[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_109":110,"_111":112},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","tambovtsev007","name","unlock-owners","path","backend/index.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":26,"_61":34,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/tambovtsev007/unlock-owners/code/backend/index.ts","extension","id","bc759d09-2a9b-45b7-bcf2-d91205994d28","index.ts","fileId","38451674-b013-11f1-bda7-1607ee4eb77e","parentId","2d175de9-e314-46bc-b472-7c5eb74535c8","branchId","9dbe2f34-663f-4856-8384-e8139fd87595","branchVersion",94,"latest",true,"createdAt",["D",1789476892705],"version",17,"fileType","http","content","// HTTP: интерфейс и API парсера собственников Unlock.\nimport { Hono } from \"npm:hono@4\";\nimport { readFile, serveFile, parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { DEFAULT_SETTINGS, getSettings, migrate, nowIso, parseJson, setSettings, sqlite, STATUSES } from \"./db.ts\";\nimport { sync, inparsSubscription, inparsTask } from \"./inpars.ts\";\nimport { listBrokers, loginByPin, syncBrokers, type User } from \"./auth.ts\";\nimport { migratePush, saveSub, dropSub, subsFor, notifyBroker, vapidPublic } from \"./push.ts\";\n\nconst app = new Hono<{ Variables: { user: User } }>();\napp.onError((err) => Promise.reject(err));\n\nlet migrated = false;\napp.use(\"*\", async (_c, next) => { if (!migrated) { await migrate(); await migratePush(); migrated = true; } await next(); });\n\n// ---------- статика ----------\napp.get(\"/\", async (c) => c.html(await readFile(\"/frontend/index.html\", import.meta.url), 200, { \"Cache-Control\": \"no-store\" }));\n// Статика без долгого кэша: после каждой выкладки телефон и браузер получают свежую версию\napp.get(\"/app.css\", async (c) => c.body(await readFile(\"/frontend/app.css\", import.meta.url), 200, { \"Content-Type\": \"text/css; charset=utf-8\", \"Cache-Control\": \"no-cache\" }));\napp.get(\"/app.js\", async (c) => c.body(await readFile(\"/frontend/app.js\", import.meta.url), 200, { \"Content-Type\": \"application/javascript; charset=utf-8\", \"Cache-Control\": \"no-cache\" }));\napp.get(\"/app2.js\", async (c) => c.body(await readFile(\"/frontend/app2.js\", import.meta.url), 200, { \"Content-Type\": \"application/javascript; charset=utf-8\", \"Cache-Control\": \"no-cache\" }));\napp.get(\"/sw.js\", async (c) => c.body(await readFile(\"/frontend/sw.js\", import.meta.url), 200, { \"Content-Type\": \"application/javascript; charset=utf-8\", \"Service-Worker-Allowed\": \"/\", \"Cache-Control\": \"no-store\" }));\nconst ICON_PNG = Uint8Array.from(atob(\"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\"), (ch) => ch.charCodeAt(0));\napp.get(\"/icon.png\", (c) => c.body(ICON_PNG, 200, { \"Content-Type\": \"image/png\", \"Cache-Control\": \"public, max-age=86400\" }));\napp.get(\"/manifest.json\", (c) => c.json({ name: \"Unlock · Собственники\", short_name: \"Собственники\", start_url: \"/\", scope: \"/\", display: \"standalone\", background_color: \"#fbfaf7\", theme_color: \"#fbfaf7\", icons: [{ src: \"/icon.png\", sizes: \"192x192\", type: \"image/png\" }, { src: \"/icon.png\", sizes: \"512x512\", type: \"image/png\" }] }));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ---------- авторизация ----------\napp.post(\"/api/login\", async (c) => {\n const { pin } = await c.req.json().catch(() => ({}));\n const u = await loginByPin(String(pin || \"\"));\n if (!u) return c.json({ error: \"Неверный ПИН-код\" }, 401);\n return c.json(u);\n});\n\napp.use(\"/api/*\", async (c, next) => {\n if (c.req.path === \"/api/login\") return next();\n const u = await loginByPin(c.req.header(\"x-pin\") || \"\");\n if (!u) return c.json({ error: \"unauthorized\" }, 401);\n c.set(\"user\", u);\n await next();\n});\n\n// ---------- справочники и состояние ----------\nfunction nextRunIso() {\n // Крон каждую минуту — следующая круглая минута\n const d = new Date(); d.setUTCSeconds(0, 0); d.setUTCMinutes(d.getUTCMinutes() + 1);\n return d.toISOString();\n}\n\napp.get(\"/api/bootstrap\", async (c) => {\n const u = c.get(\"user\");\n const [brokers, s, last, counts, recall] = await Promise.all([\n listBrokers(),\n getSettings(),\n sqlite.execute(\"SELECT * FROM runs WHERE finished_at IS NOT NULL ORDER BY id DESC LIMIT 1\"),\n sqlite.execute(`SELECT status, COUNT(*) n FROM objects WHERE hidden=0 AND dup_of IS NULL GROUP BY status`),\n sqlite.execute({ sql: `SELECT COUNT(*) n FROM objects WHERE hidden=0 AND status='recall' AND recall_at <= ? AND (assignee_id=? OR ?