"GET\") {\n return new Response(\"🚀 POST to trigger alpha test\", { status: 200 });\n }\n\n try {\n const taskToken = \"678e72f8ddf002f1ac9c010badc5b08\"; // 👈 Ensure this is a fresh unconsumed token\n\n const qencodeQuery = {\n query: {\n encoder_version: \"2\",\n source: \"https://nyc3.s3.qencode.com/qencode/samples/4k-sample.mov\",\n format: [\n {\n output: \"webm\",\n video_codec: \"libvpx-vp9\",\n height: 360,\n optimize_bitrate: 0,\n video_codec_parameters: {\n pixel_format: \"yuva420p\",\n },\n destination: {\n url: \"b2://backblaze.com/Vvideos/alpha-sample-chrome.webm\",\n key: \"b2key\",\n secret: \"b2secret\",\n },\n },\n {\n output: \"mp4\",\n video_codec: \"libx265\",\n height: 360,\n optimize_bitrate: 0,\n video_codec_parameters: {\n pixel_format: \"yuva420p10le\",\n vtag: \"hvc1\",\n },\n destination: {\n url: \"b2://backblaze.com/Vvideos/alpha-sample-safari.mp4\",\n key: \"b2key\",\n secret: \"b2secret\",\n },\n },\n ],\n },\n };\n\n const formParams = new URLSearchParams();\n formParams.append(\"task_token\", taskToken);\n formParams.append(\"payload\", \"alpha_test\");\n formParams.append(\"query\", JSON.stringify(qencodeQuery));\n\n const response = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: formParams,\n });\n\n const responseText = await response.text();\n console.log(\"📥 Server Response:\", responseText);\n\n return new Response(responseText, {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n } catch (error) {\n return new Response(JSON.stringify({ error: error.message }), {\n status: 500,\n });\n }\n}",[279],"335616e8-4e4e-46df-b1c7-f8c2bb357fad","tinybird.ts","a0d5ba70-7190-11f1-ad8a-1607ee4eb77e",156,["D",1782500485465],"// Add this inside your existing ingest val\n// After the SQLite insert — send to Tinybird as well\n\nconst TINYBIRD_TOKEN = Deno.env.get(\"tinybird\")!;\nconst TINYBIRD_URL =\n \"https://api.europe-west2.gcp.tinybird.co/v0/events?name=video_events\";\n\nawait fetch(TINYBIRD_URL, {\n method: \"POST\",\n headers: { \"Authorization\": `Bearer ${TINYBIRD_TOKEN}` },\n body: JSON.stringify({\n video_id: String(vid_high_end_portfolio_01),\n workspace_slug: String(workspace_slug),\n percent_watched: pct,\n watch_duration: finalDuration,\n current_position: finalPosition,\n total_duration: finalTotal,\n country: finalCountry,\n session_id: finalSessionId,\n timestamp: new Date().toISOString().replace(\"T\", \" \").split(\".\")[0],\n }),\n});\n\nconsole.log(\"✓ Sent to Tinybird\");",[286],"de040b42-2a85-4c5b-85a1-fa113567aee6","test-val.ts","743077a0-853e-11f1-9a8f-1607ee4eb77e",221,["D",1784663887637],"// Minimal test receiver — logs whatever gets POSTed to it, returns it back.\n// Use this to confirm what a webhook/API call is actually sending,\n// before wiring it into a real endpoint.\n\nexport default async function testReceiver(req: Request): Promise {\n const CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Content-Type\": \"application/json\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS });\n }\n\n if (req.method === \"GET\") {\n return new Response(JSON.stringify({ status: \"Test receiver is active\" }), {\n status: 200,\n headers: CORS,\n });\n }\n\n try {\n const rawText = await req.text();\n console.log(\"═══════════════════════════════════════\");\n console.log(\"Method:\", req.method);\n console.log(\"Headers:\", JSON.stringify(Object.fromEntries(req.headers)));\n console.log(\"Raw body:\", rawText);\n\n let parsed: any = null;\n try {\n parsed = JSON.parse(rawText);\n console.log(\"Parsed JSON:\", JSON.stringify(parsed, null, 2));\n } catch {\n console.log(\"Body is not valid JSON — treating as plain text/form data\");\n }\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\n JSON.stringify({\n received: true,\n method: req.method,\n raw_body: rawText,\n parsed_body: parsed,\n headers: Object.fromEntries(req.headers),\n }),\n { status: 200, headers: CORS },\n );\n } catch (err: any) {\n console.error(\"Error reading request:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: CORS },\n );\n }\n}",[293],"f8bc3ce7-ebae-47ea-b7d8-3c94f84997ec","sync-sbase-bunny-setting.json.ts","f04331d8-84f4-11f1-b1fb-1607ee4eb77e",217,["D",1784637667486],9,"// Receives Supabase's Database Webhook, fired when setting_json changes\n// on the workspaces table. Finds the matching row in Bunny Database by\n// workspace id, updates its setting_json column to match.\n\nconst BUNNY_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!;\nconst BUNNY_DB_TOKEN = Deno.env.get(\"bunny_db_token\")!;\n\nexport default async function settingJsonWebhook(req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const payload = await req.json();\n const { type, record, old_record } = payload;\n\n console.log(\"═══════════════════════════════════════\");\n console.log(\"Supabase webhook fired:\", type);\n\n if (type === \"DELETE\") {\n console.log(\"Workspace deleted, nothing to sync:\", old_record?.id);\n return new Response(\"OK\", { status: 200 });\n }\n\n const workspaceId = record?.id;\n const settingJson = record?.setting_json;\n\n console.log(\"workspace id:\", workspaceId);\n console.log(\"setting_json:\", JSON.stringify(settingJson));\n\n if (!workspaceId || !settingJson) {\n console.warn(\"Missing workspace id or setting_json — skipping\");\n return new Response(\"OK\", { status: 200 });\n }\n\n const bunnyRes = await fetch(BUNNY_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `UPDATE \"Workspace\" SET \"setting_json\" = ? WHERE \"workspace_id\" = ?`,\n args: [\n { type: \"text\", value: JSON.stringify(settingJson) },\n { type: \"text\", value: String(workspaceId) },\n ],\n },\n },\n ],\n }),\n });\n\n const bunnyText = await bunnyRes.text();\n\n if (!bunnyRes.ok) {\n console.error(\"Bunny Database update failed:\", bunnyText);\n return new Response(\"OK\", { status: 200 });\n }\n\n console.log(\"Bunny Database response:\", bunnyText);\n console.log(\"Synced setting_json for workspace:\", workspaceId);\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Webhook error:\", err.message);\n return new Response(\"OK\", { status: 200 });\n }\n}",[300],"2187a7a0-9a22-4cd5-829d-df607bb04f9c","sync-sbase-bunny-security.json-copy.ts","4f01ae76-84fe-11f1-a8f5-1607ee4eb77e",214,["D",1784637434026],"// Receives Supabase's Database Webhook, fired ONLY when security_json\n// changes on the workspaces table (see trigger_workspace_security_sync,\n// which has a WHEN clause filtering to just this column — so this\n// endpoint never fires for unrelated updates like bandwidth_used).\n//\n// Flow: Supabase workspaces.security_json changes\n// → Postgres trigger fires automatically\n// → THIS endpoint receives { type, record, old_record }\n// → finds the matching row in Bunny Database by workspace id\n// → updates security_json there too\n\nconst BUNNY_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!; // e.g. https://your-db.bunnydb.net/v2/pipeline\nconst BUNNY_DB_TOKEN = Deno.env.get(\"bunny_db_token\")!;\n\nexport default async function securityJsonWebhook(req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n // Supabase Database Webhook payload shape: { type, table, record, old_record, schema }\n const payload = await req.json();\n const { type, record, old_record } = payload;\n\n console.log(\"═══════════════════════════════════════\");\n console.log(\"Supabase webhook fired:\", type);\n\n // DELETE: nothing to sync — a deleted workspace has no security settings to mirror\n if (type === \"DELETE\") {\n console.log(\"Workspace deleted, nothing to sync:\", old_record?.id);\n return new Response(\"OK\", { status: 200 });\n }\n\n // INSERT or UPDATE — record has the full current row\n const workspaceId = record?.id;\n const securityJson = record?.security_json;\n\n console.log(\"workspace id:\", workspaceId);\n console.log(\"security_json:\", JSON.stringify(securityJson));\n\n if (!workspaceId || !securityJson) {\n console.warn(\"Missing workspace id or security_json — skipping\");\n return new Response(\"OK\", { status: 200 });\n }\n\n // ── Find the matching row in Bunny Database by workspace id, then update ──\n const bunnyRes = await fetch(BUNNY_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `UPDATE \"Workspace\" SET \"security_json\" = ? WHERE \"workspace_id\" = ?`,\n args: [\n { type: \"text\", value: JSON.stringify(securityJson) },\n { type: \"text\", value: String(workspaceId) },\n ],\n },\n },\n ],\n }),\n });\n\n const bunnyText = await bunnyRes.text();\n\n if (!bunnyRes.ok) {\n console.error(\"Bunny Database update failed:\", bunnyText);\n // Don't fail the webhook response over this — Supabase already has the\n // correct data, and your hourly reconciliation cron is the safety net.\n return new Response(\"OK\", { status: 200 });\n }\n\n console.log(\"Bunny Database response:\", bunnyText);\n console.log(\"Synced security_json for workspace:\", workspaceId);\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Webhook error:\", err.message);\n return new Response(\"OK\", { status: 200 }); // always 200 so Supabase doesn't retry-storm\n }\n}",[308],"d97fc039-beba-4e55-9fd3-c38bef4d1134","superbase-webhook.ts","44c3b722-81e0-11f1-98a1-1607ee4eb77e",196,["D",1784293740578],"// Receives Supabase's native Database Webhook payload (fires automatically\n// on INSERT/UPDATE/DELETE to the videos table — no manual call needed from\n// api-2/api-3/anywhere else). This is Layer 2 of the 3-layer sync pattern:\n// Layer 1 = explicit call at mutation point (already built in api-3, update-video-settings)\n// Layer 2 = this file — catches changes from ANY source, not just your own endpoints\n// Layer 3 = hourly cron reconciliation (not yet built)\n\nconst BUNNY_VIDEOS_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!;\nconst BUNNY_VIDEOS_DB_TOKEN = Deno.env.get(\"bunny_db_token\")!;\n\nexport default async function supabaseVideosWebhook(\n req: Request,\n): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n // Supabase Database Webhook payload shape:\n // { type: \"INSERT\" | \"UPDATE\" | \"DELETE\", table, record, old_record, schema }\n const payload = await req.json();\n const { type, record, old_record } = payload;\n\n console.log(\"Supabase webhook fired:\", type, record?.id ?? old_record?.id);\n\n if (type === \"DELETE\") {\n // Remove from Bunny Database too\n const videoId = old_record?.id;\n if (!videoId) return new Response(\"OK\", { status: 200 });\n\n await fetch(BUNNY_VIDEOS_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_VIDEOS_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [{\n type: \"execute\",\n stmt: {\n sql: `DELETE FROM \"Video\" WHERE video_id = ?`,\n args: [{ type: \"text\", value: String(videoId) }],\n },\n }],\n }),\n });\n\n return new Response(\"OK\", { status: 200 });\n }\n\n // INSERT or UPDATE — record has the full current row\n if (!record?.id) return new Response(\"OK\", { status: 200 });\n\n // Need workspace_slug, which isn't on the videos row itself —\n // Supabase's webhook payload only gives you the raw row, no joins.\n // Fetch it separately (small extra query, but keeps this endpoint\n // simple and not dependent on payload shape assumptions).\n const wsRes = await fetch(\n `${\n Deno.env.get(\"superbaseurl\")\n }/rest/v1/workspaces?id=eq.${record.workspace_id}&select=slug`,\n {\n headers: {\n \"apikey\": Deno.env.get(\"superbasesecretkey\")!,\n \"Authorization\": `Bearer ${Deno.env.get(\"superbasesecretkey\")}`,\n },\n },\n );\n const wsData = await wsRes.json();\n const workspaceSlug = wsData?.[0]?.slug;\n\n if (!workspaceSlug) {\n console.warn(\n \"⚠️ No workspace_slug found — skipping Bunny sync for video\",\n record.id,\n );\n return new Response(\"OK\", { status: 200 });\n }\n\n const bunnyRes = await fetch(BUNNY_VIDEOS_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_VIDEOS_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [{\n type: \"execute\",\n stmt: {\n sql: `\n INSERT INTO \"Video\" (\n video_id, workspace_id, workspace_slug, folder_id, file_name,\n mp4_url, thumbnail_url, duration, status,\n output_size_bytes, width, height, bitrate, error_message,\n seo_title, player_config_json, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(video_id) DO UPDATE SET\n workspace_slug = excluded.workspace_slug,\n folder_id = excluded.folder_id,\n file_name = excluded.file_name,\n mp4_url = excluded.mp4_url,\n thumbnail_url = excluded.thumbnail_url,\n duration = excluded.duration,\n status = excluded.status,\n output_size_bytes = excluded.output_size_bytes,\n width = excluded.width,\n height = excluded.height,\n bitrate = excluded.bitrate,\n error_message = excluded.error_message,\n seo_title = excluded.seo_title,\n player_config_json = excluded.player_config_json,\n updated_at = excluded.updated_at\n `,\n args: [\n { type: \"text\", value: String(record.id) },\n { type: \"text\", value: String(record.workspace_id) },\n { type: \"text\", value: workspaceSlug },\n {\n type: record.folder_id ? \"text\" : \"null\",\n value: record.folder_id ? String(record.folder_id) : null,\n },\n { type: \"text\", value: record.title ?? \"untitled\" },\n {\n type: record.video_url ? \"text\" : \"null\",\n value: record.video_url ?? null,\n },\n {\n type: record.thumbnail_url ? \"text\" : \"null\",\n value: record.thumbnail_url ?? null,\n },\n { type: \"float\", value: record.duration ?? 0 },\n { type: \"text\", value: record.status ?? \"pending\" },\n { type: \"integer\", value: record.transcoded_size ?? 0 },\n { type: \"integer\", value: record.width ?? 0 },\n { type: \"integer\", value: record.height ?? 0 },\n { type: \"integer\", value: record.bitrate ?? 0 },\n {\n type: record.error_description ? \"text\" : \"null\",\n value: record.error_description ?? null,\n },\n { type: \"text\", value: record.title ?? \"\" },\n {\n type: \"text\",\n value: JSON.stringify(record.player_config ?? {}),\n },\n { type: \"text\", value: new Date().toISOString() },\n ],\n },\n }],\n }),\n });\n\n if (!bunnyRes.ok) {\n console.error(\"⚠️ Bunny Database sync failed:\", await bunnyRes.text());\n } else {\n console.log(\"✓ Synced via Supabase webhook:\", record.id);\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Webhook error:\", err.message);\n return new Response(\"OK\", { status: 200 }); // always 200 so Supabase doesn't retry-storm\n }\n}",[315],"a6736b62-45ab-4d6d-932b-5659c010bc8b","superbase-dashbaord.ts","2437eede-60ce-11f1-9b6d-1607ee4eb77e",89,["D",1780688339092],"export default async function handler(req) {\n const SUPABASE_URL = Deno.env.get(\"superbaseurl\");\n const SUPABASE_KEY = Deno.env.get(\"superbasesecretkey\");\n const TABLE = \"bw_hourly\";\n\n const res = await fetch(`${SUPABASE_URL}/rest/v1/${TABLE}?limit=1000`, {\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n });\n\n const data = await res.json();\n\n function buildStats(data) {\n if (!data?.length) {\n return `

