[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","Goldworkspace","name","gold-signal-bot","path","main.ts","project",{"_22":46,"_11":12,"_33":47,"_48":-5,"_49":42,"_50":51,"_52":51,"_53":54,"_55":-5,"_56":57,"_58":25,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_13":45},"permalink","https://www.val.town/x/Goldworkspace/gold-signal-bot/code/main.ts","extension","id","6e1c2d33-c084-486d-b002-5beccb3ff80b","fileId","f53e80aa-a9d6-11f1-bbcc-1607ee4eb77e","parentId","branchId","052f6539-63b6-428e-bd86-f7c5cd7e6c65","branchVersion",111,"latest",true,"createdAt",["D",1788697733439],"version",85,"fileType","http","content","import { confirmPhoneLogin, htmlLogin, initLoginTables, startPhoneLogin, splitSession } from \"./telegram_login.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { derivConfig, DerivTradingNotWiredError, fetchDerivAccounts } from \"./deriv_client.ts\";\nimport { deleteWebhook, getMe, getUpdates, messageFromUpdate, setWebhook, webhookInfo } from \"./telegram_bot.ts\";\nimport { mtprotoMissing, readChatText } from \"./telegram_mtproto.ts\";\n\n/* ============================================================\n GOLD SIGNAL BOT — engine + Deriv execution + Telegram webhook\n Dashboard is plain vanilla JS (no React, no esm.sh) so it\n always renders. Server engine verified working.\n ============================================================ */\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS gold_trades (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n trace_id TEXT UNIQUE NOT NULL,\n ts TEXT NOT NULL, symbol TEXT NOT NULL DEFAULT 'XAUUSD',\n direction TEXT NOT NULL, entry REAL, stop_loss REAL, take_profit REAL,\n amount REAL, pip_distance REAL,\n status TEXT NOT NULL, contract_id TEXT, error_text TEXT, raw_signal TEXT)`);\nawait sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_gold_status ON gold_trades(status)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS settings (key TEXT PRIMARY KEY, value TEXT NOT NULL)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS risk (k TEXT PRIMARY KEY, v TEXT)`);\nawait initLoginTables();\n\nconst q = async (sql: string, args: unknown[] = []) =>\n (await sqlite.execute({ sql, args })).rows as Record[];\n\nconst SETTINGS_DEFAULTS: Record = {\n DERIV_API_TOKEN: \"\", DERIV_CLIENT_ID: \"\",\n TELEGRAM_BOT_TOKEN: \"\", ADMIN_CHAT_ID: \"\",\n TG_API_ID: \"\", TG_API_HASH: \"\", TG_SOURCE: \"\",\n RISK_PER_TRADE: \"1\", ACCOUNT_BALANCE: \"10000\", AUTO_TRADE: \"off\", DERIV_MODE: \"demo\",\n GOLD_SYMBOL: \"frxXAUUSD\", DERIV_TIMEOUT_MS: \"12000\",\n MAX_DAILY_TRADES: \"8\", COOLDOWN_MS: \"180000\", MAX_CONSECUTIVE_LOSSES: \"3\",\n};\n\n/** Deriv uses ONE Personal Access Token (PAT) for the whole account.\n We always use DERIV_API_TOKEN; DERIV_CLIENT_ID is your App/Client ID. */\nasync function activeToken(): Promise {\n return await getSetting(\"DERIV_API_TOKEN\");\n}\n\nasync function getSetting(key: string, dflt: string = SETTINGS_DEFAULTS[key] ?? \"\"): Promise {\n const r = await q(\"SELECT value FROM settings WHERE key=?\", [key]);\n if (r[0] && r[0].value != null && r[0].value !== \"\") return String(r[0].value);\n return Deno.env.get(key) ?? dflt;\n}\nasync function setSetting(key: string, value: string): Promise {\n const v = String(value ?? \"\").trim();\n if (v === \"\") await sqlite.execute({ sql: \"DELETE FROM settings WHERE key=?\", args: [key] });\n else await sqlite.execute({ sql: \"INSERT INTO settings(key,value) VALUES(?,?) ON CONFLICT(key) DO UPDATE SET value=excluded.value\", args: [key, v] });\n}\nasync function storedKeys(): Promise {\n return (await q(\"SELECT key FROM settings\")).map((r) => String(r.key));\n}\n\n/* ---------------- Risk engine ---------------- */\nasync function readRisk(): Promise> {\n const m: Record = {};\n for (const r of await q(\"SELECT k, v FROM risk\")) m[String(r.k)] = String(r.v);\n return m;\n}\nasync function writeRisk(obj: Record): Promise {\n for (const [k, v] of Object.entries(obj)) {\n await sqlite.execute({ sql: \"INSERT INTO risk(k,v) VALUES(?,?) ON CONFLICT(k) DO UPDATE SET v=excluded.v\", args: [k, v] });\n }\n}\nconst todayUTC = () => new Date().toISOString().slice(0, 10);\nasync function riskState(): Promise> {\n const s = await readRisk();\n if (s.day !