🤖

ScottHub

Telegram Bot Hosting Platform

\n\n

How to use

Open the bot in Telegram and press /start
Join our channel @ScottHubs
Invite 2 friends via your Referral link
Upload your Python bot in 🖥 Host → ⬆️ Upload Files
Your bot goes live automatically via webhook!

\n\n

\n \n

📢 Channel

@ScottHubs

\n \n \n

🔐 Admin Panel

Manage webhooks

\n \n \n

📄 View Source

Read the code

\n \n

\n\n

\n`;\n}\n\nexport default async function (req: Request): Promise {\n await ensureMigrated();\n const url = new URL(req.url);\n const path = url.pathname;\n\n try {\n // Main bot webhook from Telegram\n if (path === \"/bot\" && req.method === \"POST\") {\n const body = await req.json().catch(() => null);\n if (body) {\n try {\n await handleUpdate(body);\n } catch (e) {\n console.error(\"handleUpdate error:\", e);\n }\n }\n return new Response(\"ok\");\n }\n\n // Hosted bot webhook router\n const whMatch = path.match(/^\\/tgwebhook\\/(\\d+)\\/([A-Za-z0-9]+)$/);\n if (whMatch && req.method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return await handleHostedWebhook(Number(whMatch[1]), whMatch[2], body);\n }\n\n // Health\n if (path === \"/health\") {\n return Response.json({ ok: true, ts: Date.now() });\n }\n\n // Source redirect\n if (path === \"/source\") {\n const v = parseVal();\n return new Response(null, { status: 302, headers: { Location: v.links.self.val } });\n }\n\n // Panel\n if (path === \"/panel\" || path.startsWith(\"/panel/\")) {\n return await handlePanel(req, url);\n }\n\n // Landing\n if (path === \"/\" || path === \"\") {\n return new Response(landingPage(), { headers: { \"content-type\": \"text/html\" } });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n } catch (e) {\n console.error(\"main.ts error:\", e);\n return new Response(\"Internal error: \" + (e as Error).message, { status: 500 });\n }\n}\n","children",[],[222],"c0cf0452-3f23-11f1-81c4-42b51c65c3df","setup_webhook.ts","c0cf0556-3f23-11f1-81c4-42b51c65c3df","34d29f34-3560-4ca1-8039-fde99f343323",["D",1776955821628],"// One-time setup: set the main bot webhook\nimport { setWebhook, getMe, getWebhookInfo } from \"../lib/telegram.ts\";\nimport { getBaseUrl } from \"../lib/utils.ts\";\n\nconst TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nconst base = await getBaseUrl();\nconst webhookUrl = `${base}/bot`;\n\nconsole.log(\"Base URL:\", base);\nconsole.log(\"Setting webhook to:\", webhookUrl);\n\nconst me = await getMe(TOKEN);\nconsole.log(\"Bot info:\", JSON.stringify(me));\n\nconst r = await setWebhook(TOKEN, webhookUrl);\nconsole.log(\"setWebhook result:\", JSON.stringify(r));\n\nconst info = await getWebhookInfo(TOKEN);\nconsole.log(\"getWebhookInfo:\", JSON.stringify(info));\n",[],[238,231],"scripts","c0cf169a-3f23-11f1-81c4-42b51c65c3df",["D",1776955821628],[219],[238],["D",1776955516460],[],[18,91],["D",1776955486622],[],[18,67],["D",1776955506490],[],[18,82],["D",1776955417822],[215,216,217],[18],"b78f3420-3f23-11f1-81c4-42b51c65c3df","expiry_sweep.ts","b78f34de-3f23-11f1-81c4-42b51c65c3df","d0873942-3f22-11f1-afe3-42b51c65c3df",17,["D",1776955806112],"interval","// Runs periodically to expire host slots whose 2-day window is up\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { runMigrations } from \"../database/schema.ts\";\nimport * as tg from \"../lib/telegram.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nexport default async function (interval: Interval) {\n await runMigrations();\n const now = Math.floor(Date.now() / 1000);\n\n // Find projects about to expire\n const expiring = await sqlite.execute({\n sql: \"SELECT * FROM projects WHERE status='running' AND expires_at IS NOT NULL AND expires_at <= ?\",\n args: [now],\n });\n\n for (const proj of expiring.rows as any[]) {\n // Remove webhook from the hosted bot\n if (proj.bot_token) {\n try {\n await tg.deleteWebhook(proj.bot_token);\n } catch {}\n }\n\n // Notify owner\n try {\n await tg.sendMessage(\n BOT_TOKEN,\n proj.owner_id,\n `⏰ Hosting Expired\\n\\nYour project ${proj.name} has expired.\\nInvite 2 new users to renew your hosting slot.\\n\\nTap 👥 Referral to get your link.`,\n { reply_markup: tg.MAIN_KEYBOARD },\n );\n } catch {}\n }\n\n // Mark them expired\n const result = await sqlite.execute({\n sql: \"UPDATE projects SET status='expired', stopped_at=? WHERE status='running' AND expires_at IS NOT NULL AND expires_at <= ?\",\n args: [now, now],\n });\n\n console.log(`expiry_sweep: expired ${result.rowsAffected ?? 0} projects at ${new Date().toISOString()}`);\n}\n",[],[265,256],"jobs","d0873884-3f22-11f1-afe3-42b51c65c3df",4,["D",1776955418495],[213],[265],"2b14a5fc-3f23-11f1-877f-42b51c65c3df","screens.ts","2b14a69c-3f23-11f1-877f-42b51c65c3df","d0695288-3f22-11f1-afe3-42b51c65c3df",11,["D",1776955570426],"// Screen renderers - produce text + keyboard for each menu\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { esc, fmtDate, fmtDuration, REFERRALS_REQUIRED } from \"../lib/utils.ts\";\nimport { isAdmin } from \"./access.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nexport async function showMain(chatId: number, userId: number, firstName: string | null) {\n const admin = isAdmin(userId) ? \" 👑\" : \"\";\n const text =\n `👋 Welcome${firstName ? \", \" + esc(firstName) : \"\"}!${admin}\\n\\n` +\n `🤖 ScottHub — Telegram Bot Hosting Platform\\n\\n` +\n `Choose an option from the menu:\\n` +\n `• 🖥 Host — manage your bot hosting\\n` +\n `• 👥 Referral — invite friends to unlock hosting\\n` +\n `• 📊 Status — platform & your stats\\n` +\n `• ℹ️ Help — how it works`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n await db.setUserState(userId, \"main\");\n}\n\nexport async function showHost(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n const user = await db.getUser(userId);\n const now = Math.floor(Date.now() / 1000);\n\n let serverStatus = \"🟢 Free\";\n let timeInfo = \"Not started\";\n let projInfo = \"No project yet\";\n\n if (project) {\n projInfo =\n `Project: ${esc(project.name)}\\n` +\n `Main file: ${esc(project.main_file || \"not set\")}\\n` +\n `Status: ${esc(project.status)}\\n` +\n `Messages relayed: ${project.message_count}`;\n if (project.expires_at && project.expires_at > now) {\n timeInfo = `⏱ ${fmtDuration(project.expires_at - now)} remaining\\n(expires ${fmtDate(project.expires_at)})`;\n serverStatus = `🟢 Running on free tier`;\n } else if (project.expires_at) {\n timeInfo = `❌ Expired ${fmtDate(project.expires_at)}\\nInvite ${REFERRALS_REQUIRED} users to renew.`;\n serverStatus = `🔴 Stopped (expired)`;\n }\n }\n\n const admin = isAdmin(userId) ? \"\\n👑 Admin mode — no referrals needed\" : \"\";\n const refInfo = user ? `\\n\\nReferrals: ${user.referral_count}/${REFERRALS_REQUIRED}` : \"\";\n\n const text =\n `🖥 Host Dashboard${admin}\\n\\n` +\n `Server: ${serverStatus}\\n` +\n `Host time: ${timeInfo}${refInfo}\\n\\n` +\n `${projInfo}\\n\\n` +\n `Choose an action below.`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n\nexport async function showServer(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n const now = Math.floor(Date.now() / 1000);\n let body: string;\n if (!project) {\n body =\n `🗄 Server Tier: Free\\n\\n` +\n `Cost: FREE\\n` +\n `Duration per slot: 2 days\\n` +\n `Unlock cost: ${REFERRALS_REQUIRED} referrals\\n\\n` +\n `You have no active project. Press ⬆️ Upload Files to start.