[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_202":203,"_204":205},"routes/_app.x.$handle.$name",{"_94":93,"_32":45,"_102":84,"_27":103,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":120,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":77,"_78":79,"_80":81,"_82":25},"version",45,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","09b5306a-43a7-11f1-a98b-42b51c65c3df","name","fileType","http","content","import { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst app = new Hono();\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\n// Se true, o vídeo passa pelo Val (esconde credenciais, mas gasta banda e\n// pode bater nos limites do Val Town em streams longos).\n// Se false, faz 302 redirect para a origem (barato, mas o player vê o\n// user/pass reais no URL de redirect).\nconst PROXY_MEDIA = false;\n\n// --- init tabela ---\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS credentials (\n id INTEGER PRIMARY KEY,\n uuid TEXT NOT NULL,\n m3u TEXT NOT NULL,\n user TEXT NOT NULL,\n pass TEXT NOT NULL,\n server TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\n// --- migração: tabela antiga (linha única, sem uuid) ---\ntry {\n await sqlite.execute(`ALTER TABLE credentials ADD COLUMN uuid TEXT`);\n} catch (_) {\n /* coluna já existe */\n}\n\nawait sqlite.execute(\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_credentials_uuid ON credentials(uuid)`,\n);\n\n// --- geração de key curta (5 chars, sem caracteres ambíguos) ---\nconst KEY_ALPHABET = \"23456789abcdefghjkmnpqrstuvwxyz\";\n\nfunction genKey(len = 5): string {\n const bytes = crypto.getRandomValues(new Uint8Array(len));\n let s = \"\";\n for (let i = 0; i < len; i++) {\n s += KEY_ALPHABET[bytes[i] % KEY_ALPHABET.length];\n }\n return s;\n}\n\nasync function generateUniqueKey(): Promise {\n for (let i = 0; i < 12; i++) {\n const k = genKey(5);\n if (!(await loadCredentials(k))) return k;\n }\n return genKey(6);\n}\n\n// --- helpers SQLite ---\ntype Creds = {\n uuid: string;\n m3u: string;\n user: string;\n pass: string;\n server: string;\n expiresAt: string;\n createdAt?: string;\n};\n\nfunction rowToObj(columns: string[], row: any[]): Creds {\n const o: Record = {};\n columns.forEach((col, i) => (o[col] = row[i]));\n return {\n uuid: o.uuid,\n m3u: o.m3u,\n user: o.user,\n pass: o.pass,\n server: o.server,\n expiresAt: o.expires_at,\n createdAt: o.created_at,\n };\n}\n\nasync function saveCredentials(data: {\n uuid: string;\n m3u: string;\n user: string;\n pass: string;\n server: string;\n expiresAt: string;\n}) {\n await sqlite.execute({\n sql: `INSERT INTO credentials (uuid, m3u, user, pass, server, expires_at)\n VALUES (:uuid, :m3u, :user, :pass, :server, :expiresAt)\n ON CONFLICT(uuid) DO UPDATE SET\n m3u = excluded.m3u,\n user = excluded.user,\n pass = excluded.pass,\n server = excluded.server,\n expires_at = excluded.expires_at`,\n args: data,\n });\n}\n\nasync function loadCredentials(uuid: string): Promise {\n if (!uuid) return null;\n const res = await sqlite.execute({\n sql: `SELECT * FROM credentials WHERE uuid = :uuid LIMIT 1`,\n args: { uuid },\n });\n if (!res.rows.length) return null;\n return rowToObj(res.columns as string[], res.rows[0] as any[]);\n}\n\nfunction playlistUrl(base: string, key: string): string {\n return `${base}/${key}/playlist.m3u`;\n}\n\n// origem \"limpa\" (sem barra final) -> ex: http://host:port\nfunction originOf(stored: Creds): string {\n return (stored.server || new URL(stored.m3u).origin).replace(/\\/+$/, \"\");\n}\n\n// --- reescreve stream HLS (key vai no path das sub-playlists) ---\nfunction rewriteStream(\n srcUrl: string,\n base: string,\n key: string,\n): TransformStream {\n const decoder = new TextDecoder();\n const encoder = new TextEncoder();\n let leftover = \"\";\n\n return new TransformStream({\n transform(chunk, controller) {\n const text = leftover + decoder.decode(chunk, { stream: true });\n const lines = text.split(\"\\n\");\n leftover = lines.pop() ?? \"\";\n\n const out = lines.map((raw) => {\n const line = raw.trim();\n if (line.startsWith(\"#\") || line === \"\") return raw;\n\n let abs = line;\n if (!line.startsWith(\"http\")) {\n const u = new URL(srcUrl);\n const dir = u.origin + u.pathname.split(\"/\").slice(0, -1).join(\"/\") +\n \"/\";\n abs = new URL(line, dir).href;\n }\n\n if (abs.endsWith(\".m3u8\") || abs.endsWith(\".m3u\")) {\n return `${base}/${key}/proxy?url=${encodeURIComponent(abs)}`;\n }\n\n return abs;\n }).join(\"\\n\") + \"\\n\";\n\n controller.enqueue(encoder.encode(out));\n },\n flush(controller) {\n if (leftover.trim()) controller.enqueue(encoder.encode(leftover));\n },\n });\n}\n\n// ===============================================================\n// Gestão (root)\n// ===============================================================\n\napp.get(\"/save\", async (c) => {\n const user = c.req.query(\"user\") ?? \"\";\n const pass = c.req.query(\"pass\") ?? \"\";\n const server = c.req.query(\"server\") ?? \"\";\n const m3u = c.req.query(\"m3u\") ?? \"\";\n const expiresAt = c.req.query(\"expiresAt\") ?? \"\";\n const key = c.req.query(\"key\") || await generateUniqueKey();\n\n if (!user || !pass || !m3u) {\n return c.json(\n { ok: false, error: \"Parâmetros em falta (user, pass, m3u)\" },\n 400,\n CORS,\n );\n }\n\n await saveCredentials({ uuid: key, m3u, user, pass, server, expiresAt });\n\n const base = new URL(c.req.url).origin;\n return c.json(\n {\n ok: true,\n key,\n playlist: playlistUrl(base, key),\n xtream: { server: base, username: key, password: key },\n user,\n pass,\n server,\n m3u,\n expiresAt,\n },\n 200,\n CORS,\n );\n});\n\napp.get(\"/activate\", async (c) => {\n const token = c.req.query(\"token\");\n const session = c.req.query(\"session\");\n const key = c.req.query(\"key\") || await generateUniqueKey();\n\n if (!token || !session) {\n return c.json({ error: \"Falta token ou session\" }, 400, CORS);\n }\n\n const res = await fetch(\"https://freeiptv2023-d.ottc.xyz/index.php\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Cookie\": `ottc_sess=${session}`,\n \"User-Agent\": \"Mozilla/5.0 (compatible)\",\n \"Referer\": \"https://freeiptv2023-d.ottc.xyz/index.php\",\n \"Origin\": \"https://freeiptv2023-d.ottc.xyz\",\n },\n body: `cf-turnstile-response=${encodeURIComponent(token)}`,\n });\n\n if (!res.ok) {\n return c.json(\n { error: \"Falha no servidor freeiptv: \" + res.status },\n 502,\n CORS,\n );\n }\n\n const html = await res.text();\n const get = (id: string) => {\n const m = html.match(new RegExp(`id=\"${id}\"[^>]*value=\"([^\"]+)\"`));\n return m?.[1] ?? \"\";\n };\n\n const data = {\n server: get(\"serverUrl\"),\n user: get(\"accUser\"),\n pass: get(\"accPass\"),\n m3u: get(\"m3uLink\"),\n exp: get(\"accExp\"),\n };\n\n if (!data.m3u) {\n return c.json(\n { error: \"Credenciais não encontradas. Token inválido?\" },\n 400,\n CORS,\n );\n }\n\n await saveCredentials({\n uuid: key,\n m3u: data.m3u,\n user: data.user,\n pass: data.pass,\n server: data.server,\n expiresAt: data.exp,\n });\n\n const base = new URL(c.req.url).origin;\n return c.json(\n {\n ok: true,\n key,\n playlist: playlistUrl(base, key),\n xtream: { server: base, username: key, password: key },\n ...data,\n },\n 200,\n CORS,\n );\n});\n\napp.get(\"/list\", async (c) => {\n const res = await sqlite.execute(\n `SELECT uuid, user, server, expires_at, created_at\n FROM credentials\n WHERE uuid IS NOT NULL\n ORDER BY created_at DESC`,\n );\n const base = new URL(c.req.url).origin;\n const items = res.rows.map((r) => {\n const o = rowToObj(res.columns as string[], r as any[]);\n return {\n key: o.uuid,\n user: o.user,\n server: o.server,\n expiresAt: o.expiresAt,\n createdAt: o.createdAt,\n playlist: playlistUrl(base, o.uuid),\n xtream: { server: base, username: o.uuid, password: o.uuid },\n };\n });\n return c.json({ ok: true, count: items.length, items }, 200, CORS);\n});\n\napp.get(\"/delete\", async (c) => {\n const key = c.req.query(\"key\") ?? \"\";\n if (!key) return c.json({ ok: false, error: \"Falta ?key=\" }, 400, CORS);\n const res = await sqlite.execute({\n sql: `DELETE FROM credentials WHERE uuid = :uuid`,\n args: { uuid: key },\n });\n return c.json({ ok: true, deleted: res.rowsAffected ?? 