[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_279":280,"_281":282},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_86":-7,"_87":88,"_29":-7,"_89":-5,"_15":90,"_91":92,"_93":94,"_95":96,"_97":98,"_99":-5,"_100":-5,"_101":-5,"_102":38,"_103":104,"_105":106,"_107":-5,"_108":-5,"_109":110},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","kliv","name","te59ss67f0v34e491s9sq9653t8ev50f8v","project",{"_20":28,"_13":14,"_22":36,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":38,"_48":-5,"_49":-5,"_50":51,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":59,"_61":62,"_63":62,"_64":62,"_65":59,"_66":59,"_67":68,"_69":70,"_71":72,"_73":38},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":-5,"_32":-5,"_33":34,"_35":-5},"id","edbf681c-fdd3-11f0-bc97-42dde27851f2","createdAt",["D",1769774711707],"updatedAt",["D",1769963316794],"main","projectId","edbf0e12-fdd3-11f0-bc97-42dde27851f2","version",34,"forkedBranchId","forkedBranchVersion","lockfileKey","1769963406700-esm.town_v_kliv_te59ss67f0v34e491s9sq9653t8ev50f8v@34-main","deletedAt",["D",1769774711707],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","imageUrl","userId","0199d9f9-8fb9-705d-a1be-150ee5ea0145","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","0199d9f9-8fb9-705d-a1be-18ed6d1d02d7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_85":81},"org",{"_11":12,"_79":-5,"_80":81,"_44":45,"_82":83,"_84":38},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_74":-5,"_75":-5,"_76":-5,"_77":14,"_78":12},"isOwned","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzMzeW9MdTZSSlZXdUFyNHFTckJtSlg1b3paYiJ9","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_20":28,"_13":14,"_22":275,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":38,"_48":-5,"_49":-5,"_50":51,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":59,"_61":62,"_63":62,"_64":62,"_65":59,"_66":59,"_67":276,"_69":277,"_71":278,"_73":38},"tree",[226,227,228,229,230,231,232,233,234,235,236,237],"files",[226,227,228,229,230,231,232,233,234,235,236,237],"counts",{"_217":51,"_17":156,"_218":51,"_219":220,"_221":222},"contents",[111,112,113,114,115,116,117,118,119,120,121,122],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_20":210,"_13":211,"_125":212,"_127":-5,"_128":21,"_129":213,"_131":106,"_22":214,"_29":149,"_133":134,"_135":215,"_137":38,"_138":-5,"_87":216},{"_20":203,"_13":204,"_125":205,"_127":-5,"_128":21,"_129":206,"_131":106,"_22":207,"_29":156,"_133":134,"_135":208,"_137":38,"_138":-5,"_87":209},{"_20":196,"_13":197,"_125":198,"_127":-5,"_128":21,"_129":199,"_131":106,"_22":200,"_29":186,"_133":134,"_135":201,"_137":38,"_138":-5,"_87":202},{"_20":189,"_13":190,"_125":191,"_127":-5,"_128":21,"_129":192,"_131":106,"_22":193,"_29":51,"_133":134,"_135":194,"_137":38,"_138":-5,"_87":195},{"_20":181,"_13":182,"_125":183,"_127":-5,"_128":21,"_129":184,"_131":106,"_22":185,"_29":186,"_133":134,"_135":187,"_137":38,"_138":-5,"_87":188},{"_20":174,"_13":175,"_125":176,"_127":-5,"_128":21,"_129":177,"_131":106,"_22":178,"_29":156,"_133":134,"_135":179,"_137":38,"_138":-5,"_87":180},{"_20":167,"_13":168,"_125":169,"_127":-5,"_128":21,"_129":170,"_131":106,"_22":171,"_29":156,"_133":134,"_135":172,"_137":38,"_138":-5,"_87":173},{"_20":160,"_13":161,"_125":162,"_127":-5,"_128":21,"_129":163,"_131":106,"_22":164,"_29":156,"_133":134,"_135":165,"_137":38,"_138":-5,"_87":166},{"_20":153,"_13":154,"_125":155,"_127":-5,"_128":21,"_129":156,"_131":106,"_22":157,"_29":51,"_133":134,"_135":158,"_137":38,"_138":-5,"_87":159},{"_20":146,"_13":147,"_125":148,"_127":-5,"_128":21,"_129":149,"_131":106,"_22":150,"_29":51,"_133":134,"_135":151,"_137":38,"_138":-5,"_87":152},{"_20":140,"_13":141,"_125":142,"_127":-5,"_128":21,"_129":30,"_131":106,"_22":143,"_29":130,"_133":134,"_135":144,"_137":38,"_138":-5,"_87":145},{"_20":123,"_13":124,"_125":126,"_127":-5,"_128":21,"_129":130,"_131":106,"_22":132,"_29":51,"_133":134,"_135":136,"_137":38,"_138":-5,"_87":139},"83d261ae-fdef-11f0-a248-42dde27851f2","fuvsf9sq4q18704401qte38s993694qv53.ts","fileId","83d2626c-fdef-11f0-a248-42dde27851f2","parentId","branchId","branchVersion",10,"latest",["D",1769786559899],"fileType","http","content","/**\n * Hard Reset Edge Function\n * Clears all M3U content for a specific activation code\n * Forces a fresh re-sync on next login\n */\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const { connect } = await import(\"npm:@tursodatabase/serverless\");\n \n const conn = connect({\n url: req.headers.get(\"x-database-url\")!,\n authToken: req.headers.get(\"x-database-token\")\n });\n\n try {\n const body = await req.json();\n const { action, code } = body;\n\n if (action === \"hard_reset_content\") {\n if (!code) {\n return Response.json({ error: \"Missing activation code\" }, { status: 400 });\n }\n\n console.log(`[Hard Reset] 🔥 Starting hard reset for code: ${code}`);\n\n // Verify code exists\n const codeStmt = conn.prepare(\"SELECT _row_id, code FROM activation_codes WHERE code = ?\");\n const codeData = await codeStmt.get([code]);\n\n if (!codeData) {\n return Response.json({ error: \"Code not found\" }, { status: 404 });\n }\n\n console.log(`[Hard Reset] 📋 Found code ID: ${codeData._row_id}`);\n\n // Check existing content count\n const countStmt = conn.prepare(\"SELECT COUNT(*) as count FROM m3u_contents WHERE code_id = ?\");\n const countResult = await countStmt.get([codeData._row_id]);\n const existingCount = countResult?.count || 0;\n\n console.log(`[Hard Reset] 📊 Existing content count: ${existingCount}`);\n\n if (existingCount === 0) {\n return Response.json({ \n success: true, \n message: \"No content to clear\",\n cleared: 0\n });\n }\n\n // Delete all content for this code\n const deleteStmt = conn.prepare(\"DELETE FROM m3u_contents WHERE code_id = ?\");\n const result = await deleteStmt.run([codeData._row_id]);\n\n const deletedCount = result.rowsAffected || 0;\n console.log(`[Hard Reset] ✅ Deleted ${deletedCount} items`);\n\n return Response.json({ \n success: true, \n message: `Successfully cleared ${deletedCount} items`,\n cleared: deletedCount,\n nextStep: \"Use 'Re-sync' button to fetch fresh content\"\n });\n }\n\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n\n } catch (error) {\n console.error(\"[Hard Reset] ❌ Error:\", error);\n return Response.json({ \n error: \"Internal server error\",\n details: error instanceof Error ? error.message : \"Unknown error\"\n }, { status: 500 });\n }\n}","deleted","label",[124],"0f23d7a0-ff8b-11f0-8d29-42dde27851f2","fuveft02482t894v4vq62891t391te4f18.ts","19c3ad22-fe21-11f0-a486-42dde27851f2",["D",1769963316794],"/**\n * Stream Proxy Edge Function - LOW LATENCY VERSION\n * - Pipes stream directly with no buffering\n * - Forces low-latency headers for instant playback\n * - Supports POST body (primary) and GET query param (fallback)\n * - Routes both M3U playlists, video streams, and images through proxy\n */\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n // Handle CORS preflight\n if (req.method === 'OPTIONS') {\n return new Response(null, {\n status: 200,\n headers: {\n 'Access-Control-Allow-Origin': '*',\n 'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',\n 'Access-Control-Allow-Headers': '*',\n }\n });\n }\n\n let targetUrl = '';\n\n // 1. Try to read from POST Body (The Reliable Way)\n if (req.method === 'POST') {\n try {\n const body = await req.json();\n targetUrl = body?.url;\n console.log('[StreamProxy] 📦 POST body URL:', targetUrl?.substring(0, 80));\n } catch (e) {\n console.error('[StreamProxy] ❌ JSON parse error:', e);\n }\n }\n\n // 2. Fallback to Query Param (Legacy support)\n if (!targetUrl) {\n const url = new URL(req.url);\n targetUrl = url.searchParams.get('url') || '';\n console.log('[StreamProxy] 🔍 Query param URL:', targetUrl?.substring(0, 80));\n }\n\n // 3. Validation\n if (!targetUrl) {\n console.log('[StreamProxy] ❌ No URL found');\n return new Response(JSON.stringify({\n error: \"Missing url parameter\",\n receivedMethod: req.method,\n receivedUrl: req.url,\n hint: \"Send POST { url: 'http://...' } or GET ?url=http://...\"\n }), { \n status: 400, \n headers: {\n 'Content-Type': 'application/json',\n 'Access-Control-Allow-Origin': '*'\n }\n });\n }\n\n // 4. Decode if needed (Handle double-encoding)\n if (targetUrl.includes('%3A') || targetUrl.includes('%2F')) {\n try {\n const decoded = decodeURIComponent(targetUrl);\n console.log('[StreamProxy] 🔄 Decoded URL:', decoded.substring(0, 80));\n targetUrl = decoded;\n } catch (e) {\n console.error('[StreamProxy] ⚠️ Decode failed, using as-is');\n }\n }\n\n // Validate URL format\n try {\n new URL(targetUrl);\n } catch (urlError) {\n return new Response(JSON.stringify({\n error: \"Invalid URL format\",\n received: targetUrl.substring(0, 100)\n }), { \n status: 400,\n headers: {\n 'Content-Type': 'application/json',\n 'Access-Control-Allow-Origin': '*'\n }\n });\n }\n\n console.log('[StreamProxy] 🎯 Fetching:', targetUrl.substring(0, 80));\n\n // 5. Fetch with LOW LATENCY settings\n try {\n const controller = new AbortController();\n const timeoutId = setTimeout(() => controller.abort(), 60000);\n\n const response = await fetch(targetUrl, {\n method: 'GET',\n headers: {\n 'User-Agent': 'IPTVSmartersPro/3.1.2 (iPhone; iOS 15.5)',\n 'Accept': '*/*',\n 'Accept-Language': 'en-US,en;q=0.9',\n 'Referer': new URL(targetUrl).origin\n },\n redirect: 'follow',\n signal: controller.signal\n });\n\n clearTimeout(timeoutId);\n\n console.log('[StreamProxy] 📊 Response:', response.status, response.statusText, response.headers.get('content-type'));\n\n if (!response.ok) {\n let errorBody = '';\n try {\n errorBody = await response.text();\n console.error('[StreamProxy] ❌ Error body:', errorBody.substring(0, 200));\n } catch (e) {}\n\n return new Response(JSON.stringify({\n error: `HTTP ${response.status}: ${response.statusText}`,\n upstreamStatus: response.status,\n upstreamErrorBody: errorBody.substring(0, 500)\n }), {\n status: response.status,\n headers: {\n 'Content-Type': 'application/json',\n 'Access-Control-Allow-Origin': '*'\n }\n });\n }\n\n // ============================================\n // LOW LATENCY STREAMING - Pipe directly!