[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_102":103,"_104":105},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","haidaralwan1998com","name","Bothaidarq","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/haidaralwan1998com/Bothaidarq/code/main.ts","extension","id","daf44196-a611-4ecd-8fad-bac5be4636f0","fileId","548d486e-9bf1-11f1-bd68-1607ee4eb77e","parentId","branchId","542ea068-a426-4907-a900-cb0782d03701","branchVersion",3,"latest",true,"createdAt",["D",1787159641479],"version",2,"fileType","http","content","/* ══════════════════════════════════════════════════════════════\n بوت مقعد — رموز الدخول / الاستعادة / ربط الحساب\n Val.town → HTTP val (الويب هوك)\n ──────────────────────────────────────────────────────────────\n لا تُنشئ Val جديداً عند التعديل — عدّل هذا الـ Val نفسه\n حتى لا يتغيّر رابط الويب هوك.\n بعد الحفظ: افتح الرابط <رابط الفال>?setup=1 مرة واحدة\n════════════════════════════════════════════════════════════════ */\n\nconst BOT_TOKEN = \"8891980019:AAEU94888JNpNeOaVqkbcVVr5llPlnbKiaM\";\n\nconst API_KEY = \"AIzaSyCPGyvu3IZEYthgbWPsVtrKemI6XA3Nmck\";\nconst DB =\n \"https://mugad-3033a-default-rtdb.asia-southeast1.firebasedatabase.app\";\n\n/* حساب خدمة البوت داخل Firebase Auth — يُنشأ تلقائياً أول مرة.\n امنحه الصلاحيات في قواعد قاعدة البيانات (انظر التعليمات). */\nconst BOT_EMAIL = \"bot@maqaad.app\";\nconst BOT_PASS = \"ir9hq0I1U1m8RwY29IpC4tq6DytyPNueYoWR\";\n\nconst MAIL_DOMAIN = \"maqaad.app\";\nconst CODE_TTL_MS = 5 * 60 * 1000;\nconst ALPHA = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // بلا I O 0 1\n\n/* ───────── أدوات ───────── */\nfunction newCode(n = 8) {\n const b = new Uint32Array(n);\n crypto.getRandomValues(b);\n let s = \"\";\n for (let i = 0; i < n; i++) s += ALPHA[b[i] % ALPHA.length];\n return s;\n}\nfunction newPass(n = 30) {\n const A = \"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789\";\n const b = new Uint32Array(n);\n crypto.getRandomValues(b);\n let s = \"\";\n for (let i = 0; i < n; i++) s += A[b[i] % A.length];\n return s;\n}\n\nasync function tg(method, body) {\n const r = await fetch(`https://api.telegram.org/bot${BOT_TOKEN}/${method}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body || {}),\n });\n return r.json();\n}\nconst say = (chat_id, text, extra = {}) =>\n tg(\"sendMessage\", { chat_id, text, parse_mode: \"HTML\", ...extra });\n\n/* ───────── Firebase ───────── */\nlet _tok = null, _tokExp = 0;\nasync function idToken() {\n if (_tok && Date.now() < _tokExp) return _tok;\n const body = {\n email: BOT_EMAIL,\n password: BOT_PASS,\n returnSecureToken: true,\n };\n let r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signInWithPassword?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n let d = await r.json();\n if (d.error) {\n // أول تشغيل: أنشئ حساب البوت\n r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signUp?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n d = await r.json();\n if (d.error) throw new Error(\"bot-auth: \" + d.error.message);\n }\n _tok = d.idToken;\n _tokExp = Date.now() + 45 * 60 * 1000;\n return _tok;\n}\nasync function authSignUp(email, password) {\n const r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signUp?