== todayUTC()) {\n const reset = { day: todayUTC(), trades: \"0\", consecutive: \"0\", halted: s.halted ?? \"false\", haltReason: s.haltReason ?? \"\" };\n await writeRisk(reset);\n return reset;\n }\n return s;\n}\nasync function riskGate(): Promise<{ ok: boolean; reason?: string }> {\n const s = await riskState();\n if (s.halted === \"true\") return { ok: false, reason: `Trading halted: ${s.haltReason || \"manual\"}` };\n const dow = new Date().getUTCDay();\n if (dow === 6 || dow === 0) return { ok: false, reason: \"Gold market closed (weekend UTC)\" };\n const max = Number(await getSetting(\"MAX_DAILY_TRADES\", \"8\")) || 8;\n if (Number(s.trades || 0) >= max) return { ok: false, reason: `Max daily trades (${max}) reached` };\n const cooldown = Number(await getSetting(\"COOLDOWN_MS\", \"180000\")) || 180000;\n if (s.lastTrade && Date.now() - Number(s.lastTrade) < cooldown) {\n const wait = Math.ceil((cooldown - (Date.now() - Number(s.lastTrade))) / 1000);\n return { ok: false, reason: `Cooldown: ${wait}s left` };\n }\n return { ok: true };\n}\nasync function recordAttempt(status: string): Promise {\n const s = await riskState();\n s.trades = String(Number(s.trades || 0) + 1);\n s.lastTrade = String(Date.now());\n if (status === \"FAILED\") {\n s.consecutive = String(Number(s.consecutive || 0) + 1);\n const maxConsec = Number(await getSetting(\"MAX_CONSECUTIVE_LOSSES\", \"3\")) || 3;\n if (Number(s.consecutive) >= maxConsec) { s.halted = \"true\"; s.haltReason = `${maxConsec} consecutive failures (circuit breaker)`; }\n } else if (status === \"LIVE\" || status === \"SIMULATED\") {\n s.consecutive = \"0\";\n }\n await writeRisk(s);\n}\n\n/* ---------------- Domain ---------------- */\ntype Dir = \"LONG\" | \"SHORT\";\ninterface GoldSignal { symbol: \"XAUUSD\"; direction: Dir; entry: number; stopLoss: number; takeProfit: number; pipDistance: number; rawText: string; }\n\nfunction parseDir(s: string): Dir | null {\n const m: Record = { long: \"LONG\", call: \"LONG\", buy: \"LONG\", up: \"LONG\", short: \"SHORT\", put: \"SHORT\", sell: \"SHORT\", down: \"SHORT\" };\n return m[s.trim().toLowerCase()] ?? null;\n}\n/** Mine a Savanna Trading Desk style alert. Fields are extracted by label so\n a \"59% confidence\" or other stray number can't break the match.\n Price -> entry, Stop -> SL, T1 -> TP. */\nfunction parseSavanna(text: string): GoldSignal | null {\n if (!/\\bSAVANNA\\b/i.test(text) && !/\\bPrice:\\s*\\$/.test(text)) return null;\n const direction = /(?:^|\\n)\\s*(?:🟢|🔴)?\\s*\\b(BUY|SELL|LONG|SHORT|call|put)\\b/i.exec(text);\n if (!direction) return null;\n const entry = /Price\\s*[:=]?\\s*\\$?\\s*([\\d,]{3,6}(?:\\.\\d{1,2})?)/i.exec(text);\n const sl = /(?:Stop|SL)\\s*[:=]?\\s*\\$?\\s*([\\d,]{3,6}(?:\\.\\d{1,2})?)/i.exec(text);\n // T1 is the near target; fall back to T2 if T1 missing.\n const tp = /T1\\s*[:=]?\\s*\\$?\\s*([\\d,]{3,6}(?:\\.\\d{1,2})?)/i.exec(text) ||\n /T2\\s*[:=]?\\s*\\$?\\s*([\\d,]{3,6}(?:\\.\\d{1,2})?)/i.exec(text);\n if (!entry || !sl || !tp) return null;\n const clean = (s: string) => Number(String(s).replace(/,/g, \"\"));\n const dir = parseDir(direction[1]);\n const entryN = clean(entry[1]), slN = clean(sl[1]), tpN = clean(tp[1]);\n if (!dir) return null;\n if ([entryN, slN, tpN].some((v) => !isFinite(v) || v < 1500 || v > 5000)) return null;\n const loseSide = dir === \"LONG\" ? slN < entryN : slN > entryN;\n if (!loseSide) return null;\n if (Math.abs(entryN - slN) < 1.0) return null;\n return { symbol: \"XAUUSD\", direction: dir, entry: entryN, stopLoss: slN, takeProfit: tpN, pipDistance: Math.round(Math.abs(entryN - slN) * 100), rawText: text };\n}\n\nexport function parseGoldSignal(text: string): GoldSignal | null {\n // Savanna Trading Desk format, e.g.:\n // 🦁 SAVANNA TRADING DESK\n // 🟢 BUY — 59% confidence\n // 💰 Price: $4429.05\n // 🔻 Support: $4428.77 🔺 Resistance: $4435.57\n // 🛑 Stop: $4428.65 🎯 T1: $4429.65 T2: $4430.05\n // Each field is mined independently (there's a \"59% confidence\" number\n // between direction and entry, so one big regex would trip on it).