\n // ============================================\n const reader = response.body?.getReader();\n if (!reader) {\n return new Response(JSON.stringify({ error: 'No response body' }), {\n status: 500,\n headers: {\n 'Content-Type': 'application/json',\n 'Access-Control-Allow-Origin': '*'\n }\n });\n }\n\n const stream = new ReadableStream({\n async start(controller) {\n try {\n // Pipe chunks immediately - NO buffering\n while (true) {\n const { done, value } = await reader.read();\n if (done) {\n console.log('[StreamProxy] ✅ Stream complete');\n break;\n }\n // Enqueue immediately without buffering\n controller.enqueue(value);\n }\n controller.close();\n } catch (error) {\n console.error('[StreamProxy] ❌ Stream error:', error);\n controller.error(error);\n }\n }\n });\n\n // ============================================\n // LOW LATENCY HEADERS for instant playback\n // ============================================\n const contentType = response.headers.get('content-type') || 'application/octet-stream';\n \n return new Response(stream, {\n status: response.status,\n headers: {\n 'Content-Type': contentType,\n \n // LOW LATENCY HEADERS - Disable all caching\n 'Cache-Control': 'no-cache, no-store, must-revalidate, max-age=0',\n 'Pragma': 'no-cache',\n 'Expires': '0',\n 'X-Content-Type-Options': 'nosniff',\n \n // CORS\n 'Access-Control-Allow-Origin': '*',\n 'Access-Control-Expose-Headers': '*',\n 'Access-Control-Allow-Headers': '*'\n }\n });\n\n } catch (err) {\n console.error('[StreamProxy] ❌ Fetch error:', err);\n \n if (err?.name === 'AbortError') {\n return new Response(JSON.stringify({\n error: 'Request timeout (60s)',\n message: 'Upstream server took too long to respond'\n }), {\n status: 408,\n headers: {\n 'Content-Type': 'application/json',\n 'Access-Control-Allow-Origin': '*'\n }\n });\n }\n\n return new Response(JSON.stringify({ \n error: 'Fetch failed', \n details: String(err) \n }), { \n status: 500,\n headers: {\n 'Content-Type': 'application/json',\n 'Access-Control-Allow-Origin': '*'\n }\n });\n }\n}",[141],"3c2f8c9c-fdda-11f0-a034-42dde27851f2","fuq5tq78q685954502898fe40fs04s733q.ts","3c2f8d6e-fdda-11f0-a034-42dde27851f2",2,["D",1769777420285],"import { connect } from \"npm:@tursodatabase/serverless\";\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const conn = connect({\n url: req.headers.get(\"x-database-url\")!,\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const now = Math.floor(Date.now() / 1000);\n\n try {\n const body = await req.json();\n const { action } = body;\n\n // Get admin info from headers (platform will inject these for authenticated users)\n const userUuid = req.headers.get(\"x-user-uuid\") || \"system\";\n const userName = req.headers.get(\"x-user-name\") || \"Admin\";\n\n if (action === \"generate_code\") {\n const { duration_months, device_limit } = body;\n \n // Generate random 10-digit code\n const code = Math.random().toString().slice(2, 12).padEnd(10, '0');\n \n // Calculate expiry\n const expiresAt = now + (duration_months * 30 * 24 * 60 * 60);\n \n // Insert code\n const insertStmt = conn.prepare(\n \"INSERT INTO activation_codes (code, duration_months, device_limit, expires_at, is_active, created_by_name, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, 1, ?, ?, ?, ?)\"\n );\n await insertStmt.run([code, duration_months, device_limit, expiresAt, userName, userUuid, now, now]);\n \n // Log activity\n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\n \"CODE_GENERATED\",\n `Code ${code} generated (${duration_months} months, ${device_limit} devices)`,\n userName,\n userUuid,\n now,\n now\n ]);\n \n return Response.json({ success: true, code, expiresAt });\n }\n\n if (action === \"get_codes\") {\n const stmt = conn.prepare(\"SELECT * FROM activation_codes ORDER BY _created_at DESC\");\n const codes = await stmt.all([]);\n return Response.json({ success: true, codes });\n }\n\n if (action === \"get_sessions\") {\n const stmt = conn.prepare(`\n SELECT us.*, ac.code \n FROM user_sessions us \n JOIN activation_codes ac ON us.code_id = ac._row_id \n ORDER BY us.last_active DESC\n `);\n const sessions = await stmt.all([]);\n return Response.json({ success: true, sessions });\n }\n\n if (action === \"revoke_code\") {\n const { code_id } = body;\n \n const updateStmt = conn.prepare(\"UPDATE activation_codes SET is_active = 0, _updated_at = ? WHERE _row_id = ?\");\n await updateStmt.run([now, code_id]);\n \n const sessionStmt = conn.prepare(\"UPDATE user_sessions SET is_active = 0, _updated_at = ? WHERE code_id = ?\");\n await sessionStmt.run([now, code_id]);\n \n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\"CODE_REVOKED\", `Code ID ${code_id} revoked`, userName, userUuid, now, now]);\n \n return Response.json({ success: true });\n }\n\n if (action === \"delete_session\") {\n const { session_id } = body;\n \n const deleteStmt = conn.prepare(\"UPDATE user_sessions SET is_active = 0, _updated_at = ? WHERE _row_id = ?\");\n await deleteStmt.run([now, session_id]);\n \n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\"SESSION_DELETED\", `Session ${session_id} terminated`, userName, userUuid, now, now]);\n \n return Response.json({ success: true });\n }\n\n if (action === \"get_logs\") {\n const stmt = conn.prepare(\"SELECT * FROM activity_logs ORDER BY _created_at DESC LIMIT 100\");\n const logs = await stmt.all([]);\n return Response.json({ success: true, logs });\n }\n\n if (action === \"get_stats\") {\n const totalCodesStmt = conn.prepare(\"SELECT COUNT(*) as count FROM activation_codes\");\n const activeCodesStmt = conn.prepare(\"SELECT COUNT(*) as count FROM activation_codes WHERE is_active = 1 AND expires_at > ?\");\n const activeSessionsStmt = conn.prepare(\"SELECT COUNT(*) as count FROM user_sessions WHERE is_active = 1\");\n \n const totalCodes = await totalCodesStmt.get([]);\n const activeCodes = await activeCodesStmt.get([now]);\n const activeSessions = await activeSessionsStmt.get([]);\n \n return Response.json({ \n success: true, \n stats: {\n totalCodes: totalCodes?.count || 0,\n activeCodes: activeCodes?.count || 0,\n activeSessions: activeSessions?.count || 0\n }\n });\n }\n\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n } catch (error) {\n console.error(\"Admin action error:\", error);\n return Response.json({ error: error?.message || \"Unknown error\" }, { status: 500 });\n }\n}\n",[147],"edce25aa-fdd3-11f0-bc97-42dde27851f2","fuf70t042e002f4917939v9eq47642fvf0.ts","edce26cc-fdd3-11f0-bc97-42dde27851f2",1,["D",1769774711804],"import { connect } from \"npm:@tursodatabase/serverless\";\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get(\"x-user-uuid\");\n const userName = req.headers.get(\"x-user-name\") || \"Admin\";\n \n if (!userUuid) {\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n }\n\n const conn = connect({\n url: req.headers.get(\"x-database-url\"),\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const now = Math.floor(Date.now() / 1000);\n\n try {\n const body = await req.json();\n const { action } = body;\n\n if (action === \"generate_code\") {\n const { duration_months, device_limit } = body;\n \n // Generate random 10-digit code\n const code = Math.random().toString().slice(2, 12).padEnd(10, '0');\n \n // Calculate expiry (duration_months from now)\n const expiresAt = now + (duration_months * 30 * 24 * 60 * 60);\n \n // Insert code\n const insertStmt = conn.prepare(\n \"INSERT INTO activation_codes (code, duration_months, device_limit, expires_at, is_active, created_by_name, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, 1, ?, ?, ?, ?)\"\n );\n await insertStmt.run([code, duration_months, device_limit, expiresAt, userName, userUuid, now, now]);\n \n // Log activity\n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\n \"CODE_GENERATED\",\n `Code ${code} generated (${duration_months} months, ${device_limit} devices)`,\n userName,\n userUuid,\n now,\n now\n ]);\n \n return Response.json({ success: true, code, expiresAt });\n }\n\n if (action === \"get_codes\") {\n const stmt = conn.prepare(\"SELECT * FROM activation_codes ORDER BY _created_at DESC\");\n const codes = await stmt.all([]);\n return Response.json({ success: true, codes });\n }\n\n if (action === \"get_sessions\") {\n const stmt = conn.prepare(`\n SELECT us.*, ac.code \n FROM user_sessions us \n JOIN activation_codes ac ON us.code_id = ac._row_id \n ORDER BY us.last_active DESC\n `);\n const sessions = await stmt.all([]);\n return Response.json({ success: true, sessions });\n }\n\n if (action === \"revoke_code\") {\n const { code_id } = body;\n \n // Deactivate code\n const updateStmt = conn.prepare(\"UPDATE activation_codes SET is_active = 0, _updated_at = ? WHERE _row_id = ?\");\n await updateStmt.run([now, code_id]);\n \n // Deactivate all sessions for this code\n const sessionStmt = conn.prepare(\"UPDATE user_sessions SET is_active = 0, _updated_at = ? WHERE code_id = ?\");\n await sessionStmt.run([now, code_id]);\n \n // Log activity\n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\"CODE_REVOKED\", `Code ID ${code_id} revoked`, userName, userUuid, now, now]);\n \n return Response.json({ success: true });\n }\n\n if (action === \"delete_session\") {\n const { session_id } = body;\n \n const deleteStmt = conn.prepare(\"UPDATE user_sessions SET is_active = 0, _updated_at = ? WHERE _row_id = ?