[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_380":381,"_382":383},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_286":-5,"_20":287,"_22":288,"_289":290,"_291":292,"_26":293,"_24":294,"_295":-5,"_296":-5,"_297":54,"_298":299,"_300":45,"_301":-5,"_302":-5,"_303":304},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","asnfq50","name","najla-makeup","branchName","main","version","path","lib/db.ts","project",{"_33":229,"_13":14,"_46":230,"_231":-5,"_232":54,"_233":148,"_234":148,"_235":236,"_237":-5,"_238":239,"_240":67,"_241":45,"_242":-5,"_243":-5,"_244":89,"_245":246,"_247":248,"_249":250,"_251":252,"_253":-5,"_254":255,"_256":255,"_257":258,"_259":258,"_260":258,"_261":255,"_262":255,"_263":264,"_265":266,"_267":268,"_269":54},"tree",[58,59,60,61,62,63,64],"file",{"_33":34,"_13":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":56},"contents",[],"upstream","pull","ahead","behind","envVars","id","57889cb5-1d57-4dc8-a1db-65d0bae254d1","db.ts","fileId","e994cc74-afbb-11f1-9eba-1607ee4eb77e","parentId","200fe74d-8ef8-4343-a5a1-297a2da2eb49","branchId","2fb3b93c-3153-49cc-928f-ccd798836746","branchVersion",42,"latest",true,"createdAt",["D",1789376376520],2,"fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\n\nexport type Service = {\n id: number;\n name: string;\n description: string;\n category: string;\n duration_min: number;\n /** Price per person for one person (SAR). */\n price: number | null;\n /** Price per person when two people book together. */\n price_pair: number | null;\n /** Price per person for a group of three or more. */\n price_group: number | null;\n price_note: string;\n active: number;\n sort: number;\n};\nexport type ServiceInput = Omit;\n\nexport const STATUSES = [\"pending\", \"confirmed\", \"done\", \"cancelled\"] as const;\nexport type Status = (typeof STATUSES)[number];\n\nexport type Booking = {\n id: number;\n code: string;\n service_id: number;\n service_name: string;\n duration_min: number;\n price: number | null;\n date: string;\n time: string;\n start_min: number;\n name: string;\n phone: string;\n location_type: string;\n city: string;\n people: number;\n notes: string;\n status: Status;\n created_at: string;\n};\nexport type NewBooking = Omit;\nexport type BookingView = \"upcoming\" | \"pending\" | \"past\" | \"all\";\n\nexport type GalleryItem = {\n id: number;\n blob_key: string;\n mime: string;\n caption: string;\n sort: number;\n visible: number;\n};\n\nexport type Settings = {\n workDays: number[];\n open: string;\n close: string;\n slotStep: number;\n bufferMin: number;\n minNoticeHours: number;\n maxDaysAhead: number;\n allowStudio: boolean;\n whatsapp: string;\n snapchat: string;\n instagram: string;\n followers: string;\n tagline: string;\n about: string;\n policy: string;\n pricingNote: string;\n /** Cities where the listed prices apply; elsewhere the price is agreed on WhatsApp. */\n priceCities: string[];\n announcement: string;\n indexable: boolean;\n};\n\nexport const DEFAULT_SETTINGS: Settings = {\n workDays: [0, 1, 2, 3, 4, 5, 6],\n open: \"11:00\",\n close: \"22:00\",\n slotStep: 30,\n bufferMin: 30,\n minNoticeHours: 336,\n maxDaysAhead: 120,\n allowStudio: false,\n whatsapp: \"966506859518\",\n snapchat: \"najlamakeup11\",\n instagram: \"najla_makeupartist\",\n followers: \"٦٨ ألف\",\n tagline: \"خبيرة مكياج بخبرة تزيد عن ١٠ سنوات في مكياج العرائس والسهرات.\",\n about:\n \"خبيرة مكياج محترفة تتمتع بخبرة تزيد عن 10 سنوات في مجال التجميل.\\nمتخصصة في مكياج العرائس، والمكياج الناعم (Soft Glam)، والمكياج الكامل (Full Glam)، ومكياج جلسات التصوير (Editorial)، ومكياج التجميل الفاخر.\\nشغوفة بالابتكار في عالم الجمال، واختبار المنتجات، ومشاركة تجارب حقيقية وصادقة مع العلامات التجارية والجمهور.\\nلقد اكتسبتُ -على مدار سنوات خبرتي- كفاءة عالية في مجال مستحضرات التجميل الفاخرة، ومنتجات العناية بالبشرة، واتجاهات الجمال، وصناعة المحتوى المتعلق بالتجميل.\",\n policy:\n \"لا يتم تأكيد الحجز إلا بدفع العربون وتصوير الإيصال:\\n• الملكة والعروس: ٥٠٠ ر.س\\n• المرافقات: ١٠٠ ر.س عن كل مرافقة\\n🔴 علماً بأن العربون لا يُسترد ولا يؤجَّل ولا يُستبدل مع زبونة أخرى 🔴\",\n pricingNote: \"الأسعار داخل الخبر والدمام، وتختلف في باقي المناطق.