`;\n } else {\n const remaining = project.expires_at && project.expires_at > now ? project.expires_at - now : 0;\n body =\n `🗄 Server Tier: Free\\n\\n` +\n `Project: ${esc(project.name)}\\n` +\n `Status: ${esc(project.status)}\\n` +\n `Remaining: ${fmtDuration(remaining)}\\n` +\n `Webhook: active via ScottHub router\\n` +\n `Messages processed: ${project.message_count}`;\n }\n await tg.sendMessage(BOT_TOKEN, chatId, body, { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function showReferral(chatId: number, userId: number) {\n const user = await db.getUser(userId);\n if (!user) return;\n const me = await tg.getMe(BOT_TOKEN);\n const botUsername = me.ok ? me.result.username : \"this_bot\";\n const link = `https://t.me/${botUsername}?start=${user.referral_code}`;\n const text =\n `👥 Referral Program\\n\\n` +\n `Your code: ${esc(user.referral_code)}\\n` +\n `Your link:\\n${link}\\n\\n` +\n `Referrals: ${user.referral_count}\\n` +\n `Needed to unlock hosting: ${REFERRALS_REQUIRED}\\n\\n` +\n `📢 Share this link. When ${REFERRALS_REQUIRED} new users /start via your link (and join @ScottHubs), you unlock a 2-day free hosting slot.`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n}\n\nexport async function showStatus(chatId: number, userId: number) {\n const user = await db.getUser(userId);\n const stats = await db.globalStats();\n const project = await db.getProjectByOwner(userId);\n const text =\n `📊 Status\\n\\n` +\n `Bot: 🟢 Online\\n` +\n `Webhook router: 🟢 Active\\n\\n` +\n `Platform stats\\n` +\n `• Users: ${stats.users}\\n` +\n `• Projects: ${stats.projects}\\n` +\n `• Running: ${stats.running}\\n` +\n `• Files stored: ${stats.files}\\n` +\n `• Messages relayed: ${stats.messages}\\n\\n` +\n `Your stats\\n` +\n `• Referrals: ${user?.referral_count ?? 0}\\n` +\n `• Project: ${project ? esc(project.name) : \"none\"}\\n` +\n `• Project status: ${project ? esc(project.status) : \"—\"}`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n}\n\nexport async function showHelp(chatId: number) {\n const text =\n `ℹ️ How ScottHub Works\\n\\n` +\n `1️⃣ Join @ScottHubs\\n` +\n `2️⃣ Invite ${REFERRALS_REQUIRED} friends via your referral link\\n` +\n `3️⃣ Tap 🖥 Host → ⬆️ Upload Files\\n` +\n `4️⃣ Send your main.py — ScottHub auto-detects:\\n` +\n ` • Bot token\\n` +\n ` • Admin id\\n` +\n ` • All imports/pip packages\\n` +\n `5️⃣ Use 📁 Manage Files to add extra modules\\n` +\n `6️⃣ Your bot is wired through the ScottHub webhook router for 2 days\\n\\n` +\n `Commands:\\n/start, /menu, /host, /ref, /status, /cancel`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n}\n\nexport async function showManage(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"You have no project yet. Upload a file first.\", {\n reply_markup: tg.HOST_KEYBOARD,\n });\n return;\n }\n const files = await db.listFiles(project.id);\n const list = files.length\n ? files.map((f) => `${f.is_main ? \"⭐\" : \" \"} ${esc(f.path)} (${f.size}b)`).join(\"\\n\")\n : \"No files yet.\";\n const text = `📁 Manage Files\\n\\nProject: ${esc(project.name)}\\nMain: ${esc(project.main_file || \"not set\")}\\n\\n${list}\\n\\nChoose an action:`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n",[],[280,272],"handlers","6e3b6bc2-3f23-11f1-bb36-42b51c65c3df","router.ts","6e3b6c76-3f23-11f1-bb36-42b51c65c3df",14,["D",1776955683090],"// Main Telegram update dispatcher for the ScottHub bot\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { ensureChannelJoined, isAdmin } from \"./access.ts\";\nimport * as screens from \"./screens.ts\";\nimport * as actions from \"./actions.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nexport async function handleUpdate(update: any) {\n const msg = update.message || update.edited_message;\n if (!msg) return;\n const from = msg.from;\n if (!from || from.is_bot) return;\n const chatId = msg.chat.id;\n const userId = from.id;\n\n // /start [referral_code]\n const text: string = msg.text?.trim() || \"\";\n const isStart = text.startsWith(\"/start\");\n\n // Register/update user\n let referredBy: number | null = null;\n if (isStart) {\n const parts = text.split(/\\s+/);\n if (parts[1]) {\n const refUser = await db.getUserByRefCode(parts[1]);\n if (refUser && refUser.tg_id !== userId) referredBy = refUser.tg_id;\n }\n }\n const { user, created } = await db.getOrCreateUser(\n userId,\n from.username || null,\n from.first_name || null,\n referredBy,\n );\n\n // Channel join gate\n const joined = await ensureChannelJoined(chatId, userId);\n if (!joined) return;\n\n // Credit referral now that user has joined\n if (created && user.referred_by && !isAdmin(userId)) {\n await db.addReferral(user.referred_by, userId);\n try {\n const refUser = await db.getUser(user.referred_by);\n if (refUser) {\n await tg.sendMessage(\n BOT_TOKEN,\n user.referred_by,\n `🎉 New referral!\\n${user.first_name || \"A user\"} just joined via your link.\\nYou now have ${refUser.referral_count + 1} referrals.`,\n );\n }\n } catch {}\n }\n\n // Handle documents (uploads)\n if (msg.document) {\n await actions.handleDocument(chatId, userId, msg.document);\n return;\n }\n\n // State-based text input\n const currentUser = await db.getUser(userId);\n const state = currentUser?.state || \"idle\";\n\n if (text === \"/cancel\") {\n await db.setUserState(userId, \"main\");\n await screens.showMain(chatId, userId, from.first_name);\n return;\n }\n\n if (state === \"awaiting_sub_path\" && !text.startsWith(\"/\") && text !== \"⬅️ Back\") {\n await actions.handleSubPath(chatId, userId, text);\n return;\n }\n if (state === \"awaiting_delete_path\" && !text.startsWith(\"/\") && text !== \"⬅️ Back\") {\n await actions.handleDeletePath(chatId, userId, text);\n return;\n }\n if (state === \"awaiting_main_path\" && !text.startsWith(\"/\") && text !== \"⬅️ Back\") {\n await actions.handleSetMainPath(chatId, userId, text);\n return;\n }\n\n // Commands / buttons\n switch (text) {\n case \"/start\":\n case \"/menu\":\n await screens.showMain(chatId, userId, from.first_name);\n return;\n case \"/host\":\n case \"🖥 Host\":\n await screens.showHost(chatId, userId);\n return;\n case \"/ref\":\n case \"/referral\":\n case \"👥 Referral\":\n await screens.showReferral(chatId, userId);\n return;\n case \"/status\":\n case \"📊 Status\":\n await screens.showStatus(chatId, userId);\n return;\n case \"ℹ️ Help\":\n case \"/help\":\n await screens.showHelp(chatId);\n return;\n case \"🗄 Server\":\n await screens.showServer(chatId, userId);\n return;\n case \"⬆️ Upload Files\":\n await actions.promptUpload(chatId, userId);\n return;\n case \"📁 Manage Files\":\n await screens.showManage(chatId, userId);\n return;\n case \"⏱ Host Time\":\n await screens.showHost(chatId, userId);\n return;\n case \"⏹ Stop\":\n await actions.handleStop(chatId, userId);\n return;\n case \"🔄 Restart\":\n await actions.handleRestart(chatId, userId);\n return;\n case \"📄 List Files\":\n await actions.handleListFiles(chatId, userId);\n return;\n case \"⭐ Set Main File\":\n await actions.handleSetMainPrompt(chatId, userId);\n return;\n case \"➕ Add File\":\n await actions.promptAddFile(chatId, userId);\n return;\n case \"🗑 Delete File\":\n await actions.handleDeleteFilePrompt(chatId, userId);\n return;\n case \"⬅️ Back\":\n if (state === \"manage\" || state.startsWith(\"awaiting_sub\") || state === \"awaiting_delete_path\" || state === \"awaiting_main_path\") {\n await db.setUserState(userId, \"host\");\n await screens.showHost(chatId, userId);\n } else {\n await screens.showMain(chatId, userId, from.first_name);\n }\n return;\n case \"⬅️ Back to Host\":\n await db.setUserState(userId, \"host\");\n await screens.showHost(chatId, userId);\n return;\n }\n\n // Default fallback\n await screens.showMain(chatId, userId, from.first_name);\n}\n",[],[280,282],"a1477b3c-3f23-11f1-af59-42b51c65c3df","panel.ts","a1477bfa-3f23-11f1-af59-42b51c65c3df",15,["D",1776955768732],"// Web admin panel for setting webhooks and monitoring\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { esc, fmtDate, fmtDuration, getBaseUrl, projectWebhookUrl } from \"../lib/utils.ts\";\n\nconst PANEL_USER = \"Scott\";\nconst PANEL_PASS = \"ReyBalor21\";\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nfunction layout(title: string, body: string): string {\n return `\n\n\n\n\n${esc(title)} · ScottHub\n\n\n\n

