[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_174":175,"_176":177},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_132":-5,"_20":133,"_22":134,"_135":136,"_137":138,"_25":139,"_24":-5,"_140":-5,"_141":-5,"_142":54,"_143":144,"_145":45,"_146":-5,"_147":-5,"_148":149},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","longpham","name","untitled-3955","branchName","main","version","path","","project",{"_34":74,"_13":14,"_46":75,"_76":-5,"_77":54,"_78":79,"_80":79,"_81":-5,"_82":-5,"_83":84,"_85":-5,"_86":54,"_87":-5,"_88":-5,"_89":90,"_91":92,"_93":94,"_95":96,"_97":98,"_99":-5,"_100":101,"_102":101,"_103":104,"_105":104,"_106":104,"_107":101,"_108":101,"_109":110,"_111":112,"_113":114,"_115":54},"tree",[65,66],"file","contents",[32,33],"upstream","pull","ahead","behind","envVars",{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":61,"_17":62,"_49":50,"_51":63,"_53":54,"_55":-5,"_18":64},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":56},"id","7b35671c-5263-11f1-b044-ee650bb23af1","main.ts","fileId","39a6240c-5255-11f1-a98c-ee650bb23af1","parentId","branchId","39a38e18-5255-11f1-a98c-ee650bb23af1","branchVersion",9,"latest",true,"createdAt",["D",1779072264740],8,"fileType","http","content","// STORT PHL Bot — val.town (Webhook + Replit API)\n// Dán toàn bộ vào val.town (HTTP Val) → Deploy → truy cập ?setup=1\n\nimport { Bot, webhookCallback, InlineKeyboard } from \"https://deno.land/x/grammy@v1.36.3/mod.ts\";\n\nconst TOKEN = \"8729430622:AAHj7hymeRb7TmmCiGCFZV4WK7uummOkB8Q\";\nconst API_BASE = \"https://c588671c-64b0-4cbc-b036-89d344864cc4-00-3w3qerablmqqi.sisko.replit.dev/api\";\nconst BOT_SECRET = \"a4dcf9d05ef0eaddd47db917bc09849895c03f32573b2e51005b861f998e3c37\";\nconst ADMIN_ID = \"8353052961\";\nconst STORE_URL = \"https://c588671c-64b0-4cbc-b036-89d344864cc4-00-3w3qerablmqqi.sisko.replit.dev\";\nconst ADMIN_TELE = \"https://t.me/PHL0990\";\nconst BANK = { accountNo: \"1522608620\", name: \"PHAM DOAN HOANG LONG\", min: 10000 };\n\nfunction fmt(n: number) { return Number(n).toLocaleString(\"vi-VN\") + \"đ\"; }\nfunction isAdmin(ctx: any) { return String(ctx.from?.id) === ADMIN_ID; }\n\nconst headers = { \"Content-Type\": \"application/json\", \"x-bot-secret\": BOT_SECRET };\n\nasync function api(method: string, path: string, body?: any) {\n const res = await fetch(`${API_BASE}${path}`, {\n method,\n headers,\n body: body ? JSON.stringify(body) : undefined,\n });\n if (!res.ok) throw new Error(`API ${method} ${path} → ${res.status}: ${await res.text()}`);\n return res.json();\n}\n\nasync function getOrCreate(telegramId: string, telegramUsername?: string) {\n return api(\"POST\", \"/bot/user\", { telegramId, telegramUsername });\n}\n\nconst bot = new Bot(TOKEN);\n\nconst kb = {\n keyboard: [\n [{ text: \"💰 Số dư\" }, { text: \"🛍 Sản phẩm\" }],\n [{ text: \"💳 Nạp tiền\" }, { text: \"🏆 Bảng xếp hạng\" }],\n [{ text: \"👤 Tài khoản\" }, { text: \"🔑 Mật khẩu\" }],\n ],\n resize_keyboard: true,\n};\n\nbot.command(\"start\", async (ctx) => {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n await ctx.reply(\n `👋 *Chào mừng đến với STORT PHL!*\\n\\n🛒 Cửa hàng công cụ game & tài khoản số.\\n\\n💰 Số dư: *${fmt(u.balance)}*\\n🔑 Mật khẩu: ${u.password ? \"✅ Đã có\" : \"❌ Chưa có — /setpassword để tạo\"}\\n\\nDùng lệnh bên dưới hoặc truy cập web:`,\n { parse_mode: \"Markdown\", reply_markup: kb }\n );\n});\n\nbot.command(\"help\", async (ctx) => {\n const adm = isAdmin(ctx) ? `\\n\\n🔐 *Admin:*\\n/admin /topup /setbalance /userinfo /users /addtx /broadcast /resetpass /pendingorders` : \"\";\n await ctx.reply(\n `📖 *HƯỚNG DẪN BOT STORT PHL*\\n\\n💰 /balance — Số dư\\n🛍 /products — Sản phẩm\\n💳 /deposit — Nạp tiền\\n🏆 /leaderboard — Xếp hạng\\n👤 /me — Tài khoản\\n🔑 /setpassword — Đặt mật khẩu\\n🔒 /mypassword — Xem mật khẩu\\n\\n🌐 Web: ${STORE_URL}${adm}`,\n { parse_mode: \"Markdown\" }\n );\n});\n\nasync function replyBalance(ctx: any) {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n await ctx.reply(\n `💰 *Số dư tài khoản*\\n\\n👤 \\`${u.username}\\`\\n💵 Số dư: *${fmt(u.balance)}*\\n📥 Tổng nạp: ${fmt(u.totalDeposit)}\\n📤 Tổng chi: ${fmt(u.totalSpent)}`,\n { parse_mode: \"Markdown\" }\n );\n}\nbot.command(\"balance\", replyBalance);\nbot.hears(\"💰 Số dư\", replyBalance);\n\nasync function replyProducts(ctx: any) {\n const [cats, prods]: [any[], any[]] = await Promise.all([\n fetch(`${API_BASE}/categories`).then(r => r.json()),\n fetch(`${API_BASE}/products`).then(r => r.json()),\n ]);\n let msg = `🛍 *DANH SÁCH SẢN PHẨM*\\n\\n`;\n for (const c of cats) {\n const cp = prods.filter((p: any) => p.catId === c.id);\n if (!cp.length) continue;\n msg += `*${c.name}*\\n`;\n cp.forEach((p: any) => { msg += ` • ${p.name} — *${fmt(p.price)}*\\n`; });\n msg += \"\\n\";\n }\n msg += `💳 Liên hệ: ${ADMIN_TELE}`;\n await ctx.reply(msg, { parse_mode: \"Markdown\" });\n}\nbot.command(\"products\", replyProducts);\nbot.hears(\"🛍 Sản phẩm\", replyProducts);\n\nasync function replyDeposit(ctx: any) {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n await ctx.reply(\n `💳 *HƯỚNG DẪN NẠP TIỀN*\\n\\n🏦 *Vietcombank*\\n📋 STK: \\`${BANK.accountNo}\\`\\n👤 Chủ TK: *${BANK.name}*\\n\\n📝 Nội dung CK:\\n\\`NAP ${u.username.toUpperCase()}\\`\\n\\n⚠️ Tối thiểu *10.000đ*\\n🌐 Tạo QR: ${STORE_URL}`,\n { parse_mode: \"Markdown\" }\n );\n}\nbot.command(\"deposit\", replyDeposit);\nbot.hears(\"💳 Nạp tiền\", replyDeposit);\n\nasync function replyLeaderboard(ctx: any) {\n const users: any[] = await fetch(`${API_BASE}/leaderboard`).then(r => r.json());\n const medals = [\"🥇\",\"🥈\",\"🥉\",\"4️⃣\",\"5️⃣\",\"6️⃣\",\"7️⃣\",\"8️⃣\",\"9️⃣\",\"🔟\"];\n let msg = `🏆 *BẢNG XẾP HẠNG TOP NẠP*\\n\\n`;\n users.slice(0, 10).forEach((u: any, i: number) => { msg += `${medals[i] || `${i+1}.