\");\n await deleteStmt.run([now, session_id]);\n \n // Log activity\n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\"SESSION_DELETED\", `Session ${session_id} terminated`, userName, userUuid, now, now]);\n \n return Response.json({ success: true });\n }\n\n if (action === \"get_logs\") {\n const stmt = conn.prepare(\"SELECT * FROM activity_logs ORDER BY _created_at DESC LIMIT 100\");\n const logs = await stmt.all([]);\n return Response.json({ success: true, logs });\n }\n\n if (action === \"get_stats\") {\n const totalCodesStmt = conn.prepare(\"SELECT COUNT(*) as count FROM activation_codes\");\n const activeCodesStmt = conn.prepare(\"SELECT COUNT(*) as count FROM activation_codes WHERE is_active = 1 AND expires_at > ?\");\n const activeSessionsStmt = conn.prepare(\"SELECT COUNT(*) as count FROM user_sessions WHERE is_active = 1\");\n \n const totalCodes = await totalCodesStmt.get([]);\n const activeCodes = await activeCodesStmt.get([now]);\n const activeSessions = await activeSessionsStmt.get([]);\n \n return Response.json({ \n success: true, \n stats: {\n totalCodes: totalCodes?.count || 0,\n activeCodes: activeCodes?.count || 0,\n activeSessions: activeSessions?.count || 0\n }\n });\n }\n\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n } catch (error) {\n console.error(\"Admin action error:\", error);\n return Response.json({ error: error.message }, { status: 500 });\n }\n}\n",[154],"cb57c934-fec5-11f0-a63e-42dde27851f2","fuee9st6e6e7tq4qv2s37q0725452t2t49.ts","f52a2d82-fdef-11f0-9305-42dde27851f2",19,["D",1769878592191],"import { connect } from \"npm:@tursodatabase/serverless\";\n\n/**\n * Admin Actions Edge Function\n * Handles all admin operations\n */\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const conn = connect({\n url: req.headers.get(\"x-database-url\")!,\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const now = Math.floor(Date.now() / 1000);\n\n try {\n const body = await req.json();\n const { action } = body;\n const userUuid = req.headers.get(\"x-user-uuid\") || \"system\";\n\n // Get all codes\n if (action === \"get_codes\") {\n const stmt = conn.prepare(`\n SELECT \n ac._row_id,\n ac.code,\n ac.duration_months,\n ac.device_limit,\n ac.expires_at,\n ac.is_active,\n ac.created_by_name,\n ac._created_at,\n ac.m3u_url,\n ac.device_id,\n COUNT(DISTINCT s._row_id) as active_sessions\n FROM activation_codes ac\n LEFT JOIN user_sessions s ON s.code_id = ac._row_id AND s.is_active = 1\n GROUP BY ac._row_id\n ORDER BY ac._created_at DESC\n `);\n \n const codes = await stmt.all();\n \n console.log(`[AdminActions] get_codes: found ${codes.length} codes`);\n \n return Response.json({ \n success: true, \n codes: codes.map((c: any) => ({\n _row_id: c._row_id,\n code: c.code,\n duration_months: c.duration_months,\n device_limit: c.device_limit,\n expires_at: c.expires_at,\n is_active: c.is_active,\n created_by_name: c.created_by_name,\n _created_at: c._created_at,\n m3u_url: c.m3u_url,\n device_id: c.device_id,\n active_sessions: c.active_sessions || 0\n }))\n });\n }\n\n // Generate code\n if (action === \"generate_code\") {\n const { durationMonths, deviceLimit, m3uUrl } = body;\n\n const expiresAt = now + (durationMonths * 30 * 24 * 60 * 60);\n \n // Generate 10-digit code\n let code;\n let attempts = 0;\n do {\n code = Math.floor(1000000000 + Math.random() * 9000000000).toString();\n const existing = await conn.prepare(\"SELECT _row_id FROM activation_codes WHERE code = ?\").get([code]);\n if (!existing) break;\n attempts++;\n } while (attempts < 10);\n\n const stmt = conn.prepare(\n \"INSERT INTO activation_codes (code, duration_months, device_limit, expires_at, is_active, m3u_url, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, 1, ?, ?, ?, ?)\"\n );\n \n await stmt.run([code, durationMonths, deviceLimit, expiresAt, m3uUrl, userUuid, now, now]);\n\n // Log activity\n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\n `generate_code`,\n `Generated code ${code} for ${durationMonths} months, ${deviceLimit} device(s), M3U: ${m3uUrl ? 'Yes' : 'No'}`,\n userUuid,\n now,\n now\n ]);\n\n console.log(`[AdminActions] Generated code: ${code}`);\n\n return Response.json({ success: true, code });\n }\n\n // Revoke code\n if (action === \"revoke_code\") {\n const { code_id } = body;\n\n const getCodeStmt = conn.prepare(\"SELECT code FROM activation_codes WHERE _row_id = ?\");\n const codeData = await getCodeStmt.get([code_id]);\n \n if (!codeData) {\n return Response.json({ error: \"Code not found\" }, { status: 404 });\n }\n\n const stmt = conn.prepare(\"UPDATE activation_codes SET is_active = 0, _updated_at = ? WHERE _row_id = ?\");\n await stmt.run([now, code_id]);\n\n // Log\n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?)\"\n );\n await logStmt.run([`revoke_code`, `Revoked code ${codeData.code}`, userUuid, now, now]);\n\n console.log(`[AdminActions] Revoked code: ${codeData.code}`);\n\n return Response.json({ success: true });\n }\n\n // Get sessions\n if (action === \"get_sessions\") {\n const stmt = conn.prepare(`\n SELECT s.*, ac.code, ac.expires_at\n FROM user_sessions s\n JOIN activation_codes ac ON ac._row_id = s.code_id\n ORDER BY s.last_active DESC\n LIMIT 100\n `);\n \n const sessions = await stmt.all();\n\n return Response.json({ success: true, sessions });\n }\n\n // Delete session\n if (action === \"delete_session\") {\n const { session_id } = body;\n\n const stmt = conn.prepare(\"UPDATE user_sessions SET is_active = 0, _updated_at = ? WHERE _row_id = ?\");\n await stmt.run([now, session_id]);\n\n console.log(`[AdminActions] Deleted session: ${session_id}`);\n\n return Response.json({ success: true });\n }\n\n // Get activity logs\n if (action === \"get_logs\") {\n const { limit = 50 } = body;\n\n const stmt = conn.prepare(`\n SELECT * FROM activity_logs\n ORDER BY _created_at DESC\n LIMIT ?\n `);\n \n const logs = await stmt.all([limit]);\n\n return Response.json({ success: true, logs });\n }\n\n // Get stats\n if (action === \"get_stats\") {\n const activeCodesStmt = conn.prepare(\"SELECT COUNT(*) as count FROM activation_codes WHERE is_active = 1 AND expires_at > ?\");\n const activeCodes = await activeCodesStmt.get([now]);\n \n const activeSessionsStmt = conn.prepare(\"SELECT COUNT(*) as count FROM user_sessions WHERE is_active = 1\");\n const activeSessions = await activeSessionsStmt.get([]);\n \n const totalContentStmt = conn.prepare(\"SELECT COUNT(*) as count FROM m3u_contents\");\n const totalContent = await totalContentStmt.get([]);\n\n return Response.json({\n success: true,\n stats: {\n active_codes: activeCodes?.count || 0,\n active_sessions: activeSessions?.count || 0,\n total_content: totalContent?.count || 0\n }\n });\n }\n\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n } catch (error) {\n console.error(\"[AdminActions] ❌ Error:\", error);\n return Response.json({ error: \"Internal server error\" }, { status: 500 });\n }\n}",[161],"d1899a46-fde2-11f0-b746-42dde27851f2","fu4v88288f7es8445t864f439qst81ef4e.ts","9c00c5f2-fddd-11f0-b91f-42dde27851f2",4,["D",1769781106825],"import { connect } from \"npm:@tursodatabase/serverless\";\n\n/**\n * Admin Actions Edge Function\n * Handles IPTV-specific administrative operations:\n * - Code generation (activation codes for IPTV content)\n * - Session management (device sessions for IPTV streaming)\n * - Activity logging\n * \n * Note: This is NOT authentication/user signup. The app uses Kliv Auth for user auth.\n * This function manages IPTV business logic (codes, streaming sessions) which is\n * legitimate application-level functionality.\n */\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const conn = connect({\n url: req.headers.get(\"x-database-url\")!,\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const now = Math.floor(Date.now() / 1000);\n\n try {\n const body = await req.json();\n const { action } = body;\n\n // Get admin info from headers\n const userUuid = req.headers.get(\"x-user-uuid\") || \"system\";\n const userName = req.headers.get(\"x-user-name\") || \"Admin\";\n\n // Generate IPTV activation code\n if (action === \"generate_code\") {\n const { duration_months, device_limit, m3u_url } = body;\n \n if (!duration_months || !device_limit) {\n return Response.json({ error: \"Missing required fields\" }, { status: 400 });\n }\n \n const duration = parseInt(duration_months);\n const limit = parseInt(device_limit);\n \n if (isNaN(duration) || isNaN(limit)) {\n return Response.json({ error: \"Invalid duration or device limit\" }, { status: 400 });\n }\n \n // Generate random 10-digit activation code\n const code = Math.random().toString().slice(2, 12).padEnd(10, '0');\n \n // Calculate expiry date\n const expiresAt = now + (duration * 30 * 24 * 60 * 60);\n \n // Store activation code with M3U playlist URL\n const insertStmt = conn.prepare(\n \"INSERT INTO activation_codes (code, duration_months, device_limit, expires_at, is_active, created_by_name, m3u_url, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, 1, ?, ?, ?, ?, ?)\"\n );\n await insertStmt.run([code, duration, limit, expiresAt, userName, m3u_url || null, userUuid, now, now]);\n \n // Log activity\n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\n \"CODE_GENERATED\",\n `Code ${code} generated (${duration} months, ${limit} devices${m3u_url ? ', M3U: ' + m3u_url.substring(0, 30) + '...' : ''})`,\n userName,\n userUuid,\n now,\n now\n ]);\n \n return Response.json({ success: true, code, expiresAt });\n }\n\n // List all activation codes\n if (action === \"get_codes\") {\n const stmt = conn.prepare(\"SELECT * FROM activation_codes ORDER BY _created_at DESC\");\n const codes = await stmt.all([]);\n return Response.json({ success: true, codes });\n }\n\n // List active IPTV streaming sessions\n if (action === \"get_sessions\") {\n const stmt = conn.prepare(`\n SELECT us.