[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_156":157,"_158":159},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_117":-5,"_20":118,"_22":119,"_120":121,"_122":123,"_26":124,"_24":125,"_126":-5,"_127":-5,"_128":52,"_129":130,"_131":43,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","khny92162","name","VAL_DEEPSEEK","branchName","main","version","path","main.ts","project",{"_33":60,"_13":14,"_44":61,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":85,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":97,"_98":99,"_100":101,"_102":52},"tree",[55],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":54},"contents",[],"upstream","pull","ahead","behind","envVars","id","bc1f55c3-3279-4e9c-a474-109ff95d2523","fileId","74a50e2a-b096-11f1-8116-1607ee4eb77e","parentId","branchId","b6c293e8-42f9-4df5-9f42-7baf71c54e5e","branchVersion",38,"latest",true,"createdAt",["D",1789483017382],35,"fileType","http","content","// ============================================================\n// Yemot Phone Bot v6.1 - Lean & Natural\n// ============================================================\n// • No heavy prompts - the AI talks naturally, ONE static\n// one-line system prompt (Groq caches it automatically:\n// faster TTFT + cached tokens don't count toward TPM limits)\n// • All protections are CODE-level, not prompt-level:\n// keyword censorship, rate limit, path validation, redaction,\n// context-injection filter, leak detection, refusal fallback\n// • AI guard models optional via GUARDS_ENABLED env (default off)\n// • Hard latency budget: total < 4s\n// ============================================================\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ═══════════════════════════════════════════════════════════\n// CONFIGURATION\n// ═══════════════════════════════════════════════════════════\n\nconst DOWNLOAD_TIMEOUT_MS = 2000;\nconst WHISPER_TIMEOUT_MS = 2500;\nconst SEARCH_TIMEOUT_MS = 1800;\nconst LLM_TIMEOUT_MS = 2500;\nconst CENSOR_TIMEOUT_MS = 1000;\n\nconst MAX_COMPLETION_TOKENS = 280;\nconst GUARD_MAX_TOKENS = 16;\nconst TAVILY_RESULTS = 2;\nconst TAVILY_CONTENT_MAX = 200;\nconst TAVILY_FALLBACK_MAX = 220;\n\nconst TTS_MAX_CHARS = 400;\nconst TTS_SPLIT_THRESHOLD = 430;\n\nconst DAILY_LIMIT = 50;\nconst MAX_RECORDING_PATH_LENGTH = 200;\n\nconst MAX_UNLOCK_ATTEMPTS = 3;\nconst MAX_UNLOCK_MESSAGE_LENGTH = 20;\nconst REDACT_MARKER = \" חסום \";\n\nconst CANARY_TOKEN = \"CANARY-XYZ789-ALPHA-UNIQUE\";\nconst SYSTEM_PROMPT_OVERLAP_THRESHOLD = 0.4;\nconst CLEANUP_OLDER_THAN = \"-1 day\";\nconst CLEANUP_PROBABILITY = 0.05;\nconst HISTORY_KEEP = 4;\nconst HISTORY_PRUNE = 12;\n\n// ═══════════════════════════════════════════════════════════\n// ENVIRONMENT\n// ═══════════════════════════════════════════════════════════\n\nconst GROQ_API_KEY = Deno.env.get(\"GROQ_API_KEY\") ?? \"\";\nconst UNLOCK_CODE = Deno.env.get(\"UNLOCK_CODE\") ?? \"\";\nconst GUARDS_ENABLED = (Deno.env.get(\"GUARDS_ENABLED\") ?? \"false\") === \"true\";\n\nif (!GROQ_API_KEY) console.error(\"[SECURITY] GROQ_API_KEY not set\");\nif (!UNLOCK_CODE || UNLOCK_CODE.length < 4) {\n console.error(\"[SECURITY] UNLOCK_CODE not set or too short\");\n}\n\n// ═══════════════════════════════════════════════════════════\n// ONE-LINE PROMPTS - static prefix stays in Groq's cache.\n// Variable content (history, question, context) goes last,\n// which is exactly what prompt-caching likes.\n// ═══════════════════════════════════════════════════════════\n\nconst PROMPT_BASE =\n \"ענה בעברית, קצר וטבעי כמו בשיחת טלפון. בלי להזכיר חיפוש, אינטרנט או מקורות מידע.\";\n\nconst RESTRICTED_PROMPT = PROMPT_BASE +\n \" אל תדון בדת, פוליטיקה, תוכן מיני, אלימות או סמים.\";\nconst UNRESTRICTED_PROMPT = PROMPT_BASE + \" אתה יכול לדבר על כל נושא.