\",\n priceCities: [\"الخبر\", \"الدمام\"],\n announcement: \"\",\n indexable: false,\n};\n\n// name, description, category, duration, price, price_pair, price_group\nconst SEED_SERVICES: [string, string, string, number, number | null, number | null, number | null][] = [\n [\"ميك اب عروس\", \"خطوات تهيئة البشرة + مكياج كامل + رموش + مكياج وهايلايت للجسم\", \"عرايس\", 40, 2000, null, null],\n [\"ميك اب السهرة\", \"مكياج كامل + الرموش\", \"سهرات\", 25, 800, 700, 600],\n];\n\ntype Arg = string | number | null;\nconst q = (sql: string, args: Arg[] = []) => sqlite.execute({ sql, args });\nconst all = (r: { rows: unknown[] }) => r.rows as T[];\nconst one = (r: { rows: unknown[] }) => (r.rows[0] as T | undefined) ?? null;\n\nlet ready: Promise | null = null;\nexport function ensureSchema(): Promise {\n ready ??= migrate().catch((e) => {\n ready = null;\n throw e;\n });\n return ready;\n}\n\nasync function migrate() {\n await sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS services (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n description TEXT NOT NULL DEFAULT '',\n category TEXT NOT NULL DEFAULT '',\n duration_min INTEGER NOT NULL DEFAULT 60,\n price INTEGER,\n price_pair INTEGER,\n price_group INTEGER,\n price_note TEXT NOT NULL DEFAULT '',\n active INTEGER NOT NULL DEFAULT 1,\n sort INTEGER NOT NULL DEFAULT 0)`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS bookings (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n code TEXT NOT NULL UNIQUE,\n service_id INTEGER NOT NULL,\n service_name TEXT NOT NULL,\n duration_min INTEGER NOT NULL,\n price INTEGER,\n date TEXT NOT NULL,\n time TEXT NOT NULL,\n start_min INTEGER NOT NULL,\n name TEXT NOT NULL,\n phone TEXT NOT NULL,\n location_type TEXT NOT NULL,\n city TEXT NOT NULL DEFAULT '',\n people INTEGER NOT NULL DEFAULT 1,\n notes TEXT NOT NULL DEFAULT '',\n status TEXT NOT NULL DEFAULT 'pending',\n created_at TEXT NOT NULL DEFAULT (datetime('now')))`,\n args: [],\n },\n { sql: \"CREATE INDEX IF NOT EXISTS idx_bookings_date ON bookings(date, status)\", args: [] },\n { sql: \"CREATE INDEX IF NOT EXISTS idx_bookings_phone ON bookings(phone)\", args: [] },\n {\n sql: `CREATE TABLE IF NOT EXISTS gallery (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n blob_key TEXT NOT NULL UNIQUE,\n mime TEXT NOT NULL,\n caption TEXT NOT NULL DEFAULT '',\n sort INTEGER NOT NULL DEFAULT 0,\n visible INTEGER NOT NULL DEFAULT 1)`,\n args: [],\n },\n { sql: \"CREATE TABLE IF NOT EXISTS settings (key TEXT PRIMARY KEY, value TEXT NOT NULL)\", args: [] },\n {\n sql: \"CREATE TABLE IF NOT EXISTS blocked_dates (date TEXT PRIMARY KEY, reason TEXT NOT NULL DEFAULT '')\",\n args: [],\n },\n {\n sql: \"CREATE TABLE IF NOT EXISTS login_failures (id INTEGER PRIMARY KEY AUTOINCREMENT, ip TEXT NOT NULL, at INTEGER NOT NULL)\",\n args: [],\n },\n ]);\n\n // Columns added after the first release; harmless if they already exist.\n for (const sql of [\n \"ALTER TABLE services ADD COLUMN price_pair INTEGER\",\n \"ALTER TABLE services ADD COLUMN price_group INTEGER\",\n ]) {\n try {\n await q(sql);\n } catch {\n // column exists\n }\n }\n\n if (one(await q(\"SELECT value FROM settings WHERE key = 'seeded'\"))) return;\n\n const n = one<{ n: number }>(await q(\"SELECT COUNT(*) AS n FROM services\"));\n if (Number(n?.n ?? 0) === 0) {\n await sqlite.batch(\n SEED_SERVICES.map(([name, description, category, duration, price, pair, group], i) => ({\n sql:\n \"INSERT INTO services (name, description, category, duration_min, price, price_pair, price_group, price_note, active, sort) VALUES (?, ?, ?, ?, ?, ?, ?, '', 1, ?)\",\n args: [name, description, category, duration, price, pair, group, i],\n })),\n );\n }\n if (await seedGallery()) {\n await q(\"INSERT OR REPLACE INTO settings (key, value) VALUES ('seeded', ?)\", [new Date().toISOString()]);\n }\n}\n\nconst b64ToBytes = (b64: string) => Uint8Array.from(atob(b64), (ch) => ch.charCodeAt(0));\n\nasync function seedGallery(): Promise {\n const n = one<{ n: number }>(await q(\"SELECT COUNT(*) AS n FROM gallery\"));\n if (Number(n?.n ?? 0) > 0) return true;\n let data: { logo?: string; items: { name: string; b64: string }[] };\n try {\n data = JSON.parse(await readFile(\"/data/gallery.json\"));\n } catch (e) {\n console.error(\"gallery seed skipped:\", e);\n return false;\n }\n if (data.logo) await blob.set(\"brand/logo\", b64ToBytes(data.logo));\n let sort = 0;\n for (const item of data.items) {\n const key = `gallery/${item.name}`;\n await blob.set(key, b64ToBytes(item.b64));\n await q(\"INSERT OR IGNORE INTO gallery (blob_key, mime, sort) VALUES (?, 'image/jpeg', ?)