local HttpService = game:GetService("HttpService")
local inputKey = "pls-put-your-key-here"
--the key input will load the corresponding script that you got a key from
--current supported game:
--Deepwoken
--GPO

local SUPABASE_URL = "https://izrorgeghdvqmolbrhym.supabase.co"
local SUPABASE_KEY = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Iml6cm9yZ2VnaGR2cW1vbGJyaHltIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzQ1MTUyMzAsImV4cCI6MjA5MDA5MTIzMH0.g-yJp1Xdh-3W1THsyUuuaMSw-oE1eDfO4Y2kEoUQvlQ"

local hwid = tostring(game:GetService("RbxAnalyticsService"):GetClientId())

local headers = {
    ["apikey"] = SUPABASE_KEY,
    ["Authorization"] = "Bearer " .. SUPABASE_KEY,
    ["Content-Type"] = "application/json"
}

local ok, response = pcall(function()
    return HttpService:RequestAsync({
        Url = SUPABASE_URL .. "/rest/v1/keys?key=eq." .. inputKey,
        Method = "GET",
        Headers = headers
    })
end)

if not ok then warn("Connection failed") return end

local data = HttpService:JSONDecode(response.Body)

if #data == 0 then warn("Invalid key") return end

local record = data[1]

if record.expires_at then
    local y, m, d = record.expires_at:match("(%d+)-(%d+)-(%d+)")
    if os.time() > os.time({year=y, month=m, day=d}) then
        warn("Key expired") return
    end
end

if record.hwid and record.hwid ~= "" then
    if record.hwid ~= hwid then
        warn("Key is already used on another device") return
    end
else
    pcall(function()
        HttpService:RequestAsync({
            Url = SUPABASE_URL .. "/rest/v1/keys?key=eq." .. inputKey,
            Method = "PATCH",
            Headers = headers,
            Body = HttpService:JSONEncode({ hwid = hwid })
        })
    end)
end
print("enjoy brah")
loadstring(game:HttpGet(record.loader_url))()