[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_105":106,"_107":108},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","omid13841384","name","telegram","path","main2.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/omid13841384/telegram/code/main2.ts","extension","id","1f65bf5d-788a-4515-a755-acd1751e6b28","fileId","9b3cfdac-ab8e-11f1-9511-1607ee4eb77e","parentId","branchId","6027edb3-917a-401d-8a09-f5434f2882b2","branchVersion",29,"latest",true,"createdAt",["D",1789042107397],"version",13,"fileType","http","content","// ============================================================================\n// ربات پیامک‌رسان تلگرام + پنل مدیریت (Val Town / Deno)\n// نسخه 3.0 — ادغام کد اول (پنل و ایندکس و برچسب) با کد دوم (پپپ، انتخاب مخاطب،\n// انقضای ۳۰ دقیقه، تحلیل خطای همایس) + امنیت و امکانات جدید\n// ============================================================================\n// متغیرهای محیطی مورد نیاز (Environment Variables):\n// TELEGRAM_TOKEN : توکن بات\n// ADMIN_ID : آیدی عددی سوپر ادمین\n// HOMAIS_PASSWORD : رمز پنل همایس\n// HOMAIS_USERNAME : (اختیاری) نام کاربری همایس\n// HOMAIS_PORTAL_CODE : (اختیاری) پورتال کد\n// HOMAIS_SERVER_TYPE : (اختیاری) نوع سرور\n// WEBHOOK_SECRET : (اختیاری اما اکیداً توصیه‌شده) رمز وب‌هوک\n// ADMIN_SECRET : (اختیاری) رمز ورود به پنل از مرورگر معمولی\n// ============================================================================\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\n// ==========================================\n// ۱. تنظیمات\n// ==========================================\nconst getEnv = (key: string, fallback = \"\") =>\n Deno.env.get(key) ||\n (typeof process !== \"undefined\" ? process.env?.[key] : undefined) ||\n fallback;\n\nconst TELEGRAM_TOKEN = getEnv(\"TELEGRAM_TOKEN\");\nconst ADMIN_ID = Number(getEnv(\"ADMIN_ID\", \"0\"));\nconst WEBHOOK_SECRET = getEnv(\"WEBHOOK_SECRET\");\nconst ADMIN_SECRET = getEnv(\"ADMIN_SECRET\");\n\nconst HOMAIS_CONFIG = {\n username: getEnv(\"HOMAIS_USERNAME\"),\n password: getEnv(\"HOMAIS_PASSWORD\"),\n portalCode: getEnv(\"HOMAIS_PORTAL_CODE\", \"10003692\"),\n serverType: getEnv(\"HOMAIS_SERVER_TYPE\", \"100\"),\n};\n\nconst TG_API = `https://api.telegram.org/bot${TELEGRAM_TOKEN}`;\nconst RECIPIENTS_PAGE_SIZE = 8;\nconst MAX_BROADCAST = 300;\nconst SMS_CONCURRENCY = 5;\n\nconst DEFAULT_SETTINGS: Record = {\n trigger_word: \"پپپ\",\n daily_limit: \"50\",\n sms_signature: \"\",\n prompt_ttl_minutes: \"30\",\n require_whitelist: \"0\",\n delete_trigger_message: \"0\",\n index_all_messages: \"1\",\n max_sms_length: \"400\",\n};\n\nif (!TELEGRAM_TOKEN) console.warn(\"⚠️ TELEGRAM_TOKEN ست نشده است.\");\nif (!ADMIN_ID) console.warn(\"⚠️ ADMIN_ID ست نشده است.\");\n\n// ==========================================\n// ۲. لایه دیتابیس\n// ==========================================\nasync function query(sql: string, args: any[] = []) {\n const res = await sqlite.execute({ sql, args });\n const rows = (res.rows || []).map((row: any) => {\n if (!Array.isArray(row)) return row;\n const obj: Record = {};\n (res.columns || []).forEach((col: string, idx: number) => {\n obj[col] = row[idx];\n });\n return obj;\n });\n return {\n rows,\n lastInsertRowid: res.lastInsertRowid,\n rowsAffected: res.rowsAffected,\n };\n}\n\nlet dbReady = false;\nasync function initDatabase() {\n if (dbReady) return;\n\n await query(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n tg_id INTEGER UNIQUE,\n first_name TEXT,\n last_name TEXT,\n username TEXT,\n phone TEXT,\n is_active INTEGER DEFAULT 1,\n note TEXT,\n sms_received INTEGER DEFAULT 0,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n updated_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS admins (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n tg_id INTEGER UNIQUE,\n title TEXT,\n added_by INTEGER,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS allowed_chats (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER UNIQUE,\n title TEXT,\n enabled INTEGER DEFAULT 1,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS topic_members (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n thread_id INTEGER DEFAULT 0,\n tg_id INTEGER,\n last_active DATETIME DEFAULT CURRENT_TIMESTAMP,\n UNIQUE(chat_id, thread_id, tg_id)\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS messages_index (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n chat_title TEXT,\n message_thread_id INTEGER DEFAULT 0,\n message_id INTEGER,\n sender_id INTEGER,\n sender_name TEXT,\n text TEXT,\n has_media INTEGER DEFAULT 0,\n tag TEXT,\n sms_sent INTEGER DEFAULT 0,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n UNIQUE(chat_id, message_id)\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS predefined_tags (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT UNIQUE\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS pending_prompts (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n message_id INTEGER,\n thread_id INTEGER DEFAULT 0,\n record_id INTEGER,\n selected TEXT DEFAULT '[]',\n page INTEGER DEFAULT 0,\n expires_at DATETIME,\n UNIQUE(chat_id, message_id)\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS sms_logs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n record_id INTEGER,\n chat_id INTEGER,\n chat_title TEXT,\n actor_id INTEGER,\n actor_name TEXT,\n target_tg_id INTEGER,\n target_name TEXT,\n phone TEXT,\n text TEXT,\n parts INTEGER DEFAULT 1,\n status TEXT,\n provider_response TEXT,\n error_text TEXT,\n source TEXT DEFAULT 'group',\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY,\n value TEXT\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS processed_updates (\n update_id INTEGER PRIMARY KEY,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS audit_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n actor_id INTEGER,\n action TEXT,\n details TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n\n await query(\n `CREATE INDEX IF NOT EXISTS idx_msg_chat ON messages_index(chat_id, message_id);`,\n );\n await query(\n `CREATE INDEX IF NOT EXISTS idx_logs_created ON sms_logs(created_at DESC);`,\n );\n await query(\n `CREATE INDEX IF NOT EXISTS idx_logs_actor ON sms_logs(actor_id, created_at);`,\n );\n // ---- ترمیم خودکار جدول‌های قدیمی که از نسخه‌های قبلی کد باقی مانده‌اند ----\n const addColumn = async (table: string, col: string, def: string) =>\n query(`ALTER TABLE ${table} ADD COLUMN ${col} ${def}`).catch(() => {});\n\n await addColumn(\"users\", \"last_name\", \"TEXT\");\n await addColumn(\"users\", \"is_active\", \"INTEGER DEFAULT 1\");\n await addColumn(\"users\", \"note\", \"TEXT\");\n await addColumn(\"users\", \"sms_received\", \"INTEGER DEFAULT 0\");\n await addColumn(\"users\", \"updated_at\", \"DATETIME\");\n await addColumn(\"messages_index\", \"sms_sent\", \"INTEGER DEFAULT 0\");\n await addColumn(\"pending_prompts\", \"thread_id\", \"INTEGER DEFAULT 0\");\n await addColumn(\"pending_prompts\", \"record_id\", \"INTEGER\");\n await addColumn(\"pending_prompts\", \"selected\", \"TEXT DEFAULT '[]'\");\n await addColumn(\"pending_prompts\", \"page\", \"INTEGER DEFAULT 0\");\n\n await query(\n `DELETE FROM messages_index WHERE rowid NOT IN (SELECT MIN(rowid) FROM messages_index GROUP BY chat_id, message_id);`,\n ).catch(() => {});\n await query(\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_uniq_msg ON messages_index(chat_id, message_id);`,\n ).catch(() => {});\n await query(\n `DELETE FROM pending_prompts WHERE rowid NOT IN (SELECT MIN(rowid) FROM pending_prompts GROUP BY chat_id, message_id);`,\n ).catch(() => {});\n await query(\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_uniq_prompts ON pending_prompts(chat_id, message_id);`,\n ).catch(() => {});\n await query(\n `DELETE FROM topic_members WHERE rowid NOT IN (SELECT MIN(rowid) FROM topic_members GROUP BY chat_id, thread_id, tg_id);`,\n ).catch(() => {});\n await query(\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_uniq_members ON topic_members(chat_id, thread_id, tg_id);`,\n ).catch(() => {});\n for (const [k, v] of Object.entries(DEFAULT_SETTINGS)) {\n await query(\n \"INSERT OR IGNORE INTO settings (key, value) VALUES (?, ?)