🤖

ScottHub

Telegram Bot Hosting · Admin Panel

\n \n

\n ${body}\n

\n\n`;\n}\n\nfunction loginPage(err = \"\"): string {\n return `\n\nLogin · ScottHub\n\n\n`;\n}\n\nasync function getSessionToken(req: Request): Promise {\n const c = req.headers.get(\"cookie\") || \"\";\n const m = c.match(/scotthub_sess=([^;]+)/);\n return m ? decodeURIComponent(m[1]) : null;\n}\n\nasync function requireAuth(req: Request): Promise {\n const tok = await getSessionToken(req);\n if (!tok) return false;\n return db.validateSession(tok);\n}\n\nfunction redirectTo(url: string): Response {\n return new Response(null, { status: 302, headers: { Location: url } });\n}\n\nfunction statCard(label: string, value: number | string, icon: string): string {\n return `

${icon}

${value}

${label}

`;\n}\n\nfunction statusBadge(s: string): string {\n const cls: Record = {\n running: \"bg-emerald-500/20 text-emerald-300 border-emerald-500/40\",\n stopped: \"bg-slate-600/20 text-slate-300 border-slate-600/40\",\n expired: \"bg-rose-500/20 text-rose-300 border-rose-500/40\",\n };\n return `${esc(s)}`;\n}\n\nexport async function handlePanel(req: Request, url: URL): Promise {\n const path = url.pathname;\n const baseUrl = await getBaseUrl();\n\n // Login\n if (path === \"/panel/login\") {\n if (req.method === \"GET\") return new Response(loginPage(), { headers: { \"content-type\": \"text/html\" } });\n if (req.method === \"POST\") {\n const form = await req.formData();\n const u = form.get(\"username\");\n const p = form.get(\"password\");\n if (u === PANEL_USER && p === PANEL_PASS) {\n const token = await db.createSession(String(u));\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/panel\",\n \"set-cookie\": `scotthub_sess=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`,\n },\n });\n }\n return new Response(loginPage(\"Invalid credentials\"), { headers: { \"content-type\": \"text/html\" }, status: 401 });\n }\n }\n\n if (path === \"/panel/logout\") {\n const tok = await getSessionToken(req);\n if (tok) await db.deleteSession(tok);\n return new Response(null, {\n status: 302,\n headers: { Location: \"/panel/login\", \"set-cookie\": \"scotthub_sess=; Path=/; Max-Age=0\" },\n });\n }\n\n // Auth gate\n if (!(await requireAuth(req))) {\n return redirectTo(\"/panel/login\");\n }\n\n // Dashboard\n if (path === \"/panel\" || path === \"/panel/\") {\n const stats = await db.globalStats();\n const projects = await db.listAllProjects();\n const running = projects.filter((p) => p.status === \"running\").length;\n const body = `\n

\n ${statCard(\"Users\", stats.users, \"👤\")}\n ${statCard(\"Projects\", stats.projects, \"📦\")}\n ${statCard(\"Running\", running, \"🟢\")}\n ${statCard(\"Messages\", stats.messages, \"✉️\")}\n

Recent projects

\n \n \n \n \n \n ${projects.slice(0, 20).map((p) => `\n \n \n \n \n \n \n \n \n `).join(\"\")}\n \n

ID	Name	Owner	Bot	Status	Expires
#${p.id}	`${esc(p.name)}`	${p.owner_id}	${p.bot_username ? \"@\" + esc(p.bot_username) : \"—\"}	${statusBadge(p.status)}	${fmtDate(p.expires_at)}	Manage →

`;\n return new Response(layout(\"Dashboard\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Projects list\n if (path === \"/panel/projects\") {\n const projects = await db.listAllProjects();\n const body = `\n

All projects

\n ${projects.length === 0 ? \"

No projects yet.