0 }, 200, CORS);\n});\n\n// ===============================================================\n// Xtream Codes API (façade) — root\n// Na app IPTV: Server = este val, Username = KEY, Password = KEY\n// ===============================================================\n\n// resolve a key a partir do campo username (query)\nasync function xtreamCreds(c: any): Promise {\n return await loadCredentials(c.req.query(\"username\") ?? \"\");\n}\n\n// GET /player_api.php (auth + todas as actions)\nasync function playerApi(c: any) {\n const key = c.req.query(\"username\") ?? \"\";\n const stored = await loadCredentials(key);\n if (!stored) {\n return c.json({ user_info: { auth: 0, status: \"Disabled\" } }, 200, CORS);\n }\n\n const origin = originOf(stored);\n const real = new URL(origin + new URL(c.req.url).pathname); // player_api.php ou panel_api.php\n for (const [k, v] of new URL(c.req.url).searchParams) {\n real.searchParams.set(k, v);\n }\n real.searchParams.set(\"username\", stored.user);\n real.searchParams.set(\"password\", stored.pass);\n\n const res = await fetch(real.href, {\n headers: { \"User-Agent\": \"Mozilla/5.0\" },\n signal: AbortSignal.timeout(30_000),\n });\n const text = await res.text();\n\n // reescrever para a app continuar a falar connosco (e não com a origem)\n try {\n const json = JSON.parse(text);\n const here = new URL(c.req.url);\n if (json.server_info) {\n json.server_info.url = here.hostname;\n json.server_info.port = here.port ||\n (here.protocol === \"https:\" ? \"443\" : \"80\");\n json.server_info.https_port = \"443\";\n json.server_info.server_protocol = here.protocol.replace(\":\", \"\");\n json.server_info.rtmp_port = \"\";\n }\n if (json.user_info) {\n json.user_info.username = key;\n json.user_info.password = key;\n }\n return c.json(json, 200, CORS);\n } catch {\n return new Response(text, {\n headers: { ...CORS, \"Content-Type\": \"application/json\" },\n });\n }\n}\n\napp.get(\"/player_api.php\", playerApi);\napp.get(\"/panel_api.php\", playerApi); // alias p/ apps mais antigas\n\n// GET /xmltv.php (EPG)\napp.get(\"/xmltv.php\", async (c) => {\n const stored = await xtreamCreds(c);\n if (!stored) return c.text(\"Key inválida.\", 403);\n const origin = originOf(stored);\n const real =\n `${origin}/xmltv.php?username=${encodeURIComponent(stored.user)}` +\n `&password=${encodeURIComponent(stored.pass)}`;\n const res = await fetch(real, {\n headers: { \"User-Agent\": \"Mozilla/5.0\" },\n signal: AbortSignal.timeout(60_000),\n });\n if (!res.ok || !res.body) return c.text(\"Erro EPG: \" + res.status, 502);\n return new Response(res.body, {\n headers: {\n ...CORS,\n \"Content-Type\": \"application/xml\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n});\n\n// GET /get.php (M3U via config Xtream/M3U, username = KEY)\napp.get(\"/get.php\", async (c) => {\n const key = c.req.query(\"username\") ?? \"\";\n const stored = await loadCredentials(key);\n if (!stored) return c.text(\"Key inválida.\", 403);\n\n const base = new URL(c.req.url).origin;\n const res = await fetch(stored.m3u, {\n headers: { \"User-Agent\": \"Mozilla/5.0\" },\n signal: AbortSignal.timeout(30_000),\n });\n if (!res.ok || !res.body) return c.text(\"Erro playlist: \" + res.status, 502);\n\n return new Response(\n res.body.pipeThrough(rewriteStream(stored.m3u, base, key)),\n {\n headers: {\n ...CORS,\n \"Content-Type\": \"application/x-mpegURL\",\n \"Cache-Control\": \"no-cache\",\n },\n },\n );\n});\n\n// --- media: /live|movie|series/:key/:pass/:file ---\nasync function mediaHandler(c: any, kind: string) {\n const key = c.req.param(\"key\");\n const file = c.req.param(\"file\"); // ex: 12345.ts | 12345.m3u8\n const stored = await loadCredentials(key);\n if (!stored) return c.text(\"Key inválida.