🤖

ScottHub

Telegram Bot Hosting · Admin Panel

\n \n

\n ${body}\n

\n\n`;\n}\n\nfunction loginPage(err = \"\"): string {\n return `\n\nLogin · ScottHub\n\n\n`;\n}\n\nasync function getSessionToken(req: Request): Promise {\n const c = req.headers.get(\"cookie\") || \"\";\n const m = c.match(/scotthub_sess=([^;]+)/);\n return m ? decodeURIComponent(m[1]) : null;\n}\n\nasync function requireAuth(req: Request): Promise {\n const tok = await getSessionToken(req);\n if (!tok) return false;\n return db.validateSession(tok);\n}\n\nfunction redirectTo(url: string): Response {\n return new Response(null, { status: 302, headers: { Location: url } });\n}\n\nfunction statCard(label: string, value: number | string, icon: string): string {\n return `

${icon}

${value}

${label}

`;\n}\n\nfunction statusBadge(s: string): string {\n const cls: Record = {\n running: \"bg-emerald-500/20 text-emerald-300 border-emerald-500/40\",\n stopped: \"bg-slate-600/20 text-slate-300 border-slate-600/40\",\n expired: \"bg-rose-500/20 text-rose-300 border-rose-500/40\",\n };\n return `${esc(s)}`;\n}\n\nexport async function handlePanel(req: Request, url: URL): Promise {\n const path = url.pathname;\n const baseUrl = await getBaseUrl();\n\n // Login\n if (path === \"/panel/login\") {\n if (req.method === \"GET\") return new Response(loginPage(), { headers: { \"content-type\": \"text/html\" } });\n if (req.method === \"POST\") {\n const form = await req.formData();\n const u = form.get(\"username\");\n const p = form.get(\"password\");\n if (u === PANEL_USER && p === PANEL_PASS) {\n const token = await db.createSession(String(u));\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/panel\",\n \"set-cookie\": `scotthub_sess=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`,\n },\n });\n }\n return new Response(loginPage(\"Invalid credentials\"), { headers: { \"content-type\": \"text/html\" }, status: 401 });\n }\n }\n\n if (path === \"/panel/logout\") {\n const tok = await getSessionToken(req);\n if (tok) await db.deleteSession(tok);\n return new Response(null, {\n status: 302,\n headers: { Location: \"/panel/login\", \"set-cookie\": \"scotthub_sess=; Path=/; Max-Age=0\" },\n });\n }\n\n // Auth gate\n if (!(await requireAuth(req))) {\n return redirectTo(\"/panel/login\");\n }\n\n // Dashboard\n if (path === \"/panel\" || path === \"/panel/\") {\n const stats = await db.globalStats();\n const projects = await db.listAllProjects();\n const running = projects.filter((p) => p.status === \"running\").length;\n const body = `\n

\n ${statCard(\"Users\", stats.users, \"👤\")}\n ${statCard(\"Projects\", stats.projects, \"📦\")}\n ${statCard(\"Running\", running, \"🟢\")}\n ${statCard(\"Messages\", stats.messages, \"✉️\")}\n

Recent projects

\n \n \n \n \n \n ${projects.slice(0, 20).map((p) => `\n \n \n \n \n \n \n \n \n `).join(\"\")}\n \n

ID	Name	Owner	Bot	Status	Expires
#${p.id}	`${esc(p.name)}`	${p.owner_id}	${p.bot_username ? \"@\" + esc(p.bot_username) : \"—\"}	${statusBadge(p.status)}	${fmtDate(p.expires_at)}	Manage →

`;\n return new Response(layout(\"Dashboard\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Projects list\n if (path === \"/panel/projects\") {\n const projects = await db.listAllProjects();\n const body = `\n

All projects

\n ${projects.length === 0 ? \"

No projects yet.

\" : projects.map((p) => `\n \n

${esc(p.name)} #${p.id}

owner ${p.owner_id} · ${p.bot_username ? \"@\" + esc(p.bot_username) : \"no bot detected\"}

\n ${statusBadge(p.status)}\n

${fmtDate(p.expires_at)}

\n `).join(\"\")}\n

`;\n return new Response(layout(\"Projects\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Project detail + webhook controls\n const projMatch = path.match(/^\\/panel\\/projects\\/(\\d+)$/);\n if (projMatch) {\n const id = Number(projMatch[1]);\n const project = await db.getProjectById(id);\n if (!project) return new Response(\"Not found\", { status: 404 });\n const files = await db.listFiles(id);\n const whUrl = project.webhook_secret ? projectWebhookUrl(baseUrl, id, project.webhook_secret) : \"\";\n\n // Handle actions\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"setwebhook\" && project.bot_token) {\n const r = await tg.setWebhook(project.bot_token, whUrl);\n await db.updateProject(id, { webhook_url: whUrl, status: \"running\" });\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook set ✅ Bot is ONLINE!\" : \"Error: \" + r.description)}`);\n }\n if (action === \"delwebhook\" && project.bot_token) {\n const r = await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook removed\" : \"Error: \" + r.description)}`);\n }\n if (action === \"toggle\") {\n const newStatus = project.status === \"running\" ? \"stopped\" : \"running\";\n await db.updateProject(id, { status: newStatus, stopped_at: newStatus === \"stopped\" ? Math.floor(Date.now() / 1000) : null });\n if (newStatus === \"running\" && project.bot_token) {\n await tg.setWebhook(project.bot_token, whUrl);\n } else if (newStatus === \"stopped\" && project.bot_token) {\n await tg.deleteWebhook(project.bot_token);\n }\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Status → \" + newStatus)}`);\n }\n if (action === \"extend\") {\n const days = Number(form.get(\"days\") || \"2\");\n const base2 = project.expires_at && project.expires_at > Math.floor(Date.now() / 1000) ? project.expires_at : Math.floor(Date.now() / 1000);\n await db.updateProject(id, { expires_at: base2 + days * 86400, status: \"running\" });\n if (project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Extended by \" + days + \"d\")}`);\n }\n if (action === \"settoken\") {\n const t = String(form.get(\"token\") || \"\").trim();\n if (t) {\n const me = await tg.getMe(t);\n await db.updateProject(id, { bot_token: t, bot_username: me.ok ? me.result.username : null });\n }\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Token updated\")}`);\n }\n }\n\n // Webhook info\n let whInfo = \"\";\n if (project.bot_token) {\n const info = await tg.getWebhookInfo(project.bot_token);\n if (info.ok) {\n whInfo = `

${esc(JSON.stringify(info.result, null, 2))}

`;\n } else {\n whInfo = `

Error: ${esc(info.description || \"\")}

`;\n }\n }\n\n const msg = url.searchParams.get(\"msg\");\n const now = Math.floor(Date.now() / 1000);\n const remaining = project.expires_at ? project.expires_at - now : 0;\n\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n← all projects\n

${esc(project.name)} #${project.id}

Owner: ${project.owner_id} · Created ${fmtDate(project.created_at)}

\n\n

Bot Info

Status: ${statusBadge(project.status)}

Bot: ${project.bot_username ? \"@\" + esc(project.bot_username) : \"not set\"}

Token: ${project.bot_token ? esc(project.bot_token.slice(0, 10)) + \"…\" : \"not set\"}

Admin id: ${esc(project.admin_id || \"—\")}

Main file: ${esc(project.main_file || \"—\")}

Messages: ${project.message_count}

Expires: ${project.expires_at ? `${fmtDate(project.expires_at)} (${fmtDuration(Math.max(0, remaining))})` : \"—\"}

\n\n

Webhook Router URL

\n ${esc(whUrl)}\n \n

\n\n

Manual Controls

\n \n \n

\n\n

Telegram Webhook Info

\n ${whInfo || \"

No bot token set.

\"}\n

\n\n

Detected Imports (pip)

\n ${esc(project.detected_imports || \"—\")}\n

\n\n

Files (${files.length})

\n ${files.map((f) => `

${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)}

${f.size}b · ${fmtDate(f.uploaded_at)}

`).join(\"\") || \"

No files.

\"}\n

`;\n return new Response(layout(project.name, body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Events log\n if (path === \"/panel/events\") {\n const events = await db.recentWebhookEvents(100) as any[];\n const body = `\n

Recent webhook events (${events.length})

\n \n \n \n \n \n ${events.map((e: any) => `\n \n \n \n \n \n `).join(\"\") || \"\"}\n \n

Time	Project	Dir	Status	Payload
${fmtDate(e.created_at)}	#${e.project_id ?? \"—\"}	${esc(e.direction)}	${e.status_code}	`${esc(String(e.payload \|\| \"\").slice(0, 200))}`
No events yet.

