[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_116":-5,"_20":117,"_22":118,"_119":120,"_121":122,"_26":123,"_24":124,"_125":-5,"_126":-5,"_127":56,"_128":129,"_130":53,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","haidaralwan1998com","name","Bothaidarss","branchName","main","version","path","main.ts","project",{"_33":60,"_13":14,"_45":61,"_62":-5,"_63":56,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":38,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":56},"tree",[51],"file",{"_33":34,"_35":36,"_37":38,"_13":19,"_39":40,"_41":42,"_17":43,"_44":-5,"_45":46,"_47":48,"_49":-5,"_18":50},"contents",[],"upstream","pull","ahead","behind","envVars","id","5628178e-11d3-47c2-91b8-3e2d1ceec7bf","branchId","3f53951c-e3fc-40c7-acb1-a8fd2a9fdf60","fileId","033ffc94-9bf2-11f1-912a-1607ee4eb77e","content","/* ══════════════════════════════════════════════════════════════\n بوت مقعد — رموز الدخول / الاستعادة / ربط الحساب\n Val.town → HTTP val (الويب هوك)\n ──────────────────────────────────────────────────────────────\n لا تُنشئ Val جديداً عند التعديل — عدّل هذا الـ Val نفسه\n حتى لا يتغيّر رابط الويب هوك.\n بعد الحفظ: افتح الرابط <رابط الفال>?setup=1 مرة واحدة\n════════════════════════════════════════════════════════════════ */\n\nconst BOT_TOKEN = \"8891980019:AAEU94888JNpNeOaVqkbcVVr5llPlnbKiaM\";\n\nconst API_KEY = \"AIzaSyCPGyvu3IZEYthgbWPsVtrKemI6XA3Nmck\";\nconst DB =\n \"https://mugad-3033a-default-rtdb.asia-southeast1.firebasedatabase.app\";\n\n/* حساب خدمة البوت داخل Firebase Auth — يُنشأ تلقائياً أول مرة.\n امنحه الصلاحيات في قواعد قاعدة البيانات (انظر التعليمات). */\nconst BOT_EMAIL = \"bot@maqaad.app\";\nconst BOT_PASS = \"ir9hq0I1U1m8RwY29IpC4tq6DytyPNueYoWR\";\n\nconst MAIL_DOMAIN = \"maqaad.app\";\nconst CODE_TTL_MS = 5 * 60 * 1000;\nconst ALPHA = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // بلا I O 0 1\n\n/* ───────── أدوات ───────── */\nfunction newCode(n = 8) {\n const b = new Uint32Array(n);\n crypto.getRandomValues(b);\n let s = \"\";\n for (let i = 0; i < n; i++) s += ALPHA[b[i] % ALPHA.length];\n return s;\n}\nfunction newPass(n = 30) {\n const A = \"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789\";\n const b = new Uint32Array(n);\n crypto.getRandomValues(b);\n let s = \"\";\n for (let i = 0; i < n; i++) s += A[b[i] % A.length];\n return s;\n}\n\nasync function tg(method, body) {\n const r = await fetch(`https://api.telegram.org/bot${BOT_TOKEN}/${method}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body || {}),\n });\n return r.json();\n}\nconst say = (chat_id, text, extra = {}) =>\n tg(\"sendMessage\", { chat_id, text, parse_mode: \"HTML\", ...extra });\n\n/* ───────── Firebase ───────── */\nlet _tok = null, _tokExp = 0;\nasync function idToken() {\n if (_tok && Date.now() < _tokExp) return _tok;\n const body = {\n email: BOT_EMAIL,\n password: BOT_PASS,\n returnSecureToken: true,\n };\n let r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signInWithPassword?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n let d = await r.json();\n if (d.error) {\n // أول تشغيل: أنشئ حساب البوت\n r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signUp?