[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_342":343,"_344":345},"routes/_app.x.$handle.$name",{"_100":99,"_32":46,"_109":90,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":60,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",52,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","views/admin.tsx","latestPath","fileId","6dad98ce-afbc-11f1-8653-1607ee4eb77e","name","admin.tsx","fileType","script","content","/** @jsxImportSource npm:hono@4/jsx */\nimport type { Booking, BookingView, GalleryItem, Service, Settings } from \"../lib/db.ts\";\nimport { CITIES, fmtDuration, fmtPrice, LOCATIONS, peopleLabel, STATUS_LABELS, waLink } from \"../lib/format.ts\";\nimport { AR_DAYS, fmtDate, fmtTime, fromMin } from \"../lib/time.ts\";\nimport { Layout } from \"./layout.tsx\";\n\ntype Tab = \"bookings\" | \"services\" | \"gallery\" | \"settings\";\n\nfunction Shell({ tab, title, children }: { tab: Tab; title: string; children?: any }) {\n const link = (t: Tab, href: string, label: string) => {label};\n return (\n \n

\n لوحة الإدارة\n {link(\"bookings\", \"/admin\", \"الحجوزات\")}\n {link(\"services\", \"/admin/services\", \"الخدمات\")}\n {link(\"gallery\", \"/admin/gallery\", \"المعرض\")}\n {link(\"settings\", \"/admin/settings\", \"الإعدادات\")}\n عرض الموقع ↗\n \n

{children}

\n \n );\n}\n\nexport function LoginPage({ error }: { error?: string }) {\n return (\n \n

\n \n

\n \n );\n}\n\nconst ERRORS: Record = {\n service: \"اختاري الخدمة.\",\n date: \"التاريخ غير صحيح.\",\n time: \"الوقت غير صحيح.\",\n name: \"اكتبي اسم العميلة.\",\n phone: \"رقم الجوال غير صحيح.\",\n taken: \"الوقت يتعارض مع حجز آخر، أو اليوم مغلق.\",\n hours: \"بداية الدوام يجب أن تكون قبل نهايته.\",\n days: \"اختاري يوم عمل واحد على الأقل.\",\n};\n\nfunction Alerts({ ok, err, okText }: { ok?: string; err?: string; okText?: string }) {\n return (\n <>\n {ok ?

{okText ?? \"تم الحفظ.\"}

: null}\n {err && ERRORS[err] ?

{ERRORS[err]}

: null}\n \n );\n}\n\nfunction BookingCard({ b, back }: { b: Booking; back: string }) {\n const msg = b.status === \"confirmed\" || b.status === \"pending\"\n ? `مرحبا ${b.name} 🌸\\nمعك نجلاء الغفيلي بخصوص حجزك رقم ${b.code}\\nالخدمة: ${b.service_name}\\nالموعد: ${\n fmtDate(b.date)\n } الساعة ${fmtTime(b.time)}`\n : `مرحبا ${b.name} 🌸`;\n const action = (status: string, label: string, cls: string, confirmText?: string) => (\n \n );\n return (\n

\n {b.name} {STATUS_LABELS[b.status]}\n

\n \n {fmtTime(b.time)} – {fmtTime(fromMin(b.start_min + b.duration_min))}\n \n \n {b.service_name}\n {b.people > 1 ? ` · ${peopleLabel(b.people)}` : \"\"}\n \n \n {LOCATIONS[b.location_type] ?? b.location_type}\n {b.city ? ` · ${b.city}` : \"\"}\n \n {b.price != null ? fmtPrice(b.price, \"\") : \"السعر حسب المنطقة\"}\n +{b.phone}\n #{b.code}\n

\n {b.notes ?

{b.notes}

: null}\n

\n واتساب\n {b.status === \"pending\" ? action(\"confirmed\", \"تأكيد\", \"btn-ok\") : null}\n {b.status === \"confirmed\" ? action(\"done\", \"تم\", \"btn-ghost\") : null}\n {b.status === \"pending\" || b.status === \"confirmed\"\n ? action(\"cancelled\", \"إلغاء\", \"btn-danger\", \"إلغاء هذا الحجز؟\")\n : null}\n {b.status === \"cancelled\" || b.status === \"done\" ? action(\"pending\", \"إرجاع للمراجعة\", \"btn-ghost\") : null}\n

\n );\n}\n\nexport function BookingsAdmin(props: {\n bookings: Booking[];\n stats: { pending: number; confirmed: number; today: number; week: number };\n view: BookingView;\n services: Service[];\n today: string;\n ok?: string;\n err?: string;\n}) {\n const { bookings, stats, view, services, today, ok, err } = props;\n const groups = new Map();\n for (const b of bookings) groups.set(b.date, [...(groups.get(b.date) ?? []), b]);\n const views: [BookingView, string][] = [\n [\"upcoming\", \"القادمة\"],\n [\"pending\", \"بانتظار التأكيد\"],\n [\"past\", \"السابقة والملغاة\"],\n [\"all\", \"الكل\"],\n ];\n return (\n \n

الحجوزات

\n \n

{stats.pending}بانتظار التأكيد

{stats.today}مواعيد اليوم

{stats.week}خلال ٧ أيام

{stats.confirmed}مؤكدة قادمة

\n\n

+ إضافة حجز يدوي (للحجوزات القادمة من واتساب أو سناب)

\n \n الخدمة\n \n \n \n التاريخ\n \n \n \n الوقت\n \n \n

\n \n اسم العميلة\n \n \n \n الجوال\n \n \n \n عدد الأشخاص\n \n \n

\n \n المكان\n \n \n \n المدينة\n \n \n \n الحالة\n \n \n

\n \n ملاحظات\n \n \n \n

\n\n \n\n {bookings.length === 0 ?

لا توجد حجوزات هنا.

