MELORY Terms of Use

Users must only upload music and artwork they have the right to distribute. Fraudulent streams, fake payments, copyright infringement and abuse are prohibited. MELORY may remove content or suspend accounts that violate these rules.

Artist earnings

Only verified streams and approved revenue sources may qualify for royalties. Rates may change based on actual platform revenue and the published royalty policy.

Payments

Manual subscription payments require administrative verification. Submitting false payment evidence is prohibited.

`));\napp.get(\"/privacy\", (c) => c.html(`

MELORY Privacy

MELORY may store account, music, stream, payment and moderation data needed to operate the service. Payment references and withdrawal details are used for verification and payout administration.

We use reasonable measures to protect stored information and retain records only as needed for platform operations, fraud prevention and legal obligations.

`));\n\napp.post(\"/api/upload\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user) return c.json({error:\"Login required\"},401);\n const form = await c.req.formData();\n const file = form.get(\"audio\");\n if (!(file instanceof File)) return c.json({error:\"MP3 file is required\"},400);\n if (file.type !== \"audio/mpeg\" && !file.name.toLowerCase().endsWith(\".mp3\")) return c.json({error:\"Only MP3 files are allowed\"},400);\n if (file.size > 10 * 1024 * 1024) return c.json({error:\"MP3 must be 10MB or smaller\"},400);\n const safeName = file.name.replace(/[^a-zA-Z0-9._-]/g,\"_\");\n const key = `audio/${crypto.randomUUID()}-${safeName}`;\n await blob.set(key, file);\n const cover = form.get(\"cover\");\n let coverUrl = \"\";\n if (cover instanceof File) {\n if (![\"image/jpeg\",\"image/png\",\"image/webp\"].includes(cover.type)) return c.json({error:\"Cover must be JPG, PNG or WebP\"},400);\n if (cover.size > 5 * 1024 * 1024) return c.json({error:\"Cover art must be 5MB or smaller\"},400);\n const coverName = cover.name.replace(/[^a-zA-Z0-9._-]/g,\"_\");\n const coverKey = `covers/${crypto.randomUUID()}-${coverName}`;\n await blob.set(coverKey, cover);\n coverUrl = `/api/cover/${encodeURIComponent(coverKey)}`;\n }\n return c.json({ok:true,audioUrl:`/api/audio/${encodeURIComponent(key)}`,coverUrl});\n});\n\napp.get(\"/api/cover/:key{.+}\", async (c) => {\n const key = decodeURIComponent(c.req.param(\"key\"));\n if (!key.startsWith(\"covers/\")) return c.json({error:\"Not found\"},404);\n try { const stored = await blob.get(key); return new Response(stored.body,{headers:{\"Content-Type\":stored.contentType || \"image/jpeg\",\"Cache-Control\":\"public, max-age=31536000, immutable\"}}); }\n catch { return c.json({error:\"Cover not found\"},404); }\n});\n\napp.get(\"/api/audio/:key{.+}\", async (c) => {\n const key = decodeURIComponent(c.req.param(\"key\"));\n if (!key.startsWith(\"audio/\")) return c.json({error:\"Not found\"},404);\n try {\n const stored = await blob.get(key);\n return new Response(stored.body,{headers:{\"Content-Type\":\"audio/mpeg\",\"Cache-Control\":\"public, max-age=31536000, immutable\"}});\n } catch { return c.json({error:\"Audio not found\"},404); }\n});\n\napp.post(\"/api/songs\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user) return c.json({error:\"Login required\"},401);\n const body = await c.req.json();\n const title = String(body.title ?? \"\").trim();\n const genre = String(body.genre ?? \"Afrobeats\").trim();\n const audioUrl = String(body.audioUrl ?? \"\").trim();\n const coverUrl = String(body.coverUrl ?? \"\").trim();\n if (!title || !audioUrl) return c.json({error:\"Title and uploaded audio are required\"},400);\n await sqlite.execute({sql:\"INSERT INTO songs (artist,title,genre,audio_url,cover_url) VALUES (?,?,?,?,?)