\" : projects.map((p) => `\n \n

${esc(p.name)} #${p.id}

owner ${p.owner_id} · ${p.bot_username ? \"@\" + esc(p.bot_username) : \"no bot detected\"}

\n ${statusBadge(p.status)}\n

${fmtDate(p.expires_at)}

\n `).join(\"\")}\n

`;\n return new Response(layout(\"Projects\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Project detail + webhook controls\n const projMatch = path.match(/^\\/panel\\/projects\\/(\\d+)$/);\n if (projMatch) {\n const id = Number(projMatch[1]);\n const project = await db.getProjectById(id);\n if (!project) return new Response(\"Not found\", { status: 404 });\n const files = await db.listFiles(id);\n const whUrl = project.webhook_secret ? projectWebhookUrl(baseUrl, id, project.webhook_secret) : \"\";\n\n // Handle actions\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"setwebhook\" && project.bot_token) {\n const r = await tg.setWebhook(project.bot_token, whUrl);\n await db.updateProject(id, { webhook_url: whUrl, status: \"running\" });\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook set ✅ Bot is ONLINE!\" : \"Error: \" + r.description)}`);\n }\n if (action === \"delwebhook\" && project.bot_token) {\n const r = await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook removed\" : \"Error: \" + r.description)}`);\n }\n if (action === \"toggle\") {\n const newStatus = project.status === \"running\" ? \"stopped\" : \"running\";\n await db.updateProject(id, { status: newStatus, stopped_at: newStatus === \"stopped\" ? Math.floor(Date.now() / 1000) : null });\n if (newStatus === \"running\" && project.bot_token) {\n await tg.setWebhook(project.bot_token, whUrl);\n } else if (newStatus === \"stopped\" && project.bot_token) {\n await tg.deleteWebhook(project.bot_token);\n }\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Status → \" + newStatus)}`);\n }\n if (action === \"extend\") {\n const days = Number(form.get(\"days\") || \"2\");\n const base2 = project.expires_at && project.expires_at > Math.floor(Date.now() / 1000) ? project.expires_at : Math.floor(Date.now() / 1000);\n await db.updateProject(id, { expires_at: base2 + days * 86400, status: \"running\" });\n if (project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Extended by \" + days + \"d\")}`);\n }\n if (action === \"settoken\") {\n const t = String(form.get(\"token\") || \"\").trim();\n if (t) {\n const me = await tg.getMe(t);\n await db.updateProject(id, { bot_token: t, bot_username: me.ok ? me.result.username : null });\n }\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Token updated\")}`);\n }\n }\n\n // Webhook info\n let whInfo = \"\";\n if (project.bot_token) {\n const info = await tg.getWebhookInfo(project.bot_token);\n if (info.ok) {\n whInfo = `

${esc(JSON.stringify(info.result, null, 2))}

`;\n } else {\n whInfo = `

Error: ${esc(info.description || \"\")}

`;\n }\n }\n\n const msg = url.searchParams.get(\"msg\");\n const now = Math.floor(Date.now() / 1000);\n const remaining = project.expires_at ? project.expires_at - now : 0;\n\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n← all projects\n

${esc(project.name)} #${project.id}

Owner: ${project.owner_id} · Created ${fmtDate(project.created_at)}

\n\n

Bot Info

Status: ${statusBadge(project.status)}

Bot: ${project.bot_username ? \"@\" + esc(project.bot_username) : \"not set\"}

Token: ${project.bot_token ? esc(project.bot_token.slice(0, 10)) + \"…\" : \"not set\"}

Admin id: ${esc(project.admin_id || \"—\")}

Main file: ${esc(project.main_file || \"—\")}

Messages: ${project.message_count}

Expires: ${project.expires_at ? `${fmtDate(project.expires_at)} (${fmtDuration(Math.max(0, remaining))})` : \"—\"}

\n\n

Webhook Router URL

\n ${esc(whUrl)}\n \n

\n\n

Manual Controls

\n \n \n

\n\n

Telegram Webhook Info

\n ${whInfo || \"

No bot token set.

\"}\n

\n\n

Detected Imports (pip)

\n ${esc(project.detected_imports || \"—\")}\n

\n\n

Files (${files.length})

\n ${files.map((f) => `

${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)}

${f.size}b · ${fmtDate(f.uploaded_at)}

`).join(\"\") || \"

No files.

\"}\n

`;\n return new Response(layout(project.name, body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Events log\n if (path === \"/panel/events\") {\n const events = await db.recentWebhookEvents(100) as any[];\n const body = `\n

Recent webhook events (${events.length})

\n \n \n \n \n \n ${events.map((e: any) => `\n \n \n \n \n \n `).join(\"\") || \"\"}\n \n

Time	Project	Dir	Status	Payload
${fmtDate(e.created_at)}	#${e.project_id ?? \"—\"}	${esc(e.direction)}	${e.status_code}	`${esc(String(e.payload \|\| \"\").slice(0, 200))}`
No events yet.

`;\n return new Response(layout(\"Events\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Main bot webhook management\n if (path === \"/panel/main-webhook\") {\n const endpoint = `${baseUrl}/bot`;\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"set\") {\n const r = await tg.setWebhook(BOT_TOKEN, endpoint);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Main bot webhook set ✅\" : \"Error: \" + (r.description || \"\"))}`);\n }\n if (action === \"delete\") {\n const r = await tg.deleteWebhook(BOT_TOKEN);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Webhook deleted\" : \"Error: \" + (r.description || \"\"))}`);\n }\n }\n const info = await tg.getWebhookInfo(BOT_TOKEN);\n const me = await tg.getMe(BOT_TOKEN);\n const msg = url.searchParams.get(\"msg\");\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n

Main ScottHub Bot

Bot: ${me.ok ? `@${esc(me.result.username)} (${esc(me.result.first_name)})` : \"token invalid\"}