: [...groups].map(([date, list]) => (\n

\n {fmtDate(date)}\n {date === today ? \" · اليوم\" : \"\"}\n

\n {list.map((b) => )}\n

\n ))}\n \n );\n}\n\nfunction ServiceFields({ sv }: { sv?: Service }) {\n return (\n <>\n

\n \n اسم الخدمة\n \n \n \n التصنيف (اختياري)\n \n \n

\n \n الوصف\n \n \n

\n \n المدة للشخص (دقيقة)\n \n \n \n السعر للفرد (ر.س) (فارغ = النص البديل)\n \n \n \n سعر الفرد عند حجز شخصين (اختياري)\n \n \n \n سعر الفرد لمجموعة (٣ فأكثر) (اختياري)\n \n \n \n النص البديل للسعر\n \n \n

\n \n ترتيب العرض\n \n \n \n ظاهرة في الموقع وقابلة للحجز\n \n

\n \n );\n}\n\nexport function ServicesAdmin({ services, ok }: { services: Service[]; ok?: string }) {\n return (\n \n

الخدمات والأسعار

\n \n

المدة تُستخدم لحساب الأوقات المتاحة. عند حجز أكثر من شخص تتضاعف المدة تلقائياً.

\n {services.map((sv) => (\n

\n {sv.name}\n \n {fmtDuration(sv.duration_min)} · {fmtPrice(sv.price, sv.price_note)}\n {sv.active ? \"\" : \" · مخفية\"}\n \n

\n ))}\n

+ إضافة خدمة جديدة

\n \n );\n}\n\nexport function GalleryAdmin({ items, added, rejected }: { items: GalleryItem[]; added?: string; rejected?: string }) {\n const heroId = items.find((i) => i.visible)?.id;\n const action = (id: number, act: string, label: string, cls = \"btn-ghost\", confirmText?: string) => (\n \n );\n return (\n \n

معرض الأعمال

\n {added !== undefined && Number(added) > 0 ?

تمت إضافة {added} صورة.

: null}\n {rejected !== undefined && Number(rejected) > 0\n ?

لم تُقبل {rejected} صورة (الصيغ المسموحة: JPG/PNG/WebP حتى ٥ ميجابايت).

\n : null}\n \n

أول صورة ظاهرة تُعرض كصورة الواجهة الرئيسية.

\n {items.map((it) => (\n

\"\" — \n {it.id === heroId ? الواجهة : action(it.id, \"hero\", \"اجعليها الواجهة\")}\n {action(it.id, \"toggle\", it.visible ? \"إخفاء\" : \"إظهار\")}\n {action(it.id, \"delete\", \"حذف\", \"btn-danger\", \"حذف الصورة نهائياً؟\")}\n

\n ))}\n

\n \n );\n}\n\nexport function SettingsAdmin(\n { s, blocked, today, ok, err }: {\n s: Settings;\n blocked: { date: string; reason: string }[];\n today: string;\n ok?: string;\n err?: string;\n },\n) {\n return (\n \n

الإعدادات

\n \n

مواعيد العمل

\n أيام العمل\n

\n {AR_DAYS.map((d, i) => (\n \n {d}\n \n ))}\n

\n \n بداية الدوام\n \n \n \n نهاية الدوام\n \n \n \n الفاصل بين الأوقات المعروضة\n \n \n

\n \n راحة/تنقّل بين المواعيد (دقيقة)\n \n \n \n أقل مدة قبل الموعد (ساعة)\n \n \n \n أقصى مدة للحجز المسبق (يوم)\n \n \n

\n \n إتاحة خيار «الحضور إلى نجلاء» في الحجز\n \n

\n\n

محتوى الموقع

\n \n الجملة التعريفية\n \n \n \n نبذة «عن نجلاء»\n \n \n \n سياسة الحجز\n \n \n

\n \n شريط إعلان أعلى الموقع (فارغ = مخفي)\n \n \n \n عدد المتابعين المعروض (فارغ = مخفي)\n \n \n

\n \n ملاحظة الأسعار (تظهر تحت الخدمات)\n \n \n

\n المدن التي تنطبق عليها الأسعار المعروضة\n \n

\n {CITIES.map((c) => (\n \n {c}\n \n ))}\n

\n\n

التواصل والظهور

\n \n رقم واتساب الحجوزات\n \n \n \n حساب إنستقرام\n \n \n \n حساب سناب شات\n \n \n

\n \n إظهار الموقع في محركات البحث (فعّليها عند الإطلاق الرسمي)\n \n

\n\n \n

\n\n

أيام مغلقة

إجازات أو أيام محجوزة بالكامل، لن تظهر فيها أوقات للحجز.

\n \n {blocked.length === 0 ?

لا توجد أيام مغلقة.

: (\n

\n \n {fmtDate(d.date)}\n {d.reason ? `: ${d.reason}` : \"\"}\n \n
\n \n \n
\n

\n )}\n

\n \n );\n}\n","/** @jsxImportSource npm:hono@4/jsx */\nimport type { Booking, BookingView, GalleryItem, Service, Settings } from \"../lib/db.ts\";\nimport { CITIES, fmtDuration, fmtPrice, LOCATIONS, peopleLabel, STATUS_LABELS, waLink } from \"../lib/format.ts\";\nimport { AR_DAYS, fmtDate, fmtTime, fromMin } from \"../lib/time.ts\";\nimport { Layout } from \"./layout.tsx\";\n\ntype Tab = \"bookings\" | \"services\" | \"gallery\" | \"settings\";\n\nfunction Shell({ tab, title, children }: { tab: Tab; title: string; children?: any }) {\n const link = (t: Tab, href: string, label: string) => {label};\n return (\n \n

{children}

\n \n );\n}\n\nexport function LoginPage({ error }: { error?: string }) {\n return (\n \n

\n \n

{okText ?? \"تم الحفظ.\"}

: null}\n {err && ERRORS[err] ?

