Astric Games

🛠️ Admin Dashboard

\n\n

Dynamic Text Studio

\n {FIELDS.map((f) => (\n

\n {f}\n setLabels((l) => ({ ...l, [f]: e.target.value }))}\n className=\"flex-1 bg-black/30 border border-white/10 rounded-lg px-2 py-1 text-xs outline-none\"\n />\n

\n ))}\n \n {saved ? \"Saved ✅\" : saving ? \"Saving...\" : \"Save Labels\"}\n \n

\n\n

Promo Code Generator

\n setPromoCode(e.target.value)}\n className=\"w-full bg-black/30 border border-white/10 rounded-lg px-2 py-2 text-sm outline-none\"\n />\n

\n setPromoReward(Number(e.target.value))}\n placeholder=\"Reward\"\n className=\"flex-1 bg-black/30 border border-white/10 rounded-lg px-2 py-2 text-sm outline-none\"\n />\n setPromoMax(Number(e.target.value))}\n placeholder=\"Max uses\"\n className=\"flex-1 bg-black/30 border border-white/10 rounded-lg px-2 py-2 text-sm outline-none\"\n />\n

\n \n Create Promo\n \n {promoMsg &&

{promoMsg}

}\n

\n\n

User Search & Balance

\n setQuery(e.target.value)}\n placeholder=\"Search by ID or username\"\n className=\"flex-1 bg-black/30 border border-white/10 rounded-lg px-2 py-2 text-sm outline-none\"\n />\n \n Search\n \n

\n {users.map((u) => (\n

\n \n @{u.username || u.telegram_id} ({u.telegram_id})\n \n {Number(u.balance).toFixed(0)}\n

\n setAdjustAmounts((a) => ({ ...a, [u.telegram_id]: Number(e.target.value) }))}\n className=\"flex-1 bg-black/40 border border-white/10 rounded-lg px-2 py-1 text-xs outline-none\"\n />\n \n

