[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_157":158,"_159":160},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_119":-5,"_20":120,"_22":121,"_122":123,"_124":125,"_25":126,"_24":-5,"_127":-5,"_128":-5,"_129":53,"_130":131,"_132":44,"_133":-5,"_134":-5,"_135":136},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","davidsitnikov","name","test","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":19,"_69":-5,"_70":71,"_72":-5,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":85,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":97,"_98":99,"_100":101,"_102":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","fa72ef0e-5745-11f1-acf3-ee650bb23af1","main.ts","fileId","4814a1ba-573e-11f1-996b-ee650bb23af1","parentId","branchId","48126d6e-573e-11f1-996b-ee650bb23af1","branchVersion",13,"latest",true,"createdAt",["D",1779609349126],12,"fileType","http","content","import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst app = new Hono();\n\n// Constants\nconst ADMIN_USERNAME = \"admin\";\nconst ADMIN_PASSWORD = \"admin123\"; // В продакшене использовать хеширование!\nconst SESSION_COOKIE_NAME = \"helpdesk_session\";\nconst ADMIN_COOKIE_NAME = \"helpdesk_admin\";\n\n// Простое хеширование пароля (для демо; в продакшене использовать bcrypt)\nasync function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password + \"helpdesk_salt_2024\");\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n// Валидация email\nfunction isValidEmail(email: string): boolean {\n const emailRegex = /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}$/;\n return emailRegex.test(email);\n}\n\n// Валидация username\nfunction isValidUsername(username: string): boolean {\n // 3-20 символов, только буквы, цифры, подчёркивания\n const usernameRegex = /^[a-zA-Z0-9_]{3,20}$/;\n return usernameRegex.test(username);\n}\n\n// Валидация пароля\nfunction isValidPassword(password: string): { valid: boolean; error?: string } {\n if (password.length < 6) {\n return { valid: false, error: \"Пароль должен быть не менее 6 символов\" };\n }\n if (password.length > 100) {\n return { valid: false, error: \"Пароль слишком длинный\" };\n }\n if (!/[a-zA-Z]/.test(password)) {\n return { valid: false, error: \"Пароль должен содержать хотя бы одну букву\" };\n }\n if (!/[0-9]/.test(password)) {\n return { valid: false, error: \"Пароль должен содержать хотя бы одну цифру\" };\n }\n return { valid: true };\n}\n\n// Генерация кода верификации\nfunction generateVerificationCode(): string {\n return Math.floor(100000 + Math.random() * 900000).toString();\n}\n\n// Генерация токена\nfunction generateToken(): string {\n return Math.random().toString(36).substr(2, 16) + Date.now().toString(36) + Math.random().toString(36).substr(2, 16);\n}\n\n// Инициализация базы данных\nasync function initDatabase() {\n // Таблица пользователей\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT UNIQUE NOT NULL,\n email TEXT UNIQUE NOT NULL,\n password_hash TEXT NOT NULL,\n email_verified INTEGER DEFAULT 0,\n verification_code TEXT,\n verification_expires_at DATETIME,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )\n `);\n\n // Таблица сессий пользователей\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS user_sessions (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL,\n session_token TEXT UNIQUE NOT NULL,\n username TEXT NOT NULL,\n email TEXT NOT NULL,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n expires_at DATETIME,\n FOREIGN KEY (user_id) REFERENCES users(id)\n )\n `);\n\n // Таблица запросов\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS requests (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n request_text TEXT NOT