\n const savanna = parseSavanna(text);\n if (savanna) return savanna;\n // Each pattern declares which capture group holds direction/entry/sl/tp,\n // because they differ per format.\n const pats: { re: RegExp; dir: number; entry: number; sl: number; tp: number }[] = [\n // Strict: [XAUUSD/GOLD] [BUY/SELL/...] [entry] [SL x] [TP x]\n { re: /(XAUUSD|GOLD|XAU)\\b[\\s\\S]{0,40}?(BUY|SELL|LONG|SHORT|call|put|up|down)[:@#\\s]*[,=\\s@]?\\s*(\\d{2,5}\\.\\d{2})[\\s\\S]{0,40}?(?:SL|stop|Stop Loss)[\\s:=#]*(\\d{2,5}\\.\\d{2})[\\s\\S]{0,40}?(?:TP|target|Take Profit)[\\s:=#]*(\\d{2,5}\\.\\d{2})/i, dir: 2, entry: 3, sl: 4, tp: 5 },\n // Lenient: BUY/SELL entry ... SL x ... TP x (no gold keyword prefix)\n { re: /\\b(BUY|SELL|LONG|SHORT|call|put)\\b[^\\d\\n]{0,25}(\\d{2,5}\\.\\d{1,2})[^\\d\\n]{0,30}?(?:SL|Stop|Stop Loss)\\b[\\s:=#]*(\\d{2,5}\\.\\d{1,2})\\b[^\\d\\n]{0,30}?(?:TP|Target|Take Profit|target)\\b[\\s:=#]*(\\d{2,5}\\.\\d{1,2})\\b/i, dir: 1, entry: 2, sl: 3, tp: 4 },\n // Entry-first: 2650.45 BUY, SL ... TP ...\n { re: /\\b(\\d{2,5}\\.\\d{1,2})\\b[^\\d\\n]{0,20}?\\b(BUY|SELL|LONG|SHORT|call|put)\\b[^\\d\\n]{0,30}?(?:SL|Stop|Stop Loss)\\b[\\s:=#]*(\\d{2,5}\\.\\d{1,2})\\b[^\\d\\n]{0,30}?(?:TP|Target|Take Profit)\\b[\\s:=#]*(\\d{2,5}\\.\\d{1,2})\\b/i, dir: 2, entry: 1, sl: 3, tp: 4 },\n ];\n for (const p of pats) {\n const m = text.match(p.re);\n if (!m) continue;\n const direction = parseDir(m[p.dir]);\n if (!direction) continue;\n const entry = Number(m[p.entry]), sl = Number(m[p.sl]), tp = Number(m[p.tp]);\n if ([entry, sl, tp].some((v) => !isFinite(v) || v < 1500 || v > 5000)) continue;\n const loseSide = direction === \"LONG\" ? sl < entry : sl > entry;\n if (!loseSide) continue;\n if (Math.abs(entry - sl) < 1.0) continue;\n return { symbol: \"XAUUSD\", direction, entry, stopLoss: sl, takeProfit: tp, pipDistance: Math.round(Math.abs(entry - sl) * 100), rawText: text };\n }\n return null;\n}\n\nasync function sizePosition(s: GoldSignal, bal: number) {\n const riskPct = Number(await getSetting(\"RISK_PER_TRADE\", \"1\")) || 1;\n let amount = bal * (riskPct / 100);\n amount = Math.min(amount, bal * 0.05);\n amount = Math.max(0.5, Math.round(amount * 100) / 100);\n return { amount, riskPct, pipDistance: s.pipDistance };\n}\n\nasync function isDuplicate(s: GoldSignal): Promise {\n const fiveMinAgo = new Date(Date.now() - 300_000).toISOString();\n const r = await q(\"SELECT COUNT(*) c FROM gold_trades WHERE symbol=? AND direction=? AND entry=? AND ts>?\", [\"XAUUSD\", s.direction, s.entry, fiveMinAgo]);\n return Number((r[0] as any)?.c ?? 0) > 0;\n}\n\nasync function processSignal(raw: string, opts: { execute: boolean } = { execute: false }): Promise> {\n const traceId = crypto.randomUUID();\n const signal = parseGoldSignal(raw);\n if (!signal) {\n await sqlite.execute({ sql: \"INSERT INTO gold_trades (trace_id, ts, symbol, direction, status, raw_signal) VALUES (?,?,?,?,'REJECTED',?)\", args: [traceId, new Date().toISOString(), \"XAUUSD\", \"\", raw.slice(0, 500)] });\n return { traceId, rejected: \"Could not parse a valid XAUUSD signal.\" };\n }\n if (await isDuplicate(signal)) return { traceId, rejected: \"Duplicate signal (same direction/entry within 5 min).\" };\n const gate = await riskGate();\n if (!gate.ok) {\n await sqlite.execute({ sql: \"INSERT INTO gold_trades (trace_id, ts, symbol, direction, status, error_text, raw_signal) VALUES (?,?,?,?,'REJECTED',?,?)