=1)`, args: [nowIso(), u.id, u.role === \"boss\" ? 1 : 0] }),\n ]);\n const dayAgo = new Date(Date.now() - 86400000).toISOString();\n const fresh = await sqlite.execute({ sql: \"SELECT COUNT(*) n FROM objects WHERE hidden=0 AND dup_of IS NULL AND COALESCE(source_created, created, first_seen) >= ?\", args: [dayAgo] });\n const mine = await sqlite.execute({ sql: \"SELECT COUNT(*) n FROM objects WHERE hidden=0 AND assignee_id=? AND status IN ('work','recall','noanswer','meeting')\", args: [u.id] });\n const lastData = await sqlite.execute(\"SELECT started_at, inserted, updated FROM runs WHERE inserted>0 ORDER BY id DESC LIMIT 1\");\n const byStatus: Record = {};\n for (const r of counts.rows as any[]) byStatus[String(r.status)] = Number(r.n);\n return c.json({\n user: u,\n brokers: brokers.filter((b) => b.active),\n statuses: STATUSES,\n settings: u.role === \"boss\" ? s : { cost_min: s.cost_min, cost_max: s.cost_max },\n yandexKey: s.yandex_key || Deno.env.get(\"YANDEX_MAPS_KEY\") || \"\",\n zones: (await sqlite.execute(\"SELECT id, name, points, color, created_by, created_by_name FROM zones ORDER BY name\")).rows.map((z: any) => ({ ...z, points: parseJson(z.points, []) })),\n lastRun: last.rows[0] || null,\n lastNew: lastData.rows[0] || null,\n nextRun: nextRunIso(),\n serverTime: nowIso(),\n counts: { byStatus, fresh24h: Number((fresh.rows[0] as any).n), mine: Number((mine.rows[0] as any).n), recallDue: Number((recall.rows[0] as any).n) },\n });\n});\n\n// ---------- список объектов ----------\nconst LIST_COLS = `objects.id, source, url, category, section_id, rooms, sq_land, address, district, metro, floor, floors, sq, cost, cost_m2, images, lat, lng, phones, is_new, is_apartments, build_year,\n source_created, created, first_seen, cost_prev, cost_changed_at, score, status, assignee_id, assignee_name, status_at, recall_at, suspect, phone_req_at, phone_req_status,\n COALESCE(d.c, 1) - 1 AS twins, COALESCE(t.n, 0) AS touches, t.last AS last_touch`;\nconst LIST_JOINS = `LEFT JOIN (SELECT dup_key, COUNT(*) c FROM objects WHERE hidden=0 AND dup_key IS NOT NULL GROUP BY dup_key) d ON d.dup_key=objects.dup_key\n LEFT JOIN (SELECT object_id, COUNT(*) n, MAX(created_at) last FROM activity WHERE kind IN ('status','comment','assign') GROUP BY object_id) t ON t.object_id=objects.id`;\n\napp.get(\"/api/objects\", async (c) => {\n const u = c.get(\"user\");\n const q = c.req.query();\n const where: string[] = [q.gone === \"1\" ? \"hidden=1 AND gone_at IS NOT NULL\" : \"hidden=0\", \"dup_of IS NULL\"];\n const args: any[] = [];\n if (q.status) { const st = q.status.split(\",\").filter((x) => x in STATUSES); if (st.length) { where.push(`status IN (${st.map(() => \"?\").join(\",\")})`); args.push(...st); } }\n if (q.mine === \"1\") { where.push(\"assignee_id=?\"); args.push(u.id); }\n else if (q.broker) { where.push(\"assignee_id=?\"); args.push(Number(q.broker)); }\n if (q.unassigned === \"1\") where.push(\"assignee_id IS NULL\");\n if (q.assigned === \"1\") where.push(\"assignee_id IS NOT NULL\");\n if (q.section) { const sc = q.section.split(\",\").map(Number).filter((n) => n > 0); if (sc.length) { where.push(`section_id IN (${sc.map(() => \"?\").join(\",\")})`); args.push(...sc); } }\n if (q.source) { const s = q.source.split(\",\"); where.push(`source IN (${s.map(() => \"?\").join(\",\")})`); args.push(...s); }\n if (q.rooms) { const r = q.rooms.split(\",\").map(Number).filter((n) => !isNaN(n)); if (r.length) { if (r.includes(4)) { where.push(`(rooms IN (${r.map(() => \"?\").join(\",\")}) OR rooms>=4)`); args.push(...r); } else { where.push(`rooms IN (${r.map(() => \"?