Finish ebook space

Dockerfile

@@ -0,0 +1,13 @@
+FROM python:3.9
+
+RUN useradd -m -u 1000 user
+USER user
+ENV PATH="/home/user/.local/bin:$PATH"
+
+WORKDIR /app
+
+COPY --chown=user ./requirements.txt requirements.txt
+RUN pip install --no-cache-dir --upgrade -r requirements.txt
+
+COPY --chown=user . /app
+CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]

README.md

@@ -1,10 +1,21 @@
 ---
-title: FairDinkumPublishing
-emoji: 🏆
+title: Brett Sjoberg Publishing
+emoji: 🏢
 colorFrom: gray
-colorTo: pink
+colorTo: red
 sdk: docker
 pinned: false
+short_description: Brett Sjoberg. Fair Dinkum Aussie AI Publishing bundle
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+Fair Dinkum Publishing is a Docker Space that shows an ebook catalog with locally generated thumbnail covers and a Stripe-ready membership signup flow.
+
+Set these Space secrets for checkout:
+
+- `STRIPE_SECRET_KEY`
+- `STRIPE_PRICE_ID_MONTHLY`
+- `STRIPE_PRICE_ID_ANNUAL` if you want the annual plan
+- `STRIPE_WEBHOOK_SECRET` if you want webhook verification
+- `PUBLIC_BASE_URL` if you want to override the Space URL
+
+The Space starts with `uvicorn app:app --host 0.0.0.0 --port 7860`.

app.py

@@ -0,0 +1,712 @@
+import base64
+import hashlib
+import hmac
+import html
+import io
+import os
+from dataclasses import dataclass
+from typing import Any
+
+import httpx
+from dotenv import load_dotenv
+from fastapi import FastAPI, HTTPException, Request
+from fastapi.middleware.cors import CORSMiddleware
+from fastapi.responses import HTMLResponse, JSONResponse
+from pydantic import BaseModel, Field
+from PIL import Image, ImageDraw, ImageFont
+
+
+load_dotenv()
+
+app = FastAPI(title="Fair Dinkum Publishing")
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+
+@dataclass(frozen=True)
+class Ebook:
+    slug: str
+    title: str
+    subtitle: str
+    description: str
+    category: str
+    audience: str
+    length: str
+    tags: tuple[str, ...]
+    accent: tuple[str, str]
+    featured: bool = False
+    included_in_membership: bool = True
+
+
+EBOOKS: list[Ebook] = [
+    Ebook(
+        slug="fair-dinkum-launch",
+        title="Fair Dinkum Launch",
+        subtitle="A practical guide to publishing your first ebook",
+        description="A step-by-step playbook for planning, writing, packaging, and selling an ebook without overcomplicating the process.",
+        category="Publishing",
+        audience="First-time authors",
+        length="68 pages",
+        tags=("publishing", "launch", "workflow"),
+        accent=("#0E7490", "#083344"),
+        featured=True,
+    ),
+    Ebook(
+        slug="stripe-membership-playbook",
+        title="Stripe Membership Playbook",
+        subtitle="Set up recurring revenue for a content library",
+        description="Design a subscription offer, set up checkout, and keep access simple for readers who want ongoing membership value.",
+        category="Payments",
+        audience="Indie publishers",
+        length="44 pages",
+        tags=("stripe", "subscription", "membership"),
+        accent=("#B45309", "#451A03"),
+    ),
+    Ebook(
+        slug="ebook-thumbnail-system",
+        title="Ebook Thumbnail System",
+        subtitle="Create covers that look good in a grid",
+        description="A compact visual system for making thumbnail-ready book covers, consistent series art, and better click-through on a catalog page.",
+        category="Design",
+        audience="Self-publishers",
+        length="52 pages",
+        tags=("covers", "design", "thumbnails"),
+        accent=("#0F766E", "#134E4A"),
+    ),
+    Ebook(
+        slug="aussie-author-offer",
+        title="Aussie Author Offer",
+        subtitle="Turn one ebook into a subscription product",
+        description="Position your ebook like a product, not a one-off file, so readers understand why membership is more valuable than a single purchase.",
