VideoFrame Analytics

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_681":682,"_683":684},"routes/_app.x.$handle.$name",{"_100":99,"_32":46,"_108":90,"_27":54,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":125,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":25,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",282,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","Cloudfare/api-3-webhook.ts","latestPath","fileId","ebc60f9a-af5b-11f1-aac8-1607ee4eb77e","name","api-3-webhook.ts","fileType","http","content","import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl2\"),\n Deno.env.get(\"superbasesecretkey2\"),\n);\n\nexport default async function (req: Request) {\n // Health check\n if (req.method === \"GET\") {\n return new Response(\"✅ Webhook Active\", { status: 200 });\n }\n\n // CORS\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n\n if (req.method === \"POST\") {\n try {\n // 1. Extract form fields safely\n const formData = await req.formData();\n const taskToken = formData.get(\"task_token\") as string;\n const event = formData.get(\"event\") as string;\n const statusStr = formData.get(\"status\") as string;\n\n console.log(\"─────────────────────────────────\");\n console.log(\"📥 task_token:\", taskToken);\n console.log(\"📥 event:\", event);\n\n // 2. Validate essential keys\n if (!taskToken || !event) {\n console.warn(\"⚠️ Missing fields:\", { taskToken, event });\n return new Response(\"Missing essential fields\", { status: 200 });\n }\n\n // 3. Parse status JSON safely to avoid crashing the whole execution\n let data: any = {};\n try {\n if (statusStr) data = JSON.parse(statusStr);\n } catch (jsonErr) {\n console.warn(\n \"⚠️ Failed to parse Qencode status JSON string:\",\n jsonErr.message,\n );\n }\n\n // Extract details with fallback structures\n const qError = Number(data.error) || (event === \"error\" ? 1 : 0);\n const qErrorDesc = data.error_description || data.error_message ||\n (event === \"error\" ? \"Unknown encoding error occurred\" : null);\n const video = data.videos?.[0] ?? null;\n const videoUrl = video?.url ?? null;\n const duration = parseFloat(data.duration) || 0;\n\n console.log(\"📥 qError code:\", qError);\n console.log(\"📥 videoUrl:\", videoUrl);\n\n // 4. Map EVENT → status + percent\n let supabaseStatus: string;\n let fakePercent: number;\n\n if (event === \"queued\") {\n supabaseStatus = \"queued\";\n fakePercent = 10;\n } else if (event === \"converting\") {\n supabaseStatus = \"transcoding\";\n fakePercent = 30;\n } else if (event === \"converted\") {\n supabaseStatus = \"transcoding\";\n fakePercent = 70;\n } else if (event === \"saving\") {\n supabaseStatus = \"transcoding\";\n fakePercent = 85;\n } else if (event === \"saved\") {\n // If an upload error happened during the saved phase, route to failed\n supabaseStatus = qError === 0 ? \"complete\" : \"failed\";\n fakePercent = 100;\n } else if (event === \"error\") {\n supabaseStatus = \"failed\";\n fakePercent = 0;\n } else {\n console.warn(\"⚠️ Unknown event received:\", event);\n supabaseStatus = \"transcoding\";\n fakePercent = 0;\n }\n\n console.log(`📊 ${event} → ${supabaseStatus} → ${fakePercent}%`);\n\n // 5. Build dynamic update object\n const updateData: any = {\n status: supabaseStatus,\n processing_progress: fakePercent,\n event,\n updated_at: new Date().toISOString(),\n };\n\n if (supabaseStatus === \"complete\") {\n updateData.video_url = videoUrl;\n updateData.duration = Math.round(duration);\n }\n\n // Capture error reason securely if either condition matches a failure path\n if (supabaseStatus === \"failed\" || qError > 0) {\n updateData.status = \"failed\"; // Force status match if qError flagged a problem\n updateData.error_description = qErrorDesc ||\n \"Transcoding or upload pipeline failed.\";\n }\n\n // 6. Execute update against Supabase\n const { data: updated, error } = await supabase\n .from(\"videos\")\n .update(updateData)\n .eq(\"task_token\", taskToken)\n .select();\n\n if (error) {\n console.error(\"❌ Supabase DB error:\", error.message);\n return new Response(\"Database Error\", { status: 200 });\n }\n\n if (!updated || updated.length === 0) {\n console.warn(\"⚠️ No video row matching task_token:\", taskToken);\n } else {\n console.log(\n \"✅ Successfully updated row:\",\n taskToken,\n \"→\",\n updateData.status,\n fakePercent + \"%\",\n );\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err) {\n console.error(\"❌ Critical system failure inside webhook:\", err.message);\n return new Response(\"Internal Processing Error\", { status: 200 });\n }\n }\n\n return new Response(\"Method not allowed\", { status: 405 });\n}","import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl2\"),\n Deno.env.get(\"superbasesecretkey2\"),\n);\n\nexport default async function (req: Request) {\n // ─── Health check ───\n if (req.method === \"GET\") {\n return new Response(\"✅ Webhook Active\", { status: 200 });\n }\n\n // ─── CORS ───\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n\n if (req.method === \"POST\") {\n try {\n // ─── 1. Parse body (supports both form-data and JSON) ───\n const contentType = req.headers.get(\"content-type\") || \"\";\n let taskToken: string | null = null;\n let event: string | null = null;\n let data: any = {};\n\n if (contentType.includes(\"application/json\")) {\n // JSON body\n const jsonBody = await req.json();\n taskToken = jsonBody.task_token;\n event = jsonBody.event;\n data = jsonBody.status ? JSON.parse(jsonBody.status) : jsonBody;\n } else {\n // Form data\n const formData = await req.formData();\n taskToken = formData.get(\"task_token\") as string;\n event = formData.get(\"event\") as string;\n const statusStr = formData.get(\"status\") as string;\n\n if (statusStr) {\n try {\n data = JSON.parse(statusStr);\n } catch (jsonErr) {\n console.warn(\"⚠️ Failed to parse status JSON:\", jsonErr.message);\n }\n }\n }\n\n console.log(\"─────────────────────────────────\");\n console.log(\"📥 task_token:\", taskToken);\n console.log(\"📥 event:\", event);\n\n // ─── 2. Validate ───\n if (!taskToken || !event) {\n console.warn(\"⚠️ Missing fields:\", { taskToken, event });\n return new Response(\"Missing essential fields\", { status: 200 });\n }\n\n // ─── 3. Extract details ───\n const qError = Number(data.error) || (event === \"error\" ? 1 : 0);\n const qErrorDesc = data.error_description || data.error_message ||\n (event === \"error\" ? \"Unknown encoding error\" : null);\n\n const video = data.videos?.[0] ?? null;\n const videoUrl = video?.url ?? null;\n const duration = parseFloat(data.duration) || null;\n const width = parseInt(data.width) || null;\n const height = parseInt(data.height) || null;\n const fileSize = parseInt(data.file_size || data.size) || null;\n const bitrate = parseInt(data.bitrate) || null;\n const codec = data.video_codec || data.codec || null;\n const mimeType = data.mime_type || null;\n\n console.log(\"📥 qError code:\", qError);\n console.log(\"📥 videoUrl:\", videoUrl);\n console.log(\"📥 duration:\", duration);\n\n // ─── 4. Map EVENT → DB status ───\n // ✅ DB constraint only allows: uploading, transcoding, ready, error, deleted\n let dbStatus: string;\n let progress: number;\n\n switch (event) {\n case \"queued\":\n dbStatus = \"transcoding\";\n progress = 10;\n break;\n\n case \"converting\":\n dbStatus = \"transcoding\";\n progress = 30;\n break;\n\n case \"converted\":\n dbStatus = \"transcoding\";\n progress = 70;\n break;\n\n case \"saving\":\n dbStatus = \"transcoding\";\n progress = 85;\n break;\n\n case \"saved\":\n if (qError === 0 && videoUrl) {\n dbStatus = \"ready\";\n progress = 100;\n } else {\n dbStatus = \"error\";\n progress = 100;\n }\n break;\n\n case \"error\":\n dbStatus = \"error\";\n progress = 100;\n break;\n\n default:\n console.warn(\"⚠️ Unknown event:\", event);\n return new Response(\"Unknown event ignored\", { status: 200 });\n }\n\n console.log(`📊 ${event} → ${dbStatus} → ${progress}%`);\n\n // ─── 5. Build update object ───\n const updateData: any = {\n status: dbStatus,\n processing_progress: progress,\n event,\n updated_at: new Date().toISOString(),\n };\n\n // ─── On successful completion ───\n if (dbStatus === \"ready\") {\n if (videoUrl) updateData.video_url = videoUrl;\n if (duration) updateData.duration = duration;\n if (width) updateData.width = width;\n if (height) updateData.height = height;\n if (fileSize) updateData.transcoded_size = fileSize;\n if (bitrate) updateData.bitrate = bitrate;\n if (codec) updateData.codec = codec;\n if (mimeType) updateData.mime_type = mimeType;\n\n // Store full Qencode response in transcoding_metadata\n updateData.transcoding_metadata = {\n qencode_complete: {\n event,\n completed_at: new Date().toISOString(),\n video_url: videoUrl,\n duration,\n width,\n height,\n file_size: fileSize,\n bitrate,\n codec,\n mime_type,\n raw: data,\n },\n };\n }\n\n // ─── On error ───\n if (dbStatus === \"error\") {\n updateData.error_code = String(qError || \"UNKNOWN\");\n updateData.error_description = qErrorDesc ||\n \"Transcoding or upload pipeline failed.\";\n\n updateData.transcoding_metadata = {\n qencode_error: {\n event,\n failed_at: new Date().toISOString(),\n code: qError,\n description: qErrorDesc,\n raw: data,\n },\n };\n }\n\n // ─── 6. Update Supabase ───\n const { data: updated, error } = await supabase\n .from(\"videos\")\n .update(updateData)\n .eq(\"task_token\", taskToken)\n .select();\n\n if (error) {\n console.error(\"❌ Supabase DB error:\", error.message);\n return new Response(\"Database Error\", { status: 200 });\n }\n\n if (!updated || updated.length === 0) {\n console.warn(\"⚠️ No video row for task_token:\", taskToken);\n return new Response(\"Row not found\", { status: 200 });\n }\n\n console.log(\n `✅ Updated row: ${taskToken} → ${dbStatus} (${progress}%)`,\n );\n\n // ─── 7. Update workspace storage on ready ───\n if (dbStatus === \"ready\" && fileSize) {\n const videoRow = updated[0];\n if (videoRow.workspace_id) {\n try {\n await supabase.rpc(\"increment_workspace_storage\", {\n p_workspace_id: videoRow.workspace_id,\n p_bytes: fileSize,\n });\n console.log(\"✅ Workspace storage updated\");\n } catch (rpcErr: any) {\n console.warn(\"⚠️ Storage update failed:\", rpcErr.message);\n }\n }\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"❌ Webhook error:\", err.message);\n console.error(\"Stack:\", err.stack);\n return new Response(\"Internal Processing Error\", { status: 200 });\n }\n }\n\n return new Response(\"Method not allowed\", { status: 405 });\n}","createdAt",["D",1789298042179],"branchVersion","branchId","511a679e-53b6-11f1-94f4-ee650bb23af1","id","51199440-53b6-11f1-94f4-ee650bb23af1","weweb-qencode-webhook-test",["D",1779217793497],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","ed4ac4d0-3588-11f0-872d-e3a8a6a44321","pinnedFileId","a4a1762e-6116-11f1-a12c-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","0e2bf41e-0a63-4b9e-99fc-a6d26c3922f5","tursoName","5119944053b611f194f4ee650bb23af1","tursoHostname","5119944053b611f194f4ee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789501878689],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_107":103},"org",{"_100":99,"_101":-5,"_102":103,"_18":56,"_104":105,"_106":25},"branch",{"_13":89,"_32":90,"_44":43,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":46,"_98":99},"isOwned",293,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","sahil8","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ4TWVFQ2NUbHJXRlUwRHhVUXdEVzM2YkdFZyJ9","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_44":45,"_32":46,"_39":676,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":25,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":677,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":678,"_84":679,"_86":680,"_88":25},"tree",[455,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500],"files",[455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500],"counts",{"_444":63,"_445":275,"_446":63,"_447":448,"_449":450},"contents",[130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_44":437,"_32":438,"_30":439,"_171":-5,"_42":43,"_41":440,"_173":125,"_39":441,"_13":275,"_34":442,"_36":-5,"_24":25,"_177":-5,"_27":443},{"_44":430,"_32":431,"_30":432,"_171":-5,"_42":43,"_41":433,"_173":125,"_39":434,"_13":304,"_34":35,"_36":435,"_24":25,"_177":-5,"_27":436},{"_44":424,"_32":425,"_30":426,"_171":-5,"_42":43,"_41":216,"_173":125,"_39":427,"_13":224,"_34":35,"_36":428,"_24":25,"_177":-5,"_27":429},{"_44":417,"_32":418,"_30":419,"_171":-5,"_42":43,"_41":420,"_173":125,"_39":421,"_13":192,"_34":35,"_36":422,"_24":25,"_177":-5,"_27":423},{"_44":410,"_32":411,"_30":412,"_171":-5,"_42":43,"_41":413,"_173":125,"_39":414,"_13":224,"_34":35,"_36":415,"_24":25,"_177":-5,"_27":416},{"_44":402,"_32":403,"_30":404,"_171":-5,"_42":43,"_41":405,"_173":125,"_39":406,"_13":407,"_34":35,"_36":408,"_24":25,"_177":-5,"_27":409},{"_44":395,"_32":396,"_30":397,"_171":-5,"_42":43,"_41":398,"_173":125,"_39":399,"_13":63,"_34":35,"_36":400,"_24":25,"_177":-5,"_27":401},{"_44":388,"_32":389,"_30":390,"_171":-5,"_42":43,"_41":391,"_173":125,"_39":392,"_13":304,"_34":35,"_36":393,"_24":25,"_177":-5,"_27":394},{"_44":381,"_32":382,"_30":383,"_171":-5,"_42":43,"_41":384,"_173":125,"_39":385,"_13":200,"_34":35,"_36":386,"_24":25,"_177":-5,"_27":387},{"_44":374,"_32":375,"_30":376,"_171":-5,"_42":43,"_41":377,"_173":125,"_39":378,"_13":192,"_34":35,"_36":379,"_24":25,"_177":-5,"_27":380},{"_44":367,"_32":368,"_30":369,"_171":-5,"_42":43,"_41":370,"_173":125,"_39":371,"_13":216,"_34":35,"_36":372,"_24":25,"_177":-5,"_27":373},{"_44":360,"_32":361,"_30":362,"_171":-5,"_42":43,"_41":363,"_173":125,"_39":364,"_13":216,"_34":35,"_36":365,"_24":25,"_177":-5,"_27":366},{"_44":353,"_32":354,"_30":355,"_171":-5,"_42":43,"_41":356,"_173":125,"_39":357,"_13":175,"_34":35,"_36":358,"_24":25,"_177":-5,"_27":359},{"_44":346,"_32":347,"_30":348,"_171":-5,"_42":43,"_41":349,"_173":125,"_39":350,"_13":224,"_34":35,"_36":351,"_24":25,"_177":-5,"_27":352},{"_44":341,"_32":342,"_30":343,"_171":-5,"_42":43,"_41":175,"_173":125,"_39":344,"_13":224,"_34":35,"_36":339,"_24":25,"_177":-5,"_27":345},{"_44":334,"_32":335,"_30":336,"_171":-5,"_42":43,"_41":337,"_173":125,"_39":338,"_13":275,"_34":35,"_36":339,"_24":25,"_177":-5,"_27":340},{"_44":328,"_32":329,"_30":58,"_171":-5,"_42":43,"_41":330,"_173":125,"_39":331,"_13":224,"_34":35,"_36":332,"_24":25,"_177":-5,"_27":333},{"_44":321,"_32":322,"_30":323,"_171":-5,"_42":43,"_41":324,"_173":125,"_39":325,"_13":216,"_34":35,"_36":326,"_24":25,"_177":-5,"_27":327},{"_44":314,"_32":315,"_30":316,"_171":-5,"_42":43,"_41":317,"_173":125,"_39":318,"_13":224,"_34":35,"_36":319,"_24":25,"_177":-5,"_27":320},{"_44":307,"_32":308,"_30":309,"_171":-5,"_42":43,"_41":310,"_173":125,"_39":311,"_13":224,"_34":35,"_36":312,"_24":25,"_177":-5,"_27":313},{"_44":299,"_32":300,"_30":301,"_171":-5,"_42":43,"_41":302,"_173":125,"_39":303,"_13":304,"_34":35,"_36":305,"_24":25,"_177":-5,"_27":306},{"_44":292,"_32":293,"_30":294,"_171":-5,"_42":43,"_41":295,"_173":125,"_39":296,"_13":224,"_34":35,"_36":297,"_24":25,"_177":-5,"_27":298},{"_44":285,"_32":286,"_30":287,"_171":-5,"_42":43,"_41":288,"_173":125,"_39":289,"_13":216,"_34":35,"_36":290,"_24":25,"_177":-5,"_27":291},{"_44":278,"_32":279,"_30":280,"_171":-5,"_42":43,"_41":281,"_173":125,"_39":282,"_13":232,"_34":35,"_36":283,"_24":25,"_177":-5,"_27":284},{"_44":270,"_32":271,"_30":272,"_171":-5,"_42":43,"_41":273,"_173":125,"_39":274,"_13":275,"_34":35,"_36":276,"_24":25,"_177":-5,"_27":277},{"_44":263,"_32":264,"_30":265,"_171":-5,"_42":43,"_41":266,"_173":125,"_39":267,"_13":224,"_34":35,"_36":268,"_24":25,"_177":-5,"_27":269},{"_44":256,"_32":257,"_30":258,"_171":-5,"_42":43,"_41":259,"_173":125,"_39":260,"_13":200,"_34":35,"_36":261,"_24":25,"_177":-5,"_27":262},{"_44":249,"_32":250,"_30":251,"_171":-5,"_42":43,"_41":252,"_173":125,"_39":253,"_13":184,"_34":35,"_36":254,"_24":25,"_177":-5,"_27":255},{"_44":242,"_32":243,"_30":244,"_171":-5,"_42":43,"_41":245,"_173":125,"_39":246,"_13":63,"_34":35,"_36":247,"_24":25,"_177":-5,"_27":248},{"_44":235,"_32":236,"_30":237,"_171":-5,"_42":43,"_41":238,"_173":125,"_39":239,"_13":200,"_34":35,"_36":240,"_24":25,"_177":-5,"_27":241},{"_44":227,"_32":228,"_30":229,"_171":-5,"_42":43,"_41":230,"_173":125,"_39":231,"_13":232,"_34":35,"_36":233,"_24":25,"_177":-5,"_27":234},{"_44":219,"_32":220,"_30":221,"_171":-5,"_42":43,"_41":222,"_173":125,"_39":223,"_13":224,"_34":35,"_36":225,"_24":25,"_177":-5,"_27":226},{"_44":211,"_32":212,"_30":213,"_171":-5,"_42":43,"_41":214,"_173":125,"_39":215,"_13":216,"_34":35,"_36":217,"_24":25,"_177":-5,"_27":218},{"_44":203,"_32":204,"_30":205,"_171":-5,"_42":43,"_41":206,"_173":125,"_39":207,"_13":208,"_34":35,"_36":209,"_24":25,"_177":-5,"_27":210},{"_44":195,"_32":196,"_30":197,"_171":-5,"_42":43,"_41":198,"_173":125,"_39":199,"_13":200,"_34":35,"_36":201,"_24":25,"_177":-5,"_27":202},{"_44":187,"_32":188,"_30":189,"_171":-5,"_42":43,"_41":190,"_173":125,"_39":191,"_13":192,"_34":35,"_36":193,"_24":25,"_177":-5,"_27":194},{"_44":179,"_32":180,"_30":181,"_171":-5,"_42":43,"_41":182,"_173":125,"_39":183,"_13":184,"_34":35,"_36":185,"_24":25,"_177":-5,"_27":186},{"_44":168,"_32":169,"_30":170,"_171":-5,"_42":43,"_41":172,"_173":125,"_39":174,"_13":175,"_34":35,"_36":176,"_24":25,"_177":-5,"_27":178},"c2d596fa-5b55-11f1-9a0f-ee650bb23af1","weweb-webhook.ts","be54ba4e-58ed-11f1-a07a-ee650bb23af1","parentId",78,"latest",["D",1780055932410],14,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\"),\n Deno.env.get(\"superbasesecretkey\"),\n);\n\nexport default async function (req: Request) {\n // Health check\n if (req.method === \"GET\") {\n return new Response(\"✅ Webhook Active\", { status: 200 });\n }\n\n // CORS\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n\n if (req.method === \"POST\") {\n try {\n // 1. Extract form fields safely\n const formData = await req.formData();\n const taskToken = formData.get(\"task_token\") as string;\n const event = formData.get(\"event\") as string;\n const statusStr = formData.get(\"status\") as string;\n\n console.log(\"─────────────────────────────────\");\n console.log(\"📥 task_token:\", taskToken);\n console.log(\"📥 event:\", event);\n\n // 2. Validate essential keys\n if (!taskToken || !event) {\n console.warn(\"⚠️ Missing fields:\", { taskToken, event });\n return new Response(\"Missing essential fields\", { status: 200 });\n }\n\n // 3. Parse status JSON safely to avoid crashing the whole execution\n let data: any = {};\n try {\n if (statusStr) data = JSON.parse(statusStr);\n } catch (jsonErr) {\n console.warn(\"⚠️ Failed to parse Qencode status JSON string:\", jsonErr.message);\n }\n\n // Extract details with fallback structures\n const qError = Number(data.error) || (event === \"error\" ? 1 : 0);\n const qErrorDesc = data.error_description || data.error_message || (event === \"error\" ? \"Unknown encoding error occurred\" : null);\n const video = data.videos?.[0] ?? null;\n const videoUrl = video?.url ?? null;\n const duration = parseFloat(data.duration) || 0;\n\n console.log(\"📥 qError code:\", qError);\n console.log(\"📥 videoUrl:\", videoUrl);\n\n // 4. Map EVENT → status + percent\n let supabaseStatus: string;\n let fakePercent: number;\n\n if (event === \"queued\") {\n supabaseStatus = \"queued\";\n fakePercent = 10;\n } else if (event === \"converting\") {\n supabaseStatus = \"transcoding\";\n fakePercent = 30;\n } else if (event === \"converted\") {\n supabaseStatus = \"transcoding\";\n fakePercent = 70;\n } else if (event === \"saving\") {\n supabaseStatus = \"transcoding\";\n fakePercent = 85;\n } else if (event === \"saved\") {\n // If an upload error happened during the saved phase, route to failed\n supabaseStatus = qError === 0 ? \"complete\" : \"failed\";\n fakePercent = 100;\n } else if (event === \"error\") {\n supabaseStatus = \"failed\";\n fakePercent = 0;\n } else {\n console.warn(\"⚠️ Unknown event received:\", event);\n supabaseStatus = \"transcoding\";\n fakePercent = 0;\n }\n\n console.log(`📊 ${event} → ${supabaseStatus} → ${fakePercent}%`);\n\n // 5. Build dynamic update object\n const updateData: any = {\n status: supabaseStatus,\n processing_progress: fakePercent,\n event,\n updated_at: new Date().toISOString(),\n };\n\n if (supabaseStatus === \"complete\") {\n updateData.video_url = videoUrl;\n updateData.duration = Math.round(duration);\n }\n\n // Capture error reason securely if either condition matches a failure path\n if (supabaseStatus === \"failed\" || qError > 0) {\n updateData.status = \"failed\"; // Force status match if qError flagged a problem\n updateData.error_description = qErrorDesc || \"Transcoding or upload pipeline failed.\";\n }\n\n // 6. Execute update against Supabase\n const { data: updated, error } = await supabase\n .from(\"videos\")\n .update(updateData)\n .eq(\"task_token\", taskToken)\n .select();\n\n if (error) {\n console.error(\"❌ Supabase DB error:\", error.message);\n return new Response(\"Database Error\", { status: 200 });\n }\n\n if (!updated || updated.length === 0) {\n console.warn(\"⚠️ No video row matching task_token:\", taskToken);\n } else {\n console.log(\n \"✅ Successfully updated row:\",\n taskToken,\n \"→\",\n updateData.status,\n fakePercent + \"%\",\n );\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err) {\n console.error(\"❌ Critical system failure inside webhook:\", err.message);\n return new Response(\"Internal Processing Error\", { status: 200 });\n }\n }\n\n return new Response(\"Method not allowed\", { status: 405 });\n}","label",[169],"4b75b11d-0e2b-4064-a43d-a96722e3b2dc","weweb-webhook-3.2.ts","991e8726-81cb-11f1-b717-1607ee4eb77e",192,["D",1784284741296],2,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\n// Bunny Database — dedicated \"videos\" pipeline endpoint (per your Bruno collection)\nconst BUNNY_VIDEOS_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!; // e.g. https://01KT270SNQ0T40DJR9YX9WS01J-videos.lite.bunnydb.net/v2/pipeline\nconst BUNNY_VIDEOS_DB_TOKEN = Deno.env.get(\"bunnyVideosDbToken\")!;\n\nexport default async function (req: Request) {\n if (req.method === \"GET\") {\n return new Response(\"Webhook Active\", { status: 200 });\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const formData = await req.formData();\n const taskToken = formData.get(\"task_token\") as string;\n const event = formData.get(\"event\") as string;\n const callbackType = formData.get(\"callback_type\") as string;\n const statusStr = formData.get(\"status\") as string;\n const payloadStr = formData.get(\"payload\") as string;\n\n console.log(\"─────────────────────────────────\");\n console.log(\"callback_type:\", callbackType);\n console.log(\"event:\", event);\n console.log(\"task_token:\", taskToken);\n console.log(\"status raw:\", statusStr);\n\n if (!taskToken || !event) {\n return new Response(\"OK\", { status: 200 });\n }\n\n // Parse status JSON safely — handle null\n let data: any = {};\n try {\n if (statusStr && statusStr !== \"null\") {\n data = JSON.parse(statusStr);\n }\n } catch (e) {\n console.warn(\"Failed to parse status JSON\");\n }\n\n // Parse payload safely\n let payload: any = {};\n try {\n if (payloadStr && payloadStr !== \"null\") {\n payload = JSON.parse(payloadStr);\n }\n } catch (e) {}\n\n const videoId = payload.video_id ?? null;\n console.log(\"video_id from payload:\", videoId);\n\n // ── Progress map ──────────────────────────────────────────────────\n const progressMap: Record = {\n \"task|queued\": { status: \"queued\", pct: 5 },\n \"subtask|queued\": { status: \"queued\", pct: 10 },\n \"subtask|converting\": { status: \"converting\", pct: 30 },\n \"subtask|converted\": { status: \"converted\", pct: 70 },\n \"subtask|saving\": { status: \"saving\", pct: 85 },\n \"subtask|saved\": { status: \"saved\", pct: 95 },\n \"task|saved\": { status: \"complete\", pct: 100 },\n \"task|error\": { status: \"failed\", pct: 0 },\n \"subtask|error\": { status: \"failed\", pct: 0 },\n };\n\n const key = `${callbackType}|${event}`;\n const mapped = progressMap[key];\n\n if (!mapped) {\n console.log(\"Unknown key:\", key, \"skipping\");\n return new Response(\"OK\", { status: 200 });\n }\n\n console.log(`${key} → ${mapped.status} ${mapped.pct}%`);\n\n // ── Safely read from data (may be empty {}) ───────────────────────\n const qError = data && data.error ? Number(data.error) : 0;\n const qErrorDesc = data && data.error_description\n ? data.error_description\n : null;\n const duration = data && data.duration ? parseFloat(data.duration) : 0;\n\n // For task|saved: videos array is in data.videos\n // For subtask: data itself is the video object\n const videos = (data && Array.isArray(data.videos)) ? data.videos : [];\n const firstVideo = videos[0] ?? (callbackType === \"subtask\" ? data : null);\n const videoUrl = firstVideo && (firstVideo.url || firstVideo.download_url)\n ? (firstVideo.url || firstVideo.download_url)\n : null;\n const videoSize = firstVideo && firstVideo.size ? firstVideo.size : null;\n const bitrate = firstVideo && firstVideo.bitrate\n ? firstVideo.bitrate\n : null;\n const meta = firstVideo && firstVideo.meta ? firstVideo.meta : null;\n const width = meta ? (meta.resolution_width || meta.width || null) : null;\n const height = meta\n ? (meta.resolution_height || meta.height || null)\n : null;\n\n // Override if error\n const finalStatus = qError > 0 ? \"failed\" : mapped.status;\n const finalPct = qError > 0 ? 0 : mapped.pct;\n\n // ── Build update ──────────────────────────────────────────────────\n const updateData: any = {\n status: finalStatus,\n processing_progress: finalPct,\n task_token: taskToken,\n updated_at: new Date().toISOString(),\n };\n\n if (videoUrl) {\n updateData.video_url = videoUrl;\n }\n\n let finalDuration: number | null = null;\n let finalWidth: number | null = null;\n let finalHeight: number | null = null;\n let finalBitrate: number | null = null;\n let finalTranscodedSize: number | null = null;\n\n if (key === \"task|saved\") {\n if (duration) updateData.duration = finalDuration = Math.round(duration);\n if (width) updateData.width = finalWidth = width;\n if (height) updateData.height = finalHeight = height;\n if (bitrate) updateData.bitrate = finalBitrate = bitrate;\n if (videoSize) {\n finalTranscodedSize = Math.round(parseFloat(String(videoSize)) * 1024 * 1024);\n updateData.transcoded_size = finalTranscodedSize;\n // IMPORTANT: the workspace storage trigger watches file_size, not\n // transcoded_size — set both, or storage_used_bytes never updates.\n updateData.file_size = String(finalTranscodedSize);\n }\n }\n\n if (finalStatus === \"failed\") {\n updateData.error_description = qErrorDesc || \"Transcoding failed\";\n }\n\n console.log(\"updateData:\", JSON.stringify(updateData));\n\n // ── Update Supabase (source of truth) ──────────────────────────────\n // select workspaces(slug) too — needed to sync to Bunny Database below,\n // which keys videos by workspace_slug (text), not workspace_id (uuid)\n const query = videoId\n ? supabase.from(\"videos\").update(updateData).eq(\"id\", videoId)\n : supabase.from(\"videos\").update(updateData).eq(\"task_token\", taskToken);\n\n const { data: updated, error: dbError } = await query\n .select(\"id, task_token, workspace_id, folder_id, title, status, video_url, thumbnail_url, duration, workspaces(slug)\")\n ;\n\n if (dbError) {\n console.error(\"DB error:\", dbError.message);\n return new Response(\"OK\", { status: 200 });\n }\n\n if (!updated || updated.length === 0) {\n console.warn(\"No row found — task_token:\", taskToken, \"video_id:\", videoId);\n return new Response(\"OK\", { status: 200 });\n }\n\n const video = updated[0];\n console.log(\"✓ Updated:\", video.id, \"→\", finalStatus, finalPct + \"%\");\n\n // ── Sync to Bunny Database \"Video\" table (edge mirror) ─────────────\n // Explicit-call layer of the 3-layer sync pattern. Uses the same\n // /v2/pipeline format confirmed working in your Bruno collection.\n try {\n const workspaceSlug = (video as any).workspaces?.slug ?? null;\n\n if (!workspaceSlug) {\n console.warn(\"⚠️ No workspace_slug resolved — skipping Bunny Database sync\");\n } else {\n const bunnyRes = await fetch(BUNNY_VIDEOS_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_VIDEOS_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `\n INSERT INTO \"Video\" (\n video_id, workspace_id, workspace_slug, folder_id, file_name,\n mp4_url, thumbnail_url, duration, status,\n output_size_bytes, width, height, error_message, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(video_id) DO UPDATE SET\n status = excluded.status,\n mp4_url = excluded.mp4_url,\n thumbnail_url = excluded.thumbnail_url,\n duration = excluded.duration,\n output_size_bytes = excluded.output_size_bytes,\n width = excluded.width,\n height = excluded.height,\n error_message = excluded.error_message,\n updated_at = excluded.updated_at\n `,\n args: [\n { type: \"text\", value: String(video.id) },\n { type: \"text\", value: String(video.workspace_id) },\n { type: \"text\", value: workspaceSlug },\n { type: video.folder_id ? \"text\" : \"null\", value: video.folder_id ? String(video.folder_id) : null },\n { type: \"text\", value: video.title ?? \"untitled\" },\n { type: videoUrl ? \"text\" : \"null\", value: videoUrl },\n { type: video.thumbnail_url ? \"text\" : \"null\", value: video.thumbnail_url },\n { type: \"float\", value: finalDuration ?? 0 },\n { type: \"text\", value: finalStatus },\n { type: \"integer\", value: finalTranscodedSize ?? 0 },\n { type: \"integer\", value: finalWidth ?? 0 },\n { type: \"integer\", value: finalHeight ?? 0 },\n { type: finalStatus === \"failed\" ? \"text\" : \"null\", value: finalStatus === \"failed\" ? (qErrorDesc || \"Transcoding failed\") : null },\n { type: \"text\", value: new Date().toISOString() },\n ],\n },\n },\n ],\n }),\n });\n\n if (!bunnyRes.ok) {\n console.error(\"⚠️ Bunny Database sync failed:\", await bunnyRes.text());\n } else {\n console.log(\"✓ Synced to Bunny Database:\", video.id);\n }\n }\n } catch (bunnyErr: any) {\n // Never fail the webhook over an edge-sync error — Supabase already\n // has the correct data; the hourly cron safety net reconciles this.