`;\n return new Response(layout(\"Events\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Main bot webhook management\n if (path === \"/panel/main-webhook\") {\n const endpoint = `${baseUrl}/bot`;\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"set\") {\n const r = await tg.setWebhook(BOT_TOKEN, endpoint);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Main bot webhook set ✅\" : \"Error: \" + (r.description || \"\"))}`);\n }\n if (action === \"delete\") {\n const r = await tg.deleteWebhook(BOT_TOKEN);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Webhook deleted\" : \"Error: \" + (r.description || \"\"))}`);\n }\n }\n const info = await tg.getWebhookInfo(BOT_TOKEN);\n const me = await tg.getMe(BOT_TOKEN);\n const msg = url.searchParams.get(\"msg\");\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n

Main ScottHub Bot

Bot: ${me.ok ? `@${esc(me.result.username)} (${esc(me.result.first_name)})` : \"token invalid\"}

Webhook endpoint: ${esc(endpoint)}

\n \n

Telegram getWebhookInfo

${esc(JSON.stringify(info, null, 2))}

`;\n return new Response(layout(\"Main Webhook\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n return new Response(\"Panel page not found\", { status: 404 });\n}\n",[19,71],"60da6bae-3f23-11f1-af59-42b51c65c3df","hosted_webhook.ts","60da6cb2-3f23-11f1-af59-42b51c65c3df",13,["D",1776955660643],"// Webhook router for hosted bots.\n// When Telegram posts an update for a hosted bot, it comes to /tgwebhook/:projectId/:secret.\n// We forward the update to the hosted bot's code by executing it via webhook pattern.\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { hashToken } from \"../lib/utils.ts\";\n\nexport async function handleHostedWebhook(projectId: number, secret: string, body: any): Promise {\n const project = await db.getProjectById(projectId);\n if (!project || project.webhook_secret !== secret) {\n return new Response(\"not found\", { status: 404 });\n }\n\n const tokenHash = project.bot_token ? await hashToken(project.bot_token) : \"none\";\n\n // If stopped or expired, just log and drop\n const now = Math.floor(Date.now() / 1000);\n if (project.status !== \"running\" || (project.expires_at && project.expires_at <= now)) {\n await db.logWebhook(projectId, tokenHash, \"dropped\", JSON.stringify(body), 200);\n return new Response(\"ok (project not running)\", { status: 200 });\n }\n\n await db.logWebhook(projectId, tokenHash, \"in\", JSON.stringify(body), 200);\n\n // Execute the hosted bot's Python code via webhook simulation\n // Since we can't run Python on Val Town, we forward via the bot's token\n const msg = body?.message;\n if (msg && project.bot_token) {\n const chatId = msg.chat.id;\n const text: string = msg.text || \"\";\n\n // Load the main file to check for command handlers\n const mainFile = project.main_file ? await db.getFile(project.id, project.main_file) : null;\n const allFiles = await db.listFiles(project.id);\n\n // Smart command routing based on Python code analysis\n if (mainFile?.content) {\n const response = await executeBotLogic(project, mainFile.content, allFiles, msg);\n if (response) {\n await tg.sendMessage(project.bot_token, chatId, response);\n return new Response(\"ok\", { status: 200 });\n }\n }\n\n // Default handler for basic commands\n if (text === \"/start\" || text === \"/help\" || text === \"/ping\") {\n const username = project.bot_username ? \"@\" + project.bot_username : \"this bot\";\n await tg.sendMessage(\n project.bot_token,\n chatId,\n `🤖 ${username} is hosted by ScottHub.\\n\\n` +\n `Owner project: ${project.name}\\n` +\n `Status: running\\n` +\n `Files: ${allFiles.length}\\n\\n` +\n `This bot is running via ScottHub webhook router.`,\n );\n }\n }\n\n // Handle callback queries\n const callback = body?.callback_query;\n if (callback && project.bot_token) {\n await tg.answerCallback(project.bot_token, callback.id, \"Handled by ScottHub\");\n }\n\n return new Response(\"ok\", { status: 200 });\n}\n\n/**\n * Analyze Python code and try to simulate basic bot responses.\n * This parses command handlers from the Python source and generates responses.\n */\nasync function executeBotLogic(\n project: db.ProjectRow,\n mainCode: string,\n allFiles: db.FileRow[],\n msg: any,\n): Promise {\n const text: string = msg.text || \"\";\n const command = text.split(/\\s+/)[0]?.toLowerCase();\n\n // Extract command handlers from Python code\n // Pattern: @bot.message_handler(commands=['xyz']) or @dp.message_handler(commands=['xyz'])\n // or @app.on_message(filters.command(\"xyz\"))\n const handlers = extractCommandHandlers(mainCode);\n\n // Check all files for handler definitions\n for (const file of allFiles) {\n if (file.path.endsWith(\".py\") && !file.is_main) {\n handlers.push(...extractCommandHandlers(file.content));\n }\n }\n\n // Find matching handler and extract reply text\n for (const h of handlers) {\n if (command === \"/\" + h.command || command === h.command) {\n if (h.replyText) return h.replyText;\n }\n }\n\n return null;\n}\n\ninterface CommandHandler {\n command: string;\n replyText: string | null;\n}\n\nfunction extractCommandHandlers(code: string): CommandHandler[] {\n const handlers: CommandHandler[] = [];\n\n // Match common patterns:\n // @bot.message_handler(commands=['start'])\n // @dp.message(Command(\"start\"))\n // @app.on_message(filters.command(\"start\"))\n const patterns = [\n /commands?\\s*=\\s*\\[['\"](\\w+)['\"]/g,\n /Command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n /filters\\.command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n ];\n\n for (const pattern of patterns) {\n let match;\n while ((match = pattern.exec(code)) !== null) {\n const cmd = match[1];\n // Try to find the reply text near this handler\n const idx = match.index;\n const nearby = code.slice(idx, idx + 500);\n const replyMatch = nearby.match(/(?:reply|send_message|answer)\\s*\\(\\s*[\"']([^\"']+)[\"']/);\n handlers.push({\n command: cmd,\n replyText: replyMatch ? replyMatch[1] : null,\n });\n }\n }\n\n return handlers;\n}\n",[19,78],"50a1c84a-3f23-11f1-825c-42b51c65c3df","actions.ts","50a1c926-3f23-11f1-825c-42b51c65c3df",12,["D",1776955633421],"// Upload, file management, stop/restart, start-hosting\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { analyzePythonFile } from \"../lib/parser.ts\";\nimport { esc, fmtDuration, getBaseUrl, projectWebhookUrl, HOST_DURATION_SECONDS } from \"../lib/utils.ts\";\nimport { canHost, claimHostSlot, isAdmin } from \"./access.ts\";\nimport { showHost, showManage } from \"./screens.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\n/** Handle a Telegram document upload */\nexport async function handleDocument(\n chatId: number,\n userId: number,\n doc: { file_id: string; file_name: string; file_size: number; mime_type?: string },\n) {\n if (doc.file_size > 2_000_000) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ File too large (max 2MB per file).\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const name = (doc.file_name || \"file.txt\").replace(/[^\\w.\\-\\/]/g, \"_\");\n\n // Fetch file content\n const info = await tg.getFile(BOT_TOKEN, doc.file_id);\n if (!info?.file_path) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Could not fetch file from Telegram.\");\n return;\n }\n const content = await tg.downloadFile(BOT_TOKEN, info.file_path);\n\n const user = await db.getUser(userId);\n if (!user) return;\n\n const state = user.state || \"idle\";\n const isPy = name.endsWith(\".py\");\n const subPath = (JSON.parse(user.state_data || \"{}\") as any).subPath as string | undefined;\n\n // If state is \"awaiting_sub_upload\" → user specified a path earlier\n if (state === \"awaiting_sub_upload\" && subPath) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No active project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.addFile(project.id, subPath, content, false);\n\n // Smart parse sub file for imports too\n if (subPath.endsWith(\".py\")) {\n const a = analyzePythonFile(content);\n if (a.imports.pip.length) {\n const existing = JSON.parse(project.detected_imports || \"[]\") as string[];\n const merged = [...new Set([...existing, ...a.imports.pip])];\n await db.updateProject(project.id, { detected_imports: JSON.stringify(merged) });\n }\n }\n\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `✅ Added ${esc(subPath)} to project ${esc(project.name)}.`,\n { reply_markup: tg.MANAGE_KEYBOARD },\n );\n await db.setUserState(userId, \"manage\");\n return;\n }\n\n // Otherwise: main upload flow\n const allowed = await canHost(userId);\n if (!allowed.allowed) {\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `🔒 Cannot host yet.\\nReferrals: ${allowed.have}/${allowed.need}\\n\\nUse 👥 Referral to invite friends.`,\n { reply_markup: tg.MAIN_KEYBOARD },\n );\n return;\n }\n\n // Get or create project\n let project = await db.getProjectByOwner(userId);\n const now = Math.floor(Date.now() / 1000);\n const isExpired = project && project.expires_at && project.expires_at <= now;\n\n if (!project || isExpired) {\n const claim = await claimHostSlot(userId);\n if (!claim.ok) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ \" + claim.reason, { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n if (isExpired && project) {\n await db.updateProject(project.id, {\n expires_at: claim.expiresAt,\n started_at: now,\n stopped_at: null,\n status: \"running\",\n });\n project = await db.getProjectByOwner(userId);\n } else {\n project = await db.createProject(userId, name.replace(/\\.py$/, \"\"));\n await db.updateProject(project.id, {\n expires_at: claim.expiresAt,\n started_at: now,\n status: \"running\",\n });\n project = await db.getProjectByOwner(userId);\n }\n }\n\n if (!project) return;\n\n // Store the file\n const existingFiles = await db.listFiles(project.id);\n const makeMain = isPy && (existingFiles.length === 0 || !project.main_file);\n await db.addFile(project.id, name, content, makeMain);\n if (makeMain) {\n await db.setMainFile(project.id, name);\n }\n\n // Smart-parse if python\n let analysisText = \"\";\n if (isPy) {\n const a = analyzePythonFile(content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n\n // If we got a bot token, set up webhook automatically\n if (a.botToken) {\n const me = await tg.getMe(a.botToken);\n if (me.ok) {\n await db.updateProject(project.id, { bot_username: me.result.username });\n }\n // Auto set webhook for the hosted bot\n try {\n const base = await getBaseUrl();\n const whUrl = projectWebhookUrl(base, project.id, project.webhook_secret || \"\");\n await db.updateProject(project.id, { webhook_url: whUrl });\n const whResult = await tg.setWebhook(a.botToken, whUrl);\n if (whResult.ok) {\n analysisText += \"\\n🔌 Webhook auto-configured! ✅\";\n }\n } catch (e) {\n console.error(\"Auto webhook error:\", e);\n }\n }\n\n analysisText +=\n `\\n\\n🧠 Smart analysis\\n` +\n `• Bot token: ${a.botToken ? \"✅ detected\" : \"❌ not found\"}\\n` +\n `• Admin id: ${a.adminId ? `✅ ${esc(a.adminId)}` : \"❌ not found\"}\\n` +\n `• Imports detected: ${a.imports.imports.length}\\n` +\n (a.imports.pip.length ? `• Auto-install: ${esc(a.imports.pip.join(\" \"))}\\n` : \"\") +\n `• Lines: ${a.lines}`;\n }\n\n const updated = await db.getProjectById(project.id);\n const remaining = updated?.expires_at ? updated.expires_at - now : 0;\n\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `✅ File uploaded\\n\\n` +\n `📄 ${esc(name)} (${content.length} bytes)\\n` +\n (makeMain ? `⭐ Marked as main file\\n` : \"\") +\n `⏱ Hosting time: ${fmtDuration(remaining)}` +\n analysisText,\n { reply_markup: tg.HOST_KEYBOARD },\n );\n await db.setUserState(userId, \"host\");\n}\n\nexport async function handleStop(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No project to stop.