NULL,\n timestamp DATETIME DEFAULT CURRENT_TIMESTAMP,\n ip_address TEXT,\n user_agent TEXT,\n browser_name TEXT,\n browser_version TEXT,\n os_name TEXT,\n os_version TEXT,\n device_type TEXT,\n cookies TEXT,\n session_id TEXT,\n username TEXT,\n email TEXT,\n status TEXT DEFAULT 'open'\n )\n `);\n\n // Таблица чат-сообщений\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS chat_messages (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n room_id TEXT NOT NULL,\n session_id TEXT NOT NULL,\n username TEXT,\n message_text TEXT NOT NULL,\n sender_type TEXT NOT NULL,\n timestamp DATETIME DEFAULT CURRENT_TIMESTAMP\n )\n `);\n\n // Таблица админских сессий\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS admin_sessions (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n admin_username TEXT NOT NULL,\n token TEXT UNIQUE NOT NULL,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )\n `);\n}\n\n// Парсинг User Agent\nfunction parseUserAgent(userAgent: string) {\n let browserName = \"Unknown\";\n let browserVersion = \"Unknown\";\n let osName = \"Unknown\";\n let osVersion = \"Unknown\";\n let deviceType = \"Desktop\";\n\n if (userAgent.includes(\"Chrome\") && !userAgent.includes(\"Chromium\")) {\n browserName = \"Chrome\";\n const match = userAgent.match(/Chrome\\/(\\d+\\.\\d+)/);\n if (match) browserVersion = match[1];\n } else if (userAgent.includes(\"Safari\") && !userAgent.includes(\"Chrome\")) {\n browserName = \"Safari\";\n const match = userAgent.match(/Version\\/(\\d+\\.\\d+)/);\n if (match) browserVersion = match[1];\n } else if (userAgent.includes(\"Firefox\")) {\n browserName = \"Firefox\";\n const match = userAgent.match(/Firefox\\/(\\d+\\.\\d+)/);\n if (match) browserVersion = match[1];\n } else if (userAgent.includes(\"Edge\")) {\n browserName = \"Edge\";\n const match = userAgent.match(/Edge\\/(\\d+\\.\\d+)/);\n if (match) browserVersion = match[1];\n } else if (userAgent.includes(\"Opera\")) {\n browserName = \"Opera\";\n const match = userAgent.match(/Opera\\/(\\d+\\.\\d+)/);\n if (match) browserVersion = match[1];\n }\n\n if (userAgent.includes(\"Windows\")) {\n osName = \"Windows\";\n if (userAgent.includes(\"Windows NT 10.0\")) osVersion = \"10/11\";\n else if (userAgent.includes(\"Windows NT 6.3\")) osVersion = \"8.1\";\n else if (userAgent.includes(\"Windows NT 6.2\")) osVersion = \"8\";\n } else if (userAgent.includes(\"Mac\")) {\n osName = \"macOS\";\n const match = userAgent.match(/Mac OS X ([\\d._]+)/);\n if (match) osVersion = match[1].replace(/_/g, \".\");\n } else if (userAgent.includes(\"Linux\")) {\n osName = \"Linux\";\n } else if (userAgent.includes(\"iPhone\")) {\n osName = \"iOS\";\n deviceType = \"Mobile\";\n } else if (userAgent.includes(\"iPad\")) {\n osName = \"iOS\";\n deviceType = \"Tablet\";\n } else if (userAgent.includes(\"Android\")) {\n osName = \"Android\";\n deviceType = userAgent.includes(\"Mobile\") ? \"Mobile\" : \"Tablet\";\n }\n\n return { browserName, browserVersion, osName, osVersion, deviceType };\n}\n\n// Получение IP клиента\nfunction getClientIP(req: any): string {\n try {\n const forwarded = req.header(\"x-forwarded-for\");\n if (forwarded) return forwarded.split(\",\")[0].trim();\n const real = req.header(\"x-real-ip\");\n if (real) return real;\n const cf = req.header(\"cf-connecting-ip\");\n if (cf) return cf;\n return \"Unknown\";\n } catch (e) {\n return \"Unknown\";\n }\n}\n\n// Отправка email с кодом верификации\nasync function sendVerificationEmail(email: string, code: string, username: string) {\n try {\n const { email: emailLib } = await import(\"https://esm.town/v/std/email\");\n await emailLib({\n subject: \"Helpdesk - Подтверждение Email\",\n html: `\n

