Run code at the edge.

const exp = Math.floor(Date.now()/1000) + 300;
const sig = await hmac(secret, \`${id}.${exp}\`);
return Response.json({ url: \`/v/${id}?e=${exp}&s=${sig}\` });

const e = await req.json();
await fetch(Deno.env.get("SLACK_URL"), { method:"POST",
  body: JSON.stringify({ text: \`${e.type}: ${e.id}\` }) });
return new Response("ok");

const flags = JSON.parse(await kvGet("flags"));
return Response.json({ newPlayer: flags.newPlayer ?? false });

const cc = req.headers.get("cf-ipcountry");
if (["RU","KP"].includes(cc)) return new Response("blocked",{status:451});
return Response.json({ country: cc });

const r = await fetch(origin + new URL(req.url).pathname);
const h = new Headers(r.headers);
h.set("access-control-allow-origin", "*");
return new Response(r.body, { headers: h });

const [a,b] = await Promise.all([
  fetch(api+"/videos/"+id).then(r=>r.json()),
  fetch(api+"/analytics/"+id).then(r=>r.json())]);
return Response.json({ ...a, views: b.views });

const k = "rl:" + req.headers.get("x-api-key");
const n = Number(await kvGet(k) || 0) + 1;
await kvPut(k, String(n));
if (n > 100) return new Response("slow down",{status:429});

const slug = new URL(req.url).pathname.split("/").pop();
const dest = await kvGet("u:" + slug);
return dest ? Response.redirect(dest, 302)
            : new Response("not found", { status: 404 });

const v = await fetch(api+"/videos/"+id).then(r=>r.json());
return Response.json({ title: v.title, thumbnail: v.poster,
  duration: v.duration_secs, type: "video" });

import { verify } from "https://esm.sh/@tsndr/cloudflare-worker-jwt";
const ok = await verify(token, Deno.env.get("JWT_SECRET"));
if (!ok) return new Response("401", { status: 401 });

// schedule: "*/10 * * * *"
Deno.serve(async () => {
  for (const id of hotIds) await fetch(cdn + "/v/" + id + ".m3u8");
  return new Response("warmed");
});

const f = await req.formData();
await kvPut("lead:" + Date.now(), JSON.stringify(Object.fromEntries(f)));
return Response.redirect("/thanks", 303);

let m = await fetch(origin + path).then(r => r.text());
m = m.replace(/#EXT-X-STREAM-INF.*\n.*1080.*\n/g, "");
return new Response(m, { headers: { "content-type": "application/vnd.apple.mpegurl" } });

const { videoId } = await req.json();
await kvIncr("plays:" + videoId);
return new Response(null, { status: 204 });

const lang = (req.headers.get("accept-language")||"en").slice(0,2);
return Response.json(strings[lang] ?? strings.en);

const used = await kvGet("lic:" + key);
if (used) return new Response("used", { status: 409 });
await kvPut("lic:" + key, new Date().toISOString());
return new Response("valid");

const data = await fetch(api + "/videos").then(r => r.json());
return Response.json(data.items.map(v => ({ id: v.id, title: v.title })));

const ua = req.headers.get("user-agent") || "";
if (/curl|scrapy|bot/i.test(ua)) return new Response("no", { status: 403 });

// schedule: "0 * * * *"  (hourly)
Deno.serve(async () => {
  const rows = await fetch(Deno.env.get("SRC")).then(r => r.json());
  await kvPut("catalog", JSON.stringify(rows));
  return new Response("synced " + rows.length);
});

const checks = await Promise.all(urls.map(async u => ({
  u, ok: (await fetch(u).catch(() => ({ ok: false }))).ok })));
return Response.json({ healthy: checks.every(c => c.ok), checks });