\",args:[session.user.username ?? \"Artist\",title,genre,audioUrl,coverUrl]});\n return c.json({ok:true});\n});\n\napp.get(\"/api/monetization\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n const username = session?.user?.username ?? null;\n let plan = \"free\";\n if (username) {\n const r = await sqlite.execute({sql:\"SELECT plan,status FROM subscriptions WHERE username=?\",args:[username]});\n plan = String(r.rows?.[0]?.plan ?? \"free\");\n }\n return c.json({adsEnabled: plan !== \"premium\", subscription:{plan,price:1500,currency:\"NGN\",interval:\"month\"},royaltyPoolPercent:50});\n});\n\napp.post(\"/api/ad-event\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n const body = await c.req.json().catch(()=>({}));\n await sqlite.execute({sql:\"INSERT INTO ad_events (username,placement) VALUES (?,?)\",args:[session?.user?.username ?? null,String(body.placement ?? \"unknown\")]});\n return c.json({ok:true});\n});\n\napp.post(\"/api/subscribe\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user) return c.json({error:\"Login required\"},401);\n const username = session.user.username ?? \"Artist\";\n const body = await c.req.json();\n const reference = String(body.reference ?? \"\").trim();\n const proofUrl = String(body.proofUrl ?? \"\").trim();\n if (!reference) return c.json({error:\"Transfer reference is required\"},400);\n await sqlite.execute({sql:\"INSERT INTO payment_requests (username,amount,reference,proof_url) VALUES (?,?,?,?)\",args:[username,1500,reference,proofUrl]});\n return c.json({ok:true,status:\"pending\",message:\"Payment submitted for admin approval.\"});\n});\n\napp.get(\"/api/admin/withdrawals\", async (c) => {\n const session = await getOAuthUserData(c.req.raw); if (session?.user?.username !== \"seetyboy0707\") return c.json({error:\"Admin only\"},403);\n const r=await sqlite.execute(\"SELECT * FROM withdrawals ORDER BY created_at DESC\"); return c.json(r.rows);\n});\n\napp.post(\"/api/admin/withdrawals/:id\", async (c) => {\n const session = await getOAuthUserData(c.req.raw); if (session?.user?.username !== \"seetyboy0707\") return c.json({error:\"Admin only\"},403);\n const id=Number(c.req.param(\"id\")); const body=await c.req.json(); const status=body.status===\"paid\"?\"paid\":body.status===\"rejected\"?\"rejected\":\"pending\";\n await sqlite.execute({sql:\"UPDATE withdrawals SET status=? WHERE id=?\",args:[status,id]}); return c.json({ok:true,status});\n});\n\napp.get(\"/api/admin/reports\", async (c) => {\n const session=await getOAuthUserData(c.req.raw); if(session?.user?.username!==\"seetyboy0707\") return c.json({error:\"Admin only\"},403);\n const r=await sqlite.execute(\"SELECT r.*,s.title,s.artist FROM reports r LEFT JOIN songs s ON s.id=r.song_id ORDER BY r.created_at DESC\"); return c.json(r.rows);\n});\n\napp.post(\"/api/admin/reports/:id\", async (c) => {\n const session=await getOAuthUserData(c.req.raw); if(session?.user?.username!==\"seetyboy0707\") return c.json({error:\"Admin only\"},403);\n const id=Number(c.req.param(\"id\")); const body=await c.req.json(); const status=[\"pending\",\"reviewed\",\"removed\",\"dismissed\"].includes(body.status)?body.status:\"reviewed\";\n await sqlite.execute({sql:\"UPDATE reports SET status=? WHERE id=?\",args:[status,id]}); return c.json({ok:true,status});\n});\n\napp.get(\"/api/admin/payments\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n const admin = session?.user?.username;\n if (admin !== \"seetyboy0707\") return c.json({error:\"Admin only\"},403);\n const r = await sqlite.execute(\"SELECT * FROM payment_requests ORDER BY created_at DESC\");\n return c.json(r.rows);\n});\n\napp.post(\"/api/admin/payments/:id\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (session?.user?.username !== \"seetyboy0707\") return c.json({error:\"Admin only\"},403);\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json();\n const status = body.status === \"approved\" ? \"approved\" : \"rejected\";\n const r = await sqlite.execute({sql:\"SELECT username FROM payment_requests WHERE id=?