🤖

ScottHub

Telegram Bot Hosting Platform

\n\n

How to use

Open the bot in Telegram and press /start
Join our channel @ScottHubs
Invite 2 friends via your Referral link
Upload your Python bot in 🖥 Host → ⬆️ Upload Files
Your bot goes live automatically via webhook!

\n\n

\n \n

📢 Channel

@ScottHubs

\n \n \n

🔐 Admin Panel

Manage webhooks

\n \n \n

📄 View Source

Read the code

\n \n

\n\n

\n`;\n}\n\nexport default async function (req: Request): Promise {\n await ensureMigrated();\n const url = new URL(req.url);\n const path = url.pathname;\n\n try {\n // Main bot webhook from Telegram\n if (path === \"/bot\" && req.method === \"POST\") {\n const body = await req.json().catch(() => null);\n if (body) {\n try {\n await handleUpdate(body);\n } catch (e) {\n console.error(\"handleUpdate error:\", e);\n }\n }\n return new Response(\"ok\");\n }\n\n // Hosted bot webhook router\n const whMatch = path.match(/^\\/tgwebhook\\/(\\d+)\\/([A-Za-z0-9]+)$/);\n if (whMatch && req.method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return await handleHostedWebhook(Number(whMatch[1]), whMatch[2], body);\n }\n\n // Health\n if (path === \"/health\") {\n return Response.json({ ok: true, ts: Date.now() });\n }\n\n // Source redirect\n if (path === \"/source\") {\n const v = parseVal();\n return new Response(null, { status: 302, headers: { Location: v.links.self.val } });\n }\n\n // Panel\n if (path === \"/panel\" || path.startsWith(\"/panel/\")) {\n return await handlePanel(req, url);\n }\n\n // Landing\n if (path === \"/\" || path === \"\") {\n return new Response(landingPage(), { headers: { \"content-type\": \"text/html\" } });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n } catch (e) {\n console.error(\"main.ts error:\", e);\n return new Response(\"Internal error: \" + (e as Error).message, { status: 500 });\n }\n}\n","children",[],[69],["D",1776955821628],[81],[19],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":82,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_75":83,"_18":84},["D",1776955821628],[],[19,36],"d03236ae-3f22-11f1-9590-42b51c65c3df","lib","d0323780-3f22-11f1-9590-42b51c65c3df",2,["D",1776955417822],[92,93,94],[86],{"_34":111,"_13":112,"_37":113,"_39":87,"_41":42,"_43":114,"_45":46,"_47":115,"_17":49,"_50":51,"_52":116,"_54":55,"_56":-5,"_75":117,"_18":118},{"_34":103,"_13":104,"_37":105,"_39":87,"_41":42,"_43":106,"_45":46,"_47":107,"_17":49,"_50":51,"_52":108,"_54":55,"_56":-5,"_75":109,"_18":110},{"_34":95,"_13":96,"_37":97,"_39":87,"_41":42,"_43":98,"_45":46,"_47":99,"_17":49,"_50":51,"_52":100,"_54":55,"_56":-5,"_75":101,"_18":102},"0ae9c00a-3f23-11f1-b0bb-42b51c65c3df","utils.ts","0ae9c0be-3f23-11f1-b0bb-42b51c65c3df",9,["D",1776955516460],"// Misc utilities\nimport { httpEndpoint, parseVal } from \"https://esm.town/v/std/utils/index.ts\";\n\nexport function esc(s: string | number | null | undefined): string {\n if (s === null || s === undefined) return \"\";\n return String(s)\n .replaceAll(\"&\", \"&\")\n .replaceAll(\"<\", \"<\")\n .replaceAll(\">\", \">\");\n}\n\nexport function fmtDuration(seconds: number): string {\n if (seconds <= 0) return \"expired\";\n const d = Math.floor(seconds / 86400);\n const h = Math.floor((seconds % 86400) / 3600);\n const m = Math.floor((seconds % 3600) / 60);\n if (d > 0) return `${d}d ${h}h ${m}m`;\n if (h > 0) return `${h}h ${m}m`;\n return `${m}m`;\n}\n\nexport function fmtDate(ts: number | null): string {\n if (!ts) return \"—\";\n return new Date(ts * 1000).toISOString().replace(\"T\", \" \").slice(0, 16) + \" UTC\";\n}\n\n// 2-day host window in seconds\nexport const HOST_DURATION_SECONDS = 2 * 24 * 60 * 60;\nexport const REFERRALS_REQUIRED = 2;\n\nexport async function hashToken(token: string): Promise {\n const buf = new TextEncoder().encode(token);\n const digest = await crypto.subtle.digest(\"SHA-256\", buf);\n return Array.from(new Uint8Array(digest))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\")\n .slice(0, 16);\n}\n\n// Cache the resolved base URL\nlet _cachedBaseUrl: string | null = null;\n\nexport async function getBaseUrl(): Promise {\n if (_cachedBaseUrl) return _cachedBaseUrl;\n try {\n const endpoint = await httpEndpoint(\"/main.ts\");\n _cachedBaseUrl = endpoint;\n return endpoint;\n } catch {\n // fallback\n const v = parseVal();\n return `https://${v.username}--${v.name}.web.val.run`;\n }\n}\n\nexport function projectWebhookUrl(baseUrl: string, projectId: number, secret: string): string {\n return `${baseUrl}/tgwebhook/${projectId}/${secret}`;\n}\n",[],[86,96],"f925b77a-3f22-11f1-9476-42b51c65c3df","telegram.ts","f925b824-3f22-11f1-9476-42b51c65c3df",7,["D",1776955486622],"// Telegram Bot API wrapper\nconst BASE = \"https://api.telegram.org\";\n\nexport async function tg(token: string, method: string, body: Record = {}) {\n const res = await fetch(`${BASE}/bot${token}/${method}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n const data = await res.json().catch(() => ({ ok: false, description: \"non-json response\" }));\n return data;\n}\n\nexport async function sendMessage(\n token: string,\n chatId: number | string,\n text: string,\n extra: Record = {},\n) {\n return tg(token, \"sendMessage\", {\n chat_id: chatId,\n text,\n parse_mode: \"HTML\",\n disable_web_page_preview: true,\n ...extra,\n });\n}\n\nexport async function editMessage(\n token: string,\n chatId: number | string,\n messageId: number,\n text: string,\n extra: Record = {},\n) {\n return tg(token, \"editMessageText\", {\n chat_id: chatId,\n message_id: messageId,\n text,\n parse_mode: \"HTML\",\n disable_web_page_preview: true,\n ...extra,\n });\n}\n\nexport async function answerCallback(token: string, callbackQueryId: string, text = \"\") {\n return tg(token, \"answerCallbackQuery\", { callback_query_id: callbackQueryId, text });\n}\n\nexport async function getFile(token: string, fileId: string): Promise<{ file_path?: string } | null> {\n const r = await tg(token, \"getFile\", { file_id: fileId });\n if (!r.ok) return null;\n return r.result;\n}\n\nexport async function downloadFile(token: string, filePath: string): Promise {\n const res = await fetch(`${BASE}/file/bot${token}/${filePath}`);\n if (!res.ok) throw new Error(\"Failed to download file: \" + res.status);\n return res.text();\n}\n\nexport async function downloadFileBytes(token: string, filePath: string): Promise {\n const res = await fetch(`${BASE}/file/bot${token}/${filePath}`);\n if (!res.ok) throw new Error(\"Failed to download file: \" + res.status);\n return new Uint8Array(await res.arrayBuffer());\n}\n\nexport async function checkChannelMember(\n token: string,\n channel: string,\n userId: number,\n): Promise<{ ok: boolean; isMember: boolean; error?: string }> {\n const r = await tg(token, \"getChatMember\", { chat_id: channel, user_id: userId });\n if (!r.ok) return { ok: false, isMember: false, error: r.description };\n const status = r.result?.status;\n const isMember = [\"creator\", \"administrator\", \"member\", \"restricted\"].includes(status);\n return { ok: true, isMember };\n}\n\nexport async function getMe(token: string) {\n return tg(token, \"getMe\");\n}\n\nexport async function setWebhook(token: string, url: string, secret?: string) {\n return tg(token, \"setWebhook\", {\n url,\n secret_token: secret,\n allowed_updates: [\"message\", \"edited_message\", \"callback_query\", \"chat_member\", \"my_chat_member\"],\n drop_pending_updates: false,\n });\n}\n\nexport async function deleteWebhook(token: string) {\n return tg(token, \"deleteWebhook\", { drop_pending_updates: false });\n}\n\nexport async function getWebhookInfo(token: string) {\n return tg(token, \"getWebhookInfo\");\n}\n\n// Main reply-keyboard (NOT inline) for usability\nexport const MAIN_KEYBOARD = {\n keyboard: [\n [{ text: \"🖥 Host\" }, { text: \"👥 Referral\" }],\n [{ text: \"📊 Status\" }, { text: \"ℹ️ Help\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const HOST_KEYBOARD = {\n keyboard: [\n [{ text: \"🗄 Server\" }, { text: \"⬆️ Upload Files\" }],\n [{ text: \"📁 Manage Files\" }, { text: \"⏱ Host Time\" }],\n [{ text: \"⏹ Stop\" }, { text: \"🔄 Restart\" }],\n [{ text: \"⬅️ Back\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const MANAGE_KEYBOARD = {\n keyboard: [\n [{ text: \"📄 List Files\" }, { text: \"⭐ Set Main File\" }],\n [{ text: \"➕ Add File\" }, { text: \"🗑 Delete File\" }],\n [{ text: \"⬅️ Back to Host\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const BACK_KEYBOARD = {\n keyboard: [[{ text: \"⬅️ Back\" }]],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const REMOVE_KEYBOARD = { remove_keyboard: true };\n",[],[86,104],"04f89cf2-3f23-11f1-9a13-42b51c65c3df","parser.ts","04f89d92-3f23-11f1-9a13-42b51c65c3df",8,["D",1776955506490],"// Smart Python parser - detects bot token, admin id, imports, etc.