\n console.error(\"⚠️ Bunny Database sync error:\", bunnyErr.message);\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Critical error:\", err.message);\n return new Response(\"OK\", { status: 200 });\n }\n}",[180],"b1e89e07-6566-4076-a6b7-f4e192f799b4","weweb-webhook-3.1.ts","b14690de-6333-11f1-9917-1607ee4eb77e",190,["D",1784284722251],5,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nexport default async function (req: Request) {\n if (req.method === \"GET\") {\n return new Response(\"Webhook Active\", { status: 200 });\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const formData = await req.formData();\n const taskToken = formData.get(\"task_token\") as string;\n const event = formData.get(\"event\") as string;\n const callbackType = formData.get(\"callback_type\") as string;\n const statusStr = formData.get(\"status\") as string;\n const payloadStr = formData.get(\"payload\") as string;\n\n console.log(\"─────────────────────────────────\");\n console.log(\"callback_type:\", callbackType);\n console.log(\"event:\", event);\n console.log(\"task_token:\", taskToken);\n console.log(\"status raw:\", statusStr);\n\n if (!taskToken || !event) {\n return new Response(\"OK\", { status: 200 });\n }\n\n // Parse status JSON safely — handle null\n let data: any = {};\n try {\n if (statusStr && statusStr !== \"null\") {\n data = JSON.parse(statusStr);\n }\n } catch (e) {\n console.warn(\"Failed to parse status JSON\");\n }\n\n // Parse payload safely\n let payload: any = {};\n try {\n if (payloadStr && payloadStr !== \"null\") {\n payload = JSON.parse(payloadStr);\n }\n } catch (e) {}\n\n const videoId = payload.video_id ?? null;\n console.log(\"video_id from payload:\", videoId);\n\n // ── Progress map ──────────────────────────────────────────────────\n const progressMap: Record = {\n \"task|queued\": { status: \"queued\", pct: 5 },\n \"subtask|queued\": { status: \"queued\", pct: 10 },\n \"subtask|converting\": { status: \"converting\", pct: 30 },\n \"subtask|converted\": { status: \"converted\", pct: 70 },\n \"subtask|saving\": { status: \"saving\", pct: 85 },\n \"subtask|saved\": { status: \"saved\", pct: 95 },\n \"task|saved\": { status: \"complete\", pct: 100 },\n \"task|error\": { status: \"failed\", pct: 0 },\n \"subtask|error\": { status: \"failed\", pct: 0 },\n };\n\n const key = `${callbackType}|${event}`;\n const mapped = progressMap[key];\n\n if (!mapped) {\n console.log(\"Unknown key:\", key, \"skipping\");\n return new Response(\"OK\", { status: 200 });\n }\n\n console.log(`${key} → ${mapped.status} ${mapped.pct}%`);\n\n // ── Safely read from data (may be empty {}) ───────────────────────\n const qError = data && data.error ? Number(data.error) : 0;\n const qErrorDesc = data && data.error_description\n ? data.error_description\n : null;\n const duration = data && data.duration ? parseFloat(data.duration) : 0;\n\n // For task|saved: videos array is in data.videos\n // For subtask: data itself is the video object\n const videos = (data && Array.isArray(data.videos)) ? data.videos : [];\n const firstVideo = videos[0] ?? (callbackType === \"subtask\" ? data : null);\n const videoUrl = firstVideo && (firstVideo.url || firstVideo.download_url)\n ? (firstVideo.url || firstVideo.download_url)\n : null;\n const videoSize = firstVideo && firstVideo.size ? firstVideo.size : null;\n const bitrate = firstVideo && firstVideo.bitrate\n ? firstVideo.bitrate\n : null;\n const meta = firstVideo && firstVideo.meta ? firstVideo.meta : null;\n const width = meta ? (meta.resolution_width || meta.width || null) : null;\n const height = meta\n ? (meta.resolution_height || meta.height || null)\n : null;\n\n // Override if error\n const finalStatus = qError > 0 ? \"failed\" : mapped.status;\n const finalPct = qError > 0 ? 0 : mapped.pct;\n\n // ── Build update ──────────────────────────────────────────────────\n const updateData: any = {\n status: finalStatus,\n processing_progress: finalPct,\n task_token: taskToken,\n updated_at: new Date().toISOString(),\n };\n\n // Save video URL when available\n if (videoUrl) {\n updateData.video_url = videoUrl;\n }\n\n // Save full details only on task completion\n if (key === \"task|saved\") {\n if (duration) updateData.duration = Math.round(duration);\n if (width) updateData.width = width;\n if (height) updateData.height = height;\n if (bitrate) updateData.bitrate = bitrate;\n if (videoSize) {\n updateData.transcoded_size = Math.round(\n parseFloat(String(videoSize)) * 1024 * 1024,\n );\n }\n }\n\n if (finalStatus === \"failed\") {\n updateData.error_description = qErrorDesc || \"Transcoding failed\";\n }\n\n console.log(\"updateData:\", JSON.stringify(updateData));\n\n // ── Update Supabase ───────────────────────────────────────────────\n const query = videoId\n ? supabase.from(\"videos\").update(updateData).eq(\"id\", videoId)\n : supabase.from(\"videos\").update(updateData).eq(\"task_token\", taskToken);\n\n const { data: updated, error: dbError } = await query.select();\n\n if (dbError) {\n console.error(\"DB error:\", dbError.message);\n return new Response(\"OK\", { status: 200 });\n }\n\n if (!updated || updated.length === 0) {\n console.warn(\n \"No row found — task_token:\",\n taskToken,\n \"video_id:\",\n videoId,\n );\n } else {\n console.log(\n \"✓ Updated:\",\n updated[0].id,\n \"→\",\n finalStatus,\n finalPct + \"%\",\n );\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Critical error:\", err.message);\n return new Response(\"OK\", { status: 200 });\n }\n}",[188],"d565eefb-0893-46a6-affd-a7cf586b4707","weweb-security_json-superbase.ts","f87bcefa-83a0-11f1-8091-1607ee4eb77e",203,["D",1784544235309],6,"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Content-Type\": \"application/json\",\n};\n\n// Fields in security_json that are arrays (support add/remove/replace)\nconst ARRAY_FIELDS = [\"geo_blocking\", \"allowed_domains\"];\n// Fields that are plain booleans (support set only)\nconst BOOLEAN_FIELDS = [\"hotlink_protection\", \"signed_url_enabled\"];\n\nexport default async function (req: Request): Promise {\n console.log(\"═══════════════════════════════════════\");\n console.log(\"📥 Incoming request:\", req.method);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS });\n }\n\n try {\n // ── Log the RAW body text before attempting to parse it ────────────\n const rawText = await req.text();\n console.log(\"📄 Raw body text:\", rawText);\n console.log(\"📄 Raw body type:\", typeof rawText);\n console.log(\"📄 Raw body length:\", rawText?.length);\n\n let body: any;\n try {\n body = JSON.parse(rawText);\n } catch (parseErr: any) {\n console.error(\"❌ JSON.parse failed:\", parseErr.message);\n console.error(\"❌ This means the request body was not valid JSON text.\");\n console.error(\n \"❌ Raw text that failed to parse:\",\n JSON.stringify(rawText),\n );\n return new Response(\n JSON.stringify({\n error: \"Invalid JSON in request body\",\n details: parseErr.message,\n received: rawText,\n }),\n { status: 400, headers: CORS },\n );\n }\n\n console.log(\"✅ Parsed body:\", JSON.stringify(body));\n\n const { workspace_id, field, action, values } = body;\n console.log(\n \"🔍 workspace_id:\",\n workspace_id,\n \"| type:\",\n typeof workspace_id,\n );\n console.log(\"🔍 field:\", field, \"| type:\", typeof field);\n console.log(\"🔍 action:\", action, \"| type:\", typeof action);\n console.log(\"🔍 values:\", JSON.stringify(values), \"| type:\", typeof values);\n\n if (!workspace_id || !field || !action) {\n console.warn(\"⚠️ Missing required field(s)\");\n return new Response(\n JSON.stringify({\n error: \"workspace_id, field, and action are required\",\n received: { workspace_id, field, action, values },\n }),\n { status: 400, headers: CORS },\n );\n }\n\n if (!ARRAY_FIELDS.includes(field) && !BOOLEAN_FIELDS.includes(field)) {\n console.warn(\"⚠️ Unknown field:\", field);\n return new Response(\n JSON.stringify({\n error: `Unknown field \"${field}\". Must be one of: ${\n [...ARRAY_FIELDS, ...BOOLEAN_FIELDS].join(\", \")\n }`,\n }),\n { status: 400, headers: CORS },\n );\n }\n\n // ── Step 1: Find the workspace by ID ──────────────────────────────\n console.log(\"🔎 Looking up workspace with id:\", workspace_id);\n\n const { data: workspace, error: readError } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug, security_json\")\n .eq(\"id\", workspace_id)\n .single();\n\n if (readError) {\n console.error(\"❌ Supabase read error:\", JSON.stringify(readError));\n }\n console.log(\"📦 Workspace found:\", JSON.stringify(workspace));\n\n if (readError || !workspace) {\n return new Response(\n JSON.stringify({\n error: \"Workspace not found\",\n details: readError?.message,\n }),\n { status: 404, headers: CORS },\n );\n }\n\n const current = workspace.security_json ?? {};\n console.log(\"📋 Current security_json:\", JSON.stringify(current));\n\n let updatedValue: any;\n\n // ── Step 2: Apply the change based on field type + action ─────────\n if (BOOLEAN_FIELDS.includes(field)) {\n console.log(\"🔘 Processing as BOOLEAN field\");\n if (action !== \"set\") {\n console.warn(\"⚠️ Boolean field with wrong action:\", action);\n return new Response(\n JSON.stringify({\n error: `Boolean field \"${field}\" only supports action \"set\"`,\n received_action: action,\n }),\n { status: 400, headers: CORS },\n );\n }\n updatedValue = Boolean(values);\n console.log(\"🔘 Converted to boolean:\", updatedValue);\n } else {\n console.log(\"📚 Processing as ARRAY field\");\n const currentList: string[] = current[field] ?? [];\n const incoming: string[] = Array.isArray(values)\n ? values\n : [values].filter(Boolean);\n console.log(\n \"📚 currentList:\",\n JSON.stringify(currentList),\n \"| incoming:\",\n JSON.stringify(incoming),\n );\n\n if (action === \"add\") {\n updatedValue = Array.from(new Set([...currentList, ...incoming]));\n } else if (action === \"remove\") {\n updatedValue = currentList.filter((v) => !incoming.includes(v));\n } else if (action === \"replace\") {\n updatedValue = incoming;\n } else {\n console.warn(\"⚠️ Array field with unsupported action:\", action);\n return new Response(\n JSON.stringify({\n error:\n `Array field \"${field}\" supports action \"add\", \"remove\", or \"replace\"`,\n received_action: action,\n }),\n { status: 400, headers: CORS },\n );\n }\n }\n\n console.log(\"✅ updatedValue:\", JSON.stringify(updatedValue));\n\n const newSecurityJson = { ...current, [field]: updatedValue };\n console.log(\n \"📝 newSecurityJson to write:\",\n JSON.stringify(newSecurityJson),\n );\n\n // ── Step 3: Write it back ──────────────────────────────────────────\n const { error: writeError } = await supabase\n .from(\"workspaces\")\n .update({ security_json: newSecurityJson })\n .eq(\"id\", workspace_id);\n\n if (writeError) {\n console.error(\"❌ Supabase write error:\", JSON.stringify(writeError));\n return new Response(\n JSON.stringify({\n error: \"Failed to update\",\n details: writeError.message,\n }),\n { status: 500, headers: CORS },\n );\n }\n\n console.log(\"✅ Write succeeded\");\n\n const responseBody = {\n success: true,\n workspace_id,\n slug: workspace.slug,\n field,\n value: updatedValue,\n security_json: newSecurityJson,\n };\n console.log(\"📤 Sending response:\", JSON.stringify(responseBody));\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\n JSON.stringify(responseBody),\n { status: 200, headers: CORS },\n );\n } catch (err: any) {\n console.error(\"💥 UNCAUGHT ERROR:\", err.message);\n console.error(\"💥 Stack:\", err.stack);\n return new Response(\n JSON.stringify({ error: err.message, stack: err.stack }),\n { status: 500, headers: CORS },\n );\n }\n}",[196],"a3337e15-f724-4f0b-95ea-c986eed7f6df","weweb-api-2.ts","5deed3e2-58e8-11f1-904c-ee650bb23af1",95,["D",1780920954441],8,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\"),\n Deno.env.get(\"superbasesecretkey\"),\n);\n\nexport default async function (req: Request) {\n const headers = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers });\n }\n\n try {\n const body = await req.json();\n console.log(\"📥 Received from WeWeb:\", JSON.stringify(body));\n\n const {\n task_token,\n tus_id,\n source_url,\n workspace_id,\n folder_id,\n file_size,\n file_name,\n user_id,\n } = body;\n\n // Only task_token is required\n if (!task_token) {\n return new Response(\n JSON.stringify({ error: \"task_token is required\" }),\n { status: 400, headers },\n );\n }\n\n // Source — tus upload or external URL\n const source = tus_id ? `tus:${tus_id}` : source_url;\n\n if (!source) {\n return new Response(\n JSON.stringify({ error: \"tus_id or source_url required\" }),\n { status: 400, headers },\n );\n }\n\n // 1. Create Supabase row — only task_token required\n const insertData: any = {\n task_token,\n status: \"transcoding\",\n created_at: new Date().toISOString(),\n };\n\n // Add optional fields only if provided\n if (workspace_id) insertData.workspace_id = workspace_id;\n if (folder_id) insertData.folder_id = folder_id;\n if (file_size) insertData.file_size = file_size;\n if (file_name) insertData.title = file_name;\n\n const { data: video, error: dbError } = await supabase\n .from(\"videos\")\n .insert(insertData)\n .select()\n .single();\n\n if (dbError) {\n console.error(\"❌ Supabase error:\", dbError.message);\n return new Response(\n JSON.stringify({ error: dbError.message }),\n { status: 500, headers },\n );\n }\n\n console.log(\"✅ Supabase row created:\", video.id);\n\n // 2. Start Qencode encode\n const queryPayload = {\n query: {\n source,\n callback_url:\n \"https://sahil8--b14690de633311f199171607ee4eb77e.web.val.run\",\n use_subtask_callback: 1,\n format: [\n {\n output: \"mp4\",\n video_codec: \"libx264\",\n destination: {\n url: `b2://backblaze.com/Vvideos/${user_id ?? \"guest\"}/${\n file_name ?? \"video\"\n }.mp4`,\n key: Deno.env.get(\"b2key\"),\n secret: Deno.env.get(\"b2secret\"),\n },\n },\n ],\n },\n };\n\n const params = new URLSearchParams();\n params.append(\"task_token\", task_token);\n params.append(\"payload\", user_id ?? \"guest\");\n params.append(\"query\", JSON.stringify(queryPayload));\n\n console.log(`🚀 Starting Qencode for: ${task_token}`);\n\n const qencodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n body: params,\n });\n const qencodeData = await qencodeRes.json();\n\n if (qencodeData.error !== 0) {\n console.error(\"❌ Qencode error:\", qencodeData.message);\n\n // Rollback Supabase row\n await supabase.from(\"videos\").delete().eq(\"id\", video.id);\n\n return new Response(\n JSON.stringify({ error: qencodeData.message }),\n { status: 400, headers },\n );\n }\n\n console.log(\"✅ Qencode accepted job!\");\n\n return new Response(\n JSON.stringify({\n success: true,\n video_id: video.id,\n task_token,\n status: \"transcoding\",\n }),\n { headers },\n );\n } catch (err) {\n console.error(\"❌ Error:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers },\n );\n }\n}",[204],"b5aa0955-d705-40dd-b9ca-25c81ec966ae","weweb-api-2.1-url.ts","c207ed22-7eb4-11f1-afa6-1607ee4eb77e",178,["D",1783945164859],4,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\"),\n Deno.env.get(\"superbasesecretkey\"),\n);\n\nconst CORS_HEADERS = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\n// Derive a filename from the URL path if the caller didn't supply one\nfunction deriveFileNameFromUrl(url: string): string {\n try {\n const pathname = new URL(url).pathname;\n const last = pathname.split(\"/\").filter(Boolean).pop();\n return last || \"imported-video\";\n } catch {\n return \"imported-video\";\n }\n}\n\n// HEAD request to the remote URL to read Content-Length / filename hints\n// without downloading the full file yet\nasync function probeRemoteFile(url: string) {\n let fileSize: number | null = null;\n let fileName: string | null = null;\n\n try {\n const headRes = await fetch(url, { method: \"HEAD\" });\n\n const contentLength = headRes.headers.get(\"content-length\");\n if (contentLength) fileSize = parseInt(contentLength, 10);\n\n const disposition = headRes.headers.get(\"content-disposition\");\n const match = disposition?.match(/filename=\"?([^\"]+)\"?/i);\n if (match?.[1]) fileName = match[1];\n } catch (err) {\n console.warn(\"⚠️ HEAD request failed, will proceed without size/name hints:\", err.message);\n }\n\n return { fileSize, fileName };\n}\n\nexport default async function (req: Request) {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n try {\n const body = await req.json();\n console.log(\"📥 [url-import] Received from WeWeb:\", JSON.stringify(body));\n\n const {\n task_token,\n source_url,\n workspace_id,\n folder_id, // optional — no error if empty/missing\n file_name: providedFileName,\n user_id,\n } = body;\n\n if (!task_token) {\n return new Response(\n JSON.stringify({ error: \"task_token is required\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n if (!source_url) {\n return new Response(\n JSON.stringify({ error: \"source_url is required for the url-import endpoint\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n // Basic sanity check before we try anything else\n try {\n new URL(source_url);\n } catch {\n return new Response(\n JSON.stringify({ error: \"source_url is not a valid URL\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n // Extract file_size (and optionally file_name) from the remote file itself\n const { fileSize, fileName: probedFileName } = await probeRemoteFile(source_url);\n const file_name = providedFileName || probedFileName || deriveFileNameFromUrl(source_url);\n const file_size = fileSize; // may be null if the remote server didn't return Content-Length\n\n // 1. Create Supabase row\n const insertData: any = {\n task_token,\n status: \"transcoding\",\n created_at: new Date().toISOString(),\n };\n if (workspace_id) insertData.workspace_id = workspace_id;\n if (folder_id) insertData.folder_id = folder_id; // stays empty/omitted if not sent — no error\n if (file_size) insertData.file_size = file_size;\n if (file_name) insertData.title = file_name;\n\n const { data: video, error: dbError } = await supabase\n .from(\"videos\")\n .insert(insertData)\n .select()\n .single();\n\n if (dbError) {\n console.error(\"❌ Supabase error:\", dbError.message);\n return new Response(\n JSON.stringify({ error: dbError.message }),\n { status: 500, headers: CORS_HEADERS },\n );\n }\n console.log(\"✅ Supabase row created:\", video.id);\n\n // 2. Start Qencode encode — source is the remote URL directly, Qencode fetches it\n const queryPayload = {\n query: {\n source: source_url,\n callback_url: \"https://sahil8--b14690de633311f199171607ee4eb77e.web.val.run\",\n use_subtask_callback: 1,\n format: [\n {\n output: \"mp4\",\n video_codec: \"libx264\",\n destination: {\n url: `b2://backblaze.com/Vvideos/${user_id ?? \"guest\"}/${file_name}.mp4`,\n key: Deno.env.get(\"b2key\"),\n secret: Deno.env.get(\"b2secret\"),\n },\n },\n ],\n },\n };\n\n const params = new URLSearchParams();\n params.append(\"task_token\", task_token);\n params.append(\"payload\", user_id ?? \"guest\");\n params.append(\"query\", JSON.stringify(queryPayload));\n\n console.log(`🚀 [url-import] Starting Qencode for: ${task_token}`);\n const qencodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n body: params,\n });\n const qencodeData = await qencodeRes.json();\n\n if (qencodeData.error !== 0) {\n console.error(\"❌ Qencode error:\", qencodeData.message);\n await supabase.from(\"videos\").delete().eq(\"id\", video.id); // rollback\n\n // Distinguish \"bad/unreachable URL\" vs \"unsupported file\" for the WeWeb error states\n const isFetchError = /fetch|resolve|connect|url|download/i.test(qencodeData.message || \"\");\n return new Response(\n JSON.stringify({\n error: qencodeData.message,\n error_type: isFetchError ? \"bad_url\" : \"unsupported_file\",\n }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n console.log(\"✅ Qencode accepted job!\");\n return new Response(\n JSON.stringify({\n success: true,\n video_id: video.id,\n task_token,\n file_size,\n file_name,\n status: \"transcoding\",\n }),\n { headers: CORS_HEADERS },\n );\n } catch (err) {\n console.error(\"❌ Error:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: CORS_HEADERS },\n );\n }\n}",[212],"bc841b1a-7b04-4f35-ae74-9abb06c52e14","weweb-api-2.1-upload.ts","e651fede-7eb4-11f1-a645-1607ee4eb77e",224,["D",1787250847785],3,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\"),\n Deno.env.get(\"superbasesecretkey\"),\n);\n\nconst CORS_HEADERS = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\nexport default async function (req: Request) {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n try {\n const body = await req.json();\n console.log(\n \"📥 [upload-complete] Received from WeWeb:\",\n JSON.stringify(body),\n );\n\n const {\n task_token,\n tus_id,\n workspace_id,\n folder_id, // optional — no error if empty/missing\n file_size,\n file_name,\n user_id,\n } = body;\n\n if (!task_token) {\n return new Response(\n JSON.stringify({ error: \"task_token is required\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n if (!tus_id) {\n return new Response(\n JSON.stringify({\n error: \"tus_id is required for the upload-complete endpoint\",\n }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n const source = `tus:${tus_id}`;\n\n // 1. Create Supabase row\n const insertData: any = {\n task_token,\n status: \"transcoding\",\n created_at: new Date().toISOString(),\n };\n if (workspace_id) insertData.workspace_id = workspace_id;\n if (folder_id) insertData.folder_id = folder_id; // stays empty/omitted if not sent — no error\n if (file_size) insertData.file_size = file_size;\n if (file_name) insertData.title = file_name;\n\n const { data: video, error: dbError } = await supabase\n .from(\"videos\")\n .insert(insertData)\n .select()\n .single();\n\n if (dbError) {\n console.error(\"❌ Supabase error:\", dbError.message);\n return new Response(\n JSON.stringify({ error: dbError.message }),\n { status: 500, headers: CORS_HEADERS },\n );\n }\n console.log(\"✅ Supabase row created:\", video.id);\n\n // 2. Start Qencode encode\n const queryPayload = {\n query: {\n source,\n callback_url:\n \"https://sahil8--be54ba4e58ed11f1a07aee650bb23af1.web.val.run\",\n use_subtask_callback: 1,\n format: [\n {\n output: \"mp4\",\n video_codec: \"libx264\",\n destination: {\n url: `b2://backblaze.com/Vvideos/${user_id ?? \"guest\"}/${\n file_name ?? \"video\"\n }.mp4`,\n key: Deno.env.get(\"b2key\"),\n secret: Deno.env.get(\"b2secret\"),\n },\n },\n ],\n },\n };\n\n const params = new URLSearchParams();\n params.append(\"task_token\", task_token);\n params.append(\"payload\", user_id ?? \"guest\");\n params.append(\"query\", JSON.stringify(queryPayload));\n\n console.log(`🚀 [upload-complete] Starting Qencode for: ${task_token}`);\n const qencodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n body: params,\n });\n const qencodeData = await qencodeRes.json();\n\n if (qencodeData.error !== 0) {\n console.error(\"❌ Qencode error:\", qencodeData.message);\n await supabase.from(\"videos\").delete().eq(\"id\", video.id); // rollback\n return new Response(\n JSON.stringify({ error: qencodeData.message }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n console.log(\"✅ Qencode accepted job!\");\n return new Response(\n JSON.stringify({\n success: true,\n video_id: video.id,\n task_token,\n status: \"transcoding\",\n }),\n { headers: CORS_HEADERS },\n );\n } catch (err) {\n console.error(\"❌ Error:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: CORS_HEADERS },\n );\n }\n}",[220],"e7cbb80a-5b9a-11f1-8b7a-ee650bb23af1","weweb-api-2-transparent.ts","7fff3c30-59a9-11f1-acfc-ee650bb23af1",84,["D",1780085629696],10,"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\"),\n Deno.env.get(\"superbasesecretkey\"),\n);\n\nexport default async function (req: Request) {\n const headers = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n // Handle preflight OPTIONS request for WeWeb/CORS\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers });\n }\n\n try {\n const body = await req.json();\n console.log(\"📥 Received from WeWeb:\", JSON.stringify(body));\n\n const {\n task_token,\n tus_id,\n source_url,\n workspace_id,\n folder_id,\n file_size,\n file_name,\n user_id,\n } = body;\n\n // Validation: task_token is required\n if (!task_token) {\n return new Response(\n JSON.stringify({ error: \"task_token is required\" }),\n { status: 400, headers },\n );\n }\n\n // Source selection: TUS direct upload or external source URL\n const source = tus_id ? `tus:${tus_id}` : source_url;\n\n if (!source) {\n return new Response(\n JSON.stringify({ error: \"tus_id or source_url required\" }),\n { status: 400, headers },\n );\n }\n\n // ==========================================================\n // 1. CREATE SUPABASE ROW (LOG AS TRANSCODING)\n // ==========================================================\n const insertData: any = {\n task_token,\n status: \"transcoding\",\n created_at: new Date().toISOString(),\n };\n\n // Add optional payload fields safely\n if (workspace_id) insertData.workspace_id = workspace_id;\n if (folder_id) insertData.folder_id = folder_id;\n if (file_size) insertData.file_size = file_size;\n if (file_name) insertData.title = file_name;\n\n const { data: video, error: dbError } = await supabase\n .from(\"videos\")\n .insert(insertData)\n .select()\n .single();\n\n if (dbError) {\n console.error(\"❌ Supabase insertion error:\", dbError.message);\n return new Response(\n JSON.stringify({ error: dbError.message }),\n { status: 500, headers },\n );\n }\n\n console.log(\"✅ Supabase row created successfully:\", video.id);\n\n // Parse the filename base to append clean transparent extensions\n const baseFileName = file_name\n ? file_name.replace(/\\.[^/.]+$/, \"\")\n : \"video\";\n const storagePath = `b2://backblaze.com/Vvideos/${\n user_id ?? \"guest\"\n }/${baseFileName}`;\n\n // ==========================================================\n // 2. DISPATCH TRULY TRANSPARENT WEBM PIPELINE TO QENCODE\n // ==========================================================\n const queryPayload = {\n query: {\n source,\n encoder_version: 1, // Ensures modern container rules are enforced\n callback_url:\n \"https://sahil8--be54ba4e58ed11f18a21ee650bb23af1.web.val.run\",\n use_subtask_callback: 1,\n format: [\n // 🌐 SINGLE OUTPUT: Google/Chromium Ecosystem (VP9 WebM with Alpha)\n {\n output: \"webm\",\n video_codec: \"libvpx-vp9\", // High-efficiency VP9 profile\n source_has_alpha: 1, // FORCES Qencode to extract and preserve alpha streams\n pix_format: \"yuva420p\", // Hardcodes the required video stream Alpha channel map\n color_space: 1, // Matches explicit color profiles\n color_range: 1,\n color_primaries: 1,\n color_trc: 1,\n destination: {\n url: `${storagePath}-chrome.webm`,\n key: Deno.env.get(\"b2key\"),\n secret: Deno.env.get(\"b2secret\"),\n },\n },\n ],\n },\n };\n\n // Serialize parameters into exact application/x-www-form-urlencoded format\n const params = new URLSearchParams();\n params.append(\"task_token\", task_token);\n params.append(\"payload\", user_id ?? \"guest\");\n params.append(\"query\", JSON.stringify(queryPayload));\n\n console.log(\n `🚀 Dispatching verified transparent WebM job to Qencode for token: ${task_token}`,\n );\n\n const qencodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n body: params,\n });\n const qencodeData = await qencodeRes.json();\n\n // ==========================================================\n // 3. ERROR HANDLER & SUPABASE ROLLBACK WRAPPER\n // ==========================================================\n if (qencodeData.error !== 0) {\n console.error(\"❌ Qencode payload rejected job:\", qencodeData.message);\n\n // Roll back the broken database record so your UI doesn't freeze on \"transcoding\" forever\n await supabase.from(\"videos\").delete().eq(\"id\", video.id);\n\n return new Response(\n JSON.stringify({ error: qencodeData.message }),\n { status: 400, headers },\n );\n }\n\n // ==========================================================\n // 4. SUCCESS RESPONSE\n // ==========================================================\n console.log(\"✅ Qencode job dispatched successfully:\", qencodeData);\n\n return new Response(\n JSON.stringify({\n success: true,\n message: \"Transparent video encoding started\",\n task_token: task_token,\n video_id: video.id,\n qencode_response: qencodeData,\n }),\n { status: 200, headers },\n );\n\n } catch (error) {\n console.error(\"❌ Unexpected error:\", error.message);\n\n return new Response(\n JSON.stringify({\n error: \"Internal server error\",\n message: error.message,\n }),\n { status: 500, headers },\n );\n }\n}",[228],"990f606e-efbd-4082-9288-907e03839136","val-ingest-dashboard-single.ts","85b71d74-718b-11f1-8351-1607ee4eb77e",151,["D",1782499025250],"/**\n * VideoFrame — Individual Video Analytics\n * ─────────────────────────────────────────────────────────────\n * Embed as iframe in WeWeb video page Analytics tab\n * OR open directly as a standalone page\n *\n * Usage:\n * ?video_id=vid_high_end_portfolio_01\n * ?video_id=vid_high_end_portfolio_01&days=7\n * ?video_id=vid_high_end_portfolio_01&workspace_slug=ws_xxx\n */\n\nimport sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function videoAnalytics(req: Request): Promise {\n\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"video_id\");\n const workspaceSlug = url.searchParams.get(\"workspace_slug\") ?? \"\";\n const days = parseInt(url.searchParams.get(\"days\") ?? \"30\");\n\n // ── No video_id — show picker ──────────────────────────────\n if (!videoId) {\n const videos = await sqlite.execute(\n `SELECT video_id, workspace_slug, COUNT(*) AS views, MAX(created_at) AS last_view\n FROM video_views\n GROUP BY video_id, workspace_slug\n ORDER BY views DESC`\n );\n\n const rows = videos.rows as any[];\n const links = rows.length === 0\n ? `