\").join(\",\")})`); args.push(...r); } } }\n if (q.costMin) { where.push(\"cost>=?\"); args.push(Number(q.costMin)); }\n if (q.costMax) { where.push(\"cost<=?\"); args.push(Number(q.costMax)); }\n if (q.phone === \"1\") where.push(\"phones IS NOT NULL AND phones != '[]'\");\n if (q.fresh) { const h = Number(q.fresh); if (h > 0) { where.push(\"COALESCE(source_created, created, first_seen)>=?\"); args.push(new Date(Date.now() - h * 3600000).toISOString()); } }\n if (q.drop === \"1\") where.push(\"cost_prev IS NOT NULL AND cost < cost_prev\");\n if (q.sqMin) { where.push(\"sq>=?\"); args.push(Number(q.sqMin)); }\n if (q.sqMax) { where.push(\"sq<=?\"); args.push(Number(q.sqMax)); }\n if (q.m2Min) { where.push(\"cost_m2>=?\"); args.push(Number(q.m2Min)); }\n if (q.m2Max) { where.push(\"cost_m2<=?\"); args.push(Number(q.m2Max)); }\n if (q.notFirst === \"1\") where.push(\"(floor IS NULL OR floor>1)\");\n if (q.notLast === \"1\") where.push(\"(floor IS NULL OR floors IS NULL OR floor=?\"); args.push(Number(q.yearMin)); }\n if (q.yearMax) { where.push(\"build_year<=?\"); args.push(Number(q.yearMax)); }\n if (q.hideAgent === \"1\") where.push(\"COALESCE(suspect,0)=0\");\n if (q.cross === \"1\") where.push(\"COALESCE(d.c, 1) > 1\");\n if (q.isNew === \"0\" || q.isNew === \"1\") { where.push(\"is_new=?\"); args.push(Number(q.isNew)); }\n if (q.touched === \"1\") { where.push(\"objects.id IN (SELECT object_id FROM activity WHERE broker_id=? AND kind IN ('comment','status','assign'))\"); args.push(q.broker && u.role === \"boss\" ? Number(q.broker) : u.id); }\n if (q.recallSort === \"1\") where.push(\"recall_at IS NOT NULL\");\n if (q.q) { where.push(\"(address LIKE ? OR metro LIKE ? OR district LIKE ? OR title LIKE ?)\"); const like = `%${q.q}%`; args.push(like, like, like, like); }\n const sorts: Record = {\n dom: \"COALESCE(source_created, created, first_seen) ASC\", recall: \"recall_at IS NULL, recall_at ASC\", fresh: \"COALESCE(source_created, created, first_seen) DESC\", price_desc: \"cost DESC\", price_asc: \"cost ASC\", m2: \"cost_m2 ASC\", score: \"score DESC, first_seen DESC\", updated: \"status_at DESC\",\n };\n const order = sorts[q.sort || \"\"] || \"first_seen DESC\";\n const limit = Math.min(Number(q.limit) || 5000, 8000);\n const r = await sqlite.execute({ sql: `SELECT ${LIST_COLS} FROM objects ${LIST_JOINS} WHERE ${where.join(\" AND \")} ORDER BY ${order} LIMIT ${limit}`, args });\n const rows = (r.rows as any[]).map((o) => shapeListRow(o, u));\n return c.json({ items: rows, total: rows.length });\n});\n\nfunction shapeListRow(o: any, u: User) {\n const st = STATUSES[String(o.status)] || STATUSES.new;\n // первая картинка без разбора всего JSON\n const im = typeof o.images === \"string\" ? o.images.match(/\"([^\"]+)\"/) : null;\n const photos = typeof o.images === \"string\" ? (o.images.match(/\"/g) || []).length / 2 : 0;\n const hasPhone = typeof o.phones === \"string\" && /\\d/.test(o.phones);\n const row: any = {\n id: Number(o.id), source: o.source, url: o.url, category: o.category, section_id: o.section_id, rooms: o.rooms, address: o.address, metro: o.metro,\n floor: o.floor, floors: o.floors, sq: o.sq, cost: o.cost, cost_m2: o.cost_m2, img: im ? im[1] : null, photos,\n lat: o.lat, lng: o.lng, hasPhone, status: o.status, source_created: o.source_created, created: o.created, first_seen: o.first_seen, score: o.score,\n flags: { crossListed: Number(o.twins || 0), agentWords: !!o.suspect, phoneMulti: 0 },\n };\n if (o.sq_land) row.sq_land = o.sq_land; if (o.district) row.district = o.district;\n if (o.is_new) row.is_new = 1; if (o.is_apartments) row.is_apartments = 1; if (o.build_year) row.build_year = o.build_year;\n if (o.cost_prev) { row.cost_prev = o.cost_prev; row.cost_changed_at = o.cost_changed_at; }\n if (o.assignee_id) { row.assignee_id = o.assignee_id; row.assignee_name = o.assignee_name; }\n if (o.status_at) row.status_at = o.status_at; if (o.recall_at) row.recall_at = o.recall_at;\n if (o.phone_req_at) { row.phone_req_at = o.phone_req_at; row.phone_req_status = o.phone_req_status; }\n if (o.touches) { row.touches = Number(o.touches); row.last_touch = o.last_touch; }\n if (st.hidePhone && u.role !