Webhook endpoint: ${esc(endpoint)}

\n \n

Telegram getWebhookInfo

${esc(JSON.stringify(info, null, 2))}

`;\n return new Response(layout(\"Main Webhook\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n return new Response(\"Panel page not found\", { status: 404 });\n}\n",[],[280,290],"60da6bae-3f23-11f1-af59-42b51c65c3df","hosted_webhook.ts","60da6cb2-3f23-11f1-af59-42b51c65c3df",13,["D",1776955660643],"// Webhook router for hosted bots.\n// When Telegram posts an update for a hosted bot, it comes to /tgwebhook/:projectId/:secret.\n// We forward the update to the hosted bot's code by executing it via webhook pattern.\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { hashToken } from \"../lib/utils.ts\";\n\nexport async function handleHostedWebhook(projectId: number, secret: string, body: any): Promise {\n const project = await db.getProjectById(projectId);\n if (!project || project.webhook_secret !== secret) {\n return new Response(\"not found\", { status: 404 });\n }\n\n const tokenHash = project.bot_token ? await hashToken(project.bot_token) : \"none\";\n\n // If stopped or expired, just log and drop\n const now = Math.floor(Date.now() / 1000);\n if (project.status !== \"running\" || (project.expires_at && project.expires_at <= now)) {\n await db.logWebhook(projectId, tokenHash, \"dropped\", JSON.stringify(body), 200);\n return new Response(\"ok (project not running)\", { status: 200 });\n }\n\n await db.logWebhook(projectId, tokenHash, \"in\", JSON.stringify(body), 200);\n\n // Execute the hosted bot's Python code via webhook simulation\n // Since we can't run Python on Val Town, we forward via the bot's token\n const msg = body?.message;\n if (msg && project.bot_token) {\n const chatId = msg.chat.id;\n const text: string = msg.text || \"\";\n\n // Load the main file to check for command handlers\n const mainFile = project.main_file ? await db.getFile(project.id, project.main_file) : null;\n const allFiles = await db.listFiles(project.id);\n\n // Smart command routing based on Python code analysis\n if (mainFile?.content) {\n const response = await executeBotLogic(project, mainFile.content, allFiles, msg);\n if (response) {\n await tg.sendMessage(project.bot_token, chatId, response);\n return new Response(\"ok\", { status: 200 });\n }\n }\n\n // Default handler for basic commands\n if (text === \"/start\" || text === \"/help\" || text === \"/ping\") {\n const username = project.bot_username ? \"@\" + project.bot_username : \"this bot\";\n await tg.sendMessage(\n project.bot_token,\n chatId,\n `🤖 ${username} is hosted by ScottHub.\\n\\n` +\n `Owner project: ${project.name}\\n` +\n `Status: running\\n` +\n `Files: ${allFiles.length}\\n\\n` +\n `This bot is running via ScottHub webhook router.`,\n );\n }\n }\n\n // Handle callback queries\n const callback = body?.callback_query;\n if (callback && project.bot_token) {\n await tg.answerCallback(project.bot_token, callback.id, \"Handled by ScottHub\");\n }\n\n return new Response(\"ok\", { status: 200 });\n}\n\n/**\n * Analyze Python code and try to simulate basic bot responses.\n * This parses command handlers from the Python source and generates responses.\n */\nasync function executeBotLogic(\n project: db.ProjectRow,\n mainCode: string,\n allFiles: db.FileRow[],\n msg: any,\n): Promise {\n const text: string = msg.text || \"\";\n const command = text.split(/\\s+/)[0]?.toLowerCase();\n\n // Extract command handlers from Python code\n // Pattern: @bot.message_handler(commands=['xyz']) or @dp.message_handler(commands=['xyz'])\n // or @app.on_message(filters.command(\"xyz\"))\n const handlers = extractCommandHandlers(mainCode);\n\n // Check all files for handler definitions\n for (const file of allFiles) {\n if (file.path.endsWith(\".py\") && !file.is_main) {\n handlers.push(...extractCommandHandlers(file.content));\n }\n }\n\n // Find matching handler and extract reply text\n for (const h of handlers) {\n if (command === \"/\" + h.command || command === h.command) {\n if (h.replyText) return h.replyText;\n }\n }\n\n return null;\n}\n\ninterface CommandHandler {\n command: string;\n replyText: string | null;\n}\n\nfunction extractCommandHandlers(code: string): CommandHandler[] {\n const handlers: CommandHandler[] = [];\n\n // Match common patterns:\n // @bot.message_handler(commands=['start'])\n // @dp.message(Command(\"start\"))\n // @app.on_message(filters.command(\"start\"))\n const patterns = [\n /commands?\\s*=\\s*\\[['\"](\\w+)['\"]/g,\n /Command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n /filters\\.command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n ];\n\n for (const pattern of patterns) {\n let match;\n while ((match = pattern.exec(code)) !== null) {\n const cmd = match[1];\n // Try to find the reply text near this handler\n const idx = match.index;\n const nearby = code.slice(idx, idx + 500);\n const replyMatch = nearby.match(/(?:reply|send_message|answer)\\s*\\(\\s*[\"']([^\"']+)[\"']/);\n handlers.push({\n command: cmd,\n replyText: replyMatch ? replyMatch[1] : null,\n });\n }\n }\n\n return handlers;\n}\n",[],[280,298],"50a1c84a-3f23-11f1-825c-42b51c65c3df","actions.ts","50a1c926-3f23-11f1-825c-42b51c65c3df",12,["D",1776955633421],"// Upload, file management, stop/restart, start-hosting\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { analyzePythonFile } from \"../lib/parser.ts\";\nimport { esc, fmtDuration, getBaseUrl, projectWebhookUrl, HOST_DURATION_SECONDS } from \"../lib/utils.ts\";\nimport { canHost, claimHostSlot, isAdmin } from \"./access.ts\";\nimport { showHost, showManage } from \"./screens.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\n/** Handle a Telegram document upload */\nexport async function handleDocument(\n chatId: number,\n userId: number,\n doc: { file_id: string; file_name: string; file_size: number; mime_type?: string },\n) {\n if (doc.file_size > 2_000_000) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ File too large (max 2MB per file).\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const name = (doc.file_name || \"file.txt\").replace(/[^\\w.\\-\\/]/g, \"_\");\n\n // Fetch file content\n const info = await tg.getFile(BOT_TOKEN, doc.file_id);\n if (!info?.file_path) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Could not fetch file from Telegram.\");\n return;\n }\n const content = await tg.downloadFile(BOT_TOKEN, info.file_path);\n\n const user = await db.getUser(userId);\n if (!user) return;\n\n const state = user.state || \"idle\";\n const isPy = name.endsWith(\".py\");\n const subPath = (JSON.parse(user.state_data || \"{}\") as any).subPath as string | undefined;\n\n // If state is \"awaiting_sub_upload\" → user specified a path earlier\n if (state === \"awaiting_sub_upload\" && subPath) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No active project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.addFile(project.id, subPath, content, false);\n\n // Smart parse sub file for imports too\n if (subPath.endsWith(\".py\")) {\n const a = analyzePythonFile(content);\n if (a.imports.pip.length) {\n const existing = JSON.parse(project.detected_imports || \"[]\") as string[];\n const merged = [...new Set([...existing, ...a.imports.pip])];\n await db.updateProject(project.id, { detected_imports: JSON.stringify(merged) });\n }\n }\n\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `✅ Added ${esc(subPath)} to project ${esc(project.name)}.`,\n { reply_markup: tg.MANAGE_KEYBOARD },\n );\n await db.setUserState(userId, \"manage\");\n return;\n }\n\n // Otherwise: main upload flow\n const allowed = await canHost(userId);\n if (!allowed.allowed) {\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `🔒 Cannot host yet.\\nReferrals: ${allowed.have}/${allowed.need}\\n\\nUse 👥 Referral to invite friends.