`} ${u.username} — *${fmt(u.totalDeposit)}*\\n`; });\n await ctx.reply(msg, { parse_mode: \"Markdown\" });\n}\nbot.command(\"leaderboard\", replyLeaderboard);\nbot.hears(\"🏆 Bảng xếp hạng\", replyLeaderboard);\n\nasync function replyMe(ctx: any) {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n await ctx.reply(\n `👤 *THÔNG TIN TÀI KHOẢN*\\n\\n🔑 Username: \\`${u.username}\\`\\n💵 Số dư: *${fmt(u.balance)}*\\n📥 Tổng nạp: ${fmt(u.totalDeposit)}\\n📤 Tổng chi: ${fmt(u.totalSpent)}\\n🛒 SP đã mua: ${u.totalBought}\\n🔒 Mật khẩu: ${u.password ? \"✅ Đã có\" : \"❌ Chưa có (/setpassword)\"}\\n\\n🌐 ${STORE_URL}`,\n { parse_mode: \"Markdown\" }\n );\n}\nbot.command(\"me\", replyMe);\nbot.hears(\"👤 Tài khoản\", replyMe);\n\nbot.hears(\"🔑 Mật khẩu\", async (ctx) => {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n if (!u.password) {\n await ctx.reply(\"🔑 Chưa có mật khẩu.\\n\\nGõ /setpassword matkhau để tự đặt.\\nVí dụ: /setpassword MyPass123\");\n } else {\n await ctx.reply(`🔑 Đã có mật khẩu\\n\\nDùng /mypassword để xem — /setpassword để đổi`);\n }\n});\n\nbot.command(\"setpassword\", async (ctx) => {\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (isAdmin(ctx) && parts.length === 3) {\n const [, tUser, newPw] = parts;\n try {\n await api(\"POST\", \"/bot/setpassword\", { username: tUser, password: newPw });\n await ctx.reply(`✅ Đặt mật khẩu cho *${tUser}*\\n🔒 \\`${newPw}\\``, { parse_mode: \"Markdown\" });\n } catch {\n await ctx.reply(`❌ Không tìm thấy user: ${tUser}`);\n }\n return;\n }\n if (parts.length < 2) { await ctx.reply(\"❌ Cú pháp: /setpassword matkhau\\nVí dụ: /setpassword MyPass123\"); return; }\n const newPw = parts[1];\n if (newPw.length < 4) { await ctx.reply(\"❌ Mật khẩu phải có ít nhất 4 ký tự.\"); return; }\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n await api(\"POST\", \"/bot/setpassword\", { username: u.username, password: newPw });\n await ctx.reply(\n `✅ *Đặt mật khẩu thành công!*\\n\\n👤 Username: \\`${u.username}\\`\\n🔒 Mật khẩu: \\`${newPw}\\`\\n\\n🌐 ${STORE_URL}`,\n { parse_mode: \"Markdown\" }\n );\n});\n\nbot.command(\"mypassword\", async (ctx) => {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n if (!u.password) {\n await ctx.reply(\"❌ Chưa có mật khẩu.\\n\\nGõ /setpassword matkhau để tự đặt.\");\n } else {\n await ctx.reply(\n `🔑 *Mật khẩu của bạn*\\n\\n👤 Username: \\`${u.username}\\`\\n🔒 Mật khẩu: \\`${u.password}\\`\\n\\n🌐 ${STORE_URL}`,\n { parse_mode: \"Markdown\" }\n );\n }\n});\n\nbot.command(\"admin\", async (ctx) => {\n if (!isAdmin(ctx)) { await ctx.reply(\"⛔ Không có quyền.\"); return; }\n const [users, pending]: [any[], any[]] = await Promise.all([\n api(\"GET\", \"/bot/users\"),\n api(\"GET\", \"/bot/pending-deposits\"),\n ]);\n const totalDep = users.reduce((s: number, u: any) => s + Number(u.totalDeposit), 0);\n const totalSpt = users.reduce((s: number, u: any) => s + Number(u.totalSpent), 0);\n const withPw = users.filter((u: any) => u.password).length;\n await ctx.reply(\n `🔐 *ADMIN PANEL — STORT PHL*\\n\\n👥 Tổng users: ${users.length} (${withPw} có mật khẩu)\\n📥 Tổng nạp: ${fmt(totalDep)}\\n🛒 Tổng chi: ${fmt(totalSpt)}\\n⏳ Đơn chờ duyệt: *${pending.length}*\\n\\n*Lệnh quản lý:*\\n/pendingorders — Đơn nạp chờ duyệt\\n/topup user tien — Nạp tiền thủ công\\n/setbalance user tien — Đặt số dư\\n/setpassword user pass — Đặt mật khẩu\\n/resetpass user pass — Reset mật khẩu\\n/userinfo user — Xem chi tiết user\\n/users — Danh sách users\\n/addtx user tien — Ghi giao dịch\\n/broadcast [noi dung] — Gửi thông báo`,\n { parse_mode: \"Markdown\" }\n );\n});\n\nbot.command(\"pendingorders\", async (ctx) => {\n if (!isAdmin(ctx)) { await ctx.reply(\"⛔ Không có quyền.\"); return; }\n const orders: any[] = await api(\"GET\", \"/bot/pending-deposits\");\n if (!orders.length) { await ctx.reply(\"✅ Không có đơn nào đang chờ duyệt.\"); return; }\n for (const o of orders) {\n const time = new Date(o.createdAt).toLocaleString(\"vi-VN\", { day: \"2-digit\", month: \"2-digit\", hour: \"2-digit\", minute: \"2-digit\" });\n await ctx.reply(\n `🔔 *Đơn #${o.id}*\\n\\n👤 User: \\`${o.username}\\`\\n💰 Số tiền: *${fmt(o.amount)}*\\n📝 Nội dung: \\`${o.memo}\\`\\n🕐 Thời gian: ${time}`,\n {\n parse_mode: \"Markdown\",\n reply_markup: {\n inline_keyboard: [[\n { text: `✅ Duyệt ${fmt(o.amount)}`, callback_data: `approve:${o.id}` },\n { text: \"❌ Từ chối\", callback_data: `reject:${o.id}` },\n ]],\n },\n }\n );\n }\n});\n\nbot.command(\"topup\", async (ctx) => {\n if (!isAdmin(ctx)) { await ctx.reply(\"⛔ Không có quyền.\"); return; }\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (parts.length < 3) { await ctx.reply(\"❌ Cú pháp: /topup username so_tien\"); return; }\n const [, username, amountStr] = parts;\n const amount = parseInt(amountStr);\n if (isNaN(amount) || amount <= 0) { await ctx.reply(\"❌ Số tiền không hợp lệ.