No video views recorded yet.

`\n : rows.map((r: any[]) => `\n \n

${r[0]}

${r[1] ?? \"—\"} · Last view: ${String(r[3]).split(\" \")[0]}

\n ${r[2]} views\n \n `).join(\"\");\n\n return new Response(`\nVideoFrame Analytics\n\n

Select a video

${links}

`,\n { headers: { \"Content-Type\": \"text/html\" } }\n );\n }\n\n // ── Helpers ────────────────────────────────────────────────\n const cutoff = (() => {\n const d = new Date();\n d.setDate(d.getDate() - days);\n return d.toISOString().split(\"T\")[0] + \" 00:00:00\";\n })();\n\n function fmt(sec: number): string {\n const s = Math.round(sec || 0);\n return `${Math.floor(s / 60)}:${String(s % 60).padStart(2, \"0\")}`;\n }\n\n function pctColor(pct: number): string {\n return pct >= 80 ? \"#1baf7a\" : pct >= 40 ? \"#eda100\" : \"#e24b4a\";\n }\n\n // ── Run all queries in parallel ────────────────────────────\n const [statsRes, chartRes, countryRes, bucketsRes, sessRes, hourlyRes] =\n await Promise.all([\n\n // 1. Summary stats\n sqlite.execute({\n sql: `\n SELECT\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views,\n ROUND(AVG(percent_watched)) AS avg_pct,\n ROUND(AVG(watch_duration)) AS avg_duration,\n ROUND(AVG(total_duration)) AS avg_length,\n MAX(watch_duration) AS max_duration,\n COUNT(CASE WHEN percent_watched >= 80 THEN 1 END) AS completed,\n COUNT(CASE WHEN percent_watched < 25 THEN 1 END) AS bounced,\n MIN(created_at) AS first_view,\n MAX(created_at) AS last_view\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n `,\n args: [videoId, cutoff],\n }),\n\n // 2. Views by day\n sqlite.execute({\n sql: `\n SELECT DATE(created_at) AS day,\n COUNT(*) AS total,\n COUNT(DISTINCT session_id) AS unique_v,\n ROUND(AVG(percent_watched)) AS avg_pct\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY day ORDER BY day ASC\n `,\n args: [videoId, cutoff],\n }),\n\n // 3. Countries\n sqlite.execute({\n sql: `\n SELECT country, COUNT(*) AS views, COUNT(DISTINCT session_id) AS unique_v\n FROM video_views\n WHERE video_id = ? AND created_at >= ?\n GROUP BY country ORDER BY views DESC LIMIT 8\n `,\n args: [videoId, cutoff],\n }),\n\n // 4. Watch depth buckets\n sqlite.execute({\n sql: `\n SELECT\n CASE\n WHEN percent_watched < 25 THEN '0–25%'\n WHEN percent_watched < 50 THEN '25–50%'\n WHEN percent_watched < 75 THEN '50–75%'\n WHEN percent_watched < 100 THEN '75–100%'\n ELSE '100%'\n END AS bucket,\n COUNT(*) AS views\n FROM video_views\n WHERE video_id = ? AND created_at >= ?\n GROUP BY bucket ORDER BY bucket ASC\n `,\n args: [videoId, cutoff],\n }),\n\n // 5. Recent sessions\n sqlite.execute({\n sql: `\n SELECT session_id, percent_watched, watch_duration,\n current_position, total_duration, country, created_at\n FROM video_views\n WHERE video_id = ?\n ORDER BY created_at DESC LIMIT 20\n `,\n args: [videoId],\n }),\n\n // 6. Views by hour of day (engagement pattern)\n sqlite.execute({\n sql: `\n SELECT CAST(strftime('%H', created_at) AS INTEGER) AS hour,\n COUNT(*) AS views\n FROM video_views\n WHERE video_id = ? AND created_at >= ?\n GROUP BY hour ORDER BY hour ASC\n `,\n args: [videoId, cutoff],\n }),\n ]);\n\n // ── Parse stats ────────────────────────────────────────────\n const s = statsRes.rows[0] as any[];\n const total = Number(s[0]) || 0;\n const unique = Number(s[1]) || 0;\n const avgPct = Number(s[2]) || 0;\n const avgDur = Number(s[3]) || 0;\n const avgLen = Number(s[4]) || 0;\n const completed = Number(s[6]) || 0;\n const bounced = Number(s[7]) || 0;\n const firstView = String(s[8] ?? \"—\").split(\" \")[0];\n const lastView = String(s[9] ?? \"—\").split(\" \")[0];\n const compPct = total > 0 ? Math.round((completed / total) * 100) : 0;\n const bouncePct = total > 0 ? Math.round((bounced / total) * 100) : 0;\n\n // ── Chart data ─────────────────────────────────────────────\n const chartRows = chartRes.rows as any[];\n const dayMap: Record = {};\n chartRows.forEach((r: any[]) => { dayMap[r[0]] = r; });\n\n const labels: string[] = [];\n const totals: number[] = [];\n const uniqs: number[] = [];\n for (let i = days - 1; i >= 0; i--) {\n const d = new Date();\n d.setDate(d.getDate() - i);\n const key = d.toISOString().split(\"T\")[0];\n const short = d.toLocaleDateString(\"en\", { month: \"short\", day: \"numeric\" });\n labels.push(short);\n totals.push(dayMap[key] ? Number(dayMap[key][1]) : 0);\n uniqs.push( dayMap[key] ? Number(dayMap[key][2]) : 0);\n }\n\n const maxBar = Math.max(...totals, 1);\n\n // ── Hourly data ────────────────────────────────────────────\n const hourlyRows = hourlyRes.rows as any[];\n const hourMap: Record = {};\n hourlyRows.forEach((r: any[]) => { hourMap[Number(r[0])] = Number(r[1]); });\n const maxHour = Math.max(...Object.values(hourMap), 1);\n\n // ── Flag / name maps ───────────────────────────────────────\n const FLAGS: Record = {\n IN:\"🇮🇳\",US:\"🇺🇸\",GB:\"🇬🇧\",DE:\"🇩🇪\",CA:\"🇨🇦\",AU:\"🇦🇺\",\n FR:\"🇫🇷\",SG:\"🇸🇬\",AE:\"🇦🇪\",NL:\"🇳🇱\",JP:\"🇯🇵\",BR:\"🇧🇷\",\n PK:\"🇵🇰\",NZ:\"🇳🇿\",ZA:\"🇿🇦\",NG:\"🇳🇬\",KE:\"🇰🇪\",BD:\"🇧🇩\",UNKNOWN:\"🌍\",\n };\n const CNAMES: Record = {\n IN:\"India\",US:\"United States\",GB:\"United Kingdom\",DE:\"Germany\",\n CA:\"Canada\",AU:\"Australia\",FR:\"France\",SG:\"Singapore\",\n AE:\"UAE\",NL:\"Netherlands\",JP:\"Japan\",BR:\"Brazil\",\n PK:\"Pakistan\",NZ:\"New Zealand\",ZA:\"South Africa\",UNKNOWN:\"Unknown\",\n };\n const BCOLORS: Record = {\n \"0–25%\":\"#e24b4a\",\"25–50%\":\"#eda100\",\"50–75%\":\"#2a78d6\",\"75–100%\":\"#1baf7a\",\"100%\":\"#4a3aa7\",\n };\n\n // ── Country rows ───────────────────────────────────────────\n const countryRows = countryRes.rows as any[];\n const totalCountry = countryRows.reduce((a: number, r: any[]) => a + Number(r[1]), 0) || 1;\n\n // ── Bucket rows ────────────────────────────────────────────\n const bucketRows = bucketsRes.rows as any[];\n const maxBucket = Math.max(...bucketRows.map((r: any[]) => Number(r[1])), 1);\n\n // ── Session rows ───────────────────────────────────────────\n const sessRows = sessRes.rows as any[];\n\n // ── Build HTML ─────────────────────────────────────────────\n const barW = Math.max(16, Math.floor(620 / Math.max(days, 7)) - 4);\n const barH = 120;\n\n const barChart = labels.map((label, i) => {\n const t = totals[i];\n const u = uniqs[i];\n const th = t > 0 ? Math.max(3, Math.round((t / maxBar) * barH)) : 0;\n const uh = u > 0 ? Math.max(3, Math.round((u / maxBar) * barH)) : 0;\n return `

${label}

`;\n }).join(\"\");\n\n const hourChart = Array.from({ length: 24 }, (_, h) => {\n const v = hourMap[h] ?? 0;\n const hh = v > 0 ? Math.max(3, Math.round((v / maxHour) * 50)) : 0;\n const label = h === 0 ? \"12a\" : h < 12 ? `${h}a` : h === 12 ? \"12p\" : `${h-12}p`;\n return `

0?3:0}px\">

${[0,6,12,18].includes(h)?label:\"\"}

`;\n }).join(\"\");\n\n const countryHTML = countryRows.length === 0\n ? `

No country data

`\n : countryRows.map((r: any[]) => {\n const code = String(r[0]);\n const n = Number(r[1]);\n const pct = Math.round((n / totalCountry) * 100);\n return `

\n ${FLAGS[code]??\"🌍\"}\n ${CNAMES[code]??code}\n

\n ${pct}%\n

`;\n }).join(\"\");\n\n const bucketHTML = bucketRows.length === 0\n ? `

No data yet

`\n : bucketRows.map((r: any[]) => {\n const bucket = String(r[0]);\n const n = Number(r[1]);\n const w = Math.round((n / maxBucket) * 100);\n const col = BCOLORS[bucket] ?? \"#2a78d6\";\n return `

\n ${bucket}\n

\n ${n} view${n!==1?\"s\":\"\"}\n

`;\n }).join(\"\");\n\n const sessHTML = sessRows.length === 0\n ? `

No sessions yet

`\n : `\n \n \n \n \n \n \n \n \n \n \n \n ${sessRows.map((r: any[]) => {\n const pct = Number(r[1]) || 0;\n const col = pctColor(pct);\n const date = String(r[6] ?? \"\").split(\" \")[0];\n return `\n \n \n \n \n \n \n `;\n }).join(\"\")}\n \n

Session	Watched	Duration	Stopped at	Country	Date
${String(r[0]).slice(0,18)}…	${pct}%	${fmt(Number(r[2]))}	${fmt(Number(r[3]))}	${FLAGS[String(r[5])] ?? r[5] ?? \"—\"}	${date}

`;\n\n const dayLinks = [7, 14, 30, 90].map(d =>\n `${d}d`\n ).join(\"\");\n\n const html = `\n\n\n \n \n Analytics — ${videoId}\n \n\n\n\n\n\n

\n\n \n

Total views

${total.toLocaleString()}

${unique} unique sessions

Avg watched

${avgPct}%

${compPct}% completed (80%+)

Avg watch time

${fmt(avgDur)}

of ${fmt(avgLen)} total length

Bounced

0?\"#e24b4a\":\"#1baf7a\"}\">${bounced}

${bouncePct}% watched under 25%

\n\n \n

\n Views over time\n

\n Total\n Unique\n

\n ${barChart}\n

\n First view ${firstView}\n Last view ${lastView}\n Period ${days} days\n

\n\n \n

Top countries${countryRows.length} countries

${countryHTML}

Watch depthby % watched

${bucketHTML}

\n\n \n

Views by hour of dayUTC

\n ${hourChart}\n

\n\n \n

\n Recent sessions\n ${sessRows.length} shown\n

${sessHTML}

\n\n

\n\n`;\n\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" }\n });\n}",[236],"af75c357-af9d-4ff3-b376-1f6817912571","val-ingest-dashboard-copy.ts","f3b84206-718d-11f1-8131-1607ee4eb77e",149,["D",1782498991828],"import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function analyticsDashboard(\n req: Request,\n): Promise {\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"video_id\") ??\n \"vid_high_end_portfolio_01\";\n const days = parseInt(url.searchParams.get(\"days\") ?? \"30\");\n const cutoff = (() => {\n const d = new Date();\n d.setDate(d.getDate() - days);\n return d.toISOString().split(\"T\")[0] + \" 00:00:00\";\n })();\n\n // ── Helpers ────────────────────────────────────────────────\n function fmt(sec: number): string {\n const s = Math.round(sec || 0);\n return `${Math.floor(s / 60)}:${String(s % 60).padStart(2, \"0\")}`;\n }\n\n // ── Query 1: Summary stats ─────────────────────────────────\n const statsRes = await sqlite.execute({\n sql: `\n SELECT\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views,\n ROUND(AVG(percent_watched)) AS avg_pct,\n ROUND(AVG(watch_duration)) AS avg_duration,\n ROUND(AVG(total_duration)) AS avg_length,\n COUNT(CASE WHEN percent_watched >= 80 THEN 1 END) AS completed,\n COUNT(CASE WHEN percent_watched < 25 THEN 1 END) AS bounced\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n `,\n args: [videoId, cutoff],\n });\n const s = statsRes.rows[0] as any[];\n const total = Number(s[0]) || 0;\n const unique = Number(s[1]) || 0;\n const avgPct = Number(s[2]) || 0;\n const avgDur = Number(s[3]) || 0;\n const avgLen = Number(s[4]) || 0;\n const completed = Number(s[5]) || 0;\n const bounced = Number(s[6]) || 0;\n\n // ── Query 2: Views by day ──────────────────────────────────\n const chartRes = await sqlite.execute({\n sql: `\n SELECT\n DATE(created_at) AS day,\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY day\n ORDER BY day ASC\n `,\n args: [videoId, cutoff],\n });\n const chartRows = chartRes.rows as any[];\n\n // Fill all days with 0\n const dayMap: Record = {};\n chartRows.forEach((r: any[]) => {\n dayMap[r[0]] = { t: Number(r[1]), u: Number(r[2]) };\n });\n const chartLabels: string[] = [];\n const chartTotals: number[] = [];\n const chartUniqs: number[] = [];\n for (let i = days - 1; i >= 0; i--) {\n const d = new Date();\n d.setDate(d.getDate() - i);\n const key = d.toISOString().split(\"T\")[0];\n const short = d.toLocaleDateString(\"en\", {\n month: \"short\",\n day: \"numeric\",\n });\n chartLabels.push(short);\n chartTotals.push(dayMap[key]?.t ?? 0);\n chartUniqs.push(dayMap[key]?.u ?? 0);\n }\n\n // ── Query 3: Countries ─────────────────────────────────────\n const countryRes = await sqlite.execute({\n sql: `\n SELECT country, COUNT(*) AS views\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY country\n ORDER BY views DESC\n LIMIT 8\n `,\n args: [videoId, cutoff],\n });\n const countryRows = countryRes.rows as any[];\n\n // ── Query 4: Watch depth buckets ───────────────────────────\n const bucketsRes = await sqlite.execute({\n sql: `\n SELECT\n CASE\n WHEN percent_watched < 25 THEN '0–25%'\n WHEN percent_watched < 50 THEN '25–50%'\n WHEN percent_watched < 75 THEN '50–75%'\n WHEN percent_watched < 100 THEN '75–100%'\n ELSE '100%'\n END AS bucket,\n COUNT(*) AS views\n FROM video_views\n WHERE video_id = ?\n AND created_at >= ?\n GROUP BY bucket\n ORDER BY bucket ASC\n `,\n args: [videoId, cutoff],\n });\n const bucketRows = bucketsRes.rows as any[];\n const maxBucket = Math.max(...bucketRows.map((r: any[]) => Number(r[1])), 1);\n\n // ── Query 5: Recent sessions ───────────────────────────────\n const sessRes = await sqlite.execute({\n sql: `\n SELECT session_id, percent_watched, watch_duration,\n current_position, total_duration, country, created_at\n FROM video_views\n WHERE video_id = ?\n ORDER BY created_at DESC\n LIMIT 15\n `,\n args: [videoId],\n });\n const sessRows = sessRes.rows as any[];\n\n // ── Query 6: All video IDs (for switcher) ──────────────────\n const videosRes = await sqlite.execute(\n `SELECT DISTINCT video_id, COUNT(*) AS views\n FROM video_views\n GROUP BY video_id\n ORDER BY views DESC\n LIMIT 20`,\n );\n const videoList = videosRes.rows as any[];\n\n // ── Build flag map ─────────────────────────────────────────\n const FLAGS: Record = {\n IN: \"🇮🇳\",\n US: \"🇺🇸\",\n GB: \"🇬🇧\",\n DE: \"🇩🇪\",\n CA: \"🇨🇦\",\n AU: \"🇦🇺\",\n FR: \"🇫🇷\",\n SG: \"🇸🇬\",\n AE: \"🇦🇪\",\n NL: \"🇳🇱\",\n JP: \"🇯🇵\",\n BR: \"🇧🇷\",\n PK: \"🇵🇰\",\n NZ: \"🇳🇿\",\n ZA: \"🇿🇦\",\n NG: \"🇳🇬\",\n KE: \"🇰🇪\",\n BD: \"🇧🇩\",\n UNKNOWN: \"🌍\",\n };\n const CNAMES: Record = {\n IN: \"India\",\n US: \"United States\",\n GB: \"United Kingdom\",\n DE: \"Germany\",\n CA: \"Canada\",\n AU: \"Australia\",\n FR: \"France\",\n SG: \"Singapore\",\n AE: \"UAE\",\n NL: \"Netherlands\",\n JP: \"Japan\",\n BR: \"Brazil\",\n PK: \"Pakistan\",\n NZ: \"New Zealand\",\n ZA: \"South Africa\",\n UNKNOWN: \"Unknown\",\n };\n\n // ── HTML builders ──────────────────────────────────────────\n function statCards(): string {\n const completedPct = total > 0 ? Math.round((completed / total) * 100) : 0;\n const bouncedPct = total > 0 ? Math.round((bounced / total) * 100) : 0;\n return `\n

Total views

${total.toLocaleString()}

${unique} unique sessions

Avg watched

${avgPct}%

${completedPct}% completed (80%+)

Avg duration

${fmt(avgDur)}

of ${fmt(avgLen)} total

Bounced

${bounced}

${bouncedPct}% watched under 25%

\n `;\n }\n\n function chartSection(): string {\n const barMax = Math.max(...chartTotals, 1);\n const barW = Math.max(20, Math.floor(560 / days) - 4);\n const barMaxH = 140;\n\n const bars = chartLabels.map((label, i) => {\n const t = chartTotals[i];\n const u = chartUniqs[i];\n const th = t > 0 ? Math.max(4, Math.round((t / barMax) * barMaxH)) : 0;\n const uh = u > 0 ? Math.max(4, Math.round((u / barMax) * barMaxH)) : 0;\n return `\n

0 ? 4 : 0\n }px\">

${label}

\n `;\n }).join(\"\");\n\n return `\n

\n Views over time\n

\n ${\n [7, 14, 30, 90].map((d) =>\n `${d}d`\n ).join(\"\")\n }\n

\n ${bars}\n

\n Total views\n Unique views\n

\n `;\n }\n\n function countriesSection(): string {\n if (countryRows.length === 0) {\n return `

No country data yet

`;\n }\n const totalC =\n countryRows.reduce((a: number, r: any[]) => a + Number(r[1]), 0) || 1;\n return countryRows.map((r: any[]) => {\n const code = String(r[0]);\n const n = Number(r[1]);\n const pct = Math.round((n / totalC) * 100);\n const flag = FLAGS[code] ?? \"🌍\";\n const name = CNAMES[code] ?? code;\n return `\n

\n ${flag}\n ${name}\n

\n ${pct}%\n

\n `;\n }).join(\"\");\n }\n\n function bucketsSection(): string {\n if (bucketRows.length === 0) {\n return `

No data yet

`;\n }\n const colors: Record = {\n \"0–25%\": \"#e24b4a\",\n \"25–50%\": \"#eda100\",\n \"50–75%\": \"#2a78d6\",\n \"75–100%\": \"#1baf7a\",\n \"100%\": \"#4a3aa7\",\n };\n return bucketRows.map((r: any[]) => {\n const bucket = String(r[0]);\n const n = Number(r[1]);\n const pct = Math.round((n / maxBucket) * 100);\n const col = colors[bucket] ?? \"#2a78d6\";\n return `\n

\n ${bucket}\n

\n ${n} view${\n n !== 1 ? \"s\" : \"\"\n }\n

\n `;\n }).join(\"\");\n }\n\n function sessionsSection(): string {\n if (sessRows.length === 0) {\n return `

