Улей

\\n

Задачи · подзадачи · дедлайны

\\n

\\n \\n \\n

\\n\\n \\n\\n \\n

\\n\\n \\n

\\n

\\n\\n

Сохранение…

\\n\\n

\\n

\\n\\n\\n\\n\\n\\n\";\nconst json = (o: unknown, status = 200, extra: Record = {}) =>\n new Response(JSON.stringify(o), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...extra },\n });\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const base = url.origin;\n const path = url.pathname;\n\n if (path === \"/\" || path === \"\") {\n return new Response(WEBAPP_HTML, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n }\n if (path === \"/health\") return new Response(\"ok\");\n if (path === \"/favicon.ico\") {\n return new Response(\n '',\n { headers: { \"content-type\": \"image/svg+xml\" } },\n );\n }\n\n // Telegram Mini App auto-login\n if (path === \"/api/tg-auth\" && req.method === \"POST\") {\n let b: any;\n try {\n b = await req.json();\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n const info = await verifyInitData(String(b.initData || \"\"));\n if (!info) return json({ error: \"bad_initdata\" }, 401);\n const login = await loginByTg(info.id);\n if (!login) return json({ error: \"not_registered\" }, 409);\n return json({ login }, 200, {\n \"Set-Cookie\": sessionCookie(await makeToken(login), true),\n });\n }\n // web login\n if (path === \"/api/login\" && req.method === \"POST\") {\n let b: any;\n try {\n b = await req.json();\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n const login = normLogin(b.login);\n const acc = await getAcc(login);\n if (!acc) return json({ error: \"Неверный логин или пароль\" }, 401);\n if (!timingEq(await pbkdf2(String(b.password || \"\"), acc.salt), acc.hash)) {\n return json({ error: \"Неверный логин или пароль\" }, 401);\n }\n return json({ login }, 200, {\n \"Set-Cookie\": sessionCookie(await makeToken(login), b.remember !== false),\n });\n }\n if (path === \"/api/logout\" && req.method === \"POST\") {\n return json({ ok: true }, 200, { \"Set-Cookie\": clearCookie });\n }\n if (path === \"/api/me\") {\n const login = await currentLogin(req);\n return login ? json({ login }) : json({ error: \"unauthorized\" }, 401);\n }\n // change password (web, requires old)\n if (path === \"/api/password\" && req.method === \"POST\") {\n const login = await currentLogin(req);\n if (!login) return json({ error: \"unauthorized\" }, 401);\n let b: any;\n try {\n b = await req.json();\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n const acc = await getAcc(login);\n if (!acc) return json({ error: \"unauthorized\" }, 401);\n if (\n !timingEq(await pbkdf2(String(b.oldPassword || \"\"), acc.salt), acc.hash)\n ) return json({ error: \"Текущий пароль неверный\" }, 403);\n if (String(b.newPassword || \"\").length < 6) {\n return json({ error: \"Новый пароль минимум 6 символов\" }, 400);\n }\n await setPassword(acc, String(b.newPassword));\n return json({ ok: true });\n }\n // tasks\n if (path === \"/api/tasks\") {\n const login = await currentLogin(req);\n if (!login) return json({ error: \"unauthorized\" }, 401);\n if (req.method === \"GET\") return json(await getTasks(login));\n if (req.method === \"POST\") {\n try {\n const body = await req.json();\n if (!body || !Array.isArray(body.projects)) {\n return json({ error: \"bad\" }, 400);\n }\n await setTasks(login, body.projects);\n return json({ ok: true });\n } catch (_e) {\n return json({ error: \"bad\" }, 400);\n }\n }\n return json({ error: \"method\" }, 405);\n }\n\n // Telegram webhook\n if (path === \"/bot\") {\n if (req.method !== \"POST\") return new Response(\"ok\");\n if (req.headers.get(\"X-Telegram-Bot-Api-Secret-Token\") !== WEBHOOK_SECRET) {\n return new Response(\"forbidden\", { status: 403 });\n }\n let update: unknown;\n try {\n update = await req.json();\n } catch (_e) {\n return new Response(\"ok\");\n }\n try {\n await handleUpdate(update, base);\n } catch (e) {\n console.error(\"upd\", e);\n }\n return new Response(\"ok\");\n }\n // one-time setup (admin)\n if (path === \"/setup\") {\n if (url.searchParams.get(\"key\") !== AUTH_SECRET) {\n return new Response(\"Добавьте ?key=ВАШ_AUTH_SECRET\", { status: 401 });\n }\n if (!BOT_TOKEN) return new Response(\"Не задан BOT_TOKEN\", { status: 400 });\n const wh = await tg(\"setWebhook\", {\n url: base + \"/bot\",\n secret_token: WEBHOOK_SECRET,\n allowed_updates: [\"message\", \"callback_query\"],\n drop_pending_updates: true,\n });\n // Кнопка меню = мини-приложение для ВСЕХ (безопасно: вход у каждого свой, по Telegram-подписи)\n await tg(\"setChatMenuButton\", {\n menu_button: {\n type: \"web_app\",\n text: \"Трекер\",\n web_app: { url: base + \"/\" },\n },\n });\n await tg(\"setMyCommands\", {\n commands: [\n { command: \"start\", description: \"Открыть трекер / регистрация\" },\n { command: \"password\", description: \"Сменить пароль\" },\n { command: \"help\", description: \"Помощь\" },\n ],\n });\n const me = await tg(\"getMe\", {});\n return json({\n webhook: wh,\n bot: me?.result?.username ? \"@\" + me.result.username : me,\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","deleted","label",[118],"pulls",1,"forks","envVars",{"_140":30,"_142":55},"connections",{"_140":55,"_141":55},"count","unfilledCount","emptyCount",{"_20":117,"_13":118,"_119":49,"_120":-5,"_121":21,"_122":30,"_123":51,"_22":144,"_29":125,"_126":127,"_128":129,"_130":38,"_131":-5,"_145":146,"_94":147},["D",1787735844209],"children",[],[118],["D",1787730765458],["D",1789475460618],{"_11":12,"_92":88},{"_11":12,"_86":12,"_87":88,"_46":47,"_89":90,"_91":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_81":-5,"_82":-5,"_83":-5,"_84":14,"_85":12},"ctx",{"_74":-5,"_113":186,"_187":188,"_189":190,"_191":38,"_192":38,"_193":38,"_194":51,"_195":-5,"_196":-7,"_197":-7,"_198":55,"_199":38,"_200":38,"_201":-5,"_202":38,"_203":38,"_204":38,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":26,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1