\n\nconst STDLIB = new Set([\n \"os\", \"sys\", \"re\", \"json\", \"time\", \"datetime\", \"random\", \"math\", \"asyncio\",\n \"logging\", \"threading\", \"subprocess\", \"pathlib\", \"typing\", \"collections\",\n \"functools\", \"itertools\", \"traceback\", \"urllib\", \"http\", \"socket\", \"ssl\",\n \"hashlib\", \"hmac\", \"base64\", \"io\", \"struct\", \"copy\", \"pickle\", \"csv\",\n \"sqlite3\", \"zipfile\", \"tarfile\", \"gzip\", \"bz2\", \"string\", \"textwrap\",\n \"argparse\", \"configparser\", \"shutil\", \"tempfile\", \"glob\", \"uuid\", \"secrets\",\n \"dataclasses\", \"enum\", \"abc\", \"contextlib\", \"warnings\", \"weakref\", \"inspect\",\n \"importlib\", \"operator\", \"queue\", \"multiprocessing\", \"concurrent\", \"signal\",\n \"platform\", \"getpass\", \"calendar\", \"decimal\", \"fractions\", \"statistics\",\n \"unittest\", \"email\", \"html\", \"xml\", \"zoneinfo\", \"locale\", \"gettext\", \"codecs\",\n \"mimetypes\", \"encodings\", \"builtins\", \"__future__\",\n]);\n\nconst IMPORT_TO_PIP: Record = {\n \"telegram\": \"python-telegram-bot\",\n \"telethon\": \"Telethon\",\n \"pyrogram\": \"Pyrogram\",\n \"aiogram\": \"aiogram\",\n \"cv2\": \"opencv-python\",\n \"PIL\": \"Pillow\",\n \"Image\": \"Pillow\",\n \"bs4\": \"beautifulsoup4\",\n \"yaml\": \"PyYAML\",\n \"dotenv\": \"python-dotenv\",\n \"jwt\": \"PyJWT\",\n \"MySQLdb\": \"mysqlclient\",\n \"dns\": \"dnspython\",\n \"sklearn\": \"scikit-learn\",\n \"discord\": \"discord.py\",\n \"requests\": \"requests\",\n \"aiohttp\": \"aiohttp\",\n \"httpx\": \"httpx\",\n \"flask\": \"Flask\",\n \"fastapi\": \"fastapi\",\n \"uvicorn\": \"uvicorn\",\n \"django\": \"Django\",\n \"motor\": \"motor\",\n \"pymongo\": \"pymongo\",\n \"redis\": \"redis\",\n \"psycopg2\": \"psycopg2-binary\",\n \"sqlalchemy\": \"SQLAlchemy\",\n \"numpy\": \"numpy\",\n \"pandas\": \"pandas\",\n \"apscheduler\": \"APScheduler\",\n \"pydantic\": \"pydantic\",\n \"tgcrypto\": \"TgCrypto\",\n};\n\nexport function detectImports(code: string): { imports: string[]; pip: string[] } {\n const found = new Set();\n const cleaned = code\n .replace(/\"\"\"[\\s\\S]*?\"\"\"/g, \"\")\n .replace(/'''[\\s\\S]*?'''/g, \"\")\n .replace(/#[^\\n]*/g, \"\");\n\n const lines = cleaned.split(/\\r?\\n/);\n for (const raw of lines) {\n const line = raw.trim();\n let m = line.match(/^from\\s+([a-zA-Z_][\\w\\.]*)\\s+import\\s+/);\n if (m) {\n found.add(m[1].split(\".\")[0]);\n continue;\n }\n m = line.match(/^import\\s+(.+)$/);\n if (m) {\n for (const part of m[1].split(\",\")) {\n const name = part.trim().split(/\\s+as\\s+/)[0].trim().split(\".\")[0];\n if (name) found.add(name);\n }\n }\n }\n const imports = [...found].filter((x) => !STDLIB.has(x));\n const pip = [...new Set(imports.map((i) => IMPORT_TO_PIP[i] ?? i))];\n return { imports: [...found], pip };\n}\n\nexport function detectBotToken(code: string): string | null {\n const re = /(\\d{6,12}:[A-Za-z0-9_\\-]{30,})/;\n const m = code.match(re);\n return m ? m[1] : null;\n}\n\nexport function detectAdminId(code: string): string | null {\n const patterns = [\n /(?:ADMIN_ID|OWNER_ID|SUDO_USERS|OWNER|ADMINS?)\\s*=\\s*\\[?\\s*[\"']?(\\d{5,})[\"']?/i,\n /(?:admin|owner)[_\\s]?id\\s*=\\s*[\"']?(\\d{5,})[\"']?/i,\n ];\n for (const p of patterns) {\n const m = code.match(p);\n if (m) return m[1];\n }\n return null;\n}\n\nexport function detectApiIdHash(code: string): { apiId?: string; apiHash?: string } {\n const out: { apiId?: string; apiHash?: string } = {};\n const idM = code.match(/API[_\\s]?ID\\s*=\\s*[\"']?(\\d{5,})[\"']?/i);\n if (idM) out.apiId = idM[1];\n const hashM = code.match(/API[_\\s]?HASH\\s*=\\s*[\"']([a-f0-9]{32})[\"']/i);\n if (hashM) out.apiHash = hashM[1];\n return out;\n}\n\nexport function analyzePythonFile(code: string) {\n return {\n imports: detectImports(code),\n botToken: detectBotToken(code),\n adminId: detectAdminId(code),\n apiCreds: detectApiIdHash(code),\n lines: code.split(/\\r?\\n/).length,\n size: code.length,\n };\n}\n",[],[86,112],"d0873884-3f22-11f1-afe3-42b51c65c3df","jobs","d0873942-3f22-11f1-afe3-42b51c65c3df",4,["D",1776955418495],[126],[120],{"_34":127,"_13":128,"_37":129,"_39":121,"_41":42,"_43":130,"_45":46,"_47":131,"_17":49,"_50":132,"_52":133,"_54":55,"_56":-5,"_75":134,"_18":135},"b78f3420-3f23-11f1-81c4-42b51c65c3df","expiry_sweep.ts","b78f34de-3f23-11f1-81c4-42b51c65c3df",17,["D",1776955806112],"interval","// Runs periodically to expire host slots whose 2-day window is up\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { runMigrations } from \"../database/schema.ts\";\nimport * as tg from \"../lib/telegram.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nexport default async function (interval: Interval) {\n await runMigrations();\n const now = Math.floor(Date.now() / 1000);\n\n // Find projects about to expire\n const expiring = await sqlite.execute({\n sql: \"SELECT * FROM projects WHERE status='running' AND expires_at IS NOT NULL AND expires_at <= ?\",\n args: [now],\n });\n\n for (const proj of expiring.rows as any[]) {\n // Remove webhook from the hosted bot\n if (proj.bot_token) {\n try {\n await tg.deleteWebhook(proj.bot_token);\n } catch {}\n }\n\n // Notify owner\n try {\n await tg.sendMessage(\n BOT_TOKEN,\n proj.owner_id,\n `⏰ Hosting Expired\\n\\nYour project ${proj.name} has expired.\\nInvite 2 new users to renew your hosting slot.\\n\\nTap 👥 Referral to get your link.`,\n { reply_markup: tg.MAIN_KEYBOARD },\n );\n } catch {}\n }\n\n // Mark them expired\n const result = await sqlite.execute({\n sql: \"UPDATE projects SET status='expired', stopped_at=? WHERE status='running' AND expires_at IS NOT NULL AND expires_at <= ?\",\n args: [now, now],\n });\n\n console.log(`expiry_sweep: expired ${result.rowsAffected ?? 0} projects at ${new Date().toISOString()}`);\n}\n",[],[120,128],"d06951b6-3f22-11f1-afe3-42b51c65c3df","handlers","d0695288-3f22-11f1-afe3-42b51c65c3df",3,["D",1776955418310],[143,144,145,146,147,148],[137],{"_34":189,"_13":190,"_37":191,"_39":138,"_41":42,"_43":192,"_45":46,"_47":193,"_17":49,"_50":51,"_52":194,"_54":55,"_56":-5,"_75":195,"_18":196},{"_34":181,"_13":182,"_37":183,"_39":138,"_41":42,"_43":184,"_45":46,"_47":185,"_17":49,"_50":51,"_52":186,"_54":55,"_56":-5,"_75":187,"_18":188},{"_34":173,"_13":174,"_37":175,"_39":138,"_41":42,"_43":176,"_45":46,"_47":177,"_17":49,"_50":51,"_52":178,"_54":55,"_56":-5,"_75":179,"_18":180},{"_34":165,"_13":166,"_37":167,"_39":138,"_41":42,"_43":168,"_45":46,"_47":169,"_17":49,"_50":51,"_52":170,"_54":55,"_56":-5,"_75":171,"_18":172},{"_34":157,"_13":158,"_37":159,"_39":138,"_41":42,"_43":160,"_45":46,"_47":161,"_17":49,"_50":51,"_52":162,"_54":55,"_56":-5,"_75":163,"_18":164},{"_34":149,"_13":150,"_37":151,"_39":138,"_41":42,"_43":152,"_45":46,"_47":153,"_17":49,"_50":51,"_52":154,"_54":55,"_56":-5,"_75":155,"_18":156},"2b14a5fc-3f23-11f1-877f-42b51c65c3df","screens.ts","2b14a69c-3f23-11f1-877f-42b51c65c3df",11,["D",1776955570426],"// Screen renderers - produce text + keyboard for each menu\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { esc, fmtDate, fmtDuration, REFERRALS_REQUIRED } from \"../lib/utils.ts\";\nimport { isAdmin } from \"./access.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nexport async function showMain(chatId: number, userId: number, firstName: string | null) {\n const admin = isAdmin(userId) ? \" 👑\" : \"\";\n const text =\n `👋 Welcome${firstName ? \", \" + esc(firstName) : \"\"}!${admin}\\n\\n` +\n `🤖 ScottHub — Telegram Bot Hosting Platform\\n\\n` +\n `Choose an option from the menu:\\n` +\n `• 🖥 Host — manage your bot hosting\\n` +\n `• 👥 Referral — invite friends to unlock hosting\\n` +\n `• 📊 Status — platform & your stats\\n` +\n `• ℹ️ Help — how it works`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n await db.setUserState(userId, \"main\");\n}\n\nexport async function showHost(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n const user = await db.getUser(userId);\n const now = Math.floor(Date.now() / 1000);\n\n let serverStatus = \"🟢 Free\";\n let timeInfo = \"Not started\";\n let projInfo = \"No project yet\";\n\n if (project) {\n projInfo =\n `Project: ${esc(project.name)}\\n` +\n `Main file: ${esc(project.main_file || \"not set\")}\\n` +\n `Status: ${esc(project.status)}\\n` +\n `Messages relayed: ${project.message_count}`;\n if (project.expires_at && project.expires_at > now) {\n timeInfo = `⏱ ${fmtDuration(project.expires_at - now)} remaining\\n(expires ${fmtDate(project.expires_at)})`;\n serverStatus = `🟢 Running on free tier`;\n } else if (project.expires_at) {\n timeInfo = `❌ Expired ${fmtDate(project.expires_at)}\\nInvite ${REFERRALS_REQUIRED} users to renew.`;\n serverStatus = `🔴 Stopped (expired)`;\n }\n }\n\n const admin = isAdmin(userId) ? \"\\n👑 Admin mode — no referrals needed\" : \"\";\n const refInfo = user ? `\\n\\nReferrals: ${user.referral_count}/${REFERRALS_REQUIRED}` : \"\";\n\n const text =\n `🖥 Host Dashboard${admin}\\n\\n` +\n `Server: ${serverStatus}\\n` +\n `Host time: ${timeInfo}${refInfo}\\n\\n` +\n `${projInfo}\\n\\n` +\n `Choose an action below.