[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_342":343,"_344":345},"routes/_app.x.$handle.$name",{"_101":100,"_32":46,"_110":91,"_27":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_20":-5,"_122":-5,"_123":-5,"_124":25,"_125":126,"_127":60,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",44,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","lib/time.ts","latestPath","fileId","f8591422-afbb-11f1-9021-1607ee4eb77e","name","time.ts","fileType","script","content","import { isBlocked, openBookingsOnDate, type Settings } from \"./db.ts\";\n\n// Saudi Arabia & Bahrain are UTC+3 with no DST.\nconst TZ_OFFSET_MIN = 180;\n\nexport function nowRiyadh() {\n const d = new Date(Date.now() + TZ_OFFSET_MIN * 60_000);\n return { date: d.toISOString().slice(0, 10), minutes: d.getUTCHours() * 60 + d.getUTCMinutes() };\n}\n\nexport const toMin = (t: string) => {\n const [h, m] = t.split(\":\").map(Number);\n return h * 60 + m;\n};\n\nexport const fromMin = (n: number) =>\n `${String(Math.floor(n / 60)).padStart(2, \"0\")}:${String(n % 60).padStart(2, \"0\")}`;\n\nexport function isDate(s: string) {\n if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(s)) return false;\n const d = new Date(s + \"T00:00:00Z\");\n return !isNaN(d.getTime()) && d.toISOString().slice(0, 10) === s;\n}\n\nexport const isTime = (s: string) => /^([01]\\d|2[0-3]):[0-5]\\d$/.test(s);\n\nexport function addDays(date: string, n: number) {\n const d = new Date(date + \"T00:00:00Z\");\n d.setUTCDate(d.getUTCDate() + n);\n return d.toISOString().slice(0, 10);\n}\n\nconst daysBetween = (from: string, to: string) =>\n Math.round((Date.parse(to + \"T00:00:00Z\") - Date.parse(from + \"T00:00:00Z\")) / 86_400_000);\n\nexport const dayOfWeek = (date: string) => new Date(date + \"T00:00:00Z\").getUTCDay();\n\nexport const AR_DAYS = [\"الأحد\", \"الاثنين\", \"الثلاثاء\", \"الأربعاء\", \"الخميس\", \"الجمعة\", \"السبت\"];\n\nexport function fmtTime(t: string) {\n const m = toMin(t);\n const h = Math.floor(m / 60) % 24;\n return `${h % 12 || 12}:${String(m % 60).padStart(2, \"0\")} ${h < 12 ? \"ص\" : \"م\"}`;\n}\n\nconst dateFmt = new Intl.DateTimeFormat(\"ar-SA-u-ca-gregory-nu-latn\", {\n weekday: \"long\",\n day: \"numeric\",\n month: \"long\",\n year: \"numeric\",\n timeZone: \"UTC\",\n});\nexport const fmtDate = (date: string) => dateFmt.format(new Date(date + \"T00:00:00Z\"));\n\nexport async function availableSlots(date: string, duration: number, s: Settings) {\n const fail = (reason: string) => ({ ok: false, reason, slots: [] as string[] });\n if (!isDate(date)) return fail(\"اختاري تاريخاً صحيحاً.\");\n const now = nowRiyadh();\n const dayIndex = daysBetween(now.date, date);\n if (dayIndex < 0 || dayIndex > s.maxDaysAhead) return fail(\"هذا التاريخ خارج فترة الحجز المتاحة.\");\n if (!s.workDays.includes(dayOfWeek(date))) return fail(\"هذا اليوم ليس من أيام العمل، اختاري يوماً آخر.\");\n if (await isBlocked(date)) return fail(\"هذا اليوم محجوز بالكامل، اختاري يوماً آخر.\");\n\n const taken = await openBookingsOnDate(date);\n const open = toMin(s.open);\n const close = toMin(s.close);\n const earliest = now.minutes + s.minNoticeHours * 60;\n const slots: string[] = [];\n for (let t = open; t + duration <= close; t += s.slotStep) {\n if (dayIndex * 1440 + t < earliest) continue;\n const clash = taken.some((b) =>\n b.start_min < t + duration + s.bufferMin && t < b.start_min + b.duration_min + s.bufferMin\n );\n if (!clash) slots.push(fromMin(t));\n }\n return slots.length\n ? { ok: true, reason: \"\", slots }\n : fail(\"لا توجد أوقات متاحة في هذا اليوم، جرّبي يوماً آخر.\");\n}\n","import { isBlocked, openBookingsOnDate, type Settings } from \"./db.ts\";\n\n// Saudi Arabia & Bahrain are UTC+3 with no DST.