fix: handle DB errors in bounty creation and fix payment redirect

The POST /api/bounties handler had no try/catch around the DB insert,
so any DB failure (e.g. SQLite Cloud free node paused) returned a
non-JSON 500. The browser's res.json() then threw, surfacing the
opaque "Something went wrong. Please try again." with no detail.

- Wrap the insert + CoinPay payment logic in try/catch, returning a
  proper JSON 500 { error: 'Failed to create bounty. Please try again.' }.
- Fix the new-bounty page redirect: it checked data.checkout_url, but
  the API returns data.pay_url. Users were never sent to CoinPay to
  fund the bounty; now they are redirected to pay_url.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: ralyodio

apps/web/app/api/bounties/route.ts

@@ -36,63 +36,68 @@ export async function POST(req: NextRequest) {
   if (isNaN(reward) || reward < 0.10) return NextResponse.json({ error: 'Minimum reward is $0.10' }, { status: 400 });
   if (!store_id && !store_name?.trim()) return NextResponse.json({ error: 'Store is required' }, { status: 400 });
 
-  const db = getDb();
+  try {
+    const db = getDb();
 
-  // Insert bounty as 'open' first to get an ID
-  await db.sql`
-    INSERT INTO bounties (creator_did, store_id, store_name, title, description, reward_usd, status)
-    VALUES (
-      ${did},
-      ${store_id ?? null},
-      ${store_name?.trim() ?? null},
-      ${title.trim()},
-      ${description?.trim() ?? null},
-      ${reward},
-      'open'
-    )
-  `;
-  const [{ id: bountyId }] = await db.sql`
-    SELECT id FROM bounties WHERE creator_did = ${did} ORDER BY id DESC LIMIT 1
-  `;
+    // Insert bounty as 'open' first to get an ID
+    await db.sql`
+      INSERT INTO bounties (creator_did, store_id, store_name, title, description, reward_usd, status)
+      VALUES (
+        ${did},
+        ${store_id ?? null},
+        ${store_name?.trim() ?? null},
+        ${title.trim()},
+        ${description?.trim() ?? null},
+        ${reward},
+        'open'
+      )
+    `;
+    const [{ id: bountyId }] = await db.sql`
+      SELECT id FROM bounties WHERE creator_did = ${did} ORDER BY id DESC LIMIT 1
+    `;
 
-  // Create a CoinPay payment for the creator to fund the bounty
-  // Docs: POST /api/payments/create
-  let paymentAddress: string | null = null;
-  let paymentId: string | null = null;
+    // Create a CoinPay payment for the creator to fund the bounty
+    // Docs: POST /api/payments/create
+    let paymentAddress: string | null = null;
+    let paymentId: string | null = null;
 
-  try {
-    const res = await fetch(`${COINPAY_BASE}/api/payments/create`, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${API_KEY}` },
-      body: JSON.stringify({
-        business_id: MERCHANT_ID,
-        amount_usd: reward,
-        currency: 'usdc_pol',   // default to USDC on Polygon — low fees
-        description: `Coupon bounty: ${title.trim()}`,
-        redirect_url: `${APP_URL}/bounties/${bountyId}?funded=1`,
-        metadata: { type: 'bounty_fund', bounty_id: bountyId, creator_did: did },
-      }),
-    });
+    try {
+      const res = await fetch(`${COINPAY_BASE}/api/payments/create`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${API_KEY}` },
+        body: JSON.stringify({
+          business_id: MERCHANT_ID,
+          amount_usd: reward,
+          currency: 'usdc_pol',   // default to USDC on Polygon — low fees
+          description: `Coupon bounty: ${title.trim()}`,
+          redirect_url: `${APP_URL}/bounties/${bountyId}?funded=1`,
+          metadata: { type: 'bounty_fund', bounty_id: bountyId, creator_did: did },
+        }),
+      });
 
-    if (res.ok) {
-      const data = await res.json();
-      paymentId = data.payment_id ?? data.id ?? null;
-      paymentAddress = data.payment_address ?? null;
-      if (paymentId) {
-        await db.sql`UPDATE bounties SET payment_id = ${paymentId} WHERE id = ${bountyId}`;
+      if (res.ok) {
+        const data = await res.json();
+        paymentId = data.payment_id ?? data.id ?? null;
+        paymentAddress = data.payment_address ?? null;
+        if (paymentId) {
+          await db.sql`UPDATE bounties SET payment_id = ${paymentId} WHERE id = ${bountyId}`;
+        }
+      } else {
+        const err = await res.text();
+        console.error('CoinPay payment create error:', err);
       }
-    } else {
-      const err = await res.text();
-      console.error('CoinPay payment create error:', err);
+    } catch (e) {
+      console.error('CoinPay payment create failed:', e);
     }
+
+    return NextResponse.json({
+      id: bountyId,
+      payment_id: paymentId,
+      payment_address: paymentAddress,
+      pay_url: paymentId ? `${COINPAY_BASE}/pay/${paymentId}` : null,
+    }, { status: 201 });
   } catch (e) {
-    console.error('CoinPay payment create failed:', e);
+    console.error('Failed to create bounty:', e);
+    return NextResponse.json({ error: 'Failed to create bounty. Please try again.' }, { status: 500 });
   }
-
-  return NextResponse.json({
-    id: bountyId,
-    payment_id: paymentId,
-    payment_address: paymentAddress,
-    pay_url: paymentId ? `${COINPAY_BASE}/pay/${paymentId}` : null,
-  }, { status: 201 });
 }

apps/web/app/bounties/new/page.tsx

@@ -50,9 +50,9 @@ export default function NewBountyPage() {
       });
       const data = await res.json();
       if (!res.ok) { setError(data.error ?? 'Failed to create bounty'); return; }
-      // If CoinPay returned a checkout URL, redirect there to fund the bounty
-      if (data.checkout_url) {
-        window.location.href = data.checkout_url;
+      // If CoinPay returned a payment URL, redirect there to fund the bounty
+      if (data.pay_url) {
+        window.location.href = data.pay_url;
       } else {
         router.push(`/bounties/${data.id}`);
       }