\n ))}\n

\n );\n}\n","label",[156,157,65],"frontend","screens","pulls","branches",1,"forks","envVars",{"_166":26,"_168":26},"connections",{"_166":26,"_167":26},"count","unfilledCount","emptyCount",{"_32":385,"_13":156,"_63":300,"_42":-5,"_34":35,"_149":309,"_150":86,"_36":386,"_38":26,"_66":232,"_152":-5,"_68":24,"_154":-5,"_201":387,"_17":388},{"_32":381,"_13":157,"_63":148,"_42":300,"_34":35,"_149":373,"_150":86,"_36":382,"_38":26,"_66":232,"_152":-5,"_68":24,"_154":-5,"_201":383,"_17":384},{"_32":147,"_13":65,"_63":64,"_42":148,"_34":35,"_149":39,"_150":86,"_36":378,"_38":26,"_66":67,"_152":153,"_68":24,"_154":-5,"_201":379,"_17":380},{"_32":370,"_13":371,"_63":372,"_42":148,"_34":35,"_149":373,"_150":86,"_36":374,"_38":26,"_66":67,"_152":375,"_68":24,"_154":-5,"_201":376,"_17":377},{"_32":362,"_13":363,"_63":364,"_42":148,"_34":35,"_149":365,"_150":86,"_36":366,"_38":26,"_66":67,"_152":367,"_68":24,"_154":-5,"_201":368,"_17":369},{"_32":354,"_13":355,"_63":356,"_42":148,"_34":35,"_149":357,"_150":86,"_36":358,"_38":26,"_66":67,"_152":359,"_68":24,"_154":-5,"_201":360,"_17":361},{"_32":346,"_13":347,"_63":348,"_42":148,"_34":35,"_149":349,"_150":86,"_36":350,"_38":26,"_66":67,"_152":351,"_68":24,"_154":-5,"_201":352,"_17":353},{"_32":338,"_13":339,"_63":340,"_42":148,"_34":35,"_149":341,"_150":86,"_36":342,"_38":26,"_66":67,"_152":343,"_68":24,"_154":-5,"_201":344,"_17":345},{"_32":330,"_13":331,"_63":332,"_42":148,"_34":35,"_149":333,"_150":86,"_36":334,"_38":26,"_66":67,"_152":335,"_68":24,"_154":-5,"_201":336,"_17":337},{"_32":322,"_13":323,"_63":324,"_42":300,"_34":35,"_149":325,"_150":86,"_36":326,"_38":26,"_66":67,"_152":327,"_68":24,"_154":-5,"_201":328,"_17":329},{"_32":314,"_13":315,"_63":316,"_42":300,"_34":35,"_149":317,"_150":86,"_36":318,"_38":26,"_66":67,"_152":319,"_68":24,"_154":-5,"_201":320,"_17":321},{"_32":306,"_13":307,"_63":308,"_42":300,"_34":35,"_149":309,"_150":86,"_36":310,"_38":26,"_66":21,"_152":311,"_68":24,"_154":-5,"_201":312,"_17":313},{"_32":297,"_13":298,"_63":299,"_42":300,"_34":35,"_149":301,"_150":86,"_36":302,"_38":26,"_66":67,"_152":303,"_68":24,"_154":-5,"_201":304,"_17":305},{"_32":293,"_13":244,"_63":238,"_42":-5,"_34":35,"_149":280,"_150":86,"_36":294,"_38":26,"_66":232,"_152":-5,"_68":24,"_154":-5,"_201":295,"_17":296},{"_32":285,"_13":286,"_63":287,"_42":238,"_34":35,"_149":288,"_150":86,"_36":289,"_38":26,"_66":67,"_152":290,"_68":24,"_154":-5,"_201":291,"_17":292},{"_32":277,"_13":278,"_63":279,"_42":238,"_34":35,"_149":280,"_150":86,"_36":281,"_38":26,"_66":67,"_152":282,"_68":24,"_154":-5,"_201":283,"_17":284},{"_32":269,"_13":270,"_63":271,"_42":238,"_34":35,"_149":272,"_150":86,"_36":273,"_38":26,"_66":67,"_152":274,"_68":24,"_154":-5,"_201":275,"_17":276},{"_32":261,"_13":262,"_63":263,"_42":238,"_34":35,"_149":264,"_150":86,"_36":265,"_38":26,"_66":67,"_152":266,"_68":24,"_154":-5,"_201":267,"_17":268},{"_32":253,"_13":254,"_63":255,"_42":238,"_34":35,"_149":256,"_150":86,"_36":257,"_38":26,"_66":67,"_152":258,"_68":24,"_154":-5,"_201":259,"_17":260},{"_32":245,"_13":246,"_63":247,"_42":238,"_34":35,"_149":248,"_150":86,"_36":249,"_38":26,"_66":67,"_152":250,"_68":24,"_154":-5,"_201":251,"_17":252},{"_32":235,"_13":236,"_63":237,"_42":238,"_34":35,"_149":239,"_150":86,"_36":240,"_38":26,"_66":67,"_152":241,"_68":24,"_154":-5,"_201":242,"_17":243},{"_32":227,"_13":228,"_63":229,"_42":-5,"_34":35,"_149":230,"_150":86,"_36":231,"_38":26,"_66":232,"_152":-5,"_68":24,"_154":-5,"_201":233,"_17":234},{"_32":220,"_13":221,"_63":222,"_42":-5,"_34":35,"_149":112,"_150":86,"_36":223,"_38":26,"_66":21,"_152":224,"_68":24,"_154":-5,"_201":225,"_17":226},{"_32":213,"_13":214,"_63":215,"_42":-5,"_34":35,"_149":160,"_150":86,"_36":216,"_38":26,"_66":67,"_152":217,"_68":24,"_154":-5,"_201":218,"_17":219},{"_32":204,"_13":205,"_63":84,"_42":-5,"_34":35,"_149":206,"_150":86,"_36":207,"_38":26,"_66":208,"_152":209,"_68":24,"_154":210,"_201":211,"_17":212},{"_32":195,"_13":196,"_63":197,"_42":-5,"_34":35,"_149":198,"_150":86,"_36":199,"_38":26,"_66":67,"_152":200,"_68":24,"_154":-5,"_201":202,"_17":203},"b02eae7c-c8bd-40a8-9742-24c11e8ef37d","telegram.ts","28a96b96-a7fa-11f1-af2b-1607ee4eb77e",2,["D",1788482829087],"import type { Context } from \"npm:hono@4\";\n\nexport const BOT_TOKEN = Deno.env.get(\"BOT_TOKEN\") || \"7832757388:AAFjh142ae9d-MSKK5Ae-XSlT0f3baIQYxk\";\nexport const ADMIN_TELEGRAM_IDS = (Deno.env.get(\"ADMIN_TELEGRAM_IDS\") || \"6819127801\")\n .split(\",\")\n .map((s) => s.trim())\n .filter(Boolean);\nexport const PROVIDER_TOKEN_STARS = Deno.env.get(\"PROVIDER_TOKEN_STARS\") || \"XTR\";\nexport const BOT_USERNAME = Deno.env.get(\"BOT_USERNAME\") || \"astric_games_bot\";\n\nasync function hmacSha256(key: BufferSource, data: string): Promise {\n const cryptoKey = await crypto.subtle.importKey(\"raw\", key, { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n return await crypto.subtle.sign(\"HMAC\", cryptoKey, new TextEncoder().encode(data));\n}\n\nfunction toHex(buf: ArrayBuffer) {\n return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/**\n * Validates a Telegram WebApp `initData` string per the official algorithm:\n * https://core.telegram.org/bots/webapps#validating-data-received-via-the-mini-app\n */\nexport async function validateInitData(\n initData: string,\n): Promise<{ valid: boolean; user?: any; startParam?: string }> {\n try {\n if (!initData) return { valid: false };\n const params = new URLSearchParams(initData);\n const hash = params.get(\"hash\");\n if (!hash) return { valid: false };\n params.delete(\"hash\");\n\n const pairs: string[] = [];\n for (const [k, v] of [...params.entries()].sort((a, b) => a[0].localeCompare(b[0]))) {\n pairs.push(`${k}=${v}`);\n }\n const dataCheckString = pairs.join(\"\\n\");\n\n const secretKey = await hmacSha256(new TextEncoder().encode(\"WebAppData\"), BOT_TOKEN);\n const computedHash = toHex(await hmacSha256(secretKey, dataCheckString));\n if (computedHash !== hash) return { valid: false };\n\n const userStr = params.get(\"user\");\n const user = userStr ? JSON.parse(userStr) : null;\n const startParam = params.get(\"start_param\") ?? undefined;\n return { valid: true, user, startParam };\n } catch {\n return { valid: false };\n }\n}\n\nexport function isAdmin(telegramId: string): boolean {\n return ADMIN_TELEGRAM_IDS.includes(String(telegramId));\n}\n\n/** Shared auth guard for protected API routes: reads & validates the X-Init-Data header. */\nexport async function requireAuth(c: Context): Promise<{ telegramId: string; tgUser: any } | null> {\n const initData = c.req.header(\"X-Init-Data\") || \"\";\n const result = await validateInitData(initData);\n if (!result.valid || !result.user) return null;\n return { telegramId: String(result.user.id), tgUser: result.user };\n}\n","children",[],[196],"58a55006-517a-4fd1-9d6d-18ef1f49bdce","main.ts",10,["D",1788482888132],"http","import { Hono } from \"npm:hono@4\";\nimport { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { initDb } from \"./db.ts\";\n\nimport auth from \"./routes/auth.ts\";\nimport config from \"./routes/config.ts\";\nimport admin from \"./routes/admin.ts\";\nimport promo from \"./routes/promo.ts\";\nimport referrals from \"./routes/referrals.ts\";\nimport payments from \"./routes/payments.ts\";\nimport games from \"./routes/games.ts\";\n\nawait initDb();\n\nconst app = new Hono();\n\napp.route(\"/api\", auth);\napp.route(\"/api\", config);\napp.route(\"/api\", admin);\napp.route(\"/api\", promo);\napp.route(\"/api\", referrals);\napp.route(\"/api\", payments);\napp.route(\"/api\", games);\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/\", (c) => serveFile(\"/frontend/index.html\"));\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path));\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","astric-games",[],[205],"2b088763-34f1-4f89-80cd-04fafa1fac52","db.ts","231e2162-a7fa-11f1-a387-1607ee4eb77e",["D",1788482819789],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function initDb() {\n await sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS users (\n telegram_id TEXT PRIMARY KEY,\n username TEXT,\n balance REAL DEFAULT 0,\n referrer_id TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS promo_codes (\n code TEXT PRIMARY KEY,\n reward_amount REAL,\n max_activations INTEGER,\n current_activations INTEGER DEFAULT 0\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS user_promos (\n user_id TEXT,\n promo_code TEXT,\n PRIMARY KEY (user_id, promo_code)\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS app_config (\n config_key TEXT PRIMARY KEY,\n config_value TEXT\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS transactions (\n id TEXT PRIMARY KEY,\n user_id TEXT,\n amount REAL,\n type TEXT,\n currency TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )`,\n },\n {\n // Backing store for provably-fair crash rounds (not in the original 5-table\n // spec, but required to keep the crash multiplier server-side & non-tamperable)\n sql: `CREATE TABLE IF NOT EXISTS game_rounds (\n id TEXT PRIMARY KEY,\n user_id TEXT,\n bet_amount REAL,\n crash_point REAL,\n started_at INTEGER,\n status TEXT DEFAULT 'active'\n )`,\n },\n ]);\n}\n\nexport const DEFAULT_CONFIG: Record = {\n app_name: \"Astric Games\",\n welcome_message: \"Welcome to\",\n game_1_title: \"Crash\",\n game_1_subtitle: \"Ride the rocket, cash out before it pops\",\n game_2_title: \"Roulette\",\n game_2_subtitle: \"Spin the wheel of fortune\",\n game_3_title: \"Sports\",\n game_3_subtitle: \"Predict match outcomes\",\n currency_symbol: \"⭐\",\n bet_button_text: \"Place Bet\",\n};\n\nexport async function getConfig(): Promise> {\n const res = await sqlite.execute(\"SELECT config_key, config_value FROM app_config\");\n const merged = { ...DEFAULT_CONFIG };\n for (const row of res.rows as any[]) {\n merged[row.config_key as string] = row.config_value as string;\n }\n return merged;\n}\n\nexport async function getUser(telegramId: string): Promise {\n const res = await sqlite.execute({ sql: \"SELECT * FROM users WHERE telegram_id = ?\", args: [telegramId] });\n return (res.rows[0] as any) ?? null;\n}\n\nexport async function ensureUser(telegramId: string, username: string, referrerId?: string) {\n const existing = await getUser(telegramId);\n if (existing) return existing;\n\n await sqlite.execute({\n sql: \"INSERT INTO users (telegram_id, username, balance, referrer_id, created_at) VALUES (?, ?, 0, ?, datetime('now'))\",\n args: [telegramId, username, referrerId ?? null],\n });\n\n if (referrerId && referrerId !== telegramId) {\n const referrer = await getUser(referrerId);\n if (referrer) {\n const reward = 50;\n await sqlite.execute({ sql: \"UPDATE users SET balance = balance + ? WHERE telegram_id = ?\", args: [reward, referrerId] });\n await recordTransaction(referrerId, reward, \"referral_bonus\", \"points\");\n }\n }\n\n return await getUser(telegramId);\n}\n\nexport async function recordTransaction(userId: string, amount: number, type: string, currency: string) {\n await sqlite.execute({\n sql: \"INSERT INTO transactions (id, user_id, amount, type, currency, created_at) VALUES (?, ?, ?, ?, ?, datetime('now'))\",\n args: [crypto.randomUUID(), userId, amount, type, currency],\n });\n}\n\nexport async function adjustBalance(userId: string, delta: number) {\n await sqlite.execute({ sql: \"UPDATE users SET balance = balance + ? WHERE telegram_id = ?