{ERRORS[err]}

\n {b.name} {STATUS_LABELS[b.status]}\n

\n {b.notes ?

{b.notes}

: null}\n

الحجوزات

\n \n

{stats.pending}بانتظار التأكيد

{stats.today}مواعيد اليوم

{stats.week}خلال ٧ أيام

{stats.confirmed}مؤكدة قادمة

\n\n

+ إضافة حجز يدوي (للحجوزات القادمة من واتساب أو سناب)

\n \n الخدمة\n \n \n \n التاريخ\n \n \n \n الوقت\n \n \n

\n \n اسم العميلة\n \n \n \n الجوال\n \n \n \n عدد الأشخاص\n \n \n

\n \n المكان\n \n \n \n المدينة\n \n \n \n الحالة\n \n \n

\n \n ملاحظات\n \n \n \n

\n\n \n\n {bookings.length === 0 ?

لا توجد حجوزات هنا.

: [...groups].map(([date, list]) => (\n

\n {fmtDate(date)}\n {date === today ? \" · اليوم\" : \"\"}\n

\n {list.map((b) => )}\n

\n ))}\n \n );\n}\n\nfunction ServiceFields({ sv }: { sv?: Service }) {\n return (\n <>\n

\n \n اسم الخدمة\n \n \n \n التصنيف (اختياري)\n \n \n

\n \n الوصف\n \n \n

\n \n ترتيب العرض\n \n \n \n ظاهرة في الموقع وقابلة للحجز\n \n

\n \n );\n}\n\nexport function ServicesAdmin({ services, ok }: { services: Service[]; ok?: string }) {\n return (\n \n

الخدمات والأسعار

\n \n

المدة تُستخدم لحساب الأوقات المتاحة. عند حجز أكثر من شخص تتضاعف المدة تلقائياً.

\n {services.map((sv) => (\n

\n {sv.name}\n \n {fmtDuration(sv.duration_min)} · {fmtPrice(sv.price, sv.price_note)}\n {sv.active ? \"\" : \" · مخفية\"}\n \n

\n ))}\n

+ إضافة خدمة جديدة

معرض الأعمال

\n {added !== undefined && Number(added) > 0 ?

تمت إضافة {added} صورة.

: null}\n {rejected !== undefined && Number(rejected) > 0\n ?

لم تُقبل {rejected} صورة (الصيغ المسموحة: JPG/PNG/WebP حتى ٥ ميجابايت).

\n : null}\n \n

أول صورة ظاهرة تُعرض كصورة الواجهة الرئيسية.

\n {items.map((it) => (\n

\"\" — \n {it.id === heroId ? الواجهة : action(it.id, \"hero\", \"اجعليها الواجهة\")}\n {action(it.id, \"toggle\", it.visible ? \"إخفاء\" : \"إظهار\")}\n {action(it.id, \"delete\", \"حذف\", \"btn-danger\", \"حذف الصورة نهائياً؟\")}\n

\n ))}\n

الإعدادات

\n \n

مواعيد العمل

\n أيام العمل\n

\n {AR_DAYS.map((d, i) => (\n \n {d}\n \n ))}\n

\n \n بداية الدوام\n \n \n \n نهاية الدوام\n \n \n \n الفاصل بين الأوقات المعروضة\n \n \n

\n \n راحة/تنقّل بين المواعيد (دقيقة)\n \n \n \n أقل مدة قبل الموعد (ساعة)\n \n \n \n أقصى مدة للحجز المسبق (يوم)\n \n \n

\n \n إتاحة خيار «الحضور إلى نجلاء» في الحجز\n \n

\n\n

محتوى الموقع

\n \n الجملة التعريفية\n \n \n \n نبذة «عن نجلاء»\n \n \n \n سياسة الحجز\n \n \n

\n \n شريط إعلان أعلى الموقع (فارغ = مخفي)\n \n \n \n عدد المتابعين المعروض (فارغ = مخفي)\n \n \n

\n \n ملاحظة الأسعار (تظهر تحت الخدمات)\n \n \n

\n المدن التي تنطبق عليها الأسعار المعروضة\n \n

\n {CITIES.map((c) => (\n \n {c}\n \n ))}\n

\n\n

التواصل والظهور

\n \n رقم واتساب الحجوزات\n \n \n \n حساب إنستقرام\n \n \n \n حساب سناب شات\n \n \n

\n \n إظهار الموقع في محركات البحث (فعّليها عند الإطلاق الرسمي)\n \n

\n\n \n

\n\n

أيام مغلقة

إجازات أو أيام محجوزة بالكامل، لن تظهر فيها أوقات للحجز.

\n \n {blocked.length === 0 ?

لا توجد أيام مغلقة.