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n await db.updateProject(project.id, {\n status: \"stopped\",\n stopped_at: Math.floor(Date.now() / 1000),\n });\n // Remove webhook from hosted bot\n if (project.bot_token) {\n try { await tg.deleteWebhook(project.bot_token); } catch {}\n }\n await tg.sendMessage(BOT_TOKEN, chatId, \"⏹ Bot stopped.\\nWebhook removed. Press 🔄 Restart to resume.\", {\n reply_markup: tg.HOST_KEYBOARD,\n });\n}\n\nexport async function handleRestart(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No project to restart.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const now = Math.floor(Date.now() / 1000);\n if (project.expires_at && project.expires_at <= now) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Your host time has expired. Invite 2 users and upload again.\", {\n reply_markup: tg.MAIN_KEYBOARD,\n });\n return;\n }\n await db.updateProject(project.id, { status: \"running\", stopped_at: null });\n // Re-set webhook\n if (project.bot_token && project.webhook_secret) {\n try {\n const base = await getBaseUrl();\n const whUrl = projectWebhookUrl(base, project.id, project.webhook_secret);\n await tg.setWebhook(project.bot_token, whUrl);\n } catch {}\n }\n await tg.sendMessage(BOT_TOKEN, chatId, \"🔄 Bot restarted.\\nWebhook routing resumed.\", {\n reply_markup: tg.HOST_KEYBOARD,\n });\n}\n\nexport async function promptAddFile(chatId: number, userId: number) {\n await db.setUserState(userId, \"awaiting_sub_path\");\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n \"📝 Send the relative path for your new file (e.g. plugins/helper.py or config.py).\\n\\nAfter that, send the file as a document.\\n\\nType /cancel to abort.\",\n { reply_markup: tg.BACK_KEYBOARD },\n );\n}\n\nexport async function handleSubPath(chatId: number, userId: number, text: string) {\n const clean = text.trim().replace(/^\\/+/, \"\").replace(/\\.\\./g, \"\");\n if (!clean || clean.length > 120 || !/^[\\w.\\-\\/]+$/.test(clean)) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid path. Use letters, digits, _, -, . and / only.\", {\n reply_markup: tg.BACK_KEYBOARD,\n });\n return;\n }\n await db.setUserState(userId, \"awaiting_sub_upload\", { subPath: clean });\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `📂 Path set to ${esc(clean)}\\n\\nNow send the file as a document.`,\n { reply_markup: tg.BACK_KEYBOARD },\n );\n}\n\nexport async function handleDeleteFilePrompt(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n if (!files.length) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No files to delete.\", { reply_markup: tg.MANAGE_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_delete_path\");\n const list = files.map((f) => `• ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `🗑 Send the path to delete:\\n\\n${list}\\n\\n/cancel to abort.`, {\n reply_markup: tg.BACK_KEYBOARD,\n });\n}\n\nexport async function handleDeletePath(chatId: number, userId: number, text: string) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such file.\", { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n if (file.is_main) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Can't delete the main file. Set a different main first.\", {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n await db.setUserState(userId, \"manage\");\n return;\n }\n await db.deleteFile(project.id, clean);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Deleted ${esc(clean)}`, {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleSetMainPrompt(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n const pyFiles = files.filter((f) => f.path.endsWith(\".py\"));\n if (!pyFiles.length) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No .py files yet.\", { reply_markup: tg.MANAGE_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_main_path\");\n const list = pyFiles.map((f) => `${f.is_main ? \"⭐\" : \" \"} ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Send path of file to mark as main:\\n\\n${list}`, {\n reply_markup: tg.BACK_KEYBOARD,\n });\n}\n\nexport async function handleSetMainPath(chatId: number, userId: number, text: string) {\n const project = await db.getProjectByOwner(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file || !clean.endsWith(\".py\")) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such .py file.\", { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n await db.setMainFile(project.id, clean);\n const analysis = analyzePythonFile(file.content);\n const patch: any = { detected_imports: JSON.stringify(analysis.imports.pip) };\n if (analysis.botToken) patch.bot_token = analysis.botToken;\n if (analysis.adminId) patch.admin_id = analysis.adminId;\n await db.updateProject(project.id, patch);\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Main file set to ${esc(clean)}`, {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleListFiles(chatId: number, userId: number) {\n const project = await db.getProjectByOwner(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No project.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const files = await db.listFiles(project.id);\n if (!files.length) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No files.\", { reply_markup: tg.MANAGE_KEYBOARD });\n return;\n }\n const list = files\n .map((f) => `${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)} — ${f.size}b`)\n .join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `📁 Files in ${esc(project.name)}\\n\\n${list}`, {\n reply_markup: tg.MANAGE_KEYBOARD,\n });\n}\n\nexport async function promptUpload(chatId: number, userId: number) {\n const allowed = await canHost(userId);\n if (!allowed.allowed) {\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `🔒 Locked\\n\\nYou need ${allowed.need} referrals to unlock a free hosting slot.\\nYou have: ${allowed.have}/${allowed.need}\\n\\nTap 👥 Referral to get your link.`,\n { reply_markup: tg.MAIN_KEYBOARD },\n );\n return;\n }\n await db.setUserState(userId, \"awaiting_upload\");\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `⬆️ Upload your bot\\n\\nSend your Python bot file (.py) as a document.\\n\\nScottHub will auto-detect:\\n• bot token\\n• admin id\\n• all imports / pip packages\\n\\n/cancel to abort.`,\n { reply_markup: tg.BACK_KEYBOARD },\n );\n}\n",[19,85],"15877bec-3f23-11f1-96ce-42b51c65c3df","access.ts","15877cd2-3f23-11f1-96ce-42b51c65c3df",10,["D",1776955534253],"// Access / gating: channel join + referral gate\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { HOST_DURATION_SECONDS, REFERRALS_REQUIRED } from \"../lib/utils.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\nconst CHANNEL = \"@ScottHubs\";\nconst ADMIN_ID = 6511143869;\n\nexport function isAdmin(tgId: number): boolean {\n return tgId === ADMIN_ID;\n}\n\nexport async function ensureChannelJoined(chatId: number, userId: number): Promise {\n if (isAdmin(userId)) {\n await db.markJoined(userId, true);\n return true;\n }\n const r = await tg.checkChannelMember(BOT_TOKEN, CHANNEL, userId);\n if (r.ok && r.isMember) {\n await db.markJoined(userId, true);\n return true;\n }\n await db.markJoined(userId, false);\n await tg.sendMessage(\n BOT_TOKEN,\n chatId,\n `🔒 Join Required\\n\\nTo use ScottHub you must join our channel:\\n👉 https://t.me/ScottHubs\\n\\nAfter joining, press /start again.`,\n { reply_markup: tg.REMOVE_KEYBOARD },\n );\n return false;\n}\n\nexport async function canHost(userId: number): Promise<\n { allowed: true; reason: \"admin\" | \"referrals\" | \"active\" } | { allowed: false; need: number; have: number }\n> {\n if (isAdmin(userId)) return { allowed: true, reason: \"admin\" };\n const user = await db.getUser(userId);\n if (!user) return { allowed: false, need: REFERRALS_REQUIRED, have: 0 };\n\n const project = await db.getProjectByOwner(userId);\n const now = Math.floor(Date.now() / 1000);\n if (project && project.expires_at && project.expires_at > now) {\n return { allowed: true, reason: \"active\" };\n }\n\n if (user.referral_count >= REFERRALS_REQUIRED) {\n return { allowed: true, reason: \"referrals\" };\n }\n return { allowed: false, need: REFERRALS_REQUIRED, have: user.referral_count };\n}\n\nexport async function claimHostSlot(userId: number): Promise<\n { ok: true; expiresAt: number } | { ok: false; reason: string }\n> {\n if (isAdmin(userId)) {\n return { ok: true, expiresAt: Math.floor(Date.now() / 1000) + HOST_DURATION_SECONDS };\n }\n const user = await db.getUser(userId);\n if (!user) return { ok: false, reason: \"User not found\" };\n if (user.referral_count < REFERRALS_REQUIRED) {\n return { ok: false, reason: `Need ${REFERRALS_REQUIRED} referrals (you have ${user.referral_count})` };\n }\n await db.consumeReferrals(userId, REFERRALS_REQUIRED);\n return { ok: true, expiresAt: Math.floor(Date.now() / 1000) + HOST_DURATION_SECONDS };\n}\n",[19,92],"d06951b6-3f22-11f1-afe3-42b51c65c3df",3,["D",1776955418310],"directory",[19],{"_39":212,"_13":213,"_42":214,"_44":-5,"_46":47,"_48":215,"_50":51,"_52":216,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_116":217,"_18":218},{"_39":98,"_13":19,"_42":45,"_44":-5,"_46":47,"_48":99,"_50":51,"_52":185,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_116":186,"_18":187},{"_39":168,"_13":169,"_42":170,"_44":-5,"_46":47,"_48":171,"_50":51,"_52":172,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_116":173,"_18":174},{"_39":134,"_13":135,"_42":136,"_44":-5,"_46":47,"_48":137,"_50":51,"_52":138,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_116":139,"_18":140},{"_39":119,"_13":120,"_42":121,"_44":-5,"_46":47,"_48":122,"_50":51,"_52":123,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_116":124,"_18":125},{"_39":109,"_13":110,"_42":111,"_44":-5,"_46":47,"_48":112,"_50":51,"_52":113,"_17":54,"_55":114,"_57":115,"_59":60,"_61":-5,"_116":117,"_18":118},"b11ed960-3f23-11f1-81c4-42b51c65c3df","main.ts","b11eda64-3f23-11f1-81c4-42b51c65c3df",16,["D",1776955795310],"http","// ScottHub — Main HTTP entrypoint\n// Routes:\n// POST /bot → main ScottHub bot webhook (from Telegram)\n// POST /tgwebhook/:id/:secret → hosted-bot webhook router\n// GET /panel, /panel/* → web admin panel\n// GET / → public landing\n// GET /source → redirect to val source\n// GET /health → healthcheck\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { runMigrations } from \"./database/schema.ts\";\nimport { handleUpdate } from \"./handlers/router.ts\";\nimport { handleHostedWebhook } from \"./handlers/hosted_webhook.ts\";\nimport { handlePanel } from \"./handlers/panel.ts\";\nimport { esc } from \"./lib/utils.ts\";\n\nlet migrated = false;\nasync function ensureMigrated() {\n if (migrated) return;\n await runMigrations();\n migrated = true;\n}\n\nfunction landingPage(): string {\n return `\n\nScottHub — Telegram Bot Hosting\n\n\n