\"); return; }\n try {\n const result = await api(\"POST\", \"/bot/topup\", { username, amount });\n await ctx.reply(`✅ Nạp *${fmt(amount)}* cho \\`${username}\\`\\n💵 Số dư mới: *${fmt(result.balance)}*`, { parse_mode: \"Markdown\" });\n } catch { await ctx.reply(`❌ Không tìm thấy user: ${username}`); }\n});\n\nbot.command(\"setbalance\", async (ctx) => {\n if (!isAdmin(ctx)) { await ctx.reply(\"⛔ Không có quyền.\"); return; }\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (parts.length < 3) { await ctx.reply(\"❌ Cú pháp: /setbalance username so_tien\"); return; }\n const [, username, amountStr] = parts;\n const amount = parseInt(amountStr);\n if (isNaN(amount) || amount < 0) { await ctx.reply(\"❌ Số tiền không hợp lệ.\"); return; }\n try {\n await api(\"POST\", \"/bot/setbalance\", { username, amount });\n await ctx.reply(`✅ Số dư *${username}* = *${fmt(amount)}*`, { parse_mode: \"Markdown\" });\n } catch { await ctx.reply(`❌ Không tìm thấy user: ${username}`); }\n});\n\nbot.command(\"userinfo\", async (ctx) => {\n if (!isAdmin(ctx)) { await ctx.reply(\"⛔ Không có quyền.\"); return; }\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (parts.length < 2) { await ctx.reply(\"❌ Cú pháp: /userinfo username\"); return; }\n try {\n const u = await api(\"GET\", `/bot/userinfo/${parts[1]}`);\n await ctx.reply(\n `👤 *${u.username}*\\n\\n📱 Telegram: \\`${u.idTelegram ?? \"Chưa liên kết\"}\\`\\n💵 Số dư: *${fmt(u.balance)}*\\n📥 Tổng nạp: ${fmt(u.totalDeposit)}\\n📤 Tổng chi: ${fmt(u.totalSpent)}\\n🛒 SP đã mua: ${u.totalBought}\\n🔒 Mật khẩu: ${u.password ? `\\`${u.password}\\`` : \"❌ Chưa có\"}`,\n { parse_mode: \"Markdown\" }\n );\n } catch { await ctx.reply(`❌ Không tìm thấy user: ${parts[1]}`); }\n});\n\nbot.command(\"users\", async (ctx) => {\n if (!isAdmin(ctx)) { await ctx.reply(\"⛔ Không có quyền.\"); return; }\n const users: any[] = await api(\"GET\", \"/bot/users\");\n let msg = `👥 *DANH SÁCH USERS (${users.length})*\\n\\n`;\n for (const u of users) { msg += `• \\`${u.username}\\` — ${fmt(u.balance)} ${u.password ? \"🔒\" : \"🔓\"}\\n`; }\n await ctx.reply(msg, { parse_mode: \"Markdown\" });\n});\n\nbot.command(\"resetpass\", async (ctx) => {\n if (!isAdmin(ctx)) { await ctx.reply(\"⛔ Không có quyền.\"); return; }\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (parts.length < 3) { await ctx.reply(\"❌ Cú pháp: /resetpass username matkhau_moi\"); return; }\n const [, tUser, newPw] = parts;\n try {\n const u = await api(\"GET\", `/bot/userinfo/${tUser}`);\n await api(\"POST\", \"/bot/setpassword\", { username: tUser, password: newPw });\n await ctx.reply(`✅ *Reset mật khẩu!*\\n\\n👤 \\`${tUser}\\`\\n🔒 \\`${newPw}\\``, { parse_mode: \"Markdown\" });\n if (u.idTelegram) {\n try {\n await bot.api.sendMessage(u.idTelegram,\n `🔒 Mật khẩu của bạn đã được đặt lại.\\n\\n👤 Username: \\`${tUser}\\`\\n🔑 Mật khẩu mới: \\`${newPw}\\`\\n\\n🌐 ${STORE_URL}`,\n { parse_mode: \"Markdown\" }\n );\n } catch { /* blocked */ }\n }\n } catch { await ctx.reply(`❌ Không tìm thấy user: ${tUser}`); }\n});\n\nbot.command(\"addtx\", async (ctx) => {\n if (!isAdmin(ctx)) { await ctx.reply(\"⛔ Không có quyền.\"); return; }\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (parts.length < 3) { await ctx.reply(\"❌ Cú pháp: /addtx username so_tien\"); return; }\n const amount = parseInt(parts[2]);\n if (isNaN(amount) || amount <= 0) { await ctx.reply(\"❌ Số tiền không hợp lệ.\"); return; }\n await api(\"POST\", \"/bot/addtx\", { username: parts[1], amount });\n await ctx.reply(`✅ Ghi nhận *${fmt(amount)}* cho \\`${parts[1]}\\``, { parse_mode: \"Markdown\" });\n});\n\nbot.command(\"broadcast\", async (ctx) => {\n if (!isAdmin(ctx)) { await ctx.reply(\"⛔ Không có quyền.\"); return; }\n const text = ctx.message!.text.replace(\"/broadcast\", \"\").trim();\n if (!text) { await ctx.reply(\"❌ Cú pháp: /broadcast noi_dung\"); return; }\n const ids: string[] = await api(\"GET\", \"/bot/telegram-ids\");\n let sent = 0;\n for (const id of ids) {\n try {\n await bot.api.sendMessage(id, `📢 *THÔNG BÁO TỪ STORT PHL*\\n\\n${text}`, { parse_mode: \"Markdown\" });\n sent++;\n } catch { /* blocked */ }\n }\n await ctx.reply(`✅ Đã gửi đến *${sent}* users.`, { parse_mode: \"Markdown\" });\n});\n\nbot.on(\"callback_query:data\", async (ctx) => {\n const data = ctx.callbackQuery.data;\n\n if (data.startsWith(\"approve:\")) {\n if (!isAdmin(ctx)) { await ctx.answerCallbackQuery(\"⛔ Không có quyền\"); return; }\n const reqId = parseInt(data.split(\":\")[1]);\n try {\n const result = await api(\"POST\", \"/bot/approve-deposit\", { reqId });\n await ctx.editMessageText(\n `✅ *Đã duyệt đơn #${reqId}*\\n\\n👤 User: \\`${result.username}\\`\\n💰 +${fmt(result.amount)}\\n💵 Số dư mới: *${fmt(result.balance)}*`,\n { parse_mode: \"Markdown\" }\n );\n await ctx.answerCallbackQuery(\"✅ Đã duyệt!\");\n if (result.telegramId) {\n try {\n await bot.api.sendMessage(result.telegramId,\n `💰 *Tài khoản đã được nạp tiền!