\", [key, sort++]);\n }\n return true;\n}\n\n// ── Settings ────────────────────────────────────────────────\nexport async function getSettings(): Promise {\n const row = one<{ value: string }>(await q(\"SELECT value FROM settings WHERE key = 'app'\"));\n if (!row) return { ...DEFAULT_SETTINGS };\n try {\n return { ...DEFAULT_SETTINGS, ...JSON.parse(row.value) };\n } catch {\n return { ...DEFAULT_SETTINGS };\n }\n}\n\nexport async function saveSettings(s: Settings) {\n await q(\n \"INSERT INTO settings (key, value) VALUES ('app', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value\",\n [JSON.stringify(s)],\n );\n}\n\n// ── Services ────────────────────────────────────────────────\nexport async function listServices(activeOnly: boolean) {\n return all(\n await q(`SELECT * FROM services ${activeOnly ? \"WHERE active = 1\" : \"\"} ORDER BY sort, id`),\n );\n}\n\nexport async function getService(id: number) {\n if (!Number.isInteger(id)) return null;\n return one(await q(\"SELECT * FROM services WHERE id = ?\", [id]));\n}\n\nexport async function createService(s: ServiceInput) {\n await q(\n \"INSERT INTO services (name, description, category, duration_min, price, price_pair, price_group, price_note, active, sort) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\",\n [s.name, s.description, s.category, s.duration_min, s.price, s.price_pair, s.price_group, s.price_note, s.active, s.sort],\n );\n}\n\nexport async function updateService(id: number, s: ServiceInput) {\n await q(\n \"UPDATE services SET name = ?, description = ?, category = ?, duration_min = ?, price = ?, price_pair = ?, price_group = ?, price_note = ?, active = ?, sort = ? WHERE id = ?\",\n [s.name, s.description, s.category, s.duration_min, s.price, s.price_pair, s.price_group, s.price_note, s.active, s.sort, id],\n );\n}\n\nexport async function deleteService(id: number) {\n await q(\"DELETE FROM services WHERE id = ?\", [id]);\n}\n\n// ── Bookings ────────────────────────────────────────────────\nconst CODE_ALPHABET = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\nfunction makeCode() {\n const bytes = crypto.getRandomValues(new Uint8Array(8));\n return Array.from(bytes, (b) => CODE_ALPHABET[b % CODE_ALPHABET.length]).join(\"\");\n}\n\n/** Atomic insert: fails if the slot overlaps an open booking (incl. buffer) or the day is blocked. */\nexport async function createBooking(\n b: NewBooking,\n bufferMin: number,\n): Promise<{ ok: true; code: string } | { ok: false }> {\n const code = makeCode();\n const r = await q(\n `INSERT INTO bookings (code, service_id, service_name, duration_min, price, date, time, start_min, name, phone, location_type, city, people, notes, status)\n SELECT ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?\n WHERE NOT EXISTS (\n SELECT 1 FROM bookings\n WHERE date = ? AND status IN ('pending', 'confirmed')\n AND start_min < ? AND ? < start_min + duration_min + ?)\n AND NOT EXISTS (SELECT 1 FROM blocked_dates WHERE date = ?)`,\n [\n code, b.service_id, b.service_name, b.duration_min, b.price, b.date, b.time, b.start_min,\n b.name, b.phone, b.location_type, b.city, b.people, b.notes, b.status,\n b.date, b.start_min + b.duration_min + bufferMin, b.start_min, bufferMin, b.date,\n ],\n );\n return r.rowsAffected > 0 ? { ok: true, code } : { ok: false };\n}\n\nexport async function openBookingsOnDate(date: string) {\n return all>(\n await q(\n \"SELECT start_min, duration_min FROM bookings WHERE date = ? AND status IN ('pending', 'confirmed')\",\n [date],\n ),\n );\n}\n\nexport async function getBookingByCode(code: string) {\n if (!/^[A-Z0-9]{8}$/.test(code)) return null;\n return one(await q(\"SELECT * FROM bookings WHERE code = ?\", [code]));\n}\n\nexport async function listBookings(view: BookingView, today: string) {\n const queries: Record = {\n upcoming: [\n \"SELECT * FROM bookings WHERE date >= ? AND status IN ('pending', 'confirmed') ORDER BY date, start_min\",\n [today],\n ],\n pending: [\"SELECT * FROM bookings WHERE date >= ? AND status = 'pending' ORDER BY date, start_min\", [today]],\n past: [\n \"SELECT * FROM bookings WHERE date < ? OR status IN ('done', 'cancelled') ORDER BY date DESC, start_min DESC LIMIT 200\",\n [today],\n ],\n all: [\"SELECT * FROM bookings ORDER BY date DESC, start_min DESC LIMIT 300\", []],\n };\n const [sql, args] = queries[view];\n return all(await q(sql, args));\n}\n\nexport async function bookingStats(today: string, weekEnd: string) {\n const r = one>(\n await q(\n `SELECT\n SUM(CASE WHEN status = 'pending' AND date >= ? THEN 1 ELSE 0 END) AS pending,\n SUM(CASE WHEN status = 'confirmed' AND date >= ? THEN 1 ELSE 0 END) AS confirmed,\n SUM(CASE WHEN status IN ('pending', 'confirmed') AND date = ? THEN 1 ELSE 0 END) AS today,\n SUM(CASE WHEN status IN ('pending', 'confirmed') AND date >= ? AND date <= ? THEN 1 ELSE 0 END) AS week\n FROM bookings`,\n [today, today, today, today, weekEnd],\n ),\n );\n return {\n pending: Number(r?.pending ?? 