[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_104":105,"_106":107},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","vonter_studio","name","NAPY-","path","main.ts","project",{"_22":46,"_11":12,"_33":47,"_48":-5,"_49":42,"_50":51,"_52":51,"_53":-5,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_13":45},"permalink","https://www.val.town/x/vonter_studio/NAPY-/code/main.ts","extension","id","29edd5f8-4b32-41f0-aa98-e79bc0a191e3","fileId","34bd8eb6-9d60-11f1-b263-1607ee4eb77e","parentId","branchId","51a7642d-5e04-4a4c-b469-7250039ca1f3","branchVersion",37,"latest",true,"createdAt",["D",1789553788131],"version",36,"fileType","http","content","// NanoAI proxy — Val.town HTTP val (полный, исправленный + failover)\n// Env: CLOUDFLARE_API_TOKEN, CLOUDFLARE_ACCOUNT_ID, OPENROUTER_KEY_1...\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\n// Админ-ключ прямо здесь, в коде — никаких Environment Variables/Secrets\n// в Val Town для него больше не нужно. Просто впишите сюда любой свой пароль.\nconst ADMIN_API_KEY = \"npk_929292282ieue829w9wieiieiie\";\n\nconst requestLog = new Map();\nconst LIMIT_PER_HOUR = 40;\n\nfunction isRateLimited(deviceId: string): boolean {\n const now = Date.now();\n const hourAgo = now - 60 * 60 * 1000;\n const timestamps = (requestLog.get(deviceId) || []).filter((t) => t > hourAgo);\n timestamps.push(now);\n requestLog.set(deviceId, timestamps);\n return timestamps.length > LIMIT_PER_HOUR;\n}\n\nfunction readEnv(name: string): string {\n const v = Deno.env.get(name);\n return (v && v.trim()) || \"\";\n}\n\nfunction shuffleArray(arr: T[]): T[] {\n const a = arr.slice();\n for (let i = a.length - 1; i > 0; i--) {\n const j = Math.floor(Math.random() * (i + 1));\n [a[i], a[j]] = [a[j], a[i]];\n }\n return a;\n}\n\nasync function pickOpenRouterKey(): Promise {\n const envKeys = [\n \"OPENROUTER_KEY_1\", \"OPENROUTER_KEY_2\", \"OPENROUTER_KEY_3\",\n \"OPENROUTER_KEY_4\", \"OPENROUTER_KEY_5\",\n \"OPENROUTERKEY1\", \"OPENROUTERKEY2\", \"OPENROUTERKEY3\",\n \"OPENROUTERKEY4\", \"OPENROUTERKEY5\",\n ].map(readEnv).filter((v) => v.length > 0);\n const dbKeys = (await listDbKeys(\"openrouter\")).map((k) => k.token);\n const keys = envKeys.concat(dbKeys);\n if (keys.length === 0) {\n const visible = Object.keys(Deno.env.toObject()).sort().join(\", \");\n throw new Error(\"Нет OPENROUTER ключей. Вижу env: \" + (visible || \"(пусто)\"));\n }\n return keys[Math.floor(Math.random() * keys.length)];\n}\n\nasync function pickKeyByAliases(\n providerLabel: string,\n dbProvider: KeyProvider,\n aliasGroups: string[][],\n): Promise {\n const flat: string[] = [];\n for (const group of aliasGroups) {\n for (const name of group) flat.push(name);\n }\n const envKeys = flat.map(readEnv).filter((v) => v.length > 0);\n const dbKeys = (await listDbKeys(dbProvider)).map((k) => k.token);\n const keys = envKeys.concat(dbKeys);\n if (keys.length === 0) {\n const visible = Object.keys(Deno.env.toObject()).sort().join(\", \");\n throw new Error(\n \"Нет ключей \" + providerLabel + \". Проверенные имена: \" + flat.join(\", \") +\n \". Вижу env: \" + (visible || \"(пусто)\")\n );\n }\n return keys[Math.floor(Math.random() * keys.length)];\n}\n\nfunction pickGroqKey(): Promise {\n return pickKeyByAliases(\"GROQ\", \"groq\", [\n [\"GROQ_KEY_1\", \"GROQ_KEY_2\", \"GROQ_KEY_3\", \"GROQ_KEY_4\", \"GROQ_KEY_5\"],\n [\"GROQ_API_KEY_1\", \"GROQ_API_KEY_2\", \"GROQ_API_KEY_3\", \"GROQ_API_KEY_4\", \"GROQ_API_KEY_5\"],\n [\"GROQKEY1\", \"GROQKEY2\", \"GROQKEY3\", \"GROQKEY4\", \"GROQKEY5\"],\n [\"GROQ_KEY\", \"GROQ_API_KEY\", \"GROQAPIKEY\"],\n ]);\n}\n\nfunction pickGeminiKey(): Promise {\n return pickKeyByAliases(\"GEMINI\", \"gemini\", [\n [\"GEMINI_KEY_1\", \"GEMINI_KEY_2\", \"GEMINI_KEY_3\", \"GEMINI_KEY_4\", \"GEMINI_KEY_5\"],\n [\"GEMINI_API_KEY_1\", \"GEMINI_API_KEY_2\", \"GEMINI_API_KEY_3\", \"GEMINI_API_KEY_4\", \"GEMINI_API_KEY_5\"],\n [\"GOOGLE_AI_KEY_1\", \"GOOGLE_AI_KEY_2\", \"GOOGLE_AI_KEY_3\", \"GOOGLE_AI_KEY_4\", \"GOOGLE_AI_KEY_5\"],\n [\"GEMINIKEY1\", \"GEMINIKEY2\", \"GEMINIKEY3\", \"GEMINIKEY4\", \"GEMINIKEY5\"],\n [\"GEMINI_KEY\", \"GEMINI_API_KEY\", \"GOOGLE_AI_KEY\", \"GOOGLE_API_KEY\", \"GEMINIAPIKEY\"],\n ]);\n}\n\nasync function getAllCfSlots(): Promise<{ token: string; account: string; slot: string }[]> {\n const pairedSlots: { token: string; account: string; slot: string }[] = [];\n for (let i = 1; i <= 5; i++) {\n const t = readEnv(\"CLOUDFLARE_API_TOKEN_\" + i);\n const a = readEnv(\"CLOUDFLARE_ACCOUNT_ID_\" + i);\n if (t && a) pairedSlots.push({ token: t, account: a, slot: \"pair_\" + i });\n }\n\n const singleTokenAliases = [\"CLOUDFLARE_API_TOKEN\", \"CF_API_TOKEN\", \"CLOUDFLARE_TOKEN\", \"CLOUDFLAREAPITOKEN\"];\n const singleAccountAliases = [\"CLOUDFLARE_ACCOUNT_ID\", \"CF_ACCOUNT_ID\", \"CLOUDFLARE_ACCOUNT\", \"CLOUDFLAREACCOUNTID\"];\n const singleToken = singleTokenAliases.map(readEnv).find((v) => v.length > 0) || \"\";\n const singleAccount = singleAccountAliases.map(readEnv).find((v) => v.length > 0) || \"\";\n if (singleToken && singleAccount) {\n pairedSlots.push({ token: singleToken, account: singleAccount, slot: \"single\" });\n }\n\n const dbSlots = (await listDbKeys(\"cloudflare\"))\n .filter((k) => !!k.accountId)\n .map((k) => ({ token: k.token, account: k.accountId as string, slot: \"db_\" + k.id.slice(0, 8) }));\n pairedSlots.push(...dbSlots);\n\n if (pairedSlots.length === 0) {\n const visible = Object.keys(Deno.env.toObject()).sort().join(\", \");\n throw new Error(\n \"Нет ни одной ПОЛНОЙ пары CF token+account (проверь, что оба значения заданы под одинаковым суффиксом _N, или добавь через /keys). \" +\n \"Вижу env: \" + (visible || \"(пусто)\")\n );\n }\n\n return pairedSlots;\n}\n\nasync function cfCreds(): Promise<{ token: string; account: string; slot: string }> {\n const slots = await getAllCfSlots();\n return slots[Math.floor(Math.random() * slots.length)];\n}\n\nconst FREE_FALLBACK_CHAIN = [\n \"liquid/lfm-2.5-2.6b:free\",\n \"nvidia/nemotron-3.5-lightning:free\",\n \"thinkingmachines/inkling-small:free\",\n \"dots-studio/dots-3-note-preview:free\",\n \"poolside/laguna-xs-2.1:free\",\n];\n\nfunction isModelUnavailableForFree(status: number, bodyText: string): boolean {\n if (status !== 404) return false;\n const t = bodyText.toLowerCase();\n return t.indexOf(\"unavailable for free\") >= 0 || t.indexOf(\"use this slug instead\") >= 0;\n}\n\nasync function callOpenRouter(\n apiKey: string,\n model: string,\n payload: Record,\n): Promise<{ status: number; text: string }> {\n const resp = await fetch(\"https://openrouter.ai/api/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: \"Bearer \" + apiKey,\n \"HTTP-Referer\": \"https://t.me/NanoAIreborn_bot\",\n \"X-Title\": \"NanoAI\",\n },\n body: JSON.stringify({\n model,\n messages: payload.messages,\n max_tokens: payload.max_tokens ?? 2000,\n temperature: payload.temperature ?? 0.7,\n }),\n });\n const text = await resp.text();\n return { status: resp.status, text };\n}\n\nasync function callOpenAICompatible(\n url: string,\n apiKey: string,\n model: string,\n payload: Record,\n): Promise<{ status: number; text: string }> {\n const resp = await fetch(url, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: \"Bearer \" + apiKey,\n },\n body: JSON.stringify({\n model,\n messages: payload.messages,\n max_tokens: payload.max_tokens ?? 2000,\n temperature: payload.temperature ?? 0.7,\n }),\n });\n const text = await resp.text();\n return { status: resp.status, text };\n}\n\nfunction jsonResp(obj: unknown, status = 200) {\n return new Response(JSON.stringify(obj), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n}\n\nfunction normalizeModel(model: string): string {\n const m = (model || \"\").trim();\n if (!m) return \"@cf/zai-org/glm-4.7-flash\";\n if (m.startsWith(\"@cf/\")) return m;\n return \"@cf/\" + m;\n}\n\nfunction cfRunUrl(account: string, modelPath: string): string {\n return \"https://api.cloudflare.com/client/v4/accounts/\" + account + \"/ai/run/\" + modelPath;\n}\n\nfunction cfChatUrl(account: string): string {\n return \"https://api.cloudflare.com/client/v4/accounts/\" + account + \"/ai/v1/chat/completions\";\n}\n\nfunction decodeB64Image(data: string): Uint8Array {\n const b64 = data.replace(/^data:image\\/\\w+;base64,/, \"\");\n const bin = atob(b64);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\nasync function ensureNapySchema() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS napy_models (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n provider TEXT NOT NULL,\n endpoint_url TEXT NOT NULL,\n request_limit_per_minute INTEGER,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS napy_state (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS napy_keys (\n id TEXT PRIMARY KEY,\n provider TEXT NOT NULL,\n token TEXT NOT NULL,\n account_id TEXT,\n label TEXT,\n created_at TEXT NOT NULL\n )\n `);\n\n // Самовосстановление: если napy_keys уже существовала в старой версии\n // (без account_id/label), CREATE TABLE IF NOT EXISTS её не тронет —\n // добираем недостающие колонки вручную, иначе INSERT падает с\n // \"no such column\" и клиент получает голый 500.