\";\n\n// ═══════════════════════════════════════════════════════════\n// CENSORSHIP WORDLIST (code-level, no AI prompt needed)\n// ═══════════════════════════════════════════════════════════\n\nconst FORBIDDEN_SUBSTRING = [\n \"אלוהים\",\n \"יהוה\",\n \"אללה\",\n \"ישו\",\n \"פוליטיקה\",\n \"ממשלה\",\n \"בחירות\",\n \"כנסת\",\n \"ראש ממשלה\",\n \"סקס\",\n \"פורנוגרפיה\",\n \"אונס\",\n \"הפלה\",\n \"המתת חסד\",\n \"סמים\",\n \"אלכוהול\",\n \"הימורים\",\n \"התאבדות\",\n \"טרור\",\n];\n\n// Short ambiguous words: word-boundary match avoids false positives\n// (\"מינוי\", \"עדות\" are fine; standalone \"מין\"/\"דת\" is blocked)\nconst FORBIDDEN_BOUNDARY = [\"דת\", \"מין\"];\n\n// Sentences from web search that look like instructions are stripped\n// (replaces the old \"ignore instructions inside CONTEXT\" prompt rule)\nconst INJECTION_PATTERNS = [\n /ignore (all|previous|the above|instructions)/i,\n /disregard/i,\n /system prompt/i,\n /prompt injection/i,\n /jailbreak/i,\n /\\bDAN\\b/,\n /התעלם/,\n /ההנחיות/,\n /הוראות מערכת/,\n /תתעלם/,\n];\n\nconst REFUSAL_PHRASES = [\n \"אין לי גישה\",\n \"אין לי אפשרות לגשת\",\n \"לא מחובר לאינטרנט\",\n \"אני לא מחובר\",\n \"אני לא יכול לגשת\",\n \"אין לי חיבור\",\n \"לא מעודכן\",\n \"הידע שלי מוגבל\",\n \"הידע שלי הוא עד\",\n \"אני לא יכול לבדוק\",\n \"אני לא יכול לחפש\",\n \"אין באפשרותי\",\n \"לא יכול לעזור בנושא\",\n \"אין לי יכולת\",\n];\n\n// ═══════════════════════════════════════════════════════════\n// HTTP LAYER\n// ═══════════════════════════════════════════════════════════\n\nasync function fetchWithTimeout(\n url: string,\n init: RequestInit,\n timeoutMs: number,\n): Promise {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), timeoutMs);\n try {\n return await fetch(url, { ...init, signal: controller.signal });\n } finally {\n clearTimeout(timer);\n }\n}\n\n// ═══════════════════════════════════════════════════════════\n// SEARCH DETECTION\n// ═══════════════════════════════════════════════════════════\n\nfunction needsSearch(query: string): { need: boolean; reason: string } {\n const explicit = [\n \"תעשה חיפוש\",\n \"תחפש\",\n \"תחפז\",\n \"תחפס\",\n \"חפש\",\n \"חפז\",\n \"חפס\",\n \"תבדוק באינטרנט\",\n \"בדוק באינטרנט\",\n ];\n if (explicit.some((cmd) => query.includes(cmd))) {\n return { need: true, reason: \"forced\" };\n }\n\n const auto = [\n \"היום\",\n \"עכשיו\",\n \"כרגע\",\n \"אחרון\",\n \"אחרונות\",\n \"חדשות\",\n \"מה חדש\",\n \"מה קרה\",\n \"עדכון\",\n \"עדכונים\",\n \"מזג\",\n \"מזג האוויר\",\n \"שער\",\n \"מחיר\",\n \"מתי\",\n \"2026\",\n \"2027\",\n \"מניות\",\n \"בורסה\",\n \"דולר\",\n \"יורו\",\n \"ביטקוין\",\n ];\n if (auto.some((keyword) => query.includes(keyword))) {\n return { need: true, reason: \"auto\" };\n }\n\n return { need: false, reason: \"no\" };\n}\n\nfunction cleanQuery(query: string): string {\n let cleaned = query;\n const strip = [\n \"תעשה חיפוש\",\n \"תחפש\",\n \"תחפז\",\n \"תחפס\",\n \"חפש\",\n \"חפז\",\n \"חפס\",\n \"תבדוק באינטרנט\",\n \"בדוק באינטרנט\",\n \"בבקשה\",\n \"אפשר\",\n \"בעצם\",\n \"אז\",\n ];\n for (const word of strip) {\n cleaned = cleaned.replace(new RegExp(word, \"g\"), \" \");\n }\n return cleaned.replace(/\\s+/g, \" \").trim();\n}\n\nfunction getTimeRange(query: string): string | undefined {\n if (/היום|עכשיו|כרגע/.test(query)) return \"day\";\n if (/השבוע|אחרון|אחרונות/.test(query)) return \"week\";\n if (/החודש/.test(query)) return \"month\";\n if (/השנה/.test(query)) return \"year\";\n return undefined;\n}\n\nfunction getTopic(query: string): string {\n if (/חדשות|מה קרה|מה חדש|עדכון/.test(query)) return \"news\";\n if (/מניות|בורסה|שער|דולר|יורו|ביטקוין/.test(query)) return \"finance\";\n return \"general\";\n}\n\n// ═══════════════════════════════════════════════════════════\n// UNLOCK CODE REDACTION\n// ═══════════════════════════════════════════════════════════\n\nfunction redactUnlockCode(text: string): string {\n if (!text || !UNLOCK_CODE) return text;\n const digitPattern = UNLOCK_CODE.split(\"\").join(\"[\\\\s\\\\-_.]*\");\n const regex = new RegExp(digitPattern, \"g\");\n return text.replace(regex, REDACT_MARKER);\n}\n\n// ═══════════════════════════════════════════════════════════\n// TTS CLEANING\n// ═══════════════════════════════════════════════════════════\n\nfunction cleanForTTS(text: string, max = TTS_MAX_CHARS): string {\n if (!text) return \"\";\n\n let cleaned = redactUnlockCode(text);\n\n cleaned = cleaned\n .replace(/[\\u{1F300}-\\u{1FAFF}]/gu, \"\")\n .replace(/[\\u{2600}-\\u{26FF}]/gu, \"\")\n .replace(/[*_~#>]/g, \"\")\n .replace(/[=&|\"{}[\\]]/g, \" \")\n .replace(/[\\u2013\\u2014\\u2015]/g, \"-\")\n .replace(/[\\u2022\\u25CF\\u25CB]/g, \"-\")\n .replace(/\\n+/g, \" \")\n .replace(/\\s+/g, \" \")\n .trim();\n\n if (cleaned.length > max) {\n cleaned = cleaned.slice(0, max);\n const lastPeriod = cleaned.lastIndexOf(\".