🎯 Helpdesk Support

Подтверждение Email

Привет, ${username}!

\n Спасибо за регистрацию в Helpdesk Support System. Для завершения регистрации введите этот код подтверждения:\n

ВАШ КОД ПОДТВЕРЖДЕНИЯ:

${code}

\n ⏱️ Код действителен в течение 15 минут.
\n 🔒 Если вы не регистрировались, проигнорируйте это письмо.\n

\n `,\n text: `Helpdesk Support - Код подтверждения: ${code}\\n\\nКод действителен 15 минут.`,\n });\n console.log(\"Email отправлен на:\", email);\n return true;\n } catch (error) {\n console.error(\"Ошибка отправки email:\", error);\n return false;\n }\n}\n\nconst HTML = `\n\n\n\n \n \n Helpdesk Support System\n \n\n\n

\n \n\n \n

Добро пожаловать

Helpdesk Support System

\n\n

\n \n \n

\n\n

\n\n \n

\n Имя пользователя\n \n

\n Пароль\n \n

\n \n

\n Админ доступ: admin / admin123\n

\n\n \n

\n Имя пользователя *\n \n

Только латинские буквы, цифры и подчёркивание

\n Email *\n \n

На email придёт код подтверждения

\n Пароль *\n \n

Минимум 6 символов, буквы и цифры

\n Подтвердите пароль *\n \n

\n \n

\n\n \n

📧 Проверьте почту

\n Мы отправили код подтверждения на
\n \n

\n Введите 6-значный код\n \n

\n \n \n \n

\n\n \n

\n \n \n

\n\n \n

\n Опишите ваш запрос\n \n

\n \n

\n\n \n

💬 Чат с поддержкой

Только вы и админ видите эту переписку

Загрузка сообщений...

\n \n \n

\n\n \n

\n \n \n \n

\n\n \n

Загрузка запросов...

\n\n \n

👥 Активные пользователи

Загрузка...

Чат с пользователем

Выберите пользователя

Выберите пользователя слева для начала чата

\n \n \n

\n\n \n

Загрузка пользователей...