\nconst TZ_OFFSET_MIN = 180;\n\nexport function nowRiyadh() {\n const d = new Date(Date.now() + TZ_OFFSET_MIN * 60_000);\n return { date: d.toISOString().slice(0, 10), minutes: d.getUTCHours() * 60 + d.getUTCMinutes() };\n}\n\nexport const toMin = (t: string) => {\n const [h, m] = t.split(\":\").map(Number);\n return h * 60 + m;\n};\n\nexport const fromMin = (n: number) =>\n `${String(Math.floor(n / 60)).padStart(2, \"0\")}:${String(n % 60).padStart(2, \"0\")}`;\n\nexport function isDate(s: string) {\n if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(s)) return false;\n const d = new Date(s + \"T00:00:00Z\");\n return !isNaN(d.getTime()) && d.toISOString().slice(0, 10) === s;\n}\n\nexport const isTime = (s: string) => /^([01]\\d|2[0-3]):[0-5]\\d$/.test(s);\n\nexport function addDays(date: string, n: number) {\n const d = new Date(date + \"T00:00:00Z\");\n d.setUTCDate(d.getUTCDate() + n);\n return d.toISOString().slice(0, 10);\n}\n\nconst daysBetween = (from: string, to: string) =>\n Math.round((Date.parse(to + \"T00:00:00Z\") - Date.parse(from + \"T00:00:00Z\")) / 86_400_000);\n\nexport const dayOfWeek = (date: string) => new Date(date + \"T00:00:00Z\").getUTCDay();\n\nexport const AR_DAYS = [\"الأحد\", \"الاثنين\", \"الثلاثاء\", \"الأربعاء\", \"الخميس\", \"الجمعة\", \"السبت\"];\n\nexport function fmtTime(t: string) {\n const m = toMin(t);\n const h = Math.floor(m / 60) % 24;\n return `${h % 12 || 12}:${String(m % 60).padStart(2, \"0\")} ${h < 12 ? \"ص\" : \"م\"}`;\n}\n\nconst dateFmt = new Intl.DateTimeFormat(\"ar-SA-u-ca-gregory-nu-latn\", {\n weekday: \"long\",\n day: \"numeric\",\n month: \"long\",\n year: \"numeric\",\n timeZone: \"UTC\",\n});\nexport const fmtDate = (date: string) => dateFmt.format(new Date(date + \"T00:00:00Z\"));\n\nexport async function availableSlots(date: string, duration: number, s: Settings) {\n const fail = (reason: string) => ({ ok: false, reason, slots: [] as string[] });\n if (!isDate(date)) return fail(\"اختاري تاريخاً صحيحاً.\");\n const now = nowRiyadh();\n const dayIndex = daysBetween(now.date, date);\n if (dayIndex < 0 || dayIndex > s.maxDaysAhead) return fail(\"هذا التاريخ خارج فترة الحجز المتاحة.\");\n if (!s.workDays.includes(dayOfWeek(date))) return fail(\"هذا اليوم ليس من أيام العمل، اختاري يوماً آخر.\");\n if (await isBlocked(date)) return fail(\"هذا اليوم محجوز بالكامل، اختاري يوماً آخر.\");\n\n const taken = await openBookingsOnDate(date);\n const open = toMin(s.open);\n const close = toMin(s.close);\n const earliest = now.minutes + s.minNoticeHours * 60;\n if (dayIndex * 1440 + close - duration < earliest) {\n const days = Math.ceil(s.minNoticeHours / 24);\n const span = days === 7 ? \"أسبوع\" : days === 14 ? \"أسبوعين\" : days === 30 ? \"شهر\" : `${days} يوماً`;\n return fail(`الحجز يكون قبل الموعد بـ${span} على الأقل، اختاري تاريخاً أبعد.`);\n }\n const slots: string[] = [];\n for (let t = open; t + duration <= close; t += s.slotStep) {\n if (dayIndex * 1440 + t < earliest) continue;\n const clash = taken.some((b) =>\n b.start_min < t + duration + s.bufferMin && t < b.start_min + b.duration_min + s.bufferMin\n );\n if (!clash) slots.push(fromMin(t));\n }\n return slots.length\n ? { ok: true, reason: \"\", slots }\n : fail(\"لا توجد أوقات متاحة في هذا اليوم، جرّبي يوماً آخر.\");\n}\n","createdAt",["D",1789376393742],"branchVersion","branchId","2fb3b93c-3153-49cc-928f-ccd798836746","id","d8f07974-33ec-460f-a8b5-8a56ac73d9bd","najla-makeup",["D",1789334949320],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","موقع نجلاء الغفيلي ميك اب ارتست — خدمات ونظام حجوزات","imageUrl","cca8102f-07bb-4295-b44a-38d66d1d3405","pinnedFileId","01a09cac-8e2f-7716-b801-b7ea38740c6d","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f1d6e-b169-7628-a2c5-3fdc2bb2972f","tursoName","d8f0797433ec460fa8b58a56ac73d9bd","tursoHostname","d8f0797433ec460fa8b58a56ac73d9bd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789519256886],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":56,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":46,"_99":100},"isOwned",52,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","asnfq50","handle","displayName","mfcbr4krn8-hash","avatar","https://avatars.githubusercontent.com/u/294484094?