`,\n { reply_markup: tg.MAIN_KEYBOARD },\n );\n return;\n }\n\n // Get or create project\n let project = await db.getProjectByOwner(userId);\n const now = Math.floor(Date.now() / 1000);\n const isExpired = project && project.expires_at && project.expires_at <= now;\n\n if (!project || isExpired) {\n const claim = await claimHostSlot(userId);\n if (!claim.ok) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ \" + claim.reason, { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n if (isExpired && project) {\n await db.updateProject(project.id, {\n expires_at: claim.expiresAt,\n started_at: now,\n stopped_at: null,\n status: \"running\",\n });\n project = await db.getProjectByOwner(userId);\n } else {\n project = await db.createProject(userId, name.replace(/\\.py$/, \"\"));\n await db.updateProject(project.id, {\n expires_at: claim.expiresAt,\n started_at: now,\n status: \"running\",\n });\n project = await db.getProjectByOwner(userId);\n }\n }\n\n if (!project) return;\n\n // Store the file\n const existingFiles = await db.listFiles(project.id);\n const makeMain = isPy && (existingFiles.length === 0 || !project.main_file);\n await db.addFile(project.id, name, content, makeMain);\n if (makeMain) {\n await db.setMainFile(project.id, name);\n }\n\n // Smart-parse if python\n let analysisText = \"\";\n if (isPy) {\n const a = analyzePythonFile(content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n\n // If we got a bot token, set up webhook automatically\n if (a.botToken) {\n const me = await tg.getMe(a.botToken);\n if (me.ok) {\n await db.updateProject(project.id, { bot_username: me.result.username });\n }\n // Auto set webhook for the hosted bot\n try {\n const base = await getBaseUrl();\n const whUrl = projectWebhookUrl(base, project.id, project.webhook_secret || \"\");\n await db.updateProject(project.id, { webhook_url: whUrl });\n const whResult = await tg.setWebhook(a.botToken, whUrl);\n if (whResult.ok) {\n analysisText += \"\\n🔌 Webhook auto-configured! ✅\";\n }\n } catch (e) {\n console.error(\"Auto webhook error:\", e);\n }\n }\n\n analysisText +=\n `\\n\\n🧠 Smart analysis\\n` +\n `• Bot token: ${a.botToken ? \"✅ detected\" : \"❌ not found\"}\\n` +\n `• Admin id: ${a.adminId ? `✅ ${esc(a.adminId)}` : \"❌ not found\"}\\n` +\n `• Imports detected: ${a.imports.imports.length}\\n` +\n (a.imports.pip.length ? `• Auto-install: ${esc(a.imports.pip.join(\" \"))}\\n` : \"\") +\n `• Lines: ${a.lines}`;\n }\n\n const updated = await db.getProjectById(project.id);\n const remaining = updated?.expires_at ? updated.expires_at - now : 0;\n\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `✅ File uploaded\\n\\n` +\n `📄 ${esc(name)} (${content.length} bytes)\\n` +\n (makeMain ? `⭐ Marked as main file\\n` : \"\") +\n `⏱ Hosting time: ${fmtDuration(remaining)}` +\n analysisText,\n { reply_markup: tg.HOST_KEYBOARD },\n );\n await db.setUserState(userId, \"host\");\n}\n\nexport async function handleStop(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No project to stop.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n await db.updateProject(project.id, {\n status: \"stopped\",\n stopped_at: Math.floor(Date.now() / 1000),\n });\n // Remove webhook from hosted bot\n if (project.bot_token) {\n try { await tg.deleteWebhook(project.bot_token); } catch {}\n }\n await tg.sendMessage(BOT_TOKEN, chatId, \"⏹ Bot stopped.\\nWebhook removed. Press 🔄 Restart to resume.\", {\n reply_markup: tg.HOST_KEYBOARD,\n });\n}\n\nexport async function handleRestart(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No project to restart.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const now = Math.floor(Date.now() / 1000);\n if (project.expires_at && project.expires_at <= now) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Your host time has expired. Invite 2 users and upload again.\", {\n reply_markup: tg.MAIN_KEYBOARD,\n });\n return;\n }\n await db.updateProject(project.id, { status: \"running\", stopped_at: null });\n // Re-set webhook\n if (project.bot_token && project.webhook_secret) {\n try {\n const base = await getBaseUrl();\n const whUrl = projectWebhookUrl(base, project.id, project.webhook_secret);\n await tg.setWebhook(project.bot_token, whUrl);\n } catch {}\n }\n await tg.sendMessage(BOT_TOKEN, chatId, \"🔄 Bot restarted.\\nWebhook routing resumed.\", {\n reply_markup: tg.HOST_KEYBOARD,\n });\n}\n\nexport async function promptAddFile(chatId: number, userId: number) {\n await db.setUserState(userId, \"awaiting_sub_path\");\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n \"📝 Send the relative path for your new file (e.g. plugins/helper.py or config.py).\\n\\nAfter that, send the file as a document.\\n\\nType /cancel to abort.\",\n { reply_markup: tg.BACK_KEYBOARD },\n );\n}\n\nexport async function handleSubPath(chatId: number, userId: number, text: string) {\n const clean = text.trim().replace(/^\\/+/, \"\").replace(/\\.\\./g, \"\");\n if (!clean || clean.length > 120 || !/^[\\w.\\-\\/]+$/.test(clean)) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid path. Use letters, digits, _, -, . and / only.\", {\n reply_markup: tg.BACK_KEYBOARD,\n });\n return;\n }\n await db.setUserState(userId, \"awaiting_sub_upload\", { subPath: clean });\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `📂 Path set to ${esc(clean)}\\n\\nNow send the file as a document.`,\n { reply_markup: tg.BACK_KEYBOARD },\n );\n}\n\nexport async function handleDeleteFilePrompt(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n if (!files.length) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No files to delete.\", { reply_markup: tg.MANAGE_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_delete_path\");\n const list = files.map((f) => `• ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `🗑 Send the path to delete:\\n\\n${list}\\n\\n/cancel to abort.`, {\n reply_markup: tg.BACK_KEYBOARD,\n });\n}\n\nexport async function handleDeletePath(chatId: number, userId: number, text: string) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such file.\", { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n if (file.is_main) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Can't delete the main file. Set a different main first.\", {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n await db.setUserState(userId, \"manage\");\n return;\n }\n await db.deleteFile(project.id, clean);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Deleted ${esc(clean)}`, {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleSetMainPrompt(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n const pyFiles = files.filter((f) => f.path.endsWith(\".py\"));\n if (!pyFiles.length) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No .py files yet.\", { reply_markup: tg.MANAGE_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_main_path\");\n const list = pyFiles.map((f) => `${f.is_main ? \"⭐\" : \" \"} ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Send path of file to mark as main:\\n\\n${list}`, {\n reply_markup: tg.BACK_KEYBOARD,\n });\n}\n\nexport async function handleSetMainPath(chatId: number, userId: number, text: string) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file || !clean.endsWith(\".py\")) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such .py file.\", { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n await db.setMainFile(project.id, clean);\n const analysis = analyzePythonFile(file.content);\n const patch: any = { detected_imports: JSON.stringify(analysis.imports.pip) };\n if (analysis.botToken) patch.bot_token = analysis.botToken;\n if (analysis.adminId) patch.admin_id = analysis.adminId;\n await db.updateProject(project.id, patch);\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Main file set to ${esc(clean)}`, {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleListFiles(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No project.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const files = await db.listFiles(project.id);\n if (!files.length) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No files.\", { reply_markup: tg.MANAGE_KEYBOARD });\n return;\n }\n const list = files\n .map((f) => `${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)} — ${f.size}b`)\n .join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `📁 Files in ${esc(project.name)}\\n\\n${list}`, {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n}\n\nexport async function promptUpload(chatId: number, userId: number) {\n const allowed = await canHost(userId);\n if (!allowed.allowed) {\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `🔒 Locked\\n\\nYou need ${allowed.need} referrals to unlock a free hosting slot.