: (\n

\n \n {fmtDate(d.date)}\n {d.reason ? `: ${d.reason}` : \"\"}\n \n
\n \n \n
\n

\n )}\n

\n \n );\n}\n","createdAt",["D",1789376676570],"branchVersion","branchId","2fb3b93c-3153-49cc-928f-ccd798836746","id","d8f07974-33ec-460f-a8b5-8a56ac73d9bd","najla-makeup",["D",1789334949320],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","موقع نجلاء الغفيلي ميك اب ارتست — خدمات ونظام حجوزات","imageUrl","cca8102f-07bb-4295-b44a-38d66d1d3405","pinnedFileId","01a09cac-8e2f-7716-b801-b7ea38740c6d","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f1d6e-b169-7628-a2c5-3fdc2bb2972f","tursoName","d8f0797433ec460fa8b58a56ac73d9bd","tursoHostname","d8f0797433ec460fa8b58a56ac73d9bd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789519256886],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":56,"_105":106,"_107":25},"branch",{"_13":14,"_32":90,"_44":43,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":46,"_98":99},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","asnfq50","handle","displayName","mfcbr4krn8-hash","avatar","https://avatars.githubusercontent.com/u/294484094?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":337,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":338,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":339,"_85":340,"_87":341,"_89":25},"tree",[195,197,202,206,207,213,214],"files",[195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214],"counts",{"_185":64,"_186":154,"_187":64,"_188":189,"_190":191},"contents",[131,132,133,134,135,136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":179,"_32":180,"_30":181,"_140":-5,"_42":43,"_41":182,"_142":60,"_39":183,"_13":64,"_34":162,"_36":-5,"_24":25,"_147":-5,"_27":184},{"_44":174,"_32":175,"_30":176,"_140":-5,"_42":43,"_41":144,"_142":60,"_39":177,"_13":64,"_34":162,"_36":-5,"_24":25,"_147":-5,"_27":178},{"_44":170,"_32":51,"_30":171,"_140":-5,"_42":43,"_41":154,"_142":60,"_39":172,"_13":64,"_34":162,"_36":-5,"_24":25,"_147":-5,"_27":173},{"_44":164,"_32":165,"_30":166,"_140":-5,"_42":43,"_41":167,"_142":60,"_39":168,"_13":64,"_34":162,"_36":-5,"_24":25,"_147":-5,"_27":169},{"_44":157,"_32":158,"_30":159,"_140":-5,"_42":43,"_41":160,"_142":60,"_39":161,"_13":64,"_34":162,"_36":-5,"_24":25,"_147":-5,"_27":163},{"_44":149,"_32":150,"_30":151,"_140":-5,"_42":43,"_41":152,"_142":60,"_39":153,"_13":154,"_34":20,"_36":155,"_24":25,"_147":-5,"_27":156},{"_44":138,"_32":139,"_30":58,"_140":-5,"_42":43,"_41":141,"_142":60,"_39":143,"_13":144,"_34":145,"_36":146,"_24":25,"_147":46,"_27":148},"14693d07-44e1-4cda-b719-b955edc6b2b1","index.tsx","parentId",46,"latest",["D",1789376501345],2,"http","/** @jsxImportSource npm:hono@4/jsx */\nimport { Hono } from \"npm:hono@4\";\nimport type { Context } from \"npm:hono@4\";\nimport { serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport * as db from \"./lib/db.ts\";\nimport type { BookingView, Settings, Status } from \"./lib/db.ts\";\nimport { addDays, availableSlots, isDate, isTime, nowRiyadh, toMin } from \"./lib/time.ts\";\nimport { CITIES, isLocation, normalizePhone, toLatinDigits, unitPrice } from \"./lib/format.ts\";\nimport { checkPassword, clientIp, endSession, requireAdmin, startSession } from \"./lib/auth.ts\";\nimport { BookingPage, BookPage, HomePage, NotFoundPage } from \"./views/public.tsx\";\nimport { BookingsAdmin, GalleryAdmin, LoginPage, ServicesAdmin, SettingsAdmin } from \"./views/admin.tsx\";\n\nconst app = new Hono();\n\ntype Body = Record;\nconst str = (b: Body, key: string, max = 500) => {\n const v = b[key];\n return typeof v === \"string\" ? v.trim().slice(0, max) : \"\";\n};\nconst int = (raw: string, min: number, max: number, fallback: number) => {\n const n = Number(toLatinDigits(raw));\n return raw !== \"\" && Number.isInteger(n) && n >= min && n <= max ? n : fallback;\n};\nconst clampPeople = (raw: string) => int(raw, 1, 6, 1);\nconst list = (b: Body, key: string) => ([] as unknown[]).concat(b[key] ?? []).filter((v): v is string => typeof v === \"string\");\n\n/** Listed prices only apply in the configured cities; elsewhere the price is agreed on WhatsApp. */\nfunction bookingPrice(service: db.Service, people: number, city: string, s: Settings) {\n const unit = unitPrice(service, people);\n return unit != null && s.priceCities.includes(city) ? unit * people : null;\n}\n\nasync function render(c: Context, el: unknown, status = 200) {\n const html = await (el as { toString(): string | Promise }).toString();\n return c.html(\"\" + html, status as 200);\n}\n\napp.use(\"*\", async (c, next) => {\n await db.ensureSchema();\n await next();\n try {\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"strict-origin-when-cross-origin\");\n if (c.req.path.startsWith(\"/admin\")) {\n c.header(\"X-Frame-Options\", \"DENY\");\n c.header(\"Cache-Control\", \"no-store\");\n }\n } catch {\n // some