*, ac.code \n FROM user_sessions us \n JOIN activation_codes ac ON us.code_id = ac._row_id \n ORDER BY us.last_active DESC\n `);\n const sessions = await stmt.all([]);\n return Response.json({ success: true, sessions });\n }\n\n // Revoke activation code (stops IPTV access)\n if (action === \"revoke_code\") {\n const { code_id } = body;\n \n if (!code_id) {\n return Response.json({ error: \"Missing code_id\" }, { status: 400 });\n }\n \n const updateStmt = conn.prepare(\"UPDATE activation_codes SET is_active = 0, _updated_at = ? WHERE _row_id = ?\");\n await updateStmt.run([now, code_id]);\n \n const sessionStmt = conn.prepare(\"UPDATE user_sessions SET is_active = 0, _updated_at = ? WHERE code_id = ?\");\n await sessionStmt.run([now, code_id]);\n \n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\"CODE_REVOKED\", `Code ID ${code_id} revoked`, userName, userUuid, now, now]);\n \n return Response.json({ success: true });\n }\n\n // Terminate IPTV streaming session\n if (action === \"delete_session\") {\n const { session_id } = body;\n \n if (!session_id) {\n return Response.json({ error: \"Missing session_id\" }, { status: 400 });\n }\n \n const deleteStmt = conn.prepare(\"UPDATE user_sessions SET is_active = 0, _updated_at = ? WHERE _row_id = ?\");\n await deleteStmt.run([now, session_id]);\n \n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\"SESSION_DELETED\", `Session ${session_id} terminated`, userName, userUuid, now, now]);\n \n return Response.json({ success: true });\n }\n\n // Get activity logs\n if (action === \"get_logs\") {\n const stmt = conn.prepare(\"SELECT * FROM activity_logs ORDER BY _created_at DESC LIMIT 100\");\n const logs = await stmt.all([]);\n return Response.json({ success: true, logs });\n }\n\n // Get dashboard statistics\n if (action === \"get_stats\") {\n const totalCodesStmt = conn.prepare(\"SELECT COUNT(*) as count FROM activation_codes\");\n const activeCodesStmt = conn.prepare(\"SELECT COUNT(*) as count FROM activation_codes WHERE is_active = 1 AND expires_at > ?\");\n const activeSessionsStmt = conn.prepare(\"SELECT COUNT(*) as count FROM user_sessions WHERE is_active = 1\");\n \n const totalCodes = await totalCodesStmt.get([]);\n const activeCodes = await activeCodesStmt.get([now]);\n const activeSessions = await activeSessionsStmt.get([]);\n \n return Response.json({ \n success: true, \n stats: {\n totalCodes: totalCodes?.count || 0,\n activeCodes: activeCodes?.count || 0,\n activeSessions: activeSessions?.count || 0\n }\n });\n }\n\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n } catch (error) {\n console.error(\"Admin action error:\", error);\n return Response.json({ error: \"Internal server error\" }, { status: 500 });\n }\n}",[168],"83a23c90-fed5-11f0-95f1-42dde27851f2","fu4ffes5se127q4t0396se6tq748v8qe2v.ts","609a254c-fec5-11f0-926c-42dde27851f2",23,["D",1769885343809],"import { connect } from \"npm:@tursodatabase/serverless\";\n\n/**\n * Device Binding Edge Function\n * Handles device-to-code binding to prevent multi-device sharing\n * Baraa Admin Bypass: Can login from multiple devices for testing\n */\n\nconst ADMIN_BYPASS_DEVICES = new Set();\nconst MAX_ADMIN_DEVICES = 10;\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const conn = connect({\n url: req.headers.get(\"x-database-url\")!,\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const now = Math.floor(Date.now() / 1000);\n\n try {\n const body = await req.json();\n const { action, username } = body;\n\n // Check if this is Baraa admin account\n const isAdminBypass = username === \"Baraa\";\n\n // Bind device to code (first login)\n if (action === \"bind_device\") {\n const { code, deviceId, deviceInfo } = body;\n\n if (!code || !deviceId) {\n return Response.json({ error: \"Missing code or device_id\" }, { status: 400 });\n }\n\n console.log(`[DeviceBinding] 🔗 Binding device ${deviceId} to code ${code} (admin: ${isAdminBypass})`);\n\n // Get code info\n const codeStmt = conn.prepare(\n \"SELECT _row_id, device_id, is_active, expires_at FROM activation_codes WHERE code = ?\"\n );\n const codeData = await codeStmt.get([code]);\n\n if (!codeData) {\n return Response.json({ error: \"Invalid activation code\" }, { status: 404 });\n }\n\n if (!codeData.is_active) {\n return Response.json({ error: \"Code is inactive\" }, { status: 403 });\n }\n\n if (codeData.expires_at < now) {\n return Response.json({ error: \"Code has expired\" }, { status: 403 });\n }\n\n // Admin bypass: Baraa can use multiple devices\n if (isAdminBypass) {\n if (codeData.device_id === deviceId) {\n console.log(`[DeviceBinding] ✅ Admin device already bound`);\n return Response.json({ \n success: true, \n message: \"Admin device already authorized\",\n already_bound: true\n });\n }\n\n // Track admin devices (in-memory for demo)\n if (!ADMIN_BYPASS_DEVICES.has(deviceId)) {\n ADMIN_BYPASS_DEVICES.add(deviceId);\n console.log(`[DeviceBinding] 👑 Admin added device ${deviceId} (${ADMIN_BYPASS_DEVICES.size}/${MAX_ADMIN_DEVICES})`);\n }\n\n // Bind or rebind to this device\n const updateStmt = conn.prepare(\n \"UPDATE activation_codes SET device_id = ?, _updated_at = ? WHERE _row_id = ?\"\n );\n await updateStmt.run([deviceId, now, codeData._row_id]);\n\n return Response.json({ \n success: true, \n message: \"Admin device bound successfully\",\n admin_bypass: true\n });\n }\n\n // Regular user: check device binding\n if (codeData.device_id) {\n if (codeData.device_id === deviceId) {\n console.log(`[DeviceBinding] ✅ Device already bound`);\n return Response.json({ \n success: true, \n message: \"Device already authorized\",\n already_bound: true\n });\n } else {\n console.log(`[DeviceBinding] ❌ Code bound to different device`);\n return Response.json({ \n error: \"This code is already linked to another device.\",\n code: \"DEVICE_MISMATCH\",\n current_device_id: codeData.device_id\n }, { status: 403 });\n }\n }\n\n // Bind device to code\n const updateStmt = conn.prepare(\n \"UPDATE activation_codes SET device_id = ?, _updated_at = ? WHERE _row_id = ?\"\n );\n await updateStmt.run([deviceId, now, codeData._row_id]);\n\n console.log(`[DeviceBinding] ✅ Device bound successfully`);\n\n return Response.json({ \n success: true, \n message: \"Device bound successfully\"\n });\n }\n\n // Verify device access\n if (action === \"verify_device\") {\n const { code, deviceId } = body;\n\n if (!code || !deviceId) {\n return Response.json({ error: \"Missing code or device_id\" }, { status: 400 });\n }\n\n console.log(`[DeviceBinding] 🔍 Verifying device ${deviceId} for code ${code} (admin: ${isAdminBypass})`);\n\n const codeStmt = conn.prepare(\n \"SELECT device_id, is_active, expires_at FROM activation_codes WHERE code = ?\"\n );\n const codeData = await codeStmt.get([code]);\n\n if (!codeData) {\n return Response.json({ error: \"Invalid activation code\" }, { status: 404 });\n }\n\n if (!codeData.is_active) {\n return Response.json({ error: \"Code is inactive\" }, { status: 403 });\n }\n\n if (codeData.expires_at < now) {\n return Response.json({ error: \"Code has expired\" }, { status: 403 });\n }\n\n // Admin bypass: allow any device\n if (isAdminBypass) {\n console.log(`[DeviceBinding] 👑 Admin bypass - device verified`);\n return Response.json({ \n success: true, \n verified: true,\n admin_bypass: true\n });\n }\n\n // Check device binding\n if (!codeData.device_id) {\n console.log(`[DeviceBinding] ℹ️ Code not bound, allowing first-time access`);\n return Response.json({ \n success: true, \n needs_bind: true\n });\n }\n\n if (codeData.device_id !== deviceId) {\n console.log(`[DeviceBinding] ❌ Device mismatch`);\n return Response.json({ \n error: \"This code is already linked to another device.\",\n code: \"DEVICE_MISMATCH\"\n }, { status: 403 });\n }\n\n console.log(`[DeviceBinding] ✅ Device verified`);\n return Response.json({ \n success: true, \n verified: true\n });\n }\n\n // Reset device binding (admin only)\n if (action === \"reset_device\") {\n const { codeId } = body;\n\n if (!codeId) {\n return Response.json({ error: \"Missing code_id\" }, { status: 400 });\n }\n\n console.log(`[DeviceBinding] 🔄 Resetting device for code_id ${codeId}`);\n\n const updateStmt = conn.prepare(\n \"UPDATE activation_codes SET device_id = NULL, _updated_at = ? WHERE _row_id = ?\"\n );\n const result = await updateStmt.run([now, codeId]);\n\n console.log(`[DeviceBinding] ✅ Device reset complete`);\n\n return Response.json({ \n success: true, \n updated: result.rowsAffected || 0\n });\n }\n\n // Get device info for admin display\n if (action === \"get_device_info\") {\n const { code } = body;\n\n if (!code) {\n return Response.json({ error: \"Missing code\" }, { status: 400 });\n }\n\n const stmt = conn.prepare(\n \"SELECT code, device_id, m3u_url, expires_at, device_limit FROM activation_codes WHERE code = ?