Rows

`;\n }\n const cols = Object.keys(data[0]);\n const urlCol = cols.find((c) =>\n c.toLowerCase().includes(\"url\") || c.toLowerCase().includes(\"domain\")\n );\n const urls = urlCol\n ? [...new Set(data.map((r) => r[urlCol]).filter(Boolean))]\n : [];\n return `

Total rows

${data.length}

Unique URLs

${\n urls.length || \"—\"\n }

Columns

${cols.length}

Table

bandwidth_hours

`;\n }\n\n function buildURLPanel(data) {\n if (!data?.length) {\n return `

URLs

No data

`;\n }\n const cols = Object.keys(data[0]);\n const urlCol = cols.find((c) =>\n c.toLowerCase().includes(\"url\") || c.toLowerCase().includes(\"domain\") ||\n c.toLowerCase().includes(\"host\")\n );\n if (!urlCol) {\n return `

URLs no url column found

No URL-type column detected

`;\n }\n const urls = [...new Set(data.map((r) => r[urlCol]).filter(Boolean))];\n const items = urls.map((u) => {\n const count = data.filter((r) => r[urlCol] === u).length;\n return `

${u}${count} rows

`;\n }).join(\"\");\n return `

URL list ${urls.length} urls

${items}

`;\n }\n\n function buildTablePanel(data) {\n if (!data?.length) {\n return `

Data

No rows returned

`;\n }\n const cols = Object.keys(data[0]);\n const headers = cols.map((c) => `${c}`).join(\"\");\n const rows = data.slice(0, 100).map((row) =>\n \"\" + cols.map((c) => {\n const v = row[c];\n return v === null\n ? `null`\n : `${String(v)}`;\n }).join(\"\") + \"\"\n ).join(\"\");\n return `

Table data ${data.length} rows

${headers}${rows}

`;\n }\n\n const html = `\n\n\n Bandwidth Hours Dashboard\n \n \n\n\n \n

\n ${buildStats(data)}\n

\n ${buildURLPanel(data)}\n ${buildTablePanel(data)}\n

\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html\" } });\n}",[322],"df0bb576-cc9e-4efe-8595-5e7b311b573b","superbase-dashbaord-copy.ts",99,["D",1781118645231],"export default async function handler(req) {\n const SUPABASE_URL = Deno.env.get(\"superbaseurl\");\n const SUPABASE_KEY = Deno.env.get(\"superbasesecretkey\");\n const TABLE = \"bw_hourly\";\n\n const res = await fetch(\n `${SUPABASE_URL}/rest/v1/${TABLE}?limit=1000&order=date_hour.asc`,\n {\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n },\n );\n\n const data = await res.json();\n\n // Group bytes_used by date (day)\n const byDate = {};\n const byWorkspace = {};\n\n for (const row of data) {\n const day = row.date_hour?.slice(0, 10) || \"unknown\";\n const ws = row.workspace_slug || \"unknown\";\n const bytes = Number(row.bytes_used) || 0;\n\n byDate[day] = (byDate[day] || 0) + bytes;\n byWorkspace[ws] = (byWorkspace[ws] || 0) + bytes;\n }\n\n const dates = Object.keys(byDate).sort();\n const byteValues = dates.map((d) => byDate[d]);\n const maxBytes = Math.max(...byteValues, 1);\n\n function fmtBytes(b) {\n if (b >= 1e9) return (b / 1e9).toFixed(2) + \" GB\";\n if (b >= 1e6) return (b / 1e6).toFixed(1) + \" MB\";\n if (b >= 1e3) return (b / 1e3).toFixed(0) + \" KB\";\n return b + \" B\";\n }\n\n const totalBytes = byteValues.reduce((a, b) => a + b, 0);\n const totalHits = data.reduce((a, r) => a + (Number(r.hits) || 0), 0);\n\n // Top workspaces\n const topWS = Object.entries(byWorkspace)\n .sort((a, b) => b[1] - a[1])\n .slice(0, 8);\n\n const wsMax = topWS[0]?.[1] || 1;\n\n // Build chart bars\n const bars = dates.map((d, i) => {\n const pct = (byteValues[i] / maxBytes * 100).toFixed(1);\n const label = d.slice(5); // MM-DD\n return `\n

${fmtBytes(byteValues[i])}

${label}

`;\n }).join(\"\");\n\n // Workspace rows\n const wsRows = topWS.map(([name, bytes]) => {\n const pct = (bytes / wsMax * 100).toFixed(1);\n return `\n

${name}

${fmtBytes(bytes)}

`;\n }).join(\"\");\n\n const html = `\n\n\n Bandwidth Dashboard\n \n \n\n\n \n\n

Total bandwidth

${fmtBytes(totalBytes)}

all time

Total hits

${totalHits.toLocaleString()}

requests

Days tracked

${dates.length}

unique days

Workspaces

${topWS.length}

active

\n\n

Bytes used by date

\n ${bars}\n

\n\n

Top workspaces by bandwidth

\n ${wsRows}\n

Raw data — ${data.length} rows

\n \n \n \n \n \n \n \n \n \n ${\n data.slice(0, 200).map((r) =>\n `\n \n \n \n \n \n `\n ).join(\"\")\n }\n \n

workspace	date_hour	bytes	hits	country
${\n r.workspace_slug \|\| 'null'\n }	${r.date_hour?.slice(0, 16) \|\| \"\"}	${fmtBytes(Number(r.bytes_used) \|\| 0)}	${r.hits \|\| 0}	${r.country \|\| \"—\"}