0),\n confirmed: Number(r?.confirmed ?? 0),\n today: Number(r?.today ?? 0),\n week: Number(r?.week ?? 0),\n };\n}\n\nexport async function setBookingStatus(id: number, status: Status) {\n await q(\"UPDATE bookings SET status = ? WHERE id = ?\", [status, id]);\n}\n\nexport async function countOpenBookingsByPhone(phone: string, today: string) {\n const r = one<{ n: number }>(\n await q(\"SELECT COUNT(*) AS n FROM bookings WHERE phone = ? AND status = 'pending' AND date >= ?\", [phone, today]),\n );\n return Number(r?.n ?? 0);\n}\n\n// ── Blocked dates ───────────────────────────────────────────\nexport async function listBlocked(from: string) {\n return all<{ date: string; reason: string }>(\n await q(\"SELECT * FROM blocked_dates WHERE date >= ? ORDER BY date\", [from]),\n );\n}\n\nexport async function isBlocked(date: string) {\n return !!one(await q(\"SELECT 1 FROM blocked_dates WHERE date = ?\", [date]));\n}\n\nexport async function addBlocked(date: string, reason: string) {\n await q(\"INSERT OR REPLACE INTO blocked_dates (date, reason) VALUES (?, ?)\", [date, reason]);\n}\n\nexport async function removeBlocked(date: string) {\n await q(\"DELETE FROM blocked_dates WHERE date = ?\", [date]);\n}\n\n// ── Gallery ─────────────────────────────────────────────────\nexport async function listGallery(visibleOnly: boolean) {\n return all(\n await q(`SELECT * FROM gallery ${visibleOnly ? \"WHERE visible = 1\" : \"\"} ORDER BY sort, id`),\n );\n}\n\nexport async function getGalleryItem(id: number) {\n if (!Number.isInteger(id)) return null;\n return one(await q(\"SELECT * FROM gallery WHERE id = ?\", [id]));\n}\n\nexport async function addGalleryItem(key: string, mime: string) {\n await q(\n \"INSERT INTO gallery (blob_key, mime, sort) VALUES (?, ?, (SELECT COALESCE(MAX(sort), 0) + 1 FROM gallery))\",\n [key, mime],\n );\n}\n\nexport async function toggleGalleryItem(id: number) {\n await q(\"UPDATE gallery SET visible = 1 - visible WHERE id = ?\", [id]);\n}\n\nexport async function makeGalleryHero(id: number) {\n await q(\n \"UPDATE gallery SET sort = (SELECT COALESCE(MIN(sort), 0) - 1 FROM gallery), visible = 1 WHERE id = ?\",\n [id],\n );\n}\n\nexport async function deleteGalleryItem(id: number) {\n await q(\"DELETE FROM gallery WHERE id = ?\", [id]);\n}\n\n// ── Login throttling ────────────────────────────────────────\nconst WINDOW_MS = 15 * 60 * 1000;\n\nexport async function recentLoginFailures(ip: string) {\n const r = one<{ n: number }>(\n await q(\"SELECT COUNT(*) AS n FROM login_failures WHERE ip = ? AND at > ?\", [ip, Date.now() - WINDOW_MS]),\n );\n return Number(r?.n ?? 0);\n}\n\nexport async function recordLoginFailure(ip: string) {\n await sqlite.batch([\n { sql: \"DELETE FROM login_failures WHERE at < ?\", args: [Date.now() - WINDOW_MS] },\n { sql: \"INSERT INTO login_failures (ip, at) VALUES (?, ?)\", args: [ip, Date.now()] },\n ]);\n}\n","deleted",false,"label",[57,35],"lib",{"_33":214,"_13":215,"_36":216,"_38":-5,"_40":41,"_42":217,"_44":45,"_46":218,"_17":89,"_49":90,"_51":-5,"_53":54,"_55":-5,"_72":219,"_18":220},{"_33":179,"_13":57,"_36":39,"_38":-5,"_40":41,"_42":48,"_44":45,"_46":180,"_17":89,"_49":90,"_51":-5,"_53":54,"_55":-5,"_72":181,"_18":182},{"_33":147,"_13":148,"_36":149,"_38":-5,"_40":41,"_42":80,"_44":45,"_46":150,"_17":89,"_49":90,"_51":-5,"_53":54,"_55":-5,"_72":151,"_18":152},{"_33":140,"_13":141,"_36":142,"_38":-5,"_40":41,"_42":143,"_44":45,"_46":144,"_17":89,"_49":90,"_51":-5,"_53":54,"_55":-5,"_72":145,"_18":146},{"_33":84,"_13":85,"_36":86,"_38":-5,"_40":41,"_42":87,"_44":45,"_46":88,"_17":89,"_49":90,"_51":-5,"_53":54,"_55":-5,"_72":91,"_18":92},{"_33":75,"_13":76,"_36":77,"_38":-5,"_40":41,"_42":78,"_44":45,"_46":79,"_17":80,"_49":24,"_51":81,"_53":54,"_55":-5,"_72":82,"_18":83},{"_33":65,"_13":66,"_36":67,"_38":-5,"_40":41,"_42":68,"_44":45,"_46":69,"_17":48,"_49":70,"_51":71,"_53":54,"_55":14,"_72":73,"_18":74},"14693d07-44e1-4cda-b719-b955edc6b2b1","index.tsx","01a09cac-8e2f-7716-b801-b7ea38740c6d",46,["D",1789376501345],"http","/** @jsxImportSource npm:hono@4/jsx */\nimport { Hono } from \"npm:hono@4\";\nimport type { Context } from \"npm:hono@4\";\nimport { serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport * as db from \"./lib/db.ts\";\nimport type { BookingView, Settings, Status } from \"./lib/db.ts\";\nimport { addDays, availableSlots, isDate, isTime, nowRiyadh, toMin } from \"./lib/time.ts\";\nimport { CITIES, isLocation, normalizePhone, toLatinDigits, unitPrice } from \"./lib/format.ts\";\nimport { checkPassword, clientIp, endSession, requireAdmin, startSession } from \"./lib/auth.ts\";\nimport { BookingPage, BookPage, HomePage, NotFoundPage } from \"./views/public.tsx\";\nimport { BookingsAdmin, GalleryAdmin, LoginPage, ServicesAdmin, SettingsAdmin } from \"./views/admin.tsx\";\n\nconst app = new Hono();\n\ntype Body = Record;\nconst str = (b: Body, key: string, max = 500) => {\n const v = b[key];\n return typeof v === \"string\" ? v.trim().slice(0, max) : \"\";\n};\nconst int = (raw: string, min: number, max: number, fallback: number) => {\n const n = Number(toLatinDigits(raw));\n return raw !