\",\n [k, v],\n );\n }\n\n dbReady = true;\n}\n\nlet settingsCache: { data: Record; at: number } | null = null;\n\nasync function getSettings(force = false): Promise> {\n if (!force && settingsCache && Date.now() - settingsCache.at < 20_000) {\n return settingsCache.data;\n }\n const res = await query(\"SELECT key, value FROM settings\");\n const data = { ...DEFAULT_SETTINGS };\n res.rows.forEach((r: any) => (data[r.key] = r.value ?? \"\"));\n settingsCache = { data, at: Date.now() };\n return data;\n}\n\nasync function setSetting(key: string, value: string) {\n await query(\n `INSERT INTO settings (key, value) VALUES (?, ?)\n ON CONFLICT(key) DO UPDATE SET value = excluded.value;`,\n [key, value],\n );\n settingsCache = null;\n}\n\nasync function audit(actorId: number, action: string, details = \"\") {\n await query(\n \"INSERT INTO audit_log (actor_id, action, details) VALUES (?, ?, ?)\",\n [actorId, action, details],\n ).catch(() => {});\n}\n\n// ==========================================\n// ۳. درایور پیامک همایس + تحلیل خطا\n// ==========================================\nfunction normalizeIranianPhone(rawPhone: string): string {\n let cleaned = String(rawPhone || \"\").replace(/[^0-9]/g, \"\");\n if (cleaned.startsWith(\"0098\")) cleaned = \"0\" + cleaned.substring(4);\n else if (cleaned.startsWith(\"98\") && cleaned.length === 12) {\n cleaned = \"0\" + cleaned.substring(2);\n } else if (cleaned.startsWith(\"9\") && cleaned.length === 10) {\n cleaned = \"0\" + cleaned;\n }\n return cleaned;\n}\n\nfunction isValidIranianMobile(phone: string): boolean {\n return /^09\\d{9}$/.test(phone);\n}\n\nfunction smsPartCount(text: string): number {\n const isPersian = /[\\u0600-\\u06FF]/.test(text);\n const per = isPersian ? 70 : 160;\n return Math.max(1, Math.ceil(text.length / per));\n}\n\nfunction explainHomaisError(raw: string): string {\n const trimmed = (raw || \"\").trim();\n const code = parseInt(trimmed, 10);\n if (!isNaN(code) && String(code) === trimmed.replace(/^\\+/, \"\")) {\n switch (code) {\n case -1:\n case 101:\n return \"نام کاربری یا رمز عبور پنل همایس نامعتبر است.\";\n case -2:\n case 102:\n return \"شارژ (اعتبار ریالی) پنل همایس به اتمام رسیده است.\";\n case -3:\n case 103:\n return \"پورتال‌کد یا نوع سرور ارسال‌کننده نامعتبر است.\";\n case -4:\n case 104:\n return \"شماره گیرنده نامعتبر است یا در بلک‌لیست تبلیغاتی مخابرات قرار دارد.\";\n case -5:\n case 105:\n return \"متن پیامک خالی یا شامل عبارات غیرمجاز است.\";\n case -6:\n case 106:\n return \"محدودیت تعداد ارسال یا مسدودی موقت پنل.\";\n default:\n return `خطای سرور همایس با کد: ${code}`;\n }\n }\n if (/timeout/i.test(trimmed)) return \"پاسخ سرور همایس در زمان مجاز دریافت نشد.\";\n return trimmed || \"خطای نامشخص در ارتباط با سامانه پیامک همایس\";\n}\n\nasync function sendHomaisSms(mobile: string, text: string) {\n if (!HOMAIS_CONFIG.username || !HOMAIS_CONFIG.password) {\n return {\n ok: false,\n status: 500,\n body: \"\",\n errorDescription: \"تنظیمات پنل همایس (نام کاربری/رمز) در سرور کامل نیست.\",\n };\n }\n\n const targetMobile = normalizeIranianPhone(mobile);\n if (!isValidIranianMobile(targetMobile)) {\n return {\n ok: false,\n status: 400,\n body: targetMobile,\n errorDescription:\n `فرمت شماره «${mobile}» معتبر نیست (باید ۱۱ رقم و با 09 شروع شود).`,\n };\n }\n\n const params = new URLSearchParams({\n username: HOMAIS_CONFIG.username,\n password: HOMAIS_CONFIG.password,\n PortalCode: HOMAIS_CONFIG.portalCode,\n mobile: targetMobile,\n message: text,\n ServerType: HOMAIS_CONFIG.serverType,\n });\n\n const url =\n `http://api.homais.com/services/messaging/sms/api/sendMessage/direct/?${params.toString()}`;\n\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 20_000);\n try {\n const res = await fetch(url, { method: \"GET\", signal: controller.signal });\n const rawText = (await res.text()).trim();\n const isError = !res.ok ||\n rawText === \"\" ||\n rawText.toLowerCase().includes(\"error\") ||\n rawText.startsWith(\"-\");\n return {\n ok: !isError,\n status: res.status,\n body: rawText,\n errorDescription: isError ? explainHomaisError(rawText) : \"\",\n };\n } catch (err: any) {\n const msg = err?.name === \"AbortError\" ? \"timeout\" : err?.message;\n return {\n ok: false,\n status: 0,\n body: String(msg),\n errorDescription: `عدم برقراری ارتباط با وب‌سرویس همایس: ${\n explainHomaisError(String(msg))\n }`,\n };\n } finally {\n clearTimeout(timer);\n }\n}\n\n// ارسال + ثبت لاگ به صورت یکجا\nasync function dispatchSms(opts: {\n phone: string;\n text: string;\n targetTgId?: number | null;\n targetName?: string;\n actorId: number;\n actorName?: string;\n recordId?: number | null;\n chatId?: number | null;\n chatTitle?: string;\n source?: string;\n}) {\n const res = await sendHomaisSms(opts.phone, opts.text);\n await query(\n `INSERT INTO sms_logs\n (record_id, chat_id, chat_title, actor_id, actor_name, target_tg_id,\n target_name, phone, text, parts, status, provider_response, error_text, source)\n VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n [\n opts.recordId ?? null,\n opts.chatId ?? null,\n opts.chatTitle ?? \"\",\n opts.actorId,\n opts.actorName ?? \"\",\n opts.targetTgId ?? null,\n opts.targetName ?? \"\",\n normalizeIranianPhone(opts.phone),\n opts.text,\n smsPartCount(opts.text),\n res.ok ? \"ok\" : \"failed\",\n res.body,\n res.errorDescription,\n opts.source ?? \"group\",\n ],\n );\n if (res.ok && opts.targetTgId) {\n await query(\n \"UPDATE users SET sms_received = COALESCE(sms_received,0) + 1 WHERE tg_id = ?\",\n [opts.targetTgId],\n );\n }\n return res;\n}\n\nasync function runWithConcurrency(\n items: T[],\n limit: number,\n worker: (item: T) => Promise,\n) {\n const out: any[] = [];\n for (let i = 0; i < items.length; i += limit) {\n const chunk = items.slice(i, i + limit);\n out.push(...await Promise.all(chunk.map(worker)));\n }\n return out;\n}\n\n// ==========================================\n// ۴. ارتباط با تلگرام\n// ==========================================\nasync function callTelegram(method: string, payload: any) {\n if (!TELEGRAM_TOKEN) return null;\n try {\n const res = await fetch(`${TG_API}/${method}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(payload),\n });\n return await res.json();\n } catch (err) {\n console.error(`Telegram API Error [${method}]:`, err);\n return null;\n }\n}\n\nconst sendMessage = (chatId: number, text: string, extra: any = {}) =>\n callTelegram(\"sendMessage\", { chat_id: chatId, text, ...extra });\n\nconst answerCallbackQuery = (id: string, text = \"\", showAlert = false) =>\n callTelegram(\"answerCallbackQuery\", {\n callback_query_id: id,\n text: text.slice(0, 195),\n show_alert: showAlert,\n });\n\nconst editMessageText = (\n chatId: number,\n messageId: number,\n text: string,\n extra: any = {},\n) =>\n callTelegram(\"editMessageText\", {\n chat_id: chatId,\n message_id: messageId,\n text,\n ...extra,\n });\n\nconst editMessageReplyMarkup = (\n chatId: number,\n messageId: number,\n replyMarkup: any,\n) =>\n callTelegram(\"editMessageReplyMarkup\", {\n chat_id: chatId,\n message_id: messageId,\n reply_markup: replyMarkup,\n });\n\nconst deleteMessage = (chatId: number, messageId: number) =>\n callTelegram(\"deleteMessage\", { chat_id: chatId, message_id: messageId });\n\nasync function getChatMember(chatId: number, userId: number) {\n const res = await callTelegram(\"getChatMember\", {\n chat_id: chatId,\n user_id: userId,\n });\n return res?.result;\n}\n\nfunction escapeHtml(str: string): string {\n return String(str ?? \"\")\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\n// ==========================================\n// ۵. احراز هویت (initData تلگرام + سطوح دسترسی)\n// ==========================================\nconst encoder = new TextEncoder();\n\nasync function hmacSha256(keyData: ArrayBuffer | Uint8Array, msg: string) {\n const key = await crypto.subtle.importKey(\n \"raw\",\n keyData as any,\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n return crypto.subtle.sign(\"HMAC\", key, encoder.encode(msg));\n}\n\nconst toHex = (buf: ArrayBuffer) =>\n [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n\n/**\n * اعتبارسنجی initData مینی‌اپ تلگرام:\n * secret = HMAC_SHA256(key=\"WebAppData\", data=BOT_TOKEN)\n * hash = HMAC_SHA256(key=secret, data=data_check_string)\n */\nasync function validateInitData(initData: string) {\n if (!initData || !TELEGRAM_TOKEN) return null;\n try {\n const params = new URLSearchParams(initData);\n const hash = params.get(\"hash\");\n if (!hash) return null;\n params.delete(\"hash\");\n\n const dataCheckString = [...params.entries()]\n .map(([k, v]) => `${k}=${v}`)\n .sort()\n .join(\"\\n\");\n\n const secret = await hmacSha256(encoder.encode(\"WebAppData\"), TELEGRAM_TOKEN);\n const signature = await hmacSha256(secret, dataCheckString);\n if (toHex(signature) !== hash.toLowerCase()) return null;\n\n const authDate = Number(params.get(\"auth_date\") || 0);\n if (!authDate || Date.now() / 1000 - authDate > 86400) return null;\n\n return JSON.parse(params.get(\"user\") || \"null\");\n } catch {\n return null;\n }\n}\n\nasync function isAdminUser(tgId: number): Promise {\n if (!tgId) return false;\n if (ADMIN_ID && tgId === ADMIN_ID) return true;\n const res = await query(\"SELECT 1 AS ok FROM admins WHERE tg_id = ? LIMIT 1\", [\n tgId,\n ]);\n return Boolean(res.rows[0]);\n}\n\ntype Auth = { tgId: number; isSuper: boolean; via: string };\n\nasync function authenticate(req: Request, url: URL): Promise {\n const initData = req.headers.get(\"x-telegram-init-data\") ||\n url.searchParams.get(\"_auth\") || \"\";\n const user = await validateInitData(initData);\n if (user?.id && await isAdminUser(Number(user.id))) {\n return {\n tgId: Number(user.id),\n isSuper: Number(user.id) === ADMIN_ID,\n via: \"miniapp\",\n };\n }\n const secret = req.headers.get(\"x-admin-secret\") ||\n url.searchParams.get(\"secret\") || \"\";\n if (ADMIN_SECRET && secret && secret === ADMIN_SECRET) {\n return { tgId: ADMIN_ID, isSuper: true, via: \"secret\" };\n }\n return null;\n}\n\n// ==========================================\n// ۶. پاک‌سازی پیام‌های منقضی و آپدیت‌های تکراری\n// ==========================================\nasync function cleanupExpired() {\n try {\n const res = await query(\n \"SELECT id, chat_id, message_id FROM pending_prompts WHERE expires_at <= CURRENT_TIMESTAMP LIMIT 25\",\n );\n for (const row of res.rows) {\n await deleteMessage(row.chat_id, row.message_id).catch(() => {});\n await query(\"DELETE FROM pending_prompts WHERE id = ?\", [row.id]);\n }\n await query(\n \"DELETE FROM processed_updates WHERE created_at <= datetime('now','-1 day')\",\n );\n } catch (e) {\n console.error(\"cleanup error:\", e);\n }\n}\n\nasync function isDuplicateUpdate(updateId?: number): Promise {\n if (!updateId) return false;\n const res = await query(\n \"INSERT OR IGNORE INTO processed_updates (update_id) VALUES (?)\",\n [updateId],\n );\n return Number(res.rowsAffected || 0) === 0;\n}\n\n// ==========================================\n// ۷. ساخت کیبورد انتخاب مخاطبان\n// ==========================================\nlet usersCache: { data: any[]; at: number } | null = null;\n\nasync function fetchActiveUsers(force = false) {\n if (!force && usersCache && Date.now() - usersCache.at < 15_000) {\n return usersCache.data;\n }\n const res = await query(\n `SELECT tg_id, first_name, last_name, phone FROM users\n WHERE phone IS NOT NULL AND phone != '' AND is_active = 1\n ORDER BY first_name COLLATE NOCASE ASC`,\n );\n usersCache = { data: res.rows, at: Date.now() };\n return usersCache.data;\n}\nconst displayName = (u: any) =>\n `${u.first_name || \"\"} ${u.last_name || \"\"}`.trim() || \"کاربر\";\n\nfunction buildRecipientKeyboard(\n recordId: number,\n users: any[],\n selected: number[],\n page: number,\n) {\n const totalPages = Math.max(1, Math.ceil(users.length / RECIPIENTS_PAGE_SIZE));\n const safePage = Math.min(Math.max(0, page), totalPages - 1);\n const slice = users.slice(\n safePage * RECIPIENTS_PAGE_SIZE,\n safePage * RECIPIENTS_PAGE_SIZE + RECIPIENTS_PAGE_SIZE,\n );\n\n const rows: any[] = slice.map((u) => {\n const on = selected.includes(Number(u.tg_id));\n return [{\n text: `${on ? \"✅\" : \"⬜️\"} ${displayName(u)} — ${u.phone}`,\n callback_data: `tgl:${recordId}:${u.tg_id}`,\n }];\n });\n\n if (totalPages > 1) {\n rows.push([\n {\n text: \"⬅️ قبلی\",\n callback_data: `pg:${recordId}:${(safePage - 1 + totalPages) % totalPages}`,\n },\n { text: `${safePage + 1}/${totalPages}`, callback_data: `noop:${recordId}` },\n { text: \"بعدی ➡️\", callback_data: `pg:${recordId}:${(safePage + 1) % totalPages}` },\n ]);\n }\n\n rows.push([\n { text: \"☑️ انتخاب همه\", callback_data: `all:${recordId}` },\n { text: \"🧹 پاک‌کردن انتخاب\", callback_data: `none:${recordId}` },\n ]);\n rows.push([\n {\n text: `📩 ارسال پیامک (${selected.length})`,\n callback_data: `snd:${recordId}`,\n },\n ]);\n rows.push([\n { text: \"🏷 برچسب\", callback_data: `tagm:${recordId}` },\n { text: \"❌ انصراف\", callback_data: `dismiss:${recordId}` },\n ]);\n\n return { inline_keyboard: rows };\n}\n\nasync function getPrompt(chatId: number, messageId: number) {\n const res = await query(\n \"SELECT * FROM pending_prompts WHERE chat_id = ? AND message_id = ? LIMIT 1\",\n [chatId, messageId],\n );\n return res.rows[0];\n}\n\n// بررسی مجوز اقدام: نویسنده پیام، ادمین گروه یا ادمین بات\nasync function canActOnRecord(fromId: number, record: any): Promise {\n if (!record) return false;\n if (fromId === Number(record.sender_id)) return true;\n if (await isAdminUser(fromId)) return true;\n const member = await getChatMember(record.chat_id, fromId);\n return [\"creator\", \"administrator\"].includes(member?.status);\n}\n\nfunction buildSmsText(\n record: any,\n cleanedText: string,\n signature: string,\n maxLen: number,\n) {\n const lines: string[] = [];\n lines.push(`پیام از ${record.sender_name || \"کاربر\"}`);\n if (record.chat_title) lines.push(`گروه: ${record.chat_title}`);\n lines.push(cleanedText);\n if (signature) lines.push(signature);\n let out = lines.join(\"\\n\");\n if (out.length > maxLen) out = out.slice(0, maxLen - 3) + \"...