🤖

ScottHub

Telegram Bot Hosting Platform

\n\n

How to use

Open the bot in Telegram and press /start
Join our channel @ScottHubs
Invite 2 friends via your Referral link
Upload your Python bot in 🖥 Host → ⬆️ Upload Files
Your bot goes live automatically via webhook!

\n\n

\n \n

📢 Channel

@ScottHubs

\n \n \n

🔐 Admin Panel

Manage webhooks

\n \n \n

📄 View Source

Read the code

\n \n

\n\n

\n`;\n}\n\nexport default async function (req: Request): Promise {\n await ensureMigrated();\n const url = new URL(req.url);\n const path = url.pathname;\n\n try {\n // Main bot webhook from Telegram\n if (path === \"/bot\" && req.method === \"POST\") {\n const body = await req.json().catch(() => null);\n if (body) {\n try {\n await handleUpdate(body);\n } catch (e) {\n console.error(\"handleUpdate error:\", e);\n }\n }\n return new Response(\"ok\");\n }\n\n // Hosted bot webhook router\n const whMatch = path.match(/^\\/tgwebhook\\/(\\d+)\\/([A-Za-z0-9]+)$/);\n if (whMatch && req.method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return await handleHostedWebhook(Number(whMatch[1]), whMatch[2], body);\n }\n\n // Health\n if (path === \"/health\") {\n return Response.json({ ok: true, ts: Date.now() });\n }\n\n // Source redirect\n if (path === \"/source\") {\n const v = parseVal();\n return new Response(null, { status: 302, headers: { Location: v.links.self.val } });\n }\n\n // Panel\n if (path === \"/panel\" || path.startsWith(\"/panel/\")) {\n return await handlePanel(req, url);\n }\n\n // Landing\n if (path === \"/\" || path === \"\") {\n return new Response(landingPage(), { headers: { \"content-type\": \"text/html\" } });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n } catch (e) {\n console.error(\"main.ts error:\", e);\n return new Response(\"Internal error: \" + (e as Error).message, { status: 500 });\n }\n}\n","children",[],[110],"c0cf169a-3f23-11f1-81c4-42b51c65c3df","scripts","34d29f34-3560-4ca1-8039-fde99f343323",18,["D",1776955821628],[126],[120],{"_39":127,"_13":128,"_42":129,"_44":121,"_46":47,"_48":122,"_50":51,"_52":130,"_17":54,"_55":56,"_57":131,"_59":60,"_61":-5,"_116":132,"_18":133},"c0cf0452-3f23-11f1-81c4-42b51c65c3df","setup_webhook.ts","c0cf0556-3f23-11f1-81c4-42b51c65c3df",["D",1776955821628],"// One-time setup: set the main bot webhook\nimport { setWebhook, getMe, getWebhookInfo } from \"../lib/telegram.ts\";\nimport { getBaseUrl } from \"../lib/utils.ts\";\n\nconst TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nconst base = await getBaseUrl();\nconst webhookUrl = `${base}/bot`;\n\nconsole.log(\"Base URL:\", base);\nconsole.log(\"Setting webhook to:\", webhookUrl);\n\nconst me = await getMe(TOKEN);\nconsole.log(\"Bot info:\", JSON.stringify(me));\n\nconst r = await setWebhook(TOKEN, webhookUrl);\nconsole.log(\"setWebhook result:\", JSON.stringify(r));\n\nconst info = await getWebhookInfo(TOKEN);\nconsole.log(\"getWebhookInfo:\", JSON.stringify(info));\n",[],[120,128],"d03236ae-3f22-11f1-9590-42b51c65c3df","lib","d0323780-3f22-11f1-9590-42b51c65c3df",2,["D",1776955417822],[141,142,143],[135],{"_39":160,"_13":161,"_42":162,"_44":136,"_46":47,"_48":163,"_50":51,"_52":164,"_17":54,"_55":56,"_57":165,"_59":60,"_61":-5,"_116":166,"_18":167},{"_39":152,"_13":153,"_42":154,"_44":136,"_46":47,"_48":155,"_50":51,"_52":156,"_17":54,"_55":56,"_57":157,"_59":60,"_61":-5,"_116":158,"_18":159},{"_39":144,"_13":145,"_42":146,"_44":136,"_46":47,"_48":147,"_50":51,"_52":148,"_17":54,"_55":56,"_57":149,"_59":60,"_61":-5,"_116":150,"_18":151},"0ae9c00a-3f23-11f1-b0bb-42b51c65c3df","utils.ts","0ae9c0be-3f23-11f1-b0bb-42b51c65c3df",9,["D",1776955516460],"// Misc utilities\nimport { httpEndpoint, parseVal } from \"https://esm.town/v/std/utils/index.ts\";\n\nexport function esc(s: string | number | null | undefined): string {\n if (s === null || s === undefined) return \"\";\n return String(s)\n .replaceAll(\"&\", \"&\")\n .replaceAll(\"<\", \"<\")\n .replaceAll(\">\", \">\");\n}\n\nexport function fmtDuration(seconds: number): string {\n if (seconds <= 0) return \"expired\";\n const d = Math.floor(seconds / 86400);\n const h = Math.floor((seconds % 86400) / 3600);\n const m = Math.floor((seconds % 3600) / 60);\n if (d > 0) return `${d}d ${h}h ${m}m`;\n if (h > 0) return `${h}h ${m}m`;\n return `${m}m`;\n}\n\nexport function fmtDate(ts: number | null): string {\n if (!ts) return \"—\";\n return new Date(ts * 1000).toISOString().replace(\"T\", \" \").slice(0, 16) + \" UTC\";\n}\n\n// 2-day host window in seconds\nexport const HOST_DURATION_SECONDS = 2 * 24 * 60 * 60;\nexport const REFERRALS_REQUIRED = 2;\n\nexport async function hashToken(token: string): Promise {\n const buf = new TextEncoder().encode(token);\n const digest = await crypto.subtle.digest(\"SHA-256\", buf);\n return Array.from(new Uint8Array(digest))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\")\n .slice(0, 16);\n}\n\n// Cache the resolved base URL\nlet _cachedBaseUrl: string | null = null;\n\nexport async function getBaseUrl(): Promise {\n if (_cachedBaseUrl) return _cachedBaseUrl;\n try {\n const endpoint = await httpEndpoint(\"/main.ts\");\n _cachedBaseUrl = endpoint;\n return endpoint;\n } catch {\n // fallback\n const v = parseVal();\n return `https://${v.username}--${v.name}.web.val.run`;\n }\n}\n\nexport function projectWebhookUrl(baseUrl: string, projectId: number, secret: string): string {\n return `${baseUrl}/tgwebhook/${projectId}/${secret}`;\n}\n",[],[135,145],"f925b77a-3f22-11f1-9476-42b51c65c3df","telegram.ts","f925b824-3f22-11f1-9476-42b51c65c3df",7,["D",1776955486622],"// Telegram Bot API wrapper\nconst BASE = \"https://api.telegram.org\";\n\nexport async function tg(token: string, method: string, body: Record = {}) {\n const res = await fetch(`${BASE}/bot${token}/${method}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n const data = await res.json().catch(() => ({ ok: false, description: \"non-json response\" }));\n return data;\n}\n\nexport async function sendMessage(\n token: string,\n chatId: number | string,\n text: string,\n extra: Record = {},\n) {\n return tg(token, \"sendMessage\", {\n chat_id: chatId,\n text,\n parse_mode: \"HTML\",\n disable_web_page_preview: true,\n ...extra,\n });\n}\n\nexport async function editMessage(\n token: string,\n chatId: number | string,\n messageId: number,\n text: string,\n extra: Record = {},\n) {\n return tg(token, \"editMessageText\", {\n chat_id: chatId,\n message_id: messageId,\n text,\n parse_mode: \"HTML\",\n disable_web_page_preview: true,\n ...extra,\n });\n}\n\nexport async function answerCallback(token: string, callbackQueryId: string, text = \"\") {\n return tg(token, \"answerCallbackQuery\", { callback_query_id: callbackQueryId, text });\n}\n\nexport async function getFile(token: string, fileId: string): Promise<{ file_path?: string } | null> {\n const r = await tg(token, \"getFile\", { file_id: fileId });\n if (!r.ok) return null;\n return r.result;\n}\n\nexport async function downloadFile(token: string, filePath: string): Promise {\n const res = await fetch(`${BASE}/file/bot${token}/${filePath}`);\n if (!res.ok) throw new Error(\"Failed to download file: \" + res.status);\n return res.text();\n}\n\nexport async function downloadFileBytes(token: string, filePath: string): Promise {\n const res = await fetch(`${BASE}/file/bot${token}/${filePath}`);\n if (!res.ok) throw new Error(\"Failed to download file: \" + res.status);\n return new Uint8Array(await res.arrayBuffer());\n}\n\nexport async function checkChannelMember(\n token: string,\n channel: string,\n userId: number,\n): Promise<{ ok: boolean; isMember: boolean; error?: string }> {\n const r = await tg(token, \"getChatMember\", { chat_id: channel, user_id: userId });\n if (!r.ok) return { ok: false, isMember: false, error: r.description };\n const status = r.result?.status;\n const isMember = [\"creator\", \"administrator\", \"member\", \"restricted\"].includes(status);\n return { ok: true, isMember };\n}\n\nexport async function getMe(token: string) {\n return tg(token, \"getMe\");\n}\n\nexport async function setWebhook(token: string, url: string, secret?: string) {\n return tg(token, \"setWebhook\", {\n url,\n secret_token: secret,\n allowed_updates: [\"message\", \"edited_message\", \"callback_query\", \"chat_member\", \"my_chat_member\"],\n drop_pending_updates: false,\n });\n}\n\nexport async function deleteWebhook(token: string) {\n return tg(token, \"deleteWebhook\", { drop_pending_updates: false });\n}\n\nexport async function getWebhookInfo(token: string) {\n return tg(token, \"getWebhookInfo\");\n}\n\n// Main reply-keyboard (NOT inline) for usability\nexport const MAIN_KEYBOARD = {\n keyboard: [\n [{ text: \"🖥 Host\" }, { text: \"👥 Referral\" }],\n [{ text: \"📊 Status\" }, { text: \"ℹ️ Help\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const HOST_KEYBOARD = {\n keyboard: [\n [{ text: \"🗄 Server\" }, { text: \"⬆️ Upload Files\" }],\n [{ text: \"📁 Manage Files\" }, { text: \"⏱ Host Time\" }],\n [{ text: \"⏹ Stop\" }, { text: \"🔄 Restart\" }],\n [{ text: \"⬅️ Back\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const MANAGE_KEYBOARD = {\n keyboard: [\n [{ text: \"📄 List Files\" }, { text: \"⭐ Set Main File\" }],\n [{ text: \"➕ Add File\" }, { text: \"🗑 Delete File\" }],\n [{ text: \"⬅️ Back to Host\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const BACK_KEYBOARD = {\n keyboard: [[{ text: \"⬅️ Back\" }]],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const REMOVE_KEYBOARD = { remove_keyboard: true };\n",[],[135,153],"04f89cf2-3f23-11f1-9a13-42b51c65c3df","parser.ts","04f89d92-3f23-11f1-9a13-42b51c65c3df",8,["D",1776955506490],"// Smart Python parser - detects bot token, admin id, imports, etc.\n\nconst STDLIB = new Set([\n \"os\", \"sys\", \"re\", \"json\", \"time\", \"datetime\", \"random\", \"math\", \"asyncio\",\n \"logging\", \"threading\", \"subprocess\", \"pathlib\", \"typing\", \"collections\",\n \"functools\", \"itertools\", \"traceback\", \"urllib\", \"http\", \"socket\", \"ssl\",\n \"hashlib\", \"hmac\", \"base64\", \"io\", \"struct\", \"copy\", \"pickle\", \"csv\",\n \"sqlite3\", \"zipfile\", \"tarfile\", \"gzip\", \"bz2\", \"string\", \"textwrap\",\n \"argparse\", \"configparser\", \"shutil\", \"tempfile\", \"glob\", \"uuid\", \"secrets\",\n \"dataclasses\", \"enum\", \"abc\", \"contextlib\", \"warnings\", \"weakref\", \"inspect\",\n \"importlib\", \"operator\", \"queue\", \"multiprocessing\", \"concurrent\", \"signal\",\n \"platform\", \"getpass\", \"calendar\", \"decimal\", \"fractions\", \"statistics\",\n \"unittest\", \"email\", \"html\", \"xml\", \"zoneinfo\", \"locale\", \"gettext\", \"codecs\",\n \"mimetypes\", \"encodings\", \"builtins\", \"__future__\",\n]);\n\nconst IMPORT_TO_PIP: Record = {\n \"telegram\": \"python-telegram-bot\",\n \"telethon\": \"Telethon\",\n \"pyrogram\": \"Pyrogram\",\n \"aiogram\": \"aiogram\",\n \"cv2\": \"opencv-python\",\n \"PIL\": \"Pillow\",\n \"Image\": \"Pillow\",\n \"bs4\": \"beautifulsoup4\",\n \"yaml\": \"PyYAML\",\n \"dotenv\": \"python-dotenv\",\n \"jwt\": \"PyJWT\",\n \"MySQLdb\": \"mysqlclient\",\n \"dns\": \"dnspython\",\n \"sklearn\": \"scikit-learn\",\n \"discord\": \"discord.py\",\n \"requests\": \"requests\",\n \"aiohttp\": \"aiohttp\",\n \"httpx\": \"httpx\",\n \"flask\": \"Flask\",\n \"fastapi\": \"fastapi\",\n \"uvicorn\": \"uvicorn\",\n \"django\": \"Django\",\n \"motor\": \"motor\",\n \"pymongo\": \"pymongo\",\n \"redis\": \"redis\",\n \"psycopg2\": \"psycopg2-binary\",\n \"sqlalchemy\": \"SQLAlchemy\",\n \"numpy\": \"numpy\",\n \"pandas\": \"pandas\",\n \"apscheduler\": \"APScheduler\",\n \"pydantic\": \"pydantic\",\n \"tgcrypto\": \"TgCrypto\",\n};\n\nexport function detectImports(code: string): { imports: string[]; pip: string[] } {\n const found = new Set();\n const cleaned = code\n .replace(/\"\"\"[\\s\\S]*?\"\"\"/g, \"\")\n .replace(/'''[\\s\\S]*?'''/g, \"\")\n .replace(/#[^\\n]*/g, \"\");\n\n const lines = cleaned.split(/\\r?\\n/);\n for (const raw of lines) {\n const line = raw.trim();\n let m = line.match(/^from\\s+([a-zA-Z_][\\w\\.]*)\\s+import\\s+/);\n if (m) {\n found.add(m[1].split(\".\")[0]);\n continue;\n }\n m = line.match(/^import\\s+(.+)$/);\n if (m) {\n for (const part of m[1].split(\",\")) {\n const name = part.trim().split(/\\s+as\\s+/)[0].trim().split(\".\")[0];\n if (name) found.add(name);\n }\n }\n }\n const imports = [...found].filter((x) => !STDLIB.has(x));\n const pip = [...new Set(imports.map((i) => IMPORT_TO_PIP[i] ?? i))];\n return { imports: [...found], pip };\n}\n\nexport function detectBotToken(code: string): string | null {\n const re = /(\\d{6,12}:[A-Za-z0-9_\\-]{30,})/;\n const m = code.match(re);\n return m ? m[1] : null;\n}\n\nexport function detectAdminId(code: string): string | null {\n const patterns = [\n /(?:ADMIN_ID|OWNER_ID|SUDO_USERS|OWNER|ADMINS?)\\s*=\\s*\\[?\\s*[\"']?(\\d{5,})[\"']?/i,\n /(?:admin|owner)[_\\s]?id\\s*=\\s*[\"']?(\\d{5,})[\"']?/i,\n ];\n for (const p of patterns) {\n const m = code.match(p);\n if (m) return m[1];\n }\n return null;\n}\n\nexport function detectApiIdHash(code: string): { apiId?: string; apiHash?: string } {\n const out: { apiId?: string; apiHash?: string } = {};\n const idM = code.match(/API[_\\s]?ID\\s*=\\s*[\"']?(\\d{5,})[\"']?/i);\n if (idM) out.apiId = idM[1];\n const hashM = code.match(/API[_\\s]?HASH\\s*=\\s*[\"']([a-f0-9]{32})[\"']/i);\n if (hashM) out.apiHash = hashM[1];\n return out;\n}\n\nexport function analyzePythonFile(code: string) {\n return {\n imports: detectImports(code),\n botToken: detectBotToken(code),\n adminId: detectAdminId(code),\n apiCreds: detectApiIdHash(code),\n lines: code.split(/\\r?\\n/).length,\n size: code.length,\n };\n}\n",[],[135,161],"d0873884-3f22-11f1-afe3-42b51c65c3df","jobs","d0873942-3f22-11f1-afe3-42b51c65c3df",4,["D",1776955418495],[175],[169],{"_39":176,"_13":177,"_42":178,"_44":170,"_46":47,"_48":179,"_50":51,"_52":180,"_17":54,"_55":181,"_57":182,"_59":60,"_61":-5,"_116":183,"_18":184},"b78f3420-3f23-11f1-81c4-42b51c65c3df","expiry_sweep.ts","b78f34de-3f23-11f1-81c4-42b51c65c3df",17,["D",1776955806112],"interval","// Runs periodically to expire host slots whose 2-day window is up\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { runMigrations } from \"../database/schema.ts\";\nimport * as tg from \"../lib/telegram.ts\";\n\nconst BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\n\nexport default async function (interval: Interval) {\n await runMigrations();\n const now = Math.floor(Date.now() / 1000);\n\n // Find projects about to expire\n const expiring = await sqlite.execute({\n sql: \"SELECT * FROM projects WHERE status='running' AND expires_at IS NOT NULL AND expires_at <= ?