== \"\" && Number.isInteger(n) && n >= min && n <= max ? n : fallback;\n};\nconst clampPeople = (raw: string) => int(raw, 1, 6, 1);\nconst list = (b: Body, key: string) => ([] as unknown[]).concat(b[key] ?? []).filter((v): v is string => typeof v === \"string\");\n\n/** Listed prices only apply in the configured cities; elsewhere the price is agreed on WhatsApp. */\nfunction bookingPrice(service: db.Service, people: number, city: string, s: Settings) {\n const unit = unitPrice(service, people);\n return unit != null && s.priceCities.includes(city) ? unit * people : null;\n}\n\nasync function render(c: Context, el: unknown, status = 200) {\n const html = await (el as { toString(): string | Promise }).toString();\n return c.html(\"\" + html, status as 200);\n}\n\napp.use(\"*\", async (c, next) => {\n await db.ensureSchema();\n await next();\n try {\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"strict-origin-when-cross-origin\");\n if (c.req.path.startsWith(\"/admin\")) {\n c.header(\"X-Frame-Options\", \"DENY\");\n c.header(\"Cache-Control\", \"no-store\");\n }\n } catch {\n // some responses have immutable headers\n }\n});\n\n// ── Public site ─────────────────────────────────────────────\napp.get(\"/\", async (c) => {\n const [s, services, gallery] = await Promise.all([\n db.getSettings(),\n db.listServices(true),\n db.listGallery(true),\n ]);\n return render(c, );\n});\n\nfunction bookingRange(s: Settings) {\n const today = nowRiyadh().date;\n return { minDate: addDays(today, Math.floor(s.minNoticeHours / 24)), maxDate: addDays(today, s.maxDaysAhead) };\n}\n\napp.get(\"/book\", async (c) => {\n const [s, services] = await Promise.all([db.getSettings(), db.listServices(true)]);\n const values = { service_id: c.req.query(\"service\") ?? \"\", people: \"1\" };\n return render(c, );\n});\n\napp.get(\"/api/slots\", async (c) => {\n const [s, service] = await Promise.all([\n db.getSettings(),\n db.getService(Number(c.req.query(\"service\"))),\n ]);\n c.header(\"Cache-Control\", \"no-store\");\n if (!service || !service.active) return c.json({ ok: false, reason: \"الخدمة غير متاحة.\", slots: [] });\n const people = clampPeople(c.req.query(\"people\") ?? \"1\");\n return c.json(await availableSlots(c.req.query(\"date\") ?? \"\", service.duration_min * people, s));\n});\n\nconst BOOK_FIELDS = [\"service_id\", \"people\", \"location_type\", \"city\", \"date\", \"time\", \"name\", \"phone\", \"notes\"];\n\napp.post(\"/book\", async (c) => {\n const body = (await c.req.parseBody()) as Body;\n if (str(body, \"website\")) return c.redirect(\"/\"); // honeypot\n const v: Record = Object.fromEntries(BOOK_FIELDS.map((k) => [k, str(body, k, 1000)]));\n const [s, services] = await Promise.all([db.getSettings(), db.listServices(true)]);\n const fail = (error: string) =>\n render(c, , 422);\n\n const service = services.find((x) => String(x.id) === v.service_id);\n if (!service) return fail(\"اختاري الخدمة المطلوبة.\");\n const name = v.name.slice(0, 80);\n if (name.length < 2) return fail(\"اكتبي الاسم.\");\n const phone = normalizePhone(v.phone);\n if (!phone) return fail(\"رقم الجوال غير صحيح. اكتبيه مثل 05xxxxxxxx أو مع رمز الدولة.\");\n if (!isLocation(v.location_type) || (v.location_type === \"studio\" && !s.allowStudio)) {\n return fail(\"اختاري مكان الخدمة.\");\n }\n const city = CITIES.includes(v.city) ? v.city : \"\";\n if (v.location_type !== \"studio\" && !city) return fail(\"اختاري المدينة.\");\n\n const people = clampPeople(v.people);\n const duration = service.duration_min * people;\n const slots = await availableSlots(v.date, duration, s);\n if (!slots.ok) return fail(slots.reason);\n if (!slots.slots.includes(v.time)) return fail(\"الوقت المختار غير متاح، اختاري وقتاً آخر.\");\n if ((await db.countOpenBookingsByPhone(phone, nowRiyadh().date)) >= 3) {\n return fail(\"لديك عدة طلبات بانتظار التأكيد. تواصلي معنا عبر واتساب لإضافة المزيد.