\n\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html\" } });\n}",[329],"c24878b4-5476-11f1-b9b8-ee650bb23af1","sseconsole.ts","a66fad06-5476-11f1-888c-ee650bb23af1",16,["D",1779300446748],"export default async function (req: Request): Promise {\n let count = 0;\n let intervalId: any;\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n start(controller) {\n // Send a fake update every 2 seconds\n intervalId = setInterval(() => {\n count++;\n \n const payload = { \n message: `Hello from Val Town! Test message #${count}`, \n progress: count * 20 \n };\n \n // SSE requires formatting text exactly like: \"data: {your json}\\n\\n\"\n controller.enqueue(encoder.encode(`data: ${JSON.stringify(payload)}\\n\\n`));\n\n // Stop streaming once we hit 5 updates\n if (count >= 5) {\n clearInterval(intervalId);\n controller.close();\n }\n }, 2000);\n },\n cancel() {\n clearInterval(intervalId);\n },\n });\n\n // Return the special event-stream headers\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/event-stream\",\n \"Cache-Control\": \"no-cache\",\n \"Connection\": \"keep-alive\",\n \"Access-Control-Allow-Origin\": \"*\", // Allows WeWeb to read it\n },\n });\n}",[335],"5a159f9c-5476-11f1-b3fe-ee650bb23af1","serve-test-event.ts","2159923a-5476-11f1-8a21-ee650bb23af1",["D",1779300271932],[342],"8ad1199c-5609-11f1-bb17-ee650bb23af1","serve-side-test-3.ts","6f7eeec0-5605-11f1-932e-ee650bb23af1",35,["D",1779473440824],"import { sqlite } from \"https://esm.town/v/std/sqlite@14-main/main.ts\";\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"videoId\");\n\n if (!videoId) return new Response(\"videoId required\", { status: 400 });\n\n // SSE stream setup\n let intervalId: any;\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n async start(controller) {\n // Read latest status from SQLite for this video\n const poll = async () => {\n try {\n const result = await sqlite.execute({\n sql: `SELECT status, percent FROM qencode WHERE task_token = ?`,\n args: [videoId],\n });\n\n const row = result.rows[0];\n if (!row) return;\n\n const percent = Number(row[1]);\n const status = String(row[0]);\n\n // Push to WeWeb\n controller.enqueue(encoder.encode(\n `data: ${\n JSON.stringify({\n videoId,\n progress: percent,\n status,\n })\n }\\n\\n`,\n ));\n\n // Close when done\n if (status === \"completed\" || status === \"error\") {\n clearInterval(intervalId);\n controller.close();\n }\n } catch (e) {\n console.error(\"SQLite error:\", e);\n }\n };\n\n // Run immediately + every 2s\n await poll();\n intervalId = setInterval(poll, 2000);\n },\n cancel() {\n clearInterval(intervalId);\n },\n });\n\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/event-stream\",\n \"Cache-Control\": \"no-cache\",\n \"Connection\": \"keep-alive\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n}",[347],"08ebfbd2-55e0-11f1-a144-ee650bb23af1","serve-side-test-2.ts","71533b8a-55be-11f1-a96e-ee650bb23af1",31,["D",1779455613548],"export default async function (req: Request): Promise {\n const url = new URL(req.url)\n const videoId = url.searchParams.get('video_id') // ← receive from WeWeb\n\n let count = 0;\n let intervalId: any;\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n start(controller) {\n intervalId = setInterval(() => {\n count++;\n\n const progress = count * 20\n\n const payload = {\n progress,\n video_id: videoId, // ← send back to WeWeb\n done: count >= 5 ? true : false // ← signals WeWeb to stop\n };\n\n controller.enqueue(encoder.encode(`data: ${JSON.stringify(payload)}\\n\\n`));\n\n if (count >= 5) {\n clearInterval(intervalId);\n controller.close();\n }\n }, 2000);\n },\n cancel() {\n clearInterval(intervalId);\n },\n });\n\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/event-stream\",\n \"Cache-Control\": \"no-cache\",\n \"Connection\": \"keep-alive\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n}",[354],"a3a32fdd-62a4-4478-8ee9-3df5ca8008a0","lm-webhook.ts","3a4aae8e-6752-11f1-b6e2-1607ee4eb77e",117,["D",1781374100672],"import { createHmac, timingSafeEqual } from \"node:crypto\"\n\nexport default async function(req: Request): Promise {\n const cors = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Signature\",\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors })\n }\n\n try {\n const rawBody = await req.text()\n const signature = req.headers.get(\"X-Signature\") ?? \"\"\n const secret = Deno.env.get(\"lemonsqueezewebhooksecret\")!\n\n // ── Verify signature ───────────────────────────────\n const hmac = createHmac(\"sha256\", secret)\n const digest = hmac.update(rawBody).digest(\"hex\")\n\n const valid = signature.length === digest.length &&\n timingSafeEqual(Buffer.from(digest, \"hex\"), Buffer.from(signature, \"hex\"))\n\n if (!valid) {\n console.error(\"❌ Invalid signature\")\n console.log(\"Expected:\", digest)\n console.log(\"Received:\", signature)\n return new Response(\"Invalid signature\", { status: 401, headers: cors })\n }\n\n console.log(\"✅ Signature verified\")\n\n const payload = JSON.parse(rawBody)\n\n console.log(\"─────────────────────────────\")\n console.log(\"🍋 Event:\", payload.meta?.event_name)\n console.log(\"📦 Custom data:\", JSON.stringify(payload.meta?.custom_data))\n console.log(\"─────────────────────────────\")\n\n return new Response(\"OK\", { status: 200, headers: cors })\n\n } catch (err) {\n console.error(\"❌ Error:\", err.message)\n return new Response(JSON.stringify({ error: err.message }), {\n status: 500,\n headers: cors\n })\n }\n}",[361],"a826b71a-b63a-48ff-9415-b4d83ccc5b43","lm-4.ts","89684f78-67f0-11f1-a9d0-1607ee4eb77e",122,["D",1781441928237],"import { createClient } from \"npm:@supabase/supabase-js\";\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nasync function verifySignature(\n rawBody: string,\n signature: string,\n secret: string,\n): Promise {\n try {\n const hmac = createHmac(\"sha256\", secret);\n const digest = hmac.update(rawBody).digest(\"hex\");\n\n if (signature.length !== digest.length) return false;\n\n return timingSafeEqual(\n Buffer.from(digest, \"hex\"),\n Buffer.from(signature, \"hex\"),\n );\n } catch (err) {\n console.error(\"❌ Signature error:\", err.message);\n return false;\n }\n}\n\nexport default async function (req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Signature\",\n };\n\n if (req.method === \"GET\") {\n return new Response(\"Webhook Active\", { status: 200, headers: cors });\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const rawBody = await req.text();\n const signature = req.headers.get(\"X-Signature\") ?? \"\";\n const secret = Deno.env.get(\"lemonsqueezewebhooksecret\") ?? \"\";\n\n console.log(\"─────────────────────────────────\");\n console.log(\"📨 Received webhook\");\n console.log(\"📝 Signature:\", signature ? \"present\" : \"missing\");\n console.log(\"🔑 Secret:\", secret ? \"set\" : \"MISSING!\");\n\n // ── Verify signature ───────────────────────────────────\n const valid = await verifySignature(rawBody, signature, secret);\n\n if (!valid) {\n console.error(\"❌ Invalid signature\");\n return new Response(\"Invalid signature\", { status: 401, headers: cors });\n }\n\n console.log(\"✅ Signature verified\");\n\n // Parse JSON\n let payload: any = {};\n try {\n payload = JSON.parse(rawBody);\n } catch (e) {\n console.error(\"❌ Failed to parse JSON:\", e.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const eventName = payload.meta?.event_name;\n const customData = payload.meta?.custom_data;\n const data = payload.data?.attributes;\n const lsId = String(payload.data?.id ?? \"\");\n\n console.log(\"🍋 Event:\", eventName);\n console.log(\"📦 Custom data:\", JSON.stringify(customData));\n console.log(\"🔍 variant_id:\", data?.variant_id);\n console.log(\"🔍 status:\", data?.status);\n console.log(\"🔍 lsId:\", lsId);\n\n if (!data || !eventName) {\n console.warn(\"⚠️ No data or event — skipping\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n // ── Step 1: Resolve workspace_id ──────────────────────\n let workspaceId: string | null = customData?.workspace_id ?? null;\n\n if (!workspaceId) {\n const email = data.user_email || data.customer_email;\n console.log(\"⚠️ No workspace_id in custom_data, trying email:\", email);\n\n if (email) {\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id\")\n .eq(\"owner_email\", email)\n .single();\n\n console.log(\n \"🔍 Workspace by email:\",\n JSON.stringify(ws),\n wsErr?.message,\n );\n workspaceId = ws?.id ?? null;\n }\n }\n\n if (!workspaceId) {\n console.error(\"❌ Could not resolve workspace_id — aborting\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"✅ workspace_id:\", workspaceId);\n\n // ── Step 2: Find subscription row by workspace_id ─────\n const { data: existingRow, error: findErr } = await supabase\n .from(\"subscriptions\")\n .select(\"id, workspace_id, status\")\n .eq(\"workspace_id\", workspaceId)\n .single();\n\n console.log(\"🔍 Existing row:\", JSON.stringify(existingRow));\n console.log(\"🔍 Find error:\", findErr?.message ?? \"none\");\n\n if (!existingRow) {\n console.warn(\"⚠️ No row found — creating default row\");\n\n const { data: inserted, error: insertErr } = await supabase\n .from(\"subscriptions\")\n .insert({\n workspace_id: workspaceId,\n status: \"active\",\n created_at: new Date().toISOString(),\n updated_at: new Date().toISOString(),\n })\n .select()\n .single();\n\n console.log(\"✅ Inserted:\", JSON.stringify(inserted));\n console.log(\"❌ Insert error:\", insertErr?.message ?? \"none\");\n\n if (insertErr) {\n console.error(\"❌ Could not create row:\", insertErr.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n }\n\n // ── Step 3: Build update data ─────────────────────────\n const variantId = String(data.variant_id ?? \"\");\n const updateData: any = {\n updated_at: new Date().toISOString(),\n };\n\n switch (eventName) {\n case \"subscription_created\":\n case \"subscription_updated\":\n case \"subscription_resumed\":\n case \"subscription_unpaused\":\n Object.assign(updateData, {\n ls_subscription_id: lsId,\n ls_customer_id: String(data.customer_id ?? \"\"),\n ls_order_id: data.order_id ? String(data.order_id) : null,\n ls_variant_id: variantId || null,\n subscription_plan: variantId || null,\n status: data.status ?? \"active\",\n cancelled: data.cancelled ?? false,\n pause: data.pause ?? null,\n card_brand: data.card_brand ?? null,\n card_last_four: data.card_last_four ?? null,\n trial_ends_at: data.trial_ends_at ?? null,\n renews_at: data.renews_at ?? null,\n ends_at: data.ends_at ?? null,\n billing_anchor: new Date().getDate(),\n reset_day: new Date().getDate(),\n url_update_payment: data.urls?.update_payment_method ?? null,\n url_customer_portal: data.urls?.customer_portal ?? null,\n url_update_subscription:\n data.urls?.customer_portal_update_subscription ?? null,\n test_mode: data.test_mode ?? false,\n });\n break;\n\n case \"subscription_cancelled\":\n Object.assign(updateData, {\n status: \"cancelled\",\n cancelled: true,\n ends_at: data.ends_at ?? null,\n });\n break;\n\n case \"subscription_expired\": {\n const { data: freePlan } = await supabase\n .from(\"plans\")\n .select(\"ls_variant_id\")\n .eq(\"name\", \"free\")\n .single();\n\n Object.assign(updateData, {\n status: \"expired\",\n subscription_plan: freePlan?.ls_variant_id ?? null,\n ls_subscription_id: null,\n });\n break;\n }\n\n case \"subscription_paused\":\n Object.assign(updateData, {\n status: \"paused\",\n pause: data.pause ?? null,\n });\n break;\n\n case \"subscription_payment_failed\":\n Object.assign(updateData, { status: \"past_due\" });\n break;\n\n case \"subscription_payment_success\":\n case \"subscription_payment_recovered\":\n Object.assign(updateData, { status: \"active\" });\n break;\n\n default:\n console.log(\"ℹ️ Unhandled event:\", eventName);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"📝 updateData:\", JSON.stringify(updateData));\n\n // ── Step 4: Update row by workspace_id ───────────────\n const { data: updated, error: updateErr } = await supabase\n .from(\"subscriptions\")\n .update(updateData)\n .eq(\"workspace_id\", workspaceId)\n .select();\n\n console.log(\"✅ Updated:\", JSON.stringify(updated));\n console.log(\"❌ Update error:\", updateErr?.message ?? \"none\");\n\n if (updateErr) {\n console.error(\"❌ Update failed:\", updateErr.message);\n } else if (!updated || updated.length === 0) {\n console.warn(\"⚠️ No rows updated for workspace_id:\", workspaceId);\n } else {\n console.log(\"✓ Row updated:\", updated[0]?.id, \"→\", updateData.status);\n }\n\n console.log(\"─────────────────────────────────\");\n return new Response(\"OK\", { status: 200, headers: cors });\n } catch (err: any) {\n console.error(\"❌ Critical error:\", err.