\",\n args: [now],\n });\n\n for (const proj of expiring.rows as any[]) {\n // Remove webhook from the hosted bot\n if (proj.bot_token) {\n try {\n await tg.deleteWebhook(proj.bot_token);\n } catch {}\n }\n\n // Notify owner\n try {\n await tg.sendMessage(\n BOT_TOKEN,\n proj.owner_id,\n `⏰ Hosting Expired\\n\\nYour project ${proj.name} has expired.\\nInvite 2 new users to renew your hosting slot.\\n\\nTap 👥 Referral to get your link.`,\n { reply_markup: tg.MAIN_KEYBOARD },\n );\n } catch {}\n }\n\n // Mark them expired\n const result = await sqlite.execute({\n sql: \"UPDATE projects SET status='expired', stopped_at=? WHERE status='running' AND expires_at IS NOT NULL AND expires_at <= ?\",\n args: [now, now],\n });\n\n console.log(`expiry_sweep: expired ${result.rowsAffected ?? 0} projects at ${new Date().toISOString()}`);\n}\n",[],[169,177],["D",1776955418310],[188,189,190,191,192,193],[19],{"_39":91,"_13":92,"_42":93,"_44":45,"_46":47,"_48":94,"_50":51,"_52":209,"_17":54,"_55":56,"_57":96,"_59":60,"_61":-5,"_116":210,"_18":211},{"_39":84,"_13":85,"_42":86,"_44":45,"_46":47,"_48":87,"_50":51,"_52":206,"_17":54,"_55":56,"_57":89,"_59":60,"_61":-5,"_116":207,"_18":208},{"_39":77,"_13":78,"_42":79,"_44":45,"_46":47,"_48":80,"_50":51,"_52":203,"_17":54,"_55":56,"_57":82,"_59":60,"_61":-5,"_116":204,"_18":205},{"_39":70,"_13":71,"_42":72,"_44":45,"_46":47,"_48":73,"_50":51,"_52":200,"_17":54,"_55":56,"_57":75,"_59":60,"_61":-5,"_116":201,"_18":202},{"_39":63,"_13":64,"_42":65,"_44":45,"_46":47,"_48":66,"_50":51,"_52":197,"_17":54,"_55":56,"_57":68,"_59":60,"_61":-5,"_116":198,"_18":199},{"_39":40,"_13":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":194,"_17":54,"_55":56,"_57":58,"_59":60,"_61":-5,"_116":195,"_18":196},["D",1776955570426],[],[19,41],["D",1776955683090],[],[19,64],["D",1776955768732],[],[19,71],["D",1776955660643],[],[19,78],["D",1776955633421],[],[19,85],["D",1776955534253],[],[19,92],"cfd05ec0-3f22-11f1-9590-42b51c65c3df","database","cfd05f88-3f22-11f1-9590-42b51c65c3df",1,["D",1776955417306],[219,220],[213],{"_39":229,"_13":230,"_42":231,"_44":214,"_46":47,"_48":232,"_50":51,"_52":233,"_17":54,"_55":56,"_57":234,"_59":60,"_61":-5,"_116":235,"_18":236},{"_39":221,"_13":222,"_42":223,"_44":214,"_46":47,"_48":224,"_50":51,"_52":225,"_17":54,"_55":56,"_57":226,"_59":60,"_61":-5,"_116":227,"_18":228},"d8f094d4-3f22-11f1-9590-42b51c65c3df","schema.ts","d8f0957e-3f22-11f1-9590-42b51c65c3df",5,["D",1776955432607],"// Database schema + migrations for ScottHub\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runMigrations() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n tg_id INTEGER PRIMARY KEY,\n username TEXT,\n first_name TEXT,\n referral_code TEXT UNIQUE,\n referred_by INTEGER,\n referral_count INTEGER DEFAULT 0,\n state TEXT DEFAULT 'idle',\n state_data TEXT,\n joined_channel INTEGER DEFAULT 0,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n updated_at INTEGER DEFAULT (strftime('%s','now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS projects (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n owner_id INTEGER NOT NULL,\n name TEXT NOT NULL,\n main_file TEXT,\n bot_token TEXT,\n bot_username TEXT,\n admin_id TEXT,\n detected_imports TEXT,\n status TEXT DEFAULT 'stopped',\n webhook_secret TEXT,\n webhook_url TEXT,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n started_at INTEGER,\n expires_at INTEGER,\n stopped_at INTEGER,\n last_update_at INTEGER,\n message_count INTEGER DEFAULT 0\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS files (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER NOT NULL,\n path TEXT NOT NULL,\n content TEXT NOT NULL,\n size INTEGER DEFAULT 0,\n is_main INTEGER DEFAULT 0,\n uploaded_at INTEGER DEFAULT (strftime('%s','now')),\n UNIQUE(project_id, path)\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS referrals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n referrer_id INTEGER NOT NULL,\n invited_id INTEGER NOT NULL UNIQUE,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS webhook_events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER,\n bot_token_hash TEXT,\n direction TEXT,\n payload TEXT,\n status_code INTEGER,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS panel_sessions (\n token TEXT PRIMARY KEY,\n username TEXT NOT NULL,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n expires_at INTEGER NOT NULL\n )\n `);\n\n // Indexes\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_projects_owner ON projects(owner_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_files_project ON files(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_referrals_ref ON referrals(referrer_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_webhook_project ON webhook_events(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_users_refcode ON users(referral_code)`);\n\n // Add webhook_url column if missing (migration)\n try {\n await sqlite.execute(`ALTER TABLE projects ADD COLUMN webhook_url TEXT`);\n } catch { /* already exists */ }\n}\n",[],[213,222],"ec081948-3f22-11f1-825c-42b51c65c3df","queries.ts","ec0819de-3f22-11f1-825c-42b51c65c3df",6,["D",1776955464643],"// All DB queries for ScottHub\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type UserRow = {\n tg_id: number;\n username: string | null;\n first_name: string | null;\n referral_code: string;\n referred_by: number | null;\n referral_count: number;\n state: string;\n state_data: string | null;\n joined_channel: number;\n};\n\nexport type ProjectRow = {\n id: number;\n owner_id: number;\n name: string;\n main_file: string | null;\n bot_token: string | null;\n bot_username: string | null;\n admin_id: string | null;\n detected_imports: string | null;\n status: string;\n webhook_secret: string | null;\n webhook_url: string | null;\n created_at: number;\n started_at: number | null;\n expires_at: number | null;\n stopped_at: number | null;\n last_update_at: number | null;\n message_count: number;\n};\n\nexport type FileRow = {\n id: number;\n project_id: number;\n path: string;\n content: string;\n size: number;\n is_main: number;\n uploaded_at: number;\n};\n\nfunction genCode(prefix: string, len = 8): string {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let s = \"\";\n for (let i = 0; i < len; i++) s += chars[Math.floor(Math.random() * chars.length)];\n return prefix + s;\n}\n\n// ---- USERS ----\nexport async function getOrCreateUser(\n tgId: number,\n username: string | null,\n firstName: string | null,\n referredBy: number | null = null,\n): Promise<{ user: UserRow; created: boolean }> {\n const existing = await sqlite.execute({\n sql: \"SELECT * FROM users WHERE tg_id = ?