No sessions yet

`;\n }\n const header = `\n

\n SessionWatchedDurationPositionCountryTime\n

\n `;\n const rows = sessRows.map((r: any[]) => {\n const pct = Number(r[1]) || 0;\n const col = pct >= 80 ? \"#1baf7a\" : pct >= 40 ? \"#eda100\" : \"#e24b4a\";\n const date = String(r[6] ?? \"\").split(\" \")[0];\n return `\n

\n ${\n String(r[0]).slice(0, 20)\n }…\n ${pct}%\n ${fmt(Number(r[2]))}\n ${fmt(Number(r[3]))}\n ${FLAGS[String(r[5])] ?? r[5]}\n ${date}\n

\n `;\n }).join(\"\");\n return header + rows;\n }\n\n function videoSwitcher(): string {\n if (videoList.length <= 1) return \"\";\n const links = videoList.map((r: any[]) => {\n const vid = String(r[0]);\n const views = Number(r[1]);\n const active = vid === videoId;\n return `\n ${vid}\n ${views}\n `;\n }).join(\"\");\n return `\n

Videos

${links}

\n `;\n }\n\n // ── Full HTML page ─────────────────────────────────────────\n const html = `\n\n\n \n \n VideoFrame Analytics — ${videoId}\n \n\n\n\n \n\n

\n\n ${\n videoList.length > 1 ? `` : \"\"\n }\n\n

\n\n ${statCards()}\n ${chartSection()}\n\n

Top countries

${countriesSection()}

Watch depth

${bucketsSection()}

\n\n

\n Recent sessions\n ${sessRows.length} shown\n

${sessionsSection()}

\n\n

\n\n\n`;\n\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}",[243],"94cb8732-c8f7-4e08-8c4d-b72d23d60923","user-api-verify.ts","0d9a19a0-6bd6-11f1-9898-1607ee4eb77e",132,["D",1781870375796],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!\n);\n\nexport default async function handler(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n // ── Extract API key from Authorization header ──────────────────────\n const authHeader = req.headers.get(\"Authorization\") ?? \"\";\n const rawKey = authHeader.replace(\"Bearer \", \"\").trim();\n\n if (!rawKey) {\n return new Response(\n JSON.stringify({ error: \"Missing API key\", code: \"UNAUTHORIZED\" }),\n { status: 401, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"Verifying key:\", rawKey.slice(0, 14) + \"...\");\n\n // ── Call verify function via Supabase RPC ───────────────────────────\n const { data, error } = await supabase\n .rpc(\"verify_workspace_api_key\", { p_raw_key: rawKey });\n\n if (error) {\n console.error(\"RPC error:\", error.message);\n return new Response(\n JSON.stringify({ error: \"Verification failed\" }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n const result = data?.[0];\n\n if (!result || !result.valid) {\n console.log(\"Invalid API key\");\n return new Response(\n JSON.stringify({ error: \"Invalid API key\", code: \"UNAUTHORIZED\" }),\n { status: 401, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"✓ Valid key for workspace:\", result.slug);\n\n // ── Key is valid — proceed with your actual logic ───────────────────\n // Example: return workspace info\n return new Response(\n JSON.stringify({\n ok: true,\n workspace_id: result.workspace_id,\n slug: result.slug,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n}",[250],"6c43c1e9-fd09-4938-9704-8c3ea711b54e","user-api-gen.ts","96963980-6bd3-11f1-bc05-1607ee4eb77e",131,["D",1781870347128],"// Separate Val.town endpoint for key generation\nimport { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nexport default async function generateKey(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n const { workspace_id } = await req.json();\n\n if (!workspace_id) {\n return new Response(\n JSON.stringify({ error: \"Missing workspace_id\" }),\n { status: 400, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n const { data, error } = await supabase\n .rpc(\"generate_workspace_api_key\", { p_workspace_id: workspace_id });\n\n if (error) {\n return new Response(\n JSON.stringify({ error: error.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n const result = data?.[0];\n\n return new Response(\n JSON.stringify({\n raw_key: result.raw_key, // show ONCE to user\n prefix: result.prefix,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n}",[257],"7377c18a-cff9-42c5-af29-07c6e8ffe555","turso-1.ts","47dff6d8-7de8-11f1-9c3f-1607ee4eb77e",168,["D",1783857236190],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nexport default async function (req: Request): Promise {\n // 1. Enforce that only POST requests are processed\n if (req.method !== \"POST\") {\n return new Response(\n JSON.stringify({ error: \"Method not allowed. Use POST.\" }),\n {\n status: 405,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n try {\n // 2. Read the raw incoming body payload\n const payload = await req.json();\n\n // Extract the flat operational columns\n const {\n workspace_id,\n slug,\n plan_tier,\n subscription_status,\n bandwidth_used_gb,\n bandwidth_limit_gb,\n bandwidth_status,\n } = payload;\n\n // 3. Isolate and package the dynamic security properties\n const securityObj = {\n signed_url_enabled: payload.signed_url_enabled ?? false,\n geo_blocking: payload.geo_blocking ||\n { enabled: false, allowed_countries: [] },\n allowed_domains: payload.allowed_domains || [],\n };\n\n // 4. Execute the DB update statement using standard bindings\n await sqlite.execute({\n sql: `INSERT INTO workspaces (\n workspace_id, slug, plan_tier, subscription_status, \n bandwidth_used_gb, bandwidth_limit_gb, bandwidth_status, security_json\n ) VALUES (:id, :slug, :tier, :status, :used, :limit, :b_status, :security)\n ON CONFLICT(workspace_id) DO UPDATE SET\n slug = excluded.slug,\n plan_tier = excluded.plan_tier,\n subscription_status = excluded.subscription_status,\n bandwidth_used_gb = excluded.bandwidth_used_gb,\n bandwidth_limit_gb = excluded.bandwidth_limit_gb,\n bandwidth_status = excluded.bandwidth_status,\n security_json = excluded.security_json,\n updated_at = cast(strftime('%s', 'now') as integer);`,\n args: {\n id: workspace_id,\n slug: slug,\n tier: plan_tier || \"free\",\n status: subscription_status || \"active\",\n used: bandwidth_used_gb || 0.0,\n limit: bandwidth_limit_gb || 100.0,\n b_status: bandwidth_status || \"ok\",\n // The magic step: turns the JS object cleanly into a valid text string for SQLite\n security: JSON.stringify(securityObj),\n },\n });\n\n return new Response(\n JSON.stringify({ success: true, message: \"Workspace sync completed.\" }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n } catch (err) {\n return new Response(\n JSON.stringify({\n error: \"Failed to process request\",\n details: err.message,\n }),\n {\n status: 500,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n}",[264],"7c061a45-1f2d-4900-8b47-d08f69ade354","turso-1-copy.ts","95cb97b0-7dea-11f1-af20-1607ee4eb77e",170,["D",1783858221881],1,"export default async function () {\n // 1. Replace this with your actual live HTTP Val URL\n const targetUrl =\n \"https://sahil8--47dff6d87de811f19c3f1607ee4eb77e.web.val.run\";\n\n // 2. Your exact test payload mirroring your schema properties\n const testPayload = {\n workspace_id: \"2bc2838e-4d28-4c38-8329-615ea34f4654\",\n slug: \"acme-portfolio\",\n plan_tier: \"pro\",\n subscription_status: \"active\",\n bandwidth_used_gb: 842.3,\n bandwidth_limit_gb: 1000,\n bandwidth_status: \"ok\",\n signed_url_enabled: true,\n geo_blocking: {\n enabled: true,\n allowed_countries: [\"US\", \"CA\", \"IN\"],\n },\n allowed_domains: [\"myportfolio.com\", \"www.myportfolio.com\"],\n };\n\n // 3. Fire the request using a true POST method block\n const response = await fetch(targetUrl, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(testPayload),\n });\n\n // 4. Print out what the HTTP Val returns to check if it succeeded\n const result = await response.json();\n console.log(\"Response from your endpoint:\", result);\n}",[271],"5f12fd7c-579c-11f1-b1b8-ee650bb23af1","transparent-video.ts","e74f3afa-578f-11f1-a17e-ee650bb23af1",47,["D",1779646454305],"export default async function (req: Request) {\n if (req.method === \"GET\") {\n return new Response(\"🚀 POST to trigger alpha test\", { status: 200 });\n }\n\n try {\n const taskToken = \"678e72f8ddf002f1ac9c010badc5b08\"; // 👈 Ensure this is a fresh unconsumed token\n\n const qencodeQuery = {\n query: {\n encoder_version: \"2\",\n source: \"https://nyc3.s3.qencode.com/qencode/samples/4k-sample.mov\",\n format: [\n {\n output: \"webm\",\n video_codec: \"libvpx-vp9\",\n height: 360,\n optimize_bitrate: 0,\n video_codec_parameters: {\n pixel_format: \"yuva420p\",\n },\n destination: {\n url: \"b2://backblaze.com/Vvideos/alpha-sample-chrome.webm\",\n key: \"b2key\",\n secret: \"b2secret\",\n },\n },\n {\n output: \"mp4\",\n video_codec: \"libx265\",\n height: 360,\n optimize_bitrate: 0,\n video_codec_parameters: {\n pixel_format: \"yuva420p10le\",\n vtag: \"hvc1\",\n },\n destination: {\n url: \"b2://backblaze.com/Vvideos/alpha-sample-safari.mp4\",\n key: \"b2key\",\n secret: \"b2secret\",\n },\n },\n ],\n },\n };\n\n const formParams = new URLSearchParams();\n formParams.append(\"task_token\", taskToken);\n formParams.append(\"payload\", \"alpha_test\");\n formParams.append(\"query\", JSON.stringify(qencodeQuery));\n\n const response = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: formParams,\n });\n\n const responseText = await response.text();\n console.log(\"📥 Server Response:\", responseText);\n\n return new Response(responseText, {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n } catch (error) {\n return new Response(JSON.stringify({ error: error.message }), {\n status: 500,\n });\n }\n}",[279],"335616e8-4e4e-46df-b1c7-f8c2bb357fad","tinybird.ts","a0d5ba70-7190-11f1-ad8a-1607ee4eb77e",156,["D",1782500485465],"// Add this inside your existing ingest val\n// After the SQLite insert — send to Tinybird as well\n\nconst TINYBIRD_TOKEN = Deno.env.get(\"tinybird\")!;\nconst TINYBIRD_URL =\n \"https://api.europe-west2.gcp.tinybird.co/v0/events?name=video_events\";\n\nawait fetch(TINYBIRD_URL, {\n method: \"POST\",\n headers: { \"Authorization\": `Bearer ${TINYBIRD_TOKEN}` },\n body: JSON.stringify({\n video_id: String(vid_high_end_portfolio_01),\n workspace_slug: String(workspace_slug),\n percent_watched: pct,\n watch_duration: finalDuration,\n current_position: finalPosition,\n total_duration: finalTotal,\n country: finalCountry,\n session_id: finalSessionId,\n timestamp: new Date().toISOString().replace(\"T\", \" \").split(\".\")[0],\n }),\n});\n\nconsole.log(\"✓ Sent to Tinybird\");",[286],"de040b42-2a85-4c5b-85a1-fa113567aee6","test-val.ts","743077a0-853e-11f1-9a8f-1607ee4eb77e",221,["D",1784663887637],"// Minimal test receiver — logs whatever gets POSTed to it, returns it back.\n// Use this to confirm what a webhook/API call is actually sending,\n// before wiring it into a real endpoint.\n\nexport default async function testReceiver(req: Request): Promise {\n const CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Content-Type\": \"application/json\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS });\n }\n\n if (req.method === \"GET\") {\n return new Response(JSON.stringify({ status: \"Test receiver is active\" }), {\n status: 200,\n headers: CORS,\n });\n }\n\n try {\n const rawText = await req.text();\n console.log(\"═══════════════════════════════════════\");\n console.log(\"Method:\", req.method);\n console.log(\"Headers:\", JSON.stringify(Object.fromEntries(req.headers)));\n console.log(\"Raw body:\", rawText);\n\n let parsed: any = null;\n try {\n parsed = JSON.parse(rawText);\n console.log(\"Parsed JSON:\", JSON.stringify(parsed, null, 2));\n } catch {\n console.log(\"Body is not valid JSON — treating as plain text/form data\");\n }\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\n JSON.stringify({\n received: true,\n method: req.method,\n raw_body: rawText,\n parsed_body: parsed,\n headers: Object.fromEntries(req.headers),\n }),\n { status: 200, headers: CORS },\n );\n } catch (err: any) {\n console.error(\"Error reading request:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: CORS },\n );\n }\n}",[293],"f8bc3ce7-ebae-47ea-b7d8-3c94f84997ec","sync-sbase-bunny-setting.json.ts","f04331d8-84f4-11f1-b1fb-1607ee4eb77e",217,["D",1784637667486],9,"// Receives Supabase's Database Webhook, fired when setting_json changes\n// on the workspaces table. Finds the matching row in Bunny Database by\n// workspace id, updates its setting_json column to match.\n\nconst BUNNY_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!;\nconst BUNNY_DB_TOKEN = Deno.env.get(\"bunny_db_token\")!;\n\nexport default async function settingJsonWebhook(req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const payload = await req.json();\n const { type, record, old_record } = payload;\n\n console.log(\"═══════════════════════════════════════\");\n console.log(\"Supabase webhook fired:\", type);\n\n if (type === \"DELETE\") {\n console.log(\"Workspace deleted, nothing to sync:\", old_record?.id);\n return new Response(\"OK\", { status: 200 });\n }\n\n const workspaceId = record?.id;\n const settingJson = record?.setting_json;\n\n console.log(\"workspace id:\", workspaceId);\n console.log(\"setting_json:\", JSON.stringify(settingJson));\n\n if (!workspaceId || !settingJson) {\n console.warn(\"Missing workspace id or setting_json — skipping\");\n return new Response(\"OK\", { status: 200 });\n }\n\n const bunnyRes = await fetch(BUNNY_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `UPDATE \"Workspace\" SET \"setting_json\" = ? WHERE \"workspace_id\" = ?`,\n args: [\n { type: \"text\", value: JSON.stringify(settingJson) },\n { type: \"text\", value: String(workspaceId) },\n ],\n },\n },\n ],\n }),\n });\n\n const bunnyText = await bunnyRes.text();\n\n if (!bunnyRes.ok) {\n console.error(\"Bunny Database update failed:\", bunnyText);\n return new Response(\"OK\", { status: 200 });\n }\n\n console.log(\"Bunny Database response:\", bunnyText);\n console.log(\"Synced setting_json for workspace:\", workspaceId);\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Webhook error:\", err.message);\n return new Response(\"OK\", { status: 200 });\n }\n}",[300],"2187a7a0-9a22-4cd5-829d-df607bb04f9c","sync-sbase-bunny-security.json-copy.ts","4f01ae76-84fe-11f1-a8f5-1607ee4eb77e",214,["D",1784637434026],"// Receives Supabase's Database Webhook, fired ONLY when security_json\n// changes on the workspaces table (see trigger_workspace_security_sync,\n// which has a WHEN clause filtering to just this column — so this\n// endpoint never fires for unrelated updates like bandwidth_used).\n//\n// Flow: Supabase workspaces.security_json changes\n// → Postgres trigger fires automatically\n// → THIS endpoint receives { type, record, old_record }\n// → finds the matching row in Bunny Database by workspace id\n// → updates security_json there too\n\nconst BUNNY_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!; // e.g. https://your-db.bunnydb.net/v2/pipeline\nconst BUNNY_DB_TOKEN = Deno.env.get(\"bunny_db_token\")!;\n\nexport default async function securityJsonWebhook(req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n // Supabase Database Webhook payload shape: { type, table, record, old_record, schema }\n const payload = await req.json();\n const { type, record, old_record } = payload;\n\n console.log(\"═══════════════════════════════════════\");\n console.log(\"Supabase webhook fired:\", type);\n\n // DELETE: nothing to sync — a deleted workspace has no security settings to mirror\n if (type === \"DELETE\") {\n console.log(\"Workspace deleted, nothing to sync:\", old_record?.id);\n return new Response(\"OK\", { status: 200 });\n }\n\n // INSERT or UPDATE — record has the full current row\n const workspaceId = record?.id;\n const securityJson = record?.security_json;\n\n console.log(\"workspace id:\", workspaceId);\n console.log(\"security_json:\", JSON.stringify(securityJson));\n\n if (!workspaceId || !securityJson) {\n console.warn(\"Missing workspace id or security_json — skipping\");\n return new Response(\"OK\", { status: 200 });\n }\n\n // ── Find the matching row in Bunny Database by workspace id, then update ──\n const bunnyRes = await fetch(BUNNY_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `UPDATE \"Workspace\" SET \"security_json\" = ? WHERE \"workspace_id\" = ?`,\n args: [\n { type: \"text\", value: JSON.stringify(securityJson) },\n { type: \"text\", value: String(workspaceId) },\n ],\n },\n },\n ],\n }),\n });\n\n const bunnyText = await bunnyRes.text();\n\n if (!bunnyRes.ok) {\n console.error(\"Bunny Database update failed:\", bunnyText);\n // Don't fail the webhook response over this — Supabase already has the\n // correct data, and your hourly reconciliation cron is the safety net.\n return new Response(\"OK\", { status: 200 });\n }\n\n console.log(\"Bunny Database response:\", bunnyText);\n console.log(\"Synced security_json for workspace:\", workspaceId);\n console.log(\"═══════════════════════════════════════\");\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Webhook error:\", err.message);\n return new Response(\"OK\", { status: 200 }); // always 200 so Supabase doesn't retry-storm\n }\n}",[308],"d97fc039-beba-4e55-9fd3-c38bef4d1134","superbase-webhook.ts","44c3b722-81e0-11f1-98a1-1607ee4eb77e",196,["D",1784293740578],"// Receives Supabase's native Database Webhook payload (fires automatically\n// on INSERT/UPDATE/DELETE to the videos table — no manual call needed from\n// api-2/api-3/anywhere else). This is Layer 2 of the 3-layer sync pattern:\n// Layer 1 = explicit call at mutation point (already built in api-3, update-video-settings)\n// Layer 2 = this file — catches changes from ANY source, not just your own endpoints\n// Layer 3 = hourly cron reconciliation (not yet built)\n\nconst BUNNY_VIDEOS_DB_URL = Deno.env.get(\"bunnyVideosDbUrl\")!;\nconst BUNNY_VIDEOS_DB_TOKEN = Deno.env.get(\"bunny_db_token\")!;\n\nexport default async function supabaseVideosWebhook(\n req: Request,\n): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n // Supabase Database Webhook payload shape:\n // { type: \"INSERT\" | \"UPDATE\" | \"DELETE\", table, record, old_record, schema }\n const payload = await req.json();\n const { type, record, old_record } = payload;\n\n console.log(\"Supabase webhook fired:\", type, record?.id ?? old_record?.id);\n\n if (type === \"DELETE\") {\n // Remove from Bunny Database too\n const videoId = old_record?.id;\n if (!videoId) return new Response(\"OK\", { status: 200 });\n\n await fetch(BUNNY_VIDEOS_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_VIDEOS_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [{\n type: \"execute\",\n stmt: {\n sql: `DELETE FROM \"Video\" WHERE video_id = ?`,\n args: [{ type: \"text\", value: String(videoId) }],\n },\n }],\n }),\n });\n\n return new Response(\"OK\", { status: 200 });\n }\n\n // INSERT or UPDATE — record has the full current row\n if (!record?.id) return new Response(\"OK\", { status: 200 });\n\n // Need workspace_slug, which isn't on the videos row itself —\n // Supabase's webhook payload only gives you the raw row, no joins.\n // Fetch it separately (small extra query, but keeps this endpoint\n // simple and not dependent on payload shape assumptions).\n const wsRes = await fetch(\n `${\n Deno.env.get(\"superbaseurl\")\n }/rest/v1/workspaces?id=eq.${record.workspace_id}&select=slug`,\n {\n headers: {\n \"apikey\": Deno.env.get(\"superbasesecretkey\")!,\n \"Authorization\": `Bearer ${Deno.env.get(\"superbasesecretkey\")}`,\n },\n },\n );\n const wsData = await wsRes.json();\n const workspaceSlug = wsData?.[0]?.slug;\n\n if (!workspaceSlug) {\n console.warn(\n \"⚠️ No workspace_slug found — skipping Bunny sync for video\",\n record.id,\n );\n return new Response(\"OK\", { status: 200 });\n }\n\n const bunnyRes = await fetch(BUNNY_VIDEOS_DB_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${BUNNY_VIDEOS_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [{\n type: \"execute\",\n stmt: {\n sql: `\n INSERT INTO \"Video\" (\n video_id, workspace_id, workspace_slug, folder_id, file_name,\n mp4_url, thumbnail_url, duration, status,\n output_size_bytes, width, height, bitrate, error_message,\n seo_title, player_config_json, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(video_id) DO UPDATE SET\n workspace_slug = excluded.workspace_slug,\n folder_id = excluded.folder_id,\n file_name = excluded.file_name,\n mp4_url = excluded.mp4_url,\n thumbnail_url = excluded.thumbnail_url,\n duration = excluded.duration,\n status = excluded.status,\n output_size_bytes = excluded.output_size_bytes,\n width = excluded.width,\n height = excluded.height,\n bitrate = excluded.bitrate,\n error_message = excluded.error_message,\n seo_title = excluded.seo_title,\n player_config_json = excluded.player_config_json,\n updated_at = excluded.updated_at\n `,\n args: [\n { type: \"text\", value: String(record.id) },\n { type: \"text\", value: String(record.workspace_id) },\n { type: \"text\", value: workspaceSlug },\n {\n type: record.folder_id ? \"text\" : \"null\",\n value: record.folder_id ? String(record.folder_id) : null,\n },\n { type: \"text\", value: record.title ?? \"untitled\" },\n {\n type: record.video_url ? \"text\" : \"null\",\n value: record.video_url ?? null,\n },\n {\n type: record.thumbnail_url ? \"text\" : \"null\",\n value: record.thumbnail_url ?? null,\n },\n { type: \"float\", value: record.duration ?? 0 },\n { type: \"text\", value: record.status ?? \"pending\" },\n { type: \"integer\", value: record.transcoded_size ?? 0 },\n { type: \"integer\", value: record.width ?? 0 },\n { type: \"integer\", value: record.height ?? 0 },\n { type: \"integer\", value: record.bitrate ?? 0 },\n {\n type: record.error_description ? \"text\" : \"null\",\n value: record.error_description ?? null,\n },\n { type: \"text\", value: record.title ?? \"\" },\n {\n type: \"text\",\n value: JSON.stringify(record.player_config ?? {}),\n },\n { type: \"text\", value: new Date().toISOString() },\n ],\n },\n }],\n }),\n });\n\n if (!bunnyRes.ok) {\n console.error(\"⚠️ Bunny Database sync failed:\", await bunnyRes.text());\n } else {\n console.log(\"✓ Synced via Supabase webhook:\", record.id);\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err: any) {\n console.error(\"Webhook error:\", err.message);\n return new Response(\"OK\", { status: 200 }); // always 200 so Supabase doesn't retry-storm\n }\n}",[315],"a6736b62-45ab-4d6d-932b-5659c010bc8b","superbase-dashbaord.ts","2437eede-60ce-11f1-9b6d-1607ee4eb77e",89,["D",1780688339092],"export default async function handler(req) {\n const SUPABASE_URL = Deno.env.get(\"superbaseurl\");\n const SUPABASE_KEY = Deno.env.get(\"superbasesecretkey\");\n const TABLE = \"bw_hourly\";\n\n const res = await fetch(`${SUPABASE_URL}/rest/v1/${TABLE}?limit=1000`, {\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n });\n\n const data = await res.json();\n\n function buildStats(data) {\n if (!data?.length) {\n return `

Rows

`;\n }\n const cols = Object.keys(data[0]);\n const urlCol = cols.find((c) =>\n c.toLowerCase().includes(\"url\") || c.toLowerCase().includes(\"domain\")\n );\n const urls = urlCol\n ? [...new Set(data.map((r) => r[urlCol]).filter(Boolean))]\n : [];\n return `

Total rows

${data.length}

Unique URLs

${\n urls.length || \"—\"\n }

Columns

${cols.length}

Table

bandwidth_hours

`;\n }\n\n function buildURLPanel(data) {\n if (!data?.length) {\n return `

URLs

No data

`;\n }\n const cols = Object.keys(data[0]);\n const urlCol = cols.find((c) =>\n c.toLowerCase().includes(\"url\") || c.toLowerCase().includes(\"domain\") ||\n c.toLowerCase().includes(\"host\")\n );\n if (!urlCol) {\n return `

URLs no url column found

No URL-type column detected

`;\n }\n const urls = [...new Set(data.map((r) => r[urlCol]).filter(Boolean))];\n const items = urls.map((u) => {\n const count = data.filter((r) => r[urlCol] === u).length;\n return `

${u}${count} rows

`;\n }).join(\"\");\n return `

URL list ${urls.length} urls

${items}

`;\n }\n\n function buildTablePanel(data) {\n if (!data?.length) {\n return `

Data

No rows returned

`;\n }\n const cols = Object.keys(data[0]);\n const headers = cols.map((c) => `${c}`).join(\"\");\n const rows = data.slice(0, 100).map((row) =>\n \"\" + cols.map((c) => {\n const v = row[c];\n return v === null\n ? `null`\n : `${String(v)}`;\n }).join(\"\") + \"\"\n ).join(\"\");\n return `

Table data ${data.length} rows

${headers}${rows}

`;\n }\n\n const html = `\n\n\n Bandwidth Hours Dashboard\n \n \n\n\n \n

\n ${buildStats(data)}\n

\n ${buildURLPanel(data)}\n ${buildTablePanel(data)}\n

\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html\" } });\n}",[322],"df0bb576-cc9e-4efe-8595-5e7b311b573b","superbase-dashbaord-copy.ts",99,["D",1781118645231],"export default async function handler(req) {\n const SUPABASE_URL = Deno.env.get(\"superbaseurl\");\n const SUPABASE_KEY = Deno.env.get(\"superbasesecretkey\");\n const TABLE = \"bw_hourly\";\n\n const res = await fetch(\n `${SUPABASE_URL}/rest/v1/${TABLE}?limit=1000&order=date_hour.asc`,\n {\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": `Bearer ${SUPABASE_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n },\n );\n\n const data = await res.json();\n\n // Group bytes_used by date (day)\n const byDate = {};\n const byWorkspace = {};\n\n for (const row of data) {\n const day = row.date_hour?.slice(0, 10) || \"unknown\";\n const ws = row.workspace_slug || \"unknown\";\n const bytes = Number(row.bytes_used) || 0;\n\n byDate[day] = (byDate[day] || 0) + bytes;\n byWorkspace[ws] = (byWorkspace[ws] || 0) + bytes;\n }\n\n const dates = Object.keys(byDate).sort();\n const byteValues = dates.map((d) => byDate[d]);\n const maxBytes = Math.max(...byteValues, 1);\n\n function fmtBytes(b) {\n if (b >= 1e9) return (b / 1e9).toFixed(2) + \" GB\";\n if (b >= 1e6) return (b / 1e6).toFixed(1) + \" MB\";\n if (b >= 1e3) return (b / 1e3).toFixed(0) + \" KB\";\n return b + \" B\";\n }\n\n const totalBytes = byteValues.reduce((a, b) => a + b, 0);\n const totalHits = data.reduce((a, r) => a + (Number(r.hits) || 0), 0);\n\n // Top workspaces\n const topWS = Object.entries(byWorkspace)\n .sort((a, b) => b[1] - a[1])\n .slice(0, 8);\n\n const wsMax = topWS[0]?.[1] || 1;\n\n // Build chart bars\n const bars = dates.map((d, i) => {\n const pct = (byteValues[i] / maxBytes * 100).toFixed(1);\n const label = d.slice(5); // MM-DD\n return `\n

${fmtBytes(byteValues[i])}

${label}

`;\n }).join(\"\");\n\n // Workspace rows\n const wsRows = topWS.map(([name, bytes]) => {\n const pct = (bytes / wsMax * 100).toFixed(1);\n return `\n

${name}

${fmtBytes(bytes)}

`;\n }).join(\"\");\n\n const html = `\n\n\n Bandwidth Dashboard\n \n \n\n\n \n\n