`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n\nexport async function showServer(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n const now = Math.floor(Date.now() / 1000);\n let body: string;\n if (!project) {\n body =\n `🗄 Server Tier: Free\\n\\n` +\n `Cost: FREE\\n` +\n `Duration per slot: 2 days\\n` +\n `Unlock cost: ${REFERRALS_REQUIRED} referrals\\n\\n` +\n `You have no active project. Press ⬆️ Upload Files to start.`;\n } else {\n const remaining = project.expires_at && project.expires_at > now ? project.expires_at - now : 0;\n body =\n `🗄 Server Tier: Free\\n\\n` +\n `Project: ${esc(project.name)}\\n` +\n `Status: ${esc(project.status)}\\n` +\n `Remaining: ${fmtDuration(remaining)}\\n` +\n `Webhook: active via ScottHub router\\n` +\n `Messages processed: ${project.message_count}`;\n }\n await tg.sendMessage(BOT_TOKEN, chatId, body, { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function showReferral(chatId: number, userId: number) {\n const user = await db.getUser(userId);\n if (!user) return;\n const me = await tg.getMe(BOT_TOKEN);\n const botUsername = me.ok ? me.result.username : \"this_bot\";\n const link = `https://t.me/${botUsername}?start=${user.referral_code}`;\n const text =\n `👥 Referral Program\\n\\n` +\n `Your code: ${esc(user.referral_code)}\\n` +\n `Your link:\\n${link}\\n\\n` +\n `Referrals: ${user.referral_count}\\n` +\n `Needed to unlock hosting: ${REFERRALS_REQUIRED}\\n\\n` +\n `📢 Share this link. When ${REFERRALS_REQUIRED} new users /start via your link (and join @ScottHubs), you unlock a 2-day free hosting slot.`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n}\n\nexport async function showStatus(chatId: number, userId: number) {\n const user = await db.getUser(userId);\n const stats = await db.globalStats();\n const project = await db.getProjectByOwner(userId);\n const text =\n `📊 Status\\n\\n` +\n `Bot: 🟢 Online\\n` +\n `Webhook router: 🟢 Active\\n\\n` +\n `Platform stats\\n` +\n `• Users: ${stats.users}\\n` +\n `• Projects: ${stats.projects}\\n` +\n `• Running: ${stats.running}\\n` +\n `• Files stored: ${stats.files}\\n` +\n `• Messages relayed: ${stats.messages}\\n\\n` +\n `Your stats\\n` +\n `• Referrals: ${user?.referral_count ?? 0}\\n` +\n `• Project: ${project ? esc(project.name) : \"none\"}\\n` +\n `• Project status: ${project ? esc(project.status) : \"—\"}`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n}\n\nexport async function showHelp(chatId: number) {\n const text =\n `ℹ️ How ScottHub Works\\n\\n` +\n `1️⃣ Join @ScottHubs\\n` +\n `2️⃣ Invite ${REFERRALS_REQUIRED} friends via your referral link\\n` +\n `3️⃣ Tap 🖥 Host → ⬆️ Upload Files\\n` +\n `4️⃣ Send your main.py — ScottHub auto-detects:\\n` +\n ` • Bot token\\n` +\n ` • Admin id\\n` +\n ` • All imports/pip packages\\n` +\n `5️⃣ Use 📁 Manage Files to add extra modules\\n` +\n `6️⃣ Your bot is wired through the ScottHub webhook router for 2 days\\n\\n` +\n `Commands:\\n/start, /menu, /host, /ref, /status, /cancel`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n}\n\nexport async function showManage(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"You have no project yet. Upload a file first.\", {\n reply_markup: tg.HOST_KEYBOARD,\n });\n return;\n }\n const files = await db.listFiles(project.id);\n const list = files.length\n ? files.map((f) => `${f.is_main ? \"⭐\" : \" \"} ${esc(f.path)} (${f.size}b)`).join(\"\\n\")\n : \"No files yet.\";\n const text = `📁 Manage Files\\n\\nProject: ${esc(project.name)}\\nMain: ${esc(project.main_file || \"not set\")}\\n\\n${list}\\n\\nChoose an action:`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n",[],[137,150],"6e3b6bc2-3f23-11f1-bb36-42b51c65c3df","router.ts","6e3b6c76-3f23-11f1-bb36-42b51c65c3df",14,["D",1776955683090],"// Main Telegram update dispatcher for the ScottHub bot\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { ensureChannelJoined, isAdmin } from \"./access.ts\";\nimport * as screens from \"./screens.ts\";\nimport * as actions from \"./actions.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nexport async function handleUpdate(update: any) {\n const msg = update.message || update.edited_message;\n if (!msg) return;\n const from = msg.from;\n if (!from || from.is_bot) return;\n const chatId = msg.chat.id;\n const userId = from.id;\n\n // /start [referral_code]\n const text: string = msg.text?.trim() || \"\";\n const isStart = text.startsWith(\"/start\");\n\n // Register/update user\n let referredBy: number | null = null;\n if (isStart) {\n const parts = text.split(/\\s+/);\n if (parts[1]) {\n const refUser = await db.getUserByRefCode(parts[1]);\n if (refUser && refUser.tg_id !== userId) referredBy = refUser.tg_id;\n }\n }\n const { user, created } = await db.getOrCreateUser(\n userId,\n from.username || null,\n from.first_name || null,\n referredBy,\n );\n\n // Channel join gate\n const joined = await ensureChannelJoined(chatId, userId);\n if (!joined) return;\n\n // Credit referral now that user has joined\n if (created && user.referred_by && !isAdmin(userId)) {\n await db.addReferral(user.referred_by, userId);\n try {\n const refUser = await db.getUser(user.referred_by);\n if (refUser) {\n await tg.sendMessage(\n BOT_TOKEN,\n user.referred_by,\n `🎉 New referral!\\n${user.first_name || \"A user\"} just joined via your link.\\nYou now have ${refUser.referral_count + 1} referrals.`,\n );\n }\n } catch {}\n }\n\n // Handle documents (uploads)\n if (msg.document) {\n await actions.handleDocument(chatId, userId, msg.document);\n return;\n }\n\n // State-based text input\n const currentUser = await db.getUser(userId);\n const state = currentUser?.state || \"idle\";\n\n if (text === \"/cancel\") {\n await db.setUserState(userId, \"main\");\n await screens.showMain(chatId, userId, from.first_name);\n return;\n }\n\n if (state === \"awaiting_sub_path\" && !text.startsWith(\"/\") && text !== \"⬅️ Back\") {\n await actions.handleSubPath(chatId, userId, text);\n return;\n }\n if (state === \"awaiting_delete_path\" && !text.startsWith(\"/\") && text !== \"⬅️ Back\") {\n await actions.handleDeletePath(chatId, userId, text);\n return;\n }\n if (state === \"awaiting_main_path\" && !text.startsWith(\"/\") && text !== \"⬅️ Back\") {\n await actions.handleSetMainPath(chatId, userId, text);\n return;\n }\n\n // Commands / buttons\n switch (text) {\n case \"/start\":\n case \"/menu\":\n await screens.showMain(chatId, userId, from.first_name);\n return;\n case \"/host\":\n case \"🖥 Host\":\n await screens.showHost(chatId, userId);\n return;\n case \"/ref\":\n case \"/referral\":\n case \"👥 Referral\":\n await screens.showReferral(chatId, userId);\n return;\n case \"/status\":\n case \"📊 Status\":\n await screens.showStatus(chatId, userId);\n return;\n case \"ℹ️ Help\":\n case \"/help\":\n await screens.showHelp(chatId);\n return;\n case \"🗄 Server\":\n await screens.showServer(chatId, userId);\n return;\n case \"⬆️ Upload Files\":\n await actions.promptUpload(chatId, userId);\n return;\n case \"📁 Manage Files\":\n await screens.showManage(chatId, userId);\n return;\n case \"⏱ Host Time\":\n await screens.showHost(chatId, userId);\n return;\n case \"⏹ Stop\":\n await actions.handleStop(chatId, userId);\n return;\n case \"🔄 Restart\":\n await actions.handleRestart(chatId, userId);\n return;\n case \"📄 List Files\":\n await actions.handleListFiles(chatId, userId);\n return;\n case \"⭐ Set Main File\":\n await actions.handleSetMainPrompt(chatId, userId);\n return;\n case \"➕ Add File\":\n await actions.promptAddFile(chatId, userId);\n return;\n case \"🗑 Delete File\":\n await actions.handleDeleteFilePrompt(chatId, userId);\n return;\n case \"⬅️ Back\":\n if (state === \"manage\" || state.startsWith(\"awaiting_sub\") || state === \"awaiting_delete_path\" || state === \"awaiting_main_path\") {\n await db.setUserState(userId, \"host\");\n await screens.showHost(chatId, userId);\n } else {\n await screens.showMain(chatId, userId, from.first_name);\n }\n return;\n case \"⬅️ Back to Host\":\n await db.setUserState(userId, \"host\");\n await screens.showHost(chatId, userId);\n return;\n }\n\n // Default fallback\n await screens.showMain(chatId, userId, from.first_name);\n}\n",[],[137,158],"a1477b3c-3f23-11f1-af59-42b51c65c3df","panel.ts","a1477bfa-3f23-11f1-af59-42b51c65c3df",15,["D",1776955768732],"// Web admin panel for setting webhooks and monitoring\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { esc, fmtDate, fmtDuration, getBaseUrl, projectWebhookUrl } from \"../lib/utils.ts\";\n\nconst PANEL_USER = \"Scott\";\nconst PANEL_PASS = \"ReyBalor21\";\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nfunction layout(title: string, body: string): string {\n return `\n\n\n\n\n${esc(title)} · ScottHub\n\n\n\n

