[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_152":153,"_154":155},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":36,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":25,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":36,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",2,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","548d486e-9bf1-11f1-bd68-1607ee4eb77e","name","fileType","script","content","","/* ══════════════════════════════════════════════════════════════\n بوت مقعد — رموز الدخول / الاستعادة / ربط الحساب\n Val.town → HTTP val (الويب هوك)\n ──────────────────────────────────────────────────────────────\n لا تُنشئ Val جديداً عند التعديل — عدّل هذا الـ Val نفسه\n حتى لا يتغيّر رابط الويب هوك.\n بعد الحفظ: افتح الرابط <رابط الفال>?setup=1 مرة واحدة\n════════════════════════════════════════════════════════════════ */\n\nconst BOT_TOKEN = \"8891980019:AAEU94888JNpNeOaVqkbcVVr5llPlnbKiaM\";\n\nconst API_KEY = \"AIzaSyCPGyvu3IZEYthgbWPsVtrKemI6XA3Nmck\";\nconst DB =\n \"https://mugad-3033a-default-rtdb.asia-southeast1.firebasedatabase.app\";\n\n/* حساب خدمة البوت داخل Firebase Auth — يُنشأ تلقائياً أول مرة.\n امنحه الصلاحيات في قواعد قاعدة البيانات (انظر التعليمات). */\nconst BOT_EMAIL = \"bot@maqaad.app\";\nconst BOT_PASS = \"ir9hq0I1U1m8RwY29IpC4tq6DytyPNueYoWR\";\n\nconst MAIL_DOMAIN = \"maqaad.app\";\nconst CODE_TTL_MS = 5 * 60 * 1000;\nconst ALPHA = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // بلا I O 0 1\n\n/* ───────── أدوات ───────── */\nfunction newCode(n = 8) {\n const b = new Uint32Array(n);\n crypto.getRandomValues(b);\n let s = \"\";\n for (let i = 0; i < n; i++) s += ALPHA[b[i] % ALPHA.length];\n return s;\n}\nfunction newPass(n = 30) {\n const A = \"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789\";\n const b = new Uint32Array(n);\n crypto.getRandomValues(b);\n let s = \"\";\n for (let i = 0; i < n; i++) s += A[b[i] % A.length];\n return s;\n}\n\nasync function tg(method, body) {\n const r = await fetch(`https://api.telegram.org/bot${BOT_TOKEN}/${method}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body || {}),\n });\n return r.json();\n}\nconst say = (chat_id, text, extra = {}) =>\n tg(\"sendMessage\", { chat_id, text, parse_mode: \"HTML\", ...extra });\n\n/* ───────── Firebase ───────── */\nlet _tok = null, _tokExp = 0;\nasync function idToken() {\n if (_tok && Date.now() < _tokExp) return _tok;\n const body = {\n email: BOT_EMAIL,\n password: BOT_PASS,\n returnSecureToken: true,\n };\n let r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signInWithPassword?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n let d = await r.json();\n if (d.error) {\n // أول تشغيل: أنشئ حساب البوت\n r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signUp?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n d = await r.json();\n if (d.error) throw new Error(\"bot-auth: \" + d.error.message);\n }\n _tok = d.idToken;\n _tokExp = Date.now() + 45 * 60 * 1000;\n return _tok;\n}\nasync function authSignUp(email, password) {\n const r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signUp?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ email, password, returnSecureToken: false }),\n },\n );\n return r.json();\n}\nasync function dbGet(path) {\n const t = await idToken();\n const r = await fetch(`${DB}/${path}.json?auth=${t}`);\n if (!r.ok) throw new Error(\"db-get \" + r.status + \" \" + (await r.text()));\n return r.json();\n}\nasync function dbPut(path, value) {\n const t = await idToken();\n const r = await fetch(`${DB}/${path}.json?auth=${t}`, {\n method: \"PUT\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(value),\n });\n if (!r.ok) throw new Error(\"db-put \" + r.status + \" \" + (await r.text()));\n return r.json();\n}\nasync function dbDel(path) {\n const t = await idToken();\n await fetch(`${DB}/${path}.json?auth=${t}`, { method: \"DELETE\" });\n}\n\n/* ───────── الواجهة ───────── */\nconst MENU = {\n inline_keyboard: [\n [{ text: \"🔐 رمز الدخول\", callback_data: \"c_login\" }],\n [{ text: \"🔁 استعادة كلمة المرور\", callback_data: \"c_reset\" }],\n [{ text: \"🔗 رمز ربط الحساب\", callback_data: \"c_link\" }],\n ],\n};\nconst WELCOME = \"🚗 مقعد — منصة نقل الطلبة\\n\\n\" +\n \"اختر ما تريد، وسأرسل لك رمزاً صالحاً ٥ دقائق تلصقه داخل التطبيق:\\n\\n\" +\n \"🔐 رمز الدخول — للدخول أو إنشاء حساب جديد\\n\" +\n \"🔁 استعادة كلمة المرور — إن نسيتها\\n\" +\n \"🔗 رمز ربط الحساب — لربط حسابك الحالي بالبوت\";\n\nasync function issueCode(purpose, from, chatId) {\n const tgId = String(from.id);\n const username = from.username || \"\";\n const name = [from.first_name, from.last_name].filter(Boolean).join(\" \")\n .trim();\n\n // امسح رمز المستخدم السابق إن وُجد\n try {\n const last = await dbGet(`tgAuth/last/${tgId}`);\n if (last) await dbDel(`tgAuth/codes/${last}`);\n } catch (e) {}\n\n const payload = {\n tgId,\n username,\n name,\n purpose,\n at: Date.now(),\n exp: Date.now() + CODE_TTL_MS,\n };\n\n if (purpose !== \"link\") {\n const map = await dbGet(`tgAuth/users/${tgId}`);\n if (map && map.linked) {\n return say(\n chatId,\n \"🔗 حسابك مربوط بحساب بريد إلكتروني داخل التطبيق.\\n\" +\n \"سجّل الدخول بالبريد وكلمة المرور، والبوت يبقى لإشعاراتك.\",\n );\n }\n let email, pass, isNew = false;\n const vault = await dbGet(`tgAuth/vault/${tgId}`);\n if (map && map.email && vault && vault.pass) {\n email = map.email;\n pass = vault.pass;\n } else {\n /* لا نملك مفتاح الحساب. إن كان البريد الأساسي محجوزاً من محاولة فاشلة\n سابقة (EMAIL_EXISTS) نجرّب بريداً بديلاً — الحساب القديم يتيم بلا ملف. */\n pass = newPass();\n let su = null;\n const tries = [\n `tg${tgId}@${MAIL_DOMAIN}`,\n `tg${tgId}.${newCode(4).toLowerCase()}@${MAIL_DOMAIN}`,\n `tg${tgId}.${newCode(6).toLowerCase()}@${MAIL_DOMAIN}`,\n ];\n for (const cand of tries) {\n su = await authSignUp(cand, pass);\n if (!su.error) {\n email = cand;\n break;\n }\n if (!String(su.error.message).startsWith(\"EMAIL_EXISTS\")) break;\n }\n if (!email) {\n return say(\n chatId,\n \"⚠️ تعذّر تجهيز حسابك: \" + (su?.error?.message || \"unknown\") +\n \"\\nراسل الإدارة.\",\n );\n }\n isNew = true;\n await dbPut(`tgAuth/users/${tgId}`, {\n uid: su.localId,\n email,\n at: Date.now(),\n });\n await dbPut(`tgAuth/vault/${tgId}`, { pass, at: Date.now() });\n }\n payload.email = email;\n payload.pass = pass;\n payload.isNew = isNew;\n }\n\n const code = newCode();\n await dbPut(`tgAuth/codes/${code}`, payload);\n await dbPut(`tgAuth/last/${tgId}`, code);\n\n const title = purpose === \"reset\"\n ? \"🔁 رمز استعادة كلمة المرور\"\n : purpose === \"link\"\n ? \"🔗 رمز ربط الحساب\"\n : \"🔐 رمز الدخول\";\n return say(\n chatId,\n `${title}\\n\\n${code}\\n\\n` +\n \"انسخه والصقه داخل التطبيق خلال ٥ دقائق.\\nالرمز يُستعمل مرة واحدة فقط.\",\n );\n}\n\n/* ───────── معالجة التحديثات ───────── */\nlet _cfgDone = false;\nasync function ensureConfig() {\n if (_cfgDone) return;\n try {\n const me = await tg(\"getMe\");\n if (me.ok && me.result.username) {\n await dbPut(\"tgConfig/bot\", {\n username: me.result.username,\n at: Date.now(),\n });\n _cfgDone = true;\n }\n } catch (e) {}\n}\n\nasync function handle(u) {\n await ensureConfig();\n\n if (u.callback_query) {\n const q = u.callback_query;\n const map = { c_login: \"login\", c_reset: \"reset\", c_link: \"link\" };\n const p = map[q.data];\n await tg(\"answerCallbackQuery\", { callback_query_id: q.id });\n if (p) {\n try {\n await issueCode(p, q.from, q.message.chat.id);\n } catch (e) {\n await say(\n q.message.chat.id,\n \"⚠️ خطأ: \" + String(e.message || e) + \"\",\n );\n }\n }\n return;\n }\n\n const m = u.message;\n if (!m || !m.text) return;\n const chatId = m.chat.id;\n const txt = m.text.trim();\n\n if (txt.startsWith(\"/start\")) {\n const arg = txt.split(/\\s+/)[1] || \"\";\n if ([\"login\", \"reset\", \"link\"].includes(arg)) {\n