\", args: [traceId, new Date().toISOString(), \"XAUUSD\", signal.direction, gate.reason ?? \"blocked\", signal.rawText] });\n return { traceId, rejected: gate.reason };\n }\n const bal = Number(await getSetting(\"ACCOUNT_BALANCE\", \"10000\")) || 10000;\n const sizing = await sizePosition(signal, bal);\n let status = \"SIMULATED\", contractId: string | null = null, errorText: string | null = null;\n if (opts.execute) {\n // Honest: live trade execution on the new Deriv API (OTP websocket flow)\n // is not wired up yet. Refuse rather than pretend to place a contract.\n status = \"FAILED\";\n errorText = \"Live trading is not wired to the new Deriv API yet. The balance dashboard is live; signal execution needs the OTP websocket flow.\";\n }\n await sqlite.execute({ sql: \"INSERT OR IGNORE INTO gold_trades (trace_id, ts, symbol, direction, entry, stop_loss, take_profit, amount, pip_distance, status, contract_id, error_text, raw_signal) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?)\", args: [traceId, new Date().toISOString(), \"XAUUSD\", signal.direction, signal.entry, signal.stopLoss, signal.takeProfit, sizing.amount, signal.pipDistance, status, contractId, errorText, signal.rawText] });\n await recordAttempt(status);\n return { traceId, signal, sizing, status, contractId, error: errorText };\n}\n\n/** Pull messages that arrived at the Telegram bot via getUpdates\n (official Bot API), parse each as a signal, and advance the offset so\n nothing is processed twice. Returns what was found + outcome. */\nexport async function pullTelegram(): Promise> {\n const token = await getSetting(\"TELEGRAM_BOT_TOKEN\");\n if (!token) return { ok: false, error: \"TELEGRAM_BOT_TOKEN not set — add it in Settings.\" };\n const offsetRaw = Number(await getSetting(\"TG_OFFSET\", \"0\")) || 0;\n try {\n const upd = await getUpdates({ offset: offsetRaw, limit: 100, timeout: 1 }, token);\n if (!upd.ok) return { ok: false, error: upd.description ?? \"getUpdates failed\" };\n const results = (upd.result ?? []) as any[];\n const processed: unknown[] = [];\n let maxId = offsetRaw;\n let withText = 0;\n for (const u of results) {\n if ((u as any).update_id >= maxId) maxId = (u as any).update_id + 1;\n const msg = messageFromUpdate(u);\n if (!msg?.text) continue;\n withText++;\n const res = await processSignal(msg.text, { execute: (await getSetting(\"AUTO_TRADE\", \"off\")) === \"live\" });\n processed.push({ update_id: u.update_id, chat: msg.chat, raw: msg.text.slice(0, 600), ...res });\n }\n if (maxId > offsetRaw) await setSetting(\"TG_OFFSET\", String(maxId));\n return { ok: true, pulled: results.length, withText, processed, nextOffset: maxId };\n } catch (e: unknown) {\n return { ok: false, error: e instanceof Error ? e.message : String(e) };\n }\n}\n\nconst rows = async (sql: string, args: unknown[] = []) => q(sql, args);\nconst json = (o: unknown, status = 200) => new Response(JSON.stringify(o), { status, headers: { \"content-type\": \"application/json\" } });\n\nasync function integrationStatus(): Promise> {\n const token = await activeToken();\n return {\n derivToken: !!token,\n derivClientId: await getSetting(\"DERIV_CLIENT_ID\"),\n telegramToken: !!(await getSetting(\"TELEGRAM_BOT_TOKEN\")),\n adminChat: !!(await getSetting(\"ADMIN_CHAT_ID\")),\n symbol: await getSetting(\"GOLD_SYMBOL\", \"frxXAUUSD\"),\n mode: (await getSetting(\"DERIV_MODE\", \"demo\")).toLowerCase(),\n autoTrade: await getSetting(\"AUTO_TRADE\", \"off\"),\n riskPerTrade: `${await getSetting(\"RISK_PER_TRADE\", \"1\")}%`,\n haltMarker: (await riskState()).halted,\n };\n}\n\n/* ---------------- Deriv account balances (new API, one PAT) ----------------\n `GET /trading/v1/options/accounts` returns ALL of your options accounts\n (demo + real) in one authenticated REST call. This is Deriv's real model:\n one PAT inside the whole account, and we show every balance. */\nasync function accountBalances(): Promise> {\n const mode = (await getSetting(\"DERIV_MODE\", \"demo\")).toLowerCase();\n const token = await activeToken();\n if (!token) {\n return { ok: false, error: \"DERIV_API_TOKEN (PAT) not set\", accounts: [], mode, at: new Date().toISOString() };\n }\n try {\n const cfg = derivConfig({\n token,\n clientId: (await getSetting(\"DERIV_CLIENT_ID\")) || (await getSetting(\"DERIV_APP_ID\")),\n timeoutMs: Number(await getSetting(\"DERIV_TIMEOUT_MS\", \"12000\")),\n });\n const accounts = await fetchDerivAccounts(cfg);\n return { ok: true, mode, accounts, at: new Date().toISOString() };\n } catch (e: unknown) {\n return { ok: false, error: e instanceof Error ? e.message : String(e), accounts: [], mode, at: new Date().toISOString() };\n }\n}\n\n/* ---------------- HTTP handler ---------------- */\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname === \"/tg-webhook\" && req.method === \"POST\") {\n const update = await req.json();\n const msg = messageFromUpdate(update as any);\n if (!msg?.text) return json({ ok: true });\n const result = await processSignal(msg.text, { execute: (await getSetting(\"AUTO_TRADE\", \"off\")) === \"live\" });\n return json({ ok: true, ...result });\n }\n\n if (url.pathname === \"/ingest\") {\n const raw = url.searchParams.get(\"text\") ?? \"\";\n if (!raw.trim()) return json({ error: \"Provide ?text=\" }, 400);\n return json(await processSignal(raw));\n }\n\n if (url.pathname === \"/pull\") return json(await pullTelegram());\n\n if (url.pathname === \"/deletewebhook\") {\n const token = await getSetting(\"TELEGRAM_BOT_TOKEN\");\n if (!token) return json({ error: \"TELEGRAM_BOT_TOKEN not set — add it in Settings.\" });\n try { await deleteWebhook(token); return json({ ok: true, note: \"Webhook removed. getUpdates polling is now active.\" }); }\n catch (e: unknown) { return json({ ok: false, error: e instanceof Error ? e.message : String(e) }); }\n }\n\n if (url.pathname === \"/getme\") {\n const token = await getSetting(\"TELEGRAM_BOT_TOKEN\");\n if (!token) return json({ error: \"TELEGRAM_BOT_TOKEN not set — add it in Settings.\" });\n try { return json(await getMe(token)); }\n catch (e: unknown) { return json({ ok: false, error: e instanceof Error ? e.message : String(e) }); }\n }\n\n if (url.pathname === \"/webhookinfo\") {\n const token = await getSetting(\"TELEGRAM_BOT_TOKEN\");\n if (!token) return json({ error: \"TELEGRAM_BOT_TOKEN not set — add it in Settings.\" });\n try {\n const r = await fetch(`https://api.telegram.org/bot${token}/getWebhookInfo`);\n const w = await r.json();\n const url2 = (w as any)?.result?.url || \"\";\n return json({ ok: !!url2, url: url2, pending: (w as any)?.result?.pending_update_count || 0, webhook: w });\n } catch (e: unknown) { return json({ ok: false, error: e instanceof Error ? e.message : String(e) }); }\n }\n\n if (url.pathname === \"/trade\") {\n const raw = url.searchParams.get(\"text\") ?? \"\";\n if (!raw.trim()) return json({ error: \"Provide ?text=\" }, 400);\n return json(await processSignal(raw, { execute: true }));\n }\n\n if (url.pathname === \"/verify\") {\n const raw = url.searchParams.get(\"text\") ?? \"\";\n if (!raw.trim()) return json({ error: \"Provide ?text=\" }, 400);\n return json(await processSignal(raw)); // simulate (live trading not wired yet)\n }\n\n if (url.pathname === \"/tg-login\") {\n if (req.method === \"GET\") {\n return new Response(htmlLogin(url.origin), { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n }\n // POST: either { phone } to start, or { phone, code } to confirm.\n try {\n const body = await req.json().catch(() => ({}));\n const phone = String((body as any)?.phone || \"\").trim();\n if (!phone) return json({ ok: false, error: \"Provide phone.