== \"boss\") row.hidePhone = true;\n return row;\n}\n\n// ---------- карточка ----------\napp.get(\"/api/objects/:id\", async (c) => {\n const u = c.get(\"user\");\n const id = Number(c.req.param(\"id\"));\n const r = await sqlite.execute({ sql: \"SELECT * FROM objects WHERE id=?\", args: [id] });\n if (!r.rows.length) return c.json({ error: \"not found\" }, 404);\n const o = r.rows[0] as any;\n const st = STATUSES[String(o.status)] || STATUSES.new;\n const [act, sib] = await Promise.all([\n sqlite.execute({ sql: \"SELECT * FROM activity WHERE object_id=? OR object_id IN (SELECT id FROM objects WHERE dup_of=?) ORDER BY id ASC\", args: [id, id] }),\n o.dup_key ? sqlite.execute({ sql: \"SELECT id, source, url, cost, first_seen, status FROM objects WHERE dup_key=? AND id!=? AND hidden=0\", args: [o.dup_key, id] }) : Promise.resolve({ rows: [] }),\n ]);\n const hide = !!st.hidePhone && u.role !== \"boss\";\n // Сравнение с рынком: средняя цена метра по таким же объектам (метро + комнатность), иначе по району\n let market: any = null;\n if (o.cost_m2 && o.section_id === 1) {\n const tryScope = async (label: string, sql: string, args: any[]) => { const r = await sqlite.execute({ sql, args }); const row = r.rows[0] as any; return row && Number(row.n) >= 4 ? { scope: label, avg: Math.round(Number(row.avg)), n: Number(row.n) } : null; };\n if (o.metro) market = await tryScope(`м. ${o.metro}${o.rooms ? \", \" + (o.rooms >= 4 ? \"4+\" : o.rooms) + \"-к\" : \"\"}`, \"SELECT AVG(cost_m2) avg, COUNT(*) n FROM objects WHERE hidden=0 AND section_id=1 AND cost_m2>0 AND metro=? AND (rooms=? OR (?>=4 AND rooms>=4)) AND id!=?\", [o.metro, o.rooms, o.rooms, id]);\n if (!market && o.metro) market = await tryScope(`м. ${o.metro}`, \"SELECT AVG(cost_m2) avg, COUNT(*) n FROM objects WHERE hidden=0 AND section_id=1 AND cost_m2>0 AND metro=? AND id!=?\", [o.metro, id]);\n if (!market && o.district) market = await tryScope(o.district, \"SELECT AVG(cost_m2) avg, COUNT(*) n FROM objects WHERE hidden=0 AND section_id=1 AND cost_m2>0 AND district=? AND id!=?\", [o.district, id]);\n }\n let comps: any[] = [];\n if (o.section_id === 1 && o.metro) {\n const cr = await sqlite.execute({ sql: \"SELECT id, cost, sq, cost_m2, address, status, rooms, floor, floors FROM objects WHERE hidden=0 AND dup_of IS NULL AND section_id=1 AND metro=? AND (rooms=? OR (?>=4 AND rooms>=4)) AND id!=? ORDER BY ABS(COALESCE(sq,0)-?) LIMIT 5\", args: [o.metro, o.rooms, o.rooms, id, o.sq || 0] });\n comps = cr.rows;\n }\n return c.json({\n ...o,\n market, comps,\n images: parseJson(o.images, []),\n phones: hide ? [] : parseJson(o.phones, []),\n hidePhone: hide,\n flags: { ...parseJson(o.flags, {}), crossListed: sib.rows.length },\n activity: (act.rows as any[]).map((a) => ({ ...a, meta: parseJson(a.meta, null) })),\n siblings: sib.rows,\n });\n});\n\n// ---------- действия ----------\nasync function groupIds(id: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT id FROM objects WHERE id=? OR dup_of=? OR (dup_of IS NOT NULL AND dup_of=(SELECT dup_of FROM objects WHERE id=?)) OR id=(SELECT dup_of FROM objects WHERE id=?)\", args: [id, id, id, id] });\n return (r.rows as any[]).map((x) => Number(x.id));\n}\n\napp.post(\"/api/objects/:id/status\", async (c) => {\n const u = c.get(\"user\");\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json().catch(() => ({}));\n const status = String(body.status || \"\");\n if (!(status in STATUSES)) return c.json({ error: \"bad status\" }, 400);\n const ids = await groupIds(id);\n if (!ids.length) return c.json({ error: \"not found\" }, 404);\n const now = nowIso();\n const recallAt = (status === \"recall\" || status === \"meeting\") && body.recall_at ? String(body.recall_at) : null;\n const cur = await sqlite.execute({ sql: \"SELECT assignee_id, assignee_name, status FROM objects WHERE id=?