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n d = await r.json();\n if (d.error) throw new Error(\"bot-auth: \" + d.error.message);\n }\n _tok = d.idToken;\n _tokExp = Date.now() + 45 * 60 * 1000;\n return _tok;\n}\nasync function authSignUp(email, password) {\n const r = await fetch(\n `https://identitytoolkit.googleapis.com/v1/accounts:signUp?key=${API_KEY}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ email, password, returnSecureToken: false }),\n },\n );\n return r.json();\n}\nasync function dbGet(path) {\n const t = await idToken();\n const r = await fetch(`${DB}/${path}.json?auth=${t}`);\n if (!r.ok) throw new Error(\"db-get \" + r.status + \" \" + (await r.text()));\n return r.json();\n}\nasync function dbPut(path, value) {\n const t = await idToken();\n const r = await fetch(`${DB}/${path}.json?auth=${t}`, {\n method: \"PUT\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(value),\n });\n if (!r.ok) throw new Error(\"db-put \" + r.status + \" \" + (await r.text()));\n return r.json();\n}\nasync function dbDel(path) {\n const t = await idToken();\n await fetch(`${DB}/${path}.json?auth=${t}`, { method: \"DELETE\" });\n}\n\n/* ───────── الواجهة ───────── */\nconst MENU = {\n inline_keyboard: [\n [{ text: \"🔐 رمز الدخول\", callback_data: \"c_login\" }],\n [{ text: \"🔁 استعادة كلمة المرور\", callback_data: \"c_reset\" }],\n [{ text: \"🔗 رمز ربط الحساب\", callback_data: \"c_link\" }],\n ],\n};\nconst WELCOME = \"🚗 مقعد — منصة نقل الطلبة\\n\\n\" +\n \"اختر ما تريد، وسأرسل لك رمزاً صالحاً ٥ دقائق تلصقه داخل التطبيق:\\n\\n\" +\n \"🔐 رمز الدخول — للدخول أو إنشاء حساب جديد\\n\" +\n \"🔁 استعادة كلمة المرور — إن نسيتها\\n\" +\n \"🔗 رمز ربط الحساب — لربط حسابك الحالي بالبوت\";\n\nasync function issueCode(purpose, from, chatId) {\n const tgId = String(from.id);\n const username = from.username || \"\";\n const name = [from.first_name, from.last_name].filter(Boolean).join(\" \")\n .trim();\n\n // امسح رمز المستخدم السابق إن وُجد\n try {\n const last = await dbGet(`tgAuth/last/${tgId}`);\n if (last) await dbDel(`tgAuth/codes/${last}`);\n } catch (e) {}\n\n const payload = {\n tgId,\n username,\n name,\n purpose,\n at: Date.now(),\n exp: Date.now() + CODE_TTL_MS,\n };\n\n if (purpose !== \"link\") {\n const map = await dbGet(`tgAuth/users/${tgId}`);\n if (map && map.linked) {\n return say(\n chatId,\n \"🔗 حسابك مربوط بحساب بريد إلكتروني داخل التطبيق.\\n\" +\n \"سجّل الدخول بالبريد وكلمة المرور، والبوت يبقى لإشعاراتك.\",\n );\n }\n let email, pass, isNew = false;\n const vault = await dbGet(`tgAuth/vault/${tgId}`);\n if (map && map.email && vault && vault.pass) {\n email = map.email;\n pass = vault.pass;\n } else {\n /* لا نملك مفتاح الحساب. إن كان البريد الأساسي محجوزاً من محاولة فاشلة\n سابقة (EMAIL_EXISTS) نجرّب بريداً بديلاً — الحساب القديم يتيم بلا ملف. */\n pass = newPass();\n let su = null;\n const tries = [\n `tg${tgId}@${MAIL_DOMAIN}`,\n `tg${tgId}.${newCode(4).toLowerCase()}@${MAIL_DOMAIN}`,\n `tg${tgId}.