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ email, password, returnSecureToken: false }),\n },\n );\n return r.json();\n}\nasync function dbGet(path) {\n const t = await idToken();\n const r = await fetch(`${DB}/${path}.json?auth=${t}`);\n if (!r.ok) throw new Error(\"db-get \" + r.status + \" \" + (await r.text()));\n return r.json();\n}\nasync function dbPut(path, value) {\n const t = await idToken();\n const r = await fetch(`${DB}/${path}.json?auth=${t}`, {\n method: \"PUT\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(value),\n });\n if (!r.ok) throw new Error(\"db-put \" + r.status + \" \" + (await r.text()));\n return r.json();\n}\nasync function dbDel(path) {\n const t = await idToken();\n await fetch(`${DB}/${path}.json?auth=${t}`, { method: \"DELETE\" });\n}\n\n/* ───────── الواجهة ───────── */\nconst MENU = {\n inline_keyboard: [\n [{ text: \"🔐 رمز الدخول\", callback_data: \"c_login\" }],\n [{ text: \"🔁 استعادة كلمة المرور\", callback_data: \"c_reset\" }],\n [{ text: \"🔗 رمز ربط الحساب\", callback_data: \"c_link\" }],\n ],\n};\nconst WELCOME = \"🚗 مقعد — منصة نقل الطلبة\\n\\n\" +\n \"اختر ما تريد، وسأرسل لك رمزاً صالحاً ٥ دقائق تلصقه داخل التطبيق:\\n\\n\" +\n \"🔐 رمز الدخول — للدخول أو إنشاء حساب جديد\\n\" +\n \"🔁 استعادة كلمة المرور — إن نسيتها\\n\" +\n \"🔗 رمز ربط الحساب — لربط حسابك الحالي بالبوت\";\n\nasync function issueCode(purpose, from, chatId) {\n const tgId = String(from.id);\n const username = from.username || \"\";\n const name = [from.first_name, from.last_name].filter(Boolean).join(\" \")\n .trim();\n\n // امسح رمز المستخدم السابق إن وُجد\n try {\n const last = await dbGet(`tgAuth/last/${tgId}`);\n if (last) await dbDel(`tgAuth/codes/${last}`);\n } catch (e) {}\n\n const payload = {\n tgId,\n username,\n name,\n purpose,\n at: Date.now(),\n exp: Date.now() + CODE_TTL_MS,\n };\n\n if (purpose !== \"link\") {\n const map = await dbGet(`tgAuth/users/${tgId}`);\n if (map && map.linked) {\n return say(\n chatId,\n \"🔗 حسابك مربوط بحساب بريد إلكتروني داخل التطبيق.\\n\" +\n \"سجّل الدخول بالبريد وكلمة المرور، والبوت يبقى لإشعاراتك.\",\n );\n }\n let email, pass, isNew = false;\n const vault = await dbGet(`tgAuth/vault/${tgId}`);\n if (map && map.email && vault && vault.pass) {\n email = map.email;\n pass = vault.pass;\n } else {\n /* لا نملك مفتاح الحساب. إن كان البريد الأساسي محجوزاً من محاولة فاشلة\n سابقة (EMAIL_EXISTS) نجرّب بريداً بديلاً — الحساب القديم يتيم بلا ملف. */\n pass = newPass();\n let su = null;\n const tries = [\n `tg${tgId}@${MAIL_DOMAIN}`,\n `tg${tgId}.${newCode(4).toLowerCase()}@${MAIL_DOMAIN}`,\n `tg${tgId}.${newCode(6).toLowerCase()}@${MAIL_DOMAIN}`,\n ];\n for (const cand of tries) {\n su = await authSignUp(cand, pass);\n if (!su.error) {\n email = cand;\n break;\n }\n if (!String(su.error.message).startsWith(\"EMAIL_EXISTS\")) break;\n }\n if (!email) {\n return say(\n chatId,\n \"⚠️ تعذّر تجهيز حسابك: \" + (su?.error?.message || \"unknown\") +\n \"\\nراسل الإدارة.\",\n );\n }\n isNew = true;\n await dbPut(`tgAuth/users/${tgId}`, {\n uid: su.localId,\n email,\n at: Date.now(),\n });\n await dbPut(`tgAuth/vault/${tgId}`, { pass, at: Date.now() });\n }\n payload.email = email;\n payload.pass = pass;\n payload.isNew = isNew;\n }\n\n const code = newCode();\n await dbPut(`tgAuth/codes/${code}`, payload);\n await dbPut(`tgAuth/last/${tgId}`, code);\n\n const title = purpose === \"reset\"\n ? \"🔁 رمز استعادة كلمة المرور\"\n : purpose === \"link\"\n ? \"🔗 رمز ربط الحساب\"\n : \"🔐 رمز الدخول\";\n return say(\n chatId,\n `${title}\\n\\n${code}\\n\\n` +\n \"انسخه والصقه داخل التطبيق خلال ٥ دقائق.\\nالرمز يُستعمل مرة واحدة فقط.