\", args: [id] });\n const row = cur.rows[0] as any;\n // Смена статуса закрепляет объект за тем, кто её сделал, если объект ещё ничей\n const assignId = row.assignee_id ?? (status === \"new\" ? null : u.id);\n const assignName = row.assignee_id ? row.assignee_name : (status === \"new\" ? null : u.name);\n const stmts: any[] = [{\n sql: `UPDATE objects SET status=?, status_at=?, status_by=?, recall_at=?, recall_notified=0, assignee_id=?, assignee_name=? WHERE id IN (${ids.map(() => \"?\").join(\",\")})`,\n args: [status, now, u.name, recallAt, assignId, assignName, ...ids],\n }];\n const label = STATUSES[status].label + (recallAt ? \" · \" + new Date(recallAt).toLocaleString(\"ru-RU\", { timeZone: \"Europe/Moscow\", day: \"2-digit\", month: \"2-digit\", hour: \"2-digit\", minute: \"2-digit\" }) : \"\");\n stmts.push({ sql: \"INSERT INTO activity(object_id, kind, broker_id, broker_name, text, meta, created_at) VALUES(?,?,?,?,?,?,?)\", args: [id, \"status\", u.id, u.name, label, JSON.stringify({ from: row.status, to: status, recall_at: recallAt }), now] });\n const comment = String(body.comment || \"\").trim();\n if (comment) stmts.push({ sql: \"INSERT INTO activity(object_id, kind, broker_id, broker_name, text, created_at) VALUES(?,?,?,?,?,?)\", args: [id, \"comment\", u.id, u.name, comment, now] });\n await sqlite.batch(stmts);\n return c.json({ ok: true, status, assignee_id: assignId, assignee_name: assignName });\n});\n\napp.post(\"/api/objects/:id/assign\", async (c) => {\n const u = c.get(\"user\");\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json().catch(() => ({}));\n const ids = await groupIds(id);\n if (!ids.length) return c.json({ error: \"not found\" }, 404);\n const now = nowIso();\n let toId: number | null, toName: string | null;\n if (body.release) { toId = null; toName = null; }\n else if (body.broker_id != null && (u.role === \"boss\" || Number((await sqlite.execute({ sql: \"SELECT assignee_id FROM objects WHERE id=?\", args: [id] })).rows[0]?.assignee_id) === u.id)) {\n const b = (await listBrokers()).find((x) => x.id === Number(body.broker_id));\n if (!b) return c.json({ error: \"no broker\" }, 400);\n toId = b.id; toName = b.name;\n } else { toId = u.id; toName = u.name; }\n const cur = await sqlite.execute({ sql: \"SELECT assignee_id, assignee_name, status FROM objects WHERE id=?\", args: [id] });\n const row = cur.rows[0] as any;\n if (!body.release && row.assignee_id && row.assignee_id !== toId && u.role !== \"boss\") return c.json({ error: `Уже в работе: ${row.assignee_name}` }, 409);\n const newStatus = body.release ? (row.status === \"work\" ? \"new\" : row.status) : (row.status === \"new\" ? \"work\" : row.status);\n await sqlite.batch([\n { sql: `UPDATE objects SET assignee_id=?, assignee_name=?, status=?, status_at=?, status_by=? WHERE id IN (${ids.map(() => \"?\").join(\",\")})`, args: [toId, toName, newStatus, now, u.name, ...ids] },\n { sql: \"INSERT INTO activity(object_id, kind, broker_id, broker_name, text, created_at) VALUES(?,?,?,?,?,?)\", args: [id, \"assign\", u.id, u.name, body.release ? \"Снял с себя\" : toId === u.id ? \"Взял в работу\" : `Передал: ${toName}`, now] },\n ]);\n if (toId && toId !== u.id) { const o = (await sqlite.execute({ sql: \"SELECT cost, address, title FROM objects WHERE id=?\", args: [id] })).rows[0] as any; notifyBroker(toId, { title: `${u.name} передал тебе объект`, body: `${(Number(o.cost) / 1e6).toFixed(1).replace(\".0\", \"\")} млн · ${o.title || o.address}`, url: `/?o=${id}`, tag: \"assign-\" + id }).catch(() => {}); }\n return c.json({ ok: true, assignee_id: toId, assignee_name: toName, status: newStatus });\n});\n\n// Запрос номера: просим Inpars перечитать объявление; телефон придёт с ближайшим сбором\napp.post(\"/api/objects/:id/phone\", async (c) => {\n const u = c.get(\"user\");\n const id = Number(c.req.param(\"id\"));\n const r = await sqlite.execute({ sql: \"SELECT url, source, phone_req_at, phones FROM objects WHERE id=?\", args: [id] });\n if (!r.rows.length) return c.json({ error: \"not found\" }, 404);\n const o = r.rows[0] as any;\n if (!