[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","asnfq50","name","najla-makeup","path","index.tsx","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":12,"_13":44},"permalink","https://www.val.town/x/asnfq50/najla-makeup/code/index.tsx","extension","id","14693d07-44e1-4cda-b719-b955edc6b2b1","fileId","01a09cac-8e2f-7716-b801-b7ea38740c6d","parentId","branchId","2fb3b93c-3153-49cc-928f-ccd798836746","branchVersion",46,"latest",true,"createdAt",["D",1789376501345],"version",2,"fileType","http","content","/** @jsxImportSource npm:hono@4/jsx */\nimport { Hono } from \"npm:hono@4\";\nimport type { Context } from \"npm:hono@4\";\nimport { serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport * as db from \"./lib/db.ts\";\nimport type { BookingView, Settings, Status } from \"./lib/db.ts\";\nimport { addDays, availableSlots, isDate, isTime, nowRiyadh, toMin } from \"./lib/time.ts\";\nimport { CITIES, isLocation, normalizePhone, toLatinDigits, unitPrice } from \"./lib/format.ts\";\nimport { checkPassword, clientIp, endSession, requireAdmin, startSession } from \"./lib/auth.ts\";\nimport { BookingPage, BookPage, HomePage, NotFoundPage } from \"./views/public.tsx\";\nimport { BookingsAdmin, GalleryAdmin, LoginPage, ServicesAdmin, SettingsAdmin } from \"./views/admin.tsx\";\n\nconst app = new Hono();\n\ntype Body = Record;\nconst str = (b: Body, key: string, max = 500) => {\n const v = b[key];\n return typeof v === \"string\" ? v.trim().slice(0, max) : \"\";\n};\nconst int = (raw: string, min: number, max: number, fallback: number) => {\n const n = Number(toLatinDigits(raw));\n return raw !== \"\" && Number.isInteger(n) && n >= min && n <= max ? n : fallback;\n};\nconst clampPeople = (raw: string) => int(raw, 1, 6, 1);\nconst list = (b: Body, key: string) => ([] as unknown[]).concat(b[key] ?? []).filter((v): v is string => typeof v === \"string\");\n\n/** Listed prices only apply in the configured cities; elsewhere the price is agreed on WhatsApp. */\nfunction bookingPrice(service: db.Service, people: number, city: string, s: Settings) {\n const unit = unitPrice(service, people);\n return unit != null && s.priceCities.includes(city) ? unit * people : null;\n}\n\nasync function render(c: Context, el: unknown, status = 200) {\n const html = await (el as { toString(): string | Promise }).toString();\n return c.html(\"\" + html, status as 200);\n}\n\napp.use(\"*\", async (c, next) => {\n await db.ensureSchema();\n await next();\n try {\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"strict-origin-when-cross-origin\");\n if (c.req.path.startsWith(\"/admin\")) {\n c.header(\"X-Frame-Options\", \"DENY\");\n c.header(\"Cache-Control\", \"no-store\");\n }\n } catch {\n // some responses have immutable headers\n }\n});\n\n// ── Public site ─────────────────────────────────────────────\napp.get(\"/\", async (c) => {\n const [s, services, gallery] = await Promise.all([\n db.getSettings(),\n db.listServices(true),\n db.listGallery(true),\n ]);\n return render(c, );\n});\n\nfunction bookingRange(s: Settings) {\n const today = nowRiyadh().date;\n return { minDate: addDays(today, Math.floor(s.minNoticeHours / 24)), maxDate: addDays(today, s.maxDaysAhead) };\n}\n\napp.get(\"/book\", async (c) => {\n const [s, services] = await Promise.all([db.getSettings(), db.listServices(true)]);\n const values = { service_id: c.req.query(\"service\") ?? \"\", people: \"1\" };\n return render(c, );\n});\n\napp.get(\"/api/slots\", async (c) => {\n const [s, service] = await Promise.all([\n db.getSettings(),\n db.getService(Number(c.req.query(\"service\"))),\n ]);\n c.header(\"Cache-Control\", \"no-store\");\n if (!service || !service.active) return c.json({ ok: false, reason: \"الخدمة غير متاحة.