\n\n \n\n\n`;\n\napp.get(\"/\", (c) => {\n return c.html(HTML);\n});\n\n// ========== РЕГИСТРАЦИЯ ==========\napp.post(\"/api/register\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { username, email, password } = body;\n\n // Валидация\n if (!username || !email || !password) {\n return c.json({ success: false, error: \"Все поля обязательны\" }, 400);\n }\n\n if (username === ADMIN_USERNAME) {\n return c.json({ success: false, error: \"Это имя пользователя зарезервировано\" }, 400);\n }\n\n if (!isValidUsername(username)) {\n return c.json({\n success: false,\n error: \"Имя пользователя: 3-20 символов, только буквы, цифры, _\",\n }, 400);\n }\n\n if (!isValidEmail(email)) {\n return c.json({ success: false, error: \"Неверный формат email\" }, 400);\n }\n\n const passwordCheck = isValidPassword(password);\n if (!passwordCheck.valid) {\n return c.json({ success: false, error: passwordCheck.error }, 400);\n }\n\n // Проверка уникальности username\n const existingUsername = await sqlite.execute({\n sql: \"SELECT id FROM users WHERE username = ?\",\n args: [username],\n });\n\n if (existingUsername.rows && existingUsername.rows.length > 0) {\n return c.json({ success: false, error: \"Это имя пользователя уже занято\" }, 400);\n }\n\n // Проверка уникальности email\n const existingEmail = await sqlite.execute({\n sql: \"SELECT id, email_verified FROM users WHERE email = ?\",\n args: [email],\n });\n\n if (existingEmail.rows && existingEmail.rows.length > 0) {\n const row: any = existingEmail.rows[0];\n if (row.email_verified === 1) {\n return c.json({ success: false, error: \"Этот email уже зарегистрирован\" }, 400);\n } else {\n // Удалить старую неверифицированную запись\n await sqlite.execute({\n sql: \"DELETE FROM users WHERE email = ? AND email_verified = 0\",\n args: [email],\n });\n }\n }\n\n // Создание пользователя\n const passwordHash = await hashPassword(password);\n const verificationCode = generateVerificationCode();\n const expiresAt = new Date(Date.now() + 15 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: `INSERT INTO users (username, email, password_hash, verification_code, verification_expires_at, email_verified)\n VALUES (?, ?, ?, ?, ?, 0)`,\n args: [username, email, passwordHash, verificationCode, expiresAt],\n });\n\n // Отправка email с кодом\n const emailSent = await sendVerificationEmail(email, verificationCode, username);\n\n if (!emailSent) {\n // В тестовом режиме возвращаем код в ответ (для разработки)\n console.log(`КОД ДЛЯ ${email}: ${verificationCode}`);\n }\n\n return c.json({\n success: true,\n message: \"Код подтверждения отправлен на email\",\n // В режиме разработки показываем код в консоли\n devCode: verificationCode,\n });\n } catch (error) {\n console.error(\"Ошибка регистрации:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ВЕРИФИКАЦИЯ EMAIL ==========\napp.post(\"/api/verify-email\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { email, code } = body;\n\n if (!email || !code) {\n return c.json({ success: false, error: \"Email и код обязательны\" }, 400);\n }\n\n const result = await sqlite.execute({\n sql: `SELECT id, username, email, verification_code, verification_expires_at, email_verified \n FROM users WHERE email = ?`,\n args: [email],\n });\n\n if (!result.rows || result.rows.length === 0) {\n return c.json({ success: false, error: \"Пользователь не найден\" }, 404);\n }\n\n const user: any = result.rows[0];\n\n if (user.email_verified === 1) {\n return c.json({ success: false, error: \"Email уже подтверждён\" }, 400);\n }\n\n if (user.verification_code !== code) {\n return c.json({ success: false, error: \"Неверный код подтверждения\" }, 400);\n }\n\n // Проверка срока действия\n const expiresAt = new Date(user.verification_expires_at);\n if (expiresAt < new Date()) {\n return c.json({ success: false, error: \"Срок действия кода истёк. Запросите новый\" }, 400);\n }\n\n // Подтверждаем email\n await sqlite.execute({\n sql: \"UPDATE users SET email_verified = 1, verification_code = NULL WHERE id = ?