\", args: [delta, userId] });\n}\n",[],[214],"d6ace740-4e3c-4e36-bb43-c09063b8027b","README.md","cbc63462-a7fa-11f1-a61a-1607ee4eb77e",["D",1788483102741],"# 🚀 Astric Games — Telegram Mini App\n\nA full-stack, dark-glossy arcade Mini App for Telegram: **Crash**, **Roulette**, and **Sports Prediction**,\nplus promo codes, referrals, a Stars/TON wallet, and a live-editable admin dashboard.\n\n[Open the app](url:main.ts)\n\n## Stack\n\n- **Backend:** Hono (`main.ts` + `routes/*.ts`), `std/sqlite` for storage\n- **Frontend:** React 18 + Tailwind (via Twind, no build step) + Framer Motion, served straight from `.tsx` files\n- **Auth:** Telegram WebApp `initData`, verified server-side with HMAC-SHA256 against `BOT_TOKEN`\n\n## Architecture\n\n```mermaid\nflowchart TD\n subgraph Client[\"Telegram WebView\"]\n A[frontend/index.tsx] --> B[App.tsx]\n B --> C[Arcade / CrashGame / Roulette / Sports]\n B --> D[Earn]\n B --> E[Profile]\n B --> F[Admin]\n end\n\n subgraph Server[\"Hono (main.ts)\"]\n G[routes/auth.ts]\n H[routes/config.ts]\n I[routes/admin.ts]\n J[routes/promo.ts]\n K[routes/referrals.ts]\n L[routes/payments.ts]\n M[routes/games.ts]\n end\n\n DB[(SQLite: users, promo_codes,\\nuser_promos, app_config,\\ntransactions, game_rounds)]\n\n Client -- \"X-Init-Data header\" --> Server\n G & H & I & J & K & L & M --> DB\n```\n\n## Secrets\n\nReads from environment variables, with development fallback defaults baked in as requested:\n\n- `BOT_TOKEN` — Telegram bot token, used to validate `initData` and call the Bot API (invoices, webhook replies)\n- `ADMIN_TELEGRAM_IDS` — comma-separated Telegram user IDs granted the Admin tab\n- `PROVIDER_TOKEN_STARS` — payment provider token for Telegram Stars invoices (`\"XTR\"` for native Stars)\n- `BOT_USERNAME` *(optional)* — used to build the `https://t.me/?start=` referral link\n- `TON_WALLET_ADDRESS` *(optional)* — wallet address shown for manual TON top-ups\n\n👉 Set real values here: \n\n## Backend routes\n\n| Route | Purpose |\n|---|---|\n| `POST /api/auth` | Validates `initData`, auto-registers the user, applies referral bonus |\n| `GET /api/config` | Returns dynamic UI labels merged with defaults |\n| `POST /api/admin/config` | Admin-only: update UI labels |\n| `POST /api/admin/promo/create` | Admin-only: create/update a promo code |\n| `GET /api/admin/users/search` / `POST /api/admin/users/adjust-balance` | Admin-only: user lookup & balance management |\n| `POST /api/promo/claim` | Redeem a promo code |\n| `GET /api/referrals` | Referral link, invited users, total earnings |\n| `GET /api/transactions` | Wallet transaction history |\n| `POST /api/payments/create-invoice` | Stars invoice link or TON payment payload |\n| `POST /api/webhook/telegram` | Handles `pre_checkout_query` + `successful_payment` |\n| `POST /api/games/booster/launch` / `GET /api/games/booster/status` / `POST /api/games/booster/eject` | Crash game — server-derived HMAC crash point |\n| `POST /api/games/wheel/spin` | Roulette — Alpha/Beta x2, Gamma x14 |\n| `GET /api/games/matches` / `POST /api/games/matches/predict` | Sports prediction |\n\nAll game outcomes are computed **server-side only** — the client never sees secret values (like the crash point) until the round ends.\n\n## Notes\n\n- The 5-table spec is implemented exactly as described, plus one extra `game_rounds` table to hold in-flight Crash rounds server-side (required so the multiplier can't be tampered with client-side).\n- Sports predictions resolve instantly (weighted by the fixture's odds) for a snappy demo experience — swap in real results if you wire up a live sports-data feed.\n",[],[221],"7d5f8bcf-de78-4334-ac46-c24b27dd34c7","scripts","1b8ce546-5418-4554-82dd-95aa9fd058b4",22,["D",1788483033330],"directory",[],[228],"52627be8-fc7a-419d-9dbc-b111793ba008","referrals.ts","35891b5e-a7fa-11f1-b6dd-1607ee4eb77e","1f1cbbfc-d144-4192-b925-17993de0d49e",7,["D",1788482850685],"import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { requireAuth, BOT_USERNAME } from \"../telegram.ts\";\n\nconst referrals = new Hono();\n\nreferrals.get(\"/referrals\", async (c) => {\n const auth = await requireAuth(c);\n if (!auth) return c.json({ error: \"unauthorized\" }, 401);\n\n const invited = await sqlite.execute({\n sql: \"SELECT telegram_id, username, created_at FROM users WHERE referrer_id = ? ORDER BY created_at DESC\",\n args: [auth.telegramId],\n });\n const earnings = await sqlite.execute({\n sql: \"SELECT COALESCE(SUM(amount), 0) as total FROM transactions WHERE user_id = ? AND type = 'referral_bonus'\",\n args: [auth.telegramId],\n });\n\n return c.json({\n link: `https://t.me/${BOT_USERNAME}?start=${auth.telegramId}`,\n invited: invited.rows,\n earnings: (earnings.rows[0] as any)?.total ?? 0,\n });\n});\n\nexport default referrals;\n",[],[244,236],"routes","24e0d2a8-0e7c-4116-a531-5af89d60eba2","promo.ts","33ecef6e-a7fa-11f1-a387-1607ee4eb77e",6,["D",1788482847986],"import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { requireAuth } from \"../telegram.ts\";\nimport { recordTransaction } from \"../db.ts\";\n\nconst promo = new Hono();\n\npromo.post(\"/promo/claim\", async (c) => {\n const auth = await requireAuth(c);\n if (!auth) return c.json({ error: \"unauthorized\" }, 401);\n\n const { code } = await c.req.json().catch(() => ({ code: \"\" }));\n if (!code) return c.json({ error: \"invalid_code\" }, 400);\n const normalized = String(code).toUpperCase();\n\n const promoRes = await sqlite.execute({ sql: \"SELECT * FROM promo_codes WHERE code = ?\", args: [normalized] });\n const promoRow = promoRes.rows[0] as any;\n if (!promoRow) return c.json({ error: \"invalid_code\" }, 404);\n if (promoRow.current_activations >= promoRow.max_activations) {\n return c.json({ error: \"exhausted\" }, 400);\n }\n\n const already = await sqlite.execute({\n sql: \"SELECT 1 FROM user_promos WHERE user_id = ? AND promo_code = ?\",\n args: [auth.telegramId, normalized],\n });\n if (already.rows.length > 0) return c.json({ error: \"already_claimed\" }, 400);\n\n await sqlite.batch([\n { sql: \"INSERT INTO user_promos (user_id, promo_code) VALUES (?, ?)\", args: [auth.telegramId, normalized] },\n { sql: \"UPDATE promo_codes SET current_activations = current_activations + 1 WHERE code = ?\", args: [normalized] },\n { sql: \"UPDATE users SET balance = balance + ? WHERE telegram_id = ?\", args: [promoRow.reward_amount, auth.telegramId] },\n ]);\n await recordTransaction(auth.telegramId, promoRow.reward_amount, \"promo\", \"points\");\n\n return c.json({ success: true, reward: promoRow.reward_amount });\n});\n\nexport default promo;\n",[],[244,246],"90ad56d5-1c41-4be9-8a2e-8cba59a83bff","payments.ts","3abb06c8-a7fa-11f1-a300-1607ee4eb77e",8,["D",1788482859401],"import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { requireAuth, BOT_TOKEN, PROVIDER_TOKEN_STARS } from \"../telegram.ts\";\nimport { adjustBalance, recordTransaction } from \"../db.ts\";\n\nconst payments = new Hono();\n\npayments.post(\"/payments/create-invoice\", async (c) => {\n const auth = await requireAuth(c);\n if (!auth) return c.json({ error: \"unauthorized\" }, 401);\n\n const { amount, method } = await c.req.json().catch(() => ({}));\n if (!amount || amount <= 0) return c.json({ error: \"invalid_amount\" }, 400);\n\n if (method === \"ton\") {\n return c.json({\n method: \"ton\",\n payload: {\n address: Deno.env.get(\"TON_WALLET_ADDRESS\") || \"UQCTON_WALLET_PLACEHOLDER\",\n amount: String(amount),\n comment: `topup:${auth.telegramId}`,\n },\n });\n }\n\n const payload = JSON.stringify({ userId: auth.telegramId, amount, ts: Date.now() });\n const res = await fetch(`https://api.telegram.org/bot${BOT_TOKEN}/createInvoiceLink`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n title: \"Astric Games Top-Up\",\n description: `Add ${amount} Stars to your balance`,\n payload,\n provider_token: PROVIDER_TOKEN_STARS,\n currency: \"XTR\",\n prices: [{ label: \"Balance Top-Up\", amount: Math.round(amount) }],\n }),\n });\n const data = await res.json().catch(() => ({ ok: false }));\n if (!data.ok) return c.json({ error: \"telegram_error\", details: data }, 502);\n\n return c.json({ method: \"stars\", invoice_link: data.result });\n});\n\npayments.post(\"/webhook/telegram\", async (c) => {\n const update = await c.req.json().catch(() => ({}));\n\n if (update.pre_checkout_query) {\n const pcq = update.pre_checkout_query;\n await fetch(`https://api.telegram.org/bot${BOT_TOKEN}/answerPreCheckoutQuery`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ pre_checkout_query_id: pcq.id, ok: true }),\n });\n return c.json({ ok: true });\n }\n\n const message = update.message;\n if (message?.successful_payment) {\n const sp = message.successful_payment;\n let payload: any = {};\n try {\n payload = JSON.parse(sp.invoice_payload);\n } catch {\n // ignore\n }\n const userId = payload.userId ?? String(message.from?.id ?? \"\");\n const amount = payload.amount ?? sp.total_amount;\n if (userId) {\n await adjustBalance(userId, amount);\n await recordTransaction(userId, amount, \"topup\", \"stars\");\n }\n }\n\n return c.json({ ok: true });\n});\n\npayments.get(\"/transactions\", async (c) => {\n const auth = await requireAuth(c);\n if (!auth) return c.json({ error: \"unauthorized\" }, 401);\n const res = await sqlite.execute({\n sql: \"SELECT * FROM transactions WHERE user_id = ? ORDER BY created_at DESC LIMIT 50\",\n args: [auth.telegramId],\n });\n return c.json({ transactions: res.rows });\n});\n\nexport default payments;\n",[],[244,254],"d7dd5a63-8fd7-4361-a3e7-ab6978048ca6","games.ts","48afc6c4-a7fa-11f1-88b7-1607ee4eb77e",9,["D",1788482882819],"import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { requireAuth } from \"../telegram.ts\";\nimport { adjustBalance, getUser, recordTransaction } from \"../db.ts\";\n\nconst games = new Hono();\n\n// ---------------------------------------------------------------------------\n// Shared HMAC helper\n// ---------------------------------------------------------------------------\nasync function hmacHex(seed: string, msg: string): Promise {\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(seed), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\n \"sign\",\n ]);\n const sig = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(msg));\n return [...new Uint8Array(sig)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n// ---------------------------------------------------------------------------\n// CRASH (\"Booster\") — provably-fair, crash point derived server-side via HMAC\n// ---------------------------------------------------------------------------\nasync function generateCrashPoint(roundId: string): Promise {\n const serverSeed = Deno.env.get(\"CRASH_SERVER_SEED\") || \"astric-crash-secret-seed\";\n const hex = await hmacHex(serverSeed, roundId);\n const hs = parseInt(hex.slice(0, 13), 16);\n const houseEdge = 0.04;\n if (hs % 33 === 0) return 1.0; // instant-crash chance, standard bustabit-style algorithm\n const maxVal = Math.pow(2, 52);\n const point = Math.floor((100 * maxVal * (1 - houseEdge)) / (maxVal - hs)) / 100;\n return Math.max(1.0, Math.min(point, 100));\n}\n\nfunction growthMultiplier(elapsedMs: number): number {\n return Math.min(100, Math.exp(elapsedMs * 0.00006));\n}\n\ngames.post(\"/games/booster/launch\", async (c) => {\n const auth = await requireAuth(c);\n if (!auth) return c.json({ error: \"unauthorized\" }, 401);\n\n const { bet_amount } = await c.req.json().catch(() => ({}));\n if (!bet_amount || bet_amount <= 0) return c.json({ error: \"invalid_bet\" }, 400);\n\n const user = await getUser(auth.telegramId);\n if (!user || user.balance < bet_amount) return c.json({ error: \"insufficient_balance\" }, 400);\n\n const roundId = crypto.randomUUID();\n const crashPoint = await generateCrashPoint(roundId);\n const startedAt = Date.now();\n\n await sqlite.execute({\n sql: \"INSERT INTO game_rounds (id, user_id, bet_amount, crash_point, started_at, status) VALUES (?, ?, ?, ?, ?, 'active')\",\n args: [roundId, auth.telegramId, bet_amount, crashPoint, startedAt],\n });\n await adjustBalance(auth.telegramId, -bet_amount);\n await recordTransaction(auth.telegramId, -bet_amount, \"crash_bet\", \"points\");\n\n return c.json({ round_id: roundId, started_at: startedAt });\n});\n\ngames.get(\"/games/booster/status\", async (c) => {\n const auth = await requireAuth(c);\n if (!auth) return c.json({ error: \"unauthorized\" }, 401);\n\n const roundId = c.req.query(\"round_id\");\n const res = await sqlite.execute({\n sql: \"SELECT * FROM game_rounds WHERE id = ? AND user_id = ?