\n const info = await sqlite.execute(`PRAGMA table_info(napy_keys)`);\n const existingCols = new Set(info.rows.map((r) => String(r[1])));\n const requiredCols: [string, string][] = [\n [\"provider\", \"TEXT NOT NULL DEFAULT ''\"],\n [\"token\", \"TEXT NOT NULL DEFAULT ''\"],\n [\"account_id\", \"TEXT\"],\n [\"label\", \"TEXT\"],\n [\"created_at\", \"TEXT NOT NULL DEFAULT ''\"],\n ];\n for (const [col, decl] of requiredCols) {\n if (!existingCols.has(col)) {\n await sqlite.execute(`ALTER TABLE napy_keys ADD COLUMN ${col} ${decl}`);\n }\n }\n}\n\nfunction requireAdminKey(req: Request): boolean {\n // Единственный источник правды — константа ADMIN_API_KEY вверху файла.\n // Ничего больше нигде вручную не сверяем и не дублируем.\n const url = new URL(req.url);\n const gotKey = req.headers.get(\"X-Admin-Api-Key\") || url.searchParams.get(\"key\");\n return gotKey === ADMIN_API_KEY;\n}\n\nfunction rowToModel(r: unknown[]) {\n return {\n id: r[0],\n name: r[1],\n provider: r[2],\n endpointUrl: r[3],\n requestLimitPerMinute: r[4] ?? null,\n };\n}\n\nasync function listModels() {\n const rows = await sqlite.execute(\n `SELECT id, name, provider, endpoint_url, request_limit_per_minute\n FROM napy_models ORDER BY updated_at DESC`\n );\n return rows.rows.map(rowToModel);\n}\n\nasync function createModel(\n name: string, provider: string, endpointUrl: string, requestLimitPerMinute: number | null,\n) {\n const id = crypto.randomUUID();\n const now = new Date().toISOString();\n await sqlite.execute(\n `INSERT INTO napy_models\n (id, name, provider, endpoint_url, request_limit_per_minute, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n [id, name, provider, endpointUrl, requestLimitPerMinute, now, now]\n );\n return { id, name, provider, endpointUrl, requestLimitPerMinute };\n}\n\nasync function updateModel(\n id: string, name: string, provider: string, endpointUrl: string, requestLimitPerMinute: number | null,\n) {\n const now = new Date().toISOString();\n const res = await sqlite.execute(\n `UPDATE napy_models\n SET name = ?, provider = ?, endpoint_url = ?, request_limit_per_minute = ?, updated_at = ?\n WHERE id = ?`,\n [name, provider, endpointUrl, requestLimitPerMinute, now, id]\n );\n if (res.rowsAffected === 0) return null;\n return { id, name, provider, endpointUrl, requestLimitPerMinute };\n}\n\nasync function deleteModel(id: string): Promise {\n const res = await sqlite.execute(`DELETE FROM napy_models WHERE id = ?`, [id]);\n return res.rowsAffected > 0;\n}\n\nconst VALID_KEY_PROVIDERS = [\"cloudflare\", \"openrouter\", \"groq\", \"gemini\"] as const;\ntype KeyProvider = (typeof VALID_KEY_PROVIDERS)[number];\n\ninterface DbKeyRow {\n id: string;\n provider: KeyProvider;\n token: string;\n accountId: string | null;\n label: string | null;\n createdAt: string;\n}\n\nfunction maskSecret(s: string): string {\n if (s.length <= 8) return \"…\";\n return s.slice(0, 4) + \"…\" + s.slice(-4);\n}\n\nasync function listDbKeys(provider?: string): Promise {\n await ensureNapySchema();\n const rows = provider\n ? await sqlite.execute(\n `SELECT id, provider, token, account_id, label, created_at FROM napy_keys WHERE provider = ? ORDER BY created_at DESC`,\n [provider]\n )\n : await sqlite.execute(\n `SELECT id, provider, token, account_id, label, created_at FROM napy_keys ORDER BY provider, created_at DESC`\n );\n return rows.rows.map((r) => ({\n id: r[0] as string,\n provider: r[1] as KeyProvider,\n token: r[2] as string,\n accountId: (r[3] as string) ?? null,\n label: (r[4] as string) ?? null,\n createdAt: r[5] as string,\n }));\n}\n\nasync function addDbKey(\n provider: string,\n token: string,\n accountId: string | null,\n label: string | null,\n): Promise {\n if (!VALID_KEY_PROVIDERS.includes(provider as KeyProvider)) {\n return { error: \"поле 'provider' должно быть одним из: \" + VALID_KEY_PROVIDERS.join(\", \") };\n }\n if (!token || !token.trim()) {\n }\n if (provider === \"cloudflare\" && (!accountId || !accountId.trim())) {\n return { error: \"для provider='cloudflare' поле 'accountId' обязательно (нужна полная пара token+account)\" };\n }\n await ensureNapySchema();\n const id = crypto.randomUUID();\n const now = new Date().toISOString();\n await sqlite.execute(\n `INSERT INTO napy_keys (id, provider, token, account_id, label, created_at) VALUES (?, ?, ?, ?, ?, ?)`,\n [id, provider, token.trim(), accountId?.trim() || null, label?.trim() || null, now]\n );\n return { id, provider: provider as KeyProvider, token: token.trim(), accountId: accountId?.trim() || null, label: label?.trim() || null, createdAt: now };\n}\n\nasync function deleteDbKey(id: string): Promise {\n await ensureNapySchema();\n const res = await sqlite.execute(`DELETE FROM napy_keys WHERE id = ?