\",args:[id]});\n const username = r.rows?.[0]?.username;\n if (!username) return c.json({error:\"Payment not found\"},404);\n await sqlite.execute({sql:\"UPDATE payment_requests SET status=?,reviewed_at=CURRENT_TIMESTAMP WHERE id=?\",args:[status,id]});\n if (status === \"approved\") await sqlite.execute({sql:\"INSERT INTO subscriptions (username,plan,status) VALUES (?,'premium','active') ON CONFLICT(username) DO UPDATE SET plan='premium',status='active',started_at=CURRENT_TIMESTAMP\",args:[username]});\n return c.json({ok:true,status});\n});\n\napp.get(\"/api/artist/:username\", async (c) => {\n const username = decodeURIComponent(c.req.param(\"username\"));\n const r = await sqlite.execute({sql:\"SELECT * FROM artists WHERE username=?\",args:[username]});\n const songs = await sqlite.execute({sql:\"SELECT * FROM songs WHERE artist=? ORDER BY created_at DESC\",args:[username]});\n const followers = await sqlite.execute({sql:\"SELECT COUNT(*) AS count FROM follows WHERE artist=?\",args:[username]});\n return c.json({artist:r.rows?.[0] ?? {username,display_name:username,bio:\"\",verified:0},songs:songs.rows,followers:Number(followers.rows?.[0]?.count ?? 0)});\n});\n\napp.post(\"/api/artist/profile\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user) return c.json({error:\"Login required\"},401);\n const username = session.user.username ?? \"Artist\"; const body = await c.req.json();\n await sqlite.execute({sql:\"INSERT INTO artists (username,display_name,bio,avatar_url) VALUES (?,?,?,?) ON CONFLICT(username) DO UPDATE SET display_name=?,bio=?,avatar_url=?\",args:[username,String(body.displayName??username),String(body.bio??\"\"),String(body.avatarUrl??\"\"),String(body.displayName??username),String(body.bio??\"\"),String(body.avatarUrl??\"\")]});\n return c.json({ok:true});\n});\n\napp.post(\"/api/songs/:id/like\", async (c) => {\n const session = await getOAuthUserData(c.req.raw); if (!session?.user) return c.json({error:\"Login required\"},401);\n const username=session.user.username??\"User\"; const id=Number(c.req.param(\"id\"));\n const existing=await sqlite.execute({sql:\"SELECT 1 FROM likes WHERE username=? AND song_id=?\",args:[username,id]});\n if (existing.rows?.length) await sqlite.execute({sql:\"DELETE FROM likes WHERE username=? AND song_id=?\",args:[username,id]}); else await sqlite.execute({sql:\"INSERT INTO likes (username,song_id) VALUES (?,?)\",args:[username,id]});\n const count=await sqlite.execute({sql:\"SELECT COUNT(*) AS count FROM likes WHERE song_id=?\",args:[id]}); return c.json({ok:true,liked:!existing.rows?.length,likes:Number(count.rows?.[0]?.count??0)});\n});\n\napp.post(\"/api/artists/:username/follow\", async (c) => {\n const session = await getOAuthUserData(c.req.raw); if (!session?.user) return c.json({error:\"Login required\"},401);\n const follower=session.user.username??\"User\", artist=decodeURIComponent(c.req.param(\"username\"));\n const existing=await sqlite.execute({sql:\"SELECT 1 FROM follows WHERE follower=? AND artist=?\",args:[follower,artist]});\n if (existing.rows?.length) { await sqlite.execute({sql:\"DELETE FROM follows WHERE follower=? AND artist=?\",args:[follower,artist]}); } else { await sqlite.execute({sql:\"INSERT INTO follows (follower,artist) VALUES (?,?)\",args:[follower,artist]}); }\n const count=await sqlite.execute({sql:\"SELECT COUNT(*) AS count FROM follows WHERE artist=?\",args:[artist]}); return c.json({ok:true,following:!existing.rows?.length,followers:Number(count.rows?.[0]?.count??0)});\n});\n\napp.get(\"/api/me\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user) return c.json({loggedIn:false});\n const artist = session.user.username ?? \"Artist\";\n const result = await sqlite.execute({sql:\"SELECT COALESCE(SUM(streams),0) AS streams, COALESCE(SUM(earnings),0) AS earnings, COUNT(*) AS songs FROM songs WHERE artist=?