\",\n args: [roundId, auth.telegramId],\n });\n const round = res.rows[0] as any;\n if (!round) return c.json({ error: \"not_found\" }, 404);\n\n if (round.status !== \"active\") {\n return c.json({ status: round.status, crash_point: Number(round.crash_point) });\n }\n\n const elapsed = Date.now() - Number(round.started_at);\n const currentMultiplier = growthMultiplier(elapsed);\n\n if (currentMultiplier >= Number(round.crash_point)) {\n await sqlite.execute({ sql: \"UPDATE game_rounds SET status = 'crashed' WHERE id = ?\", args: [roundId] });\n return c.json({ status: \"crashed\", crash_point: Number(round.crash_point) });\n }\n\n return c.json({ status: \"active\", multiplier: currentMultiplier });\n});\n\ngames.post(\"/games/booster/eject\", async (c) => {\n const auth = await requireAuth(c);\n if (!auth) return c.json({ error: \"unauthorized\" }, 401);\n\n const { round_id } = await c.req.json().catch(() => ({}));\n const res = await sqlite.execute({\n sql: \"SELECT * FROM game_rounds WHERE id = ? AND user_id = ?\",\n args: [round_id, auth.telegramId],\n });\n const round = res.rows[0] as any;\n if (!round) return c.json({ error: \"not_found\" }, 404);\n if (round.status !== \"active\") return c.json({ error: \"round_closed\", status: round.status }, 400);\n\n const elapsed = Date.now() - Number(round.started_at);\n const currentMultiplier = growthMultiplier(elapsed);\n\n if (currentMultiplier >= Number(round.crash_point)) {\n await sqlite.execute({ sql: \"UPDATE game_rounds SET status = 'crashed' WHERE id = ?\", args: [round_id] });\n return c.json({ success: false, crashed: true, crash_point: Number(round.crash_point) });\n }\n\n const payout = Number(round.bet_amount) * currentMultiplier;\n await adjustBalance(auth.telegramId, payout);\n await recordTransaction(auth.telegramId, payout, \"crash_win\", \"points\");\n await sqlite.execute({ sql: \"UPDATE game_rounds SET status = 'cashed_out' WHERE id = ?\", args: [round_id] });\n\n return c.json({ success: true, multiplier: currentMultiplier, payout });\n});\n\n// ---------------------------------------------------------------------------\n// ROULETTE (\"Wheel\") — Alpha x2, Beta x2, Gamma x14\n// ---------------------------------------------------------------------------\nconst SECTORS: Record = { alpha: 2, beta: 2, gamma: 14 };\nconst WEIGHTS: Record = { alpha: 0.46, beta: 0.46, gamma: 0.08 };\n\nfunction spinWheel(): string {\n const r = Math.random();\n let acc = 0;\n for (const [sector, weight] of Object.entries(WEIGHTS)) {\n acc += weight;\n if (r <= acc) return sector;\n }\n return \"alpha\";\n}\n\ngames.post(\"/games/wheel/spin\", async (c) => {\n const auth = await requireAuth(c);\n if (!auth) return c.json({ error: \"unauthorized\" }, 401);\n\n const { bet_amount, sector } = await c.req.json().catch(() => ({}));\n if (!bet_amount || bet_amount <= 0 || !SECTORS[sector]) return c.json({ error: \"invalid_bet\" }, 400);\n\n const user = await getUser(auth.telegramId);\n if (!user || user.balance < bet_amount) return c.json({ error: \"insufficient_balance\" }, 400);\n\n await adjustBalance(auth.telegramId, -bet_amount);\n await recordTransaction(auth.telegramId, -bet_amount, \"roulette_bet\", \"points\");\n\n const winningSector = spinWheel();\n const win = winningSector === sector;\n let payout = 0;\n if (win) {\n payout = bet_amount * SECTORS[sector];\n await adjustBalance(auth.telegramId, payout);\n await recordTransaction(auth.telegramId, payout, \"roulette_win\", \"points\");\n }\n\n return c.json({ winning_sector: winningSector, win, payout });\n});\n\n// ---------------------------------------------------------------------------\n// SPORTS PREDICTION\n// ---------------------------------------------------------------------------\nconst MATCHES = [\n { id: \"m1\", home: \"Nova FC\", away: \"Vortex United\", odds: { home: 1.8, draw: 3.2, away: 4.1 }, kickoff: \"2026-09-06T18:00:00Z\" },\n { id: \"m2\", home: \"Quantum Rangers\", away: \"Solar Athletic\", odds: { home: 2.4, draw: 3.0, away: 2.9 }, kickoff: \"2026-09-06T20:30:00Z\" },\n { id: \"m3\", home: \"Photon City\", away: \"Ember Rovers\", odds: { home: 1.5, draw: 4.0, away: 5.5 }, kickoff: \"2026-09-07T15:00:00Z\" },\n];\n\ngames.get(\"/games/matches\", (c) => c.json({ matches: MATCHES }));\n\ngames.post(\"/games/matches/predict\", async (c) => {\n const auth = await requireAuth(c);\n if (!auth) return c.json({ error: \"unauthorized\" }, 401);\n\n const { match_id, pick, stake } = await c.req.json().catch(() => ({}));\n const match = MATCHES.find((m) => m.id === match_id);\n if (!match || !stake || stake <= 0 || !match.odds[pick as keyof typeof match.odds]) {\n return c.json({ error: \"invalid_prediction\" }, 400);\n }\n\n const user = await getUser(auth.telegramId);\n if (!user || user.balance < stake) return c.json({ error: \"insufficient_balance\" }, 400);\n\n await adjustBalance(auth.telegramId, -stake);\n await recordTransaction(auth.telegramId, -stake, \"sports_bet\", \"points\");\n\n // Demo-friendly instant resolution, weighted by implied odds.\n const outcomes: (\"home\" | \"draw\" | \"away\")[] = [\"home\", \"draw\", \"away\"];\n const weights = outcomes.map((o) => 1 / match.odds[o]);\n const total = weights.reduce((a, b) => a + b, 0);\n const r = Math.random() * total;\n let acc = 0;\n let result: \"home\" | \"draw\" | \"away\" = outcomes[0];\n for (let i = 0; i < outcomes.length; i++) {\n acc += weights[i];\n if (r <= acc) {\n result = outcomes[i];\n break;\n }\n }\n\n const win = result === pick;\n let payout = 0;\n if (win) {\n payout = stake * match.odds[pick as keyof typeof match.odds];\n await adjustBalance(auth.telegramId, payout);\n await recordTransaction(auth.telegramId, payout, \"sports_win\", \"points\");\n }\n\n return c.json({ result, win, payout });\n});\n\nexport default games;\n",[],[244,262],"19c13754-8a4b-47be-9561-cd9ec9a6fa8d","config.ts","2cc5d26e-a7fa-11f1-b409-1607ee4eb77e",4,["D",1788482835985],"import { Hono } from \"npm:hono@4\";\nimport { getConfig } from \"../db.ts\";\n\nconst config = new Hono();\n\nconfig.get(\"/config\", async (c) => {\n const cfg = await getConfig();\n return c.json(cfg);\n});\n\nexport default config;\n",[],[244,270],"7fb9621c-9b8c-4d28-b52d-39c7082c602c","auth.ts","2bcb51a4-a7fa-11f1-b409-1607ee4eb77e",3,["D",1788482834342],"import { Hono } from \"npm:hono@4\";\nimport { validateInitData, isAdmin } from \"../telegram.ts\";\nimport { ensureUser } from \"../db.ts\";\n\nconst auth = new Hono();\n\nauth.post(\"/auth\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n const initData: string = body.initData ?? \"\";\n const result = await validateInitData(initData);\n\n if (!result.valid || !result.user) {\n return c.json({ error: \"invalid_init_data\" }, 401);\n }\n\n const telegramId = String(result.user.id);\n const username = result.user.username || result.user.first_name || \"Player\";\n const referrerId = result.startParam && result.startParam !== telegramId ? result.startParam : undefined;\n\n const user = await ensureUser(telegramId, username, referrerId);\n\n return c.json({\n user: {\n telegram_id: user.telegram_id,\n username: user.username,\n balance: user.balance,\n is_admin: isAdmin(telegramId),\n },\n });\n});\n\nexport default auth;\n",[],[244,278],"2118332d-6a72-44ed-bb13-5b251ec7b4e2","admin.ts","30a5e05e-a7fa-11f1-b5fd-1607ee4eb77e",5,["D",1788482842487],"import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { requireAuth, isAdmin } from \"../telegram.ts\";\nimport { adjustBalance, getUser, recordTransaction } from \"../db.ts\";\n\nconst admin = new Hono();\n\nadmin.use(\"/admin/*\", async (c, next) => {\n const auth = await requireAuth(c);\n if (!auth || !isAdmin(auth.telegramId)) {\n return c.json({ error: \"forbidden\" }, 403);\n }\n await next();\n});\n\nadmin.post(\"/admin/config\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n const updates: Record = body.updates ?? {};\n for (const [key, value] of Object.entries(updates)) {\n await sqlite.execute({\n sql: `INSERT INTO app_config (config_key, config_value) VALUES (?, ?)\n ON CONFLICT(config_key) DO UPDATE SET config_value = excluded.config_value`,\n args: [key, String(value)],\n });\n }\n return c.json({ success: true });\n});\n\nadmin.post(\"/admin/promo/create\", async (c) => {\n const { code, reward_amount, max_activations } = await c.req.json();\n if (!code || !reward_amount || !max_activations) {\n return c.json({ error: \"invalid_promo\" }, 400);\n }\n await sqlite.execute({\n sql: `INSERT INTO promo_codes (code, reward_amount, max_activations, current_activations) VALUES (?, ?, ?, 0)\n ON CONFLICT(code) DO UPDATE SET reward_amount = excluded.reward_amount, max_activations = excluded.max_activations`,\n args: [String(code).toUpperCase(), reward_amount, max_activations],\n });\n return c.json({ success: true });\n});\n\nadmin.get(\"/admin/users/search\", async (c) => {\n const q = c.req.query(\"q\") ?? \"\";\n const res = await sqlite.execute({\n sql: \"SELECT telegram_id, username, balance, created_at FROM users WHERE telegram_id LIKE ? OR username LIKE ? ORDER BY created_at DESC LIMIT 20\",\n args: [`%${q}%`, `%${q}%`],\n });\n return c.json({ users: res.rows });\n});\n\nadmin.post(\"/admin/users/adjust-balance\", async (c) => {\n const { telegram_id, amount } = await c.req.json();\n if (!telegram_id || typeof amount !== \"number\") {\n return c.json({ error: \"invalid_request\" }, 400);\n }\n await adjustBalance(telegram_id, amount);\n await recordTransaction(telegram_id, amount, \"admin_adjustment\", \"points\");\n const user = await getUser(telegram_id);\n return c.json({ user });\n});\n\nexport default admin;\n",[],[244,286],"b37e9bee-0671-47b5-bfae-f748f1b9a6a7",["D",1788482834342],[183,184,185,186,187,188,189],[244],"0f95aa03-974f-4dd6-88a3-6fc1a1573a35","index.tsx","5120e75c-a7fa-11f1-88b7-1607ee4eb77e","67f2f185-ff18-40f5-b88d-755e15000ea6",12,["D",1788482896985],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport App from \"./App.tsx\";\n\nconst tg = (window as any).Telegram?.WebApp;\nif (tg) {\n tg.ready();\n tg.expand();\n tg.setHeaderColor?.(\"#05060a\");\n tg.setBackgroundColor?.(\"#05060a\");\n}\n\nconst root = createRoot(document.getElementById(\"root\")!);\nroot.render();\n",[],[156,298],"097431bb-2992-4e1c-a32f-8644b4ea04be","index.html","4fd1c510-a7fa-11f1-b4a5-1607ee4eb77e",11,["D",1788482894784],"\n\n\n\n\nAstric Games\n\n\n\n\n\n\n