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n}",[368],"7df9053a-7a4d-47ca-af29-3140cb66c58b","lemonsqueeze.ts","35696194-65cc-11f1-b16a-1607ee4eb77e",105,["D",1781263384100],"export default async function createCheckout(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405, headers: cors });\n }\n\n try {\n const body = await req.json();\n\n const workspace_id = body.workspace_id;\n const variant_id = body.variant_id;\n const email = body.email ?? null; // prefill email\n const name = body.name ?? null; // prefill name\n\n if (!workspace_id || !variant_id) {\n return new Response(\n JSON.stringify({ error: \"Missing workspace_id or variant_id\" }),\n {\n status: 400,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n const LS_API_KEY = Deno.env.get(\"lemonsqueezeapi\")!;\n const LS_STORE_ID = Deno.env.get(\"47660\")!;\n\n console.log(\"Creating checkout for workspace:\", workspace_id);\n console.log(\"variant_id:\", variant_id);\n console.log(\"email:\", email);\n\n // ── Build checkout_data ───────────────────────────────────────────\n const checkout_data: any = {\n // Custom data — available in webhook meta.custom_data\n custom: {\n workspace_id: String(workspace_id),\n },\n };\n\n // Prefill email if provided\n if (email) checkout_data.email = email;\n\n // Prefill name if provided\n if (name) checkout_data.name = name;\n\n // ── Build checkout attributes ─────────────────────────────────────\n const attributes: any = {\n checkout_data,\n\n // Checkout options\n checkout_options: {\n embed: false, // true = overlay, false = hosted page\n media: true, // show product media\n logo: true, // show store logo\n desc: true, // show product description\n discount: true, // allow discount codes\n button_color: \"#5B4CF5\", // checkout button color\n },\n\n // Product options\n product_options: {\n name: null, // override product name (null = use LS default)\n description: null, // override description\n media: [],\n redirect_url: `${Deno.env.get(\"APP_URL\")}/dashboard?upgraded=true`,\n receipt_button_text: \"Go to dashboard\",\n receipt_link_url: `${Deno.env.get(\"APP_URL\")}/dashboard`,\n receipt_thank_you_note: \"Thank you for upgrading VideoFrame!\",\n enabled_variants: [], // empty = show all variants\n },\n\n // Expiry — checkout link expires in 24 hours\n expires_at: new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString(),\n\n // Test mode\n test_mode: Deno.env.get(\"LS_TEST_MODE\") === \"true\",\n };\n\n // ── Call Lemon Squeezy API ────────────────────────────────────────\n const res = await fetch(\"https://api.lemonsqueezy.com/v1/checkouts\", {\n method: \"POST\",\n headers: {\n \"Accept\": \"application/vnd.api+json\",\n \"Content-Type\": \"application/vnd.api+json\",\n \"Authorization\": `Bearer ${LS_API_KEY}`,\n },\n body: JSON.stringify({\n data: {\n type: \"checkouts\",\n attributes,\n relationships: {\n store: {\n data: {\n type: \"stores\",\n id: String(LS_STORE_ID),\n },\n },\n variant: {\n data: {\n type: \"variants\",\n id: String(273481),\n },\n },\n },\n },\n }),\n });\n\n const data = await res.json();\n\n if (!res.ok) {\n console.error(\"LS API error:\", JSON.stringify(data));\n return new Response(\n JSON.stringify({ error: \"Lemon Squeezy error\", details: data }),\n {\n status: 500,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n const checkoutUrl = data?.data?.attributes?.url;\n const expiresAt = data?.data?.attributes?.expires_at;\n\n console.log(\"✓ Checkout URL:\", checkoutUrl);\n console.log(\"✓ Expires at:\", expiresAt);\n\n return new Response(\n JSON.stringify({\n url: checkoutUrl,\n expires_at: expiresAt,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n } catch (err: any) {\n console.error(\"Error:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n}",[375],"2f7844ad-f6bc-4213-ac7f-a5ba16c56b88","lemonsqueeze-copy.ts","a6939656-674c-11f1-9715-1607ee4eb77e",112,["D",1781372753937],"export default async function(req: Request): Promise {\n const cors = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors })\n }\n\n try {\n const text = await req.text()\n console.log(\"📦 Raw body:\", text)\n\n if (!text) {\n return new Response(JSON.stringify({ error: \"Empty request body\" }), {\n status: 400,\n headers: cors\n })\n }\n\n const { workspace_id } = JSON.parse(text)\n const workspaceId = workspace_id\n\n if (!workspaceId) {\n return new Response(JSON.stringify({ error: \"Missing workspace_id\" }), {\n status: 400,\n headers: cors\n })\n }\n\n const lemonsqueezeapi = Deno.env.get(\"lemonsqueezeapi\")\n\n const res = await fetch(\"https://api.lemonsqueezy.com/v1/checkouts\", {\n method: \"POST\",\n headers: {\n \"Accept\": \"application/vnd.api+json\",\n \"Content-Type\": \"application/vnd.api+json\",\n \"Authorization\": `Bearer ${lemonsqueezeapi}`\n },\n body: JSON.stringify({\n data: {\n type: \"checkouts\",\n attributes: {\n checkout_data: {\n custom: { workspace_id: workspaceId }\n }\n },\n relationships: {\n store: { data: { type: \"stores\", id: String(47660) } },\n variant: { data: { type: \"variants\", id: String(385499) } }\n }\n }\n })\n })\n\n const data = await res.json()\n\n if (!res.ok) {\n console.error(\"LS error:\", JSON.stringify(data))\n return new Response(JSON.stringify({ error: \"Lemon Squeezy error\", details: data }), {\n status: 500,\n headers: cors\n })\n }\n\n const checkoutUrl = data.data.attributes.url\n\n return new Response(JSON.stringify({ url: checkoutUrl }), { headers: cors })\n\n } catch (err) {\n console.error(\"Error:\", err.message)\n return new Response(JSON.stringify({ error: err.message }), {\n status: 500,\n headers: cors\n })\n }\n}",[382],"73646f01-cc93-4dca-9db0-03dd8474f2f1","ingest-valtown.ts","1cbcac0e-6fc3-11f1-b799-1607ee4eb77e",143,["D",1782495636163],"import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function ingestVideoAnalytics(\n req: Request,\n): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n // ── Ensure table exists ───────────────────────────────────────\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS video_views (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n video_id TEXT NOT NULL,\n workspace_slug TEXT NOT NULL,\n percent_watched INTEGER NOT NULL,\n watch_duration INTEGER NOT NULL,\n current_position INTEGER NOT NULL DEFAULT 0,\n total_duration INTEGER NOT NULL DEFAULT 0,\n country TEXT NOT NULL DEFAULT 'UNKNOWN',\n session_id TEXT NOT NULL DEFAULT 'unknown',\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )\n `);\n\n // Patch existing table — add any missing columns silently\n const patches = [\n `ALTER TABLE video_views ADD COLUMN session_id TEXT NOT NULL DEFAULT 'unknown'`,\n `ALTER TABLE video_views ADD COLUMN current_position INTEGER NOT NULL DEFAULT 0`,\n `ALTER TABLE video_views ADD COLUMN total_duration INTEGER NOT NULL DEFAULT 0`,\n ];\n for (const sql of patches) {\n try {\n await sqlite.execute(sql);\n } catch (e) { /* column already exists — ignore */ }\n }\n\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_video_id ON video_views (video_id)`,\n );\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_session_id ON video_views (session_id)`,\n );\n\n // ── GET — stats ───────────────────────────────────────────────\n if (req.method === \"GET\") {\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"video_id\");\n\n if (videoId) {\n const stats = await sqlite.execute({\n sql: `\n SELECT\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views,\n ROUND(AVG(percent_watched)) AS avg_pct,\n ROUND(AVG(watch_duration)) AS avg_watch_duration,\n ROUND(AVG(total_duration)) AS avg_total_duration,\n ROUND(AVG(current_position)) AS avg_position_stopped\n FROM video_views\n WHERE video_id = ?\n `,\n args: [videoId],\n });\n\n const row = stats.rows[0];\n\n return Response.json({\n video_id: videoId,\n total_views: row[0],\n unique_views: row[1],\n avg_pct: row[2],\n avg_watch_duration: row[3],\n avg_total_duration: row[4],\n avg_position_stopped: row[5],\n }, { headers: cors });\n }\n\n // No video_id — return all rows\n const all = await sqlite.execute(\n `SELECT * FROM video_views ORDER BY created_at DESC LIMIT 50`,\n );\n return Response.json({ rows: all.rows }, { headers: cors });\n }\n\n // ── POST — ingest ─────────────────────────────────────────────\n if (req.method !== \"POST\") {\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n let body: any = {};\n try {\n const text = await req.text();\n body = JSON.parse(text);\n } catch (e) {\n console.error(\"Failed to parse body:\", e);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const {\n video_id,\n workspace_slug,\n percent_watched,\n watch_duration,\n current_position,\n total_duration,\n country,\n session_id,\n } = body;\n\n console.log(\"Received:\", {\n video_id,\n workspace_slug,\n percent_watched,\n watch_duration,\n current_position,\n total_duration,\n country,\n session_id,\n });\n\n // ── Validate ──────────────────────────────────────────────────\n if (!video_id || !workspace_slug) {\n console.warn(\"Missing required fields — dropping\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n if (!watch_duration || watch_duration < 2) {\n console.log(\"Skipping — watch_duration too short:\", watch_duration);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const pct = Math.min(100, Math.max(0, Math.round(percent_watched ?? 0)));\n const finalCountry = String(country ?? \"UNKNOWN\");\n const finalDuration = Math.round(watch_duration);\n const finalPosition = Math.round(current_position ?? 0);\n const finalTotal = Math.round(total_duration ?? 0);\n const finalSessionId = String(session_id ?? \"unknown\");\n\n // ── Dedup — update if same session already exists ─────────────\n const existing = await sqlite.execute({\n sql:\n `SELECT id FROM video_views WHERE video_id = ? AND session_id = ? LIMIT 1`,\n args: [String(video_id), finalSessionId],\n });\n\n if (existing.rows.length > 0) {\n await sqlite.execute({\n sql: `\n UPDATE video_views\n SET\n percent_watched = ?,\n watch_duration = ?,\n current_position = ?,\n total_duration = ?,\n created_at = CURRENT_TIMESTAMP\n WHERE video_id = ?\n AND session_id = ?