`, [id]);\n return res.rowsAffected > 0;\n}\n\nasync function handleKeysRoute(req: Request, url: URL): Promise {\n if (!requireAdminKey(req)) {\n const expectedKey = ADMIN_API_KEY;\n const gotKey = req.headers.get(\"X-Admin-Api-Key\") || url.searchParams.get(\"key\");\n const preview = (s: string) => (s.length <= 4 ? \"…\" : s.slice(0, 2) + \"…\" + s.slice(-2));\n return jsonResp({\n error: \"forbidden\",\n debug: {\n envVarSet: !!expectedKey,\n expectedLength: expectedKey.length,\n expectedPreview: expectedKey ? preview(expectedKey) : null,\n gotHeader: !!req.headers.get(\"X-Admin-Api-Key\"),\n gotQueryParam: !!url.searchParams.get(\"key\"),\n gotLength: gotKey ? gotKey.length : 0,\n gotPreview: gotKey ? preview(gotKey) : null,\n matches: !!expectedKey && gotKey === expectedKey,\n },\n }, 403);\n }\n\n const segments = url.pathname.split(\"/\").filter(Boolean);\n const last = segments[segments.length - 1];\n const secondLast = segments[segments.length - 2];\n\n if (last === \"keys\") {\n if (req.method === \"GET\") {\n const provider = url.searchParams.get(\"provider\") || undefined;\n if (provider && !VALID_KEY_PROVIDERS.includes(provider as KeyProvider)) {\n return jsonResp({ error: \"неизвестный provider, доступны: \" + VALID_KEY_PROVIDERS.join(\", \") }, 400);\n }\n const rows = await listDbKeys(provider);\n return jsonResp(\n rows.map((r) => ({\n id: r.id,\n provider: r.provider,\n tokenPreview: maskSecret(r.token),\n accountId: r.accountId,\n label: r.label,\n createdAt: r.createdAt,\n }))\n );\n }\n if (req.method === \"POST\") {\n const body = await req.json().catch(() => null) as Record | null;\n const provider = String(body?.provider || \"\");\n const token = String(body?.token || \"\");\n const accountId = body?.accountId != null ? String(body.accountId) : null;\n const label = body?.label != null ? String(body.label) : null;\n const result = await addDbKey(provider, token, accountId, label);\n if (\"error\" in result) return jsonResp(result, 400);\n return jsonResp(result, 201);\n }\n return jsonResp({ error: \"method not allowed\" }, 405);\n }\n\n if (secondLast === \"keys\") {\n if (req.method !== \"DELETE\") return jsonResp({ error: \"method not allowed\" }, 405);\n const ok = await deleteDbKey(decodeURIComponent(last));\n if (!ok) return jsonResp({ error: \"not found\" }, 404);\n return new Response(null, { status: 204 });\n }\n\n return jsonResp({ error: \"not found\" }, 404);\n}\n\ninterface ParsedUpsertBody {\n name: string; provider: string; endpointUrl: string; requestLimitPerMinute: number | null;\n}\n\nfunction parseUpsertBody(body: unknown): ParsedUpsertBody | { error: string } {\n const b = body as Record | null;\n if (typeof b?.name !== \"string\" || !b.name.trim()) {\n return { error: \"поле 'name' обязательно и не может быть пустым\" };\n }\n if (typeof b?.provider !== \"string\" || !b.provider.trim()) {\n return { error: \"поле 'provider' обязательно и не может быть пустым\" };\n }\n if (typeof b?.endpointUrl !== \"string\" || !b.endpointUrl.trim()) {\n return { error: \"поле 'endpointUrl' обязательно и не может быть пустым\" };\n }\n let limit: number | null = null;\n if (b.requestLimitPerMinute !== undefined && b.requestLimitPerMinute !== null) {\n if (typeof b.requestLimitPerMinute !== \"number\" || !Number.isInteger(b.requestLimitPerMinute)) {\n return { error: \"поле 'requestLimitPerMinute' должно быть целым числом или отсутствовать\" };\n }\n limit = b.requestLimitPerMinute;\n }\n return {\n name: b.name.trim(), provider: b.provider.trim(),\n endpointUrl: b.endpointUrl.trim(), requestLimitPerMinute: limit,\n };\n}\nasync function handleModelsRoute(req: Request, url: URL): Promise {\n await ensureNapySchema();\n if (!requireAdminKey(req)) return jsonResp({ error: \"forbidden\" }, 403);\n\n const segments = url.pathname.split(\"/\").filter(Boolean);\n const last = segments[segments.length - 1];\n const secondLast = segments[segments.length - 2];\n\n if (last === \"models\") {\n if (req.method === \"GET\") return jsonResp(await listModels());\n if (req.method === \"POST\") {\n const body = await req.json().catch(() => null);\n const parsed = parseUpsertBody(body);\n if (\"error\" in parsed) return jsonResp(parsed, 400);\n const created = await createModel(parsed.name, parsed.provider, parsed.endpointUrl, parsed.requestLimitPerMinute);\n return jsonResp(created, 201);\n }\n return jsonResp({ error: \"method not allowed\" }, 405);\n }\n\n if (secondLast === \"models\") {\n const id = decodeURIComponent(last);\n if (req.method === \"PUT\") {\n const body = await req.json().catch(() => null);\n const parsed = parseUpsertBody(body);\n if (\"error\" in parsed) return jsonResp(parsed, 400);\n const updated = await updateModel(id, parsed.name, parsed.provider, parsed.endpointUrl, parsed.requestLimitPerMinute);\n if (!updated) return jsonResp({ error: \"not found\" }, 404);\n return jsonResp(updated);\n }\n if (req.method === \"DELETE\") {\n const ok = await deleteModel(id);\n if (!ok) return jsonResp({ error: \"not found\" }, 404);\n return new Response(null, { status: 204 });\n }\n return jsonResp({ error: \"method not allowed\" }, 405);\n }\n\n return jsonResp({ error: \"not found\" }, 404);\n}\n\ninterface MaintenanceState { enabled: boolean; message: string; changedAt: string | null; }\n\nasync function getMaintenance(): Promise {\n await ensureNapySchema();\n const rows = await sqlite.execute(\n `SELECT key, value FROM napy_state WHERE key IN ('maintenance_enabled', 'maintenance_message', 'maintenance_changed_at')`\n );\n const map = new Map(rows.rows.map((r) => [r[0] as string, r[1] as string]));\n return {\n enabled: map.get(\"maintenance_enabled\") === \"true\",\n message: map.get(\"maintenance_message\") ?? \"Ведутся технические работы, попробуйте позже.\",\n changedAt: map.get(\"maintenance_changed_at\") ?? null,\n };\n}\n\nasync function setMaintenance(enabled: boolean, message?: string): Promise {\n const now = new Date().toISOString();\n const current = await getMaintenance();\n const finalMessage = message?.trim() ? message.trim() : current.message;\n const upsert = (key: string, value: string) =>\n sqlite.execute(\n `INSERT INTO napy_state (key, value) VALUES (?, ?)\n ON CONFLICT(key) DO UPDATE SET value = excluded.value`,\n [key, value]\n );\n await Promise.all([\n upsert(\"maintenance_enabled\", String(enabled)),\n upsert(\"maintenance_message\", finalMessage),\n upsert(\"maintenance_changed_at\", now),\n ]);\n return { enabled, message: finalMessage, changedAt: now };\n}\n\nasync function handleMaintenanceRoute(req: Request, url: URL): Promise {\n const segments = url.pathname.split(\"/\").filter(Boolean);\n const last = segments[segments.length - 1];\n const secondLast = segments[segments.length - 2];\n\n if (last === \"maintenance\" && req.method === \"GET\") {\n const state = await getMaintenance();\n return jsonResp({ maintenance: state.enabled, message: state.enabled ? state.message : null });\n }\n\n if (last === \"on\" && secondLast === \"maintenance\") {\n if (!requireAdminKey(req)) return jsonResp({ error: \"forbidden\" }, 403);\n if (req.method !== \"POST\") return jsonResp({ error: \"method not allowed\" }, 405);\n const body = await req.json().catch(() => null);\n const message = typeof (body as Record | null)?.message === \"string\"\n ? (body as Record).message : undefined;\n return jsonResp(await setMaintenance(true, message));\n }\n if (last === \"off\" && secondLast === \"maintenance\") {\n if (!requireAdminKey(req)) return jsonResp({ error: \"forbidden\" }, 403);\n if (req.method !== \"POST\") return jsonResp({ error: \"method not allowed\" }, 405);\n return jsonResp(await setMaintenance(false));\n }\n\n return jsonResp({ error: \"not found\" }, 404);\n}\n\nasync function runDiag(url: URL): Promise {\n try {\n const testSpecificModels = url.searchParams.get(\"models\") === \"1\";\n const allPairs = await getAllCfSlots();\n\n if (testSpecificModels) {\n const problemModels = [\n \"@cf/zai-org/glm-4.7-flash\",\n \"@cf/meta/llama-4-scout-17b-16e-instruct\",\n \"@cf/qwen/qwen3-30b-a3b-fp8\",\n ];\n const results: Record = {};\n for (const pair of allPairs) {\n const pairResult: Record = {};\n for (const model of problemModels) {\n const chatResp = await fetch(cfChatUrl(pair.account), {\n method: \"POST\",\n headers: { Authorization: \"Bearer \" + pair.token, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ model, messages: [{ role: \"user\", content: \"hi\" }], max_tokens: 20 }),\n });\n const chatText = await chatResp.text();\n\n const runResp = await fetch(cfRunUrl(pair.account, model), {\n method: \"POST\",\n headers: { Authorization: \"Bearer \" + pair.token, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ messages: [{ role: \"user\", content: \"hi\" }], max_tokens: 20 }),\n });\n const runText = await runResp.text();\n\n pairResult[model] = {\n viaChatCompletions: { status: chatResp.status, body: chatText.slice(0, 400) },\n viaAiRun: { status: runResp.status, body: runText.slice(0, 400) },\n };\n }\n results[pair.slot] = {\n accountPreview: pair.account.slice(0, 6) + \"…\" + pair.account.slice(-4),\n models: pairResult,\n };\n }\n return jsonResp({ perPairModelTests: results });\n }\n\n const creds = await cfCreds();\n const token = creds.token;\n