\",\n );\n}\n\n/* ───────── معالجة التحديثات ───────── */\nlet _cfgDone = false;\nasync function ensureConfig() {\n if (_cfgDone) return;\n try {\n const me = await tg(\"getMe\");\n if (me.ok && me.result.username) {\n await dbPut(\"tgConfig/bot\", {\n username: me.result.username,\n at: Date.now(),\n });\n _cfgDone = true;\n }\n } catch (e) {}\n}\n\nasync function handle(u) {\n await ensureConfig();\n\n if (u.callback_query) {\n const q = u.callback_query;\n const map = { c_login: \"login\", c_reset: \"reset\", c_link: \"link\" };\n const p = map[q.data];\n await tg(\"answerCallbackQuery\", { callback_query_id: q.id });\n if (p) {\n try {\n await issueCode(p, q.from, q.message.chat.id);\n } catch (e) {\n await say(\n q.message.chat.id,\n \"⚠️ خطأ: \" + String(e.message || e) + \"\",\n );\n }\n }\n return;\n }\n\n const m = u.message;\n if (!m || !m.text) return;\n const chatId = m.chat.id;\n const txt = m.text.trim();\n\n if (txt.startsWith(\"/start\")) {\n const arg = txt.split(/\\s+/)[1] || \"\";\n if ([\"login\", \"reset\", \"link\"].includes(arg)) {\n try {\n return await issueCode(arg, m.from, chatId);\n } catch (e) {\n return say(\n chatId,\n \"⚠️ خطأ: \" + String(e.message || e) + \"\",\n );\n }\n }\n return say(chatId, WELCOME, { reply_markup: MENU });\n }\n if (txt === \"/id\") {\n return say(chatId, \"معرّفك: \" + m.from.id + \"\");\n }\n return say(chatId, WELCOME, { reply_markup: MENU });\n}\n\n/* ───────── نقطة الدخول ───────── */\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\") {\n if (url.searchParams.get(\"setup\") === \"1\") {\n const hook = url.origin + url.pathname;\n const r = await tg(\"setWebhook\", {\n url: hook,\n drop_pending_updates: true,\n });\n const me = await tg(\"getMe\");\n await ensureConfig();\n return Response.json({ webhook: hook, setWebhook: r, me: me.result });\n }\n if (url.searchParams.get(\"health\") === \"1\") {\n const out = { botAuth: \"?\", dbWrite: \"?\", dbRead: \"?\", codeRead: \"?\" };\n try {\n await idToken();\n out.botAuth = \"ok ✅\";\n } catch (e) {\n out.botAuth = \"FAIL ❌ \" + String(e.message || e);\n return Response.json(out);\n }\n try {\n await dbPut(\"tgAuth/_health\", { at: Date.now() });\n out.dbWrite = \"ok ✅\";\n } catch (e) {\n out.dbWrite = \"FAIL ❌ \" + String(e.message || e);\n }\n try {\n await dbGet(\"tgAuth/users/0\");\n out.dbRead = \"ok ✅\";\n } catch (e) {\n out.dbRead = \"FAIL ❌ \" + String(e.message || e);\n }\n try {\n const r = await fetch(`${DB}/tgAuth/codes/ZZTEST.json`); // بلا auth: يجب أن ينجح\n out.codeRead = r.ok\n ? \"ok ✅\"\n : \"FAIL ❌ \" + r.status + \" — قاعدة قراءة tgAuth/codes ناقصة\";\n } catch (e) {\n out.codeRead = \"FAIL ❌ \" + String(e.message || e);\n }\n return Response.json(out);\n }\n return new Response(\"Maqaad bot is running ✅\", {\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n }\n\n try {\n const update = await req.json();\n await handle(update);\n } catch (e) {\n console.error(e);\n }\n return new Response(\"ok\");\n}","deleted",false,"label",[14],"9685680b-dbbc-4c4d-ba63-36f3e2810af5",["D",1787159623282],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","0fa2d276-e4b4-41ff-8df9-f8be38478e65","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e9c9c-1d1d-73e1-a365-a3ec7e13d222","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_101":97},"org",{"_9":10,"_94":95,"_96":97,"_55":56,"_98":99,"_100":42},"branch",{"_35":30,"_11":85,"_22":28,"_86":45,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":12,"_93":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","حيدر فليح","avatar","https://lh3.googleusercontent.com/a/ACg8ocID628aoEVnB-Ug2GtIZ47fhb5VEACZ8oE8tqogJ1PsjSzwag=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_78":-5,"_135":136,"_137":138,"_139":140,"_141":42,"_142":42,"_143":42,"_144":32,"_145":-5,"_146":-7,"_147":-7,"_148":62,"_149":42,"_150":42,"_151":-5,"_152":42,"_153":42,"_154":42,"_155":-5},"ENV",{"_106":107,"_108":109,"_110":85,"_111":112,"_113":114,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]