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":337,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":338,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":339,"_85":340,"_87":341,"_89":25},"tree",[196,198,203,207,208,214,215],"files",[196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215],"counts",{"_186":64,"_187":145,"_188":64,"_189":190,"_191":192},"contents",[132,133,134,135,136,137,138],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":180,"_32":181,"_30":182,"_141":-5,"_42":43,"_41":183,"_143":60,"_39":184,"_13":64,"_34":162,"_36":-5,"_24":25,"_148":-5,"_27":185},{"_44":174,"_32":175,"_30":176,"_141":-5,"_42":43,"_41":177,"_143":60,"_39":178,"_13":64,"_34":162,"_36":-5,"_24":25,"_148":-5,"_27":179},{"_44":170,"_32":51,"_30":171,"_141":-5,"_42":43,"_41":145,"_143":60,"_39":172,"_13":64,"_34":162,"_36":-5,"_24":25,"_148":-5,"_27":173},{"_44":164,"_32":165,"_30":166,"_141":-5,"_42":43,"_41":167,"_143":60,"_39":168,"_13":64,"_34":162,"_36":-5,"_24":25,"_148":-5,"_27":169},{"_44":157,"_32":158,"_30":159,"_141":-5,"_42":43,"_41":160,"_143":60,"_39":161,"_13":64,"_34":162,"_36":-5,"_24":25,"_148":-5,"_27":163},{"_44":150,"_32":151,"_30":152,"_141":-5,"_42":43,"_41":153,"_143":60,"_39":154,"_13":145,"_34":20,"_36":155,"_24":25,"_148":-5,"_27":156},{"_44":139,"_32":140,"_30":58,"_141":-5,"_42":43,"_41":142,"_143":25,"_39":144,"_13":145,"_34":146,"_36":147,"_24":25,"_148":46,"_27":149},"c013bed7-cc58-42f0-a813-ec40382a4629","index.tsx","parentId",11,"latest",["D",1789336142658],1,"http","/** @jsxImportSource npm:hono@4/jsx */\nimport { Hono } from \"npm:hono@4\";\nimport type { Context } from \"npm:hono@4\";\nimport { serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport * as db from \"./lib/db.ts\";\nimport type { BookingView, Settings, Status } from \"./lib/db.ts\";\nimport { addDays, availableSlots, isDate, isTime, nowRiyadh, toMin } from \"./lib/time.ts\";\nimport { CITIES, isLocation, normalizePhone, toLatinDigits } from \"./lib/format.ts\";\nimport { checkPassword, clientIp, endSession, requireAdmin, startSession } from \"./lib/auth.ts\";\nimport { BookingPage, BookPage, HomePage, NotFoundPage } from \"./views/public.tsx\";\nimport { BookingsAdmin, GalleryAdmin, LoginPage, ServicesAdmin, SettingsAdmin } from \"./views/admin.tsx\";\n\nconst app = new Hono();\n\ntype Body = Record;\nconst str = (b: Body, key: string, max = 500) => {\n const v = b[key];\n return typeof v === \"string\" ? v.trim().slice(0, max) : \"\";\n};\nconst int = (raw: string, min: number, max: number, fallback: number) => {\n const n = Number(toLatinDigits(raw));\n return raw !== \"\" && Number.isInteger(n) && n >= min && n <= max ? n : fallback;\n};\nconst clampPeople = (raw: string) => int(raw, 1, 6, 1);\n\nasync function render(c: Context, el: unknown, status = 200) {\n const html = await (el as { toString(): string | Promise }).toString();\n return c.html(\"\" + html, status as 200);\n}\n\napp.use(\"*\", async (c, next) => {\n await db.ensureSchema();\n await next();\n try {\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"strict-origin-when-cross-origin\");\n if (c.req.path.startsWith(\"/admin\")) {\n c.header(\"X-Frame-Options\", \"DENY\");\n c.header(\"Cache-Control\", \"no-store\");\n }\n } catch {\n // some responses have immutable headers\n }\n});\n\n// ── Public site ─────────────────────────────────────────────\napp.get(\"/\", async (c) => {\n const [s, services, gallery] = await Promise.all([\n db.getSettings(),\n db.listServices(true),\n db.listGallery(true),\n ]);\n return render(c, );\n});\n\nfunction bookingRange(s: Settings) {\n const today = nowRiyadh().date;\n return { minDate: today, maxDate: addDays(today, s.maxDaysAhead) };\n}\n\napp.get(\"/book\", async (c) => {\n const [s, services] = await Promise.all([db.getSettings(), db.listServices(true)]);\n const values = { service_id: c.req.query(\"service\") ?? \"\", people: \"1\" };\n return render(c, );\n});\n\napp.get(\"/api/slots\", async (c) => {\n const [s, service] = await Promise.all([\n db.getSettings(),\n db.getService(Number(c.req.query(\"service\"))),\n ]);\n c.header(\"Cache-Control\", \"no-store\");\n if (!service || !service.active) return c.json({ ok: false, reason: \"الخدمة غير متاحة.\", slots: [] });\n const people = clampPeople(c.req.query(\"people\") ?? \"1\");\n return c.json(await availableSlots(c.req.query(\"date\") ?? \"\", service.duration_min * people, s));\n});\n\nconst BOOK_FIELDS = [\"service_id\", \"people\", \"location_type\", \"city\", \"date\", \"time\", \"name\", \"phone\", \"notes\"];\n\napp.post(\"/book\", async (c) => {\n const body = (await c.req.parseBody()) as Body;\n if (str(body, \"website\")) return c.redirect(\"/\"); // honeypot\n const v: Record = Object.fromEntries(BOOK_FIELDS.map((k) => [k, str(body, k, 1000)]));\n const [s, services] = await Promise.all([db.getSettings(), db.listServices(true)]);\n const fail = (error: string) =>\n render(c, , 422);\n\n const service = services.find((x) => String(x.id) === v.service_id);\n if (!service) return fail(\"اختاري الخدمة المطلوبة.\");\n const name = v.name.slice(0, 80);\n if (name.length < 2) return fail(\"اكتبي الاسم.\");\n const phone = normalizePhone(v.phone);\n if (!phone) return fail(\"رقم الجوال غير صحيح. اكتبيه مثل 05xxxxxxxx أو مع رمز الدولة.\");\n if (!isLocation(v.location_type) || (v.location_type === \"studio\" && !s.allowStudio)) {\n return fail(\"اختاري مكان الخدمة.\");\n }\n const city = CITIES.includes(v.city) ? v.city : \"\";\n if (v.location_type !== \"studio\" && !city) return fail(\"اختاري المدينة.\");\n\n const people = clampPeople(v.people);\n const duration = service.duration_min * people;\n const slots = await availableSlots(v.date, duration, s);\n if (!slots.ok) return fail(slots.reason);\n if (!slots.slots.includes(v.time)) return fail(\"الوقت المختار غير متاح، اختاري وقتاً آخر.\");\n if ((await db.countOpenBookingsByPhone(phone, nowRiyadh().date)) >= 3) {\n return fail(\"لديك عدة طلبات بانتظار التأكيد. تواصلي معنا عبر واتساب لإضافة المزيد.\");\n }\n\n const r = await db.createBooking({\n service_id: service.id,\n service_name: service.name,\n duration_min: duration,\n price: service.price == null ? null : service.price * people,\n date: v.date,\n time: v.time,\n start_min: toMin(v.time),\n name,\n phone,\n location_type: v.location_type,\n city,\n people,\n notes: v.notes,\n status: \"pending\",\n }, s.bufferMin);\n if (!r.ok) return fail(\"سبقك حجز آخر على هذا الوقت، اختاري وقتاً آخر.\");\n return c.redirect(`/b/${r.code}`);\n});\n\napp.get(\"/b/:code\", async (c) => {\n const b = await db.getBookingByCode(c.req.param(\"code\").toUpperCase());\n if (!b) return render(c, , 404);\n c.header(\"Cache-Control\", \"no-store\");\n return render(c, );\n});\n\nfunction sniffMime(b: Uint8Array) {\n if (b[0] === 0x89 && b[1] === 0x50) return \"image/png\";\n if (b[0] === 0x52 && b[1] === 0x49 && b[8] === 0x57 && b[9] === 0x45) return \"image/webp\";\n return \"image/jpeg\";\n}\n\napp.get(\"/img/:kind{gallery|brand}/:name\", async (c) => {\n try {\n const res = await blob.get(`${c.req.param(\"kind\")}/${c.req.param(\"name\")}`);\n