Total bandwidth

${fmtBytes(totalBytes)}

all time

Total hits

${totalHits.toLocaleString()}

requests

Days tracked

${dates.length}

unique days

Workspaces

${topWS.length}

active

\n\n

Bytes used by date

\n ${bars}\n

\n\n

Top workspaces by bandwidth

\n ${wsRows}\n

Raw data — ${data.length} rows

\n \n \n \n \n \n \n \n \n \n ${\n data.slice(0, 200).map((r) =>\n `\n \n \n \n \n \n `\n ).join(\"\")\n }\n \n

workspace	date_hour	bytes	hits	country
${\n r.workspace_slug \|\| 'null'\n }	${r.date_hour?.slice(0, 16) \|\| \"\"}	${fmtBytes(Number(r.bytes_used) \|\| 0)}	${r.hits \|\| 0}	${r.country \|\| \"—\"}

\n\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html\" } });\n}",[329],"c24878b4-5476-11f1-b9b8-ee650bb23af1","sseconsole.ts","a66fad06-5476-11f1-888c-ee650bb23af1",16,["D",1779300446748],"export default async function (req: Request): Promise {\n let count = 0;\n let intervalId: any;\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n start(controller) {\n // Send a fake update every 2 seconds\n intervalId = setInterval(() => {\n count++;\n \n const payload = { \n message: `Hello from Val Town! Test message #${count}`, \n progress: count * 20 \n };\n \n // SSE requires formatting text exactly like: \"data: {your json}\\n\\n\"\n controller.enqueue(encoder.encode(`data: ${JSON.stringify(payload)}\\n\\n`));\n\n // Stop streaming once we hit 5 updates\n if (count >= 5) {\n clearInterval(intervalId);\n controller.close();\n }\n }, 2000);\n },\n cancel() {\n clearInterval(intervalId);\n },\n });\n\n // Return the special event-stream headers\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/event-stream\",\n \"Cache-Control\": \"no-cache\",\n \"Connection\": \"keep-alive\",\n \"Access-Control-Allow-Origin\": \"*\", // Allows WeWeb to read it\n },\n });\n}",[335],"5a159f9c-5476-11f1-b3fe-ee650bb23af1","serve-test-event.ts","2159923a-5476-11f1-8a21-ee650bb23af1",["D",1779300271932],[342],"8ad1199c-5609-11f1-bb17-ee650bb23af1","serve-side-test-3.ts","6f7eeec0-5605-11f1-932e-ee650bb23af1",35,["D",1779473440824],"import { sqlite } from \"https://esm.town/v/std/sqlite@14-main/main.ts\";\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"videoId\");\n\n if (!videoId) return new Response(\"videoId required\", { status: 400 });\n\n // SSE stream setup\n let intervalId: any;\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n async start(controller) {\n // Read latest status from SQLite for this video\n const poll = async () => {\n try {\n const result = await sqlite.execute({\n sql: `SELECT status, percent FROM qencode WHERE task_token = ?`,\n args: [videoId],\n });\n\n const row = result.rows[0];\n if (!row) return;\n\n const percent = Number(row[1]);\n const status = String(row[0]);\n\n // Push to WeWeb\n controller.enqueue(encoder.encode(\n `data: ${\n JSON.stringify({\n videoId,\n progress: percent,\n status,\n })\n }\\n\\n`,\n ));\n\n // Close when done\n if (status === \"completed\" || status === \"error\") {\n clearInterval(intervalId);\n controller.close();\n }\n } catch (e) {\n console.error(\"SQLite error:\", e);\n }\n };\n\n // Run immediately + every 2s\n await poll();\n intervalId = setInterval(poll, 2000);\n },\n cancel() {\n clearInterval(intervalId);\n },\n });\n\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/event-stream\",\n \"Cache-Control\": \"no-cache\",\n \"Connection\": \"keep-alive\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n}",[347],"08ebfbd2-55e0-11f1-a144-ee650bb23af1","serve-side-test-2.ts","71533b8a-55be-11f1-a96e-ee650bb23af1",31,["D",1779455613548],"export default async function (req: Request): Promise {\n const url = new URL(req.url)\n const videoId = url.searchParams.get('video_id') // ← receive from WeWeb\n\n let count = 0;\n let intervalId: any;\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n start(controller) {\n intervalId = setInterval(() => {\n count++;\n\n const progress = count * 20\n\n const payload = {\n progress,\n video_id: videoId, // ← send back to WeWeb\n done: count >= 5 ? true : false // ← signals WeWeb to stop\n };\n\n controller.enqueue(encoder.encode(`data: ${JSON.stringify(payload)}\\n\\n`));\n\n if (count >= 5) {\n clearInterval(intervalId);\n controller.close();\n }\n }, 2000);\n },\n cancel() {\n clearInterval(intervalId);\n },\n });\n\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/event-stream\",\n \"Cache-Control\": \"no-cache\",\n \"Connection\": \"keep-alive\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n}",[354],"a3a32fdd-62a4-4478-8ee9-3df5ca8008a0","lm-webhook.ts","3a4aae8e-6752-11f1-b6e2-1607ee4eb77e",117,["D",1781374100672],"import { createHmac, timingSafeEqual } from \"node:crypto\"\n\nexport default async function(req: Request): Promise {\n const cors = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Signature\",\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors })\n }\n\n try {\n const rawBody = await req.text()\n const signature = req.headers.get(\"X-Signature\") ?? \"\"\n const secret = Deno.env.get(\"lemonsqueezewebhooksecret\")!\n\n // ── Verify signature ───────────────────────────────\n const hmac = createHmac(\"sha256\", secret)\n const digest = hmac.update(rawBody).digest(\"hex\")\n\n const valid = signature.length === digest.length &&\n timingSafeEqual(Buffer.from(digest, \"hex\"), Buffer.from(signature, \"hex\"))\n\n if (!valid) {\n console.error(\"❌ Invalid signature\")\n console.log(\"Expected:\", digest)\n console.log(\"Received:\", signature)\n return new Response(\"Invalid signature\", { status: 401, headers: cors })\n }\n\n console.log(\"✅ Signature verified\")\n\n const payload = JSON.parse(rawBody)\n\n console.log(\"─────────────────────────────\")\n console.log(\"🍋 Event:\", payload.meta?.event_name)\n console.log(\"📦 Custom data:\", JSON.stringify(payload.meta?.custom_data))\n console.log(\"─────────────────────────────\")\n\n return new Response(\"OK\", { status: 200, headers: cors })\n\n } catch (err) {\n console.error(\"❌ Error:\", err.message)\n return new Response(JSON.stringify({ error: err.message }), {\n status: 500,\n headers: cors\n })\n }\n}",[361],"a826b71a-b63a-48ff-9415-b4d83ccc5b43","lm-4.ts","89684f78-67f0-11f1-a9d0-1607ee4eb77e",122,["D",1781441928237],"import { createClient } from \"npm:@supabase/supabase-js\";\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nasync function verifySignature(\n rawBody: string,\n signature: string,\n secret: string,\n): Promise {\n try {\n const hmac = createHmac(\"sha256\", secret);\n const digest = hmac.update(rawBody).digest(\"hex\");\n\n if (signature.length !== digest.length) return false;\n\n return timingSafeEqual(\n Buffer.from(digest, \"hex\"),\n Buffer.from(signature, \"hex\"),\n );\n } catch (err) {\n console.error(\"❌ Signature error:\", err.message);\n return false;\n }\n}\n\nexport default async function (req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Signature\",\n };\n\n if (req.method === \"GET\") {\n return new Response(\"Webhook Active\", { status: 200, headers: cors });\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const rawBody = await req.text();\n const signature = req.headers.get(\"X-Signature\") ?? \"\";\n const secret = Deno.env.get(\"lemonsqueezewebhooksecret\") ?? \"\";\n\n console.log(\"─────────────────────────────────\");\n console.log(\"📨 Received webhook\");\n console.log(\"📝 Signature:\", signature ? \"present\" : \"missing\");\n console.log(\"🔑 Secret:\", secret ? \"set\" : \"MISSING!\");\n\n // ── Verify signature ───────────────────────────────────\n const valid = await verifySignature(rawBody, signature, secret);\n\n if (!valid) {\n console.error(\"❌ Invalid signature\");\n return new Response(\"Invalid signature\", { status: 401, headers: cors });\n }\n\n console.log(\"✅ Signature verified\");\n\n // Parse JSON\n let payload: any = {};\n try {\n payload = JSON.parse(rawBody);\n } catch (e) {\n console.error(\"❌ Failed to parse JSON:\", e.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const eventName = payload.meta?.event_name;\n const customData = payload.meta?.custom_data;\n const data = payload.data?.attributes;\n const lsId = String(payload.data?.id ?? \"\");\n\n console.log(\"🍋 Event:\", eventName);\n console.log(\"📦 Custom data:\", JSON.stringify(customData));\n console.log(\"🔍 variant_id:\", data?.variant_id);\n console.log(\"🔍 status:\", data?.status);\n console.log(\"🔍 lsId:\", lsId);\n\n if (!data || !eventName) {\n console.warn(\"⚠️ No data or event — skipping\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n // ── Step 1: Resolve workspace_id ──────────────────────\n let workspaceId: string | null = customData?.workspace_id ?? null;\n\n if (!workspaceId) {\n const email = data.user_email || data.customer_email;\n console.log(\"⚠️ No workspace_id in custom_data, trying email:\", email);\n\n if (email) {\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id\")\n .eq(\"owner_email\", email)\n .single();\n\n console.log(\n \"🔍 Workspace by email:\",\n JSON.stringify(ws),\n wsErr?.message,\n );\n workspaceId = ws?.id ?? null;\n }\n }\n\n if (!workspaceId) {\n console.error(\"❌ Could not resolve workspace_id — aborting\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"✅ workspace_id:\", workspaceId);\n\n // ── Step 2: Find subscription row by workspace_id ─────\n const { data: existingRow, error: findErr } = await supabase\n .from(\"subscriptions\")\n .select(\"id, workspace_id, status\")\n .eq(\"workspace_id\", workspaceId)\n .single();\n\n console.log(\"🔍 Existing row:\", JSON.stringify(existingRow));\n console.log(\"🔍 Find error:\", findErr?.message ?? \"none\");\n\n if (!existingRow) {\n console.warn(\"⚠️ No row found — creating default row\");\n\n const { data: inserted, error: insertErr } = await supabase\n .from(\"subscriptions\")\n .insert({\n workspace_id: workspaceId,\n status: \"active\",\n created_at: new Date().toISOString(),\n updated_at: new Date().toISOString(),\n })\n .select()\n .single();\n\n console.log(\"✅ Inserted:\", JSON.stringify(inserted));\n console.log(\"❌ Insert error:\", insertErr?.message ?? \"none\");\n\n if (insertErr) {\n console.error(\"❌ Could not create row:\", insertErr.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n }\n\n // ── Step 3: Build update data ─────────────────────────\n const variantId = String(data.variant_id ?? \"\");\n const updateData: any = {\n updated_at: new Date().toISOString(),\n };\n\n switch (eventName) {\n case \"subscription_created\":\n case \"subscription_updated\":\n case \"subscription_resumed\":\n case \"subscription_unpaused\":\n Object.assign(updateData, {\n ls_subscription_id: lsId,\n ls_customer_id: String(data.customer_id ?? \"\"),\n ls_order_id: data.order_id ? String(data.order_id) : null,\n ls_variant_id: variantId || null,\n subscription_plan: variantId || null,\n status: data.status ?? \"active\",\n cancelled: data.cancelled ?? false,\n pause: data.pause ?? null,\n card_brand: data.card_brand ?? null,\n card_last_four: data.card_last_four ?? null,\n trial_ends_at: data.trial_ends_at ?? null,\n renews_at: data.renews_at ?? null,\n ends_at: data.ends_at ?? null,\n billing_anchor: new Date().getDate(),\n reset_day: new Date().getDate(),\n url_update_payment: data.urls?.update_payment_method ?? null,\n url_customer_portal: data.urls?.customer_portal ?? null,\n url_update_subscription:\n data.urls?.customer_portal_update_subscription ?? null,\n test_mode: data.test_mode ?? false,\n });\n break;\n\n case \"subscription_cancelled\":\n Object.assign(updateData, {\n status: \"cancelled\",\n cancelled: true,\n ends_at: data.ends_at ?? null,\n });\n break;\n\n case \"subscription_expired\": {\n const { data: freePlan } = await supabase\n .from(\"plans\")\n .select(\"ls_variant_id\")\n .eq(\"name\", \"free\")\n .single();\n\n Object.assign(updateData, {\n status: \"expired\",\n subscription_plan: freePlan?.ls_variant_id ?? null,\n ls_subscription_id: null,\n });\n break;\n }\n\n case \"subscription_paused\":\n Object.assign(updateData, {\n status: \"paused\",\n pause: data.pause ?? null,\n });\n break;\n\n case \"subscription_payment_failed\":\n Object.assign(updateData, { status: \"past_due\" });\n break;\n\n case \"subscription_payment_success\":\n case \"subscription_payment_recovered\":\n Object.assign(updateData, { status: \"active\" });\n break;\n\n default:\n console.log(\"ℹ️ Unhandled event:\", eventName);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"📝 updateData:\", JSON.stringify(updateData));\n\n // ── Step 4: Update row by workspace_id ───────────────\n const { data: updated, error: updateErr } = await supabase\n .from(\"subscriptions\")\n .update(updateData)\n .eq(\"workspace_id\", workspaceId)\n .select();\n\n console.log(\"✅ Updated:\", JSON.stringify(updated));\n console.log(\"❌ Update error:\", updateErr?.message ?? \"none\");\n\n if (updateErr) {\n console.error(\"❌ Update failed:\", updateErr.message);\n } else if (!updated || updated.length === 0) {\n console.warn(\"⚠️ No rows updated for workspace_id:\", workspaceId);\n } else {\n console.log(\"✓ Row updated:\", updated[0]?.id, \"→\", updateData.status);\n }\n\n console.log(\"─────────────────────────────────\");\n return new Response(\"OK\", { status: 200, headers: cors });\n } catch (err: any) {\n console.error(\"❌ Critical error:\", err.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n}",[368],"7df9053a-7a4d-47ca-af29-3140cb66c58b","lemonsqueeze.ts","35696194-65cc-11f1-b16a-1607ee4eb77e",105,["D",1781263384100],"export default async function createCheckout(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405, headers: cors });\n }\n\n try {\n const body = await req.json();\n\n const workspace_id = body.workspace_id;\n const variant_id = body.variant_id;\n const email = body.email ?? null; // prefill email\n const name = body.name ?? null; // prefill name\n\n if (!workspace_id || !variant_id) {\n return new Response(\n JSON.stringify({ error: \"Missing workspace_id or variant_id\" }),\n {\n status: 400,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n const LS_API_KEY = Deno.env.get(\"lemonsqueezeapi\")!;\n const LS_STORE_ID = Deno.env.get(\"47660\")!;\n\n console.log(\"Creating checkout for workspace:\", workspace_id);\n console.log(\"variant_id:\", variant_id);\n console.log(\"email:\", email);\n\n // ── Build checkout_data ───────────────────────────────────────────\n const checkout_data: any = {\n // Custom data — available in webhook meta.custom_data\n custom: {\n workspace_id: String(workspace_id),\n },\n };\n\n // Prefill email if provided\n if (email) checkout_data.email = email;\n\n // Prefill name if provided\n if (name) checkout_data.name = name;\n\n // ── Build checkout attributes ─────────────────────────────────────\n const attributes: any = {\n checkout_data,\n\n // Checkout options\n checkout_options: {\n embed: false, // true = overlay, false = hosted page\n media: true, // show product media\n logo: true, // show store logo\n desc: true, // show product description\n discount: true, // allow discount codes\n button_color: \"#5B4CF5\", // checkout button color\n },\n\n // Product options\n product_options: {\n name: null, // override product name (null = use LS default)\n description: null, // override description\n media: [],\n redirect_url: `${Deno.env.get(\"APP_URL\")}/dashboard?upgraded=true`,\n receipt_button_text: \"Go to dashboard\",\n receipt_link_url: `${Deno.env.get(\"APP_URL\")}/dashboard`,\n receipt_thank_you_note: \"Thank you for upgrading VideoFrame!\",\n enabled_variants: [], // empty = show all variants\n },\n\n // Expiry — checkout link expires in 24 hours\n expires_at: new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString(),\n\n // Test mode\n test_mode: Deno.env.get(\"LS_TEST_MODE\") === \"true\",\n };\n\n // ── Call Lemon Squeezy API ────────────────────────────────────────\n const res = await fetch(\"https://api.lemonsqueezy.com/v1/checkouts\", {\n method: \"POST\",\n headers: {\n \"Accept\": \"application/vnd.api+json\",\n \"Content-Type\": \"application/vnd.api+json\",\n \"Authorization\": `Bearer ${LS_API_KEY}`,\n },\n body: JSON.stringify({\n data: {\n type: \"checkouts\",\n attributes,\n relationships: {\n store: {\n data: {\n type: \"stores\",\n id: String(LS_STORE_ID),\n },\n },\n variant: {\n data: {\n type: \"variants\",\n id: String(273481),\n },\n },\n },\n },\n }),\n });\n\n const data = await res.json();\n\n if (!res.ok) {\n console.error(\"LS API error:\", JSON.stringify(data));\n return new Response(\n JSON.stringify({ error: \"Lemon Squeezy error\", details: data }),\n {\n status: 500,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n const checkoutUrl = data?.data?.attributes?.url;\n const expiresAt = data?.data?.attributes?.expires_at;\n\n console.log(\"✓ Checkout URL:\", checkoutUrl);\n console.log(\"✓ Expires at:\", expiresAt);\n\n return new Response(\n JSON.stringify({\n url: checkoutUrl,\n expires_at: expiresAt,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n } catch (err: any) {\n console.error(\"Error:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n}",[375],"2f7844ad-f6bc-4213-ac7f-a5ba16c56b88","lemonsqueeze-copy.ts","a6939656-674c-11f1-9715-1607ee4eb77e",112,["D",1781372753937],"export default async function(req: Request): Promise {\n const cors = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors })\n }\n\n try {\n const text = await req.text()\n console.log(\"📦 Raw body:\", text)\n\n if (!text) {\n return new Response(JSON.stringify({ error: \"Empty request body\" }), {\n status: 400,\n headers: cors\n })\n }\n\n const { workspace_id } = JSON.parse(text)\n const workspaceId = workspace_id\n\n if (!workspaceId) {\n return new Response(JSON.stringify({ error: \"Missing workspace_id\" }), {\n status: 400,\n headers: cors\n })\n }\n\n const lemonsqueezeapi = Deno.env.get(\"lemonsqueezeapi\")\n\n const res = await fetch(\"https://api.lemonsqueezy.com/v1/checkouts\", {\n method: \"POST\",\n headers: {\n \"Accept\": \"application/vnd.api+json\",\n \"Content-Type\": \"application/vnd.api+json\",\n \"Authorization\": `Bearer ${lemonsqueezeapi}`\n },\n body: JSON.stringify({\n data: {\n type: \"checkouts\",\n attributes: {\n checkout_data: {\n custom: { workspace_id: workspaceId }\n }\n },\n relationships: {\n store: { data: { type: \"stores\", id: String(47660) } },\n variant: { data: { type: \"variants\", id: String(385499) } }\n }\n }\n })\n })\n\n const data = await res.json()\n\n if (!res.ok) {\n console.error(\"LS error:\", JSON.stringify(data))\n return new Response(JSON.stringify({ error: \"Lemon Squeezy error\", details: data }), {\n status: 500,\n headers: cors\n })\n }\n\n const checkoutUrl = data.data.attributes.url\n\n return new Response(JSON.stringify({ url: checkoutUrl }), { headers: cors })\n\n } catch (err) {\n console.error(\"Error:\", err.message)\n return new Response(JSON.stringify({ error: err.message }), {\n status: 500,\n headers: cors\n })\n }\n}",[382],"73646f01-cc93-4dca-9db0-03dd8474f2f1","ingest-valtown.ts","1cbcac0e-6fc3-11f1-b799-1607ee4eb77e",143,["D",1782495636163],"import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function ingestVideoAnalytics(\n req: Request,\n): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n // ── Ensure table exists ───────────────────────────────────────\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS video_views (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n video_id TEXT NOT NULL,\n workspace_slug TEXT NOT NULL,\n percent_watched INTEGER NOT NULL,\n watch_duration INTEGER NOT NULL,\n current_position INTEGER NOT NULL DEFAULT 0,\n total_duration INTEGER NOT NULL DEFAULT 0,\n country TEXT NOT NULL DEFAULT 'UNKNOWN',\n session_id TEXT NOT NULL DEFAULT 'unknown',\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )\n `);\n\n // Patch existing table — add any missing columns silently\n const patches = [\n `ALTER TABLE video_views ADD COLUMN session_id TEXT NOT NULL DEFAULT 'unknown'`,\n `ALTER TABLE video_views ADD COLUMN current_position INTEGER NOT NULL DEFAULT 0`,\n `ALTER TABLE video_views ADD COLUMN total_duration INTEGER NOT NULL DEFAULT 0`,\n ];\n for (const sql of patches) {\n try {\n await sqlite.execute(sql);\n } catch (e) { /* column already exists — ignore */ }\n }\n\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_video_id ON video_views (video_id)`,\n );\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_session_id ON video_views (session_id)`,\n );\n\n // ── GET — stats ───────────────────────────────────────────────\n if (req.method === \"GET\") {\n const url = new URL(req.url);\n const videoId = url.searchParams.get(\"video_id\");\n\n if (videoId) {\n const stats = await sqlite.execute({\n sql: `\n SELECT\n COUNT(*) AS total_views,\n COUNT(DISTINCT session_id) AS unique_views,\n ROUND(AVG(percent_watched)) AS avg_pct,\n ROUND(AVG(watch_duration)) AS avg_watch_duration,\n ROUND(AVG(total_duration)) AS avg_total_duration,\n ROUND(AVG(current_position)) AS avg_position_stopped\n FROM video_views\n WHERE video_id = ?\n `,\n args: [videoId],\n });\n\n const row = stats.rows[0];\n\n return Response.json({\n video_id: videoId,\n total_views: row[0],\n unique_views: row[1],\n avg_pct: row[2],\n avg_watch_duration: row[3],\n avg_total_duration: row[4],\n avg_position_stopped: row[5],\n }, { headers: cors });\n }\n\n // No video_id — return all rows\n const all = await sqlite.execute(\n `SELECT * FROM video_views ORDER BY created_at DESC LIMIT 50`,\n );\n return Response.json({ rows: all.rows }, { headers: cors });\n }\n\n // ── POST — ingest ─────────────────────────────────────────────\n if (req.method !== \"POST\") {\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n let body: any = {};\n try {\n const text = await req.text();\n body = JSON.parse(text);\n } catch (e) {\n console.error(\"Failed to parse body:\", e);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const {\n video_id,\n workspace_slug,\n percent_watched,\n watch_duration,\n current_position,\n total_duration,\n country,\n session_id,\n } = body;\n\n console.log(\"Received:\", {\n video_id,\n workspace_slug,\n percent_watched,\n watch_duration,\n current_position,\n total_duration,\n country,\n session_id,\n });\n\n // ── Validate ──────────────────────────────────────────────────\n if (!video_id || !workspace_slug) {\n console.warn(\"Missing required fields — dropping\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n if (!watch_duration || watch_duration < 2) {\n console.log(\"Skipping — watch_duration too short:\", watch_duration);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const pct = Math.min(100, Math.max(0, Math.round(percent_watched ?? 0)));\n const finalCountry = String(country ?? \"UNKNOWN\");\n const finalDuration = Math.round(watch_duration);\n const finalPosition = Math.round(current_position ?? 0);\n const finalTotal = Math.round(total_duration ?? 0);\n const finalSessionId = String(session_id ?? \"unknown\");\n\n // ── Dedup — update if same session already exists ─────────────\n const existing = await sqlite.execute({\n sql:\n `SELECT id FROM video_views WHERE video_id = ? AND session_id = ? LIMIT 1`,\n args: [String(video_id), finalSessionId],\n });\n\n if (existing.rows.length > 0) {\n await sqlite.execute({\n sql: `\n UPDATE video_views\n SET\n percent_watched = ?,\n watch_duration = ?,\n current_position = ?,\n total_duration = ?,\n created_at = CURRENT_TIMESTAMP\n WHERE video_id = ?\n AND session_id = ?\n `,\n args: [\n pct,\n finalDuration,\n finalPosition,\n finalTotal,\n String(video_id),\n finalSessionId,\n ],\n });\n console.log(\n `✓ Updated — video: ${video_id} | pct: ${pct}% | pos: ${finalPosition}s / ${finalTotal}s`,\n );\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n // ── Insert new row ────────────────────────────────────────────\n try {\n await sqlite.execute({\n sql: `\n INSERT INTO video_views\n (video_id, workspace_slug, percent_watched, watch_duration, current_position, total_duration, country, session_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)\n `,\n args: [\n String(video_id),\n String(workspace_slug),\n pct,\n finalDuration,\n finalPosition,\n finalTotal,\n finalCountry,\n finalSessionId,\n ],\n });\n console.log(\n `✓ View recorded — video: ${video_id} | pct: ${pct}% | pos: ${finalPosition}s / ${finalTotal}s | session: ${finalSessionId}`,\n );\n } catch (error: any) {\n console.error(\"SQLite error:\", error.message);\n }\n\n return new Response(\"OK\", { status: 200, headers: cors });\n}",[389],"44196fc4-09e8-44a9-b66f-2011df1c26b0","ingest-for-superbase-copy.ts","09792324-6fc4-11f1-bff3-1607ee4eb77e",137,["D",1782302318829],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"SUPABASE_URL\")!,\n Deno.env.get(\"SUPABASE_SERVICE_KEY\")!,\n);\n\nexport default async function ingestVideoAnalytics(\n req: Request,\n): Promise {\n // Always return 200 — sendBeacon ignores response anyway\n const ok = new Response(\"OK\", {\n status: 200,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n\n if (req.method === \"OPTIONS\") return ok;\n if (req.method !== \"POST\") return ok;\n\n // ── Parse body ────────────────────────────────────────────────\n // sendBeacon sends as text/plain — must use req.text() not req.json()\n let body: any = {};\n try {\n const text = await req.text();\n body = JSON.parse(text);\n } catch (e) {\n console.error(\"Failed to parse body:\", e);\n return ok;\n }\n\n const {\n video_id,\n workspace_slug,\n percent_watched, // 0-100\n watch_duration, // seconds actually watched\n country, // ISO country code e.g. \"IN\"\n } = body;\n\n console.log(\"━━━━━━━━━━━━━━━━━━━━━━━━━━━━\");\n console.log(\"video_id: \", video_id);\n console.log(\"workspace_slug: \", workspace_slug);\n console.log(\"percent_watched:\", percent_watched);\n console.log(\"watch_duration: \", watch_duration, \"seconds\");\n console.log(\"country: \", country);\n\n // ── Validate ──────────────────────────────────────────────────\n if (!video_id || !workspace_slug) {\n console.warn(\"Missing required fields — dropping\");\n return ok;\n }\n\n // Drop accidental loads under 2 seconds — bots, preloads\n if (!watch_duration || watch_duration < 2) {\n console.log(\"Skipping — watch_duration too short:\", watch_duration);\n return ok;\n }\n\n // Clamp percent to 0-100\n const pct = Math.min(100, Math.max(0, Math.round(percent_watched ?? 