+        category="Marketing",
+        audience="Creators and coaches",
+        length="61 pages",
+        tags=("pricing", "offer", "marketing"),
+        accent=("#7C3AED", "#312E81"),
+    ),
+    Ebook(
+        slug="catalog-copy-that-converts",
+        title="Catalog Copy That Converts",
+        subtitle="Descriptions for books people actually click",
+        description="Write concise ebook descriptions, benefit-led blurbs, and metadata that work together on a storefront or member portal.",
+        category="Copywriting",
+        audience="Publishing teams",
+        length="39 pages",
+        tags=("copy", "catalog", "seo"),
+        accent=("#C2410C", "#7C2D12"),
+    ),
+    Ebook(
+        slug="member-welcome-kit",
+        title="Member Welcome Kit",
+        subtitle="Onboard subscribers without friction",
+        description="A simple onboarding sequence for confirming payment, welcoming members, and helping them find the first thing to read.",
+        category="Operations",
+        audience="Subscription sites",
+        length="35 pages",
+        tags=("onboarding", "ops", "retention"),
+        accent=("#14532D", "#052E16"),
+        featured=True,
+    ),
+]
+
+
+def _font(size: int, bold: bool = False) -> ImageFont.FreeTypeFont | ImageFont.ImageFont:
+    candidates = [
+        "/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf" if bold else "/usr/share/fonts/truetype/dejavu/DejaVuSans.ttf",
+        "/usr/share/fonts/truetype/liberation2/LiberationSans-Bold.ttf" if bold else "/usr/share/fonts/truetype/liberation2/LiberationSans-Regular.ttf",
+    ]
+    for path in candidates:
+        if os.path.exists(path):
+            return ImageFont.truetype(path, size=size)
+    return ImageFont.load_default()
+
+
+def _wrap_lines(draw: ImageDraw.ImageDraw, text: str, font: ImageFont.ImageFont, max_width: int) -> list[str]:
+    words = text.split()
+    lines: list[str] = []
+    current = ""
+    for word in words:
+        trial = f"{current} {word}".strip()
+        if draw.textbbox((0, 0), trial, font=font)[2] <= max_width or not current:
+            current = trial
+        else:
+            lines.append(current)
+            current = word
+    if current:
+        lines.append(current)
+    return lines
+
+
+def build_thumbnail(ebook: Ebook) -> str:
+    width, height = 900, 1260
+    img = Image.new("RGB", (width, height), ebook.accent[1])
+    draw = ImageDraw.Draw(img)
+    top = Image.new("RGB", (width, height // 2), ebook.accent[0])
+    img.paste(top, (0, 0))
+
+    # Add a subtle geometric accent without relying on external artwork.
+    draw.rounded_rectangle((48, 48, width - 48, height - 48), radius=42, outline=(255, 255, 255), width=4)
+    draw.rounded_rectangle((92, 92, width - 92, height - 92), radius=30, outline=(255, 255, 255, 180), width=2)
+    draw.line((92, 330, width - 92, 330), fill=(255, 255, 255), width=2)
+
+    label_font = _font(38, bold=True)
+    title_font = _font(80, bold=True)
+    subtitle_font = _font(44, bold=False)
+    meta_font = _font(34, bold=False)
+
+    draw.text((110, 130), "FAIR DINKUM", font=label_font, fill=(255, 255, 255))
+    draw.text((110, 410), ebook.title, font=title_font, fill=(255, 255, 255), spacing=10)
+
+    subtitle_lines = _wrap_lines(draw, ebook.subtitle, subtitle_font, width - 220)
+    y = 570
+    for line in subtitle_lines[:4]:
+        draw.text((110, y), line, font=subtitle_font, fill=(247, 250, 252))
+        y += 62
+
+    draw.text((110, 1040), ebook.category.upper(), font=meta_font, fill=(255, 255, 255))
+    draw.text((110, 1100), ebook.length, font=meta_font, fill=(255, 255, 255))
+
+    with io.BytesIO() as buffer:
+        img.save(buffer, format="PNG", optimize=True)
+        return base64.b64encode(buffer.getvalue()).decode("ascii")