*\\n\\n+${fmt(result.amount)}\\n💵 Số dư mới: *${fmt(result.balance)}*\\n\\n🌐 ${STORE_URL}`,\n { parse_mode: \"Markdown\" }\n );\n } catch { /* blocked */ }\n }\n } catch (e) {\n await ctx.answerCallbackQuery(\"❌ Lỗi: \" + (e as Error).message);\n }\n return;\n }\n\n if (data.startsWith(\"reject:\")) {\n if (!isAdmin(ctx)) { await ctx.answerCallbackQuery(\"⛔ Không có quyền\"); return; }\n const reqId = parseInt(data.split(\":\")[1]);\n await api(\"POST\", \"/bot/reject-deposit\", { reqId });\n await ctx.editMessageText(`❌ *Đơn #${reqId} đã bị từ chối.*`, { parse_mode: \"Markdown\" });\n await ctx.answerCallbackQuery(\"❌ Đã từ chối\");\n return;\n }\n\n await ctx.answerCallbackQuery();\n});\n\nbot.on(\"message\", (ctx) => {\n ctx.reply(\"❓ Mình không hiểu lệnh đó.\\n\\nGõ /help để xem danh sách lệnh.\", { reply_markup: kb });\n});\n\nbot.catch((err) => { console.error(\"Bot error:\", err.message); });\n\nconst handleUpdate = webhookCallback(bot, \"std/http\");\n\nexport default async function handler(req: Request) {\n const url = new URL(req.url);\n if (url.searchParams.get(\"setup\") === \"1\") {\n const webhookUrl = url.origin + url.pathname;\n const result = await bot.api.setWebhook(webhookUrl, { drop_pending_updates: true });\n return new Response(\n result\n ? `✅ Webhook đã đăng ký!\\n📡 URL: ${webhookUrl}\\n\\nBot sẽ tự động hoạt động.`\n : \"❌ Lỗi đăng ký webhook\",\n { status: 200, headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } }\n );\n }\n if (req.method === \"POST\") {\n try { return await handleUpdate(req); }\n catch (e) { console.error(\"Webhook error:\", e); return new Response(\"OK\", { status: 200 }); }\n }\n return new Response(\n `🤖 STORT PHL Bot đang chạy!\\n\\nĐể kích hoạt, truy cập:\\n${url.origin}${url.pathname}?setup=1`,\n { status: 200, headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } }\n );\n}","deleted",false,"label",[36],"fc879cc6-526e-11f1-815f-ee650bb23af1","main-copy.ts","6d7ddaf4-526e-11f1-959d-ee650bb23af1",11,["D",1779077206167],1,"// STORT PHL — Val.town All-in-One (Bot + DB + Web)\n// Dán toàn bộ vào val.town (HTTP Val) → Save → truy cập ?setup=1 để đăng ký webhook\n\nimport {\n Bot,\n webhookCallback,\n} from \"https://deno.land/x/grammy@v1.36.3/mod.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\n// ─── CẤU HÌNH ────────────────────────────────────────────────────────────────\nconst TOKEN = \"8729430622:AAHj7hymeRb7TmmCiGCFZV4WK7uummOkB8Q\";\nconst ADMIN_ID = \"8353052961\";\nconst ADMIN_TELE = \"https://t.me/PHL0990\";\nconst BOT_LINK = \"https://t.me/Storephlbot\";\nconst BANK = {\n accountNo: \"1522608620\",\n name: \"PHAM DOAN HOANG LONG\",\n min: 10000,\n};\n\nfunction fmt(n: number) {\n return Number(n).toLocaleString(\"vi-VN\") + \"đ\";\n}\nfunction isAdmin(ctx: any) {\n return String(ctx.from?.id) === ADMIN_ID;\n}\n\n// ─── KHỞI TẠO DATABASE ───────────────────────────────────────────────────────\nasync function initDB() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT UNIQUE NOT NULL,\n password TEXT,\n balance INTEGER DEFAULT 0,\n totalDeposit INTEGER DEFAULT 0,\n totalSpent INTEGER DEFAULT 0,\n totalBought INTEGER DEFAULT 0,\n idTelegram TEXT,\n telegramUsername TEXT,\n createdAt TEXT DEFAULT (datetime('now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS categories (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS products (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n catId INTEGER,\n name TEXT NOT NULL,\n price INTEGER NOT NULL,\n description TEXT\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS deposit_requests (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL,\n amount INTEGER NOT NULL,\n memo TEXT,\n status TEXT DEFAULT 'pending',\n createdAt TEXT DEFAULT (datetime('now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS transactions (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL,\n amount INTEGER NOT NULL,\n type TEXT NOT NULL,\n note TEXT,\n createdAt TEXT DEFAULT (datetime('now'))\n )`);\n}\n\n// ─── HELPER DATABASE ─────────────────────────────────────────────────────────\nfunction rowToUser(row: any[]): any {\n return {\n id: row[0],\n username: row[1],\n password: row[2],\n balance: row[3],\n totalDeposit: row[4],\n totalSpent: row[5],\n totalBought: row[6],\n idTelegram: row[7],\n telegramUsername: row[8],\n };\n}\n\nasync function getOrCreate(\n telegramId: string,\n telegramUsername?: string,\n): Promise {\n const uname = telegramUsername || `user${telegramId}`;\n const existing = await sqlite.execute(\n \"SELECT id,username,password,balance,totalDeposit,totalSpent,totalBought,idTelegram,telegramUsername FROM users WHERE idTelegram=?\",\n [telegramId],\n );\n if (existing.rows.length > 0) {\n return rowToUser(existing.rows[0]);\n }\n let finalName = uname;\n const check = await sqlite.execute(\"SELECT id FROM users WHERE username=?\", [\n uname,\n ]);\n if (check.rows.length > 0) finalName = `${uname}_${telegramId.slice(-4)}`;\n await sqlite.execute(\n \"INSERT INTO users (username,idTelegram,telegramUsername) VALUES (?,?,?)\",\n [finalName, telegramId, telegramUsername || null],\n );\n const created = await sqlite.execute(\n \"SELECT id,username,password,balance,totalDeposit,totalSpent,totalBought,idTelegram,telegramUsername FROM users WHERE idTelegram=?\",\n [telegramId],\n );\n return rowToUser(created.rows[0]);\n}\n\nasync function getUserByUsername(username: string): Promise {\n const r = await sqlite.execute(\n \"SELECT id,username,password,balance,totalDeposit,totalSpent,totalBought,idTelegram,telegramUsername FROM users WHERE username=?