\", slots: [] });\n const people = clampPeople(c.req.query(\"people\") ?? \"1\");\n return c.json(await availableSlots(c.req.query(\"date\") ?? \"\", service.duration_min * people, s));\n});\n\nconst BOOK_FIELDS = [\"service_id\", \"people\", \"location_type\", \"city\", \"date\", \"time\", \"name\", \"phone\", \"notes\"];\n\napp.post(\"/book\", async (c) => {\n const body = (await c.req.parseBody()) as Body;\n if (str(body, \"website\")) return c.redirect(\"/\"); // honeypot\n const v: Record = Object.fromEntries(BOOK_FIELDS.map((k) => [k, str(body, k, 1000)]));\n const [s, services] = await Promise.all([db.getSettings(), db.listServices(true)]);\n const fail = (error: string) =>\n render(c, , 422);\n\n const service = services.find((x) => String(x.id) === v.service_id);\n if (!service) return fail(\"اختاري الخدمة المطلوبة.\");\n const name = v.name.slice(0, 80);\n if (name.length < 2) return fail(\"اكتبي الاسم.\");\n const phone = normalizePhone(v.phone);\n if (!phone) return fail(\"رقم الجوال غير صحيح. اكتبيه مثل 05xxxxxxxx أو مع رمز الدولة.\");\n if (!isLocation(v.location_type) || (v.location_type === \"studio\" && !s.allowStudio)) {\n return fail(\"اختاري مكان الخدمة.\");\n }\n const city = CITIES.includes(v.city) ? v.city : \"\";\n if (v.location_type !== \"studio\" && !city) return fail(\"اختاري المدينة.\");\n\n const people = clampPeople(v.people);\n const duration = service.duration_min * people;\n const slots = await availableSlots(v.date, duration, s);\n if (!slots.ok) return fail(slots.reason);\n if (!slots.slots.includes(v.time)) return fail(\"الوقت المختار غير متاح، اختاري وقتاً آخر.\");\n if ((await db.countOpenBookingsByPhone(phone, nowRiyadh().date)) >= 3) {\n return fail(\"لديك عدة طلبات بانتظار التأكيد. تواصلي معنا عبر واتساب لإضافة المزيد.\");\n }\n\n const r = await db.createBooking({\n service_id: service.id,\n service_name: service.name,\n duration_min: duration,\n price: bookingPrice(service, people, city, s),\n date: v.date,\n time: v.time,\n start_min: toMin(v.time),\n name,\n phone,\n location_type: v.location_type,\n city,\n people,\n notes: v.notes,\n status: \"pending\",\n }, s.bufferMin);\n if (!r.ok) return fail(\"سبقك حجز آخر على هذا الوقت، اختاري وقتاً آخر.\");\n return c.redirect(`/b/${r.code}`);\n});\n\napp.get(\"/b/:code\", async (c) => {\n const b = await db.getBookingByCode(c.req.param(\"code\").toUpperCase());\n if (!b) return render(c, , 404);\n c.header(\"Cache-Control\", \"no-store\");\n return render(c, );\n});\n\nfunction sniffMime(b: Uint8Array) {\n if (b[0] === 0x89 && b[1] === 0x50) return \"image/png\";\n if (b[0] === 0x52 && b[1] === 0x49 && b[8] === 0x57 && b[9] === 0x45) return \"image/webp\";\n return \"image/jpeg\";\n}\n\napp.get(\"/img/:kind{gallery|brand}/:name\", async (c) => {\n try {\n const res = await blob.get(`${c.req.param(\"kind\")}/${c.req.param(\"name\")}`);\n if (!res.ok) return c.notFound();\n const bytes = new Uint8Array(await res.arrayBuffer());\n return c.body(bytes, 200, { \"Content-Type\": sniffMime(bytes), \"Cache-Control\": \"public, max-age=86400\" });\n } catch {\n return c.notFound();\n }\n});\n\napp.get(\"/robots.txt\", async (c) => {\n const s = await db.getSettings();\n return c.text(\n s.indexable ? \"User-agent: *\\nDisallow: /admin\\nDisallow: /b/\\n\" : \"User-agent: *\\nDisallow: /\\n\",\n );\n});\n\napp.get(\"/public/*\", (c) => serveFile(c.req.path));\n\n// ── Admin ───────────────────────────────────────────────────\napp.use(\"/admin\", requireAdmin);\napp.use(\"/admin/*\", async (c, next) => {\n if (c.req.path === \"/admin/login\") return await next();\n return await requireAdmin(c, next);\n});\n\napp.get(\"/admin/login\", (c) => render(c, ));\n\napp.post(\"/admin/login\", async (c) => {\n const ip = clientIp(c);\n if ((await db.recentLoginFailures(ip)) >= 8) {\n return render(c, , 429);\n }\n const body = (await c.req.parseBody()) as Body;\n const password = typeof body.password === \"string\" ? body.password.slice(0, 200) : \"\";\n if (await checkPassword(password)) {\n await startSession(c);\n return c.redirect(\"/admin\");\n }\n await db.recordLoginFailure(ip);\n return render(c, , 401);\n});\n\napp.post(\"/admin/logout\", (c) => {\n endSession(c);\n return c.redirect(\"/admin/login\");\n});\n\nconst VIEWS: BookingView[] = [\"upcoming\", \"pending\", \"past\", \"all\"];\n\napp.get(\"/admin\", async (c) => {\n const today = nowRiyadh().date;\n