+
+
+THUMBNAILS = {ebook.slug: build_thumbnail(ebook) for ebook in EBOOKS}
+
+
+class CheckoutRequest(BaseModel):
+    email: str
+    name: str | None = Field(default=None, max_length=120)
+    plan: str = Field(default="monthly")
+
+
+def price_id_for_plan(plan: str) -> str | None:
+    if plan == "annual":
+        return os.getenv("STRIPE_PRICE_ID_ANNUAL")
+    return os.getenv("STRIPE_PRICE_ID_MONTHLY")
+
+
+def stripe_configured() -> bool:
+    return bool(os.getenv("STRIPE_SECRET_KEY") and price_id_for_plan("monthly"))
+
+
+def base_url(request: Request) -> str:
+    env_url = os.getenv("PUBLIC_BASE_URL")
+    if env_url:
+        return env_url.rstrip("/")
+    return str(request.base_url).rstrip("/")
+
+
+def escape(s: Any) -> str:
+    return html.escape("" if s is None else str(s))
+
+
+def render_page(request: Request) -> str:
+    base = base_url(request)
+    featured = [book for book in EBOOKS if book.featured]
+
+    cards = []
+    for ebook in EBOOKS:
+        tags = "".join(f'<span class="tag">{escape(tag)}</span>' for tag in ebook.tags)
+        featured_badge = '<span class="badge badge-featured">Featured</span>' if ebook.featured else ""
+        membership_badge = '<span class="badge badge-included">Included in membership</span>' if ebook.included_in_membership else ""
+        cards.append(
+            f"""
+            <article class="book-card" data-title="{escape((ebook.title + ' ' + ebook.subtitle + ' ' + ' '.join(ebook.tags)).lower())}"
+                     data-category="{escape(ebook.category.lower())}"
+                     data-tags="{escape(' '.join(ebook.tags).lower())}">
+              <img class="cover" src="data:image/png;base64,{THUMBNAILS[ebook.slug]}" alt="{escape(ebook.title)} cover">
+              <div class="book-body">
+                <div class="card-topline">
+                  <span class="category">{escape(ebook.category)}</span>
+                  {featured_badge}
+                  {membership_badge}
+                </div>
+                <h3>{escape(ebook.title)}</h3>
+                <p class="subtitle">{escape(ebook.subtitle)}</p>
+                <p class="description">{escape(ebook.description)}</p>
+                <div class="meta">
+                  <span>{escape(ebook.audience)}</span>
+                  <span>{escape(ebook.length)}</span>
+                </div>
+                <div class="tag-row">{tags}</div>
+              </div>
+            </article>
+            """
+        )
+
+    status_line = "Stripe is configured for live checkout" if stripe_configured() else "Stripe is not configured yet"
+    featured_title = featured[0].title if featured else "Fair Dinkum Publishing"
+
+    return f"""
+<!doctype html>
+<html lang="en-AU">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Fair Dinkum Publishing</title>
+  <style>
+    :root {{
+      --bg: #f4f1ea;
+      --panel: #ffffff;
+      --ink: #12303f;
+      --muted: #5d6b74;
+      --line: #d8ddd9;
+      --accent: #0f766e;
+      --accent2: #b45309;
+      --shadow: 0 18px 40px rgba(15, 23, 42, 0.08);
+      --radius: 10px;
+    }}
+    * {{ box-sizing: border-box; }}
+    body {{
+      margin: 0;
+      font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+      background: linear-gradient(180deg, #f4f1ea 0%, #f8faf8 100%);
+      color: var(--ink);
+    }}
+    a {{ color: inherit; text-decoration: none; }}
+    .shell {{ max-width: 1240px; margin: 0 auto; padding: 24px; }}
+    .hero {{
+      padding: 28px 0 18px;
+      display: grid;
+      grid-template-columns: 1.3fr 0.7fr;
+      gap: 20px;
+      align-items: end;
+    }}
+    .eyebrow {{ color: var(--accent); text-transform: uppercase; font-size: 12px; letter-spacing: 0.08em; font-weight: 700; }}
+    h1 {{ font-size: clamp(38px, 4vw, 64px); line-height: 1; margin: 8px 0 14px; max-width: 12ch; }}