const account = creds.account;\n\n const verify = await fetch(\n \"https://api.cloudflare.com/client/v4/user/tokens/verify\",\n { headers: { Authorization: \"Bearer \" + token } }\n );\n const verifyText = await verify.text();\n\n const accResp = await fetch(\n \"https://api.cloudflare.com/client/v4/accounts\",\n { headers: { Authorization: \"Bearer \" + token } }\n );\n const accText = await accResp.text();\n let ids: string[] = [];\n try {\n ids = (JSON.parse(accText).result || []).map((a: { id: string }) => a.id);\n } catch { /* */ }\n\n const testModel = \"@cf/meta/llama-3.1-8b-instruct\";\n const testUrl = cfRunUrl(account, testModel);\n const testResp = await fetch(testUrl, {\n method: \"POST\",\n headers: {\n Authorization: \"Bearer \" + token,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n messages: [{ role: \"user\", content: \"hi\" }],\n }),\n });\n const testText = await testResp.text();\n\n const fluxUrl = cfRunUrl(account, \"@cf/black-forest-labs/flux-1-schnell\");\n const fluxResp = await fetch(fluxUrl, {\n method: \"POST\",\n headers: {\n Authorization: \"Bearer \" + token,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ prompt: \"red circle\", steps: 4 }),\n });\n const fluxText = await fluxResp.text();\n\n const allSlotsCheck: Record = {};\n for (let i = 1; i <= 5; i++) {\n const t = readEnv(\"CLOUDFLARE_API_TOKEN_\" + i);\n const a = readEnv(\"CLOUDFLARE_ACCOUNT_ID_\" + i);\n if (!t && !a) continue;\n allSlotsCheck[\"pair_\" + i] = {\n hasToken: !!t,\n hasAccount: !!a,\n complete: !!(t && a),\n };\n }\n\n return jsonResp({\n chosenSlot: creds.slot,\n accountPreview: account.slice(0, 6) + \"…\" + account.slice(-4),\n accountLen: account.length,\n hex32: /^[a-f0-9]{32}$/i.test(account),\n tokenLen: token.length,\n verifyStatus: verify.status,\n verifyBody: verifyText.slice(0, 200),\n accountsForToken: ids.map((id) => id.slice(0, 6) + \"…\" + id.slice(-4)),\n envInTokenAccounts: ids.includes(account),\n chatTestStatus: testResp.status,\n chatTestBody: testText.slice(0, 300),\n fluxTestStatus: fluxResp.status,\n fluxTestBody: fluxText.slice(0, 300),\n testRunUrl: \"…/accounts/\" + account.slice(0, 6) + \"…/ai/run/\" + testModel,\n allConfiguredSlots: allSlotsCheck,\n hint: \"Добавь ?models=1 к /diag, чтобы протестировать именно GLM/Qwen/Llama-4-Scout на каждой паре ключей.\",\n });\n } catch (e) {\n return jsonResp({ error: String((e as Error).message || e) }, 500);\n }\n}\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname || \"/\";\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Headers\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS\",\n },\n });\n }\n\n if (path.indexOf(\"/models\") >= 0) {\n try {\n return await handleModelsRoute(req, url);\n } catch (e) {\n return jsonResp({ error: \"internal\", message: e instanceof Error ? e.message : String(e) }, 500);\n }\n }\n if (path.indexOf(\"/maintenance\") >= 0) {\n try {\n return await handleMaintenanceRoute(req, url);\n } catch (e) {\n return jsonResp({ error: \"internal\", message: e instanceof Error ? e.message : String(e) }, 500);\n }\n }\n if (path.indexOf(\"/keys\") >= 0) {\n try {\n return await handleKeysRoute(req, url);\n } catch (e) {\n return jsonResp({ error: \"internal\", message: e instanceof Error ? e.message : String(e) }, 500);\n }\n }\n\n if (req.method === \"GET\") {\n if (path.indexOf(\"diag\") >= 0 || url.searchParams.get(\"diag\") === \"1\") {\n const gotKey = req.headers.get(\"X-Admin-Api-Key\");\n if (gotKey !== ADMIN_API_KEY) {\n return jsonResp({ error: \"forbidden\" }, 403);\n }\n return await runDiag(url);\n }\n if (path.indexOf(\"ping\") >= 0) {\n return jsonResp({ ok: true, ts: Date.now() });\n }\n return jsonResp({ ok: true, path: path, hint: \"Открой /diag\" });\n }\n\n if (req.method !== \"POST\") {\n return jsonResp({ error: \"Only POST/GET\", path: path }, 405);\n }\n\n const maintenance = await getMaintenance();\n if (maintenance.enabled) {\n return jsonResp({ error: \"maintenance\", message: maintenance.message }, 503);\n }\n\n const deviceId = req.headers.get(\"X-Device-Id\") || \"anon\";\n if (isRateLimited(deviceId)) {\n return jsonResp({ error: \"Rate limit\" }, 429);\n }\n\n let payload: Record = {};\n try {\n payload = await req.json();\n } catch {\n return jsonResp({ error: \"Битый JSON\", path: path }, 400);\n }\n\n const isImage =\n path.indexOf(\"image\") >= 0 ||\n (typeof payload.prompt === \"string\" &&\n !payload.messages &&\n String(payload.model || \"\").toLowerCase().indexOf(\"flux\") >= 0);\n\n const isChat =\n path.indexOf(\"chat\") >= 0 ||\n path === \"/\" ||\n path.endsWith(\"/\") ||\n