Улей

\\n

Задачи · подзадачи · дедлайны

\\n

\\n \\n \\n

\\n\\n \\n\\n \\n

\\n\\n \\n

\\n

\\n\\n

Сохранение…

\\n\\n

\\n

\\n\\n\\n\\n\\n\\n\";\nconst json = (o: unknown, status = 200, extra: Record = {}) =>\n new Response(JSON.stringify(o), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...extra },\n });\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const base = url.origin;\n const path = url.pathname;\n\n if (path === \"/\" || path === \"\") {\n return new Response(WEBAPP_HTML, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n }\n if (path === \"/health\") return new Response(\"ok\");\n if (path === \"/favicon.ico\") {\n return new Response(\n '',\n { headers: { \"content-type\": \"image/svg+xml\" } },\n );\n }\n\n // Telegram Mini App auto-login\n if (path === \"/api/tg-auth\" && req.method === \"POST\") {\n let b: any;\n try {\n b = await req.json();\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n const info = await verifyInitData(String(b.initData || \"\"));\n if (!info) return json({ error: \"bad_initdata\" }, 401);\n const login = await loginByTg(info.id);\n if (!login) return json({ error: \"not_registered\" }, 409);\n return json({ login }, 200, {\n \"Set-Cookie\": sessionCookie(await makeToken(login), true),\n });\n }\n // web login\n if (path === \"/api/login\" && req.method === \"POST\") {\n let b: any;\n try {\n b = await req.json();\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n const login = normLogin(b.login);\n const acc = await getAcc(login);\n if (!acc) return json({ error: \"Неверный логин или пароль\" }, 401);\n if (!timingEq(await pbkdf2(String(b.password || \"\"), acc.salt), acc.hash)) {\n return json({ error: \"Неверный логин или пароль\" }, 401);\n }\n return json({ login }, 200, {\n \"Set-Cookie\": sessionCookie(await makeToken(login), b.remember !== false),\n });\n }\n if (path === \"/api/logout\" && req.method === \"POST\") {\n return json({ ok: true }, 200, { \"Set-Cookie\": clearCookie });\n }\n if (path === \"/api/me\") {\n const login = await currentLogin(req);\n return login ? json({ login }) : json({ error: \"unauthorized\" }, 401);\n }\n // change password (web, requires old)\n if (path === \"/api/password\" && req.method === \"POST\") {\n const login = await currentLogin(req);\n if (!login) return json({ error: \"unauthorized\" }, 401);\n let b: any;\n try {\n b = await req.json();\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n const acc = await getAcc(login);\n if (!acc) return json({ error: \"unauthorized\" }, 401);\n if (\n !timingEq(await pbkdf2(String(b.oldPassword || \"\"), acc.salt), acc.hash)\n ) return json({ error: \"Текущий пароль неверный\" }, 403);\n if (String(b.newPassword || \"\").length < 6) {\n return json({ error: \"Новый пароль минимум 6 символов\" }, 400);\n }\n await setPassword(acc, String(b.newPassword));\n return json({ ok: true });\n }\n // tasks\n if (path === \"/api/tasks\") {\n const login = await currentLogin(req);\n if (!login) return json({ error: \"unauthorized\" }, 401);\n if (req.method === \"GET\") return json(await getTasks(login));\n if (req.method === \"POST\") {\n try {\n const body = await req.json();\n if (!body || !Array.isArray(body.projects)) {\n return json({ error: \"bad\" }, 400);\n }\n await setTasks(login, body.projects);\n return json({ ok: true });\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n }\n return json({ error: \"method\" }, 405);\n }\n\n // Telegram webhook\n if (path === \"/bot\") {\n if (req.method !== \"POST\") return new Response(\"ok\");\n if (req.headers.get(\"X-Telegram-Bot-Api-Secret-Token\") !== WEBHOOK_SECRET) {\n return new Response(\"forbidden\", { status: 403 });\n }\n let update: unknown;\n try {\n update = await req.json();\n } catch (_e) {\n return new Response(\"ok\");\n }\n try {\n await handleUpdate(update, base);\n } catch (e) {\n console.error(\"upd\", e);\n }\n return new Response(\"ok\");\n }\n // one-time setup (admin)\n if (path === \"/setup\") {\n if (url.searchParams.get(\"key\") !== AUTH_SECRET) {\n return new Response(\"Добавьте ?key=ВАШ_AUTH_SECRET\", { status: 401 });\n }\n if (!BOT_TOKEN) return new Response(\"Не задан BOT_TOKEN\", { status: 400 });\n const wh = await tg(\"setWebhook\", {\n url: base + \"/bot\",\n secret_token: WEBHOOK_SECRET,\n allowed_updates: [\"message\", \"callback_query\"],\n drop_pending_updates: true,\n });\n // Кнопка меню = мини-приложение для ВСЕХ (безопасно: вход у каждого свой, по Telegram-подписи)\n await tg(\"setChatMenuButton\", {\n menu_button: {\n type: \"web_app\",\n text: \"Трекер\",\n web_app: { url: base + \"/\" },\n },\n });\n await tg(\"setMyCommands\", {\n commands: [\n { command: \"start\", description: \"Открыть трекер / регистрация\" },\n { command: \"password\", description: \"Сменить пароль\" },\n { command: \"help\", description: \"Помощь\" },\n ],\n });\n const me = await tg(\"getMe\", {});\n return json({\n webhook: wh,\n bot: me?.result?.username ? \"@\" + me.result.username : me,\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","label",[62],"pulls","branches","forks","envVars",{"_187":93,"_189":20},"connections",{"_187":20,"_188":20},"count","unfilledCount","emptyCount",{"_31":172,"_13":62,"_60":61,"_41":-5,"_33":34,"_173":93,"_174":111,"_35":191,"_37":86,"_63":83,"_176":177,"_65":24,"_178":-5,"_192":193,"_150":194},["D",1787735844209],"children",[],[62],["D",1787730765458],["D",1789562426294],{"_11":12,"_149":68},{"_11":12,"_145":12,"_67":68,"_25":66,"_146":147,"_148":24},{"_37":93,"_13":16,"_31":34,"_137":98,"_138":-5,"_139":-5,"_140":-5,"_141":-5,"_142":-5,"_143":14,"_144":12},"ctx",{"_49":-5,"_168":233,"_234":235,"_236":237,"_238":24,"_239":24,"_240":24,"_241":111,"_242":-5,"_243":-7,"_244":-7,"_245":20,"_246":24,"_247":24,"_248":-5,"_249":24,"_250":24,"_251":24,"_252":-5},"ENV",{"_204":205,"_206":207,"_208":16,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","9e167d8120a57de5d747867e0b686da51bcc19a4","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History