🤖

ScottHub

Telegram Bot Hosting · Admin Panel

\n \n

\n ${body}\n

\n\n`;\n}\n\nfunction loginPage(err = \"\"): string {\n return `\n\nLogin · ScottHub\n\n\n`;\n}\n\nasync function getSessionToken(req: Request): Promise {\n const c = req.headers.get(\"cookie\") || \"\";\n const m = c.match(/scotthub_sess=([^;]+)/);\n return m ? decodeURIComponent(m[1]) : null;\n}\n\nasync function requireAuth(req: Request): Promise {\n const tok = await getSessionToken(req);\n if (!tok) return false;\n return db.validateSession(tok);\n}\n\nfunction redirectTo(url: string): Response {\n return new Response(null, { status: 302, headers: { Location: url } });\n}\n\nfunction statCard(label: string, value: number | string, icon: string): string {\n return `

${icon}

${value}

${label}

`;\n}\n\nfunction statusBadge(s: string): string {\n const cls: Record = {\n running: \"bg-emerald-500/20 text-emerald-300 border-emerald-500/40\",\n stopped: \"bg-slate-600/20 text-slate-300 border-slate-600/40\",\n expired: \"bg-rose-500/20 text-rose-300 border-rose-500/40\",\n };\n return `${esc(s)}`;\n}\n\nexport async function handlePanel(req: Request, url: URL): Promise {\n const path = url.pathname;\n const baseUrl = await getBaseUrl();\n\n // Login\n if (path === \"/panel/login\") {\n if (req.method === \"GET\") return new Response(loginPage(), { headers: { \"content-type\": \"text/html\" } });\n if (req.method === \"POST\") {\n const form = await req.formData();\n const u = form.get(\"username\");\n const p = form.get(\"password\");\n if (u === PANEL_USER && p === PANEL_PASS) {\n const token = await db.createSession(String(u));\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/panel\",\n \"set-cookie\": `scotthub_sess=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`,\n },\n });\n }\n return new Response(loginPage(\"Invalid credentials\"), { headers: { \"content-type\": \"text/html\" }, status: 401 });\n }\n }\n\n if (path === \"/panel/logout\") {\n const tok = await getSessionToken(req);\n if (tok) await db.deleteSession(tok);\n return new Response(null, {\n status: 302,\n headers: { Location: \"/panel/login\", \"set-cookie\": \"scotthub_sess=; Path=/; Max-Age=0\" },\n });\n }\n\n // Auth gate\n if (!(await requireAuth(req))) {\n return redirectTo(\"/panel/login\");\n }\n\n // Dashboard\n if (path === \"/panel\" || path === \"/panel/\") {\n const stats = await db.globalStats();\n const projects = await db.listAllProjects();\n const running = projects.filter((p) => p.status === \"running\").length;\n const body = `\n

\n ${statCard(\"Users\", stats.users, \"👤\")}\n ${statCard(\"Projects\", stats.projects, \"📦\")}\n ${statCard(\"Running\", running, \"🟢\")}\n ${statCard(\"Messages\", stats.messages, \"✉️\")}\n

Recent projects

\n \n \n \n \n \n ${projects.slice(0, 20).map((p) => `\n \n \n \n \n \n \n \n \n `).join(\"\")}\n \n

ID	Name	Owner	Bot	Status	Expires
#${p.id}	`${esc(p.name)}`	${p.owner_id}	${p.bot_username ? \"@\" + esc(p.bot_username) : \"—\"}	${statusBadge(p.status)}	${fmtDate(p.expires_at)}	Manage →

`;\n return new Response(layout(\"Dashboard\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Projects list\n if (path === \"/panel/projects\") {\n const projects = await db.listAllProjects();\n const body = `\n

All projects

\n ${projects.length === 0 ? \"

No projects yet.

\" : projects.map((p) => `\n \n

${esc(p.name)} #${p.id}

owner ${p.owner_id} · ${p.bot_username ? \"@\" + esc(p.bot_username) : \"no bot detected\"}

\n ${statusBadge(p.status)}\n

${fmtDate(p.expires_at)}

\n `).join(\"\")}\n

`;\n return new Response(layout(\"Projects\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Project detail + webhook controls\n const projMatch = path.match(/^\\/panel\\/projects\\/(\\d+)$/);\n if (projMatch) {\n const id = Number(projMatch[1]);\n const project = await db.getProjectById(id);\n if (!project) return new Response(\"Not found\", { status: 404 });\n const files = await db.listFiles(id);\n const whUrl = project.webhook_secret ? projectWebhookUrl(baseUrl, id, project.webhook_secret) : \"\";\n\n // Handle actions\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"setwebhook\" && project.bot_token) {\n const r = await tg.setWebhook(project.bot_token, whUrl);\n await db.updateProject(id, { webhook_url: whUrl, status: \"running\" });\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook set ✅ Bot is ONLINE!\" : \"Error: \" + r.description)}`);\n }\n if (action === \"delwebhook\" && project.bot_token) {\n const r = await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook removed\" : \"Error: \" + r.description)}`);\n }\n if (action === \"toggle\") {\n const newStatus = project.status === \"running\" ? \"stopped\" : \"running\";\n await db.updateProject(id, { status: newStatus, stopped_at: newStatus === \"stopped\" ? Math.floor(Date.now() / 1000) : null });\n if (newStatus === \"running\" && project.bot_token) {\n await tg.setWebhook(project.bot_token, whUrl);\n } else if (newStatus === \"stopped\" && project.bot_token) {\n await tg.deleteWebhook(project.bot_token);\n }\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Status → \" + newStatus)}`);\n }\n if (action === \"extend\") {\n const days = Number(form.get(\"days\") || \"2\");\n const base2 = project.expires_at && project.expires_at > Math.floor(Date.now() / 1000) ? project.expires_at : Math.floor(Date.now() / 1000);\n await db.updateProject(id, { expires_at: base2 + days * 86400, status: \"running\" });\n if (project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Extended by \" + days + \"d\")}`);\n }\n if (action === \"settoken\") {\n const t = String(form.get(\"token\") || \"\").trim();\n if (t) {\n const me = await tg.getMe(t);\n await db.updateProject(id, { bot_token: t, bot_username: me.ok ? me.result.username : null });\n }\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Token updated\")}`);\n }\n }\n\n // Webhook info\n let whInfo = \"\";\n if (project.bot_token) {\n const info = await tg.getWebhookInfo(project.bot_token);\n if (info.ok) {\n whInfo = `

${esc(JSON.stringify(info.result, null, 2))}

`;\n } else {\n whInfo = `

Error: ${esc(info.description || \"\")}

`;\n }\n }\n\n const msg = url.searchParams.get(\"msg\");\n const now = Math.floor(Date.now() / 1000);\n const remaining = project.expires_at ? project.expires_at - now : 0;\n\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n← all projects\n

${esc(project.name)} #${project.id}

Owner: ${project.owner_id} · Created ${fmtDate(project.created_at)}

\n\n

Bot Info

Status: ${statusBadge(project.status)}

Bot: ${project.bot_username ? \"@\" + esc(project.bot_username) : \"not set\"}

Token: ${project.bot_token ? esc(project.bot_token.slice(0, 10)) + \"…\" : \"not set\"}

Admin id: ${esc(project.admin_id || \"—\")}

Main file: ${esc(project.main_file || \"—\")}

Messages: ${project.message_count}

Expires: ${project.expires_at ? `${fmtDate(project.expires_at)} (${fmtDuration(Math.max(0, remaining))})` : \"—\"}

\n\n

Webhook Router URL

\n ${esc(whUrl)}\n \n

\n\n

Manual Controls

\n \n \n

\n\n

Telegram Webhook Info

\n ${whInfo || \"

No bot token set.

\"}\n

\n\n

Detected Imports (pip)

\n ${esc(project.detected_imports || \"—\")}\n

\n\n

Files (${files.length})

\n ${files.map((f) => `

${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)}

${f.size}b · ${fmtDate(f.uploaded_at)}

`).join(\"\") || \"

No files.