const requested = c.req.query(\"view\") as BookingView;\n const view = VIEWS.includes(requested) ? requested : \"upcoming\";\n const [bookings, stats, services] = await Promise.all([\n db.listBookings(view, today),\n db.bookingStats(today, addDays(today, 7)),\n db.listServices(false),\n ]);\n return render(\n c,\n ,\n );\n});\n\napp.post(\"/admin/bookings/new\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const fail = (code: string) => c.redirect(`/admin?err=${code}`);\n const service = await db.getService(Number(str(b, \"service_id\")));\n if (!service) return fail(\"service\");\n const date = str(b, \"date\");\n if (!isDate(date)) return fail(\"date\");\n const time = str(b, \"time\").slice(0, 5);\n if (!isTime(time)) return fail(\"time\");\n const name = str(b, \"name\", 80);\n if (name.length < 2) return fail(\"name\");\n const phone = normalizePhone(str(b, \"phone\"));\n if (!phone) return fail(\"phone\");\n const people = clampPeople(str(b, \"people\"));\n const location = str(b, \"location_type\");\n const cityRaw = str(b, \"city\");\n const city = CITIES.includes(cityRaw) ? cityRaw : \"\";\n const s = await db.getSettings();\n const r = await db.createBooking({\n service_id: service.id,\n service_name: service.name,\n duration_min: service.duration_min * people,\n price: bookingPrice(service, people, city, s),\n date,\n time,\n start_min: toMin(time),\n name,\n phone,\n location_type: isLocation(location) ? location : \"home\",\n city,\n people,\n notes: str(b, \"notes\", 1000),\n status: str(b, \"status\") === \"pending\" ? \"pending\" : \"confirmed\",\n }, s.bufferMin);\n return r.ok ? c.redirect(\"/admin?ok=added\") : fail(\"taken\");\n});\n\napp.post(\"/admin/bookings/:id/status\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const status = str(b, \"status\") as Status;\n if (!(db.STATUSES as readonly string[]).includes(status)) return c.text(\"bad request\", 400);\n await db.setBookingStatus(Number(c.req.param(\"id\")), status);\n const back = str(b, \"back\");\n return c.redirect(/^\\/admin(\\?[\\w=&]*)?$/.test(back) ? back : \"/admin\");\n});\n\nfunction serviceInput(b: Body): db.ServiceInput | null {\n const name = str(b, \"name\", 80);\n if (!name) return null;\n const money = (key: string) => {\n const digits = toLatinDigits(str(b, key)).replace(/[^\\d]/g, \"\");\n return digits ? Math.min(Number(digits), 1_000_000) : null;\n };\n return {\n name,\n description: str(b, \"description\", 600),\n category: str(b, \"category\", 40),\n duration_min: int(str(b, \"duration_min\"), 5, 600, 60),\n price: money(\"price\"),\n price_pair: money(\"price_pair\"),\n price_group: money(\"price_group\"),\n price_note: str(b, \"price_note\", 60),\n active: b.active === \"on\" ? 1 : 0,\n sort: int(str(b, \"sort\"), -1000, 1000, 0),\n };\n}\n\napp.get(\"/admin/services\", async (c) =>\n render(c, ));\n\napp.post(\"/admin/services\", async (c) => {\n const input = serviceInput((await c.req.parseBody()) as Body);\n if (input) await db.createService(input);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\napp.post(\"/admin/services/:id\", async (c) => {\n const input = serviceInput((await c.req.parseBody()) as Body);\n const id = Number(c.req.param(\"id\"));\n if (input && Number.isInteger(id)) await db.updateService(id, input);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\napp.post(\"/admin/services/:id/delete\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n if (Number.isInteger(id)) await db.deleteService(id);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\nconst IMAGE_TYPES = [\"image/jpeg\", \"image/png\", \"image/webp\"];\n\napp.get(\"/admin/gallery\", async (c) =>\n render(\n c,\n ,\n ));\n\napp.post(\"/admin/gallery\", async (c) => {\n const body = await c.req.parseBody({ all: true });\n const files = ([] as unknown[]).concat(body.photos ?? []).filter((f): f is File => f instanceof File);\n let added = 0;\n let rejected = 0;\n for (const f of files) {\n if (!IMAGE_TYPES.includes(f.type) || f.size === 0 || f.size > 5_000_000) {\n rejected++;\n continue;\n }\n