/avito\\.ru|cian\\.ru|youla\\.io|domclick\\.ru/.test(String(o.url))) return c.json({ error: \"Для этой площадки Inpars не делает повторный разбор\" }, 400);\n if (o.phone_req_at && Date.now() - new Date(String(o.phone_req_at)).getTime() < 24 * 3600000) return c.json({ ok: true, status: String(o.phone_req_status || \"inprogress\"), at: o.phone_req_at, repeat: true });\n try {\n const j = await inparsTask([String(o.url)], Deno.env.get(\"INPARS_TOKEN\") || \"\");\n const t = (j.data || [])[0] || {};\n const now = nowIso();\n await sqlite.batch([\n { sql: \"UPDATE objects SET phone_req_at=?, phone_req_status=? WHERE id=?\", args: [now, String(t.status || \"created\"), id] },\n { sql: \"INSERT INTO activity(object_id, kind, broker_id, broker_name, text, created_at) VALUES(?,?,?,?,?,?)\", args: [id, \"system\", u.id, u.name, `Запрошен телефон у Inpars (${u.name})`, now] },\n ]);\n return c.json({ ok: true, status: String(t.status || \"created\"), message: t.message, at: now, remaining: j.meta?.updateRemaining, limit: j.meta?.updateLimit });\n } catch (e) { return c.json({ error: String((e as Error).message) }, 502); }\n});\n\napp.post(\"/api/objects/:id/comment\", async (c) => {\n const u = c.get(\"user\");\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json().catch(() => ({}));\n const text = String(body.text || \"\").trim().slice(0, 2000);\n if (!text) return c.json({ error: \"empty\" }, 400);\n const now = nowIso();\n await sqlite.execute({ sql: \"INSERT INTO activity(object_id, kind, broker_id, broker_name, text, created_at) VALUES(?,?,?,?,?,?)\", args: [id, \"comment\", u.id, u.name, text, now] });\n return c.json({ ok: true });\n});\n\n// Пульс для интерфейса: есть ли новое с момента since (объекты или действия команды)\nlet lazySyncing = false;\n// Ленивый сбор: пока кто-то из команды держит приложение открытым, пульс раз в 30 с\n// сам запускает сбор, если прошлому больше 55 секунд. Крон — страховка, когда никто не смотрит.\nasync function lazySync() {\n if (lazySyncing) return;\n const r = await sqlite.execute(\"SELECT started_at, finished_at FROM runs ORDER BY id DESC LIMIT 1\");\n const last = r.rows[0] as any;\n if (last) {\n const startedAgo = Date.now() - new Date(String(last.started_at)).getTime();\n if (!last.finished_at && startedAgo < 90_000) return; // другой запуск ещё идёт\n if (last.finished_at && startedAgo < 55_000) return;\n }\n lazySyncing = true;\n try { await sync(\"pulse\"); } catch (e) { console.warn(\"lazy sync:\", e); } finally { lazySyncing = false; }\n}\n\napp.get(\"/api/pulse\", async (c) => {\n await lazySync();\n const since = String(c.req.query(\"since\") || \"\");\n if (!since) return c.json({ objects: 0, activity: 0, now: nowIso() });\n const [o, a, ch] = await Promise.all([\n sqlite.execute({ sql: \"SELECT COUNT(*) n FROM objects WHERE hidden=0 AND dup_of IS NULL AND first_seen > ?\", args: [since] }),\n sqlite.execute({ sql: \"SELECT COUNT(*) n FROM activity WHERE created_at > ?\", args: [since] }),\n sqlite.execute({ sql: \"SELECT COUNT(*) n FROM objects WHERE status_at > ? OR cost_changed_at > ?\", args: [since, since] }),\n ]);\n return c.json({ objects: Number((o.rows[0] as any).n), activity: Number((a.rows[0] as any).n), changed: Number((ch.rows[0] as any).n), now: nowIso() });\n});\n\n// Зоны на карте — сохранённые полигоны, общие для команды\napp.get(\"/api/zones\", async (c) => {\n const r = await sqlite.execute(\"SELECT id, name, points, color, created_by, created_by_name FROM zones ORDER BY name\");\n return c.json({ items: (r.rows as any[]).map((z) => ({ ...z, points: parseJson(z.points, []) })) });\n});\napp.post(\"/api/zones\", async (c) => {\n const u = c.get(\"user\");\n const b = await c.req.json().catch(() => ({}));\n const pts = Array.isArray(b.points) ? b.points.filter((p: any) => Array.isArray(p) && p.length === 2 && isFinite(p[0]) && isFinite(p[1])).map((p: any) => [Number(p[0]), Number(p[1])]) : [];\n const name = String(b.name || \"\").trim().slice(0, 60);\n if (pts.length < 3 || !name) return c.json({ error: \"Нужно имя и минимум 3 точки\" }, 400);\n const r = await sqlite.execute({ sql: \"INSERT INTO zones(name, points, color, created_by, created_by_name, created_at) VALUES(?,?,?,?,?,?)