\n `,\n args: [\n pct,\n finalDuration,\n finalPosition,\n finalTotal,\n String(video_id),\n finalSessionId,\n ],\n });\n console.log(\n `✓ Updated — video: ${video_id} | pct: ${pct}% | pos: ${finalPosition}s / ${finalTotal}s`,\n );\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n // ── Insert new row ────────────────────────────────────────────\n try {\n await sqlite.execute({\n sql: `\n INSERT INTO video_views\n (video_id, workspace_slug, percent_watched, watch_duration, current_position, total_duration, country, session_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)\n `,\n args: [\n String(video_id),\n String(workspace_slug),\n pct,\n finalDuration,\n finalPosition,\n finalTotal,\n finalCountry,\n finalSessionId,\n ],\n });\n console.log(\n `✓ View recorded — video: ${video_id} | pct: ${pct}% | pos: ${finalPosition}s / ${finalTotal}s | session: ${finalSessionId}`,\n );\n } catch (error: any) {\n console.error(\"SQLite error:\", error.message);\n }\n\n return new Response(\"OK\", { status: 200, headers: cors });\n}",[389],"44196fc4-09e8-44a9-b66f-2011df1c26b0","ingest-for-superbase-copy.ts","09792324-6fc4-11f1-bff3-1607ee4eb77e",137,["D",1782302318829],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"SUPABASE_URL\")!,\n Deno.env.get(\"SUPABASE_SERVICE_KEY\")!,\n);\n\nexport default async function ingestVideoAnalytics(\n req: Request,\n): Promise {\n // Always return 200 — sendBeacon ignores response anyway\n const ok = new Response(\"OK\", {\n status: 200,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n\n if (req.method === \"OPTIONS\") return ok;\n if (req.method !== \"POST\") return ok;\n\n // ── Parse body ────────────────────────────────────────────────\n // sendBeacon sends as text/plain — must use req.text() not req.json()\n let body: any = {};\n try {\n const text = await req.text();\n body = JSON.parse(text);\n } catch (e) {\n console.error(\"Failed to parse body:\", e);\n return ok;\n }\n\n const {\n video_id,\n workspace_slug,\n percent_watched, // 0-100\n watch_duration, // seconds actually watched\n country, // ISO country code e.g. \"IN\"\n } = body;\n\n console.log(\"━━━━━━━━━━━━━━━━━━━━━━━━━━━━\");\n console.log(\"video_id: \", video_id);\n console.log(\"workspace_slug: \", workspace_slug);\n console.log(\"percent_watched:\", percent_watched);\n console.log(\"watch_duration: \", watch_duration, \"seconds\");\n console.log(\"country: \", country);\n\n // ── Validate ──────────────────────────────────────────────────\n if (!video_id || !workspace_slug) {\n console.warn(\"Missing required fields — dropping\");\n return ok;\n }\n\n // Drop accidental loads under 2 seconds — bots, preloads\n if (!watch_duration || watch_duration < 2) {\n console.log(\"Skipping — watch_duration too short:\", watch_duration);\n return ok;\n }\n\n // Clamp percent to 0-100\n const pct = Math.min(100, Math.max(0, Math.round(percent_watched ?? 0)));\n\n // ── Insert into Supabase ──────────────────────────────────────\n const { error } = await supabase\n .from(\"video_views\")\n .insert({\n video_id: String(video_id),\n workspace_slug: String(workspace_slug),\n percent_watched: pct,\n watch_duration: Math.round(watch_duration),\n country: country ?? \"UNKNOWN\",\n });\n\n if (error) {\n console.error(\"Supabase error:\", error.message);\n } else {\n console.log(\n \"✓ View recorded — video:\",\n video_id,\n \"| pct:\",\n pct + \"% | dur:\",\n watch_duration + \"s\",\n );\n }\n\n return ok;\n}",[396],"c0a84d9e-03f3-4959-9e94-c4b879bac861","bunny-database.ts","796997a0-7851-11f1-ab66-1607ee4eb77e",164,["D",1783244283696],7,"// insertWorkspaceRow.ts\n// Val.town — POST call to insert a row into the \"Workspace\" table on Bunny Database\n\nconst BUNNY_DB_URL =\n \"https://01KT270SNQ0T40DJR9YX9WS01J-videos.lite.bunnydb.net/v2/pipeline\";\nconst BUNNY_DB_TOKEN = Deno.env.get(\"bunny_access_token\")!;\n\nexport default async function insertWorkspaceRow(\n req: Request,\n): Promise {\n try {\n const row = await req.json();\n\n const res = await fetch(BUNNY_DB_URL, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${BUNNY_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `insert into \"Workspace\"\n (workspace_slug, workspace_id, video_id, seo_title, seo_description,\n duration, updated_time, thumbnail_url, mp4_url, plan, plan_status, \"column\")\n values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n { type: \"text\", value: row.workspace_slug },\n { type: \"text\", value: row.workspace_id },\n { type: \"text\", value: row.video_id },\n { type: \"text\", value: row.seo_title },\n { type: \"text\", value: row.seo_description },\n { type: \"text\", value: row.duration },\n {\n type: \"text\",\n value: row.updated_time ?? new Date().toISOString(),\n },\n { type: \"text\", value: row.thumbnail_url },\n { type: \"text\", value: row.mp4_url },\n { type: \"text\", value: row.plan },\n { type: \"text\", value: row.plan_status },\n { type: \"text\", value: row.column ?? \"\" },\n ],\n },\n },\n { type: \"close\" },\n ],\n }),\n });\n\n if (!res.ok) {\n const errText = await res.text();\n return new Response(`Insert failed: ${res.status} ${errText}`, {\n status: 500,\n });\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err) {\n return new Response(`Insert error: ${err}`, { status: 500 });\n }\n}",[403],"f8646824-579e-11f1-8f37-ee650bb23af1","api-3.ts","101cb63e-5447-11f1-a49d-ee650bb23af1",50,["D",1779647570879],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"SUPABASE_URL\")!,\n Deno.env.get(\"SUPABASE_SERVICE_KEY\")!\n);\n\nconst B2_BUCKET = Deno.env.get(\"B2_BUCKET\")!;\nconst CDN_URL = Deno.env.get(\"CDN_URL\")!; // your Bunny CDN domain\n\nexport default async function qencodeWebhook(req: Request): Promise {\n try {\n const body = await req.json();\n console.log(\"Qencode webhook:\", JSON.stringify(body));\n\n const {\n task_token,\n status,\n percent,\n error,\n error_description,\n payload,\n videos,\n } = body;\n\n // Parse payload\n const { workspace_slug, video_id } = JSON.parse(payload ?? \"{}\");\n\n // ── Processing (in progress) ──────────────────────────────────────\n if (status === \"processing\") {\n await supabase\n .from(\"videos\")\n .update({\n status: \"processing\",\n progress: percent ?? 0,\n })\n .eq(\"qencode_task_id\", task_token);\n\n console.log(`Processing: ${percent}% for video ${video_id}`);\n }\n\n // ── Complete ──────────────────────────────────────────────────────\n if (status === \"completed\") {\n // Extract output URLs from Qencode response\n const mp4Video = videos?.find((v: any) => v.output === \"mp4\");\n const thumbnail = videos?.find((v: any) => v.output === \"thumbnail\");\n\n // Build CDN URLs\n const videoUrl = mp4Video?.url ?? null;\n const thumbnailUrl = thumbnail?.url ?? null;\n\n // Update video to live\n await supabase\n .from(\"videos\")\n .update({\n status: \"live\",\n progress: 100,\n url: videoUrl,\n thumbnail_url: thumbnailUrl,\n updated_at: new Date().toISOString(),\n })\n .eq(\"qencode_task_id\", task_token);\n\n // Insert notification\n const { data: video } = await supabase\n .from(\"videos\")\n .select(\"title, workspace_id\")\n .eq(\"qencode_task_id\", task_token)\n .single();\n\n if (video) {\n await supabase.from(\"notifications\").insert({\n workspace_id: video.workspace_id,\n type: \"upload_complete\",\n title: \"Video ready\",\n body: `${video.title} has finished processing.`,\n });\n }\n\n console.log(`✓ Video ${video_id} is live`);\n }\n\n // ── Failed ────────────────────────────────────────────────────────\n if (status === \"error\" || status === \"failed\") {\n await supabase\n .from(\"videos\")\n .update({\n status: \"failed\",\n error_message: error_description ?? error ?? \"Unknown error\",\n updated_at: new Date().toISOString(),\n })\n .eq(\"qencode_task_id\", task_token);\n\n // Insert failure notification\n const { data: video } = await supabase\n .from(\"videos\")\n .select(\"title, workspace_id\")\n .eq(\"qencode_task_id\", task_token)\n .single();\n\n if (video) {\n await supabase.from(\"notifications\").insert({\n workspace_id: video.workspace_id,\n type: \"transcoding_failed\",\n title: \"Transcoding failed\",\n body: `${video.title} failed to process. ${error_description ?? \"\"}`,\n });\n }\n\n console.error(`✗ Video ${video_id} failed: ${error_description}`);\n }\n\n return new Response(\"ok\", { status: 200 });\n\n } catch (err) {\n console.error(\"Webhook error:\", err);\n return new Response(\"error\", { status: 500 });\n }\n}",[411],"5e7af9d0-579e-11f1-b183-ee650bb23af1","api-2.ts","ebf3a362-5446-11f1-b53e-ee650bb23af1",49,["D",1779647312657],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nconst B2_KEY = Deno.env.get(\"b2key\")!;\nconst B2_SECRET = Deno.env.get(\"b2secret\")!;\nconst B2_BUCKET = Deno.env.get(\"b2bucket\")!;\n\nexport default async function startEncoding(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n try {\n const {\n task_token,\n tus_id,\n file_name,\n workspace_slug,\n video_id,\n } = await req.json();\n\n if (!task_token || !tus_id || !file_name) {\n return new Response(\n JSON.stringify({\n error: \"Missing required fields\",\n required: [\"task_token\", \"tus_id\", \"file_name\"],\n }),\n {\n status: 400,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // Build file paths\n const baseName = file_name.replace(/\\.[^/.]+$/, \"\");\n const mp4Path =\n `b2://backblaze.com/${B2_BUCKET}/${workspace_slug}/${baseName}.mp4`;\n const thumbPath =\n `b2://backblaze.com/${B2_BUCKET}/${workspace_slug}/${baseName}.jpg`;\n\n // Build Qencode query\n const query = {\n source: `tus:${tus_id}`,\n encoder_version: \"2\",\n callback_url: `${Deno.env.get(\"VALTOWN_BASE_URL\")}/qencode-webhook`,\n use_subtask_callback: 1,\n format: [\n {\n output: \"mp4\",\n video_codec: \"libx264\",\n height: 1080,\n optimize_bitrate: 0,\n destination: {\n url: mp4Path,\n key: B2_KEY,\n secret: B2_SECRET,\n },\n },\n {\n output: \"thumbnail\",\n image_format: \"jpg\",\n time: \".15\",\n height: \"500\",\n width: \"700\",\n destination: {\n url: thumbPath,\n key: B2_KEY,\n secret: B2_SECRET,\n },\n },\n ],\n };\n\n // Send to Qencode\n const encodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n task_token,\n query: JSON.stringify(query),\n payload: JSON.stringify({ workspace_slug, video_id }),\n }),\n });\n\n const encodeData = await encodeRes.json();\n\n if (encodeData.error) {\n return new Response(\n JSON.stringify({ error: \"Qencode error\", details: encodeData }),\n {\n status: 500,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // Update video status in Supabase\n await supabase\n .from(\"videos\")\n .update({\n status: \"processing\",\n qencode_task_id: task_token,\n updated_at: new Date().toISOString(),\n })\n .eq(\"id\", video_id);\n\n console.log(`✓ Encoding started for video ${video_id}`);\n\n return new Response(\n JSON.stringify({\n ok: true,\n task_token,\n status: \"processing\",\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n } catch (err) {\n console.error(\"Error:\", err);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n}",[418],"d174b116-5446-11f1-8340-ee650bb23af1","api-1.ts","511c575c-53b6-11f1-94f4-ee650bb23af1",["D",1779279856359],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!