\";\n return out;\n}\n\n// ==========================================\n// ۸. هندلر آپدیت‌های تلگرام\n// ==========================================\nasync function handleTelegramUpdate(update: any) {\n if (await isDuplicateUpdate(update?.update_id)) return;\n // await cleanupExpired();\n// به جای await مستقیم، بگذارید به شکل پس‌زمینه اجرا شود:\ncleanupExpired().catch(() => {});\n if (update.callback_query) return handleCallback(update.callback_query);\n\n const msg = update.message || update.edited_message;\n if (!msg) return;\n\n if (msg.chat.type === \"private\") return handlePrivate(msg);\n if ([\"group\", \"supergroup\"].includes(msg.chat.type)) return handleGroup(msg);\n}\n\n// ---------- ۸-۱. دکمه‌های شیشه‌ای بهینه‌شده و فوق‌سریع ----------\nasync function handleCallback(cb: any) {\n const { id, data, from, message } = cb;\n if (!data || !message) return;\n\n const [action, rawRecordId, extraParam] = data.split(\":\");\n const recordId = Number(rawRecordId);\n\n if (action === \"noop\") return answerCallbackQuery(id);\n\n // هر ۴ کوئری مستقل را همزمان می‌فرستیم (نه پشت‌سرهم)\n const [recRes, prompt, users, isAdmin] = await Promise.all([\n query(\n \"SELECT id, sender_id, sender_name, chat_id, chat_title, text FROM messages_index WHERE id = ? LIMIT 1\",\n [recordId],\n ),\n getPrompt(message.chat.id, message.message_id),\n fetchActiveUsers(),\n isAdminUser(from.id),\n ]);\n const record = recRes.rows[0];\n\n if (action === \"dismiss\") {\n if (record) {\n const isAuthorD = from.id === Number(record.sender_id);\n if (!isAuthorD && !isAdmin) {\n const member = await getChatMember(record.chat_id, from.id);\n if (![\"creator\", \"administrator\"].includes(member?.status)) {\n return answerCallbackQuery(id, \"⛔️ اجازه این کار را ندارید.\", true);\n }\n }\n }\n await Promise.all([\n query(\"DELETE FROM pending_prompts WHERE chat_id = ? AND message_id = ?\", [\n message.chat.id,\n message.message_id,\n ]),\n deleteMessage(message.chat.id, message.message_id),\n ]);\n return answerCallbackQuery(id, \"لغو شد.\");\n }\n\n if (!record) return answerCallbackQuery(id, \"پیام مرجع یافت نشد.\", true);\n\n const isAuthor = from.id === Number(record.sender_id);\n if (!isAuthor && !isAdmin) {\n const member = await getChatMember(record.chat_id, from.id);\n if (![\"creator\", \"administrator\"].includes(member?.status)) {\n return answerCallbackQuery(\n id,\n \"⛔️ فقط فرستنده پیام، مدیر گروه یا ادمین بات مجاز است.\",\n true,\n );\n }\n }\n\n if (!prompt) {\n return answerCallbackQuery(id, \"این درخواست منقضی شده است.\", true);\n }\n\n if ([\"tgl\", \"all\", \"none\", \"pg\"].includes(action)) {\n answerCallbackQuery(id).catch(() => {});\n }\n\n let selected: number[] = [];\n try {\n selected = JSON.parse(prompt.selected || \"[]\");\n } catch {\n selected = [];\n }\n\n if (action === \"tgl\" || action === \"all\" || action === \"none\" || action === \"pg\") {\n let page = Number(prompt.page || 0);\n\n if (action === \"tgl\") {\n const tgId = Number(extraParam);\n selected = selected.includes(tgId)\n ? selected.filter((x) => x !== tgId)\n : [...selected, tgId];\n } else if (action === \"all\") {\n selected = users.map((u: any) => Number(u.tg_id));\n } else if (action === \"none\") {\n selected = [];\n } else if (action === \"pg\") {\n page = Number(extraParam) || 0;\n }\n\n await Promise.all([\n query(\n \"UPDATE pending_prompts SET selected = ?, page = ? WHERE id = ?\",\n [JSON.stringify(selected), page, prompt.id],\n ),\n editMessageReplyMarkup(\n message.chat.id,\n message.message_id,\n buildRecipientKeyboard(recordId, users, selected, page),\n ),\n ]);\n return;\n }\n\n if (action === \"tagm\") {\n const tagsRes = await query(\n \"SELECT name FROM predefined_tags ORDER BY id DESC LIMIT 12\",\n );\n if (!tagsRes.rows.length) {\n return answerCallbackQuery(id, \"هنوز برچسبی در پنل ثبت نشده است.\", true);\n }\n const kb = tagsRes.rows.map((t: any) => [\n { text: `#${t.name}`, callback_data: `stag:${recordId}:${t.name}` },\n ]);\n kb.push([{ text: \"🔙 بازگشت\", callback_data: `back:${recordId}` }]);\n await editMessageReplyMarkup(message.chat.id, message.message_id, {\n inline_keyboard: kb,\n });\n return answerCallbackQuery(id);\n }\n\n if (action === \"stag\") {\n await Promise.all([\n query(\"UPDATE messages_index SET tag = ? WHERE id = ?\", [extraParam, recordId]),\n editMessageReplyMarkup(\n message.chat.id,\n message.message_id,\n buildRecipientKeyboard(recordId, users, selected, Number(prompt.page || 0)),\n ),\n ]);\n return answerCallbackQuery(id, `برچسب #${extraParam} ثبت شد.`);\n }\n\n if (action === \"back\") {\n await editMessageReplyMarkup(\n message.chat.id,\n message.message_id,\n buildRecipientKeyboard(recordId, users, selected, Number(prompt.page || 0)),\n );\n return answerCallbackQuery(id);\n }\n\n // بخش \"snd\" را همانطور که دارید، دست‌نخورده نگه دارید\n // --- عملیات ۳: ارسال نهایی پیامک‌ها (SND) ---\n if (action === \"snd\") {\n if (!selected.length) {\n return answerCallbackQuery(id, \"⚠️ هیچ مخاطبی انتخاب نشده است.\", true);\n }\n\n const settings = await getSettings();\n\n // بررسی سقف مجاز پیامک روزانه کاربر\n const limit = Number(settings.daily_limit || \"50\");\n if (limit > 0) {\n const usedRes = await query(\n `SELECT COUNT(*) AS c FROM sms_logs\n WHERE actor_id = ? AND status = 'ok' AND date(created_at) = date('now')`,\n [from.id],\n );\n const used = Number(usedRes.rows[0]?.c || 0);\n if (used + selected.length > limit) {\n return answerCallbackQuery(\n id,\n `⛔️ سقف روزانه (${limit} پیامک) پر شده است. مصرف امروز: ${used}`,\n true,\n );\n }\n }\n\n const targets = users.filter((u: any) => selected.includes(Number(u.tg_id)));\n const trigger = settings.trigger_word || \"پپپ\";\n let cleaned = String(record.text || \"\")\n .split(trigger)\n .join(\"\")\n .replace(/\\s{2,}/g, \" \")\n .trim();\n if (!cleaned) cleaned = \"(بدون متن)\";\n\n const smsText = buildSmsText(\n record,\n cleaned,\n settings.sms_signature || \"\",\n Number(settings.max_sms_length || \"400\"),\n );\n\n await answerCallbackQuery(id, `⏳ در حال ارسال به ${targets.length} مخاطب...`);\n await editMessageText(\n message.chat.id,\n message.message_id,\n `⏳ در حال ارسال پیامک به ${targets.length} مخاطب...`,\n );\n\n const actorName = `${from.first_name || \"\"} ${from.last_name || \"\"}`.trim();\n const results = await runWithConcurrency(targets, SMS_CONCURRENCY, (u: any) =>\n dispatchSms({\n phone: u.phone,\n text: smsText,\n targetTgId: Number(u.tg_id),\n targetName: displayName(u),\n actorId: from.id,\n actorName,\n recordId,\n chatId: record.chat_id,\n chatTitle: record.chat_title,\n source: \"group\",\n }).then((r) => ({ u, r })),\n );\n\n const okList = results.filter((x: any) => x.r.ok);\n const failList = results.filter((x: any) => !x.r.ok);\n\n await Promise.all([\n query(\"UPDATE messages_index SET sms_sent = ? WHERE id = ?\", [\n okList.length,\n recordId,\n ]),\n query(\"DELETE FROM pending_prompts WHERE id = ?\", [prompt.id]),\n ]);\n\n let report =\n `📊 گزارش ارسال پیامک\\n` +\n `👤 اقدام‌کننده: ${escapeHtml(actorName || String(from.id))}\\n` +\n `✅ موفق: ${okList.length} | ❌ ناموفق: ${failList.length}\\n` +\n `🔢 تعداد بخش پیامک: ${smsPartCount(smsText)}\\n\\n`;\n\n if (okList.length) {\n report +=\n \"گیرندگان موفق:\\n\" +\n okList\n .slice(0, 15)\n .map((x: any) => `• ${escapeHtml(displayName(x.u))} (${x.u.phone})`)\n .join(\"\\n\") +\n \"\\n\\n\";\n }\n if (failList.length) {\n report +=\n \"خطاها:\\n\" +\n failList\n .slice(0, 10)\n .map(\n (x: any) =>\n `• ${escapeHtml(displayName(x.u))} (${x.u.phone}) → ${escapeHtml(\n x.r.errorDescription || x.r.body,\n )}`,\n )\n .join(\"\\n\") +\n \"\\n\\n\";\n }\n report += `متن ارسال‌شده:\\n