\",\n [username],\n );\n return r.rows.length > 0 ? rowToUser(r.rows[0]) : null;\n}\n\n// ─── BOT ─────────────────────────────────────────────────────────────────────\nconst bot = new Bot(TOKEN);\n\nconst kb = {\n keyboard: [\n [{ text: \"💰 Số dư\" }, { text: \"🛍 Sản phẩm\" }],\n [{ text: \"💳 Nạp tiền\" }, { text: \"🏆 Bảng xếp hạng\" }],\n [{ text: \"👤 Tài khoản\" }, { text: \"🔑 Mật khẩu\" }],\n ],\n resize_keyboard: true,\n};\n\nbot.command(\"start\", async (ctx) => {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n await ctx.reply(\n `👋 *Chào mừng đến với STORT PHL!*\\n\\n🛒 Cửa hàng công cụ game & tài khoản số.\\n\\n💰 Số dư: *${\n fmt(u.balance)\n }*\\n🔑 Mật khẩu: ${\n u.password ? \"✅ Đã có\" : \"❌ Chưa có — /setpassword để tạo\"\n }\\n\\nDùng lệnh bên dưới hoặc truy cập web:`,\n { parse_mode: \"Markdown\", reply_markup: kb },\n );\n});\n\nbot.command(\"help\", async (ctx) => {\n const adm = isAdmin(ctx)\n ? `\\n\\n🔐 *Admin:*\\n/admin /topup /setbalance /userinfo /users /addtx /broadcast /resetpass /pendingorders`\n : \"\";\n await ctx.reply(\n `📖 *HƯỚNG DẪN BOT STORT PHL*\\n\\n💰 /balance — Số dư\\n🛍 /products — Sản phẩm\\n💳 /deposit — Nạp tiền\\n🏆 /leaderboard — Xếp hạng\\n👤 /me — Tài khoản\\n🔑 /setpassword — Đặt mật khẩu\\n🔒 /mypassword — Xem mật khẩu${adm}`,\n { parse_mode: \"Markdown\" },\n );\n});\n\nasync function replyBalance(ctx: any) {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n await ctx.reply(\n `💰 *Số dư tài khoản*\\n\\n👤 \\`${u.username}\\`\\n💵 Số dư: *${\n fmt(u.balance)\n }*\\n📥 Tổng nạp: ${fmt(u.totalDeposit)}\\n📤 Tổng chi: ${fmt(u.totalSpent)}`,\n { parse_mode: \"Markdown\" },\n );\n}\nbot.command(\"balance\", replyBalance);\nbot.hears(\"💰 Số dư\", replyBalance);\n\nasync function replyProducts(ctx: any) {\n const cats = await sqlite.execute(\n \"SELECT id,name FROM categories ORDER BY id\",\n );\n const prods = await sqlite.execute(\n \"SELECT id,catId,name,price FROM products ORDER BY catId,id\",\n );\n let msg = `🛍 *DANH SÁCH SẢN PHẨM*\\n\\n`;\n for (const c of cats.rows) {\n const cp = prods.rows.filter((p: any) => p[1] === c[0]);\n if (!cp.length) continue;\n msg += `*${c[1]}*\\n`;\n cp.forEach((p: any) => {\n msg += ` • ${p[2]} — *${fmt(p[3])}*\\n`;\n });\n msg += \"\\n\";\n }\n if (cats.rows.length === 0) msg += \"_Chưa có sản phẩm nào._\\n\";\n msg += `\\n💳 Liên hệ: ${ADMIN_TELE}`;\n await ctx.reply(msg, { parse_mode: \"Markdown\" });\n}\nbot.command(\"products\", replyProducts);\nbot.hears(\"🛍 Sản phẩm\", replyProducts);\n\nasync function replyDeposit(ctx: any) {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n await ctx.reply(\n `💳 *HƯỚNG DẪN NẠP TIỀN*\\n\\n🏦 *Vietcombank*\\n📋 STK: \\`${BANK.accountNo}\\`\\n👤 Chủ TK: *${BANK.name}*\\n\\n📝 Nội dung CK:\\n\\`NAP ${u.username.toUpperCase()}\\`\\n\\n⚠️ Tối thiểu *10.000đ*`,\n { parse_mode: \"Markdown\" },\n );\n}\nbot.command(\"deposit\", replyDeposit);\nbot.hears(\"💳 Nạp tiền\", replyDeposit);\n\nasync function replyLeaderboard(ctx: any) {\n const users = await sqlite.execute(\n \"SELECT username,totalDeposit FROM users ORDER BY totalDeposit DESC LIMIT 10\",\n );\n const medals = [\"🥇\", \"🥈\", \"🥉\", \"4️⃣\", \"5️⃣\", \"6️⃣\", \"7️⃣\", \"8️⃣\", \"9️⃣\", \"🔟\"];\n let msg = `🏆 *BẢNG XẾP HẠNG TOP NẠP*\\n\\n`;\n users.rows.forEach((u: any, i: number) => {\n msg += `${medals[i] || `${i + 1}.`} ${u[0]} — *${fmt(u[1])}*\\n`;\n });\n if (!users.rows.length) msg += \"_Chưa có dữ liệu._\";\n await ctx.reply(msg, { parse_mode: \"Markdown\" });\n}\nbot.command(\"leaderboard\", replyLeaderboard);\nbot.hears(\"🏆 Bảng xếp hạng\", replyLeaderboard);\n\nasync function replyMe(ctx: any) {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n await ctx.reply(\n `👤 *THÔNG TIN TÀI KHOẢN*\\n\\n🔑 Username: \\`${u.username}\\`\\n💵 Số dư: *${\n fmt(u.balance)\n }*\\n📥 Tổng nạp: ${fmt(u.totalDeposit)}\\n📤 Tổng chi: ${\n fmt(u.totalSpent)\n }\\n🛒 SP đã mua: ${u.totalBought}\\n🔒 Mật khẩu: ${\n u.password ? \"✅ Đã có\" : \"❌ Chưa có (/setpassword)\"\n }`,\n { parse_mode: \"Markdown\" },\n );\n}\nbot.command(\"me\", replyMe);\nbot.hears(\"👤 Tài khoản\", replyMe);\n\nbot.hears(\"🔑 Mật khẩu\", async (ctx) => {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n if (!u.password) {\n await ctx.reply(\n \"🔑 Chưa có mật khẩu.\\n\\nGõ /setpassword matkhau để tự đặt.\\nVí dụ: /setpassword MyPass123\",\n );\n } else {\n await ctx.reply(\n `🔑 Đã có mật khẩu\\n\\nDùng /mypassword để xem — /setpassword để đổi`,\n );\n }\n});\n\nbot.command(\"setpassword\", async (ctx) => {\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (isAdmin(ctx) && parts.length === 3) {\n const [, tUser, newPw] = parts;\n const u = await getUserByUsername(tUser);\n if (!u) {\n await ctx.reply(`❌ Không tìm thấy user: ${tUser}`);\n return;\n }\n await sqlite.execute(\"UPDATE users SET password=? WHERE username=?\", [\n newPw,\n tUser,\n ]);\n await ctx.reply(`✅ Đặt mật khẩu cho *${tUser}*\\n🔒 \\`${newPw}\\``, {\n parse_mode: \"Markdown\",\n });\n return;\n }\n if (parts.length < 2) {\n await ctx.reply(\n \"❌ Cú pháp: /setpassword matkhau\\nVí dụ: /setpassword MyPass123\",\n );\n return;\n }\n const newPw = parts[1];\n if (newPw.length < 4) {\n await ctx.reply(\"❌ Mật khẩu phải có ít nhất 4 ký tự.