\");\n }\n\n const r = await db.createBooking({\n service_id: service.id,\n service_name: service.name,\n duration_min: duration,\n price: bookingPrice(service, people, city, s),\n date: v.date,\n time: v.time,\n start_min: toMin(v.time),\n name,\n phone,\n location_type: v.location_type,\n city,\n people,\n notes: v.notes,\n status: \"pending\",\n }, s.bufferMin);\n if (!r.ok) return fail(\"سبقك حجز آخر على هذا الوقت، اختاري وقتاً آخر.\");\n return c.redirect(`/b/${r.code}`);\n});\n\napp.get(\"/b/:code\", async (c) => {\n const b = await db.getBookingByCode(c.req.param(\"code\").toUpperCase());\n if (!b) return render(c, , 404);\n c.header(\"Cache-Control\", \"no-store\");\n return render(c, );\n});\n\nfunction sniffMime(b: Uint8Array) {\n if (b[0] === 0x89 && b[1] === 0x50) return \"image/png\";\n if (b[0] === 0x52 && b[1] === 0x49 && b[8] === 0x57 && b[9] === 0x45) return \"image/webp\";\n return \"image/jpeg\";\n}\n\napp.get(\"/img/:kind{gallery|brand}/:name\", async (c) => {\n try {\n const res = await blob.get(`${c.req.param(\"kind\")}/${c.req.param(\"name\")}`);\n if (!res.ok) return c.notFound();\n const bytes = new Uint8Array(await res.arrayBuffer());\n return c.body(bytes, 200, { \"Content-Type\": sniffMime(bytes), \"Cache-Control\": \"public, max-age=86400\" });\n } catch {\n return c.notFound();\n }\n});\n\napp.get(\"/robots.txt\", async (c) => {\n const s = await db.getSettings();\n return c.text(\n s.indexable ? \"User-agent: *\\nDisallow: /admin\\nDisallow: /b/\\n\" : \"User-agent: *\\nDisallow: /\\n\",\n );\n});\n\napp.get(\"/public/*\", (c) => serveFile(c.req.path));\n\n// ── Admin ───────────────────────────────────────────────────\napp.use(\"/admin\", requireAdmin);\napp.use(\"/admin/*\", async (c, next) => {\n if (c.req.path === \"/admin/login\") return await next();\n return await requireAdmin(c, next);\n});\n\napp.get(\"/admin/login\", (c) => render(c, ));\n\napp.post(\"/admin/login\", async (c) => {\n const ip = clientIp(c);\n if ((await db.recentLoginFailures(ip)) >= 8) {\n return render(c, , 429);\n }\n const body = (await c.req.parseBody()) as Body;\n const password = typeof body.password === \"string\" ? body.password.slice(0, 200) : \"\";\n if (await checkPassword(password)) {\n await startSession(c);\n return c.redirect(\"/admin\");\n }\n await db.recordLoginFailure(ip);\n return render(c, , 401);\n});\n\napp.post(\"/admin/logout\", (c) => {\n endSession(c);\n return c.redirect(\"/admin/login\");\n});\n\nconst VIEWS: BookingView[] = [\"upcoming\", \"pending\", \"past\", \"all\"];\n\napp.get(\"/admin\", async (c) => {\n const today = nowRiyadh().date;\n const requested = c.req.query(\"view\") as BookingView;\n const view = VIEWS.includes(requested) ? requested : \"upcoming\";\n const [bookings, stats, services] = await Promise.all([\n db.listBookings(view, today),\n db.bookingStats(today, addDays(today, 7)),\n db.listServices(false),\n ]);\n return render(\n c,\n ,\n );\n});\n\napp.post(\"/admin/bookings/new\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const fail = (code: string) => c.redirect(`/admin?err=${code}`);\n const service = await db.getService(Number(str(b, \"service_id\")));\n if (!service) return fail(\"service\");\n const date = str(b, \"date\");\n if (!isDate(date)) return fail(\"date\");\n const time = str(b, \"time\").slice(0, 5);\n if (!isTime(time)) return fail(\"time\");\n const name = str(b, \"name\", 80);\n if (name.length < 2) return fail(\"name\");\n const phone = normalizePhone(str(b, \"phone\"));\n if (!phone) return fail(\"phone\");\n const people = clampPeople(str(b, \"people\"));\n const location = str(b, \"location_type\");\n const cityRaw = str(b, \"city\");\n const city = CITIES.includes(cityRaw) ? cityRaw : \"\";\n const s = await db.getSettings();\n const r = await db.createBooking({\n service_id: service.id,\n service_name: service.name,\n duration_min: service.duration_min * people,\n price: bookingPrice(service, people, city, s),\n date,\n time,\n start_min: toMin(time),\n name,\n phone,\n location_type: isLocation(location) ? location : \"home\",\n city,\n people,\n notes: str(b, \"notes\", 1000),\n status: str(b, \"status\") === \"pending\" ? \"pending\" : \"confirmed\",\n }, s.bufferMin);\n return r.ok ? c.redirect(\"/admin?ok=added\") : fail(\"taken\");\n});\n\napp.post(\"/admin/bookings/:id/status\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const status = str(b, \"status\") as Status;\n if (!