+    .lede {{ font-size: 18px; line-height: 1.6; color: var(--muted); max-width: 60ch; }}
+    .hero-card {{
+      background: var(--panel);
+      border: 1px solid var(--line);
+      border-radius: var(--radius);
+      box-shadow: var(--shadow);
+      padding: 20px;
+    }}
+    .hero-grid {{
+      display: grid;
+      grid-template-columns: repeat(3, minmax(0, 1fr));
+      gap: 10px;
+      margin-top: 18px;
+    }}
+    .stat {{
+      padding: 14px;
+      border: 1px solid var(--line);
+      border-radius: 8px;
+      background: #fff;
+    }}
+    .stat strong {{ display: block; font-size: 24px; }}
+    .stat span {{ color: var(--muted); font-size: 13px; }}
+    .actions {{ display: flex; gap: 10px; flex-wrap: wrap; margin-top: 18px; }}
+    .btn {{
+      display: inline-flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 44px;
+      padding: 0 16px;
+      border-radius: 8px;
+      border: 1px solid transparent;
+      font-weight: 700;
+      cursor: pointer;
+    }}
+    .btn-primary {{ background: var(--ink); color: #fff; }}
+    .btn-secondary {{ background: #fff; border-color: var(--line); }}
+    .panel {{
+      margin-top: 24px;
+      background: var(--panel);
+      border: 1px solid var(--line);
+      border-radius: var(--radius);
+      box-shadow: var(--shadow);
+      padding: 18px;
+    }}
+    .panel-head {{
+      display: flex;
+      justify-content: space-between;
+      gap: 12px;
+      flex-wrap: wrap;
+      align-items: center;
+      margin-bottom: 14px;
+    }}
+    .searchbar {{
+      width: min(100%, 360px);
+      border: 1px solid var(--line);
+      border-radius: 999px;
+      padding: 12px 16px;
+      background: #fff;
+      font: inherit;
+    }}
+    .chips {{ display: flex; flex-wrap: wrap; gap: 8px; margin-top: 12px; }}
+    .chip {{
+      border: 1px solid var(--line);
+      background: #fff;
+      border-radius: 999px;
+      padding: 8px 12px;
+      font-size: 14px;
+      cursor: pointer;
+    }}
+    .chip.active {{ background: var(--ink); color: #fff; border-color: var(--ink); }}
+    .grid {{
+      display: grid;
+      grid-template-columns: repeat(3, minmax(0, 1fr));
+      gap: 16px;
+    }}
+    .book-card {{
+      border: 1px solid var(--line);
+      border-radius: var(--radius);
+      overflow: hidden;
+      background: #fff;
+      display: flex;
+      flex-direction: column;
+    }}
+    .cover {{ display: block; width: 100%; aspect-ratio: 3 / 4; object-fit: cover; }}
+    .book-body {{ padding: 14px; display: grid; gap: 10px; }}
+    .card-topline {{ display: flex; gap: 8px; flex-wrap: wrap; align-items: center; }}
+    .category, .badge, .tag {{
+      display: inline-flex;
+      align-items: center;
+      border-radius: 999px;
+      padding: 6px 10px;
+      font-size: 12px;
+      font-weight: 700;
+    }}
+    .category {{ background: #ecfeff; color: #0f766e; }}
+    .badge-featured {{ background: #fff7ed; color: #9a3412; }}
+    .badge-included {{ background: #eef2ff; color: #4338ca; }}
+    .book-body h3 {{ margin: 0; font-size: 20px; line-height: 1.15; }}
+    .subtitle {{ margin: 0; color: var(--accent2); font-weight: 700; }}
+    .description {{ margin: 0; color: var(--muted); line-height: 1.5; }}
+    .meta {{ display: flex; justify-content: space-between; gap: 12px; color: var(--muted); font-size: 13px; }}
+    .tag-row {{ display: flex; flex-wrap: wrap; gap: 8px; }}
+    .tag {{ background: #f8fafc; color: #41515b; font-weight: 600; }}
+    .membership {{
+      display: grid;
+      grid-template-columns: 1fr 1fr;
+      gap: 16px;
+      align-items: start;
+    }}
+    .field-grid {{
+      display: grid;
+      grid-template-columns: 1fr 1fr;
+      gap: 12px;
+    }}
+    .field, select, input {{
+      width: 100%;
+      border: 1px solid var(--line);