\");\n if (lastPeriod > max * 0.6) {\n cleaned = cleaned.slice(0, lastPeriod + 1);\n }\n }\n\n if (cleaned && !/[.!?]$/.test(cleaned)) {\n cleaned += \".\";\n }\n\n return cleaned;\n}\n\n// ═══════════════════════════════════════════════════════════\n// RESPONSE BUILDERS (Yemot command format)\n// ═══════════════════════════════════════════════════════════\n\nfunction buildReadResponse(text: string, nextVar: string): string {\n const cleaned = cleanForTTS(text);\n const safeText = cleaned || \"רגע, אני חושב.\";\n\n const readCmd = (t: string) =>\n `read=t-${t}=${nextVar},no,record,/9/9,user_query_temp,no,yes,no,,15`;\n\n if (safeText.length <= TTS_SPLIT_THRESHOLD) {\n return readCmd(safeText);\n }\n\n let cut = safeText.lastIndexOf(\".\", TTS_SPLIT_THRESHOLD);\n if (cut < TTS_SPLIT_THRESHOLD * 0.5) {\n cut = safeText.lastIndexOf(\" \", TTS_SPLIT_THRESHOLD);\n }\n if (cut < 100) cut = TTS_SPLIT_THRESHOLD;\n\n const part1 = safeText.slice(0, cut + 1).trim();\n const part2 = safeText.slice(cut + 1).trim();\n\n if (!part2) return readCmd(part1);\n\n return `id_list_message=t-${part1}&${readCmd(part2)}`;\n}\n\nfunction textResponse(body: string): Response {\n return new Response(body, {\n headers: { \"Content-Type\": \"text/plain; charset=utf-8\" },\n });\n}\n\nfunction hangupResponse(text: string): string {\n return `id_list_message=t-${cleanForTTS(text)}&go_to_folder=hangup`;\n}\n\n// ═══════════════════════════════════════════════════════════\n// LEAK DETECTION (n-gram overlap vs system prompt)\n// ═══════════════════════════════════════════════════════════\n\nfunction extractNgrams(text: string, n = 5): Set {\n const words = text\n .toLowerCase()\n .replace(/[^\\w\\u0590-\\u05FF\\s]/g, \"\")\n .split(/\\s+/)\n .filter((word) => word.length > 2);\n const ngrams = new Set();\n for (let i = 0; i <= words.length - n; i++) {\n ngrams.add(words.slice(i, i + n).join(\" \"));\n }\n return ngrams;\n}\n\nfunction overlapRatio(textA: string, textB: string): number {\n const ngramsA = extractNgrams(textA);\n const ngramsB = extractNgrams(textB);\n if (!ngramsA.size || !ngramsB.size) return 0;\n let overlap = 0;\n for (const ngram of ngramsA) {\n if (ngramsB.has(ngram)) overlap++;\n }\n return overlap / Math.min(ngramsA.size, ngramsB.size);\n}\n\nfunction isSystemPromptLeak(answer: string, systemPrompt: string): boolean {\n return answer.includes(CANARY_TOKEN) ||\n overlapRatio(answer, systemPrompt) > SYSTEM_PROMPT_OVERLAP_THRESHOLD;\n}\n\n// ═══════════════════════════════════════════════════════════\n// UNLOCK CODE HANDLING\n// ═══════════════════════════════════════════════════════════\n\nfunction detectUnlockCode(query: string): boolean {\n if (!UNLOCK_CODE) return false;\n const trimmed = query.trim();\n if (trimmed.length > MAX_UNLOCK_MESSAGE_LENGTH) return false;\n const cleaned = trimmed.replace(/[^\\d]/g, \"\");\n return cleaned === UNLOCK_CODE && cleaned.length >= 4;\n}\n\nfunction isPureDigitsMessage(query: string): boolean {\n return /^\\s*\\d{3,8}\\s*$/.test(query.trim());\n}\n\nfunction generateAnonCallId(params: URLSearchParams): string {\n const parts = [\n params.get(\"ApiExtension\"),\n params.get(\"ApiRealCaller\"),\n params.get(\"ApiDID\"),\n params.get(\"ApiPhone\"),\n ].filter(Boolean).join(\"-\");\n return `anon-${parts || Math.floor(Date.now() / 60000)}-${\n Math.random().toString(36).slice(2, 8)\n }`;\n}\n\n// ═══════════════════════════════════════════════════════════\n// CENSORSHIP\n// Layer 1: keywords - always on, instant, no API call\n// Layers 2+3: AI guards - optional (GUARDS_ENABLED=true),\n// run in PARALLEL with the Tavily search when enabled\n// ═══════════════════════════════════════════════════════════\n\nfunction isForbiddenKeyword(query: string): boolean {\n const lower = query.toLowerCase();\n if (FORBIDDEN_SUBSTRING.some((word) => lower.includes(word))) return true;\n return FORBIDDEN_BOUNDARY.some((word) => {\n const re = new RegExp(`(^|[^א-ת])${word}($|[^א-ת])`, \"i\");\n return re.test(lower);\n });\n}\n\nasync function checkGroqModel(query: string, model: string): Promise {\n if (!GROQ_API_KEY) return \"\";\n try {\n const resp = await fetchWithTimeout(\n \"https://api.groq.com/openai/v1/chat/completions\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${GROQ_API_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n model,\n messages: [{ role: \"user\", content: query }],\n max_completion_tokens: GUARD_MAX_TOKENS,\n temperature: 0.0,\n }),\n },\n CENSOR_TIMEOUT_MS,\n );\n if (!resp.ok) return \"\";\n const data = await resp.json();\n return (data.choices?.[0]?.message?.content || \"\").trim().toLowerCase();\n } catch {\n return \"\";\n }\n}\n\nasync function isPromptInjection(query: string): Promise {\n const out = await checkGroqModel(\n query,\n \"meta-llama/llama-prompt-guard-2-86m\",\n );\n return /unsafe|malicious|injection|jailbreak|label_1/.test(out);\n}\n\nasync function isUnsafeContent(query: string): Promise {\n const out = await checkGroqModel(query, \"openai/gpt-oss-safeguard-20b\");\n return out.startsWith(\"unsafe\");\n}\n\nasync function runCensorshipGuards(query: string): Promise {\n const [injection, unsafe] = await Promise.all([\n isPromptInjection(query),\n isUnsafeContent(query),\n ]);\n if (injection) return \"injection\";\n if (unsafe) return \"unsafe\";\n return null;\n}\n\nfunction detectRefusal(answer: string): boolean {\n return REFUSAL_PHRASES.some((phrase) => answer.includes(phrase));\n}\n\n// ═══════════════════════════════════════════════════════════\n// SQLITE SETUP\n// ═══════════════════════════════════════════════════════════\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS history (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n call_id TEXT NOT NULL,\n role TEXT NOT NULL,\n content TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )\n`);\nawait sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_call ON history(call_id, id)`,\n);\nawait sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_history_created ON history(created_at)`,\n);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessions (\n call_id TEXT PRIMARY KEY,\n unlocked INTEGER DEFAULT 0,\n attempts INTEGER DEFAULT 0,\n updated_at TEXT NOT NULL DEFAULT (datetime('now'))\n )\n`);\nawait sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_sessions_updated ON sessions(updated_at)`,\n);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS usage (\n phone TEXT NOT NULL,\n day TEXT NOT NULL,\n count INTEGER NOT NULL DEFAULT 0,\n PRIMARY KEY (phone, day)\n )\n`);\n\n// ═══════════════════════════════════════════════════════════\n// DATABASE HELPERS\n// ═══════════════════════════════════════════════════════════\n\nasync function cleanupOldData(): Promise {\n try {\n await sqlite.batch([\n {\n sql: `DELETE FROM sessions WHERE updated_at < datetime('now', ?)`,\n args: [CLEANUP_OLDER_THAN],\n },\n {\n sql: `DELETE FROM history WHERE created_at < datetime('now', ?)`,\n args: [CLEANUP_OLDER_THAN],\n },\n {\n sql: `DELETE FROM usage WHERE day < date('now', ?)`,\n args: [CLEANUP_OLDER_THAN],\n },\n ]);\n } catch (error) {\n console.log(`[CLEANUP] Failed: ${(error as Error).message}`);\n }\n}\n\nasync function getSession(\n callId: string,\n): Promise<{ unlocked: boolean; attempts: number }> {\n await sqlite.execute({\n sql:\n `INSERT OR IGNORE INTO sessions (call_id, unlocked, attempts) VALUES (?, 0, 0)`,\n args: [callId],\n });\n const result = await sqlite.execute({\n sql: `SELECT unlocked, attempts FROM sessions WHERE call_id = ?`,\n args: [callId],\n });\n const row = result.rows[0] as any;\n return row\n ? { unlocked: row.unlocked === 1, attempts: row.attempts }\n : { unlocked: false, attempts: 0 };\n}\n\nasync function updateSession(\n callId: string,\n unlocked: boolean,\n attempts: number,\n): Promise {\n await sqlite.execute({\n sql: `INSERT INTO sessions (call_id, unlocked, attempts, updated_at)\n VALUES (?, ?, ?, datetime('now'))\n ON CONFLICT(call_id) DO UPDATE SET\n unlocked = ?,\n attempts = ?,\n updated_at = datetime('now')`,\n args: [callId, unlocked ? 