\"\n );\n const codeData = await stmt.get([code]);\n\n if (!codeData) {\n return Response.json({ error: \"Code not found\" }, { status: 404 });\n }\n\n return Response.json({ \n success: true, \n device_id: codeData.device_id,\n has_device: !!codeData.device_id\n });\n }\n\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n } catch (error) {\n console.error(\"[DeviceBinding] ❌ Error:\", error);\n return Response.json({ error: \"Internal server error\" }, { status: 500 });\n }\n}",[175],"cb977376-fdef-11f0-b39c-42dde27851f2","fu4871544f42284vvt914f05262v596t70.ts","e1209982-fde2-11f0-bbea-42dde27851f2",11,["D",1769786680310],3,"import { connect } from \"npm:@tursodatabase/serverless\";\n\n/**\n * M3U Parser Edge Function\n * Fetches and parses M3U playlists, storing content in database\n * Also retrieves content for user-facing components\n */\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const conn = connect({\n url: req.headers.get(\"x-database-url\")!,\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const now = Math.floor(Date.now() / 1000);\n\n try {\n const body = await req.json();\n const { action } = body;\n\n // Fetch and parse M3U playlist for a code\n if (action === \"fetch_m3u\") {\n const { code, force_refresh } = body;\n \n if (!code) {\n return Response.json({ error: \"Missing activation code\" }, { status: 400 });\n }\n \n // Get activation code info\n const codeStmt = conn.prepare(\"SELECT * FROM activation_codes WHERE code = ? AND is_active = 1\");\n const codeData = await codeStmt.get([code]);\n \n if (!codeData) {\n return Response.json({ error: \"Invalid or inactive code\" }, { status: 404 });\n }\n \n // Check expiry\n if (codeData.expires_at < now) {\n return Response.json({ error: \"Code expired\" }, { status: 403 });\n }\n \n if (!codeData.m3u_url) {\n return Response.json({ error: \"No M3U URL configured for this code\" }, { status: 400 });\n }\n \n // Hard reset: Delete existing content if force refresh\n if (force_refresh) {\n console.log(`[M3U Parser] 🔥 HARD RESET for code ${code}`);\n const deleteStmt = conn.prepare(\"DELETE FROM m3u_contents WHERE code_id = ?\");\n await deleteStmt.run([codeData._row_id]);\n console.log(`[M3U Parser] ✅ Cleared existing content for code ${code}`);\n }\n \n // Fetch M3U content with timeout\n console.log(`[M3U Parser] 📡 Fetching M3U from: ${codeData.m3u_url}`);\n \n const controller = new AbortController();\n const timeoutId = setTimeout(() => controller.abort(), 60000); // 60s timeout\n \n const m3uResponse = await fetch(codeData.m3u_url, {\n headers: {\n 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',\n 'Accept': '*/*',\n 'Accept-Language': 'en-US,en;q=0.9',\n 'Connection': 'keep-alive',\n 'Referer': new URL(codeData.m3u_url).origin\n },\n signal: controller.signal\n });\n \n clearTimeout(timeoutId);\n \n if (!m3uResponse.ok) {\n console.error(`[M3U Parser] ❌ HTTP ${m3uResponse.status} when fetching M3U`);\n return Response.json({ error: `Failed to fetch M3U playlist: HTTP ${m3uResponse.status}` }, { status: 502 });\n }\n \n const m3uContent = await m3uResponse.text();\n console.log(`[M3U Parser] 📄 Fetched ${m3uContent.length} bytes`);\n \n // Parse M3U content\n console.log(`[M3U Parser] 🔍 Starting parse...`);\n const parsedContent = parseM3U(m3uContent);\n console.log(`[M3U Parser] ✅ Parsed ${parsedContent.length} items`);\n \n // Log categorization stats\n const liveCount = parsedContent.filter(i => i.type === 'live').length;\n const vodCount = parsedContent.filter(i => i.type === 'vod').length;\n const seriesCount = parsedContent.filter(i => i.type === 'series').length;\n const catchupCount = parsedContent.filter(i => i.type === 'catchup').length;\n \n console.log(`[M3U Parser] 📊 Categorization: Live=${liveCount}, VOD=${vodCount}, Series=${seriesCount}, Catchup=${catchupCount}`);\n \n if (vodCount > 0 || seriesCount > 0) {\n console.log(`[M3U Parser] 🎉 SUCCESS: Found ${vodCount} Movies and ${seriesCount} Series!`);\n } else {\n console.log(`[M3U Parser] ⚠️ WARNING: No Movies or Series found. Check group-title patterns in your M3U.`);\n }\n \n // Store parsed content in chunks\n const insertStmt = conn.prepare(\n \"INSERT INTO m3u_contents (code_id, content_type, title, logo_url, stream_url, category, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)\"\n );\n \n const userUuid = req.headers.get(\"x-user-uuid\") || \"system\";\n let insertCount = 0;\n let errorCount = 0;\n \n for (let i = 0; i < parsedContent.length; i++) {\n const item = parsedContent[i];\n \n try {\n await insertStmt.run([\n codeData._row_id,\n item.type,\n item.title,\n item.logo || null,\n item.url,\n item.category || null,\n userUuid,\n now,\n now\n ]);\n insertCount++;\n \n // Log progress every 100 items\n if (insertCount % 100 === 0) {\n console.log(`[M3U Parser] 💾 Inserted ${insertCount}/${parsedContent.length} items...`);\n }\n } catch (err) {\n console.error(`[M3U Parser] ❌ Error inserting item ${i}:`, err);\n errorCount++;\n }\n }\n \n console.log(`[M3U Parser] ✅ Insert complete: ${insertCount} inserted, ${errorCount} errors`);\n \n return Response.json({ \n success: true, \n cached: false, \n fetched: insertCount,\n errors: errorCount,\n live: liveCount,\n vod: vodCount,\n series: seriesCount,\n catchup: catchupCount\n });\n }\n\n // Get content for user\n if (action === \"get_content\") {\n const { code, type, category } = body;\n \n if (!code) {\n return Response.json({ error: \"Missing activation code\" }, { status: 400 });\n }\n \n // Verify code\n const codeStmt = conn.prepare(\"SELECT _row_id FROM activation_codes WHERE code = ? AND is_active = 1 AND expires_at > ?\");\n const codeData = await codeStmt.get([code, now]);\n \n if (!codeData) {\n return Response.json({ error: \"Invalid or expired code\" }, { status: 403 });\n }\n \n // Build query\n let sql = \"SELECT * FROM m3u_contents WHERE code_id = ?\";\n const params = [codeData._row_id];\n \n if (type) {\n sql += \" AND content_type = ?\";\n params.push(type);\n }\n \n if (category) {\n sql += \" AND category = ?\";\n params.push(category);\n }\n \n sql += \" ORDER BY title ASC LIMIT 500\";\n \n const stmt = conn.prepare(sql);\n const content = await stmt.all(params);\n \n console.log(`[M3U Parser] get_content: code=${code}, type=${type}, found=${content.length}`);\n \n return Response.json({ success: true, content });\n }\n\n // Get categories for a content type\n if (action === \"get_categories\") {\n const { code, type } = body;\n \n if (!code) {\n return Response.json({ error: \"Missing activation code\" }, { status: 400 });\n }\n \n const codeStmt = conn.prepare(\"SELECT _row_id FROM activation_codes WHERE code = ? AND is_active = 1 AND expires_at > ?\");\n const codeData = await codeStmt.get([code, now]);\n \n if (!codeData) {\n return Response.json({ error: \"Invalid or expired code\" }, { status: 403 });\n }\n \n let sql = \"SELECT DISTINCT category FROM m3u_contents WHERE code_id = ?\";\n const params = [codeData._row_id];\n \n if (type) {\n sql += \" AND content_type = ?\";\n params.push(type);\n }\n \n sql += \" AND category IS NOT NULL ORDER BY category ASC\";\n \n const stmt = conn.prepare(sql);\n const categories = await stmt.all(params);\n \n return Response.json({ success: true, categories: categories.map(c => c.category) });\n }\n\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n } catch (error) {\n console.error(\"[M3U Parser] ❌ Error:\", error);\n return Response.json({ error: \"Internal server error\" }, { status: 500 });\n }\n}\n\n/**\n * Parse M3U playlist content with SMART VOD/Series detection\n * Checks BOTH group-title AND title for better accuracy\n * Returns array of { type, title, logo, url, category }\n */\nfunction parseM3U(content: string): Array<{type: string, title: string, logo?: string, url: string, category?: string}> {\n const lines = content.split('\\n');\n const items = [];\n let currentItem: any = {};\n let lineCount = 0;\n \n for (const line of lines) {\n lineCount++;\n const trimmedLine = line.trim();\n \n if (trimmedLine.startsWith('#EXTINF:')) {\n // Parse EXTINF line\n currentItem = {};\n \n // Extract title (after the comma)\n const titleMatch = trimmedLine.match(/,(.*)$/);\n if (titleMatch) {\n currentItem.title = titleMatch[1].trim();\n }\n \n // Extract logo from tvg-logo attribute\n const logoMatch = trimmedLine.match(/tvg-logo=\"([^\"]*)\"/);\n if (logoMatch) {\n currentItem.logo = logoMatch[1];\n }\n \n // Extract category from group-title\n const groupMatch = trimmedLine.match(/group-title=\"([^\"]*)\"/);\n if (groupMatch) {\n currentItem.category = groupMatch[1];\n }\n \n // Get lowercase versions for detection\n const lineLower = trimmedLine.toLowerCase();\n const titleLower = currentItem.title?.toLowerCase() || '';\n const categoryLower = currentItem.category?.toLowerCase() || '';\n \n // SMART DETECTION: Check BOTH group-title AND title\n let detectedType = 'live'; // Default\n \n // VOD/Movies detection - check group-title AND title\n const vodGroupIndicators = [\n 'group-title=\"vod\"', 'group-title=\"movies\"', 'group-title=\"cinema\"',\n 'group-title=\"vods\"', 'group-title=\"movie\"'\n ];\n const vodCategoryKeywords = ['vod', 'movies', 'cinema', 'أفلام', 'afilm', 'film'];\n const vodTitleKeywords = ['movie', 'film', 'cinema', 'أفلام'];\n \n const hasVodGroup = vodGroupIndicators.some(i => lineLower.includes(i));\n const hasVodCategory = vodCategoryKeywords.some(k => categoryLower.includes(k));\n const hasVodTitle = vodTitleKeywords.some(k => titleLower.includes(k));\n \n if (hasVodGroup || hasVodCategory || hasVodTitle) {\n detectedType = 'vod';\n console.log(`[M3U Parser] 🎬 Detected VOD: ${currentItem.title} (group:${hasVodGroup}, cat:${hasVodCategory}, title:${hasVodTitle})`);\n }\n \n // Series detection - check group-title AND title\n const seriesGroupIndicators = [\n 'group-title=\"series\"', 'group-title=\"tv shows\"', 'group-title=\"مسلسلات\"',\n 'group-title=\"tvshows\"', 'group-title=\" seasons \"', 'group-title=\"season\"'\n ];\n const seriesCategoryKeywords = ['series', 'tv shows', 'tvshows', 'مسلسلات', 'mosalsalat', 'season'];\n const seriesTitleKeywords = [\n 'series', 'episode', 'season', ' s1', ' s2', ' s01', ' s02',\n 'e01', 'e02', 'e03', ' e1 ', ' e2 ', ' e3 '\n ];\n \n const hasSeriesGroup = seriesGroupIndicators.some(i => lineLower.includes(i));\n const hasSeriesCategory = seriesCategoryKeywords.some(k => categoryLower.includes(k));\n const hasSeriesTitle = seriesTitleKeywords.some(k => titleLower.includes(k) || titleLower.match(/\\s+s\\d+\\s*/));\n \n // Series overrides VOD if both detected\n if (hasSeriesGroup || hasSeriesCategory || hasSeriesTitle) {\n detectedType = 'series';\n console.log(`[M3U Parser] 📺 Detected Series: ${currentItem.title} (group:${hasSeriesGroup}, cat:${hasSeriesCategory}, title:${hasSeriesTitle})`);\n }\n \n // Catch-up detection\n if (lineLower.includes('group-title=\"catchup\"') ||\n lineLower.includes('group-title=\"catch-up\"') ||\n categoryLower.includes('catchup') ||\n categoryLower.includes('catch-up')) {\n detectedType = 'catchup';\n console.log(`[M3U Parser] ⏪ Detected Catch-up: ${currentItem.title}`);\n }\n \n currentItem.type = detectedType;\n \n // Log every 100 lines for debugging\n if (lineCount % 100 === 0) {\n const vodSoFar = items.filter(i => i.type === 'vod').length;\n const seriesSoFar = items.filter(i => i.type === 'series').length;\n console.log(`[M3U Parser] 📝 Line ${lineCount}: ${items.length} items (${vodSoFar} VOD, ${seriesSoFar} Series so far)`);\n }\n \n } else if (trimmedLine && !trimmedLine.startsWith('#')) {\n // URL line\n if (currentItem.title) {\n currentItem.url = trimmedLine;\n items.push({ ...currentItem });\n currentItem = {};\n }\n }\n }\n \n console.log(`[M3U Parser] 📝 Total lines processed: ${lineCount}`);\n console.log(`[M3U Parser] 📝 Final item count: ${items.length}`);\n console.log(`[M3U Parser] 📝 Final breakdown: Live=${items.filter(i=>i.type==='live').length}, VOD=${items.filter(i=>i.type==='vod').length}, Series=${items.filter(i=>i.type==='series').length}`);\n \n return items;\n}",[182],"16eec19a-fe21-11f0-8110-42dde27851f2","fu32f87qv9q9704307q5t3e734e0487553.ts","16eec2da-fe21-11f0-8110-42dde27851f2",16,["D",1769807852043],"import { connect } from \"npm:@tursodatabase/serverless\";\n\n/**\n * M3U Parser Edge Function\n * Now supports CLIENT-SIDE parsing with batch_insert action\n * Also retrieves content for user-facing components\n */\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const conn = connect({\n url: req.headers.get(\"x-database-url\")!,\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const now = Math.floor(Date.now() / 1000);\n\n try {\n const body = await req.json();\n const { action } = body;\n const userUuid = req.headers.get(\"x-user-uuid\") || \"system\";\n\n // Hard reset - delete all content for a code\n if (action === \"hard_reset\") {\n const { code } = body;\n \n if (!code) {\n return Response.json({ error: \"Missing code\" }, { status: 400 });\n }\n\n // Get code ID\n const codeStmt = conn.prepare(\"SELECT _row_id FROM activation_codes WHERE code = ?\");\n const codeData = await codeStmt.get([code]);\n\n if (!codeData) {\n return Response.json({ error: \"Code not found\" }, { status: 404 });\n }\n\n console.log(`[M3U Parser] 🔥 HARD RESET for code ${code}`);\n\n // Delete all content\n const deleteStmt = conn.prepare(\"DELETE FROM m3u_contents WHERE code_id = ?\");\n const result = await deleteStmt.run([codeData._row_id]);\n\n console.log(`[M3U Parser] ✅ Deleted ${result.rowsAffected || 0} items`);\n\n return Response.json({ \n success: true, \n deleted: result.rowsAffected || 0,\n code_id: codeData._row_id\n });\n }\n\n // Batch insert - receives items from client-side parser\n if (action === \"batch_insert\") {\n const { code_id, items } = body;\n\n if (!code_id || !items || !Array.isArray(items)) {\n return Response.json({ error: \"Missing code_id or items\" }, { status: 400 });\n }\n\n console.log(`[M3U Parser] 📦 Batch insert: ${items.length} items for code_id ${code_id}`);\n\n const insertStmt = conn.prepare(\n \"INSERT INTO m3u_contents (code_id, content_type, title, logo_url, stream_url, category, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)\"\n );\n\n let inserted = 0;\n let errors = 0;\n\n for (const item of items) {\n try {\n await insertStmt.run([\n code_id,\n item.type || 'live',\n item.title,\n item.logo || null,\n item.url,\n item.category || null,\n userUuid,\n now,\n now\n ]);\n inserted++;\n } catch (err) {\n console.error('[M3U Parser] Insert error:', err);\n errors++;\n }\n }\n\n console.log(`[M3U Parser] ✅ Batch complete: ${inserted} inserted, ${errors} errors`);\n\n return Response.json({ success: true, inserted, errors });\n }\n\n // Get code info - returns code ID for client-side operations\n if (action === \"get_code_info\") {\n const { code } = body;\n\n if (!code) {\n return Response.json({ error: \"Missing code\" }, { status: 400 });\n }\n\n const codeStmt = conn.prepare(\"SELECT * FROM activation_codes WHERE code = ? AND is_active = 1\");\n const codeData = await codeStmt.get([code]);\n\n if (!codeData) {\n return Response.json({ error: \"Invalid or inactive code\" }, { status: 404 });\n }\n\n if (codeData.expires_at < now) {\n return Response.json({ error: \"Code expired\" }, { status: 403 });\n }\n\n // Count existing content\n const countStmt = conn.prepare(\"SELECT COUNT(*) as count FROM m3u_contents WHERE code_id = ?\");\n const countResult = await countStmt.get([codeData._row_id]);\n\n return Response.json({\n success: true,\n code_id: codeData._row_id,\n m3u_url: codeData.m3u_url,\n expires_at: codeData.expires_at,\n content_count: countResult?.count || 0\n });\n }\n\n // Get content for user\n if (action === \"get_content\") {\n const { code, type, category } = body;\n \n if (!code) {\n return Response.json({ error: \"Missing activation code\" }, { status: 400 });\n }\n \n // Verify code\n const codeStmt = conn.prepare(\"SELECT _row_id FROM activation_codes WHERE code = ? AND is_active = 1 AND expires_at > ?\");\n const codeData = await codeStmt.get([code, now]);\n \n if (!codeData) {\n return Response.json({ error: \"Invalid or expired code\" }, { status: 403 });\n }\n \n // Build query\n let sql = \"SELECT * FROM m3u_contents WHERE code_id = ?\";\n const params = [codeData._row_id];\n \n if (type) {\n sql += \" AND content_type = ?\";\n params.push(type);\n }\n \n if (category) {\n sql += \" AND category = ?\";\n params.push(category);\n }\n \n sql += \" ORDER BY title ASC LIMIT 500\";\n \n const stmt = conn.prepare(sql);\n const content = await stmt.all(params);\n \n console.log(`[M3U Parser] get_content: code=${code}, type=${type}, found=${content.length}`);\n \n return Response.json({ success: true, content });\n }\n\n // Get categories for a content type\n if (action === \"get_categories\") {\n const { code, type } = body;\n \n if (!code) {\n return Response.json({ error: \"Missing activation code\" }, { status: 400 });\n }\n \n const codeStmt = conn.prepare(\"SELECT _row_id FROM activation_codes WHERE code = ? AND is_active = 1 AND expires_at > ?\");\n const codeData = await codeStmt.get([code, now]);\n \n if (!codeData) {\n return Response.json({ error: \"Invalid or expired code\" }, { status: 403 });\n }\n \n let sql = \"SELECT DISTINCT category FROM m3u_contents WHERE code_id = ?\";\n const params = [codeData._row_id];\n \n if (type) {\n sql += \" AND content_type = ?\";\n params.push(type);\n }\n \n sql += \" AND category IS NOT NULL ORDER BY category ASC\";\n \n const stmt = conn.prepare(sql);\n const categories = await stmt.all(params);\n \n return Response.json({ success: true, categories: categories.map(c => c.category) });\n }\n\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n } catch (error) {\n console.error(\"[M3U Parser] ❌ Error:\", error);\n return Response.json({ error: \"Internal server error\" }, { status: 500 });\n }\n}",[190],"ee40397a-fed6-11f0-a75b-42dde27851f2","fu0q89tfs5t22342v9s4e97t993qef953q.ts","5779ed60-fed1-11f0-bd5f-42dde27851f2",24,["D",1769885952204],"import { connect } from \"npm:@tursodatabase/serverless\";\n\n/**\n * Admin Actions Edge Function\n * Handles all admin operations\n * Admin bypass: Baraa account can test from multiple devices\n */\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const conn = connect({\n url: req.headers.get(\"x-database-url\")!,\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const now = Math.floor(Date.now() / 1000);\n\n try {\n const body = await req.json();\n const { action, admin_token, username } = body;\n\n // Admin bypass: Baraa can access from any device for testing\n const isAdmin = username === \"Baraa\" || admin_token === \"true\";\n \n if (!isAdmin) {\n console.log(\"[AdminActions] ❌ Unauthorized: Invalid admin credentials\");\n return Response.json({ error: \"Unauthorized: Admin access required\" }, { status: 403 });\n }\n\n const userUuid = req.headers.get(\"x-user-uuid\") || \"admin\";\n const performedBy = username === \"Baraa\" ? \"Baraa\" : \"Admin\";\n\n // Get all codes\n if (action === \"get_codes\") {\n const stmt = conn.prepare(`\n SELECT \n ac._row_id,\n ac.code,\n ac.duration_months,\n ac.device_limit,\n ac.expires_at,\n ac.is_active,\n ac.created_by_name,\n ac._created_at,\n ac.m3u_url,\n ac.device_id,\n COUNT(DISTINCT s._row_id) as active_sessions\n FROM activation_codes ac\n LEFT JOIN user_sessions s ON s.code_id = ac._row_id AND s.is_active = 1\n GROUP BY ac._row_id\n ORDER BY ac._created_at DESC\n `);\n \n const codes = await stmt.all();\n \n return Response.json({ \n success: true, \n codes: codes.map((c: any) => ({\n _row_id: c._row_id,\n code: c.code,\n duration_months: c.duration_months,\n device_limit: c.device_limit,\n expires_at: c.expires_at,\n is_active: c.is_active,\n created_by_name: c.created_by_name,\n _created_at: c._created_at,\n m3u_url: c.m3u_url,\n device_id: c.device_id,\n active_sessions: c.active_sessions || 0\n }))\n });\n }\n\n // Generate code\n if (action === \"generate_code\") {\n // Support both snake_case (from frontend) and camelCase\n const durationMonths = body.duration_months || body.durationMonths;\n const deviceLimit = body.device_limit || body.deviceLimit;\n const m3uUrl = body.m3u_url || body.m3uUrl;\n\n console.log(\"[AdminActions] 🔍 Request body:\", { \n durationMonths, \n deviceLimit, \n m3uUrl: m3uUrl?.substring(0, 50) + \"...