${newCode(6).toLowerCase()}@${MAIL_DOMAIN}`,\n ];\n for (const cand of tries) {\n su = await authSignUp(cand, pass);\n if (!su.error) {\n email = cand;\n break;\n }\n if (!String(su.error.message).startsWith(\"EMAIL_EXISTS\")) break;\n }\n if (!email) {\n return say(\n chatId,\n \"⚠️ تعذّر تجهيز حسابك: \" + (su?.error?.message || \"unknown\") +\n \"\\nراسل الإدارة.\",\n );\n }\n isNew = true;\n await dbPut(`tgAuth/users/${tgId}`, {\n uid: su.localId,\n email,\n at: Date.now(),\n });\n await dbPut(`tgAuth/vault/${tgId}`, { pass, at: Date.now() });\n }\n payload.email = email;\n payload.pass = pass;\n payload.isNew = isNew;\n }\n\n const code = newCode();\n await dbPut(`tgAuth/codes/${code}`, payload);\n await dbPut(`tgAuth/last/${tgId}`, code);\n\n const title = purpose === \"reset\"\n ? \"🔁 رمز استعادة كلمة المرور\"\n : purpose === \"link\"\n ? \"🔗 رمز ربط الحساب\"\n : \"🔐 رمز الدخول\";\n return say(\n chatId,\n `${title}\\n\\n${code}\\n\\n` +\n \"انسخه والصقه داخل التطبيق خلال ٥ دقائق.\\nالرمز يُستعمل مرة واحدة فقط.\",\n );\n}\n\n/* ───────── معالجة التحديثات ───────── */\nlet _cfgDone = false;\nasync function ensureConfig() {\n if (_cfgDone) return;\n try {\n const me = await tg(\"getMe\");\n if (me.ok && me.result.username) {\n await dbPut(\"tgConfig/bot\", {\n username: me.result.username,\n at: Date.now(),\n });\n _cfgDone = true;\n }\n } catch (e) {}\n}\n\nasync function handle(u) {\n await ensureConfig();\n\n if (u.callback_query) {\n const q = u.callback_query;\n const map = { c_login: \"login\", c_reset: \"reset\", c_link: \"link\" };\n const p = map[q.data];\n await tg(\"answerCallbackQuery\", { callback_query_id: q.id });\n if (p) {\n try {\n await issueCode(p, q.from, q.message.chat.id);\n } catch (e) {\n await say(\n q.message.chat.id,\n \"⚠️ خطأ: \" + String(e.message || e) + \"\",\n );\n }\n }\n return;\n }\n\n const m = u.message;\n if (!m || !m.text) return;\n const chatId = m.chat.id;\n const txt = m.text.trim();\n\n if (txt.startsWith(\"/start\")) {\n const arg = txt.split(/\\s+/)[1] || \"\";\n // أزل أي كيبورد قديم عالق من نسخة بوت سابقة\n try {\n const tmp = await say(chatId, \"…\", {\n reply_markup: { remove_keyboard: true },\n });\n if (tmp && tmp.result) {\n await tg(\"deleteMessage\", {\n chat_id: chatId,\n message_id: tmp.result.message_id,\n });\n }\n } catch (e) {}\n if ([\"login\", \"reset\", \"link\"].includes(arg)) {\n try {\n return await issueCode(arg, m.from, chatId);\n } catch (e) {\n return say(\n chatId,\n \"⚠️ خطأ: \" + String(e.message || e) + \"\",\n );\n }\n }\n return say(chatId, WELCOME, { reply_markup: MENU });\n }\n if (txt === \"/id\") {\n return say(chatId, \"معرّفك: \" + m.from.id + \"\");\n }\n return say(chatId, WELCOME, { reply_markup: MENU });\n}\n\n/* ───────── نقطة الدخول ───────── */\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\") {\n if (url.searchParams.get(\"setup\") === \"1\") {\n const hook = url.origin + url.pathname;\n const r = await tg(\"setWebhook\", {\n url: hook,\n drop_pending_updates: true,\n });\n const me = await tg(\"getMe\");\n await ensureConfig();\n return Response.json({ webhook: hook, setWebhook: r, me: me.result });\n }\n if (url.searchParams.get(\"health\") === \"1\") {\n const out = { botAuth: \"?\", dbWrite: \"?\", dbRead: \"?\", codeRead: \"?