0)));\n\n // ── Insert into Supabase ──────────────────────────────────────\n const { error } = await supabase\n .from(\"video_views\")\n .insert({\n video_id: String(video_id),\n workspace_slug: String(workspace_slug),\n percent_watched: pct,\n watch_duration: Math.round(watch_duration),\n country: country ?? \"UNKNOWN\",\n });\n\n if (error) {\n console.error(\"Supabase error:\", error.message);\n } else {\n console.log(\n \"✓ View recorded — video:\",\n video_id,\n \"| pct:\",\n pct + \"% | dur:\",\n watch_duration + \"s\",\n );\n }\n\n return ok;\n}",[396],"c0a84d9e-03f3-4959-9e94-c4b879bac861","bunny-database.ts","796997a0-7851-11f1-ab66-1607ee4eb77e",164,["D",1783244283696],7,"// insertWorkspaceRow.ts\n// Val.town — POST call to insert a row into the \"Workspace\" table on Bunny Database\n\nconst BUNNY_DB_URL =\n \"https://01KT270SNQ0T40DJR9YX9WS01J-videos.lite.bunnydb.net/v2/pipeline\";\nconst BUNNY_DB_TOKEN = Deno.env.get(\"bunny_access_token\")!;\n\nexport default async function insertWorkspaceRow(\n req: Request,\n): Promise {\n try {\n const row = await req.json();\n\n const res = await fetch(BUNNY_DB_URL, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${BUNNY_DB_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n requests: [\n {\n type: \"execute\",\n stmt: {\n sql: `insert into \"Workspace\"\n (workspace_slug, workspace_id, video_id, seo_title, seo_description,\n duration, updated_time, thumbnail_url, mp4_url, plan, plan_status, \"column\")\n values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n { type: \"text\", value: row.workspace_slug },\n { type: \"text\", value: row.workspace_id },\n { type: \"text\", value: row.video_id },\n { type: \"text\", value: row.seo_title },\n { type: \"text\", value: row.seo_description },\n { type: \"text\", value: row.duration },\n {\n type: \"text\",\n value: row.updated_time ?? new Date().toISOString(),\n },\n { type: \"text\", value: row.thumbnail_url },\n { type: \"text\", value: row.mp4_url },\n { type: \"text\", value: row.plan },\n { type: \"text\", value: row.plan_status },\n { type: \"text\", value: row.column ?? \"\" },\n ],\n },\n },\n { type: \"close\" },\n ],\n }),\n });\n\n if (!res.ok) {\n const errText = await res.text();\n return new Response(`Insert failed: ${res.status} ${errText}`, {\n status: 500,\n });\n }\n\n return new Response(\"OK\", { status: 200 });\n } catch (err) {\n return new Response(`Insert error: ${err}`, { status: 500 });\n }\n}",[403],"f8646824-579e-11f1-8f37-ee650bb23af1","api-3.ts","101cb63e-5447-11f1-a49d-ee650bb23af1",50,["D",1779647570879],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"SUPABASE_URL\")!,\n Deno.env.get(\"SUPABASE_SERVICE_KEY\")!\n);\n\nconst B2_BUCKET = Deno.env.get(\"B2_BUCKET\")!;\nconst CDN_URL = Deno.env.get(\"CDN_URL\")!; // your Bunny CDN domain\n\nexport default async function qencodeWebhook(req: Request): Promise {\n try {\n const body = await req.json();\n console.log(\"Qencode webhook:\", JSON.stringify(body));\n\n const {\n task_token,\n status,\n percent,\n error,\n error_description,\n payload,\n videos,\n } = body;\n\n // Parse payload\n const { workspace_slug, video_id } = JSON.parse(payload ?? \"{}\");\n\n // ── Processing (in progress) ──────────────────────────────────────\n if (status === \"processing\") {\n await supabase\n .from(\"videos\")\n .update({\n status: \"processing\",\n progress: percent ?? 0,\n })\n .eq(\"qencode_task_id\", task_token);\n\n console.log(`Processing: ${percent}% for video ${video_id}`);\n }\n\n // ── Complete ──────────────────────────────────────────────────────\n if (status === \"completed\") {\n // Extract output URLs from Qencode response\n const mp4Video = videos?.find((v: any) => v.output === \"mp4\");\n const thumbnail = videos?.find((v: any) => v.output === \"thumbnail\");\n\n // Build CDN URLs\n const videoUrl = mp4Video?.url ?? null;\n const thumbnailUrl = thumbnail?.url ?? null;\n\n // Update video to live\n await supabase\n .from(\"videos\")\n .update({\n status: \"live\",\n progress: 100,\n url: videoUrl,\n thumbnail_url: thumbnailUrl,\n updated_at: new Date().toISOString(),\n })\n .eq(\"qencode_task_id\", task_token);\n\n // Insert notification\n const { data: video } = await supabase\n .from(\"videos\")\n .select(\"title, workspace_id\")\n .eq(\"qencode_task_id\", task_token)\n .single();\n\n if (video) {\n await supabase.from(\"notifications\").insert({\n workspace_id: video.workspace_id,\n type: \"upload_complete\",\n title: \"Video ready\",\n body: `${video.title} has finished processing.`,\n });\n }\n\n console.log(`✓ Video ${video_id} is live`);\n }\n\n // ── Failed ────────────────────────────────────────────────────────\n if (status === \"error\" || status === \"failed\") {\n await supabase\n .from(\"videos\")\n .update({\n status: \"failed\",\n error_message: error_description ?? error ?? \"Unknown error\",\n updated_at: new Date().toISOString(),\n })\n .eq(\"qencode_task_id\", task_token);\n\n // Insert failure notification\n const { data: video } = await supabase\n .from(\"videos\")\n .select(\"title, workspace_id\")\n .eq(\"qencode_task_id\", task_token)\n .single();\n\n if (video) {\n await supabase.from(\"notifications\").insert({\n workspace_id: video.workspace_id,\n type: \"transcoding_failed\",\n title: \"Transcoding failed\",\n body: `${video.title} failed to process. ${error_description ?? \"\"}`,\n });\n }\n\n console.error(`✗ Video ${video_id} failed: ${error_description}`);\n }\n\n return new Response(\"ok\", { status: 200 });\n\n } catch (err) {\n console.error(\"Webhook error:\", err);\n return new Response(\"error\", { status: 500 });\n }\n}",[411],"5e7af9d0-579e-11f1-b183-ee650bb23af1","api-2.ts","ebf3a362-5446-11f1-b53e-ee650bb23af1",49,["D",1779647312657],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nconst B2_KEY = Deno.env.get(\"b2key\")!;\nconst B2_SECRET = Deno.env.get(\"b2secret\")!;\nconst B2_BUCKET = Deno.env.get(\"b2bucket\")!;\n\nexport default async function startEncoding(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n try {\n const {\n task_token,\n tus_id,\n file_name,\n workspace_slug,\n video_id,\n } = await req.json();\n\n if (!task_token || !tus_id || !file_name) {\n return new Response(\n JSON.stringify({\n error: \"Missing required fields\",\n required: [\"task_token\", \"tus_id\", \"file_name\"],\n }),\n {\n status: 400,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // Build file paths\n const baseName = file_name.replace(/\\.[^/.]+$/, \"\");\n const mp4Path =\n `b2://backblaze.com/${B2_BUCKET}/${workspace_slug}/${baseName}.mp4`;\n const thumbPath =\n `b2://backblaze.com/${B2_BUCKET}/${workspace_slug}/${baseName}.jpg`;\n\n // Build Qencode query\n const query = {\n source: `tus:${tus_id}`,\n encoder_version: \"2\",\n callback_url: `${Deno.env.get(\"VALTOWN_BASE_URL\")}/qencode-webhook`,\n use_subtask_callback: 1,\n format: [\n {\n output: \"mp4\",\n video_codec: \"libx264\",\n height: 1080,\n optimize_bitrate: 0,\n destination: {\n url: mp4Path,\n key: B2_KEY,\n secret: B2_SECRET,\n },\n },\n {\n output: \"thumbnail\",\n image_format: \"jpg\",\n time: \".15\",\n height: \"500\",\n width: \"700\",\n destination: {\n url: thumbPath,\n key: B2_KEY,\n secret: B2_SECRET,\n },\n },\n ],\n };\n\n // Send to Qencode\n const encodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n task_token,\n query: JSON.stringify(query),\n payload: JSON.stringify({ workspace_slug, video_id }),\n }),\n });\n\n const encodeData = await encodeRes.json();\n\n if (encodeData.error) {\n return new Response(\n JSON.stringify({ error: \"Qencode error\", details: encodeData }),\n {\n status: 500,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // Update video status in Supabase\n await supabase\n .from(\"videos\")\n .update({\n status: \"processing\",\n qencode_task_id: task_token,\n updated_at: new Date().toISOString(),\n })\n .eq(\"id\", video_id);\n\n console.log(`✓ Encoding started for video ${video_id}`);\n\n return new Response(\n JSON.stringify({\n ok: true,\n task_token,\n status: \"processing\",\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n } catch (err) {\n console.error(\"Error:\", err);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n}",[418],"d174b116-5446-11f1-8340-ee650bb23af1","api-1.ts","511c575c-53b6-11f1-94f4-ee650bb23af1",["D",1779279856359],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!\n);\n\nconst QENCODE_API_KEY = Deno.env.get(\"qencodeapi\")!;\n\nexport default async function getTaskToken(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n\n if (req.method === \"OPTIONS\") return new Response(null, { status: 204, headers: cors });\n\n try {\n // ── Step 1: Get access token ──────────────────────────────────────\n const tokenRes = await fetch(\"https://api.qencode.com/v1/access_token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ api_key: QENCODE_API_KEY }),\n });\n\n const tokenData = await tokenRes.json();\n\n if (!tokenData.token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get access token\", details: tokenData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"✓ Access token received\");\n\n // ── Step 2: Create task + get task token ──────────────────────────\n const taskRes = await fetch(\"https://api.qencode.com/v1/create_task\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ token: tokenData.token }),\n });\n\n const taskData = await taskRes.json();\n\n if (!taskData.task_token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get task token\", details: taskData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n\n console.log(\"✓ Task token received\");\n\n return new Response(\n JSON.stringify({\n task_token: taskData.task_token,\n access_token: tokenData.token,\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n\n } catch (err) {\n console.error(\"Error:\", err);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } }\n );\n }\n}",[425],"303ac45a-9cbf-47a9-a246-ba09a54be155","api-1.1-plan-check.ts","f296ce04-7f72-11f1-b4ad-1607ee4eb77e",188,["D",1784111048120],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\nconst QENCODE_API_KEY = Deno.env.get(\"qencodeapi\")!;\n\nexport default async function getTaskToken(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n if (req.method === \"OPTIONS\") return new Response(null, { status: 204, headers: cors });\n\n try {\n const { workspace_slug } = await req.json();\n\n if (!workspace_slug) {\n return new Response(\n JSON.stringify({ error: \"workspace_slug is required\" }),\n { status: 400, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ── Step 0: Confirmed join — workspaces → subscriptions → plans ──\n // (via subscriptions.subscription_plan = plans.ls_variant_id)\n // NOTE: subscriptions has TWO foreign keys to workspaces\n // (workspace_id AND workspace_slug), so the relationship must be\n // named explicitly below — otherwise Supabase can't disambiguate\n // which FK to embed on, and the whole query silently fails,\n // surfacing as a false \"Workspace not found\".\n const { data: workspace, error: wsError } = await supabase\n .from(\"workspaces\")\n .select(`\n id,\n slug,\n bandwidth_used,\n storage_used_bytes,\n subscriptions!subscriptions_workspace_id_fkey (\n status,\n subscription_plan,\n plans!subscriptions_subscription_plan_fkey ( name, bytes_limit, storage_limit, video_limit, member_limit )\n )\n `)\n .eq(\"slug\", workspace_slug)\n .single();\n\n if (wsError) console.error(\"Supabase error detail:\", JSON.stringify(wsError));\n\n if (wsError || !workspace) {\n return new Response(\n JSON.stringify({ error: \"Workspace not found\" }),\n { status: 404, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // subscriptions comes back as an array (Supabase doesn't assume 1:1 unless\n // there's a unique constraint on subscriptions.workspace_id)\n const sub = workspace.subscriptions?.[0];\n const plan = sub?.plans;\n\n if (!sub || (sub.status !== \"active\" && sub.status !== \"cancelled\")) {\n return new Response(\n JSON.stringify({ error: \"No active subscription for this workspace\" }),\n { status: 402, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // sub.subscription_plan can be null even when status is \"active\" (seen in real data)\n // — treat \"active sub with no linked plan\" as blocked rather than silently\n // falling back, since a silent fallback could let someone bypass limits entirely.\n // Flip this if you'd rather default null plans to \"free\" tier behavior.\n if (!plan) {\n return new Response(\n JSON.stringify({ error: \"No plan linked to this subscription — contact support\" }),\n { status: 402, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n const bandwidthReached = workspace.bandwidth_used >= plan.bytes_limit;\n const storageReached = workspace.storage_used_bytes >= plan.storage_limit;\n\n if (bandwidthReached) {\n return new Response(\n JSON.stringify({\n error: \"Bandwidth limit reached for this billing cycle\",\n error_code: \"bandwidth_limit_reached\",\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n bandwidth: {\n used: workspace.bandwidth_used,\n limit: plan.bytes_limit,\n reached: true,\n },\n }),\n { status: 403, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n if (storageReached) {\n return new Response(\n JSON.stringify({\n error: \"Storage limit reached for this plan\",\n error_code: \"storage_limit_reached\",\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n storage: {\n used: workspace.storage_used_bytes,\n limit: plan.storage_limit,\n reached: true,\n },\n }),\n { status: 403, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ── Resolve transcoding settings from plan cap only ──\n // workspace_settings column doesn't exist on workspaces yet — once it's\n // added, re-introduce the parsing block here to layer workspace-level\n // overrides on top of the plan cap (see earlier version for that logic).\n const PLAN_RESOLUTION_CAPS: Record = {\n free: 480,\n starter: 720,\n creator: 1080,\n \"creator-test-1-month\": 1080,\n \"creator-test-1-year\": 1080,\n agency: 1080,\n business: 1080,\n };\n const maxHeight = PLAN_RESOLUTION_CAPS[plan.name] ?? 480;\n const crf = 23; // default \"balanced\" CRF until workspace_settings/optimise_for exists\n\n // ── Step 1: Get access token ──────────────────────────────────────\n const tokenRes = await fetch(\"https://api.qencode.com/v1/access_token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ api_key: QENCODE_API_KEY }),\n });\n const tokenData = await tokenRes.json();\n if (!tokenData.token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get access token\", details: tokenData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ── Step 2: Create task + get task token ──────────────────────────\n const taskRes = await fetch(\"https://api.qencode.com/v1/create_task\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ token: tokenData.token }),\n });\n const taskData = await taskRes.json();\n if (!taskData.task_token) {\n return new Response(\n JSON.stringify({ error: \"Failed to get task token\", details: taskData }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n\n return new Response(\n JSON.stringify({\n task_token: taskData.task_token,\n access_token: tokenData.token,\n\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n\n plan: {\n name: plan.name,\n video_limit: plan.video_limit,\n member_limit: plan.member_limit,\n bandwidth_limit_bytes: plan.bytes_limit,\n storage_limit_bytes: plan.storage_limit,\n },\n\n bandwidth: {\n used: workspace.bandwidth_used,\n limit: plan.bytes_limit,\n used_pct: Number(((workspace.bandwidth_used / plan.bytes_limit) * 100).toFixed(1)),\n reached: bandwidthReached,\n },\n\n storage: {\n used: workspace.storage_used_bytes,\n limit: plan.storage_limit,\n used_pct: Number(((workspace.storage_used_bytes / plan.storage_limit) * 100).toFixed(1)),\n reached: storageReached,\n },\n\n // Forward this straight into api-2's (upload-complete / url-import)\n // request body — no need for api-2 to re-query workspace_settings itself.\n transcode_settings: {\n max_height: maxHeight,\n crf: crf,\n },\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n } catch (err) {\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n}",[431],"d46fae37-3acc-4415-a136-ca938681f6c3","Cloudfare","6841248c-9c98-11f1-b6db-1607ee4eb77e",223,["D",1787231416441],"directory",[438],"pulls","branches","forks","envVars",{"_451":453,"_454":63},"connections",{"_451":275,"_452":63},"count","unfilledCount",22,"emptyCount",{"_44":437,"_32":438,"_30":439,"_171":-5,"_42":43,"_41":440,"_173":125,"_39":673,"_13":275,"_34":442,"_36":-5,"_24":25,"_177":-5,"_502":674,"_27":675},{"_44":666,"_32":425,"_30":667,"_171":439,"_42":43,"_41":668,"_173":125,"_39":669,"_13":200,"_34":35,"_36":670,"_24":25,"_177":-5,"_502":671,"_27":672},{"_44":658,"_32":659,"_30":660,"_171":439,"_42":43,"_41":661,"_173":25,"_39":662,"_13":192,"_34":35,"_36":663,"_24":25,"_177":-5,"_502":664,"_27":665},{"_44":650,"_32":651,"_30":652,"_171":439,"_42":43,"_41":653,"_173":25,"_39":654,"_13":224,"_34":35,"_36":655,"_24":25,"_177":-5,"_502":656,"_27":657},{"_44":646,"_32":33,"_30":31,"_171":439,"_42":43,"_41":14,"_173":25,"_39":647,"_13":216,"_34":35,"_36":38,"_24":25,"_177":-5,"_502":648,"_27":649},{"_44":638,"_32":639,"_30":640,"_171":439,"_42":43,"_41":641,"_173":125,"_39":642,"_13":216,"_34":35,"_36":643,"_24":25,"_177":-5,"_502":644,"_27":645},{"_44":629,"_32":630,"_30":631,"_171":439,"_42":43,"_41":632,"_173":125,"_39":633,"_13":634,"_34":35,"_36":635,"_24":25,"_177":-5,"_502":636,"_27":637},{"_44":621,"_32":622,"_30":623,"_171":439,"_42":43,"_41":624,"_173":125,"_39":625,"_13":216,"_34":35,"_36":626,"_24":25,"_177":-5,"_502":627,"_27":628},{"_44":613,"_32":614,"_30":615,"_171":439,"_42":43,"_41":616,"_173":125,"_39":617,"_13":216,"_34":35,"_36":618,"_24":25,"_177":-5,"_502":619,"_27":620},{"_44":430,"_32":431,"_30":432,"_171":-5,"_42":43,"_41":433,"_173":125,"_39":610,"_13":304,"_34":35,"_36":435,"_24":25,"_177":-5,"_502":611,"_27":612},{"_44":424,"_32":425,"_30":426,"_171":-5,"_42":43,"_41":216,"_173":125,"_39":607,"_13":224,"_34":35,"_36":428,"_24":25,"_177":-5,"_502":608,"_27":609},{"_44":417,"_32":418,"_30":419,"_171":-5,"_42":43,"_41":420,"_173":125,"_39":604,"_13":192,"_34":35,"_36":422,"_24":25,"_177":-5,"_502":605,"_27":606},{"_44":410,"_32":411,"_30":412,"_171":-5,"_42":43,"_41":413,"_173":125,"_39":601,"_13":224,"_34":35,"_36":415,"_24":25,"_177":-5,"_502":602,"_27":603},{"_44":402,"_32":403,"_30":404,"_171":-5,"_42":43,"_41":405,"_173":125,"_39":598,"_13":407,"_34":35,"_36":408,"_24":25,"_177":-5,"_502":599,"_27":600},{"_44":395,"_32":396,"_30":397,"_171":-5,"_42":43,"_41":398,"_173":125,"_39":595,"_13":63,"_34":35,"_36":400,"_24":25,"_177":-5,"_502":596,"_27":597},{"_44":388,"_32":389,"_30":390,"_171":-5,"_42":43,"_41":391,"_173":125,"_39":592,"_13":304,"_34":35,"_36":393,"_24":25,"_177":-5,"_502":593,"_27":594},{"_44":381,"_32":382,"_30":383,"_171":-5,"_42":43,"_41":384,"_173":125,"_39":589,"_13":200,"_34":35,"_36":386,"_24":25,"_177":-5,"_502":590,"_27":591},{"_44":374,"_32":375,"_30":376,"_171":-5,"_42":43,"_41":377,"_173":125,"_39":586,"_13":192,"_34":35,"_36":379,"_24":25,"_177":-5,"_502":587,"_27":588},{"_44":367,"_32":368,"_30":369,"_171":-5,"_42":43,"_41":370,"_173":125,"_39":583,"_13":216,"_34":35,"_36":372,"_24":25,"_177":-5,"_502":584,"_27":585},{"_44":360,"_32":361,"_30":362,"_171":-5,"_42":43,"_41":363,"_173":125,"_39":580,"_13":216,"_34":35,"_36":365,"_24":25,"_177":-5,"_502":581,"_27":582},{"_44":353,"_32":354,"_30":355,"_171":-5,"_42":43,"_41":356,"_173":125,"_39":577,"_13":175,"_34":35,"_36":358,"_24":25,"_177":-5,"_502":578,"_27":579},{"_44":346,"_32":347,"_30":348,"_171":-5,"_42":43,"_41":349,"_173":125,"_39":574,"_13":224,"_34":35,"_36":351,"_24":25,"_177":-5,"_502":575,"_27":576},{"_44":341,"_32":342,"_30":343,"_171":-5,"_42":43,"_41":175,"_173":125,"_39":571,"_13":224,"_34":35,"_36":339,"_24":25,"_177":-5,"_502":572,"_27":573},{"_44":334,"_32":335,"_30":336,"_171":-5,"_42":43,"_41":337,"_173":125,"_39":568,"_13":275,"_34":35,"_36":339,"_24":25,"_177":-5,"_502":569,"_27":570},{"_44":328,"_32":329,"_30":58,"_171":-5,"_42":43,"_41":330,"_173":125,"_39":565,"_13":224,"_34":35,"_36":332,"_24":25,"_177":-5,"_502":566,"_27":567},{"_44":321,"_32":322,"_30":323,"_171":-5,"_42":43,"_41":324,"_173":125,"_39":562,"_13":216,"_34":35,"_36":326,"_24":25,"_177":-5,"_502":563,"_27":564},{"_44":314,"_32":315,"_30":316,"_171":-5,"_42":43,"_41":317,"_173":125,"_39":559,"_13":224,"_34":35,"_36":319,"_24":25,"_177":-5,"_502":560,"_27":561},{"_44":307,"_32":308,"_30":309,"_171":-5,"_42":43,"_41":310,"_173":125,"_39":556,"_13":224,"_34":35,"_36":312,"_24":25,"_177":-5,"_502":557,"_27":558},{"_44":299,"_32":300,"_30":301,"_171":-5,"_42":43,"_41":302,"_173":125,"_39":553,"_13":304,"_34":35,"_36":305,"_24":25,"_177":-5,"_502":554,"_27":555},{"_44":292,"_32":293,"_30":294,"_171":-5,"_42":43,"_41":295,"_173":125,"_39":550,"_13":224,"_34":35,"_36":297,"_24":25,"_177":-5,"_502":551,"_27":552},{"_44":285,"_32":286,"_30":287,"_171":-5,"_42":43,"_41":288,"_173":125,"_39":547,"_13":216,"_34":35,"_36":290,"_24":25,"_177":-5,"_502":548,"_27":549},{"_44":278,"_32":279,"_30":280,"_171":-5,"_42":43,"_41":281,"_173":125,"_39":544,"_13":232,"_34":35,"_36":283,"_24":25,"_177":-5,"_502":545,"_27":546},{"_44":270,"_32":271,"_30":272,"_171":-5,"_42":43,"_41":273,"_173":125,"_39":541,"_13":275,"_34":35,"_36":276,"_24":25,"_177":-5,"_502":542,"_27":543},{"_44":263,"_32":264,"_30":265,"_171":-5,"_42":43,"_41":266,"_173":125,"_39":538,"_13":224,"_34":35,"_36":268,"_24":25,"_177":-5,"_502":539,"_27":540},{"_44":256,"_32":257,"_30":258,"_171":-5,"_42":43,"_41":259,"_173":125,"_39":535,"_13":200,"_34":35,"_36":261,"_24":25,"_177":-5,"_502":536,"_27":537},{"_44":249,"_32":250,"_30":251,"_171":-5,"_42":43,"_41":252,"_173":125,"_39":532,"_13":184,"_34":35,"_36":254,"_24":25,"_177":-5,"_502":533,"_27":534},{"_44":242,"_32":243,"_30":244,"_171":-5,"_42":43,"_41":245,"_173":125,"_39":529,"_13":63,"_34":35,"_36":247,"_24":25,"_177":-5,"_502":530,"_27":531},{"_44":235,"_32":236,"_30":237,"_171":-5,"_42":43,"_41":238,"_173":125,"_39":526,"_13":200,"_34":35,"_36":240,"_24":25,"_177":-5,"_502":527,"_27":528},{"_44":227,"_32":228,"_30":229,"_171":-5,"_42":43,"_41":230,"_173":125,"_39":523,"_13":232,"_34":35,"_36":233,"_24":25,"_177":-5,"_502":524,"_27":525},{"_44":219,"_32":220,"_30":221,"_171":-5,"_42":43,"_41":222,"_173":125,"_39":520,"_13":224,"_34":35,"_36":225,"_24":25,"_177":-5,"_502":521,"_27":522},{"_44":211,"_32":212,"_30":213,"_171":-5,"_42":43,"_41":214,"_173":125,"_39":517,"_13":216,"_34":35,"_36":217,"_24":25,"_177":-5,"_502":518,"_27":519},{"_44":203,"_32":204,"_30":205,"_171":-5,"_42":43,"_41":206,"_173":125,"_39":514,"_13":208,"_34":35,"_36":209,"_24":25,"_177":-5,"_502":515,"_27":516},{"_44":195,"_32":196,"_30":197,"_171":-5,"_42":43,"_41":198,"_173":125,"_39":511,"_13":200,"_34":35,"_36":201,"_24":25,"_177":-5,"_502":512,"_27":513},{"_44":187,"_32":188,"_30":189,"_171":-5,"_42":43,"_41":190,"_173":125,"_39":508,"_13":192,"_34":35,"_36":193,"_24":25,"_177":-5,"_502":509,"_27":510},{"_44":179,"_32":180,"_30":181,"_171":-5,"_42":43,"_41":182,"_173":125,"_39":505,"_13":184,"_34":35,"_36":185,"_24":25,"_177":-5,"_502":506,"_27":507},{"_44":168,"_32":169,"_30":170,"_171":-5,"_42":43,"_41":172,"_173":125,"_39":501,"_13":175,"_34":35,"_36":176,"_24":25,"_177":-5,"_502":503,"_27":504},["D",1780055932410],"children",[],[169],["D",1784284741296],[],[180],["D",1784284722251],[],[188],["D",1784544235309],[],[196],["D",1780920954441],[],[204],["D",1783945164859],[],[212],["D",1787250847785],[],[220],["D",1780085629696],[],[228],["D",1782499025250],[],[236],["D",1782498991828],[],[243],["D",1781870375796],[],[250],["D",1781870347128],[],[257],["D",1783857236190],[],[264],["D",1783858221881],[],[271],["D",1779646454305],[],[279],["D",1782500485465],[],[286],["D",1784663887637],[],[293],["D",1784637667486],[],[300],["D",1784637434026],[],[308],["D",1784293740578],[],[315],["D",1780688339092],[],[322],["D",1781118645231],[],[329],["D",1779300446748],[],[335],["D",1779300271932],[],[342],["D",1779473440824],[],[347],["D",1779455613548],[],[354],["D",1781374100672],[],[361],["D",1781441928237],[],[368],["D",1781263384100],[],[375],["D",1781372753937],[],[382],["D",1782495636163],[],[389],["D",1782302318829],[],[396],["D",1783244283696],[],[403],["D",1779647570879],[],[411],["D",1779647312657],[],[418],["D",1779279856359],[],[425],["D",1784111048120],[],[431],"4ca6cbc0-37bf-4638-adb9-0b40088d27fc","workspace-kv.ts","f86f86c8-a46a-11f1-b475-1607ee4eb77e",234,["D",1788091714079],"// valtown/webhooks/sync-workspace-to-kv.js\n\nimport { createClient } from \"https://esm.sh/@supabase/supabase-js@2.38.4\";\n\n/**\n * ValTown Webhook Handler\n * Syncs workspace data to Cloudflare KV when Supabase changes\n */\nexport default async function handler(req, res) {\n try {\n const { type, table, record, old_record } = req.body;\n\n console.log(`📥 Received webhook: ${type} on ${table}`);\n\n // ─── Handle different tables ───\n\n // If subscription changed, sync the workspace\n if (table === \"subscriptions\") {\n return await handleSubscriptionUpdate(req, res);\n }\n\n // If workspace changed, sync the workspace\n if (table === \"workspaces\") {\n return await handleWorkspaceUpdate(req, res);\n }\n\n // If plan changed, sync all workspaces with this plan\n if (table === \"plans\") {\n return await handlePlanUpdate(req, res);\n }\n\n return res.status(200).json({\n success: true,\n message: \"Ignoring non-workspace/subscription/plan event\",\n });\n } catch (error) {\n console.error(\"❌ ValTown webhook error:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n stack: error.stack,\n });\n }\n}\n\n// ──────────────────────────────────────────────────\n// HANDLE: Workspace Update\n// ──────────────────────────────────────────────────\nasync function handleWorkspaceUpdate(req, res) {\n try {\n const { type, table, record, old_record } = req.body;\n\n // Handle DELETE\n if (type === \"DELETE\") {\n await deleteWorkspaceFromKV(old_record.slug);\n return res.status(200).json({\n success: true,\n message: \"Workspace deleted from KV\",\n slug: old_record.slug,\n });\n }\n\n const workspaceId = record.id;\n\n // ─── Initialize Supabase with env vars ───\n const supabase = createClient(\n process.env.SUPABASEURL,\n process.env.SUPABASEKEY,\n );\n\n const { data: workspace, error } = await supabase\n .from(\"workspaces\")\n .select(`\n id,\n slug,\n storage_used_bytes,\n bandwidth_used,\n security_json,\n setting_json,\n is_active,\n deleted_at,\n subscriptions (\n plan_id,\n status,\n trial_ends_at,\n current_period_end,\n plans (\n name,\n max_storage_bytes,\n max_bandwidth_bytes\n )\n )\n `)\n .eq(\"id\", workspaceId)\n .single();\n\n if (error) {\n console.error(\"❌ Failed to fetch workspace:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n\n // Build and sync to KV\n const result = await syncWorkspaceToKV(workspace);\n\n return res.status(200).json({\n success: true,\n message: \"Workspace synced to KV\",\n slug: workspace.slug,\n kv_key: `ws_${workspace.slug}`,\n worker_response: result,\n });\n } catch (error) {\n console.error(\"❌ handleWorkspaceUpdate error:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n}\n\n// ──────────────────────────────────────────────────\n// HANDLE: Subscription Update\n// ──────────────────────────────────────────────────\nasync function handleSubscriptionUpdate(req, res) {\n try {\n const { type, record, old_record } = req.body;\n\n // Get workspace_id from subscription\n const workspaceId = record?.workspace_id || old_record?.workspace_id;\n\n if (!workspaceId) {\n return res.status(400).json({\n success: false,\n error: \"No workspace_id found in subscription\",\n });\n }\n\n // ─── Initialize Supabase with env vars ───\n const supabase = createClient(\n process.env.SUPABASEURL,\n process.env.SUPABASEKEY,\n );\n\n const { data: workspace, error } = await supabase\n .from(\"workspaces\")\n .select(`\n id,\n slug,\n storage_used_bytes,\n bandwidth_used,\n security_json,\n setting_json,\n is_active,\n deleted_at,\n subscriptions (\n plan_id,\n status,\n trial_ends_at,\n current_period_end,\n plans (\n name,\n max_storage_bytes,\n max_bandwidth_bytes\n )\n )\n `)\n .eq(\"id\", workspaceId)\n .single();\n\n if (error) {\n console.error(\n \"❌ Failed to fetch workspace for subscription update:\",\n error,\n );\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n\n // Check if subscription actually changed\n if (old_record) {\n const planChanged = old_record.plan_id !