\" });\n const code = String((body as any)?.code || \"\").trim();\n if (!code) {\n const started = await startPhoneLogin(phone);\n return json({ sent: true, ...started });\n }\n const confirmed = await confirmPhoneLogin(phone, code);\n if (confirmed.ok && confirmed.session) {\n await setSetting(\"TG_MT_PROTO_SESSION\", confirmed.session);\n return json({ ok: true, sessionSaved: true });\n }\n return json({ ok: false, error: confirmed.error ?? \"Login failed.\" });\n } catch (e: unknown) { return json({ ok: false, error: e instanceof Error ? e.message : String(e) }); }\n }\n\n if (url.pathname === \"/tg-scan\") {\n const missing = await mtprotoMissing();\n if (missing) return json({ ok: false, error: missing });\n const sender = (await getSetting(\"TG_SOURCE\")) || url.searchParams.get(\"source\") || \"\";\n if (!sender) return json({ ok: false, error: \"TG_SOURCE not set. Set it to your telegram bot username, e.g. @YourSignalsBot.\" });\n try {\n const fetched = await readChatText(sender, 25);\n const processed = [];\n for (const m of fetched.messages) {\n const res = await processSignal(m.text, { execute: (await getSetting(\"AUTO_TRADE\", \"off\")) === \"live\" });\n processed.push({ id: m.id, date: new Date(m.date).toISOString(), ...res });\n }\n return json({ ok: true, source: sender, title: fetched.title, pulled: fetched.messages.length, processed });\n } catch (e: unknown) { return json({ ok: false, error: e instanceof Error ? e.message : String(e) }); }\n }\n\n if (url.pathname === \"/setup-webhook\") {\n const token = await getSetting(\"TELEGRAM_BOT_TOKEN\");\n if (!token) return json({ error: \"TELEGRAM_BOT_TOKEN not set — add it in Settings.\" });\n const endpoint = url.origin + \"/tg-webhook\";\n try { await setWebhook(endpoint, {}, token); return json({ ok: true, endpoint }); }\n catch (e: unknown) { return json({ ok: false, error: e instanceof Error ? e.message : String(e) }); }\n }\n\n if (url.pathname === \"/api/settings\") {\n if (req.method === \"POST\") {\n const body = await req.json();\n for (const [k, v] of Object.entries(body)) if (k in SETTINGS_DEFAULTS) await setSetting(k, String(v));\n const res: Record = { ok: true };\n for (const k of Object.keys(SETTINGS_DEFAULTS)) res[k] = await getSetting(k);\n return json(res);\n }\n const res: Record = { stored: await storedKeys() };\n for (const k of Object.keys(SETTINGS_DEFAULTS)) res[k] = await getSetting(k);\n return json(res);\n }\n\n if (url.pathname === \"/api/risk\") {\n const st = await riskState();\n const gate = await riskGate();\n const dow = new Date().getUTCDay();\n return json({ ...st, marketOpen: dow !== 0 && dow !== 6, gate: gate.ok ? \"open\" : \"blocked\", reason: gate.reason });\n }\n if (url.pathname === \"/halt\") { await writeRisk({ halted: \"true\", haltReason: \"manual\" }); return json({ ok: true }); }\n if (url.pathname === \"/resume\") { await writeRisk({ halted: \"false\", haltReason: \"\", consecutive: \"0\" }); return json({ ok: true }); }\n\n if (url.pathname === \"/api/balance\") return json(await accountBalances());\n if (url.pathname === \"/api/recent\") return json(await rows(\"SELECT id, trace_id, ts, direction, entry, stop_loss, take_profit, amount, pip_distance, status, contract_id FROM gold_trades ORDER BY id DESC LIMIT 25\"));\n if (url.pathname === \"/api/stats\") {\n const one = async (sql: string, args: unknown[] = []) => (await q(sql, args))[0];\n const t = await one(\"SELECT COUNT(*) c FROM gold_trades WHERE status NOT IN ('REJECTED')\");\n const live = await one(\"SELECT COUNT(*) c FROM gold_trades WHERE status='LIVE'\");\n const failed = await one(\"SELECT COUNT(*) c FROM gold_trades WHERE status='FAILED'\");\n const open = await one(\"SELECT COALESCE(SUM(amount),0) o FROM gold_trades WHERE status='LIVE'\");\n return json({ total: t?.c ?? 0, live: live?.c ?? 0, failed: failed?.c ?? 0, exposure: open?.o ?? 0, integrations: await integrationStatus() });\n }\n\n return new Response(DASHBOARD, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n}\n\n/* ---------------- Dashboard (vanilla JS, no external deps) ---------------- */\nconst DASHBOARD = `Gold Signal Bot\n\n