\",\n args: [user.id],\n });\n\n // Создаём сессию\n const sessionToken = generateToken();\n const sessionExpires = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: `INSERT INTO user_sessions (user_id, session_token, username, email, expires_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [user.id, sessionToken, user.username, user.email, sessionExpires],\n });\n\n return c.json({\n success: true,\n token: sessionToken,\n username: user.username,\n email: user.email,\n });\n } catch (error) {\n console.error(\"Ошибка верификации:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ПОВТОРНАЯ ОТПРАВКА КОДА ==========\napp.post(\"/api/resend-code\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { email } = body;\n\n if (!email || !isValidEmail(email)) {\n return c.json({ success: false, error: \"Неверный email\" }, 400);\n }\n\n const result = await sqlite.execute({\n sql: \"SELECT id, username, email_verified FROM users WHERE email = ?\",\n args: [email],\n });\n\n if (!result.rows || result.rows.length === 0) {\n return c.json({ success: false, error: \"Пользователь не найден\" }, 404);\n }\n\n const user: any = result.rows[0];\n\n if (user.email_verified === 1) {\n return c.json({ success: false, error: \"Email уже подтверждён\" }, 400);\n }\n\n const newCode = generateVerificationCode();\n const newExpires = new Date(Date.now() + 15 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: \"UPDATE users SET verification_code = ?, verification_expires_at = ? WHERE id = ?\",\n args: [newCode, newExpires, user.id],\n });\n\n await sendVerificationEmail(email, newCode, user.username);\n console.log(`НОВЫЙ КОД ДЛЯ ${email}: ${newCode}`);\n\n return c.json({ success: true, message: \"Код отправлен повторно\", devCode: newCode });\n } catch (error) {\n console.error(\"Ошибка повторной отправки:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ВХОД ==========\napp.post(\"/api/login\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { username, password } = body;\n\n if (!username || !password) {\n return c.json({ success: false, error: \"Введите имя пользователя и пароль\" }, 400);\n }\n\n // Проверка админа\n if (username === ADMIN_USERNAME) {\n if (password !== ADMIN_PASSWORD) {\n return c.json({ success: false, error: \"Неверный пароль администратора\" }, 401);\n }\n const token = generateToken();\n await sqlite.execute({\n sql: \"INSERT INTO admin_sessions (admin_username, token) VALUES (?, ?)\",\n args: [ADMIN_USERNAME, token],\n });\n return c.json({\n success: true,\n isAdmin: true,\n token: token,\n username: ADMIN_USERNAME,\n });\n }\n\n // Проверка обычного пользователя\n const result = await sqlite.execute({\n sql: `SELECT id, username, email, password_hash, email_verified \n FROM users WHERE username = ?`,\n args: [username],\n });\n\n if (!result.rows || result.rows.length === 0) {\n return c.json({ success: false, error: \"Пользователь не найден\" }, 401);\n }\n\n const user: any = result.rows[0];\n const passwordHash = await hashPassword(password);\n\n if (user.password_hash !== passwordHash) {\n return c.json({ success: false, error: \"Неверный пароль\" }, 401);\n }\n\n if (user.email_verified !== 1) {\n return c.json({\n success: false,\n error: \"Email не подтверждён. Проверьте почту\",\n needsVerification: true,\n email: user.email,\n }, 401);\n }\n\n // Создаём новую сессию\n const sessionToken = generateToken();\n const sessionExpires = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: `INSERT INTO user_sessions (user_id, session_token, username, email, expires_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [user.id, sessionToken, user.username, user.email, sessionExpires],\n });\n\n return c.json({\n success: true,\n isAdmin: false,\n token: sessionToken,\n username: user.username,\n email: user.email,\n });\n } catch (error) {\n console.error(\"Ошибка входа:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ПРОВЕРКА СЕССИИ ==========\napp.post(\"/api/verify-session\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { token } = body;\n\n if (!token) return c.json({ valid: false });\n\n const result = await sqlite.execute({\n sql: `SELECT username, email, expires_at FROM user_sessions WHERE session_token = ?`,\n args: [token],\n });\n\n if (!result.rows || result.rows.length === 0) {\n return c.json({ valid: false });\n }\n\n const session: any = result.rows[0];\n if (new Date(session.expires_at) < new Date()) {\n return c.json({ valid: false });\n }\n\n return c.json({\n valid: true,\n username: session.username,\n email: session.email,\n });\n } catch (error) {\n return c.json({ valid: false });\n }\n});\n\n// ========== ПРОВЕРКА АДМИНА ==========\napp.post(\"/api/verify-admin\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { token } = body;\n\n if (!token) return c.json({ valid: false });\n\n const result = await sqlite.execute({\n sql: \"SELECT id FROM admin_sessions WHERE token = ?