${escapeHtml(smsText)}

`;\n\n await editMessageText(message.chat.id, message.message_id, report, {\n parse_mode: \"HTML\",\n });\n\n if (settings.delete_trigger_message === \"1\" && okList.length) {\n await deleteMessage(record.chat_id, record.message_id).catch(() => {});\n }\n await audit(from.id, \"sms_group_send\", `record=${recordId} ok=${okList.length}`);\n return;\n }\n}\n\n// ---------- ۸-۲. چت خصوصی ----------\nasync function handlePrivate(msg: any) {\n const chatId = msg.chat.id;\n const text = (msg.text || \"\").trim();\n const fromId = msg.from.id;\n const admin = await isAdminUser(fromId);\n\n if (msg.contact) {\n if (msg.contact.user_id && msg.contact.user_id !== fromId) {\n return sendMessage(chatId, \"❌ لطفاً شماره متعلق به اکانت خودتان را ارسال کنید.\");\n }\n const phone = normalizeIranianPhone(msg.contact.phone_number);\n if (!isValidIranianMobile(phone)) {\n return sendMessage(chatId, \"❌ شماره دریافتی معتبر نیست.\");\n }\n await query(\n `INSERT INTO users (tg_id, first_name, last_name, username, phone, is_active, updated_at)\n VALUES (?, ?, ?, ?, ?, 1, CURRENT_TIMESTAMP)\n ON CONFLICT(tg_id) DO UPDATE SET\n phone = excluded.phone,\n first_name = excluded.first_name,\n last_name = excluded.last_name,\n username = excluded.username,\n is_active = 1,\n updated_at = CURRENT_TIMESTAMP;`,\n [\n fromId,\n msg.from.first_name || \"\",\n msg.from.last_name || \"\",\n msg.from.username || \"\",\n phone,\n ],\n );\n return sendMessage(\n chatId,\n `✅ شماره ${phone} با موفقیت ثبت شد.\\nبرای قطع دریافت پیامک هر زمان /stop را بفرستید.`,\n { reply_markup: { remove_keyboard: true } },\n );\n }\n\n if (text === \"/start\" || text === \"/help\") {\n const userRes = await query(\n \"SELECT phone, is_active FROM users WHERE tg_id = ? LIMIT 1\",\n [fromId],\n );\n const u = userRes.rows[0];\n const help = \"\\n\\nدستورها:\\n\" +\n \"/start ثبت یا وضعیت شماره\\n\" +\n \"/stop توقف دریافت پیامک\\n\" +\n \"/resume از سرگیری دریافت\\n\" +\n \"/whoami نمایش آیدی عددی\\n\" +\n (admin\n ? \"\\nدستورهای مدیریتی:\\n/panel لینک پنل\\n/stats آمار\\n/testsms شماره متن\\n/trigger کلمه\\n/limit عدد\\n/addadmin آیدی\\n/deladmin آیدی\\n(در گروه) /allow و /disallow\"\n : \"\");\n\n if (u?.phone) {\n return sendMessage(\n chatId,\n `سلام ${msg.from.first_name}!\\nشماره شما (${u.phone}) ثبت است و وضعیت دریافت: ${\n u.is_active ? \"فعال ✅\" : \"غیرفعال ⛔️\"\n }${help}`,\n );\n }\n return sendMessage(\n chatId,\n `سلام ${msg.from.first_name}!\\nبرای دریافت اطلاع‌رسانی پیامکی، دکمه زیر را لمس کنید.${help}`,\n {\n reply_markup: {\n keyboard: [[{ text: \"📱 اشتراک‌گذاری شماره تماس\", request_contact: true }]],\n resize_keyboard: true,\n one_time_keyboard: true,\n },\n },\n );\n }\n\n if (text === \"/whoami\") {\n return sendMessage(chatId, `آیدی عددی شما: ${fromId}`, {\n parse_mode: \"HTML\",\n });\n }\n\n if (text === \"/stop\") {\n await query(\"UPDATE users SET is_active = 0 WHERE tg_id = ?\", [fromId]);\n return sendMessage(chatId, \"⛔️ دریافت پیامک برای شما غیرفعال شد. (/resume برای فعال‌سازی)\");\n }\n\n if (text === \"/resume\") {\n await query(\"UPDATE users SET is_active = 1 WHERE tg_id = ?\", [fromId]);\n return sendMessage(chatId, \"✅ دریافت پیامک دوباره فعال شد.\");\n }\n\n if (!admin) return;\n\n if (text === \"/panel\") {\n return sendMessage(\n chatId,\n \"پنل مدیریت را از منوی Mini App بات باز کنید (مسیر /admin روی همین دامنه).\\nاگر منو ست نشده، در BotFather مسیر /admin را به‌عنوان Web App ثبت کنید.\",\n );\n }\n\n if (text === \"/stats\") {\n const s = await collectStats();\n return sendMessage(\n chatId,\n `📊 آمار سامانه\\n` +\n `پیام‌های ایندکس‌شده: ${s.totalMessages}\\n` +\n `مخاطبان دارای شماره: ${s.usersWithPhone} (فعال: ${s.activeUsers})\\n` +\n `گروه‌های متصل: ${s.connectedGroups}\\n` +\n `پیامک امروز: ${s.smsToday} | موفق: ${s.smsOkToday} | ناموفق: ${s.smsFailedToday}\\n` +\n `مجموع پیامک‌ها: ${s.smsTotal}`,\n );\n }\n\n if (text.startsWith(\"/trigger\")) {\n const word = text.replace(\"/trigger\", \"\").trim();\n if (!word) return sendMessage(chatId, \"فرمت: /trigger پپپ\");\n await setSetting(\"trigger_word\", word);\n return sendMessage(chatId, `✅ کلمه فعال‌ساز به «${word}» تغییر کرد.`);\n }\n\n if (text.startsWith(\"/limit\")) {\n const n = Number(text.replace(\"/limit\", \"\").trim());\n if (!Number.isFinite(n) || n < 0) return sendMessage(chatId, \"فرمت: /limit 50\");\n await setSetting(\"daily_limit\", String(n));\n return sendMessage(chatId, `✅ سقف روزانه ارسال ${n} پیامک تنظیم شد.`);\n }\n\n if (text.startsWith(\"/addadmin\")) {\n const id = Number(text.replace(\"/addadmin\", \"\").trim());\n if (!id) return sendMessage(chatId, \"فرمت: /addadmin 123456789\");\n await query(\n \"INSERT OR IGNORE INTO admins (tg_id, added_by) VALUES (?, ?)\",\n [id, fromId],\n );\n await audit(fromId, \"add_admin\", String(id));\n return sendMessage(chatId, `✅ کاربر ${id} به ادمین‌ها اضافه شد.`);\n }\n\n if (text.startsWith(\"/deladmin\")) {\n const id = Number(text.replace(\"/deladmin\", \"\").trim());\n if (!id) return sendMessage(chatId, \"فرمت: /deladmin 123456789\");\n if (id === ADMIN_ID) return sendMessage(chatId, \"⛔️ سوپر ادمین قابل حذف نیست.\");\n await query(\"DELETE FROM admins WHERE tg_id = ?\", [id]);\n return sendMessage(chatId, `✅ کاربر ${id} از ادمین‌ها حذف شد.`);\n }\n\n if (text.startsWith(\"/testsms\")) {\n const parts = text.replace(\"/testsms\", \"\").trim().split(/\\s+/);\n const mobile = parts.shift() || \"\";\n const body = parts.join(\" \");\n if (!mobile || !body) {\n return sendMessage(chatId, \"فرمت:\\n/testsms 09121111111 متن آزمایشی\", {\n parse_mode: \"HTML\",\n });\n }\n await sendMessage(chatId, \"⏳ در حال ارسال...\");\n const res = await dispatchSms({\n phone: mobile,\n text: body,\n actorId: fromId,\n actorName: msg.from.first_name || \"\",\n source: \"test\",\n });\n return sendMessage(\n chatId,\n `📡 وضعیت: ${res.ok ? \"✅ موفق\" : \"❌ خطا\"}\\n` +\n (res.ok ? \"\" : `علت: ${escapeHtml(res.errorDescription)}\\n`) +\n `پاسخ سرور: ${escapeHtml(res.body || \"-\")}`,\n { parse_mode: \"HTML\" },\n );\n }\n}\n\n// ---------- ۸-۳. گروه‌ها و تاپیک‌ها ----------\nasync function handleGroup(msg: any) {\n if (msg.new_chat_members || msg.left_chat_member || msg.pinned_message) return;\n\n const settings = await getSettings();\n const chatId = msg.chat.id;\n const groupTitle = msg.chat.title || \"گروه\";\n const threadId = msg.message_thread_id || 0;\n const userId = msg.from?.id;\n if (!userId) return;\n\n const rawText = (msg.text || msg.caption || \"\").trim();\n\n // دستورهای مدیریتی داخل گروه\n if (/^\\/(allow|disallow)/.test(rawText)) {\n if (!(await isAdminUser(userId))) return;\n if (rawText.startsWith(\"/allow\")) {\n await query(\n `INSERT INTO allowed_chats (chat_id, title, enabled) VALUES (?, ?, 1)\n ON CONFLICT(chat_id) DO UPDATE SET enabled = 1, title = excluded.title;`,\n [chatId, groupTitle],\n );\n return sendMessage(chatId, \"✅ این گروه در لیست مجاز فعال شد.\", {\n message_thread_id: threadId || undefined,\n });\n }\n await query(\"UPDATE allowed_chats SET enabled = 0 WHERE chat_id = ?\", [chatId]);\n return sendMessage(chatId, \"⛔️ این گروه از لیست مجاز خارج شد.\", {\n message_thread_id: threadId || undefined,\n });\n }\n\n // ثبت خودکار گروه (برای مشاهده در پنل)\n await query(\n `INSERT OR IGNORE INTO allowed_chats (chat_id, title, enabled) VALUES (?, ?, ?)`,\n [chatId, groupTitle, settings.require_whitelist === \"1\" ? 