\");\n return;\n }\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n await sqlite.execute(\"UPDATE users SET password=? WHERE username=?\", [\n newPw,\n u.username,\n ]);\n await ctx.reply(\n `✅ *Đặt mật khẩu thành công!*\\n\\n👤 Username: \\`${u.username}\\`\\n🔒 Mật khẩu: \\`${newPw}\\``,\n { parse_mode: \"Markdown\" },\n );\n});\n\nbot.command(\"mypassword\", async (ctx) => {\n const u = await getOrCreate(String(ctx.from!.id), ctx.from!.username);\n if (!u.password) {\n await ctx.reply(\n \"❌ Chưa có mật khẩu.\\n\\nGõ /setpassword matkhau để tự đặt.\",\n );\n } else {\n await ctx.reply(\n `🔑 *Mật khẩu của bạn*\\n\\n👤 Username: \\`${u.username}\\`\\n🔒 Mật khẩu: \\`${u.password}\\``,\n { parse_mode: \"Markdown\" },\n );\n }\n});\n\nbot.command(\"admin\", async (ctx) => {\n if (!isAdmin(ctx)) {\n await ctx.reply(\"⛔ Không có quyền.\");\n return;\n }\n const users = await sqlite.execute(\n \"SELECT totalDeposit,totalSpent,password FROM users\",\n );\n const totalDep = users.rows.reduce(\n (s: number, u: any) => s + Number(u[0]),\n 0,\n );\n const totalSpt = users.rows.reduce(\n (s: number, u: any) => s + Number(u[1]),\n 0,\n );\n const withPw = users.rows.filter((u: any) => u[2]).length;\n const pending = await sqlite.execute(\n \"SELECT COUNT(*) FROM deposit_requests WHERE status='pending'\",\n );\n await ctx.reply(\n `🔐 *ADMIN PANEL — STORT PHL*\\n\\n👥 Tổng users: ${users.rows.length} (${withPw} có mật khẩu)\\n📥 Tổng nạp: ${\n fmt(totalDep)\n }\\n🛒 Tổng chi: ${fmt(totalSpt)}\\n⏳ Đơn chờ duyệt: *${\n pending.rows[0][0]\n }*\\n\\n*Lệnh quản lý:*\\n/pendingorders — Đơn nạp chờ duyệt\\n/topup user tien — Nạp tiền thủ công\\n/setbalance user tien — Đặt số dư\\n/setpassword user pass — Đặt mật khẩu\\n/resetpass user pass — Reset mật khẩu\\n/userinfo user — Thông tin user\\n/users — Danh sách users\\n/addtx user tien — Ghi nhận giao dịch\\n/broadcast noi_dung — Gửi thông báo`,\n { parse_mode: \"Markdown\" },\n );\n});\n\nbot.command(\"pendingorders\", async (ctx) => {\n if (!isAdmin(ctx)) {\n await ctx.reply(\"⛔ Không có quyền.\");\n return;\n }\n const orders = await sqlite.execute(\n \"SELECT id,username,amount,memo,createdAt FROM deposit_requests WHERE status='pending' ORDER BY id\",\n );\n if (!orders.rows.length) {\n await ctx.reply(\"✅ Không có đơn nào đang chờ duyệt.\");\n return;\n }\n for (const o of orders.rows) {\n const time = new Date(String(o[4])).toLocaleString(\"vi-VN\", {\n day: \"2-digit\",\n month: \"2-digit\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n });\n await ctx.reply(\n `🔔 *Đơn #${o[0]}*\\n\\n👤 User: \\`${o[1]}\\`\\n💰 Số tiền: *${\n fmt(Number(o[2]))\n }*\\n📝 Nội dung: \\`${o[3]}\\`\\n🕐 Thời gian: ${time}`,\n {\n parse_mode: \"Markdown\",\n reply_markup: {\n inline_keyboard: [[\n {\n text: `✅ Duyệt ${fmt(Number(o[2]))}`,\n callback_data: `approve:${o[0]}`,\n },\n { text: \"❌ Từ chối\", callback_data: `reject:${o[0]}` },\n ]],\n },\n },\n );\n }\n});\n\nbot.command(\"topup\", async (ctx) => {\n if (!isAdmin(ctx)) {\n await ctx.reply(\"⛔ Không có quyền.\");\n return;\n }\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (parts.length < 3) {\n await ctx.reply(\"❌ Cú pháp: /topup username so_tien\");\n return;\n }\n const amount = parseInt(parts[2]);\n if (isNaN(amount) || amount <= 0) {\n await ctx.reply(\"❌ Số tiền không hợp lệ.\");\n return;\n }\n const u = await getUserByUsername(parts[1]);\n if (!u) {\n await ctx.reply(`❌ Không tìm thấy user: ${parts[1]}`);\n return;\n }\n const newBal = u.balance + amount;\n await sqlite.execute(\n \"UPDATE users SET balance=?,totalDeposit=totalDeposit+? WHERE username=?\",\n [newBal, amount, parts[1]],\n );\n await ctx.reply(\n `✅ Nạp *${fmt(amount)}* cho \\`${parts[1]}\\`\\n💵 Số dư mới: *${\n fmt(newBal)\n }*`,\n { parse_mode: \"Markdown\" },\n );\n});\n\nbot.command(\"setbalance\", async (ctx) => {\n if (!isAdmin(ctx)) {\n await ctx.reply(\"⛔ Không có quyền.\");\n return;\n }\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (parts.length < 3) {\n await ctx.reply(\"❌ Cú pháp: /setbalance username so_tien\");\n return;\n }\n const amount = parseInt(parts[2]);\n if (isNaN(amount) || amount < 0) {\n await ctx.reply(\"❌ Số tiền không hợp lệ.\");\n return;\n }\n const u = await getUserByUsername(parts[1]);\n if (!u) {\n await ctx.reply(`❌ Không tìm thấy user: ${parts[1]}`);\n return;\n }\n await sqlite.execute(\"UPDATE users SET balance=? WHERE username=?\", [\n amount,\n parts[1],\n ]);\n await ctx.reply(`✅ Số dư *${parts[1]}* = *${fmt(amount)}*`, {\n parse_mode: \"Markdown\",\n });\n});\n\nbot.command(\"userinfo\", async (ctx) => {\n if (!isAdmin(ctx)) {\n await ctx.reply(\"⛔ Không có quyền.\");\n return;\n }\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (parts.length < 2) {\n await ctx.reply(\"❌ Cú pháp: /userinfo username\");\n return;\n }\n const u = await getUserByUsername(parts[1]);\n if (!u) {\n await ctx.reply(`❌ Không tìm thấy user: ${parts[1]}`);\n return;\n }\n await ctx.reply(\n `👤 *${u.username}*\\n\\n📱 Telegram: \\`${\n u.idTelegram ?? \"Chưa liên kết\"\n }\\`\\n💵 Số dư: *${fmt(u.balance)}*\\n📥 Tổng nạp: ${\n fmt(u.totalDeposit)\n }\\n📤 Tổng chi: ${\n fmt(u.totalSpent)\n }\\n🛒 SP đã mua: ${u.totalBought}\\n🔒 Mật khẩu: ${\n u.password ? `\\`${u.password}\\`` : \"❌ Chưa có\"\n }`,\n { parse_mode: \"Markdown\" },\n );\n});\n\nbot.command(\"users\", async (ctx) => {\n if (!isAdmin(ctx)) {\n await ctx.reply(\"⛔ Không có quyền.