\\nYou have: ${allowed.have}/${allowed.need}\\n\\nTap 👥 Referral to get your link.`,\n { reply_markup: tg.MAIN_KEYBOARD },\n );\n return;\n }\n await db.setUserState(userId, \"awaiting_upload\");\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `⬆️ Upload your bot\\n\\nSend your Python bot file (.py) as a document.\\n\\nScottHub will auto-detect:\\n• bot token\\n• admin id\\n• all imports / pip packages\\n\\n/cancel to abort.`,\n { reply_markup: tg.BACK_KEYBOARD },\n );\n}\n",[],[280,306],"15877bec-3f23-11f1-96ce-42b51c65c3df","access.ts","15877cd2-3f23-11f1-96ce-42b51c65c3df",10,["D",1776955534253],"// Access / gating: channel join + referral gate\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { HOST_DURATION_SECONDS, REFERRALS_REQUIRED } from \"../lib/utils.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\nconst CHANNEL = \"@ScottHubs\";\nconst ADMIN_ID = 6511143869;\n\nexport function isAdmin(tgId: number): boolean {\n return tgId === ADMIN_ID;\n}\n\nexport async function ensureChannelJoined(chatId: number, userId: number): Promise {\n if (isAdmin(userId)) {\n await db.markJoined(userId, true);\n return true;\n }\n const r = await tg.checkChannelMember(BOT_TOKEN, CHANNEL, userId);\n if (r.ok && r.isMember) {\n await db.markJoined(userId, true);\n return true;\n }\n await db.markJoined(userId, false);\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `🔒 Join Required\\n\\nTo use ScottHub you must join our channel:\\n👉 https://t.me/ScottHubs\\n\\nAfter joining, press /start again.`,\n { reply_markup: tg.REMOVE_KEYBOARD },\n );\n return false;\n}\n\nexport async function canHost(userId: number): Promise<\n { allowed: true; reason: \"admin\" | \"referrals\" | \"active\" } | { allowed: false; need: number; have: number }\n> {\n if (isAdmin(userId)) return { allowed: true, reason: \"admin\" };\n const user = await db.getUser(userId);\n if (!user) return { allowed: false, need: REFERRALS_REQUIRED, have: 0 };\n\n const project = await db.getProjectByOwner(userId);\n const now = Math.floor(Date.now() / 1000);\n if (project && project.expires_at && project.expires_at > now) {\n return { allowed: true, reason: \"active\" };\n }\n\n if (user.referral_count >= REFERRALS_REQUIRED) {\n return { allowed: true, reason: \"referrals\" };\n }\n return { allowed: false, need: REFERRALS_REQUIRED, have: user.referral_count };\n}\n\nexport async function claimHostSlot(userId: number): Promise<\n { ok: true; expiresAt: number } | { ok: false; reason: string }\n> {\n if (isAdmin(userId)) {\n return { ok: true, expiresAt: Math.floor(Date.now() / 1000) + HOST_DURATION_SECONDS };\n }\n const user = await db.getUser(userId);\n if (!user) return { ok: false, reason: \"User not found\" };\n if (user.referral_count < REFERRALS_REQUIRED) {\n return { ok: false, reason: `Need ${REFERRALS_REQUIRED} referrals (you have ${user.referral_count})` };\n }\n await db.consumeReferrals(userId, REFERRALS_REQUIRED);\n return { ok: true, expiresAt: Math.floor(Date.now() / 1000) + HOST_DURATION_SECONDS };\n}\n",[],[280,314],"d06951b6-3f22-11f1-afe3-42b51c65c3df",3,["D",1776955418310],[206,207,208,209,210,211],[280],"d8f094d4-3f22-11f1-9590-42b51c65c3df","schema.ts","d8f0957e-3f22-11f1-9590-42b51c65c3df","cfd05f88-3f22-11f1-9590-42b51c65c3df",5,["D",1776955432607],"// Database schema + migrations for ScottHub\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runMigrations() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n tg_id INTEGER PRIMARY KEY,\n username TEXT,\n first_name TEXT,\n referral_code TEXT UNIQUE,\n referred_by INTEGER,\n referral_count INTEGER DEFAULT 0,\n state TEXT DEFAULT 'idle',\n state_data TEXT,\n joined_channel INTEGER DEFAULT 0,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n updated_at INTEGER DEFAULT (strftime('%s','now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS projects (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n owner_id INTEGER NOT NULL,\n name TEXT NOT NULL,\n main_file TEXT,\n bot_token TEXT,\n bot_username TEXT,\n admin_id TEXT,\n detected_imports TEXT,\n status TEXT DEFAULT 'stopped',\n webhook_secret TEXT,\n webhook_url TEXT,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n started_at INTEGER,\n expires_at INTEGER,\n stopped_at INTEGER,\n last_update_at INTEGER,\n message_count INTEGER DEFAULT 0\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS files (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER NOT NULL,\n path TEXT NOT NULL,\n content TEXT NOT NULL,\n size INTEGER DEFAULT 0,\n is_main INTEGER DEFAULT 0,\n uploaded_at INTEGER DEFAULT (strftime('%s','now')),\n UNIQUE(project_id, path)\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS referrals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n referrer_id INTEGER NOT NULL,\n invited_id INTEGER NOT NULL UNIQUE,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS webhook_events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER,\n bot_token_hash TEXT,\n direction TEXT,\n payload TEXT,\n status_code INTEGER,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS panel_sessions (\n token TEXT PRIMARY KEY,\n username TEXT NOT NULL,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n expires_at INTEGER NOT NULL\n )\n `);\n\n // Indexes\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_projects_owner ON projects(owner_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_files_project ON files(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_referrals_ref ON referrals(referrer_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_webhook_project ON webhook_events(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_users_refcode ON users(referral_code)`);\n\n // Add webhook_url column if missing (migration)\n try {\n await sqlite.execute(`ALTER TABLE projects ADD COLUMN webhook_url TEXT`);\n } catch { /* already exists */ }\n}\n",[],[335,327],"database","ec081948-3f22-11f1-825c-42b51c65c3df","queries.ts","ec0819de-3f22-11f1-825c-42b51c65c3df",6,["D",1776955464643],"// All DB queries for ScottHub\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type UserRow = {\n tg_id: number;\n username: string | null;\n first_name: string | null;\n referral_code: string;\n referred_by: number | null;\n referral_count: number;\n state: string;\n state_data: string | null;\n joined_channel: number;\n};\n\nexport type ProjectRow = {\n id: number;\n owner_id: number;\n name: string;\n main_file: string | null;\n bot_token: string | null;\n bot_username: string | null;\n admin_id: string | null;\n detected_imports: string | null;\n status: string;\n webhook_secret: string | null;\n webhook_url: string | null;\n created_at: number;\n started_at: number | null;\n expires_at: number | null;\n stopped_at: number | null;\n last_update_at: number | null;\n message_count: number;\n};\n\nexport type FileRow = {\n id: number;\n project_id: number;\n path: string;\n content: string;\n size: number;\n is_main: number;\n uploaded_at: number;\n};\n\nfunction genCode(prefix: string, len = 8): string {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let s = \"\";\n for (let i = 0; i < len; i++) s += chars[Math.floor(Math.random() * chars.length)];\n return prefix + s;\n}\n\n// ---- USERS ----\nexport async function getOrCreateUser(\n tgId: number,\n username: string | null,\n firstName: string | null,\n referredBy: number | null = null,\n): Promise<{ user: UserRow; created: boolean }> {\n const existing = await sqlite.execute({\n sql: \"SELECT * FROM users WHERE tg_id = ?\",\n args: [tgId],\n });\n if (existing.rows.length > 0) {\n await sqlite.execute({\n sql: \"UPDATE users SET username=?, first_name=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [username, firstName, tgId],\n });\n return { user: existing.rows[0] as unknown as UserRow, created: false };\n }\n let code = genCode(\"R\");\n for (let attempts = 0; attempts < 5; attempts++) {\n const check = await sqlite.execute({ sql: \"SELECT 1 FROM users WHERE referral_code=?