\" };\n try {\n await idToken();\n out.botAuth = \"ok ✅\";\n } catch (e) {\n out.botAuth = \"FAIL ❌ \" + String(e.message || e);\n return Response.json(out);\n }\n try {\n await dbPut(\"tgAuth/_health\", { at: Date.now() });\n out.dbWrite = \"ok ✅\";\n } catch (e) {\n out.dbWrite = \"FAIL ❌ \" + String(e.message || e);\n }\n try {\n await dbGet(\"tgAuth/users/0\");\n out.dbRead = \"ok ✅\";\n } catch (e) {\n out.dbRead = \"FAIL ❌ \" + String(e.message || e);\n }\n try {\n const r = await fetch(`${DB}/tgAuth/codes/ZZTEST.json`); // بلا auth: يجب أن ينجح\n out.codeRead = r.ok\n ? \"ok ✅\"\n : \"FAIL ❌ \" + r.status + \" — قاعدة قراءة tgAuth/codes ناقصة\";\n } catch (e) {\n out.codeRead = \"FAIL ❌ \" + String(e.message || e);\n }\n return Response.json(out);\n }\n return new Response(\"Maqaad bot v2 is running ✅\", {\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n }\n\n try {\n const update = await req.json();\n await handle(update);\n } catch (e) {\n console.error(e);\n }\n return new Response(\"ok\");\n}","fileType","http",2,"parentId","createdAt",["D",1787159933521],"branchVersion",3,"label",[19],{"_33":34,"_13":19,"_37":38,"_44":-5,"_35":36,"_47":48,"_52":53,"_45":54,"_17":43,"_41":42,"_39":40,"_55":56,"_49":-5,"_57":58,"_18":59},"latest",true,["D",1787159933521],"deleted",false,"children",[],[19],"aed56dc6-8529-4cd3-a497-e85446785232",["D",1787159916374],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","0fa2d276-e4b4-41ff-8df9-f8be38478e65","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e9c9c-1d1d-73e1-a365-a3ec7e13d222","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_115":111},"org",{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":56},"branch",{"_17":48,"_13":16,"_33":36,"_100":60,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","حيدر فليح","avatar","https://lh3.googleusercontent.com/a/ACg8ocID628aoEVnB-Ug2GtIZ47fhb5VEACZ8oE8tqogJ1PsjSzwag=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":60,"_13":14,"_45":150,"_62":-5,"_63":56,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":38,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":151,"_95":152,"_97":153,"_99":56},[147],"files",[147],"counts",{"_137":77,"_138":139,"_140":77,"_32":141,"_142":143},[],{"_33":34,"_35":36,"_37":38,"_13":19,"_39":40,"_41":42,"_17":43,"_44":-5,"_45":135,"_47":48,"_49":-5,"_18":136},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1787159933521],[19],"pulls","branches",1,"forks",{"_144":77,"_146":77},"connections",{"_144":77,"_145":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":19,"_37":38,"_44":-5,"_35":36,"_47":48,"_52":53,"_45":54,"_17":43,"_41":42,"_39":40,"_55":56,"_49":-5,"_57":148,"_18":149},[],[19],["D",1787159916374],{"_11":12,"_115":111},{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":56},{"_17":48,"_13":16,"_33":36,"_100":60,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_132":187,"_188":189,"_190":191,"_192":56,"_193":56,"_194":56,"_195":53,"_196":-5,"_197":-7,"_198":-7,"_199":77,"_200":56,"_201":56,"_202":-5,"_203":56,"_204":56,"_205":56,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":16,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]