== record?.plan_id;\n const statusChanged = old_record.status !== record?.status;\n const trialChanged = old_record.trial_ends_at !== record?.trial_ends_at;\n\n if (!planChanged && !statusChanged && !trialChanged) {\n return res.status(200).json({\n success: true,\n message: \"No subscription changes detected, skipping KV sync\",\n });\n }\n }\n\n console.log(`🔄 Subscription changed for workspace: ${workspace.slug}`);\n console.log(` Plan: ${workspace.subscriptions?.[0]?.plan_id || \"free\"}`);\n console.log(\n ` Status: ${workspace.subscriptions?.[0]?.status || \"active\"}`,\n );\n\n // Build and sync to KV\n const result = await syncWorkspaceToKV(workspace);\n\n return res.status(200).json({\n success: true,\n message: \"Workspace KV updated from subscription change\",\n slug: workspace.slug,\n subscription: workspace.subscriptions?.[0],\n kv_key: `ws_${workspace.slug}`,\n worker_response: result,\n });\n } catch (error) {\n console.error(\"❌ handleSubscriptionUpdate error:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n}\n\n// ──────────────────────────────────────────────────\n// HANDLE: Plan Update\n// ──────────────────────────────────────────────────\nasync function handlePlanUpdate(req, res) {\n try {\n const { type, record, old_record } = req.body;\n\n // Check if plan limits changed\n const storageChanged =\n old_record?.max_storage_bytes !== record?.max_storage_bytes;\n const bandwidthChanged =\n old_record?.max_bandwidth_bytes !== record?.max_bandwidth_bytes;\n const nameChanged = old_record?.name !== record?.name;\n\n if (!storageChanged && !bandwidthChanged && !nameChanged) {\n return res.status(200).json({\n success: true,\n message: \"No plan changes detected, skipping KV sync\",\n });\n }\n\n const planId = record?.id || old_record?.id;\n\n // ─── Initialize Supabase with env vars ───\n const supabase = createClient(\n process.env.SUPABASEURL,\n process.env.SUPABASEKEY,\n );\n\n const { data: workspaces, error } = await supabase\n .from(\"workspaces\")\n .select(`\n id,\n slug,\n storage_used_bytes,\n bandwidth_used,\n security_json,\n setting_json,\n is_active,\n deleted_at,\n subscriptions (\n plan_id,\n status,\n trial_ends_at,\n current_period_end,\n plans (\n name,\n max_storage_bytes,\n max_bandwidth_bytes\n )\n )\n `)\n .eq(\"subscriptions.plan_id\", planId);\n\n if (error) {\n console.error(\"❌ Failed to fetch workspaces for plan update:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n\n console.log(`🔄 Plan updated: ${record?.name || \"Unknown\"}`);\n console.log(` Syncing ${workspaces?.length || 0} workspaces...`);\n\n // Sync all workspaces with this plan\n const results = [];\n for (const workspace of workspaces || []) {\n const result = await syncWorkspaceToKV(workspace);\n results.push({\n slug: workspace.slug,\n success: true,\n });\n }\n\n return res.status(200).json({\n success: true,\n message: `Synced ${results.length} workspaces to KV`,\n plan_id: planId,\n plan_name: record?.name || \"Unknown\",\n workspaces_synced: results,\n });\n } catch (error) {\n console.error(\"❌ handlePlanUpdate error:\", error);\n return res.status(500).json({\n success: false,\n error: error.message,\n });\n }\n}\n\n// ──────────────────────────────────────────────────\n// HELPER: Sync Workspace to KV\n// ──────────────────────────────────────────────────\nasync function syncWorkspaceToKV(workspace) {\n const kvPayload = buildWorkspaceKVPayload(workspace);\n const kvKey = `ws_${workspace.slug}`;\n\n const workerUrl = process.env.CLOUDFLARE_WORKER_URL;\n\n if (!workerUrl) {\n throw new Error(\"CLOUDFLARE_WORKER_URL environment variable not set\");\n }\n\n const response = await fetch(`${workerUrl}/sync/workspace`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${process.env.CLOUDFLARE_API_TOKEN}`,\n },\n body: JSON.stringify({\n key: kvKey,\n value: kvPayload,\n operation: \"sync\",\n }),\n });\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(`Worker returned ${response.status}: ${errorText}`);\n }\n\n const result = await response.json();\n\n console.log(`✅ Workspace synced to KV: ${workspace.slug}`);\n return result;\n}\n\n// ──────────────────────────────────────────────────\n// HELPER: Delete Workspace from KV\n// ──────────────────────────────────────────────────\nasync function deleteWorkspaceFromKV(slug) {\n const workerUrl = process.env.CLOUDFLARE_WORKER_URL;\n\n if (!workerUrl) {\n throw new Error(\"CLOUDFLARE_WORKER_URL environment variable not set\");\n }\n\n const response = await fetch(`${workerUrl}/sync/workspace`, {\n method: \"DELETE\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${process.env.CLOUDFLARE_API_TOKEN}`,\n },\n body: JSON.stringify({\n key: `ws_${slug}`,\n operation: \"delete\",\n }),\n });\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(`Worker returned ${response.status}: ${errorText}`);\n }\n\n console.log(`🗑️ Workspace deleted from KV: ${slug}`);\n return await response.json();\n}\n\n// ──────────────────────────────────────────────────\n// HELPER: Build KV Payload\n// ──────────────────────────────────────────────────\nfunction buildWorkspaceKVPayload(workspace) {\n const subscription = workspace.subscriptions?.[0] || null;\n const plan = subscription?.plans || null;\n\n return {\n // ─── Storage & Usage ───\n storage_used_bytes: workspace.storage_used_bytes || 0,\n bandwidth_used: workspace.bandwidth_used || 0,\n\n // ─── Security ───\n security: {\n geo_blocking: workspace.security_json?.geo_blocking || [],\n allowed_domains: workspace.security_json?.allowed_domains || [],\n hotlink_protection:\n workspace.security_json?.hotlink_protection !== undefined\n ? workspace.security_json.hotlink_protection\n : true,\n signed_url_enabled: workspace.security_json?.signed_url_enabled || false,\n },\n\n // ─── Settings ───\n settings: {\n player: workspace.setting_json?.player || {\n color: \"#534AB7\",\n watermark: {\n enabled: false,\n position: \"bottom-right\",\n },\n background_color: \"#000000\",\n },\n },\n\n // ─── Subscription ───\n subscription: {\n plan_id: subscription?.plan_id || \"free\",\n plan_name: plan?.name || \"Free\",\n status: subscription?.status || \"active\",\n trial_ends_at: subscription?.trial_ends_at || null,\n current_period_end: subscription?.current_period_end || null,\n limits: {\n max_storage_bytes: plan?.max_storage_bytes || 1073741824, // 1GB\n max_bandwidth_bytes: plan?.max_bandwidth_bytes || 10737418240, // 10GB\n },\n },\n\n // ─── Workspace Status ───\n is_active: workspace.is_active !== false,\n deleted_at: workspace.deleted_at || null,\n\n // ─── Cache Control ───\n _cache_ttl: 3600, // 1 hour\n _cached_at: new Date().toISOString(),\n _version: \"1.0\",\n };\n}",[],[438,614],"7bca9ede-a49d-4392-bd45-98099723d129","subscription-lemon-to-superbase.ts","5b7009c0-a216-11f1-8af5-1607ee4eb77e",229,["D",1787835382888],"import { createClient } from \"npm:@supabase/supabase-js\";\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl\")!,\n Deno.env.get(\"superbasesecretkey\")!,\n);\n\nasync function verifySignature(\n rawBody: string,\n signature: string,\n secret: string,\n): Promise {\n try {\n const hmac = createHmac(\"sha256\", secret);\n const digest = hmac.update(rawBody).digest(\"hex\");\n\n if (signature.length !== digest.length) return false;\n\n return timingSafeEqual(\n Buffer.from(digest, \"hex\"),\n Buffer.from(signature, \"hex\"),\n );\n } catch (err) {\n console.error(\"❌ Signature error:\", err.message);\n return false;\n }\n}\n\nexport default async function (req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Signature\",\n };\n\n if (req.method === \"GET\") {\n return new Response(\"Webhook Active\", { status: 200, headers: cors });\n }\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n try {\n const rawBody = await req.text();\n const signature = req.headers.get(\"X-Signature\") ?? \"\";\n const secret = Deno.env.get(\"lemonsqueezewebhooksecret\") ?? \"\";\n\n console.log(\"─────────────────────────────────\");\n console.log(\"📨 Received webhook\");\n console.log(\"📝 Signature:\", signature ? \"present\" : \"missing\");\n console.log(\"🔑 Secret:\", secret ? \"set\" : \"MISSING!\");\n\n // ── Verify signature ───────────────────────────────────\n const valid = await verifySignature(rawBody, signature, secret);\n\n if (!valid) {\n console.error(\"❌ Invalid signature\");\n return new Response(\"Invalid signature\", { status: 401, headers: cors });\n }\n\n console.log(\"✅ Signature verified\");\n\n // Parse JSON\n let payload: any = {};\n try {\n payload = JSON.parse(rawBody);\n } catch (e) {\n console.error(\"❌ Failed to parse JSON:\", e.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n const eventName = payload.meta?.event_name;\n const customData = payload.meta?.custom_data;\n const data = payload.data?.attributes;\n const lsId = String(payload.data?.id ?? \"\");\n\n console.log(\"🍋 Event:\", eventName);\n console.log(\"📦 Custom data:\", JSON.stringify(customData));\n console.log(\"🔍 variant_id:\", data?.variant_id);\n console.log(\"🔍 status:\", data?.status);\n console.log(\"🔍 lsId:\", lsId);\n\n if (!data || !eventName) {\n console.warn(\"⚠️ No data or event — skipping\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n // ── Step 1: Resolve workspace_id ──────────────────────\n let workspaceId: string | null = customData?.workspace_id ?? null;\n let workspaceSlug: string | null = customData?.workspace_slug ?? null;\n\n // If we have workspace_slug but not workspace_id, get workspace_id from slug\n if (!workspaceId && workspaceSlug) {\n console.log(\"🔍 Looking up workspace by slug:\", workspaceSlug);\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug\")\n .eq(\"slug\", workspaceSlug)\n .maybeSingle();\n\n console.log(\"🔍 Workspace by slug:\", JSON.stringify(ws));\n console.log(\"🔍 Error:\", wsErr?.message ?? \"none\");\n\n if (ws) {\n workspaceId = ws.id;\n workspaceSlug = ws.slug;\n }\n }\n\n // If we have workspace_id but not workspace_slug, get workspace_slug from id\n if (workspaceId && !workspaceSlug) {\n console.log(\"🔍 Looking up workspace by id:\", workspaceId);\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug\")\n .eq(\"id\", workspaceId)\n .maybeSingle();\n\n console.log(\"🔍 Workspace by id:\", JSON.stringify(ws));\n console.log(\"🔍 Error:\", wsErr?.message ?? \"none\");\n\n if (ws) {\n workspaceId = ws.id;\n workspaceSlug = ws.slug;\n }\n }\n\n // If still no workspace, try by email\n if (!workspaceId) {\n const email = data.user_email || data.customer_email;\n console.log(\"⚠️ No workspace_id or slug, trying email:\", email);\n\n if (email) {\n const { data: user, error: userErr } = await supabase\n .from(\"profiles\")\n .select(\"id\")\n .eq(\"email\", email)\n .maybeSingle();\n\n console.log(\"🔍 User by email:\", JSON.stringify(user));\n console.log(\"🔍 User error:\", userErr?.message ?? \"none\");\n\n if (user) {\n const { data: ws, error: wsErr } = await supabase\n .from(\"workspaces\")\n .select(\"id, slug\")\n .eq(\"owner_id\", user.id)\n .maybeSingle();\n\n console.log(\"🔍 Workspace by owner_id:\", JSON.stringify(ws));\n console.log(\"🔍 Error:\", wsErr?.message ?? \"none\");\n\n if (ws) {\n workspaceId = ws.id;\n workspaceSlug = ws.slug;\n }\n }\n }\n }\n\n if (!workspaceId) {\n console.error(\"❌ Could not resolve workspace_id — aborting\");\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"✅ workspace_id:\", workspaceId);\n console.log(\"✅ workspace_slug:\", workspaceSlug);\n\n // ── Step 2: Check if subscription exists ──────────────\n const { data: existingRow, error: findErr } = await supabase\n .from(\"subscriptions\")\n .select(\"id, workspace_id, status\")\n .eq(\"workspace_id\", workspaceId)\n .maybeSingle();\n\n console.log(\"🔍 Existing row:\", JSON.stringify(existingRow));\n console.log(\"🔍 Find error:\", findErr?.message ?? \"none\");\n\n // ── Step 3: Build update/insert data ───────────────────\n const variantId = String(data.variant_id ?? \"\");\n const variantIdExists = variantId && variantId !== \"null\" && variantId !== \"undefined\";\n \n let updateData: any = {\n updated_at: new Date().toISOString(),\n };\n\n // Only set workspace_id and workspace_slug if we're inserting\n if (!existingRow) {\n updateData.workspace_id = workspaceId;\n updateData.workspace_slug = workspaceSlug;\n updateData.created_at = new Date().toISOString();\n }\n\n switch (eventName) {\n case \"subscription_created\":\n case \"subscription_updated\":\n case \"subscription_resumed\":\n case \"subscription_unpaused\":\n Object.assign(updateData, {\n ls_subscription_id: lsId || null,\n ls_customer_id: data.customer_id ? String(data.customer_id) : null,\n ls_order_id: data.order_id ? String(data.order_id) : null,\n ls_variant_id: variantIdExists ? variantId : null,\n subscription_plan: variantIdExists ? variantId : null,\n status: data.status ?? \"active\",\n cancelled: data.cancelled ?? false,\n pause: data.pause ?? null,\n billing_anchor: data.billing_anchor ?? 1,\n reset_day: data.billing_anchor ?? 1,\n card_brand: data.card_brand ?? null,\n card_last_four: data.card_last_four ?? null,\n trial_ends_at: data.trial_ends_at ?? null,\n renews_at: data.renews_at ?? null,\n ends_at: data.ends_at ?? null,\n url_update_payment: data.urls?.update_payment_method ?? null,\n url_customer_portal: data.urls?.customer_portal ?? null,\n url_update_subscription: data.urls?.update_subscription ?? null,\n test_mode: data.test_mode ?? false,\n });\n break;\n\n case \"subscription_cancelled\":\n Object.assign(updateData, {\n status: \"canceled\",\n cancelled: true,\n ends_at: data.ends_at ?? null,\n });\n break;\n\n case \"subscription_expired\": {\n // Get free plan variant\n const { data: freePlan } = await supabase\n .from(\"plans\")\n .select(\"ls_variant_id\")\n .ilike(\"name\", \"free\")\n .maybeSingle();\n\n Object.assign(updateData, {\n status: \"expired\",\n subscription_plan: freePlan?.ls_variant_id ?? null,\n ls_subscription_id: null,\n ls_variant_id: null,\n cancelled: true,\n ends_at: new Date().toISOString(),\n });\n break;\n }\n\n case \"subscription_paused\":\n Object.assign(updateData, {\n status: \"paused\",\n pause: data.pause ?? null,\n });\n break;\n\n case \"subscription_payment_failed\":\n Object.assign(updateData, {\n status: \"past_due\",\n });\n break;\n\n case \"subscription_payment_success\":\n case \"subscription_payment_recovered\":\n Object.assign(updateData, {\n status: \"active\",\n cancelled: false,\n });\n break;\n\n default:\n console.log(\"ℹ️ Unhandled event:\", eventName);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n\n console.log(\"📝 updateData:\", JSON.stringify(updateData));\n\n // ── Step 4: UPSERT (Insert or Update) ──────────────────\n let result;\n \n if (existingRow) {\n // Update existing row\n result = await supabase\n .from(\"subscriptions\")\n .update(updateData)\n .eq(\"workspace_id\", workspaceId)\n .select();\n } else {\n // Insert new row\n // Set required fields for insert\n updateData.workspace_id = workspaceId;\n updateData.workspace_slug = workspaceSlug;\n updateData.created_at = updateData.created_at || new Date().toISOString();\n \n result = await supabase\n .from(\"subscriptions\")\n .insert(updateData)\n .select();\n }\n\n console.log(\"✅ Result:\", JSON.stringify(result.data));\n console.log(\"❌ Error:\", result.error?.message ?? \"none\");\n\n if (result.error) {\n console.error(\"❌ Operation failed:\", result.error.message);\n } else if (!result.data || result.data.length === 0) {\n console.warn(\"⚠️ No rows affected for workspace_id:\", workspaceId);\n } else {\n console.log(\"✓ Row updated:\", result.data[0]?.id);\n }\n\n console.log(\"─────────────────────────────────\");\n return new Response(\"OK\", { status: 200, headers: cors });\n } catch (err: any) {\n console.error(\"❌ Critical error:\", err.message);\n return new Response(\"OK\", { status: 200, headers: cors });\n }\n}",[],[438,622],"b7a31522-995a-4e5e-b15e-9b3f5d332362","cloudfare-partial_workspace.ts","37c2e0bc-a534-11f1-866e-1607ee4eb77e",258,["D",1788343817381],18,"// valtown/webhooks/update-workspace.js\n\n// ─── Helper: Parse Request Body ───\nasync function parseRequestBody(req) {\n try {\n const rawBody = await req.text();\n if (!rawBody) return null;\n return JSON.parse(rawBody);\n } catch (error) {\n console.error(\"❌ Failed to parse body:\", error);\n return null;\n }\n}\n\n// ─── Helper: Deep Merge ───\nfunction deepMerge(target, source) {\n const result = { ...target };\n for (const key in source) {\n if (\n source[key] && typeof source[key] === \"object\" &&\n !Array.isArray(source[key])\n ) {\n result[key] = deepMerge(result[key] || {}, source[key]);\n } else {\n result[key] = source[key];\n }\n }\n return result;\n}\n\n// ─── Helper: Write to KV ───\nasync function writeToKV(key, value) {\n console.log(`📝 Writing to KV: ${key}`);\n\n const cfAccount = \"82c86be30efad29c394342733030f7bd\";\n const cfNamespace = \"00e8ebebe717435a99d6e5d7e9e0420d\";\n const cfToken = \"cfat_9YeZhx2UEhxzEPHzN08e61rGiN3Zdxz72hTyzn2baaeb6cf1\";\n\n const url =\n `https://api.cloudflare.com/client/v4/accounts/${cfAccount}/storage/kv/namespaces/${cfNamespace}/values/${key}`;\n\n const response = await fetch(url, {\n method: \"PUT\",\n headers: {\n \"Authorization\": `Bearer ${cfToken}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(value, null, 2),\n });\n\n if (!response.ok) {\n throw new Error(`KV write failed: ${response.status}`);\n }\n\n console.log(`✅ KV write successful: ${key}`);\n return response.json();\n}\n\n// ─── Helper: Get from KV ───\nasync function getFromKV(key) {\n console.log(`📖 Reading from KV: ${key}`);\n\n const cfAccount = \"82c86be30efad29c394342733030f7bd\";\n const cfNamespace = \"00e8ebebe717435a99d6e5d7e9e0420d\";\n const cfToken = \"cfat_9YeZhx2UEhxzEPHzN08e61rGiN3Zdxz72hTyzn2baaeb6cf1\";\n\n const url =\n `https://api.cloudflare.com/client/v4/accounts/${cfAccount}/storage/kv/namespaces/${cfNamespace}/values/${key}`;\n\n try {\n const response = await fetch(url, {\n headers: { \"Authorization\": `Bearer ${cfToken}` },\n });\n\n if (!response.ok) {\n console.log(`⚠️ KV read failed (${response.status}): ${key}`);\n return null;\n }\n\n return await response.json();\n } catch (error) {\n console.error(`❌ KV read error:`, error);\n return null;\n }\n}\n\n// ─── Helper: Delete from KV ───\nasync function deleteFromKV(key) {\n console.log(`🗑️ Deleting from KV: ${key}`);\n\n const cfAccount = \"82c86be30efad29c394342733030f7bd\";\n const cfNamespace = \"00e8ebebe717435a99d6e5d7e9e0420d\";\n const cfToken = \"cfat_9YeZhx2UEhxzEPHzN08e61rGiN3Zdxz72hTyzn2baaeb6cf1\";\n\n const url =\n `https://api.cloudflare.com/client/v4/accounts/${cfAccount}/storage/kv/namespaces/${cfNamespace}/values/${key}`;\n\n const response = await fetch(url, {\n method: \"DELETE\",\n headers: { \"Authorization\": `Bearer ${cfToken}` },\n });\n\n if (!response.ok) {\n console.error(`❌ KV delete failed: ${response.status}`);\n return false;\n }\n\n console.log(`✅ KV delete successful: ${key}`);\n return true;\n}\n\n// ─── Helper: Build Workspace Key ───\nfunction buildWorkspaceKey(slug) {\n const cleanSlug = slug.replace(/^workspace:/, \"\").replace(/^ws_/, \"\");\n return `workspace:ws_${cleanSlug}`;\n}\n\n// ─── Helper: Build Workspace Payload ───\nfunction buildWorkspacePayload(workspace) {\n // Get subscription and plan data\n const subscription = workspace.subscriptions?.[0] || null;\n const plan = subscription?.plans || null;\n\n return {\n storage_used_bytes: workspace.storage_used_bytes || 0,\n bandwidth_used: workspace.bandwidth_used || 0,\n security: workspace.security_json || {\n geo_blocking: [],\n allowed_domains: [],\n hotlink_protection: true,\n signed_url_enabled: false,\n },\n settings: workspace.setting_json || {\n player: {\n color: \"#534AB7\",\n watermark: { enabled: false, position: \"bottom-right\" },\n background_color: \"#000000\",\n },\n },\n plan: {\n id: workspace.plan_id || null,\n name: plan?.name || \"Free\",\n max_storage_bytes: plan?.max_storage_bytes || 1073741824,\n max_bandwidth_bytes: plan?.max_bandwidth_bytes || 10737418240,\n features: plan?.features || {},\n status: subscription?.status || \"active\",\n trial_ends_at: workspace.trial_ends_at || null,\n },\n is_active: workspace.is_active !== false,\n deleted_at: workspace.deleted_at || null,\n _cache_ttl: 3600,\n _cached_at: new Date().toISOString(),\n _version: \"1.0\",\n };\n}\n\n// ─── Handle Workspace Webhook ───\nasync function handleWorkspaceWebhook(body) {\n const { type, record } = body;\n\n console.log(`📥 Workspace: ${type} - ${record.slug}`);\n\n if (type === \"DELETE\") {\n const kvKey = buildWorkspaceKey(record.slug);\n await deleteFromKV(kvKey);\n return {\n success: true,\n message: \"Workspace deleted from KV\",\n workspace: record.slug,\n kv_key: kvKey,\n };\n }\n\n const kvKey = buildWorkspaceKey(record.slug);\n const payload = buildWorkspacePayload(record);\n await writeToKV(kvKey, payload);\n\n return {\n success: true,\n message: \"Workspace synced to KV\",\n workspace: record.slug,\n kv_key: kvKey,\n };\n}\n\n// ─── NEW: Handle Subscription Webhook ───\nasync function handleSubscriptionWebhook(body) {\n const { type, record, workspace_slug } = body;\n\n console.log(`📥 Subscription: ${type} for workspace: ${workspace_slug}`);\n\n // ─── For DELETE ───\n if (type === \"DELETE\") {\n const kvKey = buildWorkspaceKey(workspace_slug);\n\n // Get current data from KV\n const currentData = await getFromKV(kvKey);\n\n if (currentData) {\n // Update plan status to inactive\n currentData.plan.status = \"inactive\";\n currentData.plan.name = \"None\";\n currentData._cached_at = new Date().toISOString();\n\n await writeToKV(kvKey, currentData);\n console.log(\n `✅ Workspace KV updated for subscription deletion: ${workspace_slug}`,\n );\n }\n\n return {\n success: true,\n message: \"Workspace KV updated for subscription deletion\",\n workspace: workspace_slug,\n };\n }\n\n // ─── For INSERT or UPDATE, fetch full workspace data ───\n const supabase = createClient(\n process.env.SUPABASE_URL,\n process.env.SUPABASE_KEY,\n );\n\n // Get workspace ID from subscription record\n const workspaceId = record.workspace_id;\n\n // Fetch full workspace with subscription and plan\n const { data: workspace, error } = await supabase\n .from(\"workspaces\")\n .select(`\n *,\n subscriptions (\n plan_id,\n status,\n trial_ends_at,\n cancelled,\n ends_at,\n plans (\n name,\n max_storage_bytes,\n max_bandwidth_bytes,\n features\n )\n )\n `)\n .eq(\"id\", workspaceId)\n .single();\n\n if (error) {\n console.error(\"❌ Supabase error:\", error);\n return {\n success: false,\n error: error.message,\n };\n }\n\n // ─── Build and write to KV ───\n const kvKey = buildWorkspaceKey(workspace.slug);\n const payload = buildWorkspacePayload(workspace);\n\n await writeToKV(kvKey, payload);\n\n console.log(`✅ Workspace KV updated from subscription: ${workspace.slug}`);\n console.log(\n ` Plan: ${workspace.subscriptions?.