\n);\n\nconst QENCODE_API_KEY = Deno.env.get(\"qencodeapi\")!;\n\nexport default async function getTaskToken(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n\n if (req.method === \"OPTIONS\") return new Response(null, { status: 204, headers: cors });\n\n try {\n // ── Step 1: Get access token ──────────────────────────────────────\n const tokenRes = await fetch(\"https://api.qencode.com/v1/access_token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ api_key: QENCODE_API_KEY }),\n });\n\n const tokenData = await tokenRes.json();\n\n if (!tokenData.token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get access token\", details: tokenData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"✓ Access token received\");\n\n // ── Step 2: Create task + get task token ──────────────────────────\n const taskRes = await fetch(\"https://api.qencode.com/v1/create_task\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ token: tokenData.token }),\n });\n\n const taskData = await taskRes.json();\n\n if (!taskData.task_token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get task token\", details: taskData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"✓ Task token received\");\n\n return new Response(\n JSON.stringify({\n task_token: taskData.task_token,\n access_token: tokenData.token,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n\n } catch (err) {\n console.error(\"Error:\", err);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n}",[425],"303ac45a-9cbf-47a9-a246-ba09a54be155","api-1.1-plan-check.ts","f296ce04-7f72-11f1-b4ad-1607ee4eb77e",188,["D",1784111048120],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\nconst QENCODE_API_KEY = Deno.env.get(\"qencodeapi\")!;\n\nexport default async function getTaskToken(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n if (req.method === \"OPTIONS\") return new Response(null, { status: 204, headers: cors });\n\n try {\n const { workspace_slug } = await req.json();\n\n if (!workspace_slug) {\n return new Response(\n JSON.stringify({ error: \"workspace_slug is required\" }),\n { status: 400, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ── Step 0: Confirmed join — workspaces → subscriptions → plans ──\n // (via subscriptions.subscription_plan = plans.ls_variant_id)\n // NOTE: subscriptions has TWO foreign keys to workspaces\n // (workspace_id AND workspace_slug), so the relationship must be\n // named explicitly below — otherwise Supabase can't disambiguate\n // which FK to embed on, and the whole query silently fails,\n // surfacing as a false \"Workspace not found\".\n const { data: workspace, error: wsError } = await supabase\n .from(\"workspaces\")\n .select(`\n id,\n slug,\n bandwidth_used,\n storage_used_bytes,\n subscriptions!subscriptions_workspace_id_fkey (\n status,\n subscription_plan,\n plans!subscriptions_subscription_plan_fkey ( name, bytes_limit, storage_limit, video_limit, member_limit )\n )\n `)\n .eq(\"slug\", workspace_slug)\n .single();\n\n if (wsError) console.error(\"Supabase error detail:\", JSON.stringify(wsError));\n\n if (wsError || !workspace) {\n return new Response(\n JSON.stringify({ error: \"Workspace not found\" }),\n { status: 404, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // subscriptions comes back as an array (Supabase doesn't assume 1:1 unless\n // there's a unique constraint on subscriptions.workspace_id)\n const sub = workspace.subscriptions?.[0];\n const plan = sub?.plans;\n\n if (!sub || (sub.status !== \"active\" && sub.status !== \"cancelled\")) {\n return new Response(\n JSON.stringify({ error: \"No active subscription for this workspace\" }),\n { status: 402, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // sub.subscription_plan can be null even when status is \"active\" (seen in real data)\n // — treat \"active sub with no linked plan\" as blocked rather than silently\n // falling back, since a silent fallback could let someone bypass limits entirely.\n // Flip this if you'd rather default null plans to \"free\" tier behavior.\n if (!plan) {\n return new Response(\n JSON.stringify({ error: \"No plan linked to this subscription — contact support\" }),\n { status: 402, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n const bandwidthReached = workspace.bandwidth_used >= plan.bytes_limit;\n const storageReached = workspace.storage_used_bytes >= plan.storage_limit;\n\n if (bandwidthReached) {\n return new Response(\n JSON.stringify({\n error: \"Bandwidth limit reached for this billing cycle\",\n error_code: \"bandwidth_limit_reached\",\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n bandwidth: {\n used: workspace.bandwidth_used,\n limit: plan.bytes_limit,\n reached: true,\n },\n }),\n { status: 403, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n if (storageReached) {\n return new Response(\n JSON.stringify({\n error: \"Storage limit reached for this plan\",\n error_code: \"storage_limit_reached\",\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n storage: {\n used: workspace.storage_used_bytes,\n limit: plan.storage_limit,\n reached: true,\n },\n }),\n { status: 403, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ── Resolve transcoding settings from plan cap only ──\n // workspace_settings column doesn't exist on workspaces yet — once it's\n // added, re-introduce the parsing block here to layer workspace-level\n // overrides on top of the plan cap (see earlier version for that logic).\n const PLAN_RESOLUTION_CAPS: Record = {\n free: 480,\n starter: 720,\n creator: 1080,\n \"creator-test-1-month\": 1080,\n \"creator-test-1-year\": 1080,\n agency: 1080,\n business: 1080,\n };\n const maxHeight = PLAN_RESOLUTION_CAPS[plan.name] ?? 480;\n const crf = 23; // default \"balanced\" CRF until workspace_settings/optimise_for exists\n\n // ── Step 1: Get access token ──────────────────────────────────────\n const tokenRes = await fetch(\"https://api.qencode.com/v1/access_token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ api_key: QENCODE_API_KEY }),\n });\n const tokenData = await tokenRes.json();\n if (!tokenData.token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get access token\", details: tokenData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ── Step 2: Create task + get task token ──────────────────────────\n const taskRes = await fetch(\"https://api.qencode.com/v1/create_task\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ token: tokenData.token }),\n });\n const taskData = await taskRes.json();\n if (!taskData.task_token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get task token\", details: taskData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n return new Response(\n JSON.stringify({\n task_token: taskData.task_token,\n access_token: tokenData.token,\n\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n\n plan: {\n name: plan.name,\n video_limit: plan.video_limit,\n member_limit: plan.member_limit,\n bandwidth_limit_bytes: plan.bytes_limit,\n storage_limit_bytes: plan.storage_limit,\n },\n\n bandwidth: {\n used: workspace.bandwidth_used,\n limit: plan.bytes_limit,\n used_pct: Number(((workspace.bandwidth_used / plan.bytes_limit) * 100).toFixed(1)),\n reached: bandwidthReached,\n },\n\n storage: {\n used: workspace.storage_used_bytes,\n limit: plan.storage_limit,\n used_pct: Number(((workspace.storage_used_bytes / plan.storage_limit) * 100).toFixed(1)),\n reached: storageReached,\n },\n\n // Forward this straight into api-2's (upload-complete / url-import)\n // request body — no need for api-2 to re-query workspace_settings itself.\n transcode_settings: {\n max_height: maxHeight,\n crf: crf,\n },\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n } catch (err) {\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n}",[431],"d46fae37-3acc-4415-a136-ca938681f6c3","Cloudfare","6841248c-9c98-11f1-b6db-1607ee4eb77e",223,["D",1787231416441],"directory",[438],"pulls","branches","forks","envVars",{"_451":453,"_454":63},"connections",{"_451":275,"_452":63},"count","unfilledCount",22,"emptyCount",{"_45":437,"_33":438,"_31":439,"_171":-5,"_43":44,"_42":440,"_173":125,"_40":628,"_13":275,"_35":442,"_37":-5,"_24":25,"_177":-5,"_497":629,"_27":630},{"_45":624,"_33":34,"_31":32,"_171":439,"_43":44,"_42":14,"_173":25,"_40":625,"_13":275,"_35":39,"_37":38,"_24":25,"_177":-5,"_497":626,"_27":627},{"_45":616,"_33":617,"_31":618,"_171":439,"_43":44,"_42":619,"_173":125,"_40":620,"_13":216,"_35":39,"_37":621,"_24":25,"_177":-5,"_497":622,"_27":623},{"_45":608,"_33":609,"_31":610,"_171":439,"_43":44,"_42":611,"_173":125,"_40":612,"_13":216,"_35":39,"_37":613,"_24":25,"_177":-5,"_497":614,"_27":615},{"_45":430,"_33":431,"_31":432,"_171":-5,"_43":44,"_42":433,"_173":125,"_40":605,"_13":304,"_35":39,"_37":435,"_24":25,"_177":-5,"_497":606,"_27":607},{"_45":424,"_33":425,"_31":426,"_171":-5,"_43":44,"_42":216,"_173":125,"_40":602,"_13":224,"_35":39,"_37":428,"_24":25,"_177":-5,"_497":603,"_27":604},{"_45":417,"_33":418,"_31":419,"_171":-5,"_43":44,"_42":420,"_173":125,"_40":599,"_13":192,"_35":39,"_37":422,"_24":25,"_177":-5,"_497":600,"_27":601},{"_45":410,"_33":411,"_31":412,"_171":-5,"_43":44,"_42":413,"_173":125,"_40":596,"_13":224,"_35":39,"_37":415,"_24":25,"_177":-5,"_497":597,"_27":598},{"_45":402,"_33":403,"_31":404,"_171":-5,"_43":44,"_42":405,"_173":125,"_40":593,"_13":407,"_35":39,"_37":408,"_24":25,"_177":-5,"_497":594,"_27":595},{"_45":395,"_33":396,"_31":397,"_171":-5,"_43":44,"_42":398,"_173":125,"_40":590,"_13":63,"_35":39,"_37":400,"_24":25,"_177":-5,"_497":591,"_27":592},{"_45":388,"_33":389,"_31":390,"_171":-5,"_43":44,"_42":391,"_173":125,"_40":587,"_13":304,"_35":39,"_37":393,"_24":25,"_177":-5,"_497":588,"_27":589},{"_45":381,"_33":382,"_31":383,"_171":-5,"_43":44,"_42":384,"_173":125,"_40":584,"_13":200,"_35":39,"_37":386,"_24":25,"_177":-5,"_497":585,"_27":586},{"_45":374,"_33":375,"_31":376,"_171":-5,"_43":44,"_42":377,"_173":125,"_40":581,"_13":192,"_35":39,"_37":379,"_24":25,"_177":-5,"_497":582,"_27":583},{"_45":367,"_33":368,"_31":369,"_171":-5,"_43":44,"_42":370,"_173":125,"_40":578,"_13":216,"_35":39,"_37":372,"_24":25,"_177":-5,"_497":579,"_27":580},{"_45":360,"_33":361,"_31":362,"_171":-5,"_43":44,"_42":363,"_173":125,"_40":575,"_13":216,"_35":39,"_37":365,"_24":25,"_177":-5,"_497":576,"_27":577},{"_45":353,"_33":354,"_31":355,"_171":-5,"_43":44,"_42":356,"_173":125,"_40":572,"_13":175,"_35":39,"_37":358,"_24":25,"_177":-5,"_497":573,"_27":574},{"_45":346,"_33":347,"_31":348,"_171":-5,"_43":44,"_42":349,"_173":125,"_40":569,"_13":224,"_35":39,"_37":351,"_24":25,"_177":-5,"_497":570,"_27":571},{"_45":341,"_33":342,"_31":343,"_171":-5,"_43":44,"_42":175,"_173":125,"_40":566,"_13":224,"_35":39,"_37":339,"_24":25,"_177":-5,"_497":567,"_27":568},{"_45":334,"_33":335,"_31":336,"_171":-5,"_43":44,"_42":337,"_173":125,"_40":563,"_13":275,"_35":39,"_37":339,"_24":25,"_177":-5,"_497":564,"_27":565},{"_45":328,"_33":329,"_31":58,"_171":-5,"_43":44,"_42":330,"_173":125,"_40":560,"_13":224,"_35":39,"_37":332,"_24":25,"_177":-5,"_497":561,"_27":562},{"_45":321,"_33":322,"_31":323,"_171":-5,"_43":44,"_42":324,"_173":125,"_40":557,"_13":216,"_35":39,"_37":326,"_24":25,"_177":-5,"_497":558,"_27":559},{"_45":314,"_33":315,"_31":316,"_171":-5,"_43":44,"_42":317,"_173":125,"_40":554,"_13":224,"_35":39,"_37":319,"_24":25,"_177":-5,"_497":555,"_27":556},{"_45":307,"_33":308,"_31":309,"_171":-5,"_43":44,"_42":310,"_173":125,"_40":551,"_13":224,"_35":39,"_37":312,"_24":25,"_177":-5,"_497":552,"_27":553},{"_45":299,"_33":300,"_31":301,"_171":-5,"_43":44,"_42":302,"_173":125,"_40":548,"_13":304,"_35":39,"_37":305,"_24":25,"_177":-5,"_497":549,"_27":550},{"_45":292,"_33":293,"_31":294,"_171":-5,"_43":44,"_42":295,"_173":125,"_40":545,"_13":224,"_35":39,"_37":297,"_24":25,"_177":-5,"_497":546,"_27":547},{"_45":285,"_33":286,"_31":287,"_171":-5,"_43":44,"_42":288,"_173":125,"_40":542,"_13":216,"_35":39,"_37":290,"_24":25,"_177":-5,"_497":543,"_27":544},{"_45":278,"_33":279,"_31":280,"_171":-5,"_43":44,"_42":281,"_173":125,"_40":539,"_13":232,"_35":39,"_37":283,"_24":25,"_177":-5,"_497":540,"_27":541},{"_45":270,"_33":271,"_31":272,"_171":-5,"_43":44,"_42":273,"_173":125,"_40":536,"_13":275,"_35":39,"_37":276,"_24":25,"_177":-5,"_497":537,"_27":538},{"_45":263,"_33":264,"_31":265,"_171":-5,"_43":44,"_42":266,"_173":125,"_40":533,"_13":224,"_35":39,"_37":268,"_24":25,"_177":-5,"_497":534,"_27":535},{"_45":256,"_33":257,"_31":258,"_171":-5,"_43":44,"_42":259,"_173":125,"_40":530,"_13":200,"_35":39,"_37":261,"_24":25,"_177":-5,"_497":531,"_27":532},{"_45":249,"_33":250,"_31":251,"_171":-5,"_43":44,"_