(db.STATUSES as readonly string[]).includes(status)) return c.text(\"bad request\", 400);\n await db.setBookingStatus(Number(c.req.param(\"id\")), status);\n const back = str(b, \"back\");\n return c.redirect(/^\\/admin(\\?[\\w=&]*)?$/.test(back) ? back : \"/admin\");\n});\n\nfunction serviceInput(b: Body): db.ServiceInput | null {\n const name = str(b, \"name\", 80);\n if (!name) return null;\n const money = (key: string) => {\n const digits = toLatinDigits(str(b, key)).replace(/[^\\d]/g, \"\");\n return digits ? Math.min(Number(digits), 1_000_000) : null;\n };\n return {\n name,\n description: str(b, \"description\", 600),\n category: str(b, \"category\", 40),\n duration_min: int(str(b, \"duration_min\"), 5, 600, 60),\n price: money(\"price\"),\n price_pair: money(\"price_pair\"),\n price_group: money(\"price_group\"),\n price_note: str(b, \"price_note\", 60),\n active: b.active === \"on\" ? 1 : 0,\n sort: int(str(b, \"sort\"), -1000, 1000, 0),\n };\n}\n\napp.get(\"/admin/services\", async (c) =>\n render(c, ));\n\napp.post(\"/admin/services\", async (c) => {\n const input = serviceInput((await c.req.parseBody()) as Body);\n if (input) await db.createService(input);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\napp.post(\"/admin/services/:id\", async (c) => {\n const input = serviceInput((await c.req.parseBody()) as Body);\n const id = Number(c.req.param(\"id\"));\n if (input && Number.isInteger(id)) await db.updateService(id, input);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\napp.post(\"/admin/services/:id/delete\", async (c) => {\n const id = Number(c.req.param(\"id\"));\n if (Number.isInteger(id)) await db.deleteService(id);\n return c.redirect(\"/admin/services?ok=1\");\n});\n\nconst IMAGE_TYPES = [\"image/jpeg\", \"image/png\", \"image/webp\"];\n\napp.get(\"/admin/gallery\", async (c) =>\n render(\n c,\n ,\n ));\n\napp.post(\"/admin/gallery\", async (c) => {\n const body = await c.req.parseBody({ all: true });\n const files = ([] as unknown[]).concat(body.photos ?? []).filter((f): f is File => f instanceof File);\n let added = 0;\n let rejected = 0;\n for (const f of files) {\n if (!IMAGE_TYPES.includes(f.type) || f.size === 0 || f.size > 5_000_000) {\n rejected++;\n continue;\n }\n const key = `gallery/${crypto.randomUUID()}`;\n await blob.set(key, new Uint8Array(await f.arrayBuffer()));\n await db.addGalleryItem(key, f.type);\n added++;\n }\n return c.redirect(`/admin/gallery?added=${added}&rejected=${rejected}`);\n});\n\napp.post(\"/admin/gallery/:id/:action{hero|toggle|delete}\", async (c) => {\n const item = await db.getGalleryItem(Number(c.req.param(\"id\")));\n if (item) {\n const action = c.req.param(\"action\");\n if (action === \"hero\") await db.makeGalleryHero(item.id);\n else if (action === \"toggle\") await db.toggleGalleryItem(item.id);\n else {\n await db.deleteGalleryItem(item.id);\n await blob.delete(item.blob_key).catch(() => {});\n }\n }\n return c.redirect(\"/admin/gallery\");\n});\n\napp.get(\"/admin/settings\", async (c) => {\n const today = nowRiyadh().date;\n const [s, blocked] = await Promise.all([db.getSettings(), db.listBlocked(today)]);\n return render(\n c,\n ,\n );\n});\n\napp.post(\"/admin/settings\", async (c) => {\n const b = (await c.req.parseBody({ all: true })) as Body;\n const cur = await db.getSettings();\n const workDays = [...new Set(list(b, \"workDays\").map(Number))]\n .filter((d) => Number.isInteger(d) && d >= 0 && d <= 6)\n .sort();\n if (!workDays.length) return c.redirect(\"/admin/settings?err=days\");\n const open = isTime(str(b, \"open\")) ? str(b, \"open\") : cur.open;\n const close = isTime(str(b, \"close\")) ? str(b, \"close\") : cur.close;\n if (toMin(open) >= toMin(close)) return c.redirect(\"/admin/settings?err=hours\");\n const handle = (key: string, fallback: string) => {\n const v = str(b, key, 60).replace(/^@/, \"\");\n return /^[A-Za-z0-9._-]{1,40}$/.test(v) ? v : fallback;\n };\n const next: Settings = {\n ...cur,\n workDays,\n open,\n close,\n slotStep: int(str(b, \"slotStep\"), 5, 120, cur.slotStep),\n bufferMin: int(str(b, \"bufferMin\"), 0, 240, cur.bufferMin),\n minNoticeHours: int(str(b, \"minNoticeHours\"), 0, 1440, cur.minNoticeHours),\n maxDaysAhead: int(str(b, \"maxDaysAhead\"), 1, 730, cur.maxDaysAhead),\n allowStudio: b.allowStudio === \"on\",\n whatsapp: normalizePhone(str(b, \"whatsapp\")) ?? cur.whatsapp,\n instagram: handle(\"instagram\", cur.instagram),\n snapchat: handle(\"snapchat\", cur.snapchat),\n followers: str(b, \"followers\", 30),\n tagline: str(b, \"tagline\", 300),\n about: str(b, \"about\", 3000),\n policy: str(b, \"policy\", 3000),\n pricingNote: str(b, \"pricingNote\", 