const key = `gallery/${crypto.randomUUID()}`;\n await blob.set(key, new Uint8Array(await f.arrayBuffer()));\n await db.addGalleryItem(key, f.type);\n added++;\n }\n return c.redirect(`/admin/gallery?added=${added}&rejected=${rejected}`);\n});\n\napp.post(\"/admin/gallery/:id/:action{hero|toggle|delete}\", async (c) => {\n const item = await db.getGalleryItem(Number(c.req.param(\"id\")));\n if (item) {\n const action = c.req.param(\"action\");\n if (action === \"hero\") await db.makeGalleryHero(item.id);\n else if (action === \"toggle\") await db.toggleGalleryItem(item.id);\n else {\n await db.deleteGalleryItem(item.id);\n await blob.delete(item.blob_key).catch(() => {});\n }\n }\n return c.redirect(\"/admin/gallery\");\n});\n\napp.get(\"/admin/settings\", async (c) => {\n const today = nowRiyadh().date;\n const [s, blocked] = await Promise.all([db.getSettings(), db.listBlocked(today)]);\n return render(\n c,\n ,\n );\n});\n\napp.post(\"/admin/settings\", async (c) => {\n const b = (await c.req.parseBody({ all: true })) as Body;\n const cur = await db.getSettings();\n const workDays = [...new Set(list(b, \"workDays\").map(Number))]\n .filter((d) => Number.isInteger(d) && d >= 0 && d <= 6)\n .sort();\n if (!workDays.length) return c.redirect(\"/admin/settings?err=days\");\n const open = isTime(str(b, \"open\")) ? str(b, \"open\") : cur.open;\n const close = isTime(str(b, \"close\")) ? str(b, \"close\") : cur.close;\n if (toMin(open) >= toMin(close)) return c.redirect(\"/admin/settings?err=hours\");\n const handle = (key: string, fallback: string) => {\n const v = str(b, key, 60).replace(/^@/, \"\");\n return /^[A-Za-z0-9._-]{1,40}$/.test(v) ? v : fallback;\n };\n const next: Settings = {\n ...cur,\n workDays,\n open,\n close,\n slotStep: int(str(b, \"slotStep\"), 5, 120, cur.slotStep),\n bufferMin: int(str(b, \"bufferMin\"), 0, 240, cur.bufferMin),\n minNoticeHours: int(str(b, \"minNoticeHours\"), 0, 1440, cur.minNoticeHours),\n maxDaysAhead: int(str(b, \"maxDaysAhead\"), 1, 730, cur.maxDaysAhead),\n allowStudio: b.allowStudio === \"on\",\n whatsapp: normalizePhone(str(b, \"whatsapp\")) ?? cur.whatsapp,\n instagram: handle(\"instagram\", cur.instagram),\n snapchat: handle(\"snapchat\", cur.snapchat),\n followers: str(b, \"followers\", 30),\n tagline: str(b, \"tagline\", 300),\n about: str(b, \"about\", 3000),\n policy: str(b, \"policy\", 3000),\n pricingNote: str(b, \"pricingNote\", 200),\n priceCities: \"priceCitiesField\" in b ? list(b, \"priceCities\").filter((c) => CITIES.includes(c)) : cur.priceCities,\n announcement: str(b, \"announcement\", 300),\n indexable: b.indexable === \"on\",\n };\n await db.saveSettings(next);\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.post(\"/admin/blocked\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const date = str(b, \"date\");\n if (isDate(date)) await db.addBlocked(date, str(b, \"reason\", 80));\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.post(\"/admin/blocked/delete\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const date = str(b, \"date\");\n if (isDate(date)) await db.removeBlocked(date);\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.notFound((c) => render(c, , 404));\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","deleted",false,"label",[14],"d8f07974-33ec-460f-a8b5-8a56ac73d9bd",["D",1789334949320],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","موقع نجلاء الغفيلي ميك اب ارتست — خدمات ونظام حجوزات","imageUrl","userId","cca8102f-07bb-4295-b44a-38d66d1d3405","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f1d6e-b169-7628-a2c5-3fdc2bb2972f","tursoName","d8f0797433ec460fa8b58a56ac73d9bd","tursoHostname","d8f0797433ec460fa8b58a56ac73d9bd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789519256886],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",52,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","mfcbr4krn8-hash","avatar","https://avatars.githubusercontent.com/u/294484094?v=4","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":62,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]