0 : 1],\n );\n\n if (settings.require_whitelist === \"1\") {\n const okRes = await query(\n \"SELECT enabled FROM allowed_chats WHERE chat_id = ? LIMIT 1\",\n [chatId],\n );\n if (!Number(okRes.rows[0]?.enabled)) return;\n }\n\n const hasMedia = Boolean(msg.photo || msg.video || msg.document || msg.voice);\n let trimmed = rawText;\n if (hasMedia && !trimmed) trimmed = `یک رسانه در گروه ${groupTitle} بارگذاری شد.`;\n if (!trimmed) return;\n\n await query(\n `INSERT INTO topic_members (chat_id, thread_id, tg_id) VALUES (?, ?, ?)\n ON CONFLICT(chat_id, thread_id, tg_id) DO UPDATE SET last_active = CURRENT_TIMESTAMP;`,\n [chatId, threadId, userId],\n );\n\n // ایندکس پیام (درج یا به‌روزرسانی در حالت ویرایش)\n const senderName = `${msg.from.first_name || \"\"} ${msg.from.last_name || \"\"}`.trim();\n let recordId = 0;\n if (settings.index_all_messages === \"1\" || trimmed.includes(settings.trigger_word)) {\n const ins = await query(\n `INSERT INTO messages_index\n (chat_id, chat_title, message_thread_id, message_id, sender_id, sender_name, text, has_media)\n VALUES (?,?,?,?,?,?,?,?)\n ON CONFLICT(chat_id, message_id) DO UPDATE SET\n text = excluded.text, has_media = excluded.has_media, chat_title = excluded.chat_title\n RETURNING id;`,\n [\n chatId,\n groupTitle,\n threadId,\n msg.message_id,\n userId,\n senderName,\n trimmed,\n hasMedia ? 1 : 0,\n ],\n );\n recordId = Number(ins.rows[0]?.id || ins.lastInsertRowid || 0);\n }\n\n // تشخیص کلمه فعال‌ساز (در متن خود پیام یا در ریپلای)\n const trigger = settings.trigger_word || \"پپپ\";\n let isTriggered = trimmed.includes(trigger);\n let targetRecordId = recordId;\n\n if (!isTriggered && msg.reply_to_message) {\n const repText = (msg.reply_to_message.text || msg.reply_to_message.caption || \"\");\n if (trimmed === trigger || repText.includes(trigger)) {\n isTriggered = true;\n const repRes = await query(\n \"SELECT id FROM messages_index WHERE chat_id = ? AND message_id = ? LIMIT 1\",\n [chatId, msg.reply_to_message.message_id],\n );\n if (repRes.rows[0]?.id) targetRecordId = Number(repRes.rows[0].id);\n }\n }\n\n if (!isTriggered || !targetRecordId) return;\n\n const users = await fetchActiveUsers();\n if (!users.length) {\n return sendMessage(\n chatId,\n `⚠️ کلمه «${trigger}» دریافت شد، اما هیچ مخاطب فعالی با شماره در سیستم ثبت نیست.`,\n {\n reply_to_message_id: msg.message_id,\n message_thread_id: threadId || undefined,\n },\n );\n }\n\n const ttl = Number(settings.prompt_ttl_minutes || \"30\");\n const sent = await sendMessage(\n chatId,\n `📋 پیامک به کدام مخاطبان ارسال شود؟\\nمخاطب(ها) را تیک بزنید و «ارسال پیامک» را بزنید.\\n⏱ در صورت بی‌پاسخ ماندن، پس از ${ttl} دقیقه حذف می‌شود.`,\n {\n reply_to_message_id: msg.message_id,\n message_thread_id: threadId || undefined,\n reply_markup: buildRecipientKeyboard(targetRecordId, users, [], 0),\n },\n );\n\n const promptId = sent?.result?.message_id;\n if (!promptId) return;\n\n await query(\n `INSERT INTO pending_prompts (chat_id, message_id, thread_id, record_id, selected, page, expires_at)\n VALUES (?, ?, ?, ?, '[]', 0, datetime('now', '+' || ? || ' minutes'))\n ON CONFLICT(chat_id, message_id) DO UPDATE SET selected='[]', page=0;`,\n [chatId, promptId, threadId, targetRecordId, ttl],\n );\n}\n\n// ==========================================\n// ۹. آمار\n// ==========================================\nasync function collectStats() {\n const one = async (sql: string, args: any[] = []) =>\n Number((await query(sql, args)).rows[0]?.c || 0);\n\n return {\n totalMessages: await one(\"SELECT COUNT(*) c FROM messages_index\"),\n usersWithPhone: await one(\n \"SELECT COUNT(*) c FROM users WHERE phone IS NOT NULL AND phone != ''\",\n ),\n activeUsers: await one(\n \"SELECT COUNT(*) c FROM users WHERE phone != '' AND is_active = 1\",\n ),\n connectedGroups: await one(\"SELECT COUNT(DISTINCT chat_id) c FROM messages_index\"),\n smsToday: await one(\"SELECT COUNT(*) c FROM sms_logs WHERE date(created_at)=date('now')\"),\n smsOkToday: await one(\n \"SELECT COUNT(*) c FROM sms_logs WHERE status='ok' AND date(created_at)=date('now')\",\n ),\n smsFailedToday: await one(\n \"SELECT COUNT(*) c FROM sms_logs WHERE status='failed' AND date(created_at)=date('now')\",\n ),\n smsTotal: await one(\"SELECT COUNT(*) c FROM sms_logs\"),\n smsParts: await one(\"SELECT COALESCE(SUM(parts),0) c FROM sms_logs WHERE status='ok'\"),\n pendingPrompts: await one(\"SELECT COUNT(*) c FROM pending_prompts\"),\n };\n}\n\n// ==========================================\n// ۱۰. APIهای پنل مدیریت (همه محافظت‌شده)\n// ==========================================\nconst json = (data: any, status = 200) =>\n Response.json(data, {\n status,\n headers: { \"Cache-Control\": \"no-store\" },\n });\n\nfunction csv(rows: any[], filename: string) {\n if (!rows.length) return new Response(\"\\uFEFF\", { status: 200 });\n const cols = Object.keys(rows[0]);\n const esc = (v: any) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`;\n const body = \"\\uFEFF\" + cols.join(\",\") + \"\\n\" +\n rows.map((r) => cols.map((c) => esc(r[c])).join(\",\")).join(\"\\n\");\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/csv; charset=utf-8\",\n \"Content-Disposition\": `attachment; filename=\"${filename}\"`,\n },\n });\n}\n\nasync function handleApi(req: Request, url: URL): Promise {\n const path = url.pathname;\n\n if (path === \"/api/health\") {\n return json({ ok: true, time: new Date().toISOString(), db: dbReady });\n }\n\n // احراز هویت اجباری برای بقیه مسیرها\n const auth = await authenticate(req, url);\n if (!auth) {\n return json(\n { error: \"دسترسی غیرمجاز. این پنل فقط از طریق مینی‌اپ تلگرام و برای ادمین‌ها باز می‌شود.\" },\n 401,\n );\n }\n\n if (path === \"/api/me\") {\n return json({ tg_id: auth.tgId, is_super: auth.isSuper, via: auth.via });\n }\n\n if (path === \"/api/stats\") return json(await collectStats());\n\n // ---- مخاطبان ----\n if (path === \"/api/users\") {\n if (req.method === \"GET\") {\n const res = await query(\"SELECT * FROM users ORDER BY id DESC\");\n return json(res.rows);\n }\n if (req.method === \"POST\") {\n const b = await req.json();\n const phone = normalizeIranianPhone(b.phone || \"\");\n if (!b.tg_id || !phone) return json({ error: \"آیدی عددی و شماره الزامی است\" }, 400);\n if (!isValidIranianMobile(phone)) return json({ error: \"شماره معتبر نیست\" }, 400);\n await query(\n `INSERT INTO users (tg_id, first_name, username, phone, note, is_active, updated_at)\n VALUES (?, ?, ?, ?, ?, 1, CURRENT_TIMESTAMP)\n ON CONFLICT(tg_id) DO UPDATE SET\n phone = excluded.phone,\n first_name = COALESCE(NULLIF(excluded.first_name,''), users.first_name),\n username = COALESCE(NULLIF(excluded.username,''), users.username),\n note = COALESCE(NULLIF(excluded.note,''), users.note),\n updated_at = CURRENT_TIMESTAMP;`,\n [\n Number(b.tg_id),\n b.first_name || \"ثبت دستی\",\n b.username || \"\",\n phone,\n b.note || \"\",\n ],\n );\n await audit(auth.tgId, \"user_upsert\", `${b.tg_id} / ${phone}`);\n return json({ success: true });\n }\n if (req.method === \"PATCH\") {\n const b = await req.json();\n await query(\"UPDATE users SET is_active = ? WHERE tg_id = ?\", [\n b.is_active ? 1 : 0,\n Number(b.tg_id),\n ]);\n return json({ success: true });\n }\n if (req.method === \"DELETE\") {\n const tgId = Number(url.searchParams.get(\"tg_id\"));\n await query(\"DELETE FROM users WHERE tg_id = ?