1 : 0, attempts, unlocked ? 1 : 0, attempts],\n });\n}\n\nasync function getHistory(\n callId: string,\n): Promise<{ role: string; content: string }[]> {\n const result = await sqlite.execute({\n sql:\n `SELECT role, content FROM history WHERE call_id = ? ORDER BY id DESC LIMIT ?`,\n args: [callId, HISTORY_KEEP],\n });\n return (result.rows as unknown as { role: string; content: string }[])\n .reverse();\n}\n\nasync function saveExchange(\n callId: string,\n userMsg: string,\n assistantMsg: string,\n): Promise {\n await sqlite.batch([\n {\n sql: `INSERT INTO history (call_id, role, content) VALUES (?, 'user', ?)`,\n args: [callId, userMsg],\n },\n {\n sql:\n `INSERT INTO history (call_id, role, content) VALUES (?, 'assistant', ?)`,\n args: [callId, assistantMsg],\n },\n {\n sql: `DELETE FROM history WHERE call_id = ? AND id NOT IN (\n SELECT id FROM history WHERE call_id = ? ORDER BY id DESC LIMIT ?\n )`,\n args: [callId, callId, HISTORY_PRUNE],\n },\n ]);\n}\n\nasync function clearSession(callId: string): Promise {\n await sqlite.batch([\n { sql: `DELETE FROM history WHERE call_id = ?`, args: [callId] },\n { sql: `DELETE FROM sessions WHERE call_id = ?`, args: [callId] },\n ]);\n}\n\nasync function isOverDailyLimit(phone: string): Promise {\n const today = new Date().toISOString().slice(0, 10);\n const result = await sqlite.execute({\n sql: `SELECT count FROM usage WHERE phone = ? AND day = ?`,\n args: [phone, today],\n });\n const row = result.rows[0] as any;\n return !!row && (row.count as number) >= DAILY_LIMIT;\n}\n\nasync function incrementUsage(phone: string): Promise {\n const today = new Date().toISOString().slice(0, 10);\n await sqlite.execute({\n sql: `INSERT INTO usage (phone, day, count) VALUES (?, ?, 1)\n ON CONFLICT(phone, day) DO UPDATE SET count = count + 1`,\n args: [phone, today],\n });\n}\n\n// ═══════════════════════════════════════════════════════════\n// YEMOT FILE DOWNLOAD + PATH TRAVERSAL PROTECTION\n// ═══════════════════════════════════════════════════════════\n\nfunction sanitizeRecordingPath(path: string): string {\n if (!path) return \"\";\n if (path.length > MAX_RECORDING_PATH_LENGTH) return \"\";\n if (!/^ivr2:\\/[A-Za-z0-9_\\-\\/\\.]+$/i.test(path)) return \"\";\n const segments = path.replace(/^ivr2:/, \"\").split(\"/\");\n if (segments.includes(\"..\")) return \"\";\n return path;\n}\n\nasync function downloadRecording(recordingPath: string): Promise {\n const token = Deno.env.get(\"YEMOT_TOKEN\");\n if (!token) throw new Error(\"YEMOT_TOKEN not set\");\n\n const path = sanitizeRecordingPath(recordingPath);\n if (!path) throw new Error(\"invalid recording path\");\n\n const base = Deno.env.get(\"YEMOT_BASE\") ||\n \"https://www.call2all.co.il/ym/api\";\n const url = `${base}/DownloadFile?token=${encodeURIComponent(token)}&path=${\n encodeURIComponent(path)\n }`;\n\n const res = await fetchWithTimeout(url, {}, DOWNLOAD_TIMEOUT_MS);\n if (!res.ok) throw new Error(`DownloadFile HTTP ${res.status}`);\n\n return new Uint8Array(await res.arrayBuffer());\n}\n\n// ═══════════════════════════════════════════════════════════\n// WHISPER TRANSCRIPTION\n// ═══════════════════════════════════════════════════════════\n\nasync function transcribe(audio: Uint8Array): Promise {\n if (!GROQ_API_KEY) throw new Error(\"GROQ_API_KEY not set\");\n\n const form = new FormData();\n form.append(\"file\", new Blob([audio], { type: \"audio/wav\" }), \"rec.wav\");\n form.append(\"model\", \"whisper-large-v3-turbo\");\n form.append(\"language\", \"he\");\n form.append(\"response_format\", \"json\");\n form.append(\"prompt\", \"שיחה טלפונית בעברית, שאלות ותשובות יומיומיות\");\n form.append(\"temperature\", \"0\");\n\n const res = await fetchWithTimeout(\n \"https://api.groq.com/openai/v1/audio/transcriptions\",\n {\n method: \"POST\",\n headers: { Authorization: `Bearer ${GROQ_API_KEY}` },\n body: form,\n },\n WHISPER_TIMEOUT_MS,\n );\n\n if (!res.ok) throw new Error(`Whisper HTTP ${res.status}`);\n\n const data = await res.json();\n