responses have immutable headers\n }\n});\n\n// ── Public site ─────────────────────────────────────────────\napp.get(\"/\", async (c) => {\n const [s, services, gallery] = await Promise.all([\n db.getSettings(),\n db.listServices(true),\n db.listGallery(true),\n ]);\n return render(c, );\n});\n\nfunction bookingRange(s: Settings) {\n const today = nowRiyadh().date;\n return { minDate: addDays(today, Math.floor(s.minNoticeHours / 24)), maxDate: addDays(today, s.maxDaysAhead) };\n}\n\napp.get(\"/book\", async (c) => {\n const [s, services] = await Promise.all([db.getSettings(), db.listServices(true)]);\n const values = { service_id: c.req.query(\"service\") ?? \"\", people: \"1\" };\n return render(c, );\n});\n\napp.get(\"/api/slots\", async (c) => {\n const [s, service] = await Promise.all([\n db.getSettings(),\n db.getService(Number(c.req.query(\"service\"))),\n ]);\n c.header(\"Cache-Control\", \"no-store\");\n if (!service || !service.active) return c.json({ ok: false, reason: \"الخدمة غير متاحة.\", slots: [] });\n const people = clampPeople(c.req.query(\"people\") ?? \"1\");\n return c.json(await availableSlots(c.req.query(\"date\") ?? \"\", service.duration_min * people, s));\n});\n\nconst BOOK_FIELDS = [\"service_id\", \"people\", \"location_type\", \"city\", \"date\", \"time\", \"name\", \"phone\", \"notes\"];\n\napp.post(\"/book\", async (c) => {\n const body = (await c.req.parseBody()) as Body;\n if (str(body, \"website\")) return c.redirect(\"/\"); // honeypot\n const v: Record = Object.fromEntries(BOOK_FIELDS.map((k) => [k, str(body, k, 1000)]));\n const [s, services] = await Promise.all([db.getSettings(), db.listServices(true)]);\n const fail = (error: string) =>\n render(c, , 422);\n\n const service = services.find((x) => String(x.id) === v.service_id);\n if (!service) return fail(\"اختاري الخدمة المطلوبة.\");\n const name = v.name.slice(0, 80);\n if (name.length < 2) return fail(\"اكتبي الاسم.\");\n const phone = normalizePhone(v.phone);\n if (!phone) return fail(\"رقم الجوال غير صحيح. اكتبيه مثل 05xxxxxxxx أو مع رمز الدولة.\");\n if (!isLocation(v.location_type) || (v.location_type === \"studio\" && !s.allowStudio)) {\n return fail(\"اختاري مكان الخدمة.\");\n }\n const city = CITIES.includes(v.city) ? v.city : \"\";\n if (v.location_type !== \"studio\" && !city) return fail(\"اختاري المدينة.\");\n\n const people = clampPeople(v.people);\n const duration = service.duration_min * people;\n const slots = await availableSlots(v.date, duration, s);\n if (!slots.ok) return fail(slots.reason);\n if (!slots.slots.includes(v.time)) return fail(\"الوقت المختار غير متاح، اختاري وقتاً آخر.\");\n if ((await db.countOpenBookingsByPhone(phone, nowRiyadh().date)) >= 3) {\n return fail(\"لديك عدة طلبات بانتظار التأكيد. تواصلي معنا عبر واتساب لإضافة المزيد.\");\n }\n\n const r = await db.createBooking({\n service_id: service.id,\n service_name: service.name,\n duration_min: duration,\n price: bookingPrice(service, people, city, s),\n date: v.date,\n time: v.time,\n start_min: toMin(v.time),\n name,\n phone,\n location_type: v.location_type,\n city,\n people,\n notes: v.notes,\n status: \"pending\",\n }, s.bufferMin);\n if (!r.ok) return fail(\"سبقك حجز آخر على هذا الوقت، اختاري وقتاً آخر.\");\n return c.redirect(`/b/${r.code}`);\n});\n\napp.get(\"/b/:code\", async (c) => {\n const b = await db.getBookingByCode(c.req.param(\"code\").toUpperCase());\n if (!b) return render(c, , 404);\n c.header(\"Cache-Control\", \"no-store\");\n return render(c, );\n});\n\nfunction sniffMime(b: Uint8Array) {\n if (b[0] === 0x89 && b[1] === 0x50) return \"image/png\";\n if (b[0] === 0x52 && b[1] === 0x49 && b[8] === 0x57 && b[9] === 0x45) return \"image/webp\";\n return \"image/jpeg\";\n}\n\napp.get(\"/img/:kind{gallery|brand}/:name\", async (c) => {\n try {\n const res = await blob.get(`${c.req.param(\"kind\")}/${c.req.param(\"name\")}`);\n if (!res.ok) return c.notFound();\n const bytes = new Uint8Array(await res.arrayBuffer());\n return c.body(bytes, 200, { \"Content-Type\": sniffMime(bytes), \"Cache-Control\": \"public, max-age=86400\" });\n } catch {\n return c.notFound();\n }\n});\n\napp.get(\"/robots.txt\", async (c) => {\n const s = await db.getSettings();\n return c.text(\n s.indexable ? \"User-agent: *\\nDisallow: /admin\\nDisallow: /b/\\n\" : \"User-agent: *\\nDisallow: /\\n\",\n );\n});\n\napp.get(\"/public/*\", (c) => serveFile(c.req.path));\n\n// ── Admin ───────────────────────────────────────────────────\napp.use(\"/admin\", requireAdmin);\napp.use(\"/admin/*\", async (c, next) => {\n if (c.req.path === \"/admin/login\") return await next();\n return await requireAdmin(c, next);\n});\n\napp.get(\"/admin/login\", (c) => render(c, ));\n\napp.post(\"/admin/login\", async (c) => {\n const ip = clientIp(c);\n if ((await db.recentLoginFailures(ip)) >= 8) {\n