\" \n });\n\n // Validate inputs\n if (!durationMonths || !deviceLimit || !m3uUrl) {\n console.log(\"[AdminActions] ❌ Missing fields:\", { \n hasDuration: !!durationMonths, \n hasDeviceLimit: !!deviceLimit, \n hasM3uUrl: !!m3uUrl \n });\n return Response.json({ \n error: \"Missing required fields: durationMonths, deviceLimit, m3uUrl\",\n details: {\n received: { durationMonths, deviceLimit, m3uUrl }\n }\n }, { status: 400 });\n }\n\n // Truncate M3U URL if too long (prevent DB errors)\n const safeM3uUrl = m3uUrl.length > 2000 ? m3uUrl.substring(0, 2000) : m3uUrl;\n\n const expiresAt = now + (Number(durationMonths) * 30 * 24 * 60 * 60);\n \n // Generate 10-digit code\n let code;\n let attempts = 0;\n do {\n code = Math.floor(1000000000 + Math.random() * 9000000000).toString();\n const existing = await conn.prepare(\"SELECT _row_id FROM activation_codes WHERE code = ?\").get([code]);\n if (!existing) break;\n attempts++;\n } while (attempts < 10);\n\n if (!code) {\n return Response.json({ error: \"Failed to generate unique code\" }, { status: 500 });\n }\n\n const stmt = conn.prepare(\n \"INSERT INTO activation_codes (code, duration_months, device_limit, expires_at, is_active, m3u_url, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, 1, ?, ?, ?, ?)\"\n );\n \n await stmt.run([code, Number(durationMonths), Number(deviceLimit), expiresAt, safeM3uUrl, userUuid, now, now]);\n\n // Log activity\n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\n \"generate_code\",\n `Generated code ${code} for ${durationMonths} months, ${deviceLimit} device(s)`,\n performedBy,\n userUuid,\n now,\n now\n ]);\n\n console.log(`[AdminActions] ✅ Generated code: ${code} with M3U URL length: ${safeM3uUrl.length}`);\n\n return Response.json({ success: true, code });\n }\n\n // Revoke code\n if (action === \"revoke_code\") {\n const { code_id } = body;\n\n const getCodeStmt = conn.prepare(\"SELECT code FROM activation_codes WHERE _row_id = ?\");\n const codeData = await getCodeStmt.get([code_id]);\n \n if (!codeData) {\n return Response.json({ error: \"Code not found\" }, { status: 404 });\n }\n\n const stmt = conn.prepare(\"UPDATE activation_codes SET is_active = 0, _updated_at = ? WHERE _row_id = ?\");\n await stmt.run([now, code_id]);\n\n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\"revoke_code\", `Revoked code ${codeData.code}`, performedBy, userUuid, now, now]);\n\n return Response.json({ success: true });\n }\n\n // Get sessions\n if (action === \"get_sessions\") {\n const stmt = conn.prepare(`\n SELECT s.*, ac.code, ac.expires_at\n FROM user_sessions s\n JOIN activation_codes ac ON ac._row_id = s.code_id\n ORDER BY s.last_active DESC\n LIMIT 100\n `);\n \n const sessions = await stmt.all();\n\n return Response.json({ success: true, sessions });\n }\n\n // Delete session\n if (action === \"delete_session\") {\n const { session_id } = body;\n\n const stmt = conn.prepare(\"UPDATE user_sessions SET is_active = 0, _updated_at = ? WHERE _row_id = ?\");\n await stmt.run([now, session_id]);\n\n const logStmt = conn.prepare(\n \"INSERT INTO activity_logs (action, details, performed_by, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?)\"\n );\n await logStmt.run([\"session_deleted\", `Deleted session ${session_id}`, performedBy, userUuid, now, now]);\n\n return Response.json({ success: true });\n }\n\n // Get activity logs\n if (action === \"get_logs\") {\n const { limit = 50 } = body;\n\n const stmt = conn.prepare(`\n SELECT * FROM activity_logs\n ORDER BY _created_at DESC\n LIMIT ?\n `);\n \n const logs = await stmt.all([limit]);\n\n return Response.json({ success: true, logs });\n }\n\n // Get stats\n if (action === \"get_stats\") {\n const activeCodesStmt = conn.prepare(\"SELECT COUNT(*) as count FROM activation_codes WHERE is_active = 1 AND expires_at > ?\");\n const activeCodes = await activeCodesStmt.get([now]);\n \n const activeSessionsStmt = conn.prepare(\"SELECT COUNT(*) as count FROM user_sessions WHERE is_active = 1\");\n const activeSessions = await activeSessionsStmt.get([]);\n \n const totalContentStmt = conn.prepare(\"SELECT COUNT(*) as count FROM m3u_contents\");\n const totalContent = await totalContentStmt.get([]);\n\n return Response.json({\n success: true,\n stats: {\n active_codes: activeCodes?.count || 0,\n active_sessions: activeSessions?.count || 0,\n total_content: totalContent?.count || 0\n }\n });\n }\n\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n } catch (error) {\n console.error(\"[AdminActions] ❌ Error:\", error);\n return Response.json({ \n error: \"Internal server error\", \n details: error?.message || String(error) \n }, { status: 500 });\n }\n}",[197],"f2bdb4d4-fe20-11f0-8e0f-42dde27851f2","fu09t1729svq6f437fq7tt36ts5156428e.ts","0d777b6a-fdf0-11f0-888a-42dde27851f2",14,["D",1769807791330],"import { connect } from \"npm:@tursodatabase/serverless\";\n\n/**\n * M3U Parser Edge Function\n * Now supports CLIENT-SIDE parsing with batch_insert action\n * Also retrieves content for user-facing components\n */\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const conn = connect({\n url: req.headers.get(\"x-database-url\")!,\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const now = Math.floor(Date.now() / 1000);\n\n try {\n const body = await req.json();\n const { action } = body;\n const userUuid = req.headers.get(\"x-user-uuid\") || \"system\";\n\n // Hard reset - delete all content for a code\n if (action === \"hard_reset\") {\n const { code } = body;\n \n if (!code) {\n return Response.json({ error: \"Missing code\" }, { status: 400 });\n }\n\n // Get code ID\n const codeStmt = conn.prepare(\"SELECT _row_id FROM activation_codes WHERE code = ?\");\n const codeData = await codeStmt.get([code]);\n\n if (!codeData) {\n return Response.json({ error: \"Code not found\" }, { status: 404 });\n }\n\n console.log(`[M3U Parser] 🔥 HARD RESET for code ${code}`);\n\n // Delete all content\n const deleteStmt = conn.prepare(\"DELETE FROM m3u_contents WHERE code_id = ?\");\n const result = await deleteStmt.run([codeData._row_id]);\n\n console.log(`[M3U Parser] ✅ Deleted ${result.rowsAffected || 0} items`);\n\n return Response.json({ \n success: true, \n deleted: result.rowsAffected || 0,\n code_id: codeData._row_id\n });\n }\n\n // Batch insert - receives items from client-side parser\n if (action === \"batch_insert\") {\n const { code_id, items } = body;\n\n if (!code_id || !items || !Array.isArray(items)) {\n return Response.json({ error: \"Missing code_id or items\" }, { status: 400 });\n }\n\n console.log(`[M3U Parser] 📦 Batch insert: ${items.length} items for code_id ${code_id}`);\n\n const insertStmt = conn.prepare(\n \"INSERT INTO m3u_contents (code_id, content_type, title, logo_url, stream_url, category, _created_by, _created_at, _updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)\"\n );\n\n let inserted = 0;\n let errors = 0;\n\n for (const item of items) {\n try {\n await insertStmt.run([\n code_id,\n item.type || 'live',\n item.title,\n item.logo || null,\n item.url,\n item.category || null,\n userUuid,\n now,\n now\n ]);\n inserted++;\n } catch (err) {\n console.error('[M3U Parser] Insert error:', err);\n errors++;\n }\n }\n\n console.log(`[M3U Parser] ✅ Batch complete: ${inserted} inserted, ${errors} errors`);\n\n return Response.json({ success: true, inserted, errors });\n }\n\n // Get code info - returns code ID for client-side operations\n if (action === \"get_code_info\") {\n const { code } = body;\n\n if (!code) {\n return Response.json({ error: \"Missing code\" }, { status: 400 });\n }\n\n const codeStmt = conn.prepare(\"SELECT * FROM activation_codes WHERE code = ? AND is_active = 1\");\n const codeData = await codeStmt.get([code]);\n\n if (!codeData) {\n return Response.json({ error: \"Invalid or inactive code\" }, { status: 404 });\n }\n\n if (codeData.expires_at < now) {\n return Response.json({ error: \"Code expired\" }, { status: 403 });\n }\n\n // Count existing content\n const countStmt = conn.prepare(\"SELECT COUNT(*) as count FROM m3u_contents WHERE code_id = ?\");\n const countResult = await countStmt.get([codeData._row_id]);\n\n return Response.json({\n success: true,\n code_id: codeData._row_id,\n m3u_url: codeData.m3u_url,\n expires_at: codeData.expires_at,\n content_count: countResult?.count || 0\n });\n }\n\n // Get content for user\n if (action === \"get_content\") {\n const { code, type, category } = body;\n \n if (!code) {\n return Response.json({ error: \"Missing activation code\" }, { status: 400 });\n }\n \n // Verify code\n const codeStmt = conn.prepare(\"SELECT _row_id FROM activation_codes WHERE code = ? AND is_active = 1 AND expires_at > ?\");\n const codeData = await codeStmt.get([code, now]);\n \n if (!codeData) {\n return Response.json({ error: \"Invalid or expired code\" }, { status: 403 });\n }\n \n // Build query\n let sql = \"SELECT * FROM m3u_contents WHERE code_id = ?\";\n const params = [codeData._row_id];\n \n if (type) {\n sql += \" AND content_type = ?\";\n params.push(type);\n }\n \n if (category) {\n sql += \" AND category = ?