200),\n priceCities: \"priceCitiesField\" in b ? list(b, \"priceCities\").filter((c) => CITIES.includes(c)) : cur.priceCities,\n announcement: str(b, \"announcement\", 300),\n indexable: b.indexable === \"on\",\n };\n await db.saveSettings(next);\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.post(\"/admin/blocked\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const date = str(b, \"date\");\n if (isDate(date)) await db.addBlocked(date, str(b, \"reason\", 80));\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.post(\"/admin/blocked/delete\", async (c) => {\n const b = (await c.req.parseBody()) as Body;\n const date = str(b, \"date\");\n if (isDate(date)) await db.removeBlocked(date);\n return c.redirect(\"/admin/settings?ok=1\");\n});\n\napp.notFound((c) => render(c, , 404));\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","children",[],[66],"eea1a183-19dd-4dfc-b8f2-f299117b29db","README.md","01a09cac-8e2f-7716-b801-b39afe182f45",14,["D",1789336164645],1,"# موقع نجلاء الغفيلي — ميك اب ارتست\n\nموقع تعريفي + نظام حجوزات + لوحة إدارة. Hono JSX على Val Town، SQLite للبيانات، Blob للصور.\n\n## الصفحات\n- `/` الرئيسية: الواجهة، النبذة، الخدمات، المعرض، طريقة الحجز، التواصل\n- `/book` نموذج الحجز (الأوقات المتاحة تُحسب من `/api/slots`)\n- `/b/:code` صفحة حالة الحجز + إرسال التفاصيل عبر واتساب\n- `/admin` لوحة الإدارة: الحجوزات (تأكيد/إلغاء/حجز يدوي)، الخدمات والأسعار، المعرض (رفع/إخفاء/واجهة)، الإعدادات (أيام وساعات العمل، أيام مغلقة، النصوص، الظهور في البحث)\n\n## متغيرات البيئة\n- `ADMIN_PASSWORD` كلمة مرور اللوحة\n- `SESSION_SECRET` مفتاح توقيع الجلسة\n\n## منطق التوفر\nالحجز يشغل `مدة الخدمة × عدد الأشخاص` + فاصل راحة/تنقّل. الإدخال ذرّي في SQL فلا يمكن حجز وقتين متداخلين حتى مع طلبين متزامنين. الحجوزات بحالة «بانتظار التأكيد» تحجز الوقت مبدئياً.\n\n## الصور\n`data/gallery.json` بذرة أولية من حساب إنستقرام @najla_makeupartist تُنسخ إلى Blob عند أول تشغيل؛ بعدها تُدار الصور من `/admin/gallery`.\n",[],[76],"14393c21-7ac3-4629-bc0f-c1dea4cd24a0","views","37f26134-5ccd-45c7-af8e-dfb68d37fdd7",6,["D",1789335744271],0,"directory",[93,94,95,96,97],[85],{"_33":131,"_13":132,"_36":133,"_38":86,"_40":41,"_42":134,"_44":45,"_46":135,"_17":136,"_49":50,"_51":137,"_53":54,"_55":-5,"_72":138,"_18":139},{"_33":123,"_13":124,"_36":125,"_38":86,"_40":41,"_42":126,"_44":45,"_46":127,"_17":89,"_49":50,"_51":128,"_53":54,"_55":-5,"_72":129,"_18":130},{"_33":115,"_13":116,"_36":117,"_38":86,"_40":41,"_42":118,"_44":45,"_46":119,"_17":103,"_49":50,"_51":120,"_53":54,"_55":-5,"_72":121,"_18":122},{"_33":107,"_13":108,"_36":109,"_38":86,"_40":41,"_42":110,"_44":45,"_46":111,"_17":80,"_49":50,"_51":112,"_53":54,"_55":-5,"_72":113,"_18":114},{"_33":98,"_13":99,"_36":100,"_38":86,"_40":41,"_42":101,"_44":45,"_46":102,"_17":103,"_49":50,"_51":104,"_53":54,"_55":-5,"_72":105,"_18":106},"bc58168a-feee-40a5-b453-dfbcccf64962","public.tsx","3fd93c0a-afbc-11f1-a6ad-1607ee4eb77e",45,["D",1789376443057],3,"/** @jsxImportSource npm:hono@4/jsx */\nimport type { Booking, GalleryItem, Service, Settings } from \"../lib/db.ts\";\nimport {\n CITIES,\n fmtDuration,\n fmtPrice,\n LOCATIONS,\n peopleLabel,\n servicePrice,\n STATUS_LABELS,\n tierText,\n waLink,\n} from \"../lib/format.ts\";\nimport { fmtDate, fmtTime } from \"../lib/time.ts\";\nimport { Arrow, Social, type SocialName } from \"./icons.tsx\";\nimport { Layout } from \"./layout.tsx\";\nimport { Mark } from \"./mark.tsx\";\n\nexport const NAME = \"نجلاء الغفيلي\";\nconst src = (g: GalleryItem) => `/img/${g.blob_key}`;\n\nfunction Nav({ s, book = true }: { s?: Settings; book?: boolean }) {\n return (\n

\n \n {s?.announcement ?

{s.announcement}

: null}\n

\n );\n}\n\nfunction Footer({ s }: { s: Settings }) {\n const links: { name: SocialName; label: string; href: string; ltr?: boolean }[] = [\n { name: \"whatsapp\", label: \"واتساب\", href: waLink(s.whatsapp, \"مرحبا نجلاء 🌸\") },\n { name: \"instagram\", label: `@${s.instagram}`, href: `https://www.instagram.com/${s.instagram}/`, ltr: true },\n { name: \"snapchat\", label: s.snapchat, href: `https://www.snapchat.com/add/${s.snapchat}`, ltr: true },\n ];\n return (\n \n );\n}\n\nexport function HomePage({ s, services, gallery }: { s: Settings; services: Service[]; gallery: GalleryItem[] }) {\n const hero = gallery[0];\n const side = gallery[1] ?? hero;\n const closing = gallery[2] ?? hero;\n const reel = gallery.length > 1 ? gallery.slice(1) : gallery;\n const place = `ميك اب ارتست · الشرقية والبحرين${s.followers ? ` · ${s.followers} متابعة` : \"\"}`;\n return (\n \n

\n {hero\n ? (\n