\n\n\n\n",[],[156,307],"deaf2510-3049-4891-b45e-fa4e336d0fb3","api.ts","55aedaae-a7fa-11f1-a4d3-1607ee4eb77e",13,["D",1788482904624],"function getInitData(): string {\n const tg = (window as any).Telegram?.WebApp;\n return tg?.initData || \"\";\n}\n\nasync function request(path: string, options: RequestInit = {}) {\n const res = await fetch(path, {\n ...options,\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Init-Data\": getInitData(),\n ...(options.headers || {}),\n },\n });\n const data = await res.json().catch(() => ({}));\n if (!res.ok) throw new Error(data.error || `request_failed_${res.status}`);\n return data;\n}\n\nexport const api = {\n auth: () => request(\"/api/auth\", { method: \"POST\", body: JSON.stringify({ initData: getInitData() }) }),\n getConfig: () => request(\"/api/config\"),\n\n claimPromo: (code: string) => request(\"/api/promo/claim\", { method: \"POST\", body: JSON.stringify({ code }) }),\n getReferrals: () => request(\"/api/referrals\"),\n getTransactions: () => request(\"/api/transactions\"),\n createInvoice: (amount: number, method: \"stars\" | \"ton\") =>\n request(\"/api/payments/create-invoice\", { method: \"POST\", body: JSON.stringify({ amount, method }) }),\n\n launchCrash: (bet_amount: number) =>\n request(\"/api/games/booster/launch\", { method: \"POST\", body: JSON.stringify({ bet_amount }) }),\n crashStatus: (round_id: string) => request(`/api/games/booster/status?round_id=${encodeURIComponent(round_id)}`),\n ejectCrash: (round_id: string) =>\n request(\"/api/games/booster/eject\", { method: \"POST\", body: JSON.stringify({ round_id }) }),\n\n spinWheel: (bet_amount: number, sector: string) =>\n request(\"/api/games/wheel/spin\", { method: \"POST\", body: JSON.stringify({ bet_amount, sector }) }),\n\n getMatches: () => request(\"/api/games/matches\"),\n predictMatch: (match_id: string, pick: string, stake: number) =>\n request(\"/api/games/matches/predict\", { method: \"POST\", body: JSON.stringify({ match_id, pick, stake }) }),\n\n adminUpdateConfig: (updates: Record) =>\n request(\"/api/admin/config\", { method: \"POST\", body: JSON.stringify({ updates }) }),\n adminCreatePromo: (code: string, reward_amount: number, max_activations: number) =>\n request(\"/api/admin/promo/create\", { method: \"POST\", body: JSON.stringify({ code, reward_amount, max_activations }) }),\n adminSearchUsers: (q: string) => request(`/api/admin/users/search?q=${encodeURIComponent(q)}`),\n adminAdjustBalance: (telegram_id: string, amount: number) =>\n request(\"/api/admin/users/adjust-balance\", { method: \"POST\", body: JSON.stringify({ telegram_id, amount }) }),\n};\n\nexport function haptic(type: \"light\" | \"medium\" | \"heavy\" = \"light\") {\n (window as any).Telegram?.WebApp?.HapticFeedback?.impactOccurred?.(type);\n}\n\nexport function hapticNotify(type: \"success\" | \"error\" | \"warning\" = \"success\") {\n (window as any).Telegram?.WebApp?.HapticFeedback?.notificationOccurred?.(type);\n}\n",[],[156,315],"6550fb3d-d112-450d-831b-e82ed6df79fc","App.tsx","60c0184a-a7fa-11f1-bb8b-1607ee4eb77e",14,["D",1788482923190],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport { AnimatePresence, motion } from \"https://esm.sh/framer-motion@11?deps=react@18.2.0,react-dom@18.2.0\";\nimport { api } from \"./api.ts\";\nimport Arcade from \"./screens/Arcade.tsx\";\nimport CrashGame from \"./screens/CrashGame.tsx\";\nimport Roulette from \"./screens/Roulette.tsx\";\nimport Sports from \"./screens/Sports.tsx\";\nimport Earn from \"./screens/Earn.tsx\";\nimport Profile from \"./screens/Profile.tsx\";\nimport Admin from \"./screens/Admin.tsx\";\n\nexport type UserState = { telegram_id: string; username: string; balance: number; is_admin: boolean };\n\ntype Tab = \"arcade\" | \"earn\" | \"profile\" | \"admin\";\ntype Screen = { tab: Tab; game?: \"crash\" | \"roulette\" | \"sports\" };\n\nexport default function App() {\n const [user, setUser] = useState(null);\n const [config, setConfig] = useState>({});\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n const [screen, setScreen] = useState({ tab: \"arcade\" });\n\n const refreshUser = async () => {\n try {\n const { user } = await api.auth();\n setUser(user);\n } catch {\n // ignore transient refresh failures\n }\n };\n\n useEffect(() => {\n (async () => {\n try {\n const [{ user }, cfg] = await Promise.all([api.auth(), api.getConfig()]);\n setUser(user);\n setConfig(cfg);\n } catch (e: any) {\n setError(e.message || \"Failed to load\");\n } finally {\n setLoading(false);\n }\n })();\n }, []);\n\n if (loading) {\n return (\n