return (data.text || \"\").trim();\n}\n\n// ═══════════════════════════════════════════════════════════\n// GROQ LLM - single fast attempt, short static prompt\n// (Groq prompt caching keeps the cached prefix out of your\n// TPM limit automatically - no code changes needed)\n// ═══════════════════════════════════════════════════════════\n\nasync function askLLM(\n messages: { role: string; content: string }[],\n systemPrompt: string,\n): Promise {\n const res = await fetchWithTimeout(\n \"https://api.groq.com/openai/v1/chat/completions\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${GROQ_API_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n model: \"openai/gpt-oss-120b\",\n messages,\n max_completion_tokens: MAX_COMPLETION_TOKENS,\n reasoning_effort: \"low\",\n include_reasoning: false,\n temperature: 0.5,\n }),\n },\n LLM_TIMEOUT_MS,\n );\n\n if (!res.ok) throw new Error(`LLM HTTP ${res.status}`);\n\n const data = await res.json();\n let answer = (data.choices?.[0]?.message?.content || \"\").trim();\n if (!answer) throw new Error(\"empty answer\");\n\n if (isSystemPromptLeak(answer, systemPrompt)) {\n console.log(\"[SECURITY] system prompt leak detected - blocked\");\n answer = \"אני לא יכול לענות על זה. אפשר לשאול משהו אחר?\";\n }\n\n return answer;\n}\n\n// ═══════════════════════════════════════════════════════════\n// TAVILY SEARCH + context sanitizing\n// ═══════════════════════════════════════════════════════════\n\nfunction sanitizeSearchContext(raw: string): string {\n const flat = raw.replace(/\\s+/g, \" \").trim();\n const sentences = flat.split(/(?<=[.!?])\\s+/);\n const clean = sentences.filter(\n (s) => s.length > 10 && !INJECTION_PATTERNS.some((p) => p.test(s)),\n );\n return clean.join(\" \").slice(0, TAVILY_CONTENT_MAX * TAVILY_RESULTS);\n}\n\nasync function searchTavily(query: string): Promise {\n const TAVILY_API_KEY = Deno.env.get(\"TAVILY_API_KEY\");\n if (!TAVILY_API_KEY) return \"\";\n\n const body: Record = {\n query: cleanQuery(query),\n search_depth: \"basic\",\n max_results: TAVILY_RESULTS,\n include_answer: false,\n };\n\n const timeRange = getTimeRange(query);\n if (timeRange) body.time_range = timeRange;\n\n const topic = getTopic(query);\n if (topic !== \"general\") body.topic = topic;\n\n const startTime = Date.now();\n try {\n const resp = await fetchWithTimeout(\n \"https://api.tavily.com/search\",\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${TAVILY_API_KEY}`,\n },\n body: JSON.stringify(body),\n },\n SEARCH_TIMEOUT_MS,\n );\n\n console.log(`[TAVILY] ${Date.now() - startTime}ms, status=${resp.status}`);\n if (!resp.ok) return \"\";\n\n const data = await resp.json();\n const raw = (Array.isArray(data.results) ? data.results : [])\n .map((r: any) => (r.content ?? \"\").slice(0, TAVILY_CONTENT_MAX))\n .filter(Boolean)\n .join(\" \");\n\n const cleaned = sanitizeSearchContext(raw);\n console.log(`[TAVILY] ${cleaned.length} chars context`);\n return cleaned;\n } catch (error) {\n console.log(\n `[TAVILY] failed (${Date.now() - startTime}ms): ${\n (error as Error).message\n }`,\n );\n return \"\";\n }\n}\n\n// Fallback when the LLM refuses or times out: first clean sentences,\n// never a raw dump\nfunction formatTavilyFallback(context: string): string {\n const flat = context.replace(/\\s+/g, \" \").trim();\n const sentences = flat.split(/(?<=[.!?])\\s+/).filter((s) => s.length > 10);\n let out = \"\";\n for (const sentence of sentences) {\n const candidate = (out + \" \" + sentence).trim();\n if (candidate.length > TAVILY_FALLBACK_MAX) break;\n out = candidate;\n if (out.length > 80) break;\n }\n out = cleanForTTS(out, TAVILY_FALLBACK_MAX);\n return out || \"לא הצלחתי למצוא תשובה מדויקת.