+      border-radius: 8px;
+      padding: 12px 14px;
+      font: inherit;
+      background: #fff;
+    }}
+    .inline-note {{ color: var(--muted); font-size: 13px; line-height: 1.5; }}
+    .message {{
+      margin-top: 12px;
+      padding: 12px 14px;
+      border-radius: 8px;
+      background: #f8fafc;
+      border: 1px solid var(--line);
+      color: var(--muted);
+      min-height: 48px;
+    }}
+    .footer {{
+      padding: 20px 0 8px;
+      color: var(--muted);
+      font-size: 13px;
+      display: flex;
+      justify-content: space-between;
+      gap: 12px;
+      flex-wrap: wrap;
+    }}
+    @media (max-width: 980px) {{
+      .hero, .grid, .membership {{ grid-template-columns: 1fr; }}
+    }}
+    @media (max-width: 720px) {{
+      .shell {{ padding: 16px; }}
+      .hero-grid, .field-grid {{ grid-template-columns: 1fr; }}
+      h1 {{ max-width: none; }}
+    }}
+  </style>
+</head>
+<body>
+  <main class="shell">
+    <section class="hero">
+      <div>
+        <div class="eyebrow">Fair Dinkum Publishing</div>
+        <h1>Ebook catalog built for members.</h1>
+        <p class="lede">Browse thumbnail-ready ebook covers, read short descriptions, and join a subscription that can be wired to Stripe Checkout when you set the pricing keys in Space secrets.</p>
+        <div class="actions">
+          <a class="btn btn-primary" href="#membership">Join membership</a>
+          <a class="btn btn-secondary" href="#catalog">Browse library</a>
+        </div>
+        <div class="hero-grid">
+          <div class="stat"><strong>{len(EBOOKS)}</strong><span>ebooks in the library</span></div>
+          <div class="stat"><strong>{len(featured)}</strong><span>featured releases</span></div>
+          <div class="stat"><strong>Stripe</strong><span>{escape(status_line)}</span></div>
+        </div>
+      </div>
+      <aside class="hero-card">
+        <div class="eyebrow">Featured release</div>
+        <h2 style="margin: 8px 0 10px;">{escape(featured_title)}</h2>
+        <p class="inline-note">Use the catalog below to surface cover art, blurbs, and membership value in one place. Each thumbnail is generated locally so the Space has a visual baseline even before you upload final covers.</p>
+      </aside>
+    </section>
+
+    <section class="panel" id="catalog">
+      <div class="panel-head">
+        <div>
+          <div class="eyebrow">Catalog</div>
+          <h2 style="margin: 6px 0 0;">Ebook thumbnails and descriptions</h2>
+        </div>
+        <input id="search" class="searchbar" type="search" placeholder="Search title, category, or tag">
+      </div>
+      <div class="chips" id="chips">
+        <button class="chip active" data-filter="all" type="button">All</button>
+        <button class="chip" data-filter="publishing" type="button">Publishing</button>
+        <button class="chip" data-filter="payments" type="button">Payments</button>
+        <button class="chip" data-filter="design" type="button">Design</button>
+        <button class="chip" data-filter="marketing" type="button">Marketing</button>
+        <button class="chip" data-filter="copywriting" type="button">Copywriting</button>
+        <button class="chip" data-filter="operations" type="button">Operations</button>
+      </div>
+      <div class="grid" id="book-grid" style="margin-top: 16px;">
+        {''.join(cards)}
+      </div>
+    </section>
+
+    <section class="panel" id="membership">
+      <div class="membership">
+        <div>
+          <div class="eyebrow">Membership</div>
+          <h2 style="margin: 6px 0 10px;">Subscription signup for readers and members</h2>
+          <p class="inline-note">
+            Connect a monthly or annual Stripe Price ID in Space secrets and this form will create a Checkout Session server-side.
+            No secret keys are exposed to the browser.