\n \n

\n );\n }\n\n if (error || !user) {\n return (\n

⚠️

\n {error === \"invalid_init_data\"\n ? \"Unable to verify Telegram session. Please open this app from inside Telegram.\"\n : error || \"Something went wrong.\"}\n

\n );\n }\n\n const tabs: { id: Tab; label: string; icon: string }[] = [\n { id: \"arcade\", label: \"Arcade\", icon: \"🎮\" },\n { id: \"earn\", label: \"Earn\", icon: \"🎁\" },\n { id: \"profile\", label: \"Wallet\", icon: \"👛\" },\n ...(user.is_admin ? [{ id: \"admin\" as Tab, label: \"Admin\", icon: \"🛠️\" }] : []),\n ];\n\n return (\n

\n \n {screen.tab === \"arcade\" && !screen.game && (\n \n setScreen({ tab: \"arcade\", game: g })} onTopUp={() => setScreen({ tab: \"profile\" })} />\n \n )}\n {screen.game === \"crash\" && (\n \n setScreen({ tab: \"arcade\" })} onBalanceChange={refreshUser} />\n \n )}\n {screen.game === \"roulette\" && (\n \n setScreen({ tab: \"arcade\" })} onBalanceChange={refreshUser} />\n \n )}\n {screen.game === \"sports\" && (\n \n setScreen({ tab: \"arcade\" })} onBalanceChange={refreshUser} />\n \n )}\n {screen.tab === \"earn\" && (\n \n \n \n )}\n {screen.tab === \"profile\" && (\n \n \n \n )}\n {screen.tab === \"admin\" && user.is_admin && (\n \n \n \n )}\n \n

\n\n

\n {tabs.map((t) => (\n setScreen({ tab: t.id })}\n className={`flex flex-col items-center gap-1 px-4 py-2 rounded-xl transition-all ${\n screen.tab === t.id ? \"bg-gradient-to-b from-fuchsia-500/30 to-cyan-500/20 text-white\" : \"text-slate-400\"\n }`}\n >\n {t.icon}\n {t.label}\n \n ))}\n

\n );\n}\n",[],[156,323],"96a6eb77-11fc-4728-be6b-aacefdc24845","Sports.tsx","7fbc97b4-a7fa-11f1-b0bf-1607ee4eb77e",18,["D",1788482975175],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport { motion } from \"https://esm.sh/framer-motion@11?deps=react@18.2.0,react-dom@18.2.0\";\nimport { api, haptic, hapticNotify } from \"../api.ts\";\nimport type { UserState } from \"../App.tsx\";\n\nexport default function Sports({\n user,\n config,\n onBack,\n onBalanceChange,\n}: {\n user: UserState;\n config: Record;\n onBack: () => void;\n onBalanceChange: () => void;\n}) {\n const [matches, setMatches] = useState([]);\n const [stakes, setStakes] = useState>({});\n const [results, setResults] = useState>({});\n const [busy, setBusy] = useState(null);\n\n useEffect(() => {\n api.getMatches().then((r) => setMatches(r.matches));\n }, []);\n\n const predict = async (matchId: string, pick: string) => {\n const stake = stakes[matchId] ?? 10;\n if (stake <= 0 || stake > user.balance || busy) return;\n haptic(\"medium\");\n setBusy(matchId);\n try {\n const res = await api.predictMatch(matchId, pick, stake);\n setResults((r) => ({ ...r, [matchId]: { ...res, pick } }));\n onBalanceChange();\n hapticNotify(res.win ? \"success\" : \"error\");\n } finally {\n setBusy(null);\n }\n };\n\n return (\n

\n \n

{config.game_3_title || \"Sports\"}

\n\n {matches.map((m) => {\n const res = results[m.id];\n return (\n

\n {m.home}\n vs\n {m.away}\n

\n {([\"home\", \"draw\", \"away\"] as const).map((pick) => (\n predict(m.id, pick)}\n className={`rounded-xl py-2 text-xs font-bold border ${\n res?.pick === pick\n ? res.win\n ? \"bg-emerald-500/30 border-emerald-400\"\n : \"bg-rose-500/30 border-rose-400\"\n : \"bg-black/30 border-white/10\"\n }`}\n >\n

{pick}

x{m.odds[pick]}

\n \n ))}\n

\n Stake\n setStakes((s) => ({ ...s, [m.id]: Number(e.target.value) }))}\n className=\"flex-1 bg-transparent outline-none text-sm font-semibold\"\n />\n

\n {res && (\n

\n {res.win ? `Won ${res.payout.toFixed(1)}!` : `Result: ${res.result} — try next match`}\n