try {\n return await issueCode(arg, m.from, chatId);\n } catch (e) {\n return say(\n chatId,\n \"⚠️ خطأ: \" + String(e.message || e) + \"\",\n );\n }\n }\n return say(chatId, WELCOME, { reply_markup: MENU });\n }\n if (txt === \"/id\") {\n return say(chatId, \"معرّفك: \" + m.from.id + \"\");\n }\n return say(chatId, WELCOME, { reply_markup: MENU });\n}\n\n/* ───────── نقطة الدخول ───────── */\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\") {\n if (url.searchParams.get(\"setup\") === \"1\") {\n const hook = url.origin + url.pathname;\n const r = await tg(\"setWebhook\", {\n url: hook,\n drop_pending_updates: true,\n });\n const me = await tg(\"getMe\");\n await ensureConfig();\n return Response.json({ webhook: hook, setWebhook: r, me: me.result });\n }\n if (url.searchParams.get(\"health\") === \"1\") {\n const out = { botAuth: \"?\", dbWrite: \"?\", dbRead: \"?\", codeRead: \"?\" };\n try {\n await idToken();\n out.botAuth = \"ok ✅\";\n } catch (e) {\n out.botAuth = \"FAIL ❌ \" + String(e.message || e);\n return Response.json(out);\n }\n try {\n await dbPut(\"tgAuth/_health\", { at: Date.now() });\n out.dbWrite = \"ok ✅\";\n } catch (e) {\n out.dbWrite = \"FAIL ❌ \" + String(e.message || e);\n }\n try {\n await dbGet(\"tgAuth/users/0\");\n out.dbRead = \"ok ✅\";\n } catch (e) {\n out.dbRead = \"FAIL ❌ \" + String(e.message || e);\n }\n try {\n const r = await fetch(`${DB}/tgAuth/codes/ZZTEST.json`); // بلا auth: يجب أن ينجح\n out.codeRead = r.ok\n ? \"ok ✅\"\n : \"FAIL ❌ \" + r.status + \" — قاعدة قراءة tgAuth/codes ناقصة\";\n } catch (e) {\n out.codeRead = \"FAIL ❌ \" + String(e.message || e);\n }\n return Response.json(out);\n }\n return new Response(\"Maqaad bot is running ✅\", {\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n }\n\n try {\n const update = await req.json();\n await handle(update);\n } catch (e) {\n console.error(e);\n }\n return new Response(\"ok\");\n}","createdAt",["D",1787159636086],"branchVersion","branchId","542ea068-a426-4907-a900-cb0782d03701","id","9685680b-dbbc-4c4d-ba63-36f3e2810af5","Bothaidarq",["D",1787159623282],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","0fa2d276-e4b4-41ff-8df9-f8be38478e65","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019e9c9c-1d1d-73e1-a365-a3ec7e13d222","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":54,"_100":101,"_102":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",3,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","haidaralwan1998com","handle","displayName","حيدر فليح","avatar","https://lh3.googleusercontent.com/a/ACg8ocID628aoEVnB-Ug2GtIZ47fhb5VEACZ8oE8tqogJ1PsjSzwag=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":148,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":36,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":149,"_79":150,"_81":151,"_83":25},"tree",[143],"files",[143],"counts",{"_133":61,"_134":130,"_135":61,"_136":137,"_138":139},"contents",[125],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":129,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_27":132},"d0d31567-38ed-4a2c-ac1f-c42e8bbc8392","parentId","latest",["D",1787159636086],1,"label",[28],"pulls","branches","forks","envVars",{"_140":61,"_142":61},"connections",{"_140":61,"_141":61},"count","unfilledCount","emptyCount",{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":144,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_145":146,"_27":147},["D",1787159636086],"children",[],[28],["D",1787159623282],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":54,"_100":101,"_102":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_122":185,"_186":187,"_188":189,"_190":25,"_191":25,"_192":25,"_193":57,"_194":-5,"_195":-7,"_196":-7,"_197":61,"_198":25,"_199":25,"_200":-5,"_201":25,"_202":25,"_203":25,"_204":-5},"ENV",{"_156":157,"_158":159,"_160":85,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2