Build on Ooki Music

ooki/
├── index.html              ← landing page
├── artists.html            ← browse all artists
├── search.html             ← global search results
├── store.html              ← digital store
├── sonic-capsules.html     ← Sonic Capsules
├── artist-covers.html      ← covers gallery
├── portals.html            ← sign-in hub
├── investor.html           ← investor pitch
├── artist.html             ← public artist profile
├── listener.html           ← public listener profile
├── developer.html          ← developer overview
├── handoff.html            ← this handoff package
├── dev-handoff.html        ← API spec & integration guide
├── admin/
│   ├── index.html          ← admin hub
│   ├── overview.html
│   ├── users.html
│   ├── permissions.html
│   ├── platform-analytics.html
│   ├── songwriters.html
│   └── merchant.html       ← store/merchant management
├── app/
│   ├── artist-dashboard.html
│   ├── listener-dashboard.html
│   └── app-analytics.html
├── artist/
│   ├── kira.html           ← live example
│   └── template.html       ← dynamic template (?artist=slug)
├── auth/
│   ├── login.html
│   ├── signup.html
│   ├── reset.html
│   ├── admin-login.html    ← admin only
│   └── 2fa.html            ← TOTP verification
├── css/
│   └── ooki-system.css     ← entire design system
├── developers/
│   ├── index.html
│   ├── api-keys.html
│   ├── sandbox.html
│   └── webhooks.html
├── guides/
│   ├── index.html
│   ├── artist-guide.html
│   ├── listener-guide.html
│   ├── developer.html      ← this page
│   └── user-guide.html
├── images/
│   ├── ooki-logo-wordmark.png
│   └── ooki-vinyl-icon.png
└── js/
    ├── ooki-shell.js       ← global UI controller (DO NOT rename)
    └── ooki-data.js        ← mock data → REPLACE with API calls

// MOCK — delete this entire block and replace
const OokiService = {
  getTracks: async (filter = {}) => {
    // TODO: replace with API call
    await delay(200);
    return { data: MOCK_TRACKS, total: MOCK_TRACKS.length };
  },
  getArtists: async (filter = {}) => {
    // TODO: replace with API call
    await delay(200);
    return { data: MOCK_ARTISTS, total: MOCK_ARTISTS.length };
  }
};

const API_BASE = 'https://api.ooki.music/v1';

async function apiFetch(path, options = {}) {
  const token = localStorage.getItem('ooki-token');
  const res = await fetch(`${API_BASE}${path}`, {
    headers: {
      'Content-Type': 'application/json',
      ...(token ? { 'Authorization': `Bearer ${token}` } : {})
    },
    ...options
  });
  if (!res.ok) throw new Error(await res.text());
  return res.json();
}

const OokiService = {
  getTracks: (filter = {}) =>
    apiFetch(`/tracks?${new URLSearchParams(filter)}`),

  getArtists: (filter = {}) =>
    apiFetch(`/artists?${new URLSearchParams(filter)}`),

  getArtist: (slug) =>
    apiFetch(`/artists/${slug}`),

  getAlbums: (filter = {}) =>
    apiFetch(`/albums?${new URLSearchParams(filter)}`),

  uploadTrack: (data) =>
    apiFetch('/tracks', { method: 'POST', body: JSON.stringify(data) })
};

const Auth = {
  login: async (email, password) => {
    const res = await apiFetch('/auth/login', {
      method: 'POST',
      body: JSON.stringify({ email, password })
    });
    if (res.token) localStorage.setItem('ooki-token', res.token);
    return res;
  },
  logout: () => {
    localStorage.clear();
    window.location.href = '../index.html';
  },
  isLoggedIn: () => !!localStorage.getItem('ooki-token'),
  getRole: () => {
    const token = localStorage.getItem('ooki-token');
    if (!token) return null;
    try {
      return JSON.parse(atob(token.split('.')[1])).role;
    } catch { return null; }
  }
};

const crypto = require('crypto');

app.post('/api/webhooks', (req, res) => {
  const sig = req.headers['x-ooki-signature'];
  const expected = crypto
    .createHmac('sha256', process.env.WEBHOOK_SECRET)
    .update(req.rawBody)
    .digest('hex');

  if (sig !== `sha256=${expected}`) {
    return res.status(401).send('Invalid signature');
  }

  const { event, data } = req.body;
  switch (event) {
    case 'payment.success':
      handlePayment(data); break;
    case 'user.signup':
      sendWelcomeEmail(data); break;
  }
  res.sendStatus(200);
});

version: 1
frontend:
  phases:
    build:
      commands:
        - echo "Static site — no build step required"
  artifacts:
    baseDirectory: /
    files:
      - '**/*'
  cache:
    paths: []