\";\n}\n\n// ═══════════════════════════════════════════════════════════\n// RECORDING EXTRACTION\n// ═══════════════════════════════════════════════════════════\n\nfunction extractLatestRecording(params: URLSearchParams): string {\n let latest = \"\";\n for (let i = 1; i < 100; i++) {\n const value = params.get(`rec${i}`);\n if (value) latest = value;\n }\n return latest || params.get(\"RECORD_PATH\") || \"\";\n}\n\nfunction countRecordings(params: URLSearchParams): number {\n let count = 0;\n for (let i = 1; i < 100; i++) {\n if (params.get(`rec${i}`)) count = i;\n }\n return count;\n}\n\n// ═══════════════════════════════════════════════════════════\n// MAIN HANDLER\n// ═══════════════════════════════════════════════════════════\n\nconst GREETING = \"שלום, הגעתם לבינה מלאכותית של מוטי כץ, מה תרצו לשאול\";\nconst NOT_HEARD = \"לא שמעתי אותך, אנא נסה שוב\";\nconst WRONG_CODE = \"קוד שגוי\";\nconst BLOCKED_MSG = \"אני לא יכול לדבר על זה. אפשר לשאול משהו אחר?\";\nconst TECH_ERROR = \"מצטער, יש לי בעיה טכנית כרגע. נסה שוב בעוד רגע\";\n\nexport default async function handler(req: Request): Promise {\n const requestStart = Date.now();\n\n try {\n if (req.method === \"GET\") {\n return textResponse(\"YEMOT BOT v6.1 LIVE\");\n }\n\n if (req.method !== \"POST\") {\n return textResponse(\n buildReadResponse(\"נשלחו נתונים בפורמט לא תקין\", \"RECORD_PATH\"),\n );\n }\n\n // ─── Parse + authenticate ──────────────────────────────\n const form = await req.formData();\n const params = new URLSearchParams();\n for (const [key, value] of form.entries()) {\n if (typeof value === \"string\") params.set(key, value);\n }\n\n const expected = Deno.env.get(\"YEMOT_SECRET\");\n if (expected && params.get(\"secret\") !== expected) {\n return new Response(\"forbidden\", { status: 403 });\n }\n\n const callId = params.get(\"ApiCallId\") ||\n params.get(\"ApiPhone\") ||\n generateAnonCallId(params);\n const phone = params.get(\"ApiPhone\") || params.get(\"ApiRealCaller\") ||\n callId;\n\n // ─── Hangup: wipe session ──────────────────────────────\n const hangup = params.get(\"hangup\");\n if (hangup && hangup !== \"no\" && hangup !== \"0\") {\n await clearSession(callId);\n return textResponse(\"\");\n }\n\n if (Math.random() < CLEANUP_PROBABILITY) {\n await cleanupOldData();\n }\n\n const recCount = countRecordings(params);\n const nextVar = recCount > 0 ? `rec${recCount + 1}` : \"RECORD_PATH\";\n\n // ─── First request: greeting ───────────────────────────\n const latestRecording = extractLatestRecording(params);\n if (!latestRecording) {\n return textResponse(buildReadResponse(GREETING, nextVar));\n }\n\n // ─── Transcribe (never log user text content) ──────────\n const t0 = Date.now();\n const audio = await downloadRecording(latestRecording);\n const userText = await transcribe(audio);\n console.log(\n `[TIME] audio+whisper: ${Date.now() - t0}ms, len=${userText.length}`,\n );\n\n if (!userText || userText.length < 2) {\n return textResponse(buildReadResponse(NOT_HEARD, nextVar));\n }\n\n // ─── Rate limit (per phone, per day) ───────────────────\n if (await isOverDailyLimit(phone)) {\n console.log(`[RATE] limit reached for ${phone}`);\n return textResponse(hangupResponse(\"הגעת למכסת השימוש היומית. להתראות.\"));\n }\n\n const session = await getSession(callId);\n\n // ─── Unlock code ───────────────────────────────────────\n if (!session.unlocked) {\n if (detectUnlockCode(userText)) {\n await updateSession(callId, true, 0);\n await saveExchange(callId, \"[code]\", \"[unlocked]\");\n console.log(`[UNLOCK] call unlocked`);\n return textResponse(buildReadResponse(\"מצב חופשי פעיל\", nextVar));\n }\n\n if (\n session.attempts < MAX_UNLOCK_ATTEMPTS && isPureDigitsMessage(userText)\n ) {\n const newAttempts = session.attempts + 1;\n await updateSession(callId, false, newAttempts);\n console.log(\n `[UNLOCK] wrong attempt ${newAttempts}/${MAX_UNLOCK_ATTEMPTS}`,\n );\n\n if (newAttempts >= MAX_UNLOCK_ATTEMPTS) {\n await clearSession(callId);\n return textResponse(\n hangupResponse(\"יותר מדי ניסיונות. השיחה מנותקת.