if (!res.ok) return c.notFound();\n const bytes = new Uint8Array(await res.arrayBuffer());\n return c.body(bytes, 200, { \"Content-Type\": sniffMime(bytes), \"Cache-Control\": \"public, max-age=86400\" });\n } catch {\n return c.notFound();\n }\n});\n\napp.get(\"/robots.txt\", async (c) => {\n const s = await db.getSettings();\n return c.text(\n s.indexable ? \"User-agent: *\\nDisallow: /admin\\nDisallow: /b/\\n\" : \"User-agent: *\\nDisallow: /\\n\",\n );\n});\n\napp.get(\"/public/*\", (c) => serveFile(c.req.path));\n\n// ── Admin ───────────────────────────────────────────────────\napp.use(\"/admin\", requireAdmin);\napp.use(\"/admin/*\", async (c, next) => {\n if (c.req.path === \"/admin/login\") return await next();\n return await requireAdmin(c, next);\n});\n\napp.get(\"/admin/login\", (c) => render(c, ));\n\napp.post(\"/admin/login\", async (c) => {\n const ip = clientIp(c);\n if ((await db.recentLoginFailures(ip)) >= 8) {\n return render(c, , 429);\n }\n const body = (await c.req.parseBody()) as Body;\n const password = typeof body.password === \"string\" ? body.password.slice(0, 200) : \"\";\n if (await checkPassword(password)) {\n await startSession(c);\n return c.redirect(\"/admin\");\n }\n await db.recordLoginFailure(ip);\n return render(c, , 401);\n});\n\napp.post(\"/admin/logout\", (c) => {\n endSession(c);\n return c.redirect(\"/admin/login\");\n});\n\nconst VIEWS: BookingView[] = [\"upcoming\", \"pending\", \"past\", \"all\"];\n\napp.get(\"/admin\", async (c) => {\n const today = nowRiyadh().date;\n const requested = c.req.query(\"view\") as BookingView;\n const view = VIEWS.includes(requested) ? requested : \"upcoming\";\n const [bookings, stats, services] = await Promise.all([\n db.listBookings(view, today),\n db.bookingStats(today, addDays(today, 7)),\n db.listServices(false),\n ]);\n return render(\n c,\n ,\n );\n});\n\napp.post(\"/admin/bookings/new\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const fail = (code: string) => c.redirect(`/admin?err=${code}`);\n const service = await db.getService(Number(str(b, \"service_id\")));\n if (!service) return fail(\"service\");\n const date = str(b, \"date\");\n if (!isDate(date)) return fail(\"date\");\n const time = str(b, \"time\").slice(0, 5);\n if (!isTime(time)) return fail(\"time\");\n const name = str(b, \"name\", 80);\n if (name.length < 2) return fail(\"name\");\n const phone = normalizePhone(str(b, \"phone\"));\n if (!phone) return fail(\"phone\");\n const people = clampPeople(str(b, \"people\"));\n const location = str(b, \"location_type\");\n const city = str(b, \"city\");\n const s = await db.getSettings();\n const r = await db.createBooking({\n service_id: service.id,\n service_name: service.name,\n duration_min: service.duration_min * people,\n price: service.price == null ? null : service.price * people,\n date,\n time,\n start_min: toMin(time),\n name,\n phone,\n location_type: isLocation(location) ? location : \"home\",\n city: CITIES.includes(city) ? city : \"\",\n people,\n notes: str(b, \"notes\", 1000),\n status: str(b, \"status\") === \"pending\" ? \"pending\" : \"confirmed\",\n }, s.bufferMin);\n return r.ok ? c.redirect(\"/admin?ok=added\") : fail(\"taken\");\n});\n\napp.post(\"/admin/bookings/:id/status\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const status = str(b, \"status\") as Status;\n if (!(db.STATUSES as readonly string[]).includes(status)) return c.text(\"bad request\", 400);\n await db.setBookingStatus(Number(c.req.param(\"id\")), status);\n const back = str(b, \"back\");\n return c.redirect(/^\\/admin(\\?[\\w=&]*)?