\", args: [name, JSON.stringify(pts), String(b.color || \"#5b5bd6\"), u.id, u.name, nowIso()] });\n return c.json({ id: Number(r.lastInsertRowid), name, points: pts, color: String(b.color || \"#5b5bd6\"), created_by: u.id, created_by_name: u.name });\n});\napp.delete(\"/api/zones/:id\", async (c) => {\n const u = c.get(\"user\");\n const id = Number(c.req.param(\"id\"));\n const z = await sqlite.execute({ sql: \"SELECT created_by FROM zones WHERE id=?\", args: [id] });\n if (!z.rows.length) return c.json({ error: \"not found\" }, 404);\n if (u.role !== \"boss\" && Number((z.rows[0] as any).created_by) !== u.id) return c.json({ error: \"Зону может удалить автор или руководитель\" }, 403);\n await sqlite.execute({ sql: \"DELETE FROM zones WHERE id=?\", args: [id] });\n return c.json({ ok: true });\n});\n\n// Push-уведомления\napp.get(\"/api/push\", async (c) => { const u = c.get(\"user\"); return c.json({ key: vapidPublic(), subs: await subsFor(u.id) }); });\napp.post(\"/api/push\", async (c) => {\n const u = c.get(\"user\");\n const b = await c.req.json().catch(() => ({}));\n if (!b.sub || !b.sub.endpoint) return c.json({ error: \"no subscription\" }, 400);\n await saveSub(u.id, u.name, b.sub, (b.zones || []).map(Number), !!b.all_new);\n return c.json({ ok: true });\n});\napp.delete(\"/api/push\", async (c) => { const b = await c.req.json().catch(() => ({})); if (b.endpoint) await dropSub(String(b.endpoint)); return c.json({ ok: true }); });\napp.post(\"/api/push/test\", async (c) => { const u = c.get(\"user\"); const n = await notifyBroker(u.id, { title: \"Уведомления включены\", body: \"Так будут приходить новые собственники и напоминания\", url: \"/\" }); return c.json({ sent: n }); });\n\n// Удалить свой комментарий (руководитель — любой)\napp.delete(\"/api/activity/:id\", async (c) => {\n const u = c.get(\"user\");\n const id = Number(c.req.param(\"id\"));\n const r = await sqlite.execute({ sql: \"SELECT broker_id, kind FROM activity WHERE id=?\", args: [id] });\n if (!r.rows.length) return c.json({ error: \"not found\" }, 404);\n const a = r.rows[0] as any;\n if (a.kind !== \"comment\") return c.json({ error: \"Удалять можно только комментарии\" }, 400);\n if (u.role !== \"boss\" && Number(a.broker_id) !== u.id) return c.json({ error: \"Это не твой комментарий\" }, 403);\n await sqlite.execute({ sql: \"DELETE FROM activity WHERE id=?\", args: [id] });\n return c.json({ ok: true });\n});\n\n// Лента команды: последние действия по всем объектам\napp.get(\"/api/feed\", async (c) => {\n const r = await sqlite.execute(`SELECT a.id, a.object_id, a.kind, a.broker_name, a.text, a.created_at, o.title, o.address, o.cost, o.status\n FROM activity a JOIN objects o ON o.id=a.object_id WHERE a.kind != 'system' ORDER BY a.id DESC LIMIT 60`);\n return c.json({ items: r.rows });\n});\n\n// ---------- руководитель ----------\nconst boss = async (c: any, next: any) => { if (c.get(\"user\").role !== \"boss\") return c.json({ error: \"forbidden\" }, 403); await next(); };\n\napp.post(\"/api/sync\", boss, async (c) => {\n await syncBrokers().catch(() => {});\n const body = await c.req.json().catch(() => ({}));\n const now = Math.floor(Date.now() / 1000);\n const r = await sync(\"manual\", body.days ? { sinceOverride: now - Number(body.days) * 86400, untilOverride: body.until_days ? now - Number(body.until_days) * 86400 : undefined } : {});\n return c.json(r);\n});\n\napp.get(\"/api/runs\", boss, async (c) => {\n const r = await sqlite.execute(\"SELECT * FROM runs WHERE fetched>0 OR error IS NOT NULL ORDER BY id DESC LIMIT 40\");\n return c.json({ items: r.rows });\n});\n\napp.get(\"/api/settings\", boss, async (c) => c.json({ settings: await getSettings(), defaults: DEFAULT_SETTINGS }));\napp.post(\"/api/settings\", boss, async (c) => {\n const body = await c.req.json().catch(() => ({}));\n await setSettings(body);\n return c.json({ settings: await