[0]?.plans?.name || \"Free\"}`,\n );\n console.log(` Status: ${workspace.subscriptions?.[0]?.status || \"active\"}`);\n\n return {\n success: true,\n message: \"Workspace KV updated from subscription change\",\n workspace: workspace.slug,\n plan: workspace.subscriptions?.[0]?.plans?.name || \"Free\",\n status: workspace.subscriptions?.[0]?.status || \"active\",\n };\n}\n\n// ─── Handle Manual Partial Update ───\nasync function handlePartialUpdate(body) {\n const { type, target, updates } = body;\n\n console.log(`📝 Partial Update: ${type} - ${target}`);\n console.log(`📦 Updates:`, JSON.stringify(updates, null, 2));\n\n let kvKey;\n\n if (type === \"workspace\") {\n kvKey = buildWorkspaceKey(target);\n } else if (type === \"video\") {\n const cleanUuid = target.replace(/^video:/, \"\");\n kvKey = `video:${cleanUuid}`;\n } else {\n return {\n success: false,\n error: `Invalid type: ${type}. Use 'workspace' or 'video'`,\n };\n }\n\n console.log(`🔑 KV Key: ${kvKey}`);\n\n const currentData = await getFromKV(kvKey);\n\n if (!currentData) {\n return {\n success: false,\n error: `Not found in KV: ${kvKey}`,\n kv_key: kvKey,\n };\n }\n\n const merged = deepMerge(currentData, updates);\n merged._cached_at = new Date().toISOString();\n\n await writeToKV(kvKey, merged);\n\n return {\n success: true,\n message: \"Partial update successful\",\n type: type,\n target: target,\n kv_key: kvKey,\n updated_fields: Object.keys(updates),\n };\n}\n\n// ─── MAIN HANDLER (DEFAULT EXPORT) ───\nexport default async function handler(req) {\n try {\n console.log(\"═══════════════════════════════════════════════\");\n console.log(\"📥 INCOMING REQUEST\");\n console.log(\"═══════════════════════════════════════════════\");\n console.log(\"🌐 URL:\", req.url);\n console.log(\"🔑 Method:\", req.method);\n\n const body = await parseRequestBody(req);\n\n if (!body) {\n return new Response(\n JSON.stringify({ success: false, error: \"No request body found\" }),\n { status: 400, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n\n console.log(\"📦 Parsed Body:\", JSON.stringify(body, null, 2));\n console.log(\"───────────────────────────────────────────────\");\n\n let result;\n\n // ─── Case 1: Workspace Webhook ───\n if (body.table === \"workspaces\") {\n result = await handleWorkspaceWebhook(body);\n console.log(\"✅ Workspace webhook processed successfully\");\n } // ─── Case 2: Subscription Webhook (NEW) ───\n else if (body.table === \"subscriptions\") {\n result = await handleSubscriptionWebhook(body);\n console.log(\"✅ Subscription webhook processed successfully\");\n } // ─── Case 3: Manual Partial Update ───\n else if (body.type && body.target && body.updates) {\n result = await handlePartialUpdate(body);\n console.log(\"✅ Partial update processed successfully\");\n } // ─── Case 4: Unknown format ───\n else {\n result = {\n success: false,\n error: \"Unknown request format\",\n received: body,\n expected: {\n workspace: {\n table: \"workspaces\",\n type: \"INSERT/UPDATE/DELETE\",\n record: {},\n },\n subscription: {\n table: \"subscriptions\",\n type: \"INSERT/UPDATE/DELETE\",\n record: {},\n },\n partial_update: {\n type: \"workspace/video\",\n target: \"slug/uuid\",\n updates: {},\n },\n },\n };\n }\n\n const statusCode = result.success ? 200 : 400;\n\n return new Response(\n JSON.stringify(result),\n {\n status: statusCode,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n } catch (error) {\n console.error(\"❌ ValTown error:\", error);\n\n return new Response(\n JSON.stringify({\n success: false,\n error: error.message,\n stack: error.stack,\n }),\n {\n status: 500,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n}",[],[438,630],"9c4bfd28-697f-4eac-bcb5-0cbb81e1ba49","cloudfare-partial_video.ts","7f06da1a-a565-11f1-ac13-1607ee4eb77e",253,["D",1788199815591],"// valtown/webhooks/sync-video.js\n\n// ─── Helper: Build Video Payload ───\nfunction buildVideoPayload(video) {\n const cdnDomain = \"https://cdn.videoframe.fyi\";\n const workspaceSlug = video.workspaces?.slug || \"unknown\";\n\n return {\n // ─── Core Identifiers ───\n video_uuid: video.video_uuid,\n workspace_id: video.workspace_id,\n workspace_slug: workspaceSlug,\n folder_id: video.folder_id || null,\n created_by: video.created_by || null,\n\n // ─── Content ───\n title: video.title || null,\n slug: video.slug || null,\n seo_title: video.seo_title || null,\n seo_description: video.seo_description || null,\n\n // ─── URLs ───\n urls: {\n video_url: video.video_url || null,\n mp4: video.r2_object_key ? `${cdnDomain}/${video.r2_object_key}` : null,\n hls: video.hls_object_key ? `${cdnDomain}/${video.hls_object_key}` : null,\n thumbnail: video.thumbnail_url ||\n (video.r2_object_key\n ? `${cdnDomain}/thumbnails/${\n video.r2_object_key.replace(\".mp4\", \".jpg\")\n }`\n : null),\n poster: video.r2_object_key\n ? `${cdnDomain}/posters/${video.r2_object_key.replace(\".mp4\", \".jpg\")}`\n : null,\n transparent_webm: video.transparent_webm_object_key\n ? `${cdnDomain}/${video.transparent_webm_object_key}`\n : null,\n transparent_mov: video.transparent_mov_object_key\n ? `${cdnDomain}/${video.transparent_mov_object_key}`\n : null,\n embed: `${cdnDomain}/${workspaceSlug}/${video.video_uuid}/embed`,\n watch: `${cdnDomain}/${workspaceSlug}/${video.video_uuid}`,\n },\n\n // ─── Media Metadata ───\n duration: video.duration ? parseFloat(video.duration) : null,\n width: video.width || null,\n height: video.height || null,\n bitrate: video.bitrate || null,\n mime_type: video.mime_type || null,\n codec: video.codec || null,\n file_size: video.file_size || null,\n transcoded_size: video.transcoded_size || null,\n\n // ─── Captions ───\n captions: video.captions || null,\n\n // ─── Player Config ───\n player_config: video.player_config || {\n player: {\n loop: false,\n color: \"#ffffff\",\n muted: false,\n autoplay: false,\n bg_color: \"#000000\",\n },\n controls: {\n show_play: true,\n show_speed: false,\n show_volume: true,\n show_controls: true,\n show_progress: true,\n show_fullscreen: true,\n },\n security: {\n password: null,\n geo_block: [],\n allowed_domains: [],\n },\n },\n\n // ─── Visibility ───\n visibility: video.visibility || \"private\",\n\n // ─── Timestamps ───\n created_at: video.created_at,\n updated_at: video.updated_at,\n deleted_at: video.deleted_at || null,\n\n // ─── Cache Control ───\n _cache_ttl: 86400,\n _cached_at: new Date().toISOString(),\n _version: \"1.0\",\n };\n}\n\n// ─── Helper: Deep Merge ───\nfunction deepMerge(target, source) {\n const result = { ...target };\n\n for (const key in source) {\n if (\n source[key] && typeof source[key] === \"object\" &&\n !Array.isArray(source[key])\n ) {\n result[key] = deepMerge(result[key] || {}, source[key]);\n } else {\n result[key] = source[key];\n }\n }\n\n return result;\n}\n\n// ─── Helper: Write to KV ───\nasync function writeToKV(key, value) {\n console.log(`📝 Writing to KV: ${key}`);\n\n const cfAccount = \"82c86be30efad29c394342733030f7bd\";\n const cfNamespace = \"00e8ebebe717435a99d6e5d7e9e0420d\";\n const cfToken = \"cfat_9YeZhx2UEhxzEPHzN08e61rGiN3Zdxz72hTyzn2baaeb6cf1\";\n\n const url =\n `https://api.cloudflare.com/client/v4/accounts/${cfAccount}/storage/kv/namespaces/${cfNamespace}/values/${key}`;\n\n // ✅ Preserve formatting with 2 spaces indentation\n const jsonString = JSON.stringify(value, null, 2);\n\n const response = await fetch(url, {\n method: \"PUT\",\n headers: {\n \"Authorization\": `Bearer ${cfToken}`,\n \"Content-Type\": \"application/json\",\n },\n body: jsonString,\n });\n\n if (!response.ok) {\n console.error(`❌ KV write failed: ${response.status}`);\n throw new Error(`KV write failed: ${response.status}`);\n }\n\n console.log(`✅ KV write successful: ${key}`);\n return response.json();\n}\n\n// ─── Helper: Get from KV ───\nasync function getFromKV(key) {\n console.log(`📖 Reading from KV: ${key}`);\n\n const cfAccount = \"82c86be30efad29c394342733030f7bd\";\n const cfNamespace = \"00e8ebebe717435a99d6e5d7e9e0420d\";\n const cfToken = \"cfat_9YeZhx2UEhxzEPHzN08e61rGiN3Zdxz72hTyzn2baaeb6cf1\";\n\n const url =\n `https://api.cloudflare.com/client/v4/accounts/${cfAccount}/storage/kv/namespaces/${cfNamespace}/values/${key}`;\n\n try {\n const response = await fetch(url, {\n headers: {\n \"Authorization\": `Bearer ${cfToken}`,\n },\n });\n\n if (!response.ok) {\n console.log(`⚠️ KV read failed (${response.status}): ${key}`);\n return null;\n }\n\n const rawData = await response.text();\n const data = JSON.parse(rawData);\n console.log(`✅ KV read successful: ${key}`);\n return data;\n } catch (error) {\n console.error(`❌ KV read error:`, error);\n return null;\n }\n}\n\n// ─── Helper: Delete from KV ───\nasync function deleteFromKV(key) {\n console.log(`🗑️ Deleting from KV: ${key}`);\n\n const cfAccount = \"82c86be30efad29c394342733030f7bd\";\n const cfNamespace = \"00e8ebebe717435a99d6e5d7e9e0420d\";\n const cfToken = \"cfat_9YeZhx2UEhxzEPHzN08e61rGiN3Zdxz72hTyzn2baaeb6cf1\";\n\n const url =\n `https://api.cloudflare.com/client/v4/accounts/${cfAccount}/storage/kv/namespaces/${cfNamespace}/values/${key}`;\n\n const response = await fetch(url, {\n method: \"DELETE\",\n headers: {\n \"Authorization\": `Bearer ${cfToken}`,\n },\n });\n\n if (!response.ok) {\n console.error(`❌ KV delete failed: ${response.status}`);\n return false;\n }\n\n console.log(`✅ KV delete successful: ${key}`);\n return true;\n}\n\n// ─── Main Handler ───\nexport default async function handler(req) {\n try {\n console.log(\"═══════════════════════════════════════════════\");\n console.log(\"📥 INCOMING VIDEO REQUEST\");\n console.log(\"═══════════════════════════════════════════════\");\n console.log(\"🌐 URL:\", req.url);\n console.log(\"🔑 Method:\", req.method);\n\n // ─── Parse body ───\n const rawBody = await req.text();\n console.log(`📄 Raw Body: ${rawBody}`);\n\n const body = JSON.parse(rawBody);\n console.log(\"📦 Parsed Body:\", JSON.stringify(body, null, 2));\n console.log(\"───────────────────────────────────────────────\");\n\n // ─── Handle Partial Update ───\n if (body.type && body.target && body.updates) {\n return await handlePartialUpdate(body);\n }\n\n // ─── Handle Full Sync ───\n if (body.table === \"videos\") {\n return await handleFullSync(body);\n }\n\n return new Response(\n JSON.stringify({\n success: false,\n error: \"Unknown request format\",\n expected: {\n partial_update: { type: \"video\", target: \"uuid\", updates: {} },\n full_sync: { table: \"videos\", record: {} },\n },\n }),\n { status: 400, headers: { \"Content-Type\": \"application/json\" } },\n );\n } catch (error) {\n console.error(\"❌ ValTown error:\", error);\n return new Response(\n JSON.stringify({ success: false, error: error.message }),\n { status: 500, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n}\n\n// ─── Handle Partial Update ───\nasync function handlePartialUpdate(body) {\n const { type, target, updates } = body;\n\n console.log(`📝 Partial Update: ${type} - ${target}`);\n console.log(`📦 Updates:`, JSON.stringify(updates, null, 2));\n\n let kvKey;\n\n if (type === \"video\") {\n kvKey = `video:${target}`;\n } else {\n return new Response(\n JSON.stringify({\n success: false,\n error: `Invalid type: ${type}. Use 'video'`,\n }),\n { status: 400, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n\n console.log(`🔑 KV Key: ${kvKey}`);\n\n // ─── Get current data from KV ───\n const currentData = await getFromKV(kvKey);\n\n if (!currentData) {\n return new Response(\n JSON.stringify({ success: false, error: `Not found in KV: ${kvKey}` }),\n { status: 404, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n\n console.log(`📄 Current Data:`, JSON.stringify(currentData, null, 2));\n\n // ─── Apply updates ───\n const merged = deepMerge(currentData, updates);\n merged._cached_at = new Date().toISOString();\n\n console.log(`📄 Updated fields:`, Object.keys(updates));\n\n // ─── Write back to KV ───\n await writeToKV(kvKey, merged);\n\n const response = {\n success: true,\n message: \"Video partial update successful\",\n type: type,\n target: target,\n kv_key: kvKey,\n updated_fields: Object.keys(updates),\n };\n\n console.log(`✅ Update successful!`);\n console.log(\"═══════════════════════════════════════════════\");\n\n return new Response(\n JSON.stringify(response),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n}",[],[438,639],"c16218c7-0b9a-4fb5-ab8a-88610048e27a",["D",1789298042179],[],[438,33],"dd73ddfa-af21-4e7b-98bd-89555772dde3","api-2-url.ts","2a9deac6-aea3-11f1-91bd-1607ee4eb77e",278,["D",1789294545747],"// Learn more: https://docs.val.town/vals/http/\nexport default async function (req: Request): Promise {\n return Response.json({ ok: true })\n}",[],[438,651],"f1277ea1-5500-4a45-8a6e-d3b61307af9e","api-2-upload.ts","a0668072-af59-11f1-99fc-1607ee4eb77e",280,["D",1789297936198],"import { createClient } from \"npm:@supabase/supabase-js\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl2\"),\n Deno.env.get(\"superbasesecretkey2\"),\n);\n\nconst CORS_HEADERS = {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\n// ──────────────────────────────────────────────────────────────\n// HELPER: Sanitize filename\n// ──────────────────────────────────────────────────────────────\nfunction sanitizeFileName(name: string): string {\n return name\n .replace(/[^a-zA-Z0-9._-]/g, \"_\")\n .replace(/_+/g, \"_\")\n .replace(/^_+|_+$/g, \"\")\n .substring(0, 200);\n}\n\nexport default async function (req: Request) {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n try {\n const body = await req.json();\n console.log(\"📥 [upload-complete] Received:\", JSON.stringify(body));\n\n const {\n task_token,\n tus_id,\n workspace_id,\n workspace_slug,\n folder_id,\n file_size,\n file_name: providedFileName,\n user_id,\n transcode_settings,\n } = body;\n\n // ─── Validation ───\n if (!task_token) {\n return new Response(\n JSON.stringify({ error: \"task_token is required\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n if (!tus_id) {\n return new Response(\n JSON.stringify({ error: \"tus_id is required\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n if (!workspace_slug) {\n return new Response(\n JSON.stringify({ error: \"workspace_slug is required\" }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n const source = `tus:${tus_id}`;\n\n // ──────────────────────────────────────────────────────────\n // FILE NAME (THE NEW FIELD)\n // ──────────────────────────────────────────────────────────\n const rawFileName = providedFileName || `video_${Date.now()}`;\n const video_file_name = sanitizeFileName(rawFileName);\n\n console.log(\"📝 video_file_name:\", video_file_name);\n\n // ─── Transcode settings (with fallbacks) ───\n const max_height = transcode_settings?.max_height ?? 720;\n const crf = transcode_settings?.crf ?? 23;\n const preset = transcode_settings?.preset ?? \"medium\";\n const video_codec = transcode_settings?.video_codec ?? \"libx264\";\n const audio_codec = transcode_settings?.audio_codec ?? \"aac\";\n const audio_bitrate = transcode_settings?.audio_bitrate ?? \"128k\";\n\n console.log(\"🎬 Transcode settings:\", {\n max_height,\n crf,\n preset,\n video_codec,\n audio_codec,\n audio_bitrate,\n });\n\n // ──────────────────────────────────────────────────────────\n // CLOUDFLARE R2 DESTINATION\n // Path: {bucket_url}/{bucket_name}/{workspace_slug}/{file_name}\n // ──────────────────────────────────────────────────────────\n const cfAccountId = Deno.env.get(\"cloudfarer2url\")!; // 82c86be30efad29c394342733030f7bd\n const cfBucketName = Deno.env.get(\"cloudfarer2bucket\") || \"test\";\n const cfKey = Deno.env.get(\"cloudfarer2key\")!;\n const cfSecret = Deno.env.get(\"cloudfarer2secret\")!;\n\n // Build path: bucket_name/workspace_slug/file_name\n const r2ObjectKey =\n `${cfBucketName}/${workspace_slug}/${video_file_name}.mp4`;\n const r2FullUrl =\n `r2://${cfAccountId}.r2.cloudflarestorage.com/${r2ObjectKey}`;\n\n console.log(\"📁 R2 object key:\", r2ObjectKey);\n console.log(\"📁 R2 full URL:\", r2FullUrl);\n\n // ──────────────────────────────────────────────────────────\n // CREATE SUPABASE ROW\n // ──────────────────────────────────────────────────────────\n const insertData: any = {\n task_token,\n status: \"transcoding\",\n created_at: new Date().toISOString(),\n video_file_name: video_file_name, // ← NEW field\n title: video_file_name, // Display title\n };\n\n if (workspace_id) insertData.workspace_id = workspace_id;\n if (folder_id) insertData.folder_id = folder_id;\n if (file_size) insertData.file_size = file_size;\n\n const { data: video, error: dbError } = await supabase\n .from(\"videos\")\n .insert(insertData)\n .select()\n .single();\n\n if (dbError) {\n console.error(\"❌ Supabase error:\", dbError.message);\n return new Response(\n JSON.stringify({ error: dbError.message }),\n { status: 500, headers: CORS_HEADERS },\n );\n }\n console.log(\"✅ Supabase row created:\", video.id);\n\n // ──────────────────────────────────────────────────────────\n // QENCODE PAYLOAD (MP4 ONLY)\n // ──────────────────────────────────────────────────────────\n const queryPayload = {\n query: {\n source,\n callback_url:\n \"https://sahil8--ebc60f9aaf5b11f1aac81607ee4eb77e.web.val.run\",\n use_subtask_callback: 1,\n format: [\n {\n output: \"mp4\",\n video_codec: video_codec,\n audio_codec: audio_codec,\n audio_bitrate: parseInt(audio_bitrate, 10) || 128,\n size: `?x${max_height}`,\n crf: crf,\n preset: preset,\n destination: {\n url: r2FullUrl,\n key: cfKey,\n secret: cfSecret,\n },\n },\n ],\n },\n };\n\n console.log(\n \"🚀 Sending to Qencode:\",\n JSON.stringify(queryPayload, null, 2),\n );\n\n // ──────────────────────────────────────────────────────────\n // START QENCODE JOB\n // ──────────────────────────────────────────────────────────\n const params = new URLSearchParams();\n params.append(\"task_token\", task_token);\n params.append(\n \"payload\",\n JSON.stringify({\n video_id: video.id,\n workspace_slug,\n user_id,\n r2_object_key: r2ObjectKey,\n }),\n );\n params.append(\"query\", JSON.stringify(queryPayload));\n\n const qencodeRes = await fetch(\"https://api.qencode.com/v1/start_encode2\", {\n method: \"POST\",\n body: params,\n });\n const qencodeData = await qencodeRes.json();\n\n // ──────────────────────────────────────────────────────────\n // HANDLE QENCODE ERROR\n // ──────────────────────────────────────────────────────────\n if (qencodeData.error !== 0) {\n console.error(\"❌ Qencode error:\", qencodeData.message);\n\n await supabase\n .from(\"videos\")\n .update({\n status: \"error\",\n error_code: String(qencodeData.error),\n error_description: qencodeData.message || \"Qencode failed\",\n transcoding_metadata: {\n qencode_response: qencodeData,\n failed_at: new Date().toISOString(),\n },\n })\n .eq(\"id\", video.id);\n\n return new Response(\n JSON.stringify({\n error: qencodeData.message,\n error_type: \"qencode_error\",\n video_id: video.id,\n }),\n { status: 400, headers: CORS_HEADERS },\n );\n }\n\n console.log(\"✅ Qencode accepted job!\");\n\n return new Response(\n JSON.stringify({\n success: true,\n video_id: video.id,\n task_token,\n file_size,\n video_file_name,\n workspace_slug,\n user_id,\n status: \"transcoding\",\n r2_object_key: r2ObjectKey,\n r2_url: r2FullUrl,\n transcode_info: {\n max_height,\n mp4_url: r2FullUrl,\n },\n }),\n { headers: CORS_HEADERS },\n );\n } catch (err) {\n console.error(\"❌ Error:\", err.message);\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: CORS_HEADERS },\n );\n }\n}",[],[438,659],"d494fa97-4501-4d43-8e16-b011e05179e5","4c49d80c-ae0c-11f1-84c0-1607ee4eb77e",267,["D",1789244370808],"import { createClient } from \"https://esm.sh/@supabase/supabase-js@2\";\n\nconst supabase = createClient(\n Deno.env.get(\"superbaseurl2\")!,\n Deno.env.get(\"superbasesecretkey2\")!,\n);\nconst QENCODE_API_KEY = Deno.env.get(\"qencodeapi\")!;\n\nexport default async function getTaskToken(req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n };\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n try {\n const { workspace_slug } = await req.json();\n\n if (!workspace_slug) {\n return new Response(\n JSON.stringify({ error: \"workspace_slug is required\" }),\n {\n status: 400,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // ── Step 0: Confirmed join — workspaces → subscriptions → plans ──\n const { data: workspace, error: wsError } = await supabase\n .from(\"workspaces\")\n .select(`\n id,\n slug,\n bandwidth_used,\n storage_used_bytes,\n subscriptions!subscriptions_workspace_id_fkey (\n status,\n subscription_plan,\n plans!subscriptions_subscription_plan_fkey ( name, bytes_limit, storage_limit, video_limit, member_limit )\n )\n `)\n .eq(\"slug\", workspace_slug)\n .single();\n\n if (wsError) {\n console.error(\"Supabase error detail:\", JSON.stringify(wsError));\n }\n\n if (wsError || !workspace) {\n return new Response(\n JSON.stringify({ error: \"Workspace not found\" }),\n {\n status: 404,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n const sub = workspace.subscriptions?.[0];\n const plan = sub?.plans;\n\n if (!sub || (sub.status !== \"active\" && sub.status !== \"cancelled\")) {\n return new Response(\n JSON.stringify({ error: \"No active subscription for this workspace\" }),\n {\n status: 402,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n if (!plan) {\n return new Response(\n JSON.stringify({\n error: \"No plan linked to this subscription — contact support\",\n }),\n {\n status: 402,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n const bandwidthReached = workspace.bandwidth_used >= plan.bytes_limit;\n const storageReached = workspace.storage_used_bytes >= plan.storage_limit;\n\n if (bandwidthReached) {\n return new Response(\n JSON.stringify({\n error: \"Bandwidth limit reached for this billing cycle\",\n error_code: \"bandwidth_limit_reached\",\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n bandwidth: {\n used: workspace.bandwidth_used,\n limit: plan.bytes_limit,\n reached: true,\n },\n }),\n {\n status: 403,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n if (storageReached) {\n return new Response(\n JSON.stringify({\n error: \"Storage limit reached for this plan\",\n error_code: \"storage_limit_reached\",\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n storage: {\n used: workspace.storage_used_bytes,\n limit: plan.storage_limit,\n reached: true,\n },\n }),\n {\n status: 403,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // ── Resolve transcoding settings from plan cap only ──\n const PLAN_RESOLUTION_CAPS: Record = {\n free: 480,\n starter: 720,\n creator: 1080,\n \"creator-test-1-month\": 1080,\n \"creator-test-1-year\": 1080,\n agency: 1080,\n business: 1080,\n };\n const maxHeight = PLAN_RESOLUTION_CAPS[plan.name] ?? 480;\n const crf = 23;\n\n // ── Step 1: Get access token ──────────────────────────────────────\n const tokenRes = await fetch(\"https://api.qencode.com/v1/access_token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ api_key: QENCODE_API_KEY }),\n });\n const tokenData = await tokenRes.json();\n if (!tokenData.token) {\n return new Response(\n JSON.stringify({\n error: \"Failed to get access token\",\n details: tokenData,\n }),\n {\n status: 500,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n // ── Step 2: Create task + get task token + upload url ─────────────\n const taskRes = await fetch(\n \"https://api.qencode.com/v1/create_task\",\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ token: tokenData.token }),\n },\n );\n const taskData = await taskRes.json();\n if (!taskData.task_token) {\n return new Response(\n JSON.stringify({\n error: \"Failed to get task token\",\n details: taskData,\n }),\n {\n status: 500,\n headers: { ...cors, \"Content-Type\": \"application/json\" },\n },\n );\n }\n\n return new Response(\n JSON.stringify({\n task_token: taskData.task_token,\n access_token: tokenData.token,\n upload_url: taskData.upload_url, // ← ADDED THIS LINE\n\n workspace_id: workspace.id,\n workspace_slug: workspace.slug,\n\n plan: {\n name: plan.name,\n video_limit: plan.video_limit,\n member_limit: plan.member_limit,\n bandwidth_limit_bytes: plan.bytes_limit,\n storage_limit_bytes: plan.storage_limit,\n },\n\n bandwidth: {\n used: workspace.bandwidth_used,\n limit: plan.bytes_limit,\n used_pct: Number(\n ((workspace.bandwidth_used / plan.bytes_limit) * 100).toFixed(1),\n ),\n reached: bandwidthReached,\n },\n\n storage: {\n used: workspace.storage_used_bytes,\n limit: plan.storage_limit,\n used_pct: Number(\n ((workspace.storage_used_bytes / plan.storage_limit) * 100).toFixed(\n 1,\n ),\n ),\n reached: storageReached,\n },\n\n transcode_settings: {\n max_height: maxHeight,\n crf: crf,\n },\n }),\n { status: 200, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n } catch (err) {\n return new Response(\n JSON.stringify({ error: err.message }),\n { status: 500, headers: { ...cors, \"Content-Type\": \"application/json\" } },\n );\n }\n}",[],[438,425],["D",1787231416441],[456,457,458,459,460,461,462,463],[438],["D",1779217793497],["D",1789501878689],{"_100":99,"_107":103},{"_100":99,"_101":-5,"_102":103,"_18":56,"_104":105,"_106":25},{"_13":89,"_32":90,"_44":43,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":46,"_98":99},"ctx",{"_82":-5,"_127":714,"_715":716,"_717":718,"_719":25,"_720":25,"_721":25,"_722":125,"_723":-5,"_724":-7,"_725":-7,"_726":63,"_727":25,"_728":25,"_729":-5,"_730":25,"_731":25,"_732":25,"_733":-5},"ENV",{"_685":686,"_687":688,"_689":90,"_690":691,"_692":693,"_694":695,"_696":697,"_698":699,"_700":701,"_702":703,"_704":705,"_706":707,"_708":709,"_710":711,"_712":713},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

VideoFrame Analytics

Bandwidth hours dashboard

Bandwidth Dashboard

Diff · v282