\"}\n

`;\n return new Response(layout(project.name, body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Events log\n if (path === \"/panel/events\") {\n const events = await db.recentWebhookEvents(100) as any[];\n const body = `\n

Recent webhook events (${events.length})

\n \n \n \n \n \n ${events.map((e: any) => `\n \n \n \n \n \n `).join(\"\") || \"\"}\n \n

Time	Project	Dir	Status	Payload
${fmtDate(e.created_at)}	#${e.project_id ?? \"—\"}	${esc(e.direction)}	${e.status_code}	`${esc(String(e.payload \|\| \"\").slice(0, 200))}`
No events yet.

`;\n return new Response(layout(\"Events\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Main bot webhook management\n if (path === \"/panel/main-webhook\") {\n const endpoint = `${baseUrl}/bot`;\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"set\") {\n const r = await tg.setWebhook(BOT_TOKEN, endpoint);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Main bot webhook set ✅\" : \"Error: \" + (r.description || \"\"))}`);\n }\n if (action === \"delete\") {\n const r = await tg.deleteWebhook(BOT_TOKEN);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Webhook deleted\" : \"Error: \" + (r.description || \"\"))}`);\n }\n }\n const info = await tg.getWebhookInfo(BOT_TOKEN);\n const me = await tg.getMe(BOT_TOKEN);\n const msg = url.searchParams.get(\"msg\");\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n

Main ScottHub Bot

Bot: ${me.ok ? `@${esc(me.result.username)} (${esc(me.result.first_name)})` : \"token invalid\"}