\"),\n );\n }\n return textResponse(buildReadResponse(WRONG_CODE, nextVar));\n }\n }\n\n // ─── Censorship layer 1: keywords (instant, always) ────\n if (!session.unlocked && isForbiddenKeyword(userText)) {\n await saveExchange(callId, userText, \"[blocked:keyword]\");\n console.log(`[CENSOR] blocked by keyword`);\n return textResponse(buildReadResponse(BLOCKED_MSG, nextVar));\n }\n\n // ─── Fire search + optional guards concurrently ────────\n const detection = needsSearch(userText);\n console.log(`[CALL] id=${callId}, search=${detection.reason}`);\n\n const searchPromise = detection.need ? searchTavily(userText) : null;\n const guardsPromise = !session.unlocked && GUARDS_ENABLED\n ? runCensorshipGuards(userText)\n : null;\n\n const searchContext = searchPromise ? await searchPromise : \"\";\n const guardBlock = guardsPromise ? await guardsPromise : null;\n\n if (guardBlock) {\n await saveExchange(callId, userText, `[blocked:${guardBlock}]`);\n console.log(`[CENSOR] blocked by ${guardBlock}`);\n return textResponse(buildReadResponse(BLOCKED_MSG, nextVar));\n }\n\n // ─── Build messages ────────────────────────────────────\n const history = await getHistory(callId);\n const systemPrompt = session.unlocked\n ? UNRESTRICTED_PROMPT\n : RESTRICTED_PROMPT;\n\n const messages: { role: string; content: string }[] = [\n { role: \"system\", content: systemPrompt },\n ...history,\n ];\n\n let finalUserMessage = userText;\n if (searchContext) {\n finalUserMessage =\n `${userText}\\n\\n\\n${searchContext}\\n`;\n }\n messages.push({ role: \"user\", content: finalUserMessage });\n\n // ─── LLM ───────────────────────────────────────────────\n const t1 = Date.now();\n let answer: string;\n try {\n answer = await askLLM(messages, systemPrompt);\n } catch (error) {\n console.log(\n `[LLM] failed (${Date.now() - t1}ms): ${(error as Error).message}`,\n );\n answer = searchContext ? formatTavilyFallback(searchContext) : TECH_ERROR;\n }\n console.log(`[TIME] llm: ${Date.now() - t1}ms`);\n\n // ─── Refusal fallback: never leave the caller hanging ──\n if (detectRefusal(answer)) {\n console.log(`[FALLBACK] refusal detected`);\n answer = searchContext ? formatTavilyFallback(searchContext) : TECH_ERROR;\n }\n\n // ─── Persist + respond ─────────────────────────────────\n await saveExchange(callId, userText, answer);\n await incrementUsage(phone);\n\n console.log(`[TIME] TOTAL: ${Date.now() - requestStart}ms`);\n return textResponse(buildReadResponse(answer, nextVar));\n } catch (error) {\n console.error(`[FATAL] after ${Date.now() - requestStart}ms:`, error);\n return textResponse(\n buildReadResponse(\"אירעה שגיאה, אנא נסה שוב\", \"RECORD_PATH\"),\n );\n }\n}","deleted",false,"label",[19],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":58,"_18":59},["D",1789483017382],"children",[],[19],"831ddbfb-7be1-410e-b10f-cceec33c95d2",["D",1789429567305],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","638ff93b-dc01-4e6c-a6fe-aeef60083c82","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a08d26-b22e-75da-9abf-ee563d18adc0","tursoName","831ddbfb7be1410eb10fcceec33c95d2","tursoHostname","831ddbfb7be1410eb10fcceec33c95d2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789522252250],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_116":68},"org",{"_11":12,"_111":68,"_112":68,"_70":71,"_113":114,"_115":52},"branch",{"_17":41,"_13":16,"_33":39,"_103":60,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":-5,"_109":14,"_110":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":60,"_13":14,"_44":151,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":152,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":153,"_98":154,"_100":155,"_102":52},[148],"files",[148],"counts",{"_137":77,"_138":139,"_140":77,"_32":141,"_142":143},[],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":136},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],"pulls","branches",1,"forks",{"_144":146,"_147":77},"connections",{"_144":77,"_145":77},"count","unfilledCount",6,"emptyCount",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":149,"_18":150},[],[19],["D",1789429567305],["D",1789522252250],{"_11":12,"_116":68},{"_11":12,"_111":68,"_112":68,"_70":71,"_113":114,"_115":52},{"_17":41,"_13":16,"_33":39,"_103":60,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":-5,"_109":14,"_110":12},"ctx",{"_96":-5,"_133":189,"_190":191,"_192":193,"_194":52,"_195":52,"_196":52,"_197":43,"_198":-5,"_199":-7,"_200":-7,"_201":77,"_202":52,"_203":52,"_204":-5,"_205":52,"_206":52,"_207":52,"_208":-5},"ENV",{"_160":161,"_162":163,"_164":16,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]