\", [tgId]);\n await audit(auth.tgId, \"user_delete\", String(tgId));\n return json({ success: true });\n }\n }\n\n // ---- گروه‌ها ----\n if (path === \"/api/groups\") {\n if (req.method === \"GET\") {\n const res = await query(\n `SELECT c.chat_id, c.title, c.enabled,\n (SELECT COUNT(*) FROM messages_index m WHERE m.chat_id = c.chat_id) AS msg_count\n FROM allowed_chats c ORDER BY c.id DESC`,\n );\n return json(res.rows);\n }\n if (req.method === \"PATCH\") {\n const b = await req.json();\n await query(\"UPDATE allowed_chats SET enabled = ? WHERE chat_id = ?\", [\n b.enabled ? 1 : 0,\n Number(b.chat_id),\n ]);\n return json({ success: true });\n }\n }\n\n // ---- برچسب‌ها ----\n if (path === \"/api/tags\") {\n if (req.method === \"GET\") {\n return json((await query(\"SELECT * FROM predefined_tags ORDER BY id DESC\")).rows);\n }\n if (req.method === \"POST\") {\n const { name } = await req.json();\n const clean = String(name || \"\").replace(/^#/, \"\").trim();\n if (!clean) return json({ error: \"نام برچسب الزامی است\" }, 400);\n await query(\"INSERT OR IGNORE INTO predefined_tags (name) VALUES (?)\", [clean]);\n return json({ success: true, name: clean });\n }\n if (req.method === \"DELETE\") {\n await query(\"DELETE FROM predefined_tags WHERE id = ?\", [\n Number(url.searchParams.get(\"id\")),\n ]);\n return json({ success: true });\n }\n }\n\n // ---- جستجو ----\n if (path === \"/api/search\") {\n const q = url.searchParams.get(\"q\") || \"\";\n const chatId = url.searchParams.get(\"chat_id\");\n const tag = url.searchParams.get(\"tag\");\n const page = Math.max(0, Number(url.searchParams.get(\"page\") || \"0\"));\n const size = Math.min(100, Number(url.searchParams.get(\"size\") || \"25\"));\n\n let sql = \"SELECT * FROM messages_index WHERE 1=1\";\n const args: any[] = [];\n if (q) {\n sql += \" AND (text LIKE ? OR sender_name LIKE ?)\";\n args.push(`%${q}%`, `%${q}%`);\n }\n if (chatId) {\n sql += \" AND chat_id = ?\";\n args.push(Number(chatId));\n }\n if (tag) {\n sql += \" AND tag = ?\";\n args.push(tag);\n }\n sql += \" ORDER BY id DESC LIMIT ? OFFSET ?\";\n args.push(size, page * size);\n return json((await query(sql, args)).rows);\n }\n\n // ---- گزارش پیامک‌ها ----\n if (path === \"/api/logs\") {\n const status = url.searchParams.get(\"status\") || \"\";\n const page = Math.max(0, Number(url.searchParams.get(\"page\") || \"0\"));\n let sql = \"SELECT * FROM sms_logs WHERE 1=1\";\n const args: any[] = [];\n if (status) {\n sql += \" AND status = ?\";\n args.push(status);\n }\n sql += \" ORDER BY id DESC LIMIT 50 OFFSET ?\";\n args.push(page * 50);\n return json((await query(sql, args)).rows);\n }\n\n if (path === \"/api/logs/retry\" && req.method === \"POST\") {\n const id = Number(url.searchParams.get(\"id\"));\n const res = await query(\"SELECT * FROM sms_logs WHERE id = ? LIMIT 1\", [id]);\n const log = res.rows[0];\n if (!log) return json({ error: \"لاگ یافت نشد\" }, 404);\n const out = await dispatchSms({\n phone: log.phone,\n text: log.text,\n targetTgId: log.target_tg_id,\n targetName: log.target_name,\n actorId: auth.tgId,\n actorName: \"پنل\",\n recordId: log.record_id,\n chatId: log.chat_id,\n chatTitle: log.chat_title,\n source: \"retry\",\n });\n return json({ ok: out.ok, error: out.errorDescription, body: out.body });\n }\n\n // ---- ارسال گروهی از پنل ----\n if (path === \"/api/broadcast\" && req.method === \"POST\") {\n const b = await req.json();\n const text = String(b.text || \"\").trim();\n if (!text) return json({ error: \"متن پیامک الزامی است\" }, 400);\n\n let targets: any[] = [];\n if (b.mode === \"all\") {\n targets = await fetchActiveUsers();\n } else if (b.mode === \"chat\" && b.chat_id) {\n const res = await query(\n `SELECT DISTINCT u.tg_id, u.first_name, u.last_name, u.phone\n FROM topic_members tm JOIN users u ON u.tg_id = tm.tg_id\n WHERE tm.chat_id = ? AND u.is_active = 1 AND u.phone != ''`,\n [Number(b.chat_id)],\n );\n targets = res.rows;\n } else if (Array.isArray(b.ids) && b.ids.length) {\n const all = await fetchActiveUsers();\n const set = b.ids.map(Number);\n targets = all.filter((u: any) => set.includes(Number(u.tg_id)));\n }\n\n if (!targets.length) return json({ error: \"مخاطبی برای ارسال یافت نشد\" }, 400);\n if (targets.length > MAX_BROADCAST) {\n return json({ error: `حداکثر ${MAX_BROADCAST} مخاطب در هر ارسال` }, 400);\n }\n\n const settings = await getSettings();\n const finalText = settings.sms_signature\n ? `${text}\\n${settings.sms_signature}`\n : text;\n\n const results = await runWithConcurrency(targets, SMS_CONCURRENCY, (u: any) =>\n dispatchSms({\n phone: u.phone,\n text: finalText,\n targetTgId: Number(u.tg_id),\n targetName: displayName(u),\n actorId: auth.tgId,\n actorName: \"پنل مدیریت\",\n source: \"broadcast\",\n }).then((r) => ({ name: displayName(u), phone: u.phone, ...r })));\n\n await audit(auth.tgId, \"broadcast\", `count=${targets.length}`);\n return json({\n total: results.length,\n ok: results.filter((r: any) => r.ok).length,\n failed: results.filter((r: any) => !r.ok).map((r: any) => ({\n name: r.name,\n phone: r.phone,\n error: r.errorDescription,\n })),\n parts: smsPartCount(finalText),\n });\n }\n\n // ---- تنظیمات ----\n if (path === \"/api/settings\") {\n if (req.method === \"GET\") return json(await getSettings(true));\n if (req.method === \"POST\") {\n const b = await req.json();\n for (const [k, v] of Object.entries(b)) {\n if (k in DEFAULT_SETTINGS) await setSetting(k, String(v));\n }\n await audit(auth.tgId, \"settings_update\", JSON.stringify(b).slice(0, 300));\n return json({ success: true, settings: await getSettings(true) });\n }\n }\n\n // ---- ادمین‌ها ----\n if (path === \"/api/admins\") {\n if (req.method === \"GET\") {\n const res = await query(\"SELECT * FROM admins ORDER BY id DESC\");\n return json({ super_admin: ADMIN_ID, list: res.rows });\n }\n if (!auth.isSuper) return json({ error: \"فقط سوپر ادمین\" }, 403);\n if (req.method === \"POST\") {\n const b = await req.json();\n if (!b.tg_id) return json({ error: \"آیدی الزامی است\" }, 400);\n await query(\n \"INSERT OR IGNORE INTO admins (tg_id, title, added_by) VALUES (?, ?, ?)\",\n [Number(b.tg_id), b.title || \"\", auth.tgId],\n );\n return json({ success: true });\n }\n if (req.method === \"DELETE\") {\n const id = Number(url.searchParams.get(\"tg_id\"));\n if (id === ADMIN_ID) return json({ error: \"سوپر ادمین قابل حذف نیست\" }, 400);\n await query(\"DELETE FROM admins WHERE tg_id = ?\", [id]);\n return json({ success: true });\n }\n }\n\n // ---- خروجی CSV ----\n if (path === \"/api/export/users\") {\n return csv((await query(\"SELECT * FROM users ORDER BY id DESC\")).rows, \"users.csv\");\n }\n if (path === \"/api/export/logs\") {\n return csv(\n (await query(\"SELECT * FROM sms_logs ORDER BY id DESC LIMIT 5000\")).rows,\n \"sms_logs.csv\",\n );\n }\n\n // ---- ابزارها ----\n if (path === \"/api/cron\" && req.method === \"POST\") {\n await cleanupExpired();\n return json({ success: true });\n }\n\n if (path === \"/api/setup-webhook\" && req.method === \"POST\") {\n if (!auth.isSuper) return json({ error: \"فقط سوپر ادمین\" }, 403);\n const res = await callTelegram(\"setWebhook\", {\n url: `${url.origin}/`,\n secret_token: WEBHOOK_SECRET || undefined,\n allowed_updates: [\"message\", \"edited_message\", \"callback_query\"],\n drop_pending_updates: true,\n });\n return json(res);\n }\n\n if (path === \"/api/audit\") {\n return json((await query(\"SELECT * FROM audit_log ORDER BY id DESC LIMIT 100\")).rows);\n }\n\n return json({ error: \"Not Found\" }, 404);\n}\n\n// ==========================================\n// ۱۱. مینی‌اپ پنل مدیریت\n// ==========================================\nfunction getMiniAppHtml(): string {\n return `\n\n\n\n\nپنل مدیریت پیامک همایس\n\n\n\n\n\n\n