return render(c, , 429);\n }\n const body = (await c.req.parseBody()) as Body;\n const password = typeof body.password === \"string\" ? body.password.slice(0, 200) : \"\";\n if (await checkPassword(password)) {\n await startSession(c);\n return c.redirect(\"/admin\");\n }\n await db.recordLoginFailure(ip);\n return render(c, , 401);\n});\n\napp.post(\"/admin/logout\", (c) => {\n endSession(c);\n return c.redirect(\"/admin/login\");\n});\n\nconst VIEWS: BookingView[] = [\"upcoming\", \"pending\", \"past\", \"all\"];\n\napp.get(\"/admin\", async (c) => {\n const today = nowRiyadh().date;\n const requested = c.req.query(\"view\") as BookingView;\n const view = VIEWS.includes(requested) ? requested : \"upcoming\";\n const [bookings, stats, services] = await Promise.all([\n db.listBookings(view, today),\n db.bookingStats(today, addDays(today, 7)),\n db.listServices(false),\n ]);\n return render(\n c,\n ,\n );\n});\n\napp.post(\"/admin/bookings/new\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const fail = (code: string) => c.redirect(`/admin?err=${code}`);\n const service = await db.getService(Number(str(b, \"service_id\")));\n if (!service) return fail(\"service\");\n const date = str(b, \"date\");\n if (!isDate(date)) return fail(\"date\");\n const time = str(b, \"time\").slice(0, 5);\n if (!isTime(time)) return fail(\"time\");\n const name = str(b, \"name\", 80);\n if (name.length < 2) return fail(\"name\");\n const phone = normalizePhone(str(b, \"phone\"));\n if (!phone) return fail(\"phone\");\n const people = clampPeople(str(b, \"people\"));\n const location = str(b, \"location_type\");\n const cityRaw = str(b, \"city\");\n const city = CITIES.includes(cityRaw) ? cityRaw : \"\";\n const s = await db.getSettings();\n const r = await db.createBooking({\n service_id: service.id,\n service_name: service.name,\n duration_min: service.duration_min * people,\n price: bookingPrice(service, people, city, s),\n date,\n time,\n start_min: toMin(time),\n name,\n phone,\n location_type: isLocation(location) ? location : \"home\",\n city,\n people,\n notes: str(b, \"notes\", 1000),\n status: str(b, \"status\") === \"pending\" ? \"pending\" : \"confirmed\",\n }, s.bufferMin);\n return r.ok ? c.redirect(\"/admin?ok=added\") : fail(\"taken\");\n});\n\napp.post(\"/admin/bookings/:id/status\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const status = str(b, \"status\") as Status;\n if (!(db.STATUSES as readonly string[]).includes(status)) return c.text(\"bad request\", 400);\n await db.setBookingStatus(Number(c.req.param(\"id\")), status);\n const back = str(b, \"back\");\n return c.redirect(/^\\/admin(\\?[\\w=&]*)?$/.test(back) ? back : \"/admin\");\n});\n\nfunction serviceInput(b: Body): db.ServiceInput | null {\n const name = str(b, \"name\", 80);\n if (!name) return null;\n const money = (key: string) => {\n const digits = toLatinDigits(str(b, key)).replace(/[^\\d]/g, \"\");\n return digits ? Math.min(Number(digits), 1_000_000) : null;\n };\n return {\n name,\n description: str(b, \"description\", 600),\n category: str(b, \"category\", 40),\n duration_min: int(str(b, \"duration_min\"), 5, 600, 60),\n price: money(\"price\"),\n price_pair: money(\"price_pair\"),\n price_group: money(\"price_group\"),\n price_note: str(b, \"price_note\", 60),\n active: b.active === \"on\" ? 1 : 0,\n sort: int(str(b, \"sort\"), -1000, 1000, 0),\n };\n}\n\napp.get(\"/admin/services\", async (c) =>\n render(c, ));\n\napp.post(\"/admin/services\", async (c) => {\n const input = serviceInput((await c.req.parseBody()) as Body);\n if (input) await db.createService(input);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\napp.post(\"/admin/services/:id\", async (c) => {\n const input = serviceInput((await c.req.parseBody()) as Body);\n const id = Number(c.req.param(\"id\"));\n if (input && Number.isInteger(id)) await db.updateService(id, input);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\napp.post(\"/admin/services/:id/delete\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n if (Number.isInteger(id)) await db.deleteService(id);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\nconst IMAGE_TYPES = [\"image/jpeg\", \"image/png\", \"image/webp\"];\n\napp.get(\"/admin/gallery\", async (c) =>\n render(\n c,\n ,\n ));\n\napp.post(\"/admin/gallery\", async (c) => {\n const body = await c.req.parseBody({ all: true });\n const files = ([] as unknown[]).concat(body.photos ?? []).filter((f): f is File => f instanceof File);\n let added = 0;\n let rejected = 0;\n for (const f of files) {\n if (!IMAGE_TYPES.includes(f.type) || f.size === 0 || f.size > 5_000_000) {\n rejected++;\n continue;\n }\n const key = `gallery/${crypto.randomUUID()}`;\n await blob.set(key, new Uint8Array(await f.arrayBuffer()));\n await db.addGalleryItem(key, f.type);\n added++;\n }\n return