Улей

\\n

Задачи · подзадачи · дедлайны

\\n

\\n \\n \\n

\\n\\n \\n\\n \\n

\\n\\n \\n

\\n

\\n\\n

Сохранение…

\\n\\n

\\n

\\n\\n\\n\\n\\n\\n\";\nconst json = (o: unknown, status = 200, extra: Record = {}) =>\n new Response(JSON.stringify(o), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...extra },\n });\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const base = url.origin;\n const path = url.pathname;\n\n if (path === \"/\" || path === \"\") {\n return new Response(WEBAPP_HTML, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n }\n if (path === \"/health\") return new Response(\"ok\");\n if (path === \"/favicon.ico\") {\n return new Response(\n '',\n { headers: { \"content-type\": \"image/svg+xml\" } },\n );\n }\n\n // Telegram Mini App auto-login\n if (path === \"/api/tg-auth\" && req.method === \"POST\") {\n let b: any;\n try {\n b = await req.json();\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n const info = await verifyInitData(String(b.initData || \"\"));\n if (!info) return json({ error: \"bad_initdata\" }, 401);\n const login = await loginByTg(info.id);\n if (!login) return json({ error: \"not_registered\" }, 409);\n return json({ login }, 200, {\n \"Set-Cookie\": sessionCookie(await makeToken(login), true),\n });\n }\n // web login\n if (path === \"/api/login\" && req.method === \"POST\") {\n let b: any;\n try {\n b = await req.json();\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n const login = normLogin(b.login);\n const acc = await getAcc(login);\n if (!acc) return json({ error: \"Неверный логин или пароль\" }, 401);\n if (!timingEq(await pbkdf2(String(b.password || \"\"), acc.salt), acc.hash)) {\n return json({ error: \"Неверный логин или пароль\" }, 401);\n }\n return json({ login }, 200, {\n \"Set-Cookie\": sessionCookie(await makeToken(login), b.remember !== false),\n });\n }\n if (path === \"/api/logout\" && req.method === \"POST\") {\n return json({ ok: true }, 200, { \"Set-Cookie\": clearCookie });\n }\n if (path === \"/api/me\") {\n const login = await currentLogin(req);\n return login ? json({ login }) : json({ error: \"unauthorized\" }, 401);\n }\n // change password (web, requires old)\n if (path === \"/api/password\" && req.method === \"POST\") {\n const login = await currentLogin(req);\n if (!login) return json({ error: \"unauthorized\" }, 401);\n let b: any;\n try {\n b = await req.json();\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n const acc = await getAcc(login);\n if (!acc) return json({ error: \"unauthorized\" }, 401);\n if (\n !timingEq(await pbkdf2(String(b.oldPassword || \"\"), acc.salt), acc.hash)\n ) return json({ error: \"Текущий пароль неверный\" }, 403);\n if (String(b.newPassword || \"\").length < 6) {\n return json({ error: \"Новый пароль минимум 6 символов\" }, 400);\n }\n await setPassword(acc, String(b.newPassword));\n return json({ ok: true });\n }\n // tasks\n if (path === \"/api/tasks\") {\n const login = await currentLogin(req);\n if (!login) return json({ error: \"unauthorized\" }, 401);\n if (req.method === \"GET\") return json(await getTasks(login));\n if (req.method === \"POST\") {\n try {\n const body = await req.json();\n if (!body || !Array.isArray(body.projects)) {\n return json({ error: \"bad\" }, 400);\n }\n await setTasks(login, body.projects);\n return json({ ok: true });\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n }\n return json({ error: \"method\" }, 405);\n }\n\n // Telegram webhook\n if (path === \"/bot\") {\n if (req.method !== \"POST\") return new Response(\"ok\");\n if (req.headers.get(\"X-Telegram-Bot-Api-Secret-Token\") !== WEBHOOK_SECRET) {\n return new Response(\"forbidden\", { status: 403 });\n }\n let update: unknown;\n try {\n update = await req.json();\n } catch (_e) {\n return new Response(\"ok\");\n }\n try {\n await handleUpdate(update, base);\n } catch (e) {\n console.error(\"upd\", e);\n }\n return new Response(\"ok\");\n }\n // one-time setup (admin)\n if (path === \"/setup\") {\n if (url.searchParams.get(\"key\") !== AUTH_SECRET) {\n return new Response(\"Добавьте ?key=ВАШ_AUTH_SECRET\", { status: 401 });\n }\n if (!BOT_TOKEN) return new Response(\"Не задан BOT_TOKEN\", { status: 400 });\n const wh = await tg(\"setWebhook\", {\n url: base + \"/bot\",\n secret_token: WEBHOOK_SECRET,\n allowed_updates: [\"message\", \"callback_query\"],\n drop_pending_updates: true,\n });\n // Кнопка меню = мини-приложение для ВСЕХ (безопасно: вход у каждого свой, по Telegram-подписи)\n await tg(\"setChatMenuButton\", {\n menu_button: {\n type: \"web_app\",\n text: \"Трекер\",\n web_app: { url: base + \"/\" },\n },\n });\n await tg(\"setMyCommands\", {\n commands: [\n { command: \"start\", description: \"Открыть трекер / регистрация\" },\n { command: \"password\", description: \"Сменить пароль\" },\n { command: \"help\", description: \"Помощь\" },\n ],\n });\n const me = await tg(\"getMe\", {});\n return json({\n webhook: wh,\n bot: me?.result?.username ? \"@\" + me.result.username : me,\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","label",[18],"pulls","branches","forks","envVars",{"_190":96,"_192":26},"connections",{"_190":26,"_191":26},"count","unfilledCount","emptyCount",{"_36":175,"_13":18,"_64":65,"_46":-5,"_38":39,"_176":96,"_177":115,"_40":194,"_42":89,"_66":86,"_179":180,"_68":24,"_181":-5,"_195":196,"_17":197},["D",1787735844209],"children",[],[18],["D",1787730765458],["D",1789475460618],{"_11":12,"_153":71},{"_11":12,"_149":12,"_70":71,"_30":69,"_150":151,"_152":24},{"_42":96,"_13":16,"_36":39,"_141":102,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":14,"_148":12},"ctx",{"_54":-5,"_172":236,"_237":238,"_239":240,"_241":24,"_242":24,"_243":24,"_244":115,"_245":-5,"_246":-7,"_247":-7,"_248":26,"_249":24,"_250":24,"_251":-5,"_252":24,"_253":24,"_254":24,"_255":-5},"ENV",{"_207":208,"_209":210,"_211":16,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · main.ts