\n\n

سامانه اطلاع‌رسانی پیامکی همایس

پنل مدیریت سرورلس — در حال احراز هویت...

\n\n

دسترسی غیرمجاز

این پنل تنها برای ادمین‌ها و از طریق باز کردن مینی‌اپ داخل تلگرام قابل استفاده است.

\n\n

\n \n \n \n \n

\n \n \n \n

\n\n \n

آخرین ارسال‌ها

در حال بارگذاری...

\n\n \n

➕ ثبت / ویرایش دستی مخاطب

\n \n \n \n \n

\n \n

لیست مخاطبان

\n \n \n

\n\n \n

\n \n

\n \n \n

\n \n

\n\n \n

افزودن برچسب

\n \n \n

\n\n \n

📣 ارسال پیامک گروهی

\n \n

۰ کاراکتر — ۱ بخش پیامک

\n \n \n

\n \n

\n\n \n

\n \n \n

\n \n

\n\n \n

تنظیمات عمومی

\n کلمه فعال‌ساز\n \n سقف روزانه ارسال هر کاربر (۰ = بی‌نهایت)\n \n امضای انتهای پیامک\n \n مدت انقضای منوی انتخاب (دقیقه)\n \n حداکثر طول متن پیامک\n \n

\n فقط گروه‌های تاییدشده فعال باشند\n حذف پیام اصلی پس از ارسال موفق\n ایندکس تمام پیام‌های گروه برای جستجو\n

\n \n

\n\n

گروه‌های ثبت‌شده

\n\n

ادمین‌ها

\n \n \n

\n\n

ابزارها

\n \n \n

\n\n\n\n`;\n}\n\n// ==========================================\n// ۱۲. ورودی اصلی سرورلس\n// ==========================================\nexport default async function (req: Request): Promise {\n await initDatabase();\n const url = new URL(req.url);\n\n if (url.pathname.startsWith(\"/api/\")) {\n try {\n return await handleApi(req, url);\n } catch (e: any) {\n console.error(\"API error:\", e);\n return json({ error: e?.message || \"خطای داخلی سرور\" }, 500);\n }\n }\n\n if (url.pathname === \"/admin\" || url.pathname === \"/miniapp\") {\n return new Response(getMiniAppHtml(), {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"no-store\",\n },\n });\n }\n\n if (req.method === \"POST\") {\n // اعتبارسنجی وب‌هوک با secret_token تلگرام\n if (\n WEBHOOK_SECRET &&\n req.headers.get(\"x-telegram-bot-api-secret-token\") !== WEBHOOK_SECRET\n ) {\n return new Response(\"Forbidden\", { status: 403 });\n }\n try {\n const update = await req.json();\n await handleTelegramUpdate(update);\n } catch (e) {\n console.error(\"Update error:\", e);\n }\n // همیشه 200 تا تلگرام آپدیت را دوباره نفرستد\n return new Response(\"OK\", { status: 200 });\n }\n\n return new Response(\n \"✅ ربات تلگرام و سامانه پیامک همایس فعال است.\\nپنل مدیریت: /admin (فقط ادمین‌ها)\",\n { headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } },\n );\n}","deleted",false,"label",[14],"5e5f428a-e3d1-414b-858a-a4281c850f1a",["D",1788866198021],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","0c10d4b3-a9b8-43e9-8be3-54116d58fe53","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a07bcd-74fd-7086-a12b-f5d75098a171","tursoName","5e5f428ae3d1414b858aa4281c850f1a","tursoHostname","5e5f428ae3d1414b858aa4281c850f1a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789485645684],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_104":100},"org",{"_9":10,"_97":98,"_99":100,"_55":56,"_101":102,"_103":42},"branch",{"_35":30,"_11":88,"_22":28,"_89":45,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":12,"_96":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","omid13841384 omid1384138","avatar","https://lh3.googleusercontent.com/a/ACg8ocIXl3UwWZDaTFVGW5NJGINpBCP0DAKvx9qWWJBZSW5Q-F3gDA=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_138":139,"_140":141,"_142":143,"_144":42,"_145":42,"_146":42,"_147":32,"_148":-5,"_149":-7,"_150":-7,"_151":62,"_152":42,"_153":42,"_154":-5,"_155":42,"_156":42,"_157":42,"_158":-5},"ENV",{"_109":110,"_111":112,"_113":88,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]