[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_116":-5,"_20":117,"_22":118,"_119":120,"_121":122,"_25":123,"_24":-5,"_124":-5,"_125":-5,"_126":53,"_127":128,"_129":44,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","haidaralwan1998com","name","Bothaidarq","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":19,"_69":-5,"_70":71,"_72":37,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","daf44196-a611-4ecd-8fad-bac5be4636f0","main.ts","fileId","548d486e-9bf1-11f1-bd68-1607ee4eb77e","parentId","branchId","542ea068-a426-4907-a900-cb0782d03701","branchVersion",3,"latest",true,"createdAt",["D",1787159641479],2,"fileType","http","content","/* ══════════════════════════════════════════════════════════════\n بوت مقعد — رموز الدخول / الاستعادة / ربط الحساب\n Val.town → HTTP val (الويب هوك)\n ──────────────────────────────────────────────────────────────\n لا تُنشئ Val جديداً عند التعديل — عدّل هذا الـ Val نفسه\n حتى لا يتغيّر رابط الويب هوك.\n بعد الحفظ: افتح الرابط <رابط الفال>?setup=1 مرة واحدة\n════════════════════════════════════════════════════════════════ */\n\nconst BOT_TOKEN = \"8891980019:AAEU94888JNpNeOaVqkbcVVr5llPlnbKiaM\";\n\nconst API_KEY = \"AIzaSyCPGyvu3IZEYthgbWPsVtrKemI6XA3Nmck\";\nconst DB =\n \"https://mugad-3033a-default-rtdb.asia-southeast1.firebasedatabase.app\";\n\n/* حساب خدمة البوت داخل Firebase Auth — يُنشأ تلقائياً أول مرة.\n امنحه الصلاحيات في قواعد قاعدة البيانات (انظر التعليمات). */\nconst BOT_EMAIL = \"bot@maqaad.app\";\nconst BOT_PASS = \"ir9hq0I1U1m8RwY29IpC4tq6DytyPNueYoWR\";\n\nconst MAIL_DOMAIN = \"maqaad.app\";\nconst CODE_TTL_MS = 5 * 60 * 1000;\nconst ALPHA = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // بلا I O 0 1\n\n/* ───────── أدوات ───────── */\nfunction newCode(n = 8) {\n const b = new Uint32Array(n);\n crypto.getRandomValues(b);\n let s = \"\";\n for (let i = 0; i < n; i++) s += ALPHA[b[i] % ALPHA.length];\n return s;\n}\nfunction newPass(n = 30) {\n const A = \"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789\";\n const b = new Uint32Array(n);\n crypto.getRandomValues(b);\n let s = \"\";\n for (let i = 0; i < n; i++) s += A[b[i] % A.length];\n return s;\n}\n\nasync function tg(method, body) {\n const r = await fetch(`https://api.telegram.org/bot${BOT_TOKEN}/${method}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body || {}),\n });\n return r.json();\n}\nconst say = (chat_id, text, extra = {}) =>\n tg(\"sendMessage\", { chat_id, text, parse_mode: \"HTML\", ...extra });\n\n/* ───────── Firebase ───────── */\nlet _tok = null, _tokExp = 0;\nasync function idToken() {\n if (_tok && Date.now() < _tokExp) return _tok;\n const body = {\n email: BOT_EMAIL,\n password: BOT_PASS,\n returnSecureToken: true,\n };\n let r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signInWithPassword?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n let d = await r.json();\n if (d.error) {\n // أول تشغيل: أنشئ حساب البوت\n r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signUp?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n d = await r.json();\n if (d.error) throw new Error(\"bot-auth: \" + d.error.message);\n }\n _tok = d.idToken;\n _tokExp = Date.now() + 45 * 60 * 1000;\n return _tok;\n}\nasync function authSignUp(email, password) {\n const r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signUp?