\",\n args: [token],\n });\n\n return c.json({ valid: result.rows && result.rows.length > 0 });\n } catch (error) {\n return c.json({ valid: false });\n }\n});\n\n// Хелпер: проверка сессии пользователя\nasync function getUserFromToken(token: string | undefined) {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"SELECT user_id, username, email FROM user_sessions WHERE session_token = ? AND expires_at > datetime('now')\",\n args: [token],\n });\n if (!result.rows || result.rows.length === 0) return null;\n return result.rows[0] as any;\n}\n\n// Хелпер: проверка админа\nasync function isValidAdmin(token: string | undefined): Promise {\n if (!token) return false;\n const result = await sqlite.execute({\n sql: \"SELECT id FROM admin_sessions WHERE token = ?\",\n args: [token],\n });\n return !!(result.rows && result.rows.length > 0);\n}\n\n// ========== ОТПРАВКА ЗАПРОСА ==========\napp.post(\"/api/submit-request\", async (c) => {\n try {\n await initDatabase();\n const sessionToken = c.req.header(\"x-session-token\");\n const user = await getUserFromToken(sessionToken);\n\n if (!user) {\n return c.json({ success: false, error: \"Не авторизован\" }, 401);\n }\n\n const body = await c.req.json();\n const { request_text } = body;\n\n if (!request_text || request_text.trim().length === 0) {\n return c.json({ success: false, error: \"Введите текст запроса\" }, 400);\n }\n\n const userAgent = c.req.header(\"user-agent\") || \"Unknown\";\n const ipAddress = getClientIP(c.req);\n const { browserName, browserVersion, osName, osVersion, deviceType } = parseUserAgent(userAgent);\n const cookieHeader = c.req.header(\"cookie\") || \"\";\n\n await sqlite.execute({\n sql: `INSERT INTO requests (request_text, ip_address, user_agent, browser_name, browser_version, os_name, os_version, device_type, cookies, session_id, username, email)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n request_text,\n ipAddress,\n userAgent,\n browserName,\n browserVersion,\n osName,\n osVersion,\n deviceType,\n cookieHeader,\n sessionToken,\n user.username,\n user.email,\n ],\n });\n\n return c.json({ success: true });\n } catch (error) {\n console.error(\"Ошибка запроса:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ОТПРАВКА СООБЩЕНИЯ ==========\napp.post(\"/api/send-message\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { room_id, message_text, sender_type } = body;\n\n if (!room_id || !message_text) {\n return c.json({ success: false, error: \"Недостаточно данных\" }, 400);\n }\n\n if (sender_type === \"admin\") {\n const adminToken = c.req.header(\"x-admin-token\");\n const isAdmin = await isValidAdmin(adminToken);\n if (!isAdmin) {\n return c.json({ success: false, error: \"Доступ запрещён\" }, 403);\n }\n } else if (sender_type === \"user\") {\n const sessionToken = c.req.header(\"x-session-token\");\n const user = await getUserFromToken(sessionToken);\n if (!user) {\n return c.json({ success: false, error: \"Не авторизован\" }, 401);\n }\n // Пользователь может писать только в свою комнату\n if (room_id !== sessionToken) {\n return c.json({ success: false, error: \"Нет доступа к этому чату\" }, 403);\n }\n } else {\n return c.json({ success: false, error: \"Неверный тип отправителя\" }, 400);\n }\n\n // Получаем username для сообщения\n let username = sender_type === \"admin\" ? \"admin\" : \"unknown\";\n if (sender_type === \"user\") {\n const sessionToken = c.req.header(\"x-session-token\");\n const user = await getUserFromToken(sessionToken);\n if (user) username = user.username;\n }\n\n await sqlite.execute({\n sql: `INSERT INTO chat_messages (room_id, session_id, username, message_text, sender_type)\n VALUES (?, ?, ?, ?, ?)`,\n args: [room_id, room_id, username, message_text, sender_type],\n });\n\n return c.json({ success: true });\n } catch (error) {\n console.error(\"Ошибка сообщения:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ПОЛУЧЕНИЕ СООБЩЕНИЙ ==========\napp.get(\"/api/messages\", async (c) => {\n try {\n await initDatabase();\n const roomId = c.req.query(\"room_id\");\n\n if (!roomId) {\n return c.json({ messages: [] });\n }\n\n // Проверка доступа\n const adminToken = c.req.header(\"x-admin-token\");\n const sessionToken = c.req.header(\"x-session-token\");\n\n const isAdmin = await isValidAdmin(adminToken);\n\n if (!isAdmin) {\n // Обычный пользователь может видеть только свои сообщения\n const user = await getUserFromToken(sessionToken);\n if (!user) {\n return c.json({ messages: [], error: \"Не авторизован\" }, 401);\n }\n if (roomId !