\",\n args: [tgId],\n });\n if (existing.rows.length > 0) {\n await sqlite.execute({\n sql: \"UPDATE users SET username=?, first_name=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [username, firstName, tgId],\n });\n return { user: existing.rows[0] as unknown as UserRow, created: false };\n }\n let code = genCode(\"R\");\n for (let attempts = 0; attempts < 5; attempts++) {\n const check = await sqlite.execute({ sql: \"SELECT 1 FROM users WHERE referral_code=?\", args: [code] });\n if (check.rows.length === 0) break;\n code = genCode(\"R\");\n }\n await sqlite.execute({\n sql: \"INSERT INTO users (tg_id, username, first_name, referral_code, referred_by) VALUES (?, ?, ?, ?, ?)\",\n args: [tgId, username, firstName, code, referredBy],\n });\n const fresh = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return { user: fresh.rows[0] as unknown as UserRow, created: true };\n}\n\nexport async function getUser(tgId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\n\nexport async function getUserByRefCode(code: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE referral_code=?\", args: [code] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\n\nexport async function setUserState(tgId: number, state: string, data: Record | null = null) {\n await sqlite.execute({\n sql: \"UPDATE users SET state=?, state_data=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [state, data ? JSON.stringify(data) : null, tgId],\n });\n}\n\nexport async function markJoined(tgId: number, joined: boolean) {\n await sqlite.execute({\n sql: \"UPDATE users SET joined_channel=? WHERE tg_id=?\",\n args: [joined ? 1 : 0, tgId],\n });\n}\n\nexport async function addReferral(referrerId: number, invitedId: number): Promise {\n try {\n await sqlite.execute({\n sql: \"INSERT INTO referrals (referrer_id, invited_id) VALUES (?, ?)\",\n args: [referrerId, invitedId],\n });\n await sqlite.execute({\n sql: \"UPDATE users SET referral_count = referral_count + 1 WHERE tg_id=?\",\n args: [referrerId],\n });\n return true;\n } catch {\n return false;\n }\n}\n\n// ---- PROJECTS ----\nexport async function getProjectByOwner(ownerId: number): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM projects WHERE owner_id=? ORDER BY id DESC LIMIT 1\",\n args: [ownerId],\n });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\n\nexport async function getProjectById(id: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE id=?\", args: [id] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\n\nexport async function getProjectByToken(token: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE bot_token=?\", args: [token] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\n\nexport async function createProject(ownerId: number, name: string): Promise {\n const secret = genCode(\"W\", 16);\n const r = await sqlite.execute({\n sql: \"INSERT INTO projects (owner_id, name, webhook_secret) VALUES (?, ?, ?) RETURNING *\",\n args: [ownerId, name, secret],\n });\n return r.rows[0] as unknown as ProjectRow;\n}\n\nexport async function updateProject(id: number, patch: Partial) {\n const keys = Object.keys(patch);\n if (keys.length === 0) return;\n const sets = keys.map((k) => `${k}=?`).join(\", \");\n const args = keys.map((k) => (patch as any)[k]);\n args.push(id);\n await sqlite.execute({ sql: `UPDATE projects SET ${sets} WHERE id=?`, args });\n}\n\nexport async function listAllProjects(): Promise {\n const r = await sqlite.execute(\"SELECT * FROM projects ORDER BY id DESC\");\n return r.rows as unknown as ProjectRow[];\n}\n\nexport async function listRunningProjects(): Promise {\n const now = Math.floor(Date.now() / 1000);\n const r = await sqlite.execute({\n sql: \"SELECT * FROM projects WHERE status='running' AND (expires_at IS NULL OR expires_at > ?)\",\n args: [now],\n });\n return r.rows as unknown as ProjectRow[];\n}\n\n// ---- FILES ----\nexport async function addFile(\n projectId: number,\n path: string,\n content: string,\n isMain = false,\n): Promise {\n await sqlite.execute({\n sql: `INSERT INTO files (project_id, path, content, size, is_main) VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(project_id, path) DO UPDATE SET content=excluded.content, size=excluded.size, uploaded_at=strftime('%s','now')`,\n args: [projectId, path, content, content.length, isMain ? 1 : 0],\n });\n const r = await sqlite.execute({\n sql: \"SELECT * FROM files WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n return r.rows[0] as unknown as FileRow;\n}\n\nexport async function listFiles(projectId: number): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM files WHERE project_id=? ORDER BY is_main DESC, path ASC\",\n args: [projectId],\n });\n return r.rows as unknown as FileRow[];\n}\n\nexport async function getFile(projectId: number, path: string): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM files WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n return r.rows.length ? (r.rows[0] as unknown as FileRow) : null;\n}\n\nexport async function deleteFile(projectId: number, path: string) {\n await sqlite.execute({\n sql: \"DELETE FROM files WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n}\n\nexport async function setMainFile(projectId: number, path: string) {\n await sqlite.execute({\n sql: \"UPDATE files SET is_main=0 WHERE project_id=?\",\n args: [projectId],\n });\n await sqlite.execute({\n sql: \"UPDATE files SET is_main=1 WHERE project_id=? AND path=?\",\n args: [projectId, path],\n });\n await sqlite.execute({\n sql: \"UPDATE projects SET main_file=? WHERE id=?\",\n args: [path, projectId],\n });\n}\n\n// ---- WEBHOOK LOG ----\nexport async function logWebhook(projectId: number | null, hash: string, direction: string, payload: string, status: number) {\n await sqlite.execute({\n sql: \"INSERT INTO webhook_events (project_id, bot_token_hash, direction, payload, status_code) VALUES (?, ?, ?, ?, ?)\",\n args: [projectId, hash, direction, payload.slice(0, 4000), status],\n });\n if (projectId) {\n await sqlite.execute({\n sql: \"UPDATE projects SET message_count = message_count + 1, last_update_at = strftime('%s','now') WHERE id=?\",\n args: [projectId],\n });\n }\n}\n\nexport async function recentWebhookEvents(limit = 50) {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM webhook_events ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return r.rows;\n}\n\n// ---- STATS ----\nexport async function globalStats() {\n const u = await sqlite.execute(\"SELECT COUNT(*) as c FROM users\");\n const p = await sqlite.execute(\"SELECT COUNT(*) as c FROM projects\");\n const r = await sqlite.execute(\"SELECT COUNT(*) as c FROM projects WHERE status='running'\");\n const f = await sqlite.execute(\"SELECT COUNT(*) as c FROM files\");\n const m = await sqlite.execute(\"SELECT COUNT(*) as c FROM webhook_events\");\n const num = (x: any) => Number(x.rows[0]?.c ?? 