$/.test(back) ? back : \"/admin\");\n});\n\nfunction serviceInput(b: Body): db.ServiceInput | null {\n const name = str(b, \"name\", 80);\n if (!name) return null;\n const price = toLatinDigits(str(b, \"price\")).replace(/[^\\d]/g, \"\");\n return {\n name,\n description: str(b, \"description\", 600),\n category: str(b, \"category\", 40),\n duration_min: int(str(b, \"duration_min\"), 15, 600, 60),\n price: price ? Math.min(Number(price), 1_000_000) : null,\n price_note: str(b, \"price_note\", 60),\n active: b.active === \"on\" ? 1 : 0,\n sort: int(str(b, \"sort\"), -1000, 1000, 0),\n };\n}\n\napp.get(\"/admin/services\", async (c) =>\n render(c, ));\n\napp.post(\"/admin/services\", async (c) => {\n const input = serviceInput((await c.req.parseBody()) as Body);\n if (input) await db.createService(input);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\napp.post(\"/admin/services/:id\", async (c) => {\n const input = serviceInput((await c.req.parseBody()) as Body);\n const id = Number(c.req.param(\"id\"));\n if (input && Number.isInteger(id)) await db.updateService(id, input);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\napp.post(\"/admin/services/:id/delete\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n if (Number.isInteger(id)) await db.deleteService(id);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\nconst IMAGE_TYPES = [\"image/jpeg\", \"image/png\", \"image/webp\"];\n\napp.get(\"/admin/gallery\", async (c) =>\n render(\n c,\n ,\n ));\n\napp.post(\"/admin/gallery\", async (c) => {\n const body = await c.req.parseBody({ all: true });\n const files = ([] as unknown[]).concat(body.photos ?? []).filter((f): f is File => f instanceof File);\n let added = 0;\n let rejected = 0;\n for (const f of files) {\n if (!IMAGE_TYPES.includes(f.type) || f.size === 0 || f.size > 5_000_000) {\n rejected++;\n continue;\n }\n const key = `gallery/${crypto.randomUUID()}`;\n await blob.set(key, new Uint8Array(await f.arrayBuffer()));\n await db.addGalleryItem(key, f.type);\n added++;\n }\n return c.redirect(`/admin/gallery?added=${added}&rejected=${rejected}`);\n});\n\napp.post(\"/admin/gallery/:id/:action{hero|toggle|delete}\", async (c) => {\n const item = await db.getGalleryItem(Number(c.req.param(\"id\")));\n if (item) {\n const action = c.req.param(\"action\");\n if (action === \"hero\") await db.makeGalleryHero(item.id);\n else if (action === \"toggle\") await db.toggleGalleryItem(item.id);\n else {\n await db.deleteGalleryItem(item.id);\n await blob.delete(item.blob_key).catch(() => {});\n }\n }\n return c.redirect(\"/admin/gallery\");\n});\n\napp.get(\"/admin/settings\", async (c) => {\n const today = nowRiyadh().date;\n const [s, blocked] = await Promise.all([db.getSettings(), db.listBlocked(today)]);\n return render(\n c,\n ,\n );\n});\n\napp.post(\"/admin/settings\", async (c) => {\n const b = (await c.req.parseBody({ all: true })) as Body;\n const cur = await db.getSettings();\n const workDays = [...new Set(([] as unknown[]).concat(b.workDays ?? []).map(Number))]\n .filter((d) => Number.isInteger(d) && d >= 0 && d <= 6)\n .sort();\n if (!workDays.length) return c.redirect(\"/admin/settings?err=days\");\n const open = isTime(str(b, \"open\")) ? str(b, \"open\") : cur.open;\n const close = isTime(str(b, \"close\")) ? str(b, \"close\") : cur.close;\n if (toMin(open) >= toMin(close)) return c.redirect(\"/admin/settings?err=hours\");\n const handle = (key: string, fallback: string) => {\n const v = str(b, key, 60).replace(/^@/, \"\");\n return /^[A-Za-z0-9._-]{1,40}$/.test(v) ? v : fallback;\n };\n const next: Settings = {\n ...cur,\n workDays,\n open,\n close,\n slotStep: int(str(b, \"slotStep\"), 5, 120, cur.slotStep),\n bufferMin: int(str(b, \"bufferMin\"), 0, 240, cur.bufferMin),\n minNoticeHours: int(str(b, \"minNoticeHours\"), 0, 720, cur.minNoticeHours),\n maxDaysAhead: int(str(b, \"maxDaysAhead\"), 1, 730, cur.maxDaysAhead),\n allowStudio: b.allowStudio === \"on\",\n whatsapp: normalizePhone(str(b, \"whatsapp\")) ?? cur.whatsapp,\n instagram: handle(\"instagram\", cur.instagram),\n snapchat: handle(\"snapchat\", cur.snapchat),\n followers: str(b, \"followers\", 30),\n tagline: str(b, \"tagline\", 300),\n about: str(b, \"about\", 3000),\n policy: str(b, \"policy\", 3000),\n announcement: str(b, \"announcement\", 300),\n indexable: b.indexable === \"on\",\n };\n await db.saveSettings(next);\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.post(\"/admin/blocked\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const date = str(b, \"date\");\n if (isDate(date)) await db.addBlocked(date, str(b, \"reason\", 80));\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.post(\"/admin/blocked/delete\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const date = str(b, \"date\");\n if (isDate(date)) await db.removeBlocked(date);\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.notFound((c) => render(c, , 404));\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","label",[140],"eea1a183-19dd-4dfc-b8f2-f299117b29db","README.md","01a09cac-8e2f-7716-b801-b39afe182f45",14,["D",1789336164645],"# موقع نجلاء الغفيلي — ميك اب ارتست\n\nموقع تعريفي + نظام حجوزات + لوحة إدارة. Hono JSX على Val Town، SQLite للبيانات، Blob للصور.\n\n## الصفحات\n- `/` الرئيسية: الواجهة، النبذة، الخدمات، المعرض، طريقة الحجز، التواصل\n- `/book` نموذج الحجز (الأوقات المتاحة تُحسب من `/api/slots`)\n- `/b/:code` صفحة حالة الحجز + إرسال التفاصيل عبر واتساب\n- `/admin` لوحة الإدارة: الحجوزات (تأكيد/إلغاء/حجز يدوي)، الخدمات والأسعار، المعرض (رفع/إخفاء/واجهة)، الإعدادات (أيام وساعات العمل، أيام مغلقة، النصوص، الظهور في البحث)\n\n## متغيرات البيئة\n- `ADMIN_PASSWORD` كلمة مرور اللوحة\n- `SESSION_SECRET` مفتاح توقيع الجلسة\n\n## منطق التوفر\nالحجز يشغل `مدة الخدمة × عدد الأشخاص` + فاصل راحة/تنقّل. الإدخال ذرّي في SQL فلا يمكن حجز وقتين متداخلين حتى مع طلبين متزامنين. الحجوزات بحالة «بانتظار التأكيد» تحجز الوقت مبدئياً.\n\n## الصور\n`data/gallery.json` بذرة أولية من حساب إنستقرام @najla_makeupartist تُنسخ إلى Blob عند أول تشغيل؛ بعدها تُدار الصور من `/admin/gallery`.\n",[151],"14393c21-7ac3-4629-bc0f-c1dea4cd24a0","views","37f26134-5ccd-45c7-af8e-dfb68d37fdd7",6,["D",1789335744271],"directory",[158],"3560576c-1b42-4904-a976-cd09fc693174","scripts","d9ed626f-6a6b-4a0c-8bd3-b02c5e341b18",25,["D",1789337465670],[165],"f3656f81-2ad6-48a5-b486-9ad100c511b4","01a09cac-8e2f-7716-b801-aca3218223d9",["D",1789334949320],[51],"12e38241-4680-415c-b8f1-041b0c3ded6c","lib","200fe74d-8ef8-4343-a5a1-297a2da2eb49",2,["D",1789335703767],[175],"fcb4ad75-7daf-47b5-8f84-99f7512b34b7","data","4d434050-292d-4b99-a6f7-e44461613dca",13,["D",1789336152387],[181],"pulls","branches","forks","envVars",{"_193":177,"_195":64},"connections",{"_193":64,"_194":64},"count","unfilledCount","emptyCount",{"_44":180,"_32":181,"_30":182,"_141":-5,"_42":43,"_41":183,"_143":60,"_39":334,"_13":64,"_34":162,"_36":-5,"_24":25,"_148":-5,"_217":335,"_27":336},{"_44":327,"_32":328,"_30":329,"_141":182,"_42":43,"_41":183,"_143":60,"_39":330,"_13":64,"_34":20,"_36":331,"_24":25,"_148":-5,"_217":332,"_27":333},{"_44":174,"_32":175,"_30":176,"_141":-5,"_42":43,"_41":177,"_143":60,"_39":324,"_13":64,"_34":162,"_36":-5,"_24":25,"_148":-5,"_217":325,"_27":326},{"_44":317,"_32":318,"_30":319,"_141":176,"_42":43,"_41":275,"_143":60,"_39":320,"_13":64,"_34":35,"_36":321,"_24":25,"_148":-5,"_217":322,"_27":323},{"_44":309,"_32":310,"_30":311,"_141":176,"_42":43,"_41":312,"_143":60,"_39":313,"_13":177,"_34":35,"_36":314,"_24":25,"_148":-5,"_217":315,"_27":316},{"_44":301,"_32":302,"_30":303,"_141":176,"_42":43,"_41":304,"_143":60,"_39":305,"_13":145,"_34":35,"_36":306,"_24":25,"_148":-5,"_217":307,"_27":308},{"_44":297,"_32":33,"_30":31,"_141":176,"_42":43,"_41":14,"_143":60,"_39":298