== sessionToken) {\n return c.json({ messages: [], error: \"Нет доступа\" }, 403);\n }\n }\n\n const result = await sqlite.execute({\n sql: \"SELECT * FROM chat_messages WHERE room_id = ? ORDER BY timestamp ASC LIMIT 200\",\n args: [roomId],\n });\n\n return c.json({ messages: result.rows || [] });\n } catch (error) {\n console.error(\"Ошибка получения сообщений:\", error);\n return c.json({ messages: [] }, 500);\n }\n});\n\n// ========== АДМИН: ВСЕ ЗАПРОСЫ ==========\napp.get(\"/api/admin/requests\", async (c) => {\n try {\n await initDatabase();\n const adminToken = c.req.header(\"x-admin-token\");\n const isAdmin = await isValidAdmin(adminToken);\n\n if (!isAdmin) {\n return c.json({ requests: [], error: \"Доступ запрещён\" }, 403);\n }\n\n const result = await sqlite.execute(\n \"SELECT * FROM requests ORDER BY timestamp DESC LIMIT 100\"\n );\n\n return c.json({ requests: result.rows || [] });\n } catch (error) {\n console.error(\"Ошибка:\", error);\n return c.json({ requests: [] }, 500);\n }\n});\n\n// ========== АДМИН: СПИСОК СЕССИЙ ==========\napp.get(\"/api/admin/user-sessions\", async (c) => {\n try {\n await initDatabase();\n const adminToken = c.req.header(\"x-admin-token\");\n const isAdmin = await isValidAdmin(adminToken);\n\n if (!isAdmin) {\n return c.json({ sessions: [], error: \"Доступ запрещён\" }, 403);\n }\n\n // Получаем активные сессии с количеством сообщений\n const result = await sqlite.execute(`\n SELECT us.session_token, us.username, us.email, us.created_at,\n (SELECT COUNT(*) FROM chat_messages cm WHERE cm.room_id = us.session_token) as message_count\n FROM user_sessions us\n WHERE us.expires_at > datetime('now')\n ORDER BY us.created_at DESC\n `);\n\n return c.json({ sessions: result.rows || [] });\n } catch (error) {\n console.error(\"Ошибка:\", error);\n return c.json({ sessions: [] }, 500);\n }\n});\n\n// ========== АДМИН: СПИСОК ПОЛЬЗОВАТЕЛЕЙ ==========\napp.get(\"/api/admin/users\", async (c) => {\n try {\n await initDatabase();\n const adminToken = c.req.header(\"x-admin-token\");\n const isAdmin = await isValidAdmin(adminToken);\n\n if (!isAdmin) {\n return c.json({ users: [], error: \"Доступ запрещён\" }, 403);\n }\n\n const result = await sqlite.execute(\n \"SELECT id, username, email, email_verified, created_at FROM users ORDER BY created_at DESC\"\n );\n\n return c.json({ users: result.rows || [] });\n } catch (error) {\n console.error(\"Ошибка:\", error);\n return c.json({ users: [] }, 500);\n }\n});\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1779609349126],"children",[],[35],"4811a050-573e-11f1-996b-ee650bb23af1",["D",1779606043388],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","71bb5b2b-fb00-4248-8429-67e1e7407e18","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e4f79-f738-701d-9395-9133ebe49dd8","tursoName","4811a050573e11f1996bee650bb23af1","tursoHostname","4811a050573e11f1996bee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789470042795],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_118":114},"org",{"_11":12,"_111":112,"_113":114,"_70":71,"_115":116,"_117":53},"branch",{"_17":42,"_13":16,"_33":40,"_103":61,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":-5,"_109":14,"_110":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Давид Ситников","avatar","https://lh3.googleusercontent.com/a/ACg8ocIcy694xM5wLQ6AXmCb2v0pJoBbK_2iIKq0XUUkIppZ7Pll1Zs=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":152,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":19,"_69":-5,"_70":71,"_72":-5,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":153,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":154,"_98":155,"_100":156,"_102":53},[149],"files",[149],"counts",{"_139":77,"_140":141,"_142":77,"_31":143,"_144":145},[137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":138},[35],"pulls","branches",1,"forks",{"_146":77,"_148":77},"connections",{"_146":77,"_147":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":150,"_18":151},[],[35],["D",1779606043388],["D",1789470042795],{"_11":12,"_118":114},{"_11":12,"_111":112,"_113":114,"_70":71,"_115":116,"_117":53},{"_17":42,"_13":16,"_33":40,"_103":61,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":-5,"_109":14,"_110":12},"ctx",{"_96":-5,"_134":190,"_191":192,"_193":194,"_195":53,"_196":53,"_197":53,"_198":44,"_199":-5,"_200":-7,"_201":-7,"_202":77,"_203":53,"_204":53,"_205":-5,"_206":53,"_207":53,"_208":53,"_209":-5},"ENV",{"_161":162,"_163":164,"_165":16,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]