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ email, password, returnSecureToken: false }),\n },\n );\n return r.json();\n}\nasync function dbGet(path) {\n const t = await idToken();\n const r = await fetch(`${DB}/${path}.json?auth=${t}`);\n if (!r.ok) throw new Error(\"db-get \" + r.status + \" \" + (await r.text()));\n return r.json();\n}\nasync function dbPut(path, value) {\n const t = await idToken();\n const r = await fetch(`${DB}/${path}.json?auth=${t}`, {\n method: \"PUT\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(value),\n });\n if (!r.ok) throw new Error(\"db-put \" + r.status + \" \" + (await r.text()));\n return r.json();\n}\nasync function dbDel(path) {\n const t = await idToken();\n await fetch(`${DB}/${path}.json?auth=${t}`, { method: \"DELETE\" });\n}\n\n/* ───────── الواجهة ───────── */\nconst MENU = {\n inline_keyboard: [\n [{ text: \"🔐 رمز الدخول\", callback_data: \"c_login\" }],\n [{ text: \"🔁 استعادة كلمة المرور\", callback_data: \"c_reset\" }],\n [{ text: \"🔗 رمز ربط الحساب\", callback_data: \"c_link\" }],\n ],\n};\nconst WELCOME = \"🚗 مقعد — منصة نقل الطلبة\\n\\n\" +\n \"اختر ما تريد، وسأرسل لك رمزاً صالحاً ٥ دقائق تلصقه داخل التطبيق:\\n\\n\" +\n \"🔐 رمز الدخول — للدخول أو إنشاء حساب جديد\\n\" +\n \"🔁 استعادة كلمة المرور — إن نسيتها\\n\" +\n \"🔗 رمز ربط الحساب — لربط حسابك الحالي بالبوت\";\n\nasync function issueCode(purpose, from, chatId) {\n const tgId = String(from.id);\n const username = from.username || \"\";\n const name = [from.first_name, from.last_name].filter(Boolean).join(\" \")\n .trim();\n\n // امسح رمز المستخدم السابق إن وُجد\n try {\n const last = await dbGet(`tgAuth/last/${tgId}`);\n if (last) await dbDel(`tgAuth/codes/${last}`);\n } catch (e) {}\n\n const payload = {\n tgId,\n username,\n name,\n purpose,\n at: Date.now(),\n exp: Date.now() + CODE_TTL_MS,\n };\n\n if (purpose !== \"link\") {\n const map = await dbGet(`tgAuth/users/${tgId}`);\n if (map && map.linked) {\n return say(\n chatId,\n \"🔗 حسابك مربوط بحساب بريد إلكتروني داخل التطبيق.\\n\" +\n \"سجّل الدخول بالبريد وكلمة المرور، والبوت يبقى لإشعاراتك.\",\n );\n }\n let email, pass, isNew = false;\n const vault = await dbGet(`tgAuth/vault/${tgId}`);\n if (map && map.email && vault && vault.pass) {\n email = map.email;\n pass = vault.pass;\n } else {\n /* لا نملك مفتاح الحساب. إن كان البريد الأساسي محجوزاً من محاولة فاشلة\n سابقة (EMAIL_EXISTS) نجرّب بريداً بديلاً — الحساب القديم يتيم بلا ملف. */\n pass = newPass();\n let su = null;\n const tries = [\n `tg${tgId}@${MAIL_DOMAIN}`,\n `tg${tgId}.${newCode(4).toLowerCase()}@${MAIL_DOMAIN}`,\n `tg${tgId}.${newCode(6).toLowerCase()}@${MAIL_DOMAIN}`,\n ];\n for (const cand of tries) {\n su = await authSignUp(cand, pass);\n if (!su.error) {\n email = cand;\n break;\n }\n if (!String(su.error.message).startsWith(\"EMAIL_EXISTS\")) break;\n }\n if (!email) {\n return say(\n chatId,\n \"⚠️ تعذّر تجهيز حسابك: \" + (su?.error?.message || \"unknown\") +\n \"\\nراسل الإدارة.\",\n );\n }\n isNew = true;\n await dbPut(`tgAuth/users/${tgId}`, {\n uid: su.localId,\n email,\n at: Date.now(),\n });\n await dbPut(`tgAuth/vault/${tgId}`, { pass, at: Date.now() });\n }\n payload.email = email;\n payload.pass = pass;\n payload.isNew = isNew;\n }\n\n const code = newCode();\n await dbPut(`tgAuth/codes/${code}`, payload);\n await dbPut(`tgAuth/last/${tgId}`, code);\n\n const title = purpose === \"reset\"\n ? \"🔁 رمز استعادة كلمة المرور\"\n : purpose === \"link\"\n ? \"🔗 رمز ربط الحساب\"\n : \"🔐 رمز الدخول\";\n return say(\n chatId,\n `${title}\\n\\n${code}\\n\\n` +\n \"انسخه والصقه داخل التطبيق خلال ٥ دقائق.\\nالرمز يُستعمل مرة واحدة فقط.\",\n );\n}\n\n/* ───────── معالجة التحديثات ───────── */\nlet _cfgDone = false;\nasync function ensureConfig() {\n if (_cfgDone) return;\n try {\n const me = await tg(\"getMe\");\n if (me.ok && me.result.username) {\n await dbPut(\"tgConfig/bot\", {\n username: me.result.username,\n at: Date.now(),\n });\n _cfgDone = true;\n }\n } catch (e) {}\n}\n\nasync function handle(u) {\n await ensureConfig();\n\n if (u.callback_query) {\n const q = u.callback_query;\n const map = { c_login: \"login\", c_reset: \"reset\", c_link: \"link\" };\n const p = map[q.data];\n await tg(\"answerCallbackQuery\", { callback_query_id: q.id });\n if (p) {\n try {\n await issueCode(p, q.from, q.message.chat.id);\n } catch (e) {\n await say(\n q.message.chat.id,\n \"⚠️ خطأ: \" + String(e.message || e) + \"\",\n );\n }\n }\n return;\n }\n\n const m = u.message;\n if (!m || !m.text) return;\n const chatId = m.chat.id;\n const txt = m.text.trim();\n\n if (txt.startsWith(\"/start\")) {\n const arg = txt.split(/\\s+/)[1] || \"\";\n if ([\"login\", \"reset\", \"link\"].includes(arg)) {\n try {\n return await issueCode(arg, m.from, chatId);\n } catch (e) {\n return say(\n chatId,\n \"⚠️ خطأ: \" + String(e.message || e) + \"\",\n );\n }\n }\n return say(chatId, WELCOME, { reply_markup: MENU });\n }\n if (txt === \"/id\") {\n return say(chatId, \"معرّفك: \" + m.from.id + \"\");\n }\n return say(chatId, WELCOME, { reply_markup: MENU });\n}\n\n/* ───────── نقطة الدخول ───────── */\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\") {\n if (url.searchParams.get(\"setup\") === \"1\") {\n const hook = url.origin + url.pathname;\n const r = await tg(\"setWebhook\", {\n url: hook,\n drop_pending_updates: true,\n });\n const me = await tg(\"getMe\");\n await ensureConfig();\n return Response.json({ webhook: hook, setWebhook: r, me: me.result });\n }\n if (url.searchParams.get(\"health\") === \"1\") {\n const out = { botAuth: \"?\", dbWrite: \"?\", dbRead: \"?\", codeRead: \"?\" };\n try {\n await idToken();\n out.botAuth = \"ok ✅\";\n } catch (e) {\n out.botAuth = \"FAIL ❌ \" + String(e.message || e);\n return Response.json(out);\n }\n try {\n await dbPut(\"tgAuth/_health\", { at: Date.now() });\n out.dbWrite = \"ok ✅\";\n } catch (e) {\n out.dbWrite = \"FAIL ❌ \" + String(e.message || e);\n }\n try {\n await dbGet(\"tgAuth/users/0\");\n out.dbRead = \"ok ✅\";\n } catch (e) {\n out.dbRead = \"FAIL ❌ \" + String(e.message || e);\n }\n try {\n const r = await fetch(`${DB}/tgAuth/codes/ZZTEST.json`); // بلا auth: يجب أن ينجح\n out.codeRead = r.ok\n ? \"ok ✅\"\n : \"FAIL ❌ \" + r.status + \" — قاعدة قراءة tgAuth/codes ناقصة\";\n } catch (e) {\n out.codeRead = \"FAIL ❌ \" + String(e.message || e);\n }\n return Response.json(out);\n }\n return new Response(\"Maqaad bot is running ✅\", {\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n }\n\n try {\n const update = await req.json();\n await handle(update);\n } catch (e) {\n console.error(e);\n }\n return new Response(\"ok\");\n}","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1787159641479],"children",[],[35],"9685680b-dbbc-4c4d-ba63-36f3e2810af5",["D",1787159623282],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","0fa2d276-e4b4-41ff-8df9-f8be38478e65","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e9c9c-1d1d-73e1-a365-a3ec7e13d222","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_115":111},"org",{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":53},"branch",{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","حيدر فليح","avatar","https://lh3.googleusercontent.com/a/ACg8ocID628aoEVnB-Ug2GtIZ47fhb5VEACZ8oE8tqogJ1PsjSzwag=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":149,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":19,"_69":-5,"_70":71,"_72":37,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":150,"_95":151,"_97":152,"_99":53},[146],"files",[146],"counts",{"_136":77,"_137":138,"_139":77,"_31":140,"_141":142},[134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":135},[35],"pulls","branches",1,"forks",{"_143":77,"_145":77},"connections",{"_143":77,"_144":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":147,"_18":148},[],[35],["D",1787159623282],{"_11":12,"_115":111},{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":53},{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_131":186,"_187":188,"_189":190,"_191":53,"_192":53,"_193":53,"_194":44,"_195":-5,"_196":-7,"_197":-7,"_198":77,"_199":53,"_200":53,"_201":-5,"_202":53,"_203":53,"_204":53,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":16,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]