,"_13":145,"_34":35,"_36":38,"_24":25,"_148":-5,"_217":299,"_27":300},{"_44":170,"_32":51,"_30":171,"_141":-5,"_42":43,"_41":145,"_143":60,"_39":294,"_13":64,"_34":162,"_36":-5,"_24":25,"_148":-5,"_217":295,"_27":296},{"_44":286,"_32":287,"_30":288,"_141":171,"_42":43,"_41":289,"_143":60,"_39":290,"_13":64,"_34":35,"_36":291,"_24":25,"_148":-5,"_217":292,"_27":293},{"_44":279,"_32":280,"_30":281,"_141":171,"_42":43,"_41":145,"_143":60,"_39":282,"_13":64,"_34":20,"_36":283,"_24":25,"_148":-5,"_217":284,"_27":285},{"_44":270,"_32":271,"_30":272,"_141":171,"_42":43,"_41":273,"_143":25,"_39":274,"_13":275,"_34":20,"_36":276,"_24":25,"_148":-5,"_217":277,"_27":278},{"_44":164,"_32":165,"_30":166,"_141":-5,"_42":43,"_41":167,"_143":60,"_39":267,"_13":64,"_34":162,"_36":-5,"_24":25,"_148":-5,"_217":268,"_27":269},{"_44":157,"_32":158,"_30":159,"_141":-5,"_42":43,"_41":160,"_143":60,"_39":264,"_13":64,"_34":162,"_36":-5,"_24":25,"_148":-5,"_217":265,"_27":266},{"_44":255,"_32":256,"_30":257,"_141":159,"_42":43,"_41":258,"_143":25,"_39":259,"_13":260,"_34":35,"_36":261,"_24":25,"_148":-5,"_217":262,"_27":263},{"_44":247,"_32":248,"_30":249,"_141":159,"_42":43,"_41":250,"_143":60,"_39":251,"_13":64,"_34":35,"_36":252,"_24":25,"_148":-5,"_217":253,"_27":254},{"_44":239,"_32":240,"_30":241,"_141":159,"_42":43,"_41":242,"_143":25,"_39":243,"_13":177,"_34":35,"_36":244,"_24":25,"_148":-5,"_217":245,"_27":246},{"_44":231,"_32":232,"_30":233,"_141":159,"_42":43,"_41":234,"_143":60,"_39":235,"_13":145,"_34":35,"_36":236,"_24":25,"_148":-5,"_217":237,"_27":238},{"_44":223,"_32":224,"_30":225,"_141":159,"_42":43,"_41":226,"_143":25,"_39":227,"_13":177,"_34":35,"_36":228,"_24":25,"_148":-5,"_217":229,"_27":230},{"_44":150,"_32":151,"_30":152,"_141":-5,"_42":43,"_41":153,"_143":60,"_39":220,"_13":145,"_34":20,"_36":155,"_24":25,"_148":-5,"_217":221,"_27":222},{"_44":139,"_32":140,"_30":58,"_141":-5,"_42":43,"_41":142,"_143":25,"_39":216,"_13":145,"_34":146,"_36":147,"_24":25,"_148":46,"_217":218,"_27":219},["D",1789336142658],"children",[],[140],["D",1789336164645],[],[151],"9fdaa66c-6da9-410f-b43a-32caffb82cf6","public.tsx","3fd93c0a-afbc-11f1-a6ad-1607ee4eb77e",29,["D",1789337557631],"/** @jsxImportSource npm:hono@4/jsx */\nimport type { Booking, GalleryItem, Service, Settings } from \"../lib/db.ts\";\nimport { CITIES, fmtDuration, fmtPrice, LOCATIONS, peopleLabel, STATUS_LABELS, waLink } from \"../lib/format.ts\";\nimport { fmtDate, fmtTime } from \"../lib/time.ts\";\nimport { Arrow, Social, type SocialName } from \"./icons.tsx\";\nimport { Layout } from \"./layout.tsx\";\nimport { Mark } from \"./mark.tsx\";\n\nexport const NAME = \"نجلاء الغفيلي\";\nconst src = (g: GalleryItem) => `/img/${g.blob_key}`;\n\nfunction Nav({ s, book = true }: { s?: Settings; book?: boolean }) {\n return (\n

\n \n {s?.announcement ?

{s.announcement}

: null}\n

\n );\n}\n\nfunction Footer({ s }: { s: Settings }) {\n const links: { name: SocialName; label: string; href: string; ltr?: boolean }[] = [\n { name: \"whatsapp\", label: \"واتساب\", href: waLink(s.whatsapp, \"مرحبا نجلاء 🌸\") },\n { name: \"instagram\", label: `@${s.instagram}`, href: `https://www.instagram.com/${s.instagram}/`, ltr: true },\n { name: \"snapchat\", label: s.snapchat, href: `https://www.snapchat.com/add/${s.snapchat}`, ltr: true },\n ];\n return (\n \n );\n}\n\nexport function HomePage({ s, services, gallery }: { s: Settings; services: Service[]; gallery: GalleryItem[] }) {\n const hero = gallery[0];\n const side = gallery[1] ?? hero;\n const closing = gallery[2] ?? hero;\n const reel = gallery.length > 1 ? gallery.slice(1) : gallery;\n const place = `ميك اب ارتست · الشرقية والبحرين${s.followers ? ` · ${s.followers} متابعة` : \"\"}`;\n return (\n \n

\n {hero\n ? (\n

Diff · v44