Array.isArray(payload.messages);\n\n if (isImage && !Array.isArray(payload.messages)) {\n try {\n const modelPath = normalizeModel(\n String(payload.model || \"@cf/black-forest-labs/flux-1-schnell\")\n );\n const prompt = String(payload.prompt || \"\").trim();\n if (!prompt) return jsonResp({ error: \"prompt обязателен\" }, 400);\n\n const images: string[] = Array.isArray(payload.images)\n ? (payload.images as string[])\n .filter((x) => typeof x === \"string\")\n .slice(0, 4)\n : [];\n\n const creds = await cfCreds();\n const token = creds.token;\n const account = creds.account;\n const runUrl = cfRunUrl(account, modelPath);\n const needsMultipart =\n modelPath.indexOf(\"flux-2\") >= 0 || images.length > 0;\n\n let status: number;\n let buf: Uint8Array;\n\n if (needsMultipart) {\n const form = new FormData();\n form.append(\"prompt\", prompt);\n form.append(\"width\", \"1024\");\n form.append(\"height\", \"1024\");\n if (modelPath.indexOf(\"flux-2-dev\") >= 0) form.append(\"steps\", \"20\");\n for (let i = 0; i < images.length; i++) {\n try {\n const bin = decodeB64Image(images[i]);\n form.append(\n \"input_image_\" + i,\n new Blob([bin], { type: \"image/jpeg\" }),\n \"ref\" + i + \".jpg\"\n );\n } catch { /* skip */ }\n }\n const resp = await fetch(runUrl, {\n method: \"POST\",\n headers: { Authorization: \"Bearer \" + token },\n body: form,\n });\n status = resp.status;\n buf = new Uint8Array(await resp.arrayBuffer());\n } else {\n const resp = await fetch(runUrl, {\n method: \"POST\",\n headers: {\n Authorization: \"Bearer \" + token,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ prompt: prompt, steps: 4 }),\n });\n status = resp.status;\n buf = new Uint8Array(await resp.arrayBuffer());\n }\n\n if (status < 200 || status >= 300) {\n const errText = new TextDecoder().decode(buf);\n return jsonResp({\n error: \"Cloudflare HTTP \" + status + \": \" + errText.slice(0, 600),\n slot: creds.slot,\n accountPreview: account.slice(0, 6) + \"…\" + account.slice(-4),\n model: modelPath,\n }, 500);\n }\n\n const asText = new TextDecoder().decode(buf);\n try {\n const j = JSON.parse(asText);\n const img =\n (j && j.result && (j.result.image || j.result.b64_json)) ||\n (j && (j.image || j.b64_json)) ||\n \"\";\n if (img) return jsonResp({ image: img });\n } catch { /* binary */ }\n\n let binary = \"\";\n for (let i = 0; i < buf.length; i++) binary += String.fromCharCode(buf[i]);\n return jsonResp({ image: btoa(binary) });\n } catch (e) {\n return jsonResp({ error: String((e as Error).message || e) }, 500);\n }\n }\n if (isChat) {\n const provider = String(payload.provider || \"openrouter\");\n const model = String(payload.model || \"\");\n\n try {\n if (provider === \"cloudflare\") {\n const modelPath = normalizeModel(model);\n const isReasoningModel =\n modelPath.indexOf(\"glm\") >= 0 || modelPath.indexOf(\"qwen\") >= 0;\n const requestedMaxTokens = Number(payload.max_tokens) || 2000;\n const effectiveMaxTokens = isReasoningModel\n ? Math.max(requestedMaxTokens, 6000)\n : requestedMaxTokens;\n\n function extractText(j: any): string {\n const msg = j?.choices?.[0]?.message;\n const direct = (msg?.content as string) || (j?.result?.response as string) || \"\";\n if (direct) return direct;\n const reasoning = (msg?.reasoning_content as string) || (msg?.reasoning as string) || \"\";\n return reasoning ? reasoning.trim() : \"\";\n }\n\n const slots = shuffleArray(await getAllCfSlots());\n const attemptsLog: string[] = [];\n\n for (const creds of slots) {\n const token = creds.token;\n const account = creds.account;\n\n try {\n const chatUrl = cfChatUrl(account);\n const resp = await fetch(chatUrl, {\n method: \"POST\",\n headers: {\n Authorization: \"Bearer \" + token,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n model: modelPath,\n messages: payload.messages,\n max_tokens: effectiveMaxTokens,\n }),\n });\n const text = await resp.text();\n\n if (resp.ok) {\n try {\n const j = JSON.parse(text);\n const content = extractText(j);\n if (content) {\n return jsonResp({\n choices: [{ message: { role: \"assistant\", content: content } }],\n });\n }\n } catch { /* */ }\n return new Response(text, {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n attemptsLog.push(creds.slot + \":chat=\" + resp.status);\n\n const runUrl = cfRunUrl(account, modelPath);\n const resp2 = await fetch(runUrl, {\n method: \"POST\",\n headers: {\n Authorization: \"Bearer \" + token,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n messages: payload.messages,\n max_tokens: effectiveMaxTokens,\n }),\n });\n const text2 = await resp2.text();\n\n if (resp2.ok) {\n try {\n const j = JSON.parse(text2);\n const content = extractText(j);\n if (content) {\n return jsonResp({\n choices: [{ message: { role: \"assistant\", content: content } }],\n });\n }\n } catch { /* */ }\n return new Response(text2, {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n attemptsLog.push(creds.slot + \":run=\" + resp2.status);\n } catch (e) {\n attemptsLog.push(creds.slot + \":exception=\" + String((e as Error).message || e));\n }\n }\n\n return jsonResp({\n error: \"Все Cloudflare-слоты недоступны для этой модели.