\", args: [code] });\n if (check.rows.length === 0) break;\n code = genCode(\"R\");\n }\n await sqlite.execute({\n sql: \"INSERT INTO users (tg_id, username, first_name, referral_code, referred_by) VALUES (?, ?, ?, ?, ?)\",\n args: [tgId, username, firstName, code, referredBy],\n });\n const fresh = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return { user: fresh.rows[0] as unknown as UserRow, created: true };\n}\n\nexport async function getUser(tgId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\n\nexport async function getUserByRefCode(code: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE referral_code=?\", args: [code] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\n\nexport async function setUserState(tgId: number, state: string, data: Record | null = null) {\n await sqlite.execute({\n sql: \"UPDATE users SET state=?, state_data=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [state, data ? JSON.stringify(data) : null, tgId],\n });\n}\n\nexport async function markJoined(tgId: number, joined: boolean) {\n await sqlite.execute({\n sql: \"UPDATE users SET joined_channel=? WHERE tg_id=?\",\n args: [joined ? 1 : 0, tgId],\n });\n}\n\nexport async function addReferral(referrerId: number, invitedId: number): Promise {\n try {\n await sqlite.execute({\n sql: \"INSERT INTO referrals (referrer_id, invited_id) VALUES (?, ?)\",\n args: [referrerId, invitedId],\n });\n await sqlite.execute({\n sql: \"UPDATE users SET referral_count = referral_count + 1 WHERE tg_id=?\",\n args: [referrerId],\n });\n return true;\n } catch {\n return false;\n }\n}\n\n// ---- PROJECTS ----\nexport async function getProjectByOwner(ownerId: number): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM projects WHERE owner_id=? ORDER BY id DESC LIMIT 1\",\n args: [ownerId],\n });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\n\nexport async function getProjectById(id: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE id=?\", args: [id] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\n\nexport async function getProjectByToken(token: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE bot_token=?\", args: [token] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\n\nexport async function createProject(ownerId: number, name: string): Promise {\n const secret = genCode(\"W\", 16);\n const r = await sqlite.execute({\n sql: \"INSERT INTO projects (owner_id, name, webhook_secret) VALUES (?, ?, ?) RETURNING *\",\n args: [ownerId, name, secret],\n });\n return r.rows[0] as unknown as ProjectRow;\n}\n\nexport async function updateProject(id: number, patch: Partial) {\n const keys = Object.keys(patch);\n if (keys.length === 0) return;\n const sets = keys.map((k) => `${k}=?`).join(\", \");\n const args = keys.map((k) => (patch as any)[k]);\n args.push(id);\n await sqlite.execute({ sql: `UPDATE projects SET ${sets} WHERE id=?`, args });\n}\n\nexport async function listAllProjects(): Promise {\n const r = await sqlite.execute(\"SELECT * FROM projects ORDER BY id DESC\");\n return r.rows as unknown as ProjectRow[];\n}\n\nexport async function listRunningProjects(): Promise {\n const now = Math.floor(Date.now() / 1000);\n const r = await sqlite.execute({\n sql: \"SELECT * FROM projects WHERE status='running' AND (expires_at IS NULL OR expires_at > ?)\",\n args: [now],\n });\n return r.rows as unknown as ProjectRow[];\n}\n\n// ---- FILES ----\nexport async function addFile(\n projectId: number,\n path: string,\n content: string,\n isMain = false,\n): Promise {\n await sqlite.execute({\n sql: `INSERT INTO files (project_id, path, content, size, is_main) VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(project_id, path) DO UPDATE SET content=excluded.content, size=excluded.size, uploaded_at=strftime('%s','now')`,\n args: [projectId, path, content, content.length, isMain ? 1 : 0],\n });\n const r = await sqlite.execute({\n sql: \"SELECT * FROM files WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n return r.rows[0] as unknown as FileRow;\n}\n\nexport async function listFiles(projectId: number): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM files WHERE project_id=? ORDER BY is_main DESC, path ASC\",\n args: [projectId],\n });\n return r.rows as unknown as FileRow[];\n}\n\nexport async function getFile(projectId: number, path: string): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM files WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n return r.rows.length ? (r.rows[0] as unknown as FileRow) : null;\n}\n\nexport async function deleteFile(projectId: number, path: string) {\n await sqlite.execute({\n sql: \"DELETE FROM files WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n}\n\nexport async function setMainFile(projectId: number, path: string) {\n await sqlite.execute({\n sql: \"UPDATE files SET is_main=0 WHERE project_id=?\",\n args: [projectId],\n });\n await sqlite.execute({\n sql: \"UPDATE files SET is_main=1 WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n await sqlite.execute({\n sql: \"UPDATE projects SET main_file=? WHERE id=?\",\n args: [path, projectId],\n });\n}\n\n// ---- WEBHOOK LOG ----\nexport async function logWebhook(projectId: number | null, hash: string, direction: string, payload: string, status: number) {\n await sqlite.execute({\n sql: \"INSERT INTO webhook_events (project_id, bot_token_hash, direction, payload, status_code) VALUES (?, ?, ?, ?, ?)\",\n args: [projectId, hash, direction, payload.slice(0, 4000), status],\n });\n if (projectId) {\n await sqlite.execute({\n sql: \"UPDATE projects SET message_count = message_count + 1, last_update_at = strftime('%s','now') WHERE id=?\",\n args: [projectId],\n });\n }\n}\n\nexport async function recentWebhookEvents(limit = 50) {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM webhook_events ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return r.rows;\n}\n\n// ---- STATS ----\nexport async function globalStats() {\n const u = await sqlite.execute(\"SELECT COUNT(*) as c FROM users\");\n const p = await sqlite.execute(\"SELECT COUNT(*) as c FROM projects\");\n const r = await sqlite.execute(\"SELECT COUNT(*) as c FROM projects WHERE status='running'\");\n const f = await sqlite.execute(\"SELECT COUNT(*) as c FROM files\");\n const m = await sqlite.execute(\"SELECT COUNT(*) as c FROM webhook_events\");\n const num = (x: any) => Number(x.rows[0]?.c ?? 0);\n return { users: num(u), projects: num(p), running: num(r), files: num(f), messages: num(m) };\n}\n\n// ---- PANEL SESSIONS ----\nexport async function createSession(username: string): Promise {\n const token = genCode(\"S\", 32) + Date.now().toString(36);\n const expires = Math.floor(Date.now() / 1000) + 60 * 60 * 24 * 7;\n await sqlite.execute({\n sql: \"INSERT INTO panel_sessions (token, username, expires_at) VALUES (?, ?, ?)\",\n args: [token, username, expires],\n });\n return token;\n}\n\nexport async function validateSession(token: string): Promise {\n const now = Math.floor(Date.now() / 1000);\n const r = await sqlite.execute({\n sql: \"SELECT 1 FROM panel_sessions WHERE token=? AND expires_at > ?\",\n args: [token, now],\n });\n return r.rows.length > 0;\n}\n\nexport async function deleteSession(token: string) {\n await sqlite.execute({ sql: \"DELETE FROM panel_sessions WHERE token=?\", args: [token] });\n}\n\nexport async function consumeReferrals(userId: number, amount: number) {\n await sqlite.execute({\n sql: \"UPDATE users SET referral_count = referral_count - ? WHERE tg_id=?\",\n args: [amount, userId],\n });\n}\n",[],[335,337],"cfd05ec0-3f22-11f1-9590-42b51c65c3df",["D",1776955417306],[203,204],[335],["D",1776955412887],["D",1789506649022],{"_11":12,"_146":73},{"_11":12,"_142":-5,"_72":73,"_31":71,"_143":144,"_145":30},{"_41":133,"_13":16,"_35":38,"_134":95,"_135":-5,"_136":-5,"_137":-5,"_138":-5,"_139":-5,"_140":14,"_141":12},"ctx",{"_55":-5,"_165":386,"_387":388,"_389":390,"_391":30,"_392":30,"_393":30,"_394":24,"_395":-5,"_396":-7,"_397":-7,"_398":26,"_399":30,"_400":30,"_401":-5,"_402":30,"_403":30,"_404":30,"_405":-5},"ENV",{"_357":358,"_359":360,"_361":16,"_362":363,"_364":365,"_366":367,"_368":369,"_370":371,"_372":373,"_374":375,"_376":377,"_378":379,"_380":381,"_382":383,"_384":385},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · lib