42":252,"_173":125,"_40":527,"_13":184,"_35":39,"_37":254,"_24":25,"_177":-5,"_497":528,"_27":529},{"_45":242,"_33":243,"_31":244,"_171":-5,"_43":44,"_42":245,"_173":125,"_40":524,"_13":63,"_35":39,"_37":247,"_24":25,"_177":-5,"_497":525,"_27":526},{"_45":235,"_33":236,"_31":237,"_171":-5,"_43":44,"_42":238,"_173":125,"_40":521,"_13":200,"_35":39,"_37":240,"_24":25,"_177":-5,"_497":522,"_27":523},{"_45":227,"_33":228,"_31":229,"_171":-5,"_43":44,"_42":230,"_173":125,"_40":518,"_13":232,"_35":39,"_37":233,"_24":25,"_177":-5,"_497":519,"_27":520},{"_45":219,"_33":220,"_31":221,"_171":-5,"_43":44,"_42":222,"_173":125,"_40":515,"_13":224,"_35":39,"_37":225,"_24":25,"_177":-5,"_497":516,"_27":517},{"_45":211,"_33":212,"_31":213,"_171":-5,"_43":44,"_42":214,"_173":125,"_40":512,"_13":216,"_35":39,"_37":217,"_24":25,"_177":-5,"_497":513,"_27":514},{"_45":203,"_33":204,"_31":205,"_171":-5,"_43":44,"_42":206,"_173":125,"_40":509,"_13":208,"_35":39,"_37":209,"_24":25,"_177":-5,"_497":510,"_27":511},{"_45":195,"_33":196,"_31":197,"_171":-5,"_43":44,"_42":198,"_173":125,"_40":506,"_13":200,"_35":39,"_37":201,"_24":25,"_177":-5,"_497":507,"_27":508},{"_45":187,"_33":188,"_31":189,"_171":-5,"_43":44,"_42":190,"_173":125,"_40":503,"_13":192,"_35":39,"_37":193,"_24":25,"_177":-5,"_497":504,"_27":505},{"_45":179,"_33":180,"_31":181,"_171":-5,"_43":44,"_42":182,"_173":125,"_40":500,"_13":184,"_35":39,"_37":185,"_24":25,"_177":-5,"_497":501,"_27":502},{"_45":168,"_33":169,"_31":170,"_171":-5,"_43":44,"_42":172,"_173":125,"_40":496,"_13":175,"_35":39,"_37":176,"_24":25,"_177":-5,"_497":498,"_27":499},["D",1780055932410],"children",[],[169],["D",1784284741296],[],[180],["D",1784284722251],[],[188],["D",1784544235309],[],[196],["D",1780920954441],[],[204],["D",1783945164859],[],[212],["D",1787250847785],[],[220],["D",1780085629696],[],[228],["D",1782499025250],[],[236],["D",1782498991828],[],[243],["D",1781870375796],[],[250],["D",1781870347128],[],[257],["D",1783857236190],[],[264],["D",1783858221881],[],[271],["D",1779646454305],[],[279],["D",1782500485465],[],[286],["D",1784663887637],[],[293],["D",1784637667486],[],[300],["D",1784637434026],[],[308],["D",1784293740578],[],[315],["D",1780688339092],[],[322],["D",1781118645231],[],[329],["D",1779300446748],[],[335],["D",1779300271932],[],[342],["D",1779473440824],[],[347],["D",1779455613548],[],[354],["D",1781374100672],[],[361],["D",1781441928237],[],[368],["D",1781263384100],[],[375],["D",1781372753937],[],[382],["D",1782495636163],[],[389],["D",1782302318829],[],[396],["D",1783244283696],[],[403],["D",1779647570879],[],[411],["D",1779647312657],[],[418],["D",1779279856359],[],[425],["D",1784111048120],[],[431],"4ca6cbc0-37bf-4638-adb9-0b40088d27fc","workspace-kv.ts","f86f86c8-a46a-11f1-b475-1607ee4eb77e",234,["D",1788091714079],"// valtown/webhooks/sync-workspace-to-kv.js\n\nimport { createClient } from \"https://esm.sh/@supabase/supabase-js@2.38.4\";\n\n/**\n * ValTown Webhook Handler\n * Syncs workspace data to Cloudflare KV when Supabase changes\n */\nexport default async function handler(req, res) {\n try {\n const { type, table, record, old_record } = req.body;\n\n console.log(`📥 Received webhook: ${type} on ${table}`);\n\n // ─── Handle different tables ───\n\n // If subscription changed, sync the workspace\n if (table === \"subscriptions\") {\n return await handleSubscriptionUpdate(req, res);\n }\n\n // If workspace changed, sync the workspace\n if (table === \"workspaces\") {\n return await handleWorkspaceUpdate(req, res);\n }\n\n // If plan changed, sync all workspaces with this plan\n if (table === \"plans\") {\n return await handlePlanUpdate(req, res);\n }\n\n return res.status(200).json({\n success: true,\n message: \"Ignoring non-workspace/subscription/plan event\",\n });\n } catch (error) {\n console.error(\"❌ ValTown webhook error:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n stack: error.stack,\n });\n }\n}\n\n// ──────────────────────────────────────────────────\n// HANDLE: Workspace Update\n// ──────────────────────────────────────────────────\nasync function handleWorkspaceUpdate(req, res) {\n try {\n const { type, table, record, old_record } = req.body;\n\n // Handle DELETE\n if (type === \"DELETE\") {\n await deleteWorkspaceFromKV(old_record.slug);\n return res.status(200).json({\n success: true,\n message: \"Workspace deleted from KV\",\n slug: old_record.slug,\n });\n }\n\n const workspaceId = record.id;\n\n // ─── Initialize Supabase with env vars ───\n const supabase = createClient(\n process.env.SUPABASEURL,\n process.env.SUPABASEKEY,\n );\n\n const { data: workspace, error } = await supabase\n .from(\"workspaces\")\n .select(`\n id,\n slug,\n storage_used_bytes,\n bandwidth_used,\n security_json,\n setting_json,\n is_active,\n deleted_at,\n subscriptions (\n plan_id,\n status,\n trial_ends_at,\n current_period_end,\n plans (\n name,\n max_storage_bytes,\n max_bandwidth_bytes\n )\n )\n `)\n .eq(\"id\", workspaceId)\n .single();\n\n if (error) {\n console.error(\"❌ Failed to fetch workspace:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n\n // Build and sync to KV\n const result = await syncWorkspaceToKV(workspace);\n\n return res.status(200).json({\n success: true,\n message: \"Workspace synced to KV\",\n slug: workspace.slug,\n kv_key: `ws_${workspace.slug}`,\n worker_response: result,\n });\n } catch (error) {\n console.error(\"❌ handleWorkspaceUpdate error:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n}\n\n// ──────────────────────────────────────────────────\n// HANDLE: Subscription Update\n// ──────────────────────────────────────────────────\nasync function handleSubscriptionUpdate(req, res) {\n try {\n const { type, record, old_record } = req.body;\n\n // Get workspace_id from subscription\n const workspaceId = record?.workspace_id || old_record?.workspace_id;\n\n if (!workspaceId) {\n return res.status(400).json({\n success: false,\n error: \"No workspace_id found in subscription\",\n });\n }\n\n // ─── Initialize Supabase with env vars ───\n const supabase = createClient(\n process.env.SUPABASEURL,\n process.env.SUPABASEKEY,\n );\n\n const { data: workspace, error } = await supabase\n .from(\"workspaces\")\n .select(`\n id,\n slug,\n storage_used_bytes,\n bandwidth_used,\n security_json,\n setting_json,\n is_active,\n deleted_at,\n subscriptions (\n plan_id,\n status,\n trial_ends_at,\n current_period_end,\n plans (\n name,\n max_storage_bytes,\n max_bandwidth_bytes\n )\n )\n `)\n .eq(\"id\", workspaceId)\n .single();\n\n if (error) {\n console.error(\n \"❌ Failed to fetch workspace for subscription update:\",\n error,\n );\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n\n // Check if subscription actually changed\n if (old_record) {\n const planChanged = old_record.plan_id !== record?.plan_id;\n const statusChanged = old_record.status !== record?.status;\n const trialChanged = old_record.trial_ends_at !== record?.trial_ends_at;\n\n if (!planChanged && !statusChanged && !trialChanged) {\n return res.status(200).json({\n success: true,\n message: \"No subscription changes detected, skipping KV sync\",\n });\n }\n }\n\n console.log(`🔄 Subscription changed for workspace: ${workspace.slug}`);\n console.log(` Plan: ${workspace.subscriptions?.[0]?.plan_id || \"free\"}`);\n console.log(\n ` Status: ${workspace.subscriptions?.[0]?.status || \"active\"}`,\n );\n\n // Build and sync to KV\n const result = await syncWorkspaceToKV(workspace);\n\n return res.status(200).json({\n success: true,\n message: \"Workspace KV updated from subscription change\",\n slug: workspace.slug,\n subscription: workspace.subscriptions?.[0],\n kv_key: `ws_${workspace.slug}`,\n worker_response: result,\n });\n } catch (error) {\n console.error(\"❌ handleSubscriptionUpdate error:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n}\n\n// ──────────────────────────────────────────────────\n// HANDLE: Plan Update\n// ──────────────────────────────────────────────────\nasync function handlePlanUpdate(req, res) {\n try {\n const { type, record, old_record } = req.body;\n\n // Check if plan limits changed\n const storageChanged =\n old_record?.max_storage_bytes !== record?.max_storage_bytes;\n const bandwidthChanged =\n old_record?.max_bandwidth_bytes !== record?.max_bandwidth_bytes;\n const nameChanged = old_record?.name !== record?.name;\n\n if (!storageChanged && !bandwidthChanged && !nameChanged) {\n return res.status(200).json({\n success: true,\n message: \"No plan changes detected, skipping KV sync\",\n });\n }\n\n const planId = record?.id || old_record?.id;\n\n // ─── Initialize Supabase with env vars ───\n const supabase = createClient(\n process.env.SUPABASEURL,\n process.env.SUPABASEKEY,\n );\n\n const { data: workspaces, error } = await supabase\n .from(\"workspaces\")\n .select(`\n id,\n slug,\n storage_used_bytes,\n bandwidth_used,\n security_json,\n setting_json,\n is_active,\n deleted_at,\n subscriptions (\n plan_id,\n status,\n trial_ends_at,\n current_period_end,\n plans (\n name,\n max_storage_bytes,\n max_bandwidth_bytes\n )\n )\n `)\n .eq(\"subscriptions.plan_id\", planId);\n\n if (error) {\n console.error(\"❌ Failed to fetch workspaces for plan update:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n\n console.log(`🔄 Plan updated: ${record?.name || \"Unknown\"}`);\n console.log(` Syncing ${workspaces?.length || 0} workspaces...`);\n\n // Sync all workspaces with this plan\n const results = [];\n for (const workspace of workspaces || []) {\n const result = await syncWorkspaceToKV(workspace);\n results.push({\n slug: workspace.slug,\n success: true,\n });\n }\n\n return res.status(200).json({\n success: true,\n message: `Synced ${results.length} workspaces to KV`,\n plan_id: planId,\n plan_name: record?.name || \"Unknown\",\n workspaces_synced: results,\n });\n } catch (error) {\n console.error(\"❌ handlePlanUpdate error:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n}\n\n// ──────────────────────────────────────────────────\n// HELPER: Sync Workspace to KV\n// ──────────────────────────────────────────────────\nasync function syncWorkspaceToKV(workspace) {\n const kvPayload = buildWorkspaceKVPayload(workspace);\n const kvKey = `ws_${workspace.slug}`;\n\n const workerUrl = process.env.CLOUDFLARE_WORKER_URL;\n\n if (!workerUrl) {\n throw new Error(\"CLOUDFLARE_WORKER_URL environment variable not set\");\n }\n\n const response = await fetch(`${workerUrl}/sync/workspace`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${process.env.CLOUDFLARE_API_TOKEN}`,\n },\n body: JSON.stringify({\n key: kvKey,\n value: kvPayload,\n operation: \"sync\",\n }),\n });\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(`Worker returned ${response.status}: ${errorText}`);\n }\n\n const result = await response.json();\n\n console.log(`✅ Workspace synced to KV: ${workspace.slug}`);\n return result;\n}\n\n// ──────────────────────────────────────────────────\n// HELPER: Delete Workspace from KV\n// ──────────────────────────────────────────────────\nasync function deleteWorkspaceFromKV(slug) {\n const workerUrl = process.env.CLOUDFLARE_WORKER_URL;\n\n if (!workerUrl) {\n throw new Error(\"CLOUDFLARE_WORKER_URL environment variable not set\");\n }\n\n const response = await fetch(`${workerUrl}/sync/workspace`, {\n method: \"DELETE\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${process.env.CLOUDFLARE_API_TOKEN}`,\n },\n body: JSON.stringify({\n key: `ws_${slug}`,\n operation: \"delete\",\n }),\n });\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(`Worker returned ${response.status}: ${errorText}`);\n }\n\n console.log(`🗑️ Workspace deleted from KV: ${slug}`);\n return await response.json();\n}\n\n// ──────────────────────────────────────────────────\n// HELPER: Build KV Payload\n// ──────────────────────────────────────────────────\nfunction buildWorkspaceKVPayload(workspace) {\n const subscription = workspace.subscriptions?.