\",\n model: modelPath,\n attempts: attemptsLog,\n }, 502);\n }\n\n if (provider === \"groq\") {\n const apiKey = await pickGroqKey();\n const result = await callOpenAICompatible(\n \"https://api.groq.com/openai/v1/chat/completions\",\n apiKey,\n model,\n payload,\n );\n return new Response(result.text, {\n status: result.status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n if (provider === \"gemini\") {\n const apiKey = await pickGeminiKey();\n const result = await callOpenAICompatible(\n \"https://generativelanguage.googleapis.com/v1beta/openai/chat/completions\",\n apiKey,\n model,\n payload,\n );\n return new Response(result.text, {\n status: result.status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n if (provider !== \"openrouter\") {\n return jsonResp({\n error: \"Этот провайдер требует собственный ключ пользователя\",\n provider: provider,\n }, 400);\n }\n\n const apiKey = await pickOpenRouterKey();\n const first = await callOpenRouter(apiKey, model, payload);\n\n if (!isModelUnavailableForFree(first.status, first.text)) {\n return new Response(first.text, {\n status: first.status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const triedModels = [model];\n let lastError = first;\n for (const fallbackModel of FREE_FALLBACK_CHAIN) {\n if (fallbackModel === model) continue;\n const attempt = await callOpenRouter(apiKey, fallbackModel, payload);\n triedModels.push(fallbackModel);\n\n if (attempt.status >= 200 && attempt.status < 300) {\n try {\n const j = JSON.parse(attempt.text);\n j._nanoai_fallback_model = fallbackModel;\n j._nanoai_requested_model = model;\n return jsonResp(j, attempt.status);\n } catch {\n return new Response(attempt.text, {\n status: attempt.status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n }\n\n if (isModelUnavailableForFree(attempt.status, attempt.text)) {\n lastError = attempt;\n continue;\n }\n\n lastError = attempt;\n }\n\n if (!triedModels.includes(\"openrouter/free\")) {\n const autoAttempt = await callOpenRouter(apiKey, \"openrouter/free\", payload);\n triedModels.push(\"openrouter/free\");\n if (autoAttempt.status >= 200 && autoAttempt.status < 300) {\n try {\n const j = JSON.parse(autoAttempt.text);\n j._nanoai_fallback_model = \"openrouter/free\";\n j._nanoai_requested_model = model;\n return jsonResp(j, autoAttempt.status);\n } catch {\n return new Response(autoAttempt.text, {\n status: autoAttempt.status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n }\n lastError = autoAttempt;\n }\n\n return jsonResp({\n error:\n \"Все бесплатные модели OpenRouter (включая резервную цепочку и \" +\n \"автороутер openrouter/free) сейчас недоступны бесплатно. \" +\n \"Попробуйте другого провайдера (cloudflare/groq/gemini) или добавьте платный ключ.\",\n requestedModel: model,\n triedModels,\n lastUpstreamError: lastError.text.slice(0, 500),\n }, 502);\n } catch (e) {\n return jsonResp({ error: String((e as Error).message || e) }, 500);\n }\n }\n\n return jsonResp({ error: \"Не понял тип запроса\", path: path }, 404);\n}","deleted",false,"label","nanoaiproxy",[14],"4a03ac51-2f91-4ff6-a1c1-7e947f8a4c0a",["D",1787317189951],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","e4a26e2e-0476-4585-b070-2c645a83998b","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a02467-b061-7113-8802-0e51758ce851","tursoName","4a03ac512f914ff6a1c17e947f8a4c0a","tursoHostname","4a03ac512f914ff6a1c17e947f8a4c0a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789579303050],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_103":-5},"org",{"_9":10,"_97":98,"_99":-5,"_55":-5,"_100":101,"_102":42},"branch",{"_35":30,"_11":88,"_22":28,"_89":46,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":12,"_96":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","vOnTer Studio ","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_137":138,"_139":140,"_141":142,"_143":42,"_144":42,"_145":42,"_146":32,"_147":-5,"_148":-7,"_149":-7,"_150":62,"_151":42,"_152":42,"_153":-5,"_154":42,"_155":42,"_156":42,"_157":-5},"ENV",{"_108":109,"_110":111,"_112":88,"_113":114,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]