Webhook endpoint: ${esc(endpoint)}

\n \n

Telegram getWebhookInfo

${esc(JSON.stringify(info, null, 2))}

`;\n return new Response(layout(\"Main Webhook\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n return new Response(\"Panel page not found\", { status: 404 });\n}\n",[],[137,166],"60da6bae-3f23-11f1-af59-42b51c65c3df","hosted_webhook.ts","60da6cb2-3f23-11f1-af59-42b51c65c3df",13,["D",1776955660643],"// Webhook router for hosted bots.\n// When Telegram posts an update for a hosted bot, it comes to /tgwebhook/:projectId/:secret.\n// We forward the update to the hosted bot's code by executing it via webhook pattern.\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { hashToken } from \"../lib/utils.ts\";\n\nexport async function handleHostedWebhook(projectId: number, secret: string, body: any): Promise {\n const project = await db.getProjectById(projectId);\n if (!project || project.webhook_secret !== secret) {\n return new Response(\"not found\", { status: 404 });\n }\n\n const tokenHash = project.bot_token ? await hashToken(project.bot_token) : \"none\";\n\n // If stopped or expired, just log and drop\n const now = Math.floor(Date.now() / 1000);\n if (project.status !== \"running\" || (project.expires_at && project.expires_at <= now)) {\n await db.logWebhook(projectId, tokenHash, \"dropped\", JSON.stringify(body), 200);\n return new Response(\"ok (project not running)\", { status: 200 });\n }\n\n await db.logWebhook(projectId, tokenHash, \"in\", JSON.stringify(body), 200);\n\n // Execute the hosted bot's Python code via webhook simulation\n // Since we can't run Python on Val Town, we forward via the bot's token\n const msg = body?.message;\n if (msg && project.bot_token) {\n const chatId = msg.chat.id;\n const text: string = msg.text || \"\";\n\n // Load the main file to check for command handlers\n const mainFile = project.main_file ? await db.getFile(project.id, project.main_file) : null;\n const allFiles = await db.listFiles(project.id);\n\n // Smart command routing based on Python code analysis\n if (mainFile?.content) {\n const response = await executeBotLogic(project, mainFile.content, allFiles, msg);\n if (response) {\n await tg.sendMessage(project.bot_token, chatId, response);\n return new Response(\"ok\", { status: 200 });\n }\n }\n\n // Default handler for basic commands\n if (text === \"/start\" || text === \"/help\" || text === \"/ping\") {\n const username = project.bot_username ? \"@\" + project.bot_username : \"this bot\";\n await tg.sendMessage(\n project.bot_token,\n chatId,\n `🤖 ${username} is hosted by ScottHub.\\n\\n` +\n `Owner project: ${project.name}\\n` +\n `Status: running\\n` +\n `Files: ${allFiles.length}\\n\\n` +\n `This bot is running via ScottHub webhook router.`,\n );\n }\n }\n\n // Handle callback queries\n const callback = body?.callback_query;\n if (callback && project.bot_token) {\n await tg.answerCallback(project.bot_token, callback.id, \"Handled by ScottHub\");\n }\n\n return new Response(\"ok\", { status: 200 });\n}\n\n/**\n * Analyze Python code and try to simulate basic bot responses.\n * This parses command handlers from the Python source and generates responses.\n */\nasync function executeBotLogic(\n project: db.ProjectRow,\n mainCode: string,\n allFiles: db.FileRow[],\n msg: any,\n): Promise {\n const text: string = msg.text || \"\";\n const command = text.split(/\\s+/)[0]?.toLowerCase();\n\n // Extract command handlers from Python code\n // Pattern: @bot.message_handler(commands=['xyz']) or @dp.message_handler(commands=['xyz'])\n // or @app.on_message(filters.command(\"xyz\"))\n const handlers = extractCommandHandlers(mainCode);\n\n // Check all files for handler definitions\n for (const file of allFiles) {\n if (file.path.endsWith(\".py\") && !file.is_main) {\n handlers.push(...extractCommandHandlers(file.content));\n }\n }\n\n // Find matching handler and extract reply text\n for (const h of handlers) {\n if (command === \"/\" + h.command || command === h.command) {\n if (h.replyText) return h.replyText;\n }\n }\n\n return null;\n}\n\ninterface CommandHandler {\n command: string;\n replyText: string | null;\n}\n\nfunction extractCommandHandlers(code: string): CommandHandler[] {\n const handlers: CommandHandler[] = [];\n\n // Match common patterns:\n // @bot.message_handler(commands=['start'])\n // @dp.message(Command(\"start\"))\n // @app.on_message(filters.command(\"start\"))\n const patterns = [\n /commands?\\s*=\\s*\\[['\"](\\w+)['\"]/g,\n /Command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n /filters\\.command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n ];\n\n for (const pattern of patterns) {\n let match;\n while ((match = pattern.exec(code)) !== null) {\n const cmd = match[1];\n // Try to find the reply text near this handler\n const idx = match.index;\n const nearby = code.slice(idx, idx + 500);\n const replyMatch = nearby.match(/(?:reply|send_message|answer)\\s*\\(\\s*[\"']([^\"']+)[\"']/);\n handlers.push({\n command: cmd,\n replyText: replyMatch ? replyMatch[1] : null,\n });\n }\n }\n\n return handlers;\n}\n",[],[137,174],"50a1c84a-3f23-11f1-825c-42b51c65c3df","actions.ts","50a1c926-3f23-11f1-825c-42b51c65c3df",12,["D",1776955633421],"// Upload, file management, stop/restart, start-hosting\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { analyzePythonFile } from \"../lib/parser.ts\";\nimport { esc, fmtDuration, getBaseUrl, projectWebhookUrl, HOST_DURATION_SECONDS } from \"../lib/utils.ts\";\nimport { canHost, claimHostSlot, isAdmin } from \"./access.ts\";\nimport { showHost, showManage } from \"./screens.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\n/** Handle a Telegram document upload */\nexport async function handleDocument(\n chatId: number,\n userId: number,\n doc: { file_id: string; file_name: string; file_size: number; mime_type?: string },\n) {\n if (doc.file_size > 2_000_000) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ File too large (max 2MB per file).\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const name = (doc.file_name || \"file.txt\").replace(/[^\\w.\\-\\/]/g, \"_\");\n\n // Fetch file content\n const info = await tg.getFile(BOT_TOKEN, doc.file_id);\n if (!info?.file_path) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Could not fetch file from Telegram.\");\n return;\n }\n const content = await tg.downloadFile(BOT_TOKEN, info.file_path);\n\n const user = await db.getUser(userId);\n if (!user) return;\n\n const state = user.state || \"idle\";\n const isPy = name.endsWith(\".py\");\n const subPath = (JSON.parse(user.state_data || \"{}\") as any).subPath as string | undefined;\n\n // If state is \"awaiting_sub_upload\" → user specified a path earlier\n if (state === \"awaiting_sub_upload\" && subPath) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No active project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.addFile(project.id, subPath, content, false);\n\n // Smart parse sub file for imports too\n if (subPath.endsWith(\".py\")) {\n const a = analyzePythonFile(content);\n if (a.imports.pip.length) {\n const existing = JSON.parse(project.detected_imports || \"[]\") as string[];\n const merged = [...new Set([...existing, ...a.imports.pip])];\n await db.updateProject(project.id, { detected_imports: JSON.stringify(merged) });\n }\n }\n\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `✅ Added ${esc(subPath)} to project ${esc(project.name)}.`,\n { reply_markup: tg.MANAGE_KEYBOARD },\n );\n await db.setUserState(userId, \"manage\");\n return;\n }\n\n // Otherwise: main upload flow\n const allowed = await canHost(userId);\n if (!allowed.allowed) {\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `🔒 Cannot host yet.\\nReferrals: ${allowed.have}/${allowed.need}\\n\\nUse 👥 Referral to invite friends.`,\n { reply_markup: tg.MAIN_KEYBOARD },\n );\n return;\n }\n\n // Get or create project\n let project = await db.getProjectByOwner(userId);\n const now = Math.floor(Date.now() / 1000);\n const isExpired = project && project.expires_at && project.expires_at <= now;\n\n if (!project || isExpired) {\n const claim = await claimHostSlot(userId);\n if (!claim.ok) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ \" + claim.reason, { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n if (isExpired && project) {\n await db.updateProject(project.id, {\n expires_at: claim.expiresAt,\n started_at: now,\n stopped_at: null,\n status: \"running\",\n });\n project = await db.getProjectByOwner(userId);\n } else {\n project = await db.createProject(userId, name.replace(/\\.py$/, \"\"));\n await db.updateProject(project.id, {\n expires_at: claim.expiresAt,\n started_at: now,\n status: \"running\",\n });\n project = await db.getProjectByOwner(userId);\n }\n }\n\n if (!project) return;\n\n // Store the file\n const existingFiles = await db.listFiles(project.id);\n const makeMain = isPy && (existingFiles.length === 0 || !project.main_file);\n await db.addFile(project.id, name, content, makeMain);\n if (makeMain) {\n await db.setMainFile(project.id, name);\n }\n\n // Smart-parse if python\n let analysisText = \"\";\n if (isPy) {\n const a = analyzePythonFile(content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n\n // If we got a bot token, set up webhook automatically\n if (a.botToken) {\n const me = await tg.getMe(a.botToken);\n if (me.ok) {\n await db.updateProject(project.id, { bot_username: me.result.username });\n }\n // Auto set webhook for the hosted bot\n try {\n const base = await getBaseUrl();\n const whUrl = projectWebhookUrl(base, project.id, project.webhook_secret || \"\");\n await db.updateProject(project.id, { webhook_url: whUrl });\n const whResult = await tg.setWebhook(a.botToken, whUrl);\n if (whResult.ok) {\n analysisText += \"\\n🔌 Webhook auto-configured! ✅\";\n }\n } catch (e) {\n console.error(\"Auto webhook error:\", e);\n }\n }\n\n analysisText +=\n `\\n\\n🧠 Smart analysis\\n` +\n `• Bot token: ${a.botToken ? \"✅ detected\" : \"❌ not found\"}\\n` +\n `• Admin id: ${a.adminId ? `✅ ${esc(a.adminId)}` : \"❌ not found\"}\\n` +\n `• Imports detected: ${a.imports.imports.length}\\n` +\n (a.imports.pip.length ? `• Auto-install: ${esc(a.imports.pip.join(\" \"))}\\n` : \"\") +\n `• Lines: ${a.lines}`;\n }\n\n const updated = await db.getProjectById(project.id);\n const remaining = updated?.expires_at ? updated.expires_at - now : 0;\n\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `✅ File uploaded\\n\\n` +\n `📄 ${esc(name)} (${content.length} bytes)\\n` +\n (makeMain ? `⭐ Marked as main file\\n` : \"\") +\n `⏱ Hosting time: ${fmtDuration(remaining)}` +\n analysisText,\n { reply_markup: tg.HOST_KEYBOARD },\n );\n await db.setUserState(userId, \"host\");\n}\n\nexport async function handleStop(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No project to stop.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n await db.updateProject(project.id, {\n status: \"stopped\",\n stopped_at: Math.floor(Date.now() / 1000),\n });\n // Remove webhook from hosted bot\n if (project.bot_token) {\n try { await tg.deleteWebhook(project.bot_token); } catch {}\n }\n await tg.sendMessage(BOT_TOKEN, chatId, \"⏹ Bot stopped.\\nWebhook removed. Press 🔄 Restart to resume.\", {\n reply_markup: tg.HOST_KEYBOARD,\n });\n}\n\nexport async function handleRestart(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No project to restart.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const now = Math.floor(Date.now() / 1000);\n if (project.expires_at && project.expires_at <= now) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Your host time has expired. Invite 2 users and upload again.\", {\n reply_markup: tg.MAIN_KEYBOARD,\n });\n return;\n }\n await db.updateProject(project.id, { status: \"running\", stopped_at: null });\n // Re-set webhook\n if (project.bot_token && project.webhook_secret) {\n try {\n const base = await getBaseUrl();\n const whUrl = projectWebhookUrl(base, project.id, project.webhook_secret);\n await tg.setWebhook(project.bot_token, whUrl);\n } catch {}\n }\n await tg.sendMessage(BOT_TOKEN, chatId, \"🔄 Bot restarted.\\nWebhook routing resumed.\", {\n reply_markup: tg.HOST_KEYBOARD,\n });\n}\n\nexport async function promptAddFile(chatId: number, userId: number) {\n await db.setUserState(userId, \"awaiting_sub_path\");\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n \"📝 Send the relative path for your new file (e.g. plugins/helper.py or config.py).\\n\\nAfter that, send the file as a document.\\n\\nType /cancel to abort.