\",args:[artist]});\n const withdrawals = await sqlite.execute({sql:\"SELECT * FROM withdrawals WHERE artist=? ORDER BY created_at DESC\",args:[artist]});\n return c.json({loggedIn:true,user:session.user,stats:result.rows?.[0],withdrawals:withdrawals.rows});\n});\n\napp.post(\"/api/withdraw\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user) return c.json({error:\"Login required\"},401);\n const body = await c.req.json();\n const amount = Number(body.amount);\n if (!Number.isFinite(amount) || amount < 1000) return c.json({error:\"Minimum withdrawal is ₦1,000\"},400);\n await sqlite.execute({sql:\"INSERT INTO withdrawals (artist,amount,bank_name,account_number) VALUES (?,?,?,?)\",args:[session.user.username ?? \"Artist\",Math.floor(amount),String(body.bankName ?? \"\"),String(body.accountNumber ?? \"\")]});\n return c.json({ok:true});\n});\n\napp.onError((err) => Promise.reject(err));\nexport default oauthMiddleware(app.fetch);\n","deleted","label",[122],"40ec05f8-8219-4c56-bf2d-d405f42148ff","README.md","01a026a0-60e1-776d-ae32-33b161e0c861",1,["D",1787354439816],"# React + Hono Starter\n\nA minimal starter template for building client-side React apps with a Hono\nbackend on Val Town. Click **Remix** to get your own copy.\n\n## Picking a starter\n\n| Starter | When to pick it |\n| --- | --- |\n| [`basic-html-starter`](https://www.val.town/x/templates/basic-html-starter) | Static HTML pages. Sprinkle of vanilla JS. No server-side rendering. |\n| [`hono-jsx-starter`](https://www.val.town/x/templates/hono-jsx-starter) | Dynamic server-rendered HTML with JSX. API routes. No React, no SPA. |\n| **[`react-hono-starter`](https://www.val.town/x/templates/react-hono-starter)** *(you're here)* | Client-side React SPA with a Hono API backend. |\n\n**Want to build UI?** Start writing React components in\n[`frontend/components/`](/frontend/components/). Import them into `App.tsx` and\nyou're good to go. Styling is [Twind](https://twind.style/) — just use Tailwind\nutility classes, zero config.\n\n**Want to add an API?** Add routes in [`index.ts`](/index.ts) (there's a\ncommented-out example). Fetch them from your React components.\n\n## Architecture\n\n```mermaid\ngraph LR\n Browser -->|\"GET /\"| Hono[\"index.ts
(Hono server)\"]\n Hono -->|serves| HTML[\"root.tsx\"]\n HTML -->|loads| Entry[\"index.tsx\"]\n Entry -->|renders| App[\"App.tsx\"]\n App -->|renders| Counter[\"Counter.tsx\"]\n```\n\n## File structure\n\n```\nindex.ts ← Hono backend (serves frontend + API routes)\nfrontend/\n root.tsx ← HTML shell (stamps immutable asset URLs)\n index.tsx ← React entrypoint (mounts )\n favicon.svg ← App icon\n components/\n App.tsx ← Root component (layout + view source link)\n Counter.tsx ← Example component with state\n```\n\n## How it works\n\n1. **`index.ts`** is the HTTP entrypoint — a Hono server that serves the\n frontend and any API routes you add.\n2. **`frontend/root.tsx`** is the HTML shell — it loads Twind and stamps\n immutable asset URLs for the favicon and React entrypoint.\n3. **`frontend/index.tsx`** mounts the React app.\n4. **`frontend/components/App.tsx`** is the root layout — add new components\n alongside it.\n5. **`frontend/components/Counter.tsx`** is an example stateful component —\n replace it with your own!\n\n## Next steps\n\n- Add API routes in `index.ts`\n- Add new components in `frontend/components/`\n- Add a SQLite database — see the\n [React Hono Example](https://www.val.town/x/stevekrouse/reactHonoExample) for\n a full-stack example with database, queries, and shared types\n\nTemplate updates and upgrade paths for existing remixes: [CHANGELOG.md](/CHANGELOG.md)\n",[139],"0a85a88e-c712-467d-87ca-e08ad5702665","CHANGELOG.md","01a026a0-60e1-776d-ae32-2f1b5fb7acdc",["D",1787354439816],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Branches1

Branches
1