\n )}\n

\n );\n })}\n

\n );\n}\n",[],[156,157,331],"652dfa9b-b0f7-4e80-89e1-e3293fda6951","Roulette.tsx","7a2e367c-a7fa-11f1-b61d-1607ee4eb77e",17,["D",1788482965851],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"https://esm.sh/react@18.2.0\";\nimport { motion } from \"https://esm.sh/framer-motion@11?deps=react@18.2.0,react-dom@18.2.0\";\nimport { api, haptic, hapticNotify } from \"../api.ts\";\nimport type { UserState } from \"../App.tsx\";\n\nconst SECTORS = [\n { id: \"alpha\", label: \"Alpha\", mult: 2, color: \"from-fuchsia-500 to-purple-700\" },\n { id: \"beta\", label: \"Beta\", mult: 2, color: \"from-cyan-500 to-blue-700\" },\n { id: \"gamma\", label: \"Gamma\", mult: 14, color: \"from-amber-400 to-orange-600\" },\n];\n\nexport default function Roulette({\n user,\n config,\n onBack,\n onBalanceChange,\n}: {\n user: UserState;\n config: Record;\n onBack: () => void;\n onBalanceChange: () => void;\n}) {\n const [bet, setBet] = useState(10);\n const [sector, setSector] = useState(\"alpha\");\n const [spinning, setSpinning] = useState(false);\n const [rotation, setRotation] = useState(0);\n const [result, setResult] = useState<{ win: boolean; payout: number; winning_sector: string } | null>(null);\n\n const spin = async () => {\n if (bet <= 0 || bet > user.balance || spinning) return;\n haptic(\"medium\");\n setSpinning(true);\n setResult(null);\n try {\n const res = await api.spinWheel(bet, sector);\n onBalanceChange();\n const idx = SECTORS.findIndex((s) => s.id === res.winning_sector);\n const targetDeg = 360 * 4 + idx * (360 / SECTORS.length);\n setRotation((r) => r + targetDeg);\n setTimeout(() => {\n setSpinning(false);\n setResult(res);\n hapticNotify(res.win ? \"success\" : \"error\");\n }, 1800);\n } catch {\n setSpinning(false);\n }\n };\n\n return (\n

\n \n

{config.game_2_title || \"Roulette\"}

\n\n

\n \n

\n {spinning ? \"🎡\" : result ? (result.win ? \"🏆\" : \"💥\") : \"🎯\"}\n

\n\n {result && (\n

\n {result.win ? `You won ${result.payout.toFixed(1)}!` : `Landed on ${result.winning_sector} — try again`}\n

\n )}\n\n

\n {SECTORS.map((s) => (\n {\n haptic(\"light\");\n setSector(s.id);\n }}\n className={`rounded-2xl p-3 text-center bg-gradient-to-br ${s.color} border-2 ${\n sector === s.id ? \"border-white\" : \"border-transparent\"\n } opacity-90`}\n >\n

{s.label}

x{s.mult}

\n \n ))}\n

\n\n

\n Bet\n setBet(Number(e.target.value))}\n className=\"flex-1 bg-transparent outline-none font-semibold\"\n />\n {config.currency_symbol || \"⭐\"}\n

\n\n \n {spinning ? \"Spinning...\" : config.bet_button_text || \"Place Bet\"}\n \n

\n );\n}\n",[],[156,157,339],"70d375c2-2301-4bfc-ab35-d7c360b71635","Profile.tsx","8eabce3e-a7fa-11f1-8142-1607ee4eb77e",20,["D",1788483000214],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport { AnimatePresence, motion } from \"https://esm.sh/framer-motion@11?deps=react@18.2.0,react-dom@18.2.0\";\nimport { api, haptic } from \"../api.ts\";\nimport type { UserState } from \"../App.tsx\";\n\nexport default function Profile({\n user,\n config,\n onBalanceChange,\n}: {\n user: UserState;\n config: Record;\n onBalanceChange: () => void;\n}) {\n const [txs, setTxs] = useState([]);\n const [modalOpen, setModalOpen] = useState(false);\n const [amount, setAmount] = useState(100);\n const [method, setMethod] = useState<\"stars\" | \"ton\">(\"stars\");\n const [invoice, setInvoice] = useState<{ method: string; invoice_link?: string; payload?: any } | null>(null);\n\n useEffect(() => {\n api.getTransactions().then((r) => setTxs(r.transactions));\n }, []);\n\n const openTopUp = () => {\n haptic(\"light\");\n setModalOpen(true);\n setInvoice(null);\n };\n\n const createInvoice = async () => {\n haptic(\"medium\");\n const res = await api.createInvoice(amount, method);\n setInvoice(res);\n if (res.method === \"stars\" && res.invoice_link) {\n (window as any).Telegram?.WebApp?.openInvoice?.(res.invoice_link, (status: string) => {\n if (status === \"paid\") {\n onBalanceChange();\n setModalOpen(false);\n }\n });\n }\n };\n\n return (\n

Total Balance

\n {config.currency_symbol || \"⭐\"} {user.balance.toFixed(0)}\n

\n \n + Top Up\n \n

\n\n

Transaction History

\n {txs.length === 0 &&

No transactions yet

}\n {txs.map((t) => (\n

{String(t.type).replace(/_/g, \" \")}

{new Date(t.created_at).toLocaleString()}

= 0 ? \"text-emerald-400\" : \"text-rose-400\"}`}>\n {Number(t.amount) >= 0 ? \"+\" : \"\"}\n {Number(t.amount).toFixed(1)}\n

\n ))}\n

\n\n \n {modalOpen && (\n setModalOpen(false)}\n >\n e.stopPropagation()}\n className=\"w-full bg-[#0b0c14] rounded-t-3xl p-5 space-y-4 border-t border-white/10\"\n >\n

Top Up Balance

\n {([\"stars\", \"ton\"] as const).map((m) => (\n setMethod(m)}\n className={`flex-1 py-2 rounded-xl text-sm font-semibold ${\n method === m ? \"bg-gradient-to-r from-fuchsia-500 to-cyan-500\" : \"bg-white/5 border border-white/10\"\n }`}\n >\n {m === \"stars\" ? \"⭐ Stars\" : \"💎 TON\"}\n \n ))}\n

\n setAmount(Number(e.target.value))}\n className=\"w-full bg-black/30 border border-white/10 rounded-xl px-3 py-2 outline-none\"\n />\n \n Generate Invoice\n \n {invoice?.method === \"ton\" && (\n

\n Send {amount} TON to
\n {invoice.payload?.address}\n
\n Comment: {invoice.payload?.comment}\n

\n )}\n {invoice?.method === \"stars\" && invoice.invoice_link && (\n \n Open invoice\n \n )}\n \n \n )}\n \n

\n );\n}\n",[],[156,157,347],"e8419cea-423b-46d1-bbb9-4c2fce80b1b6","Earn.tsx","8686f800-a7fa-11f1-847b-1607ee4eb77e",19,["D",1788482986570],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport { AnimatePresence, motion } from \"https://esm.sh/framer-motion@11?deps=react@18.2.0,react-dom@18.2.0\";\nimport { api, haptic, hapticNotify } from \"../api.ts\";\nimport type { UserState } from \"../App.tsx\";\n\nexport default function Earn({ user, onBalanceChange }: { user: UserState; onBalanceChange: () => void }) {\n const [code, setCode] = useState(\"\");\n const [status, setStatus] = useState<{ type: \"success\" | \"error\"; msg: string } | null>(null);\n const [ref, setRef] = useState<{ link: string; invited: any[]; earnings: number } | null>(null);\n const [copied, setCopied] = useState(false);\n\n useEffect(() => {\n api.getReferrals().then(setRef);\n }, []);\n\n const claim = async () => {\n if (!code.trim()) return;\n haptic(\"light\");\n try {\n const res = await api.claimPromo(code.trim());\n setStatus({ type: \"success\", msg: `+${res.reward} credited!` });\n hapticNotify(\"success\");\n onBalanceChange();\n setCode(\"\");\n } catch (e: any) {\n const msg =\n e.message === \"already_claimed\"\n ? \"Already claimed\"\n : e.message === \"invalid_code\"\n ? \"Invalid code\"\n : e.message === \"exhausted\"\n ? \"Code fully redeemed\"\n : \"Could not claim code\";\n setStatus({ type: \"error\", msg });\n hapticNotify(\"error\");\n }\n };\n\n const copyLink = () => {\n if (!ref) return;\n navigator.clipboard?.writeText(ref.link);\n setCopied(true);\n haptic(\"light\");\n setTimeout(() => setCopied(false), 1500);\n };\n\n return (\n

Earn & Promo

\n\n

Redeem Promo Code

\n setCode(e.target.value.toUpperCase())}\n placeholder=\"ENTER CODE\"\n className=\"flex-1 bg-black/30 border border-white/10 rounded-xl px-3 py-2 text-sm outline-none\"\n />\n \n Claim\n \n

\n \n {status && (\n \n {status.msg}\n \n )}\n \n

\n\n

Referral Program

{ref?.invited.length ?? 0}

Invited

{ref?.earnings.toFixed(0) ?? 0}

Earned

\n \n {copied ? \"Copied! ✅\" : \"📋 Copy Referral Link\"}\n \n {ref && (\n

\n {ref.invited.map((u) => (\n

\n @{u.username || u.telegram_id}\n {new Date(u.created_at).toLocaleDateString()}\n