\",\n { reply_markup: tg.BACK_KEYBOARD },\n );\n}\n\nexport async function handleSubPath(chatId: number, userId: number, text: string) {\n const clean = text.trim().replace(/^\\/+/, \"\").replace(/\\.\\./g, \"\");\n if (!clean || clean.length > 120 || !/^[\\w.\\-\\/]+$/.test(clean)) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid path. Use letters, digits, _, -, . and / only.\", {\n reply_markup: tg.BACK_KEYBOARD,\n });\n return;\n }\n await db.setUserState(userId, \"awaiting_sub_upload\", { subPath: clean });\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `📂 Path set to ${esc(clean)}\\n\\nNow send the file as a document.`,\n { reply_markup: tg.BACK_KEYBOARD },\n );\n}\n\nexport async function handleDeleteFilePrompt(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n if (!files.length) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No files to delete.\", { reply_markup: tg.MANAGE_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_delete_path\");\n const list = files.map((f) => `• ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `🗑 Send the path to delete:\\n\\n${list}\\n\\n/cancel to abort.`, {\n reply_markup: tg.BACK_KEYBOARD,\n });\n}\n\nexport async function handleDeletePath(chatId: number, userId: number, text: string) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such file.\", { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n if (file.is_main) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Can't delete the main file. Set a different main first.\", {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n await db.setUserState(userId, \"manage\");\n return;\n }\n await db.deleteFile(project.id, clean);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Deleted ${esc(clean)}`, {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleSetMainPrompt(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n const pyFiles = files.filter((f) => f.path.endsWith(\".py\"));\n if (!pyFiles.length) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No .py files yet.\", { reply_markup: tg.MANAGE_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_main_path\");\n const list = pyFiles.map((f) => `${f.is_main ? \"⭐\" : \" \"} ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Send path of file to mark as main:\\n\\n${list}`, {\n reply_markup: tg.BACK_KEYBOARD,\n });\n}\n\nexport async function handleSetMainPath(chatId: number, userId: number, text: string) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file || !clean.endsWith(\".py\")) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such .py file.\", { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n await db.setMainFile(project.id, clean);\n const analysis = analyzePythonFile(file.content);\n const patch: any = { detected_imports: JSON.stringify(analysis.imports.pip) };\n if (analysis.botToken) patch.bot_token = analysis.botToken;\n if (analysis.adminId) patch.admin_id = analysis.adminId;\n await db.updateProject(project.id, patch);\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Main file set to ${esc(clean)}`, {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleListFiles(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No project.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const files = await db.listFiles(project.id);\n if (!files.length) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No files.\", { reply_markup: tg.MANAGE_KEYBOARD });\n return;\n }\n const list = files\n .map((f) => `${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)} — ${f.size}b`)\n .join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `📁 Files in ${esc(project.name)}\\n\\n${list}`, {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n}\n\nexport async function promptUpload(chatId: number, userId: number) {\n const allowed = await canHost(userId);\n if (!allowed.allowed) {\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `🔒 Locked\\n\\nYou need ${allowed.need} referrals to unlock a free hosting slot.\\nYou have: ${allowed.have}/${allowed.need}\\n\\nTap 👥 Referral to get your link.`,\n { reply_markup: tg.MAIN_KEYBOARD },\n );\n return;\n }\n await db.setUserState(userId, \"awaiting_upload\");\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `⬆️ Upload your bot\\n\\nSend your Python bot file (.py) as a document.\\n\\nScottHub will auto-detect:\\n• bot token\\n• admin id\\n• all imports / pip packages\\n\\n/cancel to abort.`,\n { reply_markup: tg.BACK_KEYBOARD },\n );\n}\n",[],[137,182],"15877bec-3f23-11f1-96ce-42b51c65c3df","access.ts","15877cd2-3f23-11f1-96ce-42b51c65c3df",10,["D",1776955534253],"// Access / gating: channel join + referral gate\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { HOST_DURATION_SECONDS, REFERRALS_REQUIRED } from \"../lib/utils.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\nconst CHANNEL = \"@ScottHubs\";\nconst ADMIN_ID = 6511143869;\n\nexport function isAdmin(tgId: number): boolean {\n return tgId === ADMIN_ID;\n}\n\nexport async function ensureChannelJoined(chatId: number, userId: number): Promise {\n if (isAdmin(userId)) {\n await db.markJoined(userId, true);\n return true;\n }\n const r = await tg.checkChannelMember(BOT_TOKEN, CHANNEL, userId);\n if (r.ok && r.isMember) {\n await db.markJoined(userId, true);\n return true;\n }\n await db.markJoined(userId, false);\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `🔒 Join Required\\n\\nTo use ScottHub you must join our channel:\\n👉 https://t.me/ScottHubs\\n\\nAfter joining, press /start again.`,\n { reply_markup: tg.REMOVE_KEYBOARD },\n );\n return false;\n}\n\nexport async function canHost(userId: number): Promise<\n { allowed: true; reason: \"admin\" | \"referrals\" | \"active\" } | { allowed: false; need: number; have: number }\n> {\n if (isAdmin(userId)) return { allowed: true, reason: \"admin\" };\n const user = await db.getUser(userId);\n if (!user) return { allowed: false, need: REFERRALS_REQUIRED, have: 0 };\n\n const project = await db.getProjectByOwner(userId);\n const now = Math.floor(Date.now() / 1000);\n if (project && project.expires_at && project.expires_at > now) {\n return { allowed: true, reason: \"active\" };\n }\n\n if (user.referral_count >= REFERRALS_REQUIRED) {\n return { allowed: true, reason: \"referrals\" };\n }\n return { allowed: false, need: REFERRALS_REQUIRED, have: user.referral_count };\n}\n\nexport async function claimHostSlot(userId: number): Promise<\n { ok: true; expiresAt: number } | { ok: false; reason: string }\n> {\n if (isAdmin(userId)) {\n return { ok: true, expiresAt: Math.floor(Date.now() / 1000) + HOST_DURATION_SECONDS };\n }\n const user = await db.getUser(userId);\n if (!user) return { ok: false, reason: \"User not found\" };\n if (user.referral_count < REFERRALS_REQUIRED) {\n return { ok: false, reason: `Need ${REFERRALS_REQUIRED} referrals (you have ${user.referral_count})` };\n }\n await db.consumeReferrals(userId, REFERRALS_REQUIRED);\n return { ok: true, expiresAt: Math.floor(Date.now() / 1000) + HOST_DURATION_SECONDS };\n}\n",[],[137,190],"cfd05ec0-3f22-11f1-9590-42b51c65c3df","database","cfd05f88-3f22-11f1-9590-42b51c65c3df",1,["D",1776955417306],[204,205],[198],{"_34":214,"_13":215,"_37":216,"_39":199,"_41":42,"_43":217,"_45":46,"_47":218,"_17":49,"_50":51,"_52":219,"_54":55,"_56":-5,"_75":220,"_18":221},{"_34":206,"_13":207,"_37":208,"_39":199,"_41":42,"_43":209,"_45":46,"_47":210,"_17":49,"_50":51,"_52":211,"_54":55,"_56":-5,"_75":212,"_18":213},"d8f094d4-3f22-11f1-9590-42b51c65c3df","schema.ts","d8f0957e-3f22-11f1-9590-42b51c65c3df",5,["D",1776955432607],"// Database schema + migrations for ScottHub\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runMigrations() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n tg_id INTEGER PRIMARY KEY,\n username TEXT,\n first_name TEXT,\n referral_code TEXT UNIQUE,\n referred_by INTEGER,\n referral_count INTEGER DEFAULT 0,\n state TEXT DEFAULT 'idle',\n state_data TEXT,\n joined_channel INTEGER DEFAULT 0,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n updated_at INTEGER DEFAULT (strftime('%s','now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS projects (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n owner_id INTEGER NOT NULL,\n name TEXT NOT NULL,\n main_file TEXT,\n bot_token TEXT,\n bot_username TEXT,\n admin_id TEXT,\n detected_imports TEXT,\n status TEXT DEFAULT 'stopped',\n webhook_secret TEXT,\n webhook_url TEXT,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n started_at INTEGER,\n expires_at INTEGER,\n stopped_at INTEGER,\n last_update_at INTEGER,\n message_count INTEGER DEFAULT 0\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS files (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER NOT NULL,\n path TEXT NOT NULL,\n content TEXT NOT NULL,\n size INTEGER DEFAULT 0,\n is_main INTEGER DEFAULT 0,\n uploaded_at INTEGER DEFAULT (strftime('%s','now')),\n UNIQUE(project_id, path)\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS referrals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n referrer_id INTEGER NOT NULL,\n invited_id INTEGER NOT NULL UNIQUE,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS webhook_events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER,\n bot_token_hash TEXT,\n direction TEXT,\n payload TEXT,\n status_code INTEGER,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS panel_sessions (\n token TEXT PRIMARY KEY,\n username TEXT NOT NULL,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n expires_at INTEGER NOT NULL\n )\n `);\n\n // Indexes\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_projects_owner ON projects(owner_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_files_project ON files(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_referrals_ref ON referrals(referrer_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_webhook_project ON webhook_events(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_users_refcode ON users(referral_code)`);\n\n // Add webhook_url column if missing (migration)\n try {\n await sqlite.execute(`ALTER TABLE projects ADD COLUMN webhook_url TEXT`);\n } catch { /* already exists */ }\n}\n",[],[198,207],"ec081948-3f22-11f1-825c-42b51c65c3df","queries.ts","ec0819de-3f22-11f1-825c-42b51c65c3df",6,["D",1776955464643],"// All DB queries for ScottHub\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type UserRow = {\n tg_id: number;\n username: string | null;\n first_name: string | null;\n referral_code: string;\n referred_by: number | null;\n referral_count: number;\n state: string;\n state_data: string | null;\n joined_channel: number;\n};\n\nexport type ProjectRow = {\n id: number;\n owner_id: number;\n name: string;\n main_file: string | null;\n bot_token: string | null;\n bot_username: string | null;\n admin_id: string | null;\n detected_imports: string | null;\n status: string;\n webhook_secret: string | null;\n webhook_url: string | null;\n created_at: number;\n started_at: number | null;\n expires_at: number | null;\n stopped_at: number | null;\n last_update_at: number | null;\n message_count: number;\n};\n\nexport type FileRow = {\n id: number;\n project_id: number;\n path: string;\n content: string;\n size: number;\n is_main: number;\n uploaded_at: number;\n};\n\nfunction genCode(prefix: string, len = 8): string {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let s = \"\";\n for (let i = 0; i < len; i++) s += chars[Math.floor(Math.random() * chars.length)];\n return prefix + s;\n}\n\n// ---- USERS ----\nexport async function getOrCreateUser(\n tgId: number,\n username: string | null,\n firstName: string | null,\n referredBy: number | null = null,\n): Promise<{ user: UserRow; created: boolean }> {\n const existing = await sqlite.execute({\n sql: \"SELECT * FROM users WHERE tg_id = ?\",\n args: [tgId],\n });\n if (existing.rows.length > 0) {\n await sqlite.execute({\n sql: \"UPDATE users SET username=?, first_name=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [username, firstName, tgId],\n });\n return { user: existing.rows[0] as unknown as UserRow, created: false };\n }\n let code = genCode(\"R\");\n for (let attempts = 0; attempts < 5; attempts++) {\n const check = await sqlite.execute({ sql: \"SELECT 1 FROM users WHERE referral_code=?\", args: [code] });\n if (check.rows.length === 0) break;\n code = genCode(\"R\");\n }\n await sqlite.execute({\n sql: \"INSERT INTO users (tg_id, username, first_name, referral_code, referred_by) VALUES (?, ?, ?, ?, ?)