\");\n return;\n }\n const users = await sqlite.execute(\n \"SELECT username,balance,password FROM users ORDER BY id\",\n );\n let msg = `👥 *DANH SÁCH USERS (${users.rows.length})*\\n\\n`;\n for (const u of users.rows) {\n msg += `• \\`${u[0]}\\` — ${fmt(Number(u[1]))} ${u[2] ? \"🔒\" : \"🔓\"}\\n`;\n }\n await ctx.reply(msg, { parse_mode: \"Markdown\" });\n});\n\nbot.command(\"resetpass\", async (ctx) => {\n if (!isAdmin(ctx)) {\n await ctx.reply(\"⛔ Không có quyền.\");\n return;\n }\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (parts.length < 3) {\n await ctx.reply(\"❌ Cú pháp: /resetpass username matkhau_moi\");\n return;\n }\n const u = await getUserByUsername(parts[1]);\n if (!u) {\n await ctx.reply(`❌ Không tìm thấy user: ${parts[1]}`);\n return;\n }\n await sqlite.execute(\"UPDATE users SET password=? WHERE username=?\", [\n parts[2],\n parts[1],\n ]);\n await ctx.reply(\n `✅ *Reset mật khẩu!*\\n\\n👤 \\`${parts[1]}\\`\\n🔒 \\`${parts[2]}\\``,\n { parse_mode: \"Markdown\" },\n );\n if (u.idTelegram) {\n try {\n await bot.api.sendMessage(\n u.idTelegram,\n `🔒 Mật khẩu của bạn đã được đặt lại.\\n\\n👤 Username: \\`${\n parts[1]\n }\\`\\n🔑 Mật khẩu mới: \\`${parts[2]}\\``,\n { parse_mode: \"Markdown\" },\n );\n } catch { /* blocked */ }\n }\n});\n\nbot.command(\"addtx\", async (ctx) => {\n if (!isAdmin(ctx)) {\n await ctx.reply(\"⛔ Không có quyền.\");\n return;\n }\n const parts = ctx.message!.text.trim().split(/\\s+/);\n if (parts.length < 3) {\n await ctx.reply(\"❌ Cú pháp: /addtx username so_tien\");\n return;\n }\n const amount = parseInt(parts[2]);\n if (isNaN(amount) || amount <= 0) {\n await ctx.reply(\"❌ Số tiền không hợp lệ.\");\n return;\n }\n await sqlite.execute(\n \"INSERT INTO transactions (username,amount,type,note) VALUES (?,?,'manual',?)\",\n [parts[1], amount, `Admin ghi nhận`],\n );\n await ctx.reply(`✅ Ghi nhận *${fmt(amount)}* cho \\`${parts[1]}\\``, {\n parse_mode: \"Markdown\",\n });\n});\n\nbot.command(\"broadcast\", async (ctx) => {\n if (!isAdmin(ctx)) {\n await ctx.reply(\"⛔ Không có quyền.\");\n return;\n }\n const text = ctx.message!.text.replace(\"/broadcast\", \"\").trim();\n if (!text) {\n await ctx.reply(\"❌ Cú pháp: /broadcast noi_dung\");\n return;\n }\n const ids = await sqlite.execute(\n \"SELECT idTelegram FROM users WHERE idTelegram IS NOT NULL\",\n );\n let sent = 0;\n for (const row of ids.rows) {\n try {\n await bot.api.sendMessage(\n String(row[0]),\n `📢 *THÔNG BÁO TỪ STORT PHL*\\n\\n${text}`,\n { parse_mode: \"Markdown\" },\n );\n sent++;\n } catch { /* blocked */ }\n }\n await ctx.reply(`✅ Đã gửi đến *${sent}* users.`, { parse_mode: \"Markdown\" });\n});\n\nbot.on(\"callback_query:data\", async (ctx) => {\n const data = ctx.callbackQuery.data;\n\n if (data.startsWith(\"approve:\")) {\n if (!isAdmin(ctx)) {\n await ctx.answerCallbackQuery(\"⛔ Không có quyền\");\n return;\n }\n const reqId = parseInt(data.split(\":\")[1]);\n const req = await sqlite.execute(\n \"SELECT username,amount FROM deposit_requests WHERE id=? AND status='pending'\",\n [reqId],\n );\n if (!req.rows.length) {\n await ctx.answerCallbackQuery(\"❌ Đơn không tồn tại\");\n return;\n }\n const [username, amount] = [String(req.rows[0][0]), Number(req.rows[0][1])];\n const u = await getUserByUsername(username);\n if (!u) {\n await ctx.answerCallbackQuery(\"❌ Không tìm thấy user\");\n return;\n }\n const newBal = u.balance + amount;\n await sqlite.execute(\n \"UPDATE users SET balance=?,totalDeposit=totalDeposit+? WHERE username=?\",\n [newBal, amount, username],\n );\n await sqlite.execute(\n \"UPDATE deposit_requests SET status='approved' WHERE id=?\",\n [reqId],\n );\n await ctx.editMessageText(\n `✅ *Đã duyệt đơn #${reqId}*\\n\\n👤 User: \\`${username}\\`\\n💰 +${\n fmt(amount)\n }\\n💵 Số dư mới: *${fmt(newBal)}*`,\n { parse_mode: \"Markdown\" },\n );\n await ctx.answerCallbackQuery(\"✅ Đã duyệt!\");\n if (u.idTelegram) {\n try {\n await bot.api.sendMessage(\n u.idTelegram,\n `💰 *Tài khoản đã được nạp tiền!*\\n\\n+${\n fmt(amount)\n }\\n💵 Số dư mới: *${fmt(newBal)}*`,\n { parse_mode: \"Markdown\" },\n );\n } catch { /* blocked */ }\n }\n return;\n }\n\n if (data.startsWith(\"reject:\")) {\n if (!isAdmin(ctx)) {\n await ctx.answerCallbackQuery(\"⛔ Không có quyền\");\n return;\n }\n const reqId = parseInt(data.split(\":\")[1]);\n await sqlite.execute(\n \"UPDATE deposit_requests SET status='rejected' WHERE id=?\",\n [reqId],\n );\n await ctx.editMessageText(`❌ *Đơn #${reqId} đã bị từ chối.*`, {\n parse_mode: \"Markdown\",\n });\n await ctx.answerCallbackQuery(\"❌ Đã từ chối\");\n return;\n }\n\n await ctx.answerCallbackQuery();\n});\n\nbot.on(\"message\", (ctx) => {\n ctx.reply(\"❓ Mình không hiểu lệnh đó.\\n\\nGõ /help để xem danh sách lệnh.\", {\n reply_markup: kb,\n });\n});\n\nbot.catch((err) => {\n console.error(\"Bot error:\", err.message);\n});\n\nconst handleUpdate = webhookCallback(bot, \"std/http\");\n\n// ─── WEB FRONTEND (HTML) ─────────────────────────────────────────────────────\nfunction loginPage(storeUrl: string): string {\n return `\n\n\n \n \n STORT PHL — Đăng nhập\n \n\n\n