c.redirect(`/admin/gallery?added=${added}&rejected=${rejected}`);\n});\n\napp.post(\"/admin/gallery/:id/:action{hero|toggle|delete}\", async (c) => {\n const item = await db.getGalleryItem(Number(c.req.param(\"id\")));\n if (item) {\n const action = c.req.param(\"action\");\n if (action === \"hero\") await db.makeGalleryHero(item.id);\n else if (action === \"toggle\") await db.toggleGalleryItem(item.id);\n else {\n await db.deleteGalleryItem(item.id);\n await blob.delete(item.blob_key).catch(() => {});\n }\n }\n return c.redirect(\"/admin/gallery\");\n});\n\napp.get(\"/admin/settings\", async (c) => {\n const today = nowRiyadh().date;\n const [s, blocked] = await Promise.all([db.getSettings(), db.listBlocked(today)]);\n return render(\n c,\n ,\n );\n});\n\napp.post(\"/admin/settings\", async (c) => {\n const b = (await c.req.parseBody({ all: true })) as Body;\n const cur = await db.getSettings();\n const workDays = [...new Set(list(b, \"workDays\").map(Number))]\n .filter((d) => Number.isInteger(d) && d >= 0 && d <= 6)\n .sort();\n if (!workDays.length) return c.redirect(\"/admin/settings?err=days\");\n const open = isTime(str(b, \"open\")) ? str(b, \"open\") : cur.open;\n const close = isTime(str(b, \"close\")) ? str(b, \"close\") : cur.close;\n if (toMin(open) >= toMin(close)) return c.redirect(\"/admin/settings?err=hours\");\n const handle = (key: string, fallback: string) => {\n const v = str(b, key, 60).replace(/^@/, \"\");\n return /^[A-Za-z0-9._-]{1,40}$/.test(v) ? v : fallback;\n };\n const next: Settings = {\n ...cur,\n workDays,\n open,\n close,\n slotStep: int(str(b, \"slotStep\"), 5, 120, cur.slotStep),\n bufferMin: int(str(b, \"bufferMin\"), 0, 240, cur.bufferMin),\n minNoticeHours: int(str(b, \"minNoticeHours\"), 0, 1440, cur.minNoticeHours),\n maxDaysAhead: int(str(b, \"maxDaysAhead\"), 1, 730, cur.maxDaysAhead),\n allowStudio: b.allowStudio === \"on\",\n whatsapp: normalizePhone(str(b, \"whatsapp\")) ?? cur.whatsapp,\n instagram: handle(\"instagram\", cur.instagram),\n snapchat: handle(\"snapchat\", cur.snapchat),\n followers: str(b, \"followers\", 30),\n tagline: str(b, \"tagline\", 300),\n about: str(b, \"about\", 3000),\n policy: str(b, \"policy\", 3000),\n pricingNote: str(b, \"pricingNote\", 200),\n priceCities: \"priceCitiesField\" in b ? list(b, \"priceCities\").filter((c) => CITIES.includes(c)) : cur.priceCities,\n announcement: str(b, \"announcement\", 300),\n indexable: b.indexable === \"on\",\n };\n await db.saveSettings(next);\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.post(\"/admin/blocked\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const date = str(b, \"date\");\n if (isDate(date)) await db.addBlocked(date, str(b, \"reason\", 80));\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.post(\"/admin/blocked/delete\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const date = str(b, \"date\");\n if (isDate(date)) await db.removeBlocked(date);\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.notFound((c) => render(c, , 404));\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","label",[139],"eea1a183-19dd-4dfc-b8f2-f299117b29db","README.md","01a09cac-8e2f-7716-b801-b39afe182f45",14,["D",1789336164645],1,"# موقع نجلاء الغفيلي — ميك اب ارتست\n\nموقع تعريفي + نظام حجوزات + لوحة إدارة. Hono JSX على Val Town، SQLite للبيانات، Blob للصور.\n\n## الصفحات\n- `/` الرئيسية: الواجهة، النبذة، الخدمات، المعرض، طريقة الحجز، التواصل\n- `/book` نموذج الحجز (الأوقات المتاحة تُحسب من `/api/slots`)\n- `/b/:code` صفحة حالة الحجز + إرسال التفاصيل عبر واتساب\n- `/admin` لوحة الإدارة: الحجوزات (تأكيد/إلغاء/حجز يدوي)، الخدمات والأسعار، المعرض (رفع/إخفاء/واجهة)، الإعدادات (أيام وساعات العمل، أيام مغلقة، النصوص، الظهور في البحث)\n\n## متغيرات البيئة\n- `ADMIN_PASSWORD` كلمة مرور اللوحة\n- `SESSION_SECRET` مفتاح توقيع الجلسة\n\n## منطق التوفر\nالحجز يشغل `مدة الخدمة × عدد الأشخاص` + فاصل راحة/تنقّل. الإدخال ذرّي في SQL فلا يمكن حجز وقتين متداخلين حتى مع طلبين متزامنين. الحجوزات بحالة «بانتظار التأكيد» تحجز الوقت مبدئياً.\n\n## الصور\n`data/gallery.json` بذرة أولية من حساب إنستقرام @najla_makeupartist تُنسخ إلى Blob عند أول تشغيل؛ بعدها تُدار الصور من `/admin/gallery`.