+          </p>
+          <div class="hero-grid" style="margin-top: 18px;">
+            <div class="stat"><strong>Monthly</strong><span>Best for ongoing library access</span></div>
+            <div class="stat"><strong>Annual</strong><span>Best for committed readers</span></div>
+            <div class="stat"><strong>Secure</strong><span>Checkout session created on the server</span></div>
+          </div>
+        </div>
+        <form id="signup-form">
+          <div class="field-grid">
+            <input id="name" class="field" type="text" placeholder="Full name" autocomplete="name">
+            <input id="email" class="field" type="email" placeholder="Email address" autocomplete="email" required>
+          </div>
+          <div style="height: 12px;"></div>
+          <select id="plan">
+            <option value="monthly">Monthly membership</option>
+            <option value="annual">Annual membership</option>
+          </select>
+          <div style="height: 12px;"></div>
+          <button class="btn btn-primary" style="width: 100%;" type="submit">Start subscription checkout</button>
+          <p class="inline-note" style="margin-top: 10px;">{escape("Stripe checkout keys required: STRIPE_SECRET_KEY and STRIPE_PRICE_ID_MONTHLY, plus STRIPE_PRICE_ID_ANNUAL if you want the yearly plan.")}</p>
+          <div class="message" id="message">{escape(status_line)}</div>
+        </form>
+      </div>
+    </section>
+
+    <footer class="footer">
+      <span>Built for {escape(base.replace("https://", "").replace("http://", ""))}</span>
+      <span>Generated thumbnails, member signup, and Stripe-ready checkout</span>
+    </footer>
+  </main>
+
+  <script>
+    const search = document.getElementById('search');
+    const chips = [...document.querySelectorAll('.chip')];
+    const cards = [...document.querySelectorAll('.book-card')];
+    let activeFilter = 'all';
+
+    function matches(card) {{
+      const query = search.value.trim().toLowerCase();
+      const haystack = `${{card.dataset.title}} ${{card.dataset.category}} ${{card.dataset.tags}}`;
+      const filterOk = activeFilter === 'all' || card.dataset.category.includes(activeFilter);
+      const queryOk = !query || haystack.includes(query);
+      card.style.display = filterOk && queryOk ? '' : 'none';
+    }}
+
+    chips.forEach((chip) => {{
+      chip.addEventListener('click', () => {{
+        chips.forEach((c) => c.classList.remove('active'));
+        chip.classList.add('active');
+        activeFilter = chip.dataset.filter;
+        cards.forEach(matches);
+      }});
+    }});
+
+    search.addEventListener('input', () => cards.forEach(matches));
+
+    document.getElementById('signup-form').addEventListener('submit', async (event) => {{
+      event.preventDefault();
+      const message = document.getElementById('message');
+      const payload = {{
+        name: document.getElementById('name').value.trim(),
+        email: document.getElementById('email').value.trim(),
+        plan: document.getElementById('plan').value,
+      }};
+
+      message.textContent = 'Creating checkout session...';
+
+      try {{
+        const response = await fetch('/api/checkout/session', {{
+          method: 'POST',
+          headers: {{ 'Content-Type': 'application/json' }},
+          body: JSON.stringify(payload),
+        }});
+        const data = await response.json();
+        if (!response.ok) {{
+          throw new Error(data.detail || data.error || 'Checkout could not be created.');
+        }}
+        if (data.checkout_url) {{
+          window.location.href = data.checkout_url;
+          return;
+        }}
+        message.textContent = data.message || 'Checkout is not configured yet.';
+      }} catch (error) {{
+        message.textContent = error.message;
+      }}
+    }});
+  </script>
+</body>
+</html>
+"""
+
+
+@app.get("/", response_class=HTMLResponse)
+async def home(request: Request) -> HTMLResponse:
+    return HTMLResponse(render_page(request))
+
+
+@app.get("/api/health")
+async def health() -> dict[str, Any]:
+    return {
+        "status": "ok",
+        "books": len(EBOOKS),
+        "stripe_configured": stripe_configured(),
+    }
+
+
+@app.get("/api/books")
+async def books() -> dict[str, Any]:
+    return {
+        "books": [
+            {
+                "slug": book.slug,
+                "title": book.title,
+                "subtitle": book.subtitle,
+                "description": book.description,
+                "category": book.category,
+                "audience": book.audience,
+                "length": book.length,
+                "tags": list(book.tags),
+                "featured": book.featured,
+                "included_in_membership": book.included_in_membership,
+            }
+            for book in EBOOKS
+        ]
+    }
+
+
+async def create_stripe_checkout(request: Request, payload: CheckoutRequest) -> dict[str, Any]:
+    secret = os.getenv("STRIPE_SECRET_KEY")
+    if not secret:
+        raise HTTPException(status_code=501, detail="STRIPE_SECRET_KEY is not configured.")