\";\n params.push(category);\n }\n \n sql += \" ORDER BY title ASC LIMIT 500\";\n \n const stmt = conn.prepare(sql);\n const content = await stmt.all(params);\n \n console.log(`[M3U Parser] get_content: code=${code}, type=${type}, found=${content.length}`);\n \n return Response.json({ success: true, content });\n }\n\n // Get categories for a content type\n if (action === \"get_categories\") {\n const { code, type } = body;\n \n if (!code) {\n return Response.json({ error: \"Missing activation code\" }, { status: 400 });\n }\n \n const codeStmt = conn.prepare(\"SELECT _row_id FROM activation_codes WHERE code = ? AND is_active = 1 AND expires_at > ?\");\n const codeData = await codeStmt.get([code, now]);\n \n if (!codeData) {\n return Response.json({ error: \"Invalid or expired code\" }, { status: 403 });\n }\n \n let sql = \"SELECT DISTINCT category FROM m3u_contents WHERE code_id = ?\";\n const params = [codeData._row_id];\n \n if (type) {\n sql += \" AND content_type = ?\";\n params.push(type);\n }\n \n sql += \" AND category IS NOT NULL ORDER BY category ASC\";\n \n const stmt = conn.prepare(sql);\n const categories = await stmt.all(params);\n \n return Response.json({ success: true, categories: categories.map(c => c.category) });\n }\n\n // Legacy fetch_m3u - redirect to use client-side parsing\n if (action === \"fetch_m3u\") {\n return Response.json({ \n error: \"Please use client-side parsing for better compatibility. Use get_code_info first.\",\n use_client_side: true \n }, { status: 400 });\n }\n\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n } catch (error) {\n console.error(\"[M3U Parser] ❌ Error:\", error);\n return Response.json({ error: \"Internal server error\" }, { status: 500 });\n }\n}",[204],"f6652734-fe20-11f0-a7c4-42dde27851f2","fu09q35t4134vs491v9v329478s1eqv6s6.ts","fc05358c-fdec-11f0-b44e-42dde27851f2",15,["D",1769807797457],"/**\n * Stream Proxy Edge Function\n * Proxies video stream requests to bypass CORS restrictions\n * Uses ROTATING User-Agent to avoid blocks\n * Supports HLS (.m3u8) and MPEG-TS streams\n */\n\n// Rotating User-Agents to mimic different players\nconst USER_AGENTS = [\n 'VLC/3.0.18 LibVLC/3.0.18',\n 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',\n 'IPTV Smarters Pro/2.2.2.5',\n 'Dalvik/2.1.0 (Linux; U; Android 13; SM-G998B Build/TP1A.220624.014)',\n 'ExoPlayer/2.18.1 (Linux;Android 13) ExoPlayerLib/2.18.1',\n 'Kodi/20.0 (Windows NT 10.0.19045; Win64; x64; Desktop) App_Bitness/64 Version/20.0',\n 'okhttp/4.9.3',\n 'Lavf/60.3.100',\n 'SmartTV/1.0 (Samsung; Tizen 6.0)',\n];\n\nfunction getRandomUserAgent(): string {\n return USER_AGENTS[Math.floor(Math.random() * USER_AGENTS.length)];\n}\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const url = new URL(req.url);\n const streamUrl = url.searchParams.get('url');\n\n if (!streamUrl) {\n return new Response('Missing stream URL', { status: 400 });\n }\n\n // Handle OPTIONS preflight\n if (req.method === 'OPTIONS') {\n return new Response(null, { \n status: 204,\n headers: {\n 'Access-Control-Allow-Origin': '*',\n 'Access-Control-Allow-Methods': 'GET, HEAD, OPTIONS',\n 'Access-Control-Allow-Headers': 'Range, Content-Type, Authorization, X-Requested-With',\n 'Access-Control-Max-Age': '86400'\n }\n });\n }\n\n try {\n // Validate URL protocol\n const parsedUrl = new URL(streamUrl);\n if (!['http:', 'https:'].includes(parsedUrl.protocol)) {\n return new Response('Invalid URL protocol', { status: 400 });\n }\n\n const userAgent = getRandomUserAgent();\n console.log(`[Stream Proxy] 🔗 Fetching: ${streamUrl.substring(0, 80)}...`);\n console.log(`[Stream Proxy] 🎭 User-Agent: ${userAgent}`);\n\n // Build headers to mimic real player\n const requestHeaders: Record = {\n 'User-Agent': userAgent,\n 'Accept': '*/*',\n 'Accept-Language': 'en-US,en;q=0.9,ar;q=0.8',\n 'Accept-Encoding': 'identity',\n 'Connection': 'keep-alive',\n 'Referer': parsedUrl.origin + '/',\n 'Origin': parsedUrl.origin,\n 'Cache-Control': 'no-cache',\n 'Pragma': 'no-cache'\n };\n\n // Forward Range header for video seeking\n const rangeHeader = req.headers.get('Range');\n if (rangeHeader) {\n requestHeaders['Range'] = rangeHeader;\n console.log(`[Stream Proxy] 📍 Range: ${rangeHeader}`);\n }\n\n // Add IPTV-specific headers\n if (streamUrl.includes('/live/') || streamUrl.includes('.ts')) {\n requestHeaders['X-Forwarded-For'] = '127.0.0.1';\n requestHeaders['icy-metadata'] = '1';\n }\n\n // Fetch the stream\n const controller = new AbortController();\n const timeoutId = setTimeout(() => controller.abort(), 30000); // 30s timeout\n\n const response = await fetch(streamUrl, {\n method: req.method === 'HEAD' ? 'HEAD' : 'GET',\n headers: requestHeaders,\n signal: controller.signal\n });\n\n clearTimeout(timeoutId);\n\n if (!response.ok) {\n console.error(`[Stream Proxy] ❌ Error: ${response.status} ${response.statusText}`);\n return new Response(`Stream error: ${response.status} ${response.statusText}`, { \n status: response.status,\n headers: {\n 'Access-Control-Allow-Origin': '*'\n }\n });\n }\n\n // Get content type\n const contentType = response.headers.get('content-type') || 'video/mp2t';\n console.log(`[Stream Proxy] ✅ Content-Type: ${contentType}, Status: ${response.status}`);\n\n // Create proxy response with CORS headers\n const proxyHeaders = new Headers({\n 'Content-Type': contentType,\n 'Access-Control-Allow-Origin': '*',\n 'Access-Control-Allow-Methods': 'GET, HEAD, OPTIONS',\n 'Access-Control-Allow-Headers': 'Range, Content-Type, Authorization, X-Requested-With',\n 'Access-Control-Expose-Headers': 'Content-Length, Content-Range, Accept-Ranges, Content-Type',\n 'Cache-Control': 'no-cache, no-store, must-revalidate',\n 'Pragma': 'no-cache',\n 'Expires': '0',\n 'X-Content-Type-Options': 'nosniff'\n });\n\n // Forward important response headers\n const headersToForward = ['content-range', 'accept-ranges', 'content-length', 'etag', 'last-modified'];\n for (const header of headersToForward) {\n const value = response.headers.get(header);\n if (value) {\n proxyHeaders.set(header, value);\n }\n }\n\n // Handle HEAD request\n if (req.method === 'HEAD') {\n return new Response(null, {\n status: response.status,\n headers: proxyHeaders\n });\n }\n\n console.log(`[Stream Proxy] ✅ Streaming response...`);\n\n // Stream the response\n return new Response(response.body, {\n status: response.status,\n headers: proxyHeaders\n });\n\n } catch (error: unknown) {\n console.error('[Stream Proxy] ❌ Error:', error);\n \n const errorMessage = error instanceof Error ? error.message : 'Unknown error';\n const isTimeout = errorMessage.includes('aborted') || errorMessage.includes('timeout');\n \n return new Response(\n JSON.stringify({\n error: isTimeout ? 'Connection timeout' : 'Proxy error',\n details: errorMessage\n }),\n { \n status: isTimeout ? 504 : 500,\n headers: {\n 'Content-Type': 'application/json',\n 'Access-Control-Allow-Origin': '*'\n }\n }\n );\n }\n}",[211],"pulls","forks","envVars",{"_223":51,"_225":51},"connections",{"_223":51,"_224":51},"count","unfilledCount","emptyCount",{"_20":210,"_13":211,"_125":212,"_127":-5,"_128":21,"_129":213,"_131":106,"_22":272,"_29":149,"_133":134,"_135":215,"_137":38,"_138":-5,"_239":273,"_87":274},{"_20":203,"_13":204,"_125":205,"_127":-5,"_128":21,"_129":206,"_131":106,"_22":269,"_29":156,"_133":134,"_135":208,"_137":38,"_138":-5,"_239":270,"_87":271},{"_20":196,"_13":197,"_125":198,"_127":-5,"_128":21,"_129":199,"_131":106,"_22":266,"_29":186,"_133":134,"_135":201,"_137":38,"_138":-5,"_239":267,"_87":268},{"_20":189,"_13":190,"_125":191,"_127":-5,"_128":21,"_129":192,"_131":106,"_22":263,"_29":51,"_133":134,"_135":194,"_137":38,"_138":-5,"_239":264,"_87":265},{"_20":181,"_13":182,"_125":183,"_127":-5,"_128":21,"_129":184,"_131":106,"_22":260,"_29":186,"_133":134,"_135":187,"_137":38,"_138":-5,"_239":261,"_87":262},{"_20":174,"_13":175,"_125":176,"_127":-5,"_128":21,"_129":177,"_131":106,"_22":257,"_29":156,"_133":134,"_135":179,"_137":38,"_138":-5,"_239":258,"_87":259},{"_20":167,"_13":168,"_125":169,"_127":-5,"_128":21,"_129":170,"_131":106,"_22":254,"_29":156,"_133":134,"_135":172,"_137":38,"_138":-5,"_239":255,"_87":256},{"_20":160,"_13":161,"_125":162,"_127":-5,"_128":21,"_129":163,"_131":106,"_22":251,"_29":156,"_133":134,"_135":165,"_137":38,"_138":-5,"_239":252,"_87":253},{"_20":153,"_13":154,"_125":155,"_127":-5,"_128":21,"_129":156,"_131":106,"_22":248,"_29":51,"_133":134,"_135":158,"_137":38,"_138":-5,"_239":249,"_87":250},{"_20":146,"_13":147,"_125":148,"_127":-5,"_128":21,"_129":149,"_131":106,"_22":245,"_29":51,"_133":134,"_135":151,"_137":38,"_138":-5,"_239":246,"_87":247},{"_20":140,"_13":141,"_125":142,"_127":-5,"_128":21,"_129":30,"_131":106,"_22":242,"_29":130,"_133":134,"_135":144,"_137":38,"_138":-5,"_239":243,"_87":244},{"_20":123,"_13":124,"_125":126,"_127":-5,"_128":21,"_129":130,"_131":106,"_22":238,"_29":51,"_133":134,"_135":136,"_137":38,"_138":-5,"_239":240,"_87":241},["D",1769786559899],"children",[],[124],["D",1769963316794],[],[141],["D",1769777420285],[],[147],["D",1769774711804],[],[154],["D",1769878592191],[],[161],["D",1769781106825],[],[168],["D",1769885343809],[],[175],["D",1769786680310],[],[182],["D",1769807852043],[],[190],["D",1769885952204],[],[197],["D",1769807791330],[],[204],["D",1769807797457],[],[211],["D",1769774711707],{"_11":12,"_85":81},{"_11":12,"_79":-5,"_80":81,"_44":45,"_82":83,"_84":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_74":-5,"_75":-5,"_76":-5,"_77":14,"_78":12},"ctx",{"_67":-5,"_108":312,"_313":314,"_315":316,"_317":38,"_318":38,"_319":38,"_320":106,"_321":-5,"_322":-7,"_323":-7,"_324":51,"_325":38,"_326":38,"_327":-5,"_328":38,"_329":38,"_330":38,"_331":-5},"ENV",{"_283":284,"_285":286,"_287":26,"_288":289,"_290":291,"_292":293,"_294":295,"_296":297,"_298":299,"_300":301,"_302":303,"_304":305,"_306":307,"_308":309,"_310":311},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1