STORT PHL

DIGITAL GOODS BAZAAR

\n 👤\n \n

\n 🔑\n \n

\n \n

\n 🔗\n Chưa có mật khẩu? Nhắn /setpassword cho bot Telegram\n

\n \n \n\n`;\n}\n\nfunction storePage(user: any): string {\n return `\n\n\n \n \n STORT PHL — Cửa hàng\n \n\n\n

STORT PHL

\n 💵 ${fmt(user.balance)}\n \n

THÔNG TIN TÀI KHOẢN

👤 Username${user.username}

💵 Số dư${\n fmt(user.balance)\n }

📥 Tổng nạp${\n fmt(user.totalDeposit)\n }

📤 Tổng chi${\n fmt(user.totalSpent)\n }

🛒 SP đã mua${user.totalBought}

NẠP TIỀN

\n 🏦 Vietcombank
\n 📋 STK: ${BANK.accountNo}
\n 👤 Chủ TK: ${BANK.name}
\n 📝 Nội dung: NAP ${user.username.toUpperCase()}
\n ⚠️ Tối thiểu 10.000đ\n

\n \n\n`;\n}\n\n// ─── SESSION ĐƠN GIẢN (in-memory) ───────────────────────────────────────────\nconst sessions = new Map();\nfunction generateToken() {\n return Math.random().toString(36).slice(2) + Date.now().toString(36);\n}\n\n// ─── HANDLER CHÍNH ───────────────────────────────────────────────────────────\nexport default async function handler(req: Request): Promise {\n await initDB();\n\n const url = new URL(req.url);\n const STORE_URL = url.origin;\n\n // ── Setup webhook ──\n if (url.searchParams.get(\"setup\") === \"1\") {\n const webhookUrl = url.origin + url.pathname;\n const result = await bot.api.setWebhook(webhookUrl, {\n drop_pending_updates: true,\n });\n return new Response(\n result\n ? `✅ Webhook đã đăng ký!\\n📡 URL: ${webhookUrl}\\n\\nBot đang hoạt động 24/7.`\n : \"❌ Lỗi đăng ký webhook\",\n { status: 200, headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } },\n );\n }\n\n // ── Webhook Telegram ──\n if (req.method === \"POST\" && url.pathname === \"/\") {\n try {\n return await handleUpdate(req);\n } catch (e) {\n console.error(\"Webhook error:\", e);\n return new Response(\"OK\", { status: 200 });\n }\n }\n\n // ── Trang đăng nhập ──\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return new Response(loginPage(STORE_URL), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // ── API Đăng nhập ──\n if (req.method === \"POST\" && url.pathname === \"/login\") {\n const body = await req.json();\n const u = await getUserByUsername(body.username);\n if (!u || !u.password || u.password !== body.password) {\n return Response.json({ ok: false, error: \"Sai username hoặc mật khẩu.\" });\n }\n const token = generateToken();\n sessions.set(token, u.username);\n return new Response(JSON.stringify({ ok: true }), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Set-Cookie\":\n `session=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=86400`,\n },\n });\n }\n\n // ── API Đăng xuất ──\n if (req.method === \"POST\" && url.pathname === \"/logout\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n if (token) sessions.delete(token);\n return new Response(JSON.stringify({ ok: true }), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Set-Cookie\": \"session=; Path=/; Max-Age=0\",\n },\n });\n }\n\n // ── Trang store (cần đăng nhập) ──\n if (req.method === \"GET\" && url.pathname === \"/store\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n const username = token ? sessions.get(token) : null;\n if (!username) return Response.redirect(url.origin + \"/\", 302);\n const u = await getUserByUsername(username);\n if (!u) return Response.redirect(url.origin + \"/\", 302);\n return new Response(storePage(u), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // ── API nạp tiền (từ form web) ──\n if (req.method === \"POST\" && url.pathname === \"/deposit-request\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n const username = token ? sessions.get(token) : null;\n if (!username) {\n return Response.json({ ok: false, error: \"Chưa đăng nhập\" }, {\n status: 401,\n });\n }\n const body = await req.json();\n const amount = parseInt(body.amount);\n if (isNaN(amount) || amount < BANK.min) {\n return Response.json({ ok: false, error: `Tối thiểu ${fmt(BANK.min)}` });\n }\n await sqlite.execute(\n \"INSERT INTO deposit_requests (username,amount,memo) VALUES (?,?,?)\",\n [username, amount, `NAP ${username.toUpperCase()}`],\n );\n return Response.json({ ok: true });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}",[58],{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":71,"_17":62,"_49":50,"_51":63,"_53":54,"_55":-5,"_68":72,"_18":73},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":67,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_68":69,"_18":70},["D",1779072264740],"children",[],[36],["D",1779077206167],[],[58],"39a2c816-5255-11f1-a98c-ee650bb23af1",["D",1779066141785],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","f2481e92-a5b3-4e33-b5e5-16d09f5db5a7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e2e4a-a137-7707-9a63-fefdf136c1db","tursoName","39a2c816525511f1a98cee650bb23af1","tursoHostname","39a2c816525511f1a98cee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789555289887],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_131":127},"org",{"_11":12,"_124":125,"_126":127,"_83":84,"_128":129,"_130":54},"branch",{"_17":60,"_13":16,"_34":41,"_116":74,"_117":-5,"_118":-5,"_119":-5,"_120":-5,"_121":-5,"_122":14,"_123":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","LONG PHẠM","avatar","https://lh3.googleusercontent.com/a/ACg8ocJss9C4mawe-_hl76iYlqEJquNzBxJA2KXzp58yDjl-FFR1Ykqc=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":74,"_13":14,"_46":169,"_76":-5,"_77":54,"_78":79,"_80":79,"_81":-5,"_82":-5,"_83":84,"_85":-5,"_86":54,"_87":-5,"_88":-5,"_89":90,"_91":92,"_93":94,"_95":96,"_97":170,"_99":-5,"_100":101,"_102":101,"_103":104,"_105":104,"_106":104,"_107":101,"_108":101,"_109":171,"_111":172,"_113":173,"_115":54},[163,164],"files",[163,164],"counts",{"_154":90,"_155":62,"_156":90,"_31":157,"_158":159},[150,151],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":61,"_17":62,"_49":50,"_51":63,"_53":54,"_55":-5,"_18":153},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":152},[36],[58],"pulls","branches","forks",{"_160":90,"_162":90},"connections",{"_160":90,"_161":90},"count","unfilledCount","emptyCount",{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":71,"_17":62,"_49":50,"_51":63,"_53":54,"_55":-5,"_68":167,"_18":168},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":67,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_68":165,"_18":166},[],[36],[],[58],["D",1779066141785],["D",1789555289887],{"_11":12,"_131":127},{"_11":12,"_124":125,"_126":127,"_83":84,"_128":129,"_130":54},{"_17":60,"_13":16,"_34":41,"_116":74,"_117":-5,"_118":-5,"_119":-5,"_120":-5,"_121":-5,"_122":14,"_123":12},"ctx",{"_109":-5,"_147":207,"_208":209,"_210":211,"_212":54,"_213":54,"_214":54,"_215":45,"_216":-5,"_217":-7,"_218":-7,"_219":90,"_220":54,"_221":54,"_222":-5,"_223":54,"_224":54,"_225":54,"_226":-5},"ENV",{"_178":179,"_180":181,"_182":16,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code