+
+    if "@" not in payload.email or payload.email.count("@") != 1:
+        raise HTTPException(status_code=400, detail="A valid email address is required.")
+
+    price_id = price_id_for_plan(payload.plan)
+    if not price_id:
+        raise HTTPException(status_code=501, detail=f"Missing Stripe price ID for plan '{payload.plan}'.")
+
+    origin = base_url(request)
+    success_url = f"{origin}/?success=1&session_id={{CHECKOUT_SESSION_ID}}"
+    cancel_url = f"{origin}/?canceled=1"
+
+    form = {
+        "mode": "subscription",
+        "success_url": success_url,
+        "cancel_url": cancel_url,
+        "customer_email": payload.email,
+        "line_items[0][price]": price_id,
+        "line_items[0][quantity]": "1",
+        "metadata[plan]": payload.plan,
+        "metadata[email]": payload.email,
+        "metadata[name]": payload.name or "",
+    }
+    async with httpx.AsyncClient(timeout=20.0) as client:
+        response = await client.post(
+            "https://api.stripe.com/v1/checkout/sessions",
+            data=form,
+            auth=(secret, ""),
+        )
+
+    if response.status_code >= 400:
+        raise HTTPException(status_code=response.status_code, detail=response.text)
+
+    data = response.json()
+    return {
+        "checkout_url": data.get("url"),
+        "id": data.get("id"),
+        "message": "Checkout session created.",
+    }
+
+
+@app.post("/api/checkout/session")
+async def checkout_session(request: Request, payload: CheckoutRequest) -> JSONResponse:
+    data = await create_stripe_checkout(request, payload)
+    return JSONResponse(data)
+
+
+@app.post("/api/webhooks/stripe")
+async def stripe_webhook(request: Request) -> JSONResponse:
+    webhook_secret = os.getenv("STRIPE_WEBHOOK_SECRET")
+    raw_body = await request.body()
+
+    if webhook_secret:
+        signature = request.headers.get("Stripe-Signature", "")
+        try:
+            timestamp, signatures = _parse_stripe_signature(signature)
+            _verify_stripe_signature(webhook_secret, raw_body, timestamp, signatures)
+        except ValueError as exc:
+            raise HTTPException(status_code=400, detail=str(exc)) from exc
+
+    event = await request.json()
+    event_type = event.get("type")
+    if event_type == "checkout.session.completed":
+        session = event.get("data", {}).get("object", {})
+        print(f"Stripe checkout completed for {session.get('customer_email') or session.get('customer')}")
+
+    return JSONResponse({"received": True})
+
+
+def _parse_stripe_signature(header: str) -> tuple[str, list[str]]:
+    parts = {}
+    for chunk in header.split(","):
+        if "=" in chunk:
+            key, value = chunk.split("=", 1)
+            parts.setdefault(key.strip(), []).append(value.strip())
+    if "t" not in parts or "v1" not in parts:
+        raise ValueError("Invalid Stripe signature header.")
+    return parts["t"][0], parts["v1"]
+
+
+def _verify_stripe_signature(secret: str, body: bytes, timestamp: str, signatures: list[str]) -> None:
+    expected = hmac.new(
+        secret.encode("utf-8"),
+        msg=f"{timestamp}.".encode("utf-8") + body,
+        digestmod=hashlib.sha256,
+    ).hexdigest()
+    if not any(hmac.compare_digest(expected, signature) for signature in signatures):
+        raise ValueError("Invalid Stripe signature.")
+
+
+if __name__ == "__main__":
+    import uvicorn
+
+    uvicorn.run(app, host="0.0.0.0", port=int(os.getenv("PORT", "7860")))

requirements.txt

@@ -0,0 +1,15 @@
+fastapi
+uvicorn[standard]
+pydantic
+pydantic-settings
+python-dotenv
+httpx
+supabase
+redis
+sqlalchemy
+psycopg[binary]
+jinja2
+pillow
+reportlab
+python-multipart
+aiofiles