🥇 Gold Signal Bot

💳 Deriv account balances

Loading live balance from Deriv…

\n \n

\n\n

Ingest a signal

\n \n \n \n

Recent signals

#	Dir	Entry	SL	TP	Pips	Stake	Status

Status

\n \n \n \n \n

🔀 Account mode

demo

\n \n \n

One Deriv API key authorizes your whole account. DERIV_MODE just tells the bot which environment to trade; the balance shown is whatever account your key is bound to.

⚙️ Settings

🔐 Telegram login (read your bot)

\n Your Telegram phone (you, not the bot)\n \n Code sent to you (after step 1)\n \n \n \n

\n \n

Armed while you sleep

Paste your Deriv demo token + app id, set Auto-trade = on, Save.
Add your Telegram bot to the signal channel, click Register webhook.
Click Verify Gold symbol once.
Let it run on demo before going near real money.

\n\n`;\n","deleted",false,"label","gold-signal-live",[14],"8caac29c-f32e-4f26-ab69-b12a18b3597b",["D",1788687592224],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Telegram XAUUSD signal parse, risk-size and journal on Val Town","imageUrl","userId","5405944a-128b-47c4-af73-76e267e46fec","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a07610-2b05-75c8-9aa5-3b4cbaeb8839","tursoName","8caac29cf32e4f26ab69b12a18b3597b","tursoHostname","8caac29cf32e4f26ab69b12a18b3597b-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789472446807],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_56":57,"_102":103,"_104":42},"branch",{"_35":30,"_11":89,"_22":28,"_90":46,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Muiruri Muiruri Ngugi","avatar","https://lh3.googleusercontent.com/a/ACg8ocIL2QlMIcfe6TlJejp2TWNHfbtZXNrBQnQytRRElr7jGsxE1g=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":63,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]