0);\n return { users: num(u), projects: num(p), running: num(r), files: num(f), messages: num(m) };\n}\n\n// ---- PANEL SESSIONS ----\nexport async function createSession(username: string): Promise {\n const token = genCode(\"S\", 32) + Date.now().toString(36);\n const expires = Math.floor(Date.now() / 1000) + 60 * 60 * 24 * 7;\n await sqlite.execute({\n sql: \"INSERT INTO panel_sessions (token, username, expires_at) VALUES (?, ?, ?)\",\n args: [token, username, expires],\n });\n return token;\n}\n\nexport async function validateSession(token: string): Promise {\n const now = Math.floor(Date.now() / 1000);\n const r = await sqlite.execute({\n sql: \"SELECT 1 FROM panel_sessions WHERE token=? AND expires_at > ?\",\n args: [token, now],\n });\n return r.rows.length > 0;\n}\n\nexport async function deleteSession(token: string) {\n await sqlite.execute({ sql: \"DELETE FROM panel_sessions WHERE token=?\", args: [token] });\n}\n\nexport async function consumeReferrals(userId: number, amount: number) {\n await sqlite.execute({\n sql: \"UPDATE users SET referral_count = referral_count - ? WHERE tg_id=?\",\n args: [amount, userId],\n });\n}\n",[],[213,230],"cd2ce288-3f22-11f1-b2aa-42b51c65c3df",["D",1776955412887],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","ScottHub - Telegram Bot Hosting Platform","imageUrl","userId","676437db-cba0-454f-b925-a9cf4a24f1b1","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019dbac9-2381-7248-9dc7-2d22f6f0f7af","tursoName","cd2ce2883f2211f1b2aa42b51c65c3df","tursoHostname","cd2ce2883f2211f1b2aa42b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789506649022],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_293":289},"org",{"_11":12,"_287":-5,"_288":289,"_247":248,"_290":291,"_292":60},"branch",{"_17":122,"_13":16,"_39":47,"_279":237,"_280":-5,"_281":-5,"_282":-5,"_283":-5,"_284":-5,"_285":14,"_286":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_39":237,"_13":14,"_52":392,"_239":-5,"_240":60,"_241":242,"_243":242,"_244":245,"_246":-5,"_247":248,"_249":111,"_250":51,"_251":-5,"_252":-5,"_253":54,"_254":255,"_256":257,"_258":259,"_260":393,"_262":-5,"_263":264,"_265":264,"_266":267,"_268":267,"_269":267,"_270":264,"_271":264,"_272":394,"_274":395,"_276":396,"_278":60},[335,338,345,347,351,353],"files",[335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353],"counts",{"_326":54,"_327":215,"_328":54,"_32":329,"_330":331},[314,315,316,317,318,319],{"_39":98,"_13":19,"_42":45,"_44":-5,"_46":47,"_48":99,"_50":51,"_52":100,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_18":313},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],{"_39":91,"_13":92,"_42":93,"_44":45,"_46":47,"_48":94,"_50":51,"_52":95,"_17":54,"_55":56,"_57":96,"_59":60,"_61":-5,"_18":325},{"_39":84,"_13":85,"_42":86,"_44":45,"_46":47,"_48":87,"_50":51,"_52":88,"_17":54,"_55":56,"_57":89,"_59":60,"_61":-5,"_18":324},{"_39":77,"_13":78,"_42":79,"_44":45,"_46":47,"_48":80,"_50":51,"_52":81,"_17":54,"_55":56,"_57":82,"_59":60,"_61":-5,"_18":323},{"_39":70,"_13":71,"_42":72,"_44":45,"_46":47,"_48":73,"_50":51,"_52":74,"_17":54,"_55":56,"_57":75,"_59":60,"_61":-5,"_18":322},{"_39":63,"_13":64,"_42":65,"_44":45,"_46":47,"_48":66,"_50":51,"_52":67,"_17":54,"_55":56,"_57":68,"_59":60,"_61":-5,"_18":321},{"_39":40,"_13":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_17":54,"_55":56,"_57":58,"_59":60,"_61":-5,"_18":320},[19,41],[19,64],[19,71],[19,78],[19,85],[19,92],"pulls","branches","forks",{"_332":54,"_334":54},"connections",{"_332":54,"_333":54},"count","unfilledCount","emptyCount",{"_39":212,"_13":213,"_42":214,"_44":-5,"_46":47,"_48":215,"_50":51,"_52":216,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_116":390,"_18":391},{"_39":229,"_13":230,"_42":231,"_44":214,"_46":47,"_48":232,"_50":51,"_52":233,"_17":54,"_55":56,"_57":234,"_59":60,"_61":-5,"_116":388,"_18":389},{"_39":221,"_13":222,"_42":223,"_44":214,"_46":47,"_48":224,"_50":51,"_52":225,"_17":54,"_55":56,"_57":226,"_59":60,"_61":-5,"_116":386,"_18":387},{"_39":98,"_13":19,"_42":45,"_44":-5,"_46":47,"_48":99,"_50":51,"_52":185,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_116":384,"_18":385},{"_39":91,"_13":92,"_42":93,"_44":45,"_46":47,"_48":94,"_50":51,"_52":209,"_17":54,"_55":56,"_57":96,"_59":60,"_61":-5,"_116":382,"_18":383},{"_39":84,"_13":85,"_42":86,"_44":45,"_46":47,"_48":87,"_50":51,"_52":206,"_17":54,"_55":56,"_57":89,"_59":60,"_61":-5,"_116":380,"_18":381},{"_39":77,"_13":78,"_42":79,"_44":45,"_46":47,"_48":80,"_50":51,"_52":203,"_17":54,"_55":56,"_57":82,"_59":60,"_61":-5,"_116":378,"_18":379},{"_39":70,"_13":71,"_42":72,"_44":45,"_46":47,"_48":73,"_50":51,"_52":200,"_17":54,"_55":56,"_57":75,"_59":60,"_61":-5,"_116":376,"_18":377},{"_39":63,"_13":64,"_42":65,"_44":45,"_46":47,"_48":66,"_50":51,"_52":197,"_17":54,"_55":56,"_57":68,"_59":60,"_61":-5,"_116":374,"_18":375},{"_39":40,"_13":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":194,"_17":54,"_55":56,"_57":58,"_59":60,"_61":-5,"_116":372,"_18":373},{"_39":168,"_13":169,"_42":170,"_44":-5,"_46":47,"_48":171,"_50":51,"_52":172,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_116":370,"_18":371},{"_39":176,"_13":177,"_42":178,"_44":170,"_46":47,"_48":179,"_50":51,"_52":180,"_17":54,"_55":181,"_57":182,"_59":60,"_61":-5,"_116":368,"_18":369},{"_39":134,"_13":135,"_42":136,"_44":-5,"_46":47,"_48":137,"_50":51,"_52":138,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_116":366,"_18":367},{"_39":160,"_13":161,"_42":162,"_44":136,"_46":47,"_48":163,"_50":51,"_52":164,"_17":54,"_55":56,"_57":165,"_59":60,"_61":-5,"_116":364,"_18":365},{"_39":152,"_13":153,"_42":154,"_44":136,"_46":47,"_48":155,"_50":51,"_52":156,"_17":54,"_55":56,"_57":157,"_59":60,"_61":-5,"_116":362,"_18":363},{"_39":144,"_13":145,"_42":146,"_44":136,"_46":47,"_48":147,"_50":51,"_52":148,"_17":54,"_55":56,"_57":149,"_59":60,"_61":-5,"_116":360,"_18":361},{"_39":119,"_13":120,"_42":121,"_44":-5,"_46":47,"_48":122,"_50":51,"_52":123,"_17":54,"_55":101,"_57":-5,"_59":60,"_61":-5,"_116":358,"_18":359},{"_39":127,"_13":128,"_42":129,"_44":121,"_46":47,"_48":122,"_50":51,"_52":130,"_17":54,"_55":56,"_57":131,"_59":60,"_61":-5,"_116":356,"_18":357},{"_39":109,"_13":110,"_42":111,"_44":-5,"_46":47,"_48":112,"_50":51,"_52":113,"_17":54,"_55":114,"_57":115,"_59":60,"_61":-5,"_116":354,"_18":355},[],[110],[],[120,128],[352],[120],[],[135,145],[],[135,153],[],[135,161],[348,349,350],[135],[],[169,177],[346],[169],[],[19,41],[],[19,64],[],[19,71],[],[19,78],[],[19,85],[],[19,92],[339,340,341,342,343,344],[19],[],[213,222],[],[213,230],[336,337],[213],["D",1776955412887],["D",1789506649022],{"_11":12,"_293":289},{"_11":12,"_287":-5,"_288":289,"_247":248,"_290":291,"_292":60},{"_17":122,"_13":16,"_39":47,"_279":237,"_280":-5,"_281":-5,"_282":-5,"_283":-5,"_284":-5,"_285":14,"_286":12},"ctx",{"_272":-5,"_310":430,"_431":432,"_433":434,"_435":60,"_436":60,"_437":60,"_438":51,"_439":-5,"_440":-7,"_441":-7,"_442":54,"_443":60,"_444":60,"_445":-5,"_446":60,"_447":60,"_448":60,"_449":-5},"ENV",{"_401":402,"_403":404,"_405":16,"_406":407,"_408":409,"_410":411,"_412":413,"_414":415,"_416":417,"_418":419,"_420":421,"_422":423,"_424":425,"_426":427,"_428":429},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]