[0] || null;\n const plan = subscription?.plans || null;\n\n return {\n // ─── Storage & Usage ───\n storage_used_bytes: workspace.storage_used_bytes || 0,\n bandwidth_used: workspace.bandwidth_used || 0,\n\n // ─── Security ───\n security: {\n geo_blocking: workspace.security_json?.geo_blocking || [],\n allowed_domains: workspace.security_json?.allowed_domains || [],\n hotlink_protection:\n workspace.security_json?.hotlink_protection !== undefined\n ? workspace.security_json.hotlink_protection\n : true,\n signed_url_enabled: workspace.security_json?.signed_url_enabled || false,\n },\n\n // ─── Settings ───\n settings: {\n player: workspace.setting_json?.player || {\n color: \"#534AB7\",\n watermark: {\n enabled: false,\n position: \"bottom-right\",\n },\n background_color: \"#000000\",\n },\n },\n\n // ─── Subscription ───\n subscription: {\n plan_id: subscription?.plan_id || \"free\",\n plan_name: plan?.name || \"Free\",\n status: subscription?.status || \"active\",\n trial_ends_at: subscription?.trial_ends_at || null,\n current_period_end: subscription?.current_period_end || null,\n limits: {\n max_storage_bytes: plan?.max_storage_bytes || 1073741824, // 1GB\n max_bandwidth_bytes: plan?.max_bandwidth_bytes || 10737418240, // 10GB\n },\n },\n\n // ─── Workspace Status ───\n is_active: workspace.is_active !== false,\n deleted_at: workspace.deleted_at || null,\n\n // ─── Cache Control ───\n _cache_ttl: 3600, // 1 hour\n _cached_at: new Date().toISOString(),\n _version: \"1.0\",\n };\n}",[],[438,609],"7bca9ede-a49d-4392-bd45-98099723d129","subscription-lemon-to-superbase.ts","5b7009c0-a216-11f1-8af5-1607ee4eb77e",229,["D",1787835382888],"import { createClient } from \"npm:@supabase/supabase-js\";\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nasync function verifySignature(\n rawBody: string,\n signature: string,\n secret: string,\n): Promise {\n try {\n const hmac = createHmac(\"sha256\", secret);\n const digest = hmac.update(rawBody).digest(\"hex\");\n\n if (signature.length !== digest.length) return false;\n\n return timingSafeEqual(\n Buffer.from(digest, \"hex\"),\n Buffer.from(signature, \"hex\"),\n );\n } catch (err) {\n console.error(\"❌ Signature error:\", err.message);\n return false;\n }\n}\n\nexport default async function (req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Signature\",\n };\n\n if (req.method === \"GET\") {\n return new Response(\"Webhook Active\", { status: 200, headers: cors });\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const rawBody = await req.text();\n const signature = req.headers.get(\"X-Signature\") ?? \"\";\n const secret = Deno.env.get(\"lemonsqueezewebhooksecret\") ?? \"\";\n\n console.log(\"─────────────────────────────────\");\n console.log(\"📨 Received webhook\");\n console.log(\"📝 Signature:\", signature ? \"present\" : \"missing\");\n console.log(\"🔑 Secret:\", secret ? \"set\" : \"MISSING!\");\n\n // ── Verify signature ───────────────────────────────────\n const valid = await verifySignature(rawBody, signature, secret);\n\n if (!valid) {\n console.error(\"❌ Invalid signature\");\n return new Response(\"Invalid signature\", { status: 401, headers: cors });\n }\n\n console.log(\"✅ Signature verified\");\n\n // Parse JSON\n let payload: any = {};\n try {\n payload = JSON.parse(rawBody);\n } catch (e) {\n console.error(\"❌ Failed to parse JSON:\", e.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const eventName = payload.meta?.event_name;\n const customData = payload.meta?.custom_data;\n const data = payload.data?.attributes;\n const lsId = String(payload.data?.id ?? \"\");\n\n console.log(\"🍋 Event:\", eventName);\n console.log(\"📦 Custom data:\", JSON.stringify(customData));\n console.log(\"🔍 variant_id:\", data?.variant_id);\n console.log(\"🔍 status:\", data?.status);\n console.log(\"🔍 lsId:\", lsId);\n\n if (!data || !eventName) {\n console.warn(\"⚠️ No data or event — skipping\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n // ── Step 1: Resolve workspace_id ──────────────────────\n let workspaceId: string | null = customData?.workspace_id ?? null;\n let workspaceSlug: string | null = customData?.workspace_slug ?? null;\n\n // If we have workspace_slug but not workspace_id, get workspace_id from slug\n if (!workspaceId && workspaceSlug) {\n console.log(\"🔍 Looking up workspace by slug:\", workspaceSlug);\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug\")\n .eq(\"slug\", workspaceSlug)\n .maybeSingle();\n\n console.log(\"🔍 Workspace by slug:\", JSON.stringify(ws));\n console.log(\"🔍 Error:\", wsErr?.message ?? \"none\");\n\n if (ws) {\n workspaceId = ws.id;\n workspaceSlug = ws.slug;\n }\n }\n\n // If we have workspace_id but not workspace_slug, get workspace_slug from id\n if (workspaceId && !workspaceSlug) {\n console.log(\"🔍 Looking up workspace by id:\", workspaceId);\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug\")\n .eq(\"id\", workspaceId)\n .maybeSingle();\n\n console.log(\"🔍 Workspace by id:\", JSON.stringify(ws));\n console.log(\"🔍 Error:\", wsErr?.message ?? \"none\");\n\n if (ws) {\n workspaceId = ws.id;\n workspaceSlug = ws.slug;\n }\n }\n\n // If still no workspace, try by email\n if (!workspaceId) {\n const email = data.user_email || data.customer_email;\n console.log(\"⚠️ No workspace_id or slug, trying email:\", email);\n\n if (email) {\n const { data: user, error: userErr } = await supabase\n .from(\"profiles\")\n .select(\"id\")\n .eq(\"email\", email)\n .maybeSingle();\n\n console.log(\"🔍 User by email:\", JSON.stringify(user));\n console.log(\"🔍 User error:\", userErr?.message ?? \"none\");\n\n if (user) {\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug\")\n .eq(\"owner_id\", user.id)\n .maybeSingle();\n\n console.log(\"🔍 Workspace by owner_id:\", JSON.stringify(ws));\n console.log(\"🔍 Error:\", wsErr?.message ?? \"none\");\n\n if (ws) {\n workspaceId = ws.id;\n workspaceSlug = ws.slug;\n }\n }\n }\n }\n\n if (!workspaceId) {\n console.error(\"❌ Could not resolve workspace_id — aborting\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"✅ workspace_id:\", workspaceId);\n console.log(\"✅ workspace_slug:\", workspaceSlug);\n\n // ── Step 2: Check if subscription exists ──────────────\n const { data: existingRow, error: findErr } = await supabase\n .from(\"subscriptions\")\n .select(\"id, workspace_id, status\")\n .eq(\"workspace_id\", workspaceId)\n .maybeSingle();\n\n console.log(\"🔍 Existing row:\", JSON.stringify(existingRow));\n console.log(\"🔍 Find error:\", findErr?.message ?? \"none\");\n\n // ── Step 3: Build update/insert data ───────────────────\n const variantId = String(data.variant_id ?? \"\");\n const variantIdExists = variantId && variantId !== \"null\" && variantId !== \"undefined\";\n \n let updateData: any = {\n updated_at: new Date().toISOString(),\n };\n\n // Only set workspace_id and workspace_slug if we're inserting\n if (!existingRow) {\n updateData.workspace_id = workspaceId;\n updateData.workspace_slug = workspaceSlug;\n updateData.created_at = new Date().toISOString();\n }\n\n switch (eventName) {\n case \"subscription_created\":\n case \"subscription_updated\":\n case \"subscription_resumed\":\n case \"subscription_unpaused\":\n Object.assign(updateData, {\n ls_subscription_id: lsId || null,\n ls_customer_id: data.customer_id ? String(data.customer_id) : null,\n ls_order_id: data.order_id ? String(data.order_id) : null,\n ls_variant_id: variantIdExists ? variantId : null,\n subscription_plan: variantIdExists ? variantId : null,\n status: data.status ?? \"active\",\n cancelled: data.cancelled ?? false,\n pause: data.pause ?? null,\n billing_anchor: data.billing_anchor ?? 1,\n reset_day: data.billing_anchor ?? 1,\n card_brand: data.card_brand ?? null,\n card_last_four: data.card_last_four ?? null,\n trial_ends_at: data.trial_ends_at ?? null,\n renews_at: data.renews_at ?? null,\n ends_at: data.ends_at ?? null,\n url_update_payment: data.urls?.update_payment_method ?? null,\n url_customer_portal: data.urls?.customer_portal ?? null,\n url_update_subscription: data.urls?.update_subscription ?? null,\n test_mode: data.test_mode ?? false,\n });\n break;\n\n case \"subscription_cancelled\":\n Object.assign(updateData, {\n status: \"canceled\",\n cancelled: true,\n ends_at: data.ends_at ?? null,\n });\n break;\n\n case \"subscription_expired\": {\n // Get free plan variant\n const { data: freePlan } = await supabase\n .from(\"plans\")\n .select(\"ls_variant_id\")\n .ilike(\"name\", \"free\")\n .maybeSingle();\n\n Object.assign(updateData, {\n status: \"expired\",\n subscription_plan: freePlan?.ls_variant_id ?? null,\n ls_subscription_id: null,\n ls_variant_id: null,\n cancelled: true,\n ends_at: new Date().toISOString(),\n });\n break;\n }\n\n case \"subscription_paused\":\n Object.assign(updateData, {\n status: \"paused\",\n pause: data.pause ?? null,\n });\n break;\n\n case \"subscription_payment_failed\":\n Object.assign(updateData, {\n status: \"past_due\",\n });\n break;\n\n case \"subscription_payment_success\":\n case \"subscription_payment_recovered\":\n Object.assign(updateData, {\n status: \"active\",\n cancelled: false,\n });\n break;\n\n default:\n console.log(\"ℹ️ Unhandled event:\", eventName);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"📝 updateData:\", JSON.stringify(updateData));\n\n // ── Step 4: UPSERT (Insert or Update) ──────────────────\n let result;\n \n if (existingRow) {\n // Update existing row\n result = await supabase\n .from(\"subscriptions\")\n .update(updateData)\n .eq(\"workspace_id\", workspaceId)\n .select();\n } else {\n // Insert new row\n // Set required fields for insert\n updateData.workspace_id = workspaceId;\n updateData.workspace_slug = workspaceSlug;\n updateData.created_at = updateData.created_at || new Date().toISOString();\n \n result = await supabase\n .from(\"subscriptions\")\n .insert(updateData)\n .select();\n }\n\n console.log(\"✅ Result:\", JSON.stringify(result.data));\n console.log(\"❌ Error:\", result.error?.message ?? \"none\");\n\n if (result.error) {\n console.error(\"❌ Operation failed:\", result.error.message);\n } else if (!result.data || result.data.length === 0) {\n console.warn(\"⚠️ No rows affected for workspace_id:\", workspaceId);\n } else {\n console.log(\"✓ Row updated:\", result.data[0]?.id);\n }\n\n console.log(\"─────────────────────────────────\");\n return new Response(\"OK\", { status: 200, headers: cors });\n } catch (err: any) {\n console.error(\"❌ Critical error:\", err.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n}",[],[438,617],"df4f0560-b21b-40a4-a86a-b8c60352148e",["D",1788177923422],[],[438,34],["D",1787231416441],[456,457,458],[438],["D",1779217793497],["D",1789501878689],{"_100":99,"_107":103},{"_100":99,"_101":-5,"_102":103,"_18":56,"_104":105,"_106":25},{"_13":89,"_33":90,"_45":44,"_91":46,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":47,"_98":99},"ctx",{"_82":-5,"_127":669,"_670":671,"_672":673,"_674":25,"_675":25,"_676":25,"_677":125,"_678":-5,"_679":-7,"_680":-7,"_681":63,"_682":25,"_683":25,"_684":-5,"_685":25,"_686":25,"_687":25,"_688":-5},"ENV",{"_640":641,"_642":643,"_644":90,"_645":646,"_647":648,"_649":650,"_651":652,"_653":654,"_655":656,"_657":658,"_659":660,"_661":662,"_663":664,"_665":666,"_667":668},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

VideoFrame Analytics

Bandwidth hours dashboard

Bandwidth Dashboard

Diff · v236