\",\n args: [tgId, username, firstName, code, referredBy],\n });\n const fresh = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return { user: fresh.rows[0] as unknown as UserRow, created: true };\n}\n\nexport async function getUser(tgId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\n\nexport async function getUserByRefCode(code: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE referral_code=?\", args: [code] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\n\nexport async function setUserState(tgId: number, state: string, data: Record | null = null) {\n await sqlite.execute({\n sql: \"UPDATE users SET state=?, state_data=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [state, data ? JSON.stringify(data) : null, tgId],\n });\n}\n\nexport async function markJoined(tgId: number, joined: boolean) {\n await sqlite.execute({\n sql: \"UPDATE users SET joined_channel=? WHERE tg_id=?\",\n args: [joined ? 1 : 0, tgId],\n });\n}\n\nexport async function addReferral(referrerId: number, invitedId: number): Promise {\n try {\n await sqlite.execute({\n sql: \"INSERT INTO referrals (referrer_id, invited_id) VALUES (?, ?)\",\n args: [referrerId, invitedId],\n });\n await sqlite.execute({\n sql: \"UPDATE users SET referral_count = referral_count + 1 WHERE tg_id=?\",\n args: [referrerId],\n });\n return true;\n } catch {\n return false;\n }\n}\n\n// ---- PROJECTS ----\nexport async function getProjectByOwner(ownerId: number): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM projects WHERE owner_id=? ORDER BY id DESC LIMIT 1\",\n args: [ownerId],\n });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\n\nexport async function getProjectById(id: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE id=?\", args: [id] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\n\nexport async function getProjectByToken(token: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE bot_token=?\", args: [token] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\n\nexport async function createProject(ownerId: number, name: string): Promise {\n const secret = genCode(\"W\", 16);\n const r = await sqlite.execute({\n sql: \"INSERT INTO projects (owner_id, name, webhook_secret) VALUES (?, ?, ?) RETURNING *\",\n args: [ownerId, name, secret],\n });\n return r.rows[0] as unknown as ProjectRow;\n}\n\nexport async function updateProject(id: number, patch: Partial) {\n const keys = Object.keys(patch);\n if (keys.length === 0) return;\n const sets = keys.map((k) => `${k}=?`).join(\", \");\n const args = keys.map((k) => (patch as any)[k]);\n args.push(id);\n await sqlite.execute({ sql: `UPDATE projects SET ${sets} WHERE id=?`, args });\n}\n\nexport async function listAllProjects(): Promise {\n const r = await sqlite.execute(\"SELECT * FROM projects ORDER BY id DESC\");\n return r.rows as unknown as ProjectRow[];\n}\n\nexport async function listRunningProjects(): Promise {\n const now = Math.floor(Date.now() / 1000);\n const r = await sqlite.execute({\n sql: \"SELECT * FROM projects WHERE status='running' AND (expires_at IS NULL OR expires_at > ?)\",\n args: [now],\n });\n return r.rows as unknown as ProjectRow[];\n}\n\n// ---- FILES ----\nexport async function addFile(\n projectId: number,\n path: string,\n content: string,\n isMain = false,\n): Promise {\n await sqlite.execute({\n sql: `INSERT INTO files (project_id, path, content, size, is_main) VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(project_id, path) DO UPDATE SET content=excluded.content, size=excluded.size, uploaded_at=strftime('%s','now')`,\n args: [projectId, path, content, content.length, isMain ? 1 : 0],\n });\n const r = await sqlite.execute({\n sql: \"SELECT * FROM files WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n return r.rows[0] as unknown as FileRow;\n}\n\nexport async function listFiles(projectId: number): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM files WHERE project_id=? ORDER BY is_main DESC, path ASC\",\n args: [projectId],\n });\n return r.rows as unknown as FileRow[];\n}\n\nexport async function getFile(projectId: number, path: string): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM files WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n return r.rows.length ? (r.rows[0] as unknown as FileRow) : null;\n}\n\nexport async function deleteFile(projectId: number, path: string) {\n await sqlite.execute({\n sql: \"DELETE FROM files WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n}\n\nexport async function setMainFile(projectId: number, path: string) {\n await sqlite.execute({\n sql: \"UPDATE files SET is_main=0 WHERE project_id=?\",\n args: [projectId],\n });\n await sqlite.execute({\n sql: \"UPDATE files SET is_main=1 WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n await sqlite.execute({\n sql: \"UPDATE projects SET main_file=? WHERE id=?\",\n args: [path, projectId],\n });\n}\n\n// ---- WEBHOOK LOG ----\nexport async function logWebhook(projectId: number | null, hash: string, direction: string, payload: string, status: number) {\n await sqlite.execute({\n sql: \"INSERT INTO webhook_events (project_id, bot_token_hash, direction, payload, status_code) VALUES (?, ?, ?, ?, ?)\",\n args: [projectId, hash, direction, payload.slice(0, 4000), status],\n });\n if (projectId) {\n await sqlite.execute({\n sql: \"UPDATE projects SET message_count = message_count + 1, last_update_at = strftime('%s','now') WHERE id=?\",\n args: [projectId],\n });\n }\n}\n\nexport async function recentWebhookEvents(limit = 50) {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM webhook_events ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return r.rows;\n}\n\n// ---- STATS ----\nexport async function globalStats() {\n const u = await sqlite.execute(\"SELECT COUNT(*) as c FROM users\");\n const p = await sqlite.execute(\"SELECT COUNT(*) as c FROM projects\");\n const r = await sqlite.execute(\"SELECT COUNT(*) as c FROM projects WHERE status='running'\");\n const f = await sqlite.execute(\"SELECT COUNT(*) as c FROM files\");\n const m = await sqlite.execute(\"SELECT COUNT(*) as c FROM webhook_events\");\n const num = (x: any) => Number(x.rows[0]?.c ?? 0);\n return { users: num(u), projects: num(p), running: num(r), files: num(f), messages: num(m) };\n}\n\n// ---- PANEL SESSIONS ----\nexport async function createSession(username: string): Promise {\n const token = genCode(\"S\", 32) + Date.now().toString(36);\n const expires = Math.floor(Date.now() / 1000) + 60 * 60 * 24 * 7;\n await sqlite.execute({\n sql: \"INSERT INTO panel_sessions (token, username, expires_at) VALUES (?, ?, ?)\",\n args: [token, username, expires],\n });\n return token;\n}\n\nexport async function validateSession(token: string): Promise {\n const now = Math.floor(Date.now() / 1000);\n const r = await sqlite.execute({\n sql: \"SELECT 1 FROM panel_sessions WHERE token=? AND expires_at > ?\",\n args: [token, now],\n });\n return r.rows.length > 0;\n}\n\nexport async function deleteSession(token: string) {\n await sqlite.execute({ sql: \"DELETE FROM panel_sessions WHERE token=?\", args: [token] });\n}\n\nexport async function consumeReferrals(userId: number, amount: number) {\n await sqlite.execute({\n sql: \"UPDATE users SET referral_count = referral_count - ? WHERE tg_id=?\",\n args: [amount, userId],\n });\n}\n",[],[198,215],"cd2ce288-3f22-11f1-b2aa-42b51c65c3df",["D",1776955412887],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","ScottHub - Telegram Bot Hosting Platform","imageUrl","userId","676437db-cba0-454f-b925-a9cf4a24f1b1","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019dbac9-2381-7248-9dc7-2d22f6f0f7af","tursoName","cd2ce2883f2211f1b2aa42b51c65c3df","tursoHostname","cd2ce2883f2211f1b2aa42b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789506649022],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_278":274},"org",{"_11":12,"_272":-5,"_273":274,"_232":233,"_275":276,"_277":55},"branch",{"_17":44,"_13":16,"_34":42,"_264":222,"_265":-5,"_266":-5,"_267":-5,"_268":-5,"_269":-5,"_270":14,"_271":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":222,"_13":14,"_47":367,"_224":-5,"_225":55,"_226":227,"_228":227,"_229":230,"_231":-5,"_232":233,"_234":70,"_235":46,"_236":-5,"_237":-5,"_238":49,"_239":240,"_241":242,"_243":244,"_245":368,"_247":-5,"_248":249,"_250":249,"_251":252,"_253":252,"_254":252,"_255":249,"_256":249,"_257":369,"_259":370,"_261":371,"_263":55},[310,313,320,322,326,328],"files",[310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328],"counts",{"_301":49,"_302":200,"_303":49,"_32":304,"_305":306},[299],{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":59,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_18":298},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_18":300},[19,36],"pulls","branches","forks",{"_307":49,"_309":49},"connections",{"_307":49,"_308":49},"count","unfilledCount","emptyCount",{"_34":197,"_13":198,"_37":199,"_39":-5,"_41":42,"_43":200,"_45":46,"_47":201,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":365,"_18":366},{"_34":214,"_13":215,"_37":216,"_39":199,"_41":42,"_43":217,"_45":46,"_47":218,"_17":49,"_50":51,"_52":219,"_54":55,"_56":-5,"_75":363,"_18":364},{"_34":206,"_13":207,"_37":208,"_39":199,"_41":42,"_43":209,"_45":46,"_47":210,"_17":49,"_50":51,"_52":211,"_54":55,"_56":-5,"_75":361,"_18":362},{"_34":136,"_13":137,"_37":138,"_39":-5,"_41":42,"_43":139,"_45":46,"_47":140,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":359,"_18":360},{"_34":189,"_13":190,"_37":191,"_39":138,"_41":42,"_43":192,"_45":46,"_47":193,"_17":49,"_50":51,"_52":194,"_54":55,"_56":-5,"_75":357,"_18":358},{"_34":181,"_13":182,"_37":183,"_39":138,"_41":42,"_43":184,"_45":46,"_47":185,"_17":49,"_50":51,"_52":186,"_54":55,"_56":-5,"_75":355,"_18":356},{"_34":173,"_13":174,"_37":175,"_39":138,"_41":42,"_43":176,"_45":46,"_47":177,"_17":49,"_50":51,"_52":178,"_54":55,"_56":-5,"_75":353,"_18":354},{"_34":165,"_13":166,"_37":167,"_39":138,"_41":42,"_43":168,"_45":46,"_47":169,"_17":49,"_50":51,"_52":170,"_54":55,"_56":-5,"_75":351,"_18":352},{"_34":157,"_13":158,"_37":159,"_39":138,"_41":42,"_43":160,"_45":46,"_47":161,"_17":49,"_50":51,"_52":162,"_54":55,"_56":-5,"_75":349,"_18":350},{"_34":149,"_13":150,"_37":151,"_39":138,"_41":42,"_43":152,"_45":46,"_47":153,"_17":49,"_50":51,"_52":154,"_54":55,"_56":-5,"_75":347,"_18":348},{"_34":119,"_13":120,"_37":121,"_39":-5,"_41":42,"_43":122,"_45":46,"_47":123,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":345,"_18":346},{"_34":127,"_13":128,"_37":129,"_39":121,"_41":42,"_43":130,"_45":46,"_47":131,"_17":49,"_50":132,"_52":133,"_54":55,"_56":-5,"_75":343,"_18":344},{"_34":85,"_13":86,"_37":87,"_39":-5,"_41":42,"_43":88,"_45":46,"_47":89,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":341,"_18":342},{"_34":111,"_13":112,"_37":113,"_39":87,"_41":42,"_43":114,"_45":46,"_47":115,"_17":49,"_50":51,"_52":116,"_54":55,"_56":-5,"_75":339,"_18":340},{"_34":103,"_13":104,"_37":105,"_39":87,"_41":42,"_43":106,"_45":46,"_47":107,"_17":49,"_50":51,"_52":108,"_54":55,"_56":-5,"_75":337,"_18":338},{"_34":95,"_13":96,"_37":97,"_39":87,"_41":42,"_43":98,"_45":46,"_47":99,"_17":49,"_50":51,"_52":100,"_54":55,"_56":-5,"_75":335,"_18":336},{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":78,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_75":333,"_18":334},{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":82,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_75":331,"_18":332},{"_34":68,"_13":69,"_37":70,"_39":-5,"_41":42,"_43":71,"_45":46,"_47":72,"_17":49,"_50":73,"_52":74,"_54":55,"_56":-5,"_75":329,"_18":330},[],[69],[],[19,36],[327],[19],[],[86,96],[],[86,104],[],[86,112],[323,324,325],[86],[],[120,128],[321],[120],[],[137,150],[],[137,158],[],[137,166],[],[137,174],[],[137,182],[],[137,190],[314,315,316,317,318,319],[137],[],[198,207],[],[198,215],[311,312],[198],["D",1776955412887],["D",1789506649022],{"_11":12,"_278":274},{"_11":12,"_272":-5,"_273":274,"_232":233,"_275":276,"_277":55},{"_17":44,"_13":16,"_34":42,"_264":222,"_265":-5,"_266":-5,"_267":-5,"_268":-5,"_269":-5,"_270":14,"_271":12},"ctx",{"_257":-5,"_295":405,"_406":407,"_408":409,"_410":55,"_411":55,"_412":55,"_413":46,"_414":-5,"_415":-7,"_416":-7,"_417":49,"_418":55,"_419":55,"_420":-5,"_421":55,"_422":55,"_423":55,"_424":-5},"ENV",{"_376":377,"_378":379,"_380":16,"_381":382,"_383":384,"_385":386,"_387":388,"_389":390,"_391":392,"_393":394,"_395":396,"_397":398,"_399":400,"_401":402,"_403":404},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]