\n ))}\n

\n )}\n

\n );\n}\n",[],[156,157,355],"7a7b5045-60dd-4c9e-a53c-e3583ba93fa8","CrashGame.tsx","71496fea-a7fa-11f1-95e0-1607ee4eb77e",16,["D",1788482950931],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useRef, useState } from \"https://esm.sh/react@18.2.0\";\nimport { motion } from \"https://esm.sh/framer-motion@11?deps=react@18.2.0,react-dom@18.2.0\";\nimport { api, haptic, hapticNotify } from \"../api.ts\";\nimport type { UserState } from \"../App.tsx\";\n\nconst ASSET_URL = \"https://i.ibb.co/zHTxDG4M/image.png\";\n\ntype Phase = \"idle\" | \"running\" | \"crashed\" | \"cashed_out\";\n\nexport default function CrashGame({\n user,\n config,\n onBack,\n onBalanceChange,\n}: {\n user: UserState;\n config: Record;\n onBack: () => void;\n onBalanceChange: () => void;\n}) {\n const [bet, setBet] = useState(10);\n const [phase, setPhase] = useState(\"idle\");\n const [multiplier, setMultiplier] = useState(1);\n const [roundId, setRoundId] = useState(null);\n const [result, setResult] = useState<{ payout?: number; crash_point?: number } | null>(null);\n const [busy, setBusy] = useState(false);\n const pollRef = useRef(null);\n\n useEffect(() => {\n return () => {\n if (pollRef.current) clearInterval(pollRef.current);\n };\n }, []);\n\n const launch = async () => {\n if (bet <= 0 || bet > user.balance || busy) return;\n haptic(\"medium\");\n setResult(null);\n setBusy(true);\n try {\n const { round_id } = await api.launchCrash(bet);\n setRoundId(round_id);\n setPhase(\"running\");\n setMultiplier(1);\n onBalanceChange();\n\n pollRef.current = window.setInterval(async () => {\n try {\n const status = await api.crashStatus(round_id);\n if (status.status === \"active\") {\n setMultiplier(status.multiplier);\n } else if (status.status === \"crashed\") {\n setMultiplier(status.crash_point);\n setPhase(\"crashed\");\n setResult({ crash_point: status.crash_point });\n hapticNotify(\"error\");\n if (pollRef.current) clearInterval(pollRef.current);\n } else {\n if (pollRef.current) clearInterval(pollRef.current);\n }\n } catch {\n // ignore transient poll errors\n }\n }, 250);\n } catch {\n // insufficient balance / invalid bet — silently ignored, button stays enabled\n } finally {\n setBusy(false);\n }\n };\n\n const eject = async () => {\n if (!roundId || phase !== \"running\") return;\n haptic(\"heavy\");\n try {\n const res = await api.ejectCrash(roundId);\n if (pollRef.current) clearInterval(pollRef.current);\n if (res.success) {\n setPhase(\"cashed_out\");\n setMultiplier(res.multiplier);\n setResult({ payout: res.payout });\n hapticNotify(\"success\");\n } else {\n setPhase(\"crashed\");\n setResult({ crash_point: res.crash_point });\n hapticNotify(\"error\");\n }\n onBalanceChange();\n } catch {\n // ignore\n }\n };\n\n // Bezier trajectory: bottom-left -> top-right, progress driven by log(multiplier)\n const progress = Math.max(0, Math.min(1, Math.log(multiplier) / Math.log(20)));\n const p0 = { x: 10, y: 88 };\n const p1 = { x: 30, y: 88 };\n const p2 = { x: 55, y: 22 };\n const p3 = { x: 86, y: 10 };\n const t = progress;\n const bx = Math.pow(1 - t, 3) * p0.x + 3 * Math.pow(1 - t, 2) * t * p1.x + 3 * (1 - t) * t * t * p2.x + Math.pow(t, 3) * p3.x;\n const by = Math.pow(1 - t, 3) * p0.y + 3 * Math.pow(1 - t, 2) * t * p1.y + 3 * (1 - t) * t * t * p2.y + Math.pow(t, 3) * p3.y;\n\n return (\n

\n \n

{config.game_1_title || \"Crash\"}

\n\n

\n\n {phase === \"idle\" && (\n

\n Place a bet to launch 🚀\n

\n )}\n\n {phase !== \"idle\" && (\n <>\n \n

\n \n \n {multiplier.toFixed(2)}x\n

\n \n )}\n\n {(phase === \"crashed\" || phase === \"cashed_out\") && (\n

\n \n {phase === \"cashed_out\" ? `+${result?.payout?.toFixed(1)} won!` : `Crashed at ${result?.crash_point?.toFixed(2)}x`}\n

\n )}\n

\n\n

\n Bet\n setBet(Number(e.target.value))}\n disabled={phase === \"running\"}\n className=\"flex-1 bg-transparent outline-none text-white font-semibold\"\n />\n {config.currency_symbol || \"⭐\"}\n

\n\n {phase !== \"running\" ? (\n \n {config.bet_button_text || \"Place Bet\"} 🚀\n \n ) : (\n \n Eject @ {multiplier.toFixed(2)}x\n \n )}\n

\n );\n}\n",[],[156,157,363],"5576c216-4231-48c8-a9e3-790f798fd9ee","Arcade.tsx","65f6133c-a7fa-11f1-8800-1607ee4eb77e",15,["D",1788482931932],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"https://esm.sh/react@18.2.0\";\nimport { motion } from \"https://esm.sh/framer-motion@11?deps=react@18.2.0,react-dom@18.2.0\";\nimport { haptic } from \"../api.ts\";\nimport type { UserState } from \"../App.tsx\";\n\nexport default function Arcade({\n user,\n config,\n onOpenGame,\n onTopUp,\n}: {\n user: UserState;\n config: Record;\n onOpenGame: (g: \"crash\" | \"roulette\" | \"sports\") => void;\n onTopUp: () => void;\n}) {\n const cards = [\n {\n id: \"crash\" as const,\n title: config.game_1_title || \"Crash\",\n subtitle: config.game_1_subtitle || \"Ride the rocket, cash out before it pops\",\n emoji: \"🚀\",\n gradient: \"from-fuchsia-600/40 to-purple-900/40\",\n },\n {\n id: \"roulette\" as const,\n title: config.game_2_title || \"Roulette\",\n subtitle: config.game_2_subtitle || \"Spin the wheel of fortune\",\n emoji: \"🎡\",\n gradient: \"from-cyan-600/40 to-blue-900/40\",\n },\n {\n id: \"sports\" as const,\n title: config.game_3_title || \"Sports\",\n subtitle: config.game_3_subtitle || \"Predict match outcomes\",\n emoji: \"⚽\",\n gradient: \"from-emerald-600/40 to-teal-900/40\",\n },\n ];\n\n return (\n

{config.welcome_message || \"Welcome to\"}

\n {config.app_name || \"Astric Games\"}\n

\n {config.currency_symbol || \"⭐\"}\n {user.balance.toFixed(0)}\n

\n\n {\n haptic(\"light\");\n onTopUp();\n }}\n className=\"w-full rounded-2xl py-3 font-semibold bg-gradient-to-r from-fuchsia-500 to-cyan-500 shadow-lg shadow-fuchsia-500/20\"\n >\n + Top Up Stars / TON\n \n\n

\n {cards.map((c) => (\n {\n haptic(\"medium\");\n onOpenGame(c.id);\n }}\n className={`w-full text-left rounded-3xl p-5 border border-white/10 bg-gradient-to-br ${c.gradient} backdrop-blur-xl relative overflow-hidden`}\n >\n

{c.emoji}

{c.title}

{c.subtitle}

\n \n ))}\n

\n );\n}\n",[],[156,157,371],["D",1788483015700],[],[156,157,65],"01fef064-57c6-4e54-ac0c-479d618aad30",["D",1788482931932],[171,172,173,174,175,176,177],[156,157],"a015ea0e-fcef-4702-bb3c-3747384b7ac2",["D",1788482894784],[170,178,179,180,181],[156],["D",1788482227176],["D",1789527643940],{"_11":12,"_125":71},{"_11":12,"_121":71,"_70":71,"_30":69,"_122":123,"_124":24},{"_38":112,"_13":16,"_32":35,"_113":73,"_114":-5,"_115":-5,"_116":-5,"_117":-5,"_118":-5,"_119":14,"_120":12},"ctx",{"_53":-5,"_144":427,"_428":429,"_430":431,"_432":24,"_433":24,"_434":24,"_435":86,"_436":-5,"_437":-7,"_438":-7,"_439":26,"_440":24,"_441":24,"_442":-5,"_443":24,"_444":24,"_445":24,"_446":-5},"ENV",{"_398":399,"_400":401,"_402":16,"_403":404,"_405":406,"_407":408,"_409":410,"_411":412,"_413":414,"_415":416,"_417":418,"_419":420,"_421":422,"_423":424,"_425":426},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · Admin.tsx