\n",[150],"14393c21-7ac3-4629-bc0f-c1dea4cd24a0","views","37f26134-5ccd-45c7-af8e-dfb68d37fdd7",6,["D",1789335744271],"directory",[158],"3560576c-1b42-4904-a976-cd09fc693174","scripts","d9ed626f-6a6b-4a0c-8bd3-b02c5e341b18",25,["D",1789337465670],[165],"f3656f81-2ad6-48a5-b486-9ad100c511b4","01a09cac-8e2f-7716-b801-aca3218223d9",["D",1789334949320],[51],"12e38241-4680-415c-b8f1-041b0c3ded6c","lib","200fe74d-8ef8-4343-a5a1-297a2da2eb49",["D",1789335703767],[175],"fcb4ad75-7daf-47b5-8f84-99f7512b34b7","data","4d434050-292d-4b99-a6f7-e44461613dca",13,["D",1789336152387],[180],"pulls","branches","forks","envVars",{"_192":144,"_194":64},"connections",{"_192":64,"_193":64},"count","unfilledCount","emptyCount",{"_44":179,"_32":180,"_30":181,"_140":-5,"_42":43,"_41":182,"_142":60,"_39":334,"_13":64,"_34":162,"_36":-5,"_24":25,"_147":-5,"_216":335,"_27":336},{"_44":327,"_32":328,"_30":329,"_140":181,"_42":43,"_41":182,"_142":60,"_39":330,"_13":64,"_34":20,"_36":331,"_24":25,"_147":-5,"_216":332,"_27":333},{"_44":174,"_32":175,"_30":176,"_140":-5,"_42":43,"_41":144,"_142":60,"_39":324,"_13":64,"_34":162,"_36":-5,"_24":25,"_147":-5,"_216":325,"_27":326},{"_44":316,"_32":317,"_30":318,"_140":176,"_42":43,"_41":319,"_142":60,"_39":320,"_13":64,"_34":35,"_36":321,"_24":25,"_147":-5,"_216":322,"_27":323},{"_44":308,"_32":309,"_30":310,"_140":176,"_42":43,"_41":311,"_142":60,"_39":312,"_13":144,"_34":35,"_36":313,"_24":25,"_147":-5,"_216":314,"_27":315},{"_44":300,"_32":301,"_30":302,"_140":176,"_42":43,"_41":303,"_142":60,"_39":304,"_13":154,"_34":35,"_36":305,"_24":25,"_147":-5,"_216":306,"_27":307},{"_44":292,"_32":293,"_30":294,"_140":176,"_42":43,"_41":295,"_142":60,"_39":296,"_13":154,"_34":35,"_36":297,"_24":25,"_147":-5,"_216":298,"_27":299},{"_44":170,"_32":51,"_30":171,"_140":-5,"_42":43,"_41":154,"_142":60,"_39":289,"_13":64,"_34":162,"_36":-5,"_24":25,"_147":-5,"_216":290,"_27":291},{"_44":281,"_32":282,"_30":283,"_140":171,"_42":43,"_41":284,"_142":60,"_39":285,"_13":64,"_34":35,"_36":286,"_24":25,"_147":-5,"_216":287,"_27":288},{"_44":274,"_32":275,"_30":276,"_140":171,"_42":43,"_41":154,"_142":60,"_39":277,"_13":64,"_34":20,"_36":278,"_24":25,"_147":-5,"_216":279,"_27":280},{"_44":266,"_32":267,"_30":268,"_140":171,"_42":43,"_41":269,"_142":60,"_39":270,"_13":160,"_34":20,"_36":271,"_24":25,"_147":-5,"_216":272,"_27":273},{"_44":164,"_32":165,"_30":166,"_140":-5,"_42":43,"_41":167,"_142":60,"_39":263,"_13":64,"_34":162,"_36":-5,"_24":25,"_147":-5,"_216":264,"_27":265},{"_44":157,"_32":158,"_30":159,"_140":-5,"_42":43,"_41":160,"_142":60,"_39":260,"_13":64,"_34":162,"_36":-5,"_24":25,"_147":-5,"_216":261,"_27":262},{"_44":255,"_32":33,"_30":31,"_140":159,"_42":43,"_41":14,"_142":60,"_39":256,"_13":257,"_34":35,"_36":38,"_24":25,"_147":-5,"_216":258,"_27":259},{"_44":247,"_32":248,"_30":249,"_140":159,"_42":43,"_41":250,"_142":60,"_39":251,"_13":64,"_34":35,"_36":252,"_24":25,"_147":-5,"_216":253,"_27":254},{"_44":239,"_32":240,"_30":241,"_140":159,"_42":43,"_41":242,"_142":60,"_39":243,"_13":227,"_34":35,"_36":244,"_24":25,"_147":-5,"_216":245,"_27":246},{"_44":231,"_32":232,"_30":233,"_140":159,"_42":43,"_41":234,"_142":60,"_39":235,"_13":154,"_34":35,"_36":236,"_24":25,"_147":-5,"_216":237,"_27":238},{"_44":222,"_32":223,"_30":224,"_140":159,"_42":43,"_41":225,"_142":60,"_39":226,"_13":227,"_34":35,"_36":228,"_24":25,"_147":-5,"_216":229,"_27":230},{"_44":149,"_32":150,"_30":151,"_140":-5,"_42":43,"_41":152,"_142":60,"_39":219,"_13":154,"_34":20,"_36":155,"_24":25,"_147":-5,"_216":220,"_27":221},{"_44":138,"_32":139,"_30":58,"_140":-5,"_42":43,"_41":141,"_142":60,"_39":215,"_13":144,"_34":145,"_36":146,"_24":25,"_147":46,"_216":217,"_27":218},["D",1789376501345],"children",[],[139],["D",1789336164645],[],[150],"bc58168a-feee-40a5-b453-dfbcccf64962","public.tsx","3fd93c0a-afbc-11f1-a6ad-1607ee4eb77e",45,["D",1789376443057],3,"/** @jsxImportSource npm:hono@4/jsx */\nimport type { Booking, GalleryItem, Service, Settings } from \"../lib/db.ts\";\nimport {\n CITIES,\n fmtDuration,\n fmtPrice,\n LOCATIONS,\n peopleLabel,\n servicePrice,\n STATUS_LABELS,\n tierText,\n waLink,\n} from \"../lib/format.ts\";\nimport { fmtDate, fmtTime } from \"../lib/time.ts\";\nimport { Arrow, Social, type SocialName } from \"./icons.tsx\";\nimport { Layout } from \"./layout.tsx\";\nimport { Mark } from \"./mark.tsx\";\n\nexport const NAME = \"نجلاء الغفيلي\";\nconst src = (g: GalleryItem) => `/img/${g.blob_key}`;\n\nfunction Nav({ s, book = true }: { s?: Settings; book?: boolean }) {\n return (\n

\n \n {s?.announcement ?

{s.announcement}

: null}\n

\n );\n}\n\nfunction Footer({ s }: { s: Settings }) {\n const links: { name: SocialName; label: string; href: string; ltr?: boolean }[] = [\n { name: \"whatsapp\", label: \"واتساب\", href: waLink(s.whatsapp, \"مرحبا نجلاء 🌸\") },\n { name: \"instagram\", label: `@${s.instagram}`, href: `https://www.instagram.com/${s.instagram}/`, ltr: true },\n { name: \"snapchat\", label: s.snapchat, href: `https://www.snapchat.com/add/${s.snapchat}`, ltr: true },\n ];\n return (\n \n );\n}\n\nexport function HomePage({ s, services, gallery }: { s: Settings; services: Service[]; gallery: GalleryItem[] }) {\n const hero = gallery[0];\n const side = gallery[1] ?? hero;\n const closing = gallery[2] ?? hero;\n const reel = gallery.length > 1 ? gallery.slice(1) : gallery;\n const place = `ميك اب ارتست · الشرقية والبحرين${s.followers ? ` · ${s.followers} متابعة` : \"\"}`;\n return (\n \n

\n {hero\n ? (\n

Diff · v52