getSettings() });\n});\n\napp.get(\"/api/inpars\", boss, async (c) => {\n try { return c.json(await inparsSubscription(Deno.env.get(\"INPARS_TOKEN\") || \"\")); } catch (e) { return c.json({ error: String((e as Error).message) }, 502); }\n});\n\napp.get(\"/api/export.csv\", boss, async (c) => {\n const r = await sqlite.execute(`SELECT id, source, url, category, rooms, sq, sq_land, floor, floors, cost, cost_m2, address, district, metro, phones, status, assignee_name, status_at, recall_at, source_created, first_seen, cost_prev, build_year FROM objects WHERE hidden=0 AND dup_of IS NULL ORDER BY COALESCE(source_created, created, first_seen) DESC`);\n const cols = [\"id\", \"source\", \"url\", \"category\", \"rooms\", \"sq\", \"sq_land\", \"floor\", \"floors\", \"cost\", \"cost_m2\", \"address\", \"district\", \"metro\", \"phones\", \"status\", \"assignee_name\", \"status_at\", \"recall_at\", \"source_created\", \"first_seen\", \"cost_prev\", \"build_year\"];\n const esc = (v: any) => { const s = v == null ? \"\" : String(v); return /[\";\\n]/.test(s) ? '\"' + s.replace(/\"/g, '\"\"') + '\"' : s; };\n const lines = [cols.join(\";\"), ...(r.rows as any[]).map((row) => cols.map((k) => esc(k === \"phones\" ? parseJson(row[k], []).join(\" \") : row[k])).join(\";\"))];\n return new Response(\"\\ufeff\" + lines.join(\"\\n\"), { headers: { \"Content-Type\": \"text/csv; charset=utf-8\", \"Content-Disposition\": `attachment; filename=\"sobstvenniki_${new Date().toISOString().slice(0, 10)}.csv\"` } });\n});\n\napp.get(\"/api/team\", boss, async (c) => {\n const r = await sqlite.execute(`SELECT assignee_id, assignee_name, status, COUNT(*) n FROM objects WHERE hidden=0 AND assignee_id IS NOT NULL GROUP BY assignee_id, status`);\n const week = new Date(Date.now() - 7 * 86400000).toISOString();\n const a = await sqlite.execute({ sql: `SELECT broker_id, broker_name, kind, COUNT(*) n FROM activity WHERE created_at>=? AND broker_id IS NOT NULL GROUP BY broker_id, kind`, args: [week] });\n return c.json({ byStatus: r.rows, weekActivity: a.rows });\n});\n\n// Отладка (только руководитель): выполнить SQL в базе парсера\napp.post(\"/api/debug/sql\", boss, async (c) => {\n const body = await c.req.json().catch(() => ({}));\n try {\n const r = body.batch ? await sqlite.batch(body.batch) : await sqlite.execute({ sql: String(body.sql), args: body.args || [] });\n return c.json(Array.isArray(r) ? r.map((x: any) => ({ rows: x.rows, n: x.rowsAffected })) : { rows: r.rows, n: r.rowsAffected });\n } catch (e) { return c.json({ error: String((e as any)?.message || e), stack: String((e as any)?.stack || \"\").slice(0, 500) }, 500); }\n});\n\napp.notFound((c) => c.text(\"Not found\", 404));\n\nexport default app.fetch;\n","deleted",false,"label",[47,24],"backend","616b52aa-94d7-4f07-aa0a-4ebcab25369a",["D",1789373200178],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Собственники: сбор Inpars + рабочее место брокеров","imageUrl","userId","caa5b6a0-dd4e-4cd6-a997-9389a6a43948","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019eff71-5749-76b5-abdd-e25a47b3deca","tursoName","616b52aa94d74f07aa0a4ebcab25369a","tursoHostname","616b52aa94d74f07aa0a4ebcab25369a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789547455787],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_108":104},"org",{"_9":10,"_101":102,"_103":104,"_58":59,"_105":106,"_107":44},"branch",{"_37":91,"_11":92,"_22":30,"_93":48,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":12,"_100":10},"isOwned",98,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Кирилл Тамбовцев","avatar","https://lh3.googleusercontent.com/a/ACg8ocKCNneTjcn307kcxhB_NS1R7_0SBhSKM-2hy73z0JvhXFipwkhs=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_84":-5,"_142":143,"_144":145,"_146":147,"_148":44,"_149":44,"_150":44,"_151":34,"_152":-5,"_153":-7,"_154":-7,"_155":65,"_156":44,"_157":44,"_158":-5,"_159":44,"_160":44,"_161":44,"_162":-5},"ENV",{"_113":114,"_115":116,"_117":92,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139,"_140":141},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]