\", 403);\n\n const origin = originOf(stored);\n const real = `${origin}/${kind}/${encodeURIComponent(stored.user)}/` +\n `${encodeURIComponent(stored.pass)}/${file}`;\n\n // barato: redirect (o player vê user/pass reais no Location)\n if (!PROXY_MEDIA) return c.redirect(real, 302);\n\n // passthrough: esconde credenciais, mas gasta banda do Val\n const range = c.req.header(\"range\");\n const res = await fetch(real, {\n headers: {\n \"User-Agent\": \"Mozilla/5.0\",\n ...(range ? { Range: range } : {}),\n },\n redirect: \"follow\",\n });\n if (!res.ok || !res.body) return c.text(\"Erro media: \" + res.status, 502);\n\n const headers: Record = { ...CORS };\n for (\n const h of [\n \"content-type\",\n \"content-length\",\n \"accept-ranges\",\n \"content-range\",\n ]\n ) {\n const v = res.headers.get(h);\n if (v) headers[h] = v;\n }\n return new Response(res.body, { status: res.status, headers });\n}\n\napp.get(\"/live/:key/:pass/:file\", (c) => mediaHandler(c, \"live\"));\napp.get(\"/movie/:key/:pass/:file\", (c) => mediaHandler(c, \"movie\"));\napp.get(\"/series/:key/:pass/:file\", (c) => mediaHandler(c, \"series\"));\n\n// ===============================================================\n// Streaming M3U (key no path)\n// ===============================================================\n\napp.get(\"/:key/status\", async (c) => {\n const key = c.req.param(\"key\");\n const stored = await loadCredentials(key);\n if (!stored) {\n return c.json({ ok: false, message: \"Key desconhecida.\" }, 200, CORS);\n }\n return c.json({ ok: true, ...stored }, 200, CORS);\n});\n\napp.get(\"/:key/playlist.m3u\", async (c) => {\n const key = c.req.param(\"key\");\n const stored = await loadCredentials(key);\n if (!stored) return c.text(\"Key inválida.\", 404);\n\n const base = new URL(c.req.url).origin;\n const res = await fetch(stored.m3u, {\n headers: { \"User-Agent\": \"Mozilla/5.0\" },\n signal: AbortSignal.timeout(30_000),\n });\n\n if (!res.ok || !res.body) {\n return c.text(\"Erro ao obter playlist: \" + res.status, 502);\n }\n\n return new Response(\n res.body.pipeThrough(rewriteStream(stored.m3u, base, key)),\n {\n headers: {\n ...CORS,\n \"Content-Type\": \"application/x-mpegURL\",\n \"Cache-Control\": \"no-cache\",\n },\n },\n );\n});\n\napp.get(\"/:key/proxy\", async (c) => {\n const key = c.req.param(\"key\");\n const url = c.req.query(\"url\") ?? \"\";\n const base = new URL(c.req.url).origin;\n\n if (!url) return c.text(\"Falta ?url=\", 400);\n if (!(await loadCredentials(key))) return c.text(\"Key inválida.\", 403);\n\n const res = await fetch(url, {\n headers: { \"User-Agent\": \"Mozilla/5.0\" },\n signal: AbortSignal.timeout(15_000),\n });\n\n if (!res.ok || !res.body) {\n return c.text(\"Erro ao obter sub-playlist: \" + res.status, 502);\n }\n\n return new Response(res.body.pipeThrough(rewriteStream(url, base, key)), {\n headers: {\n ...CORS,\n \"Content-Type\": \"application/x-mpegURL\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n});\n\napp.options(\"*\", (c) => new Response(null, { headers: CORS }));\n\nexport default app.fetch;","import { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst app = new Hono();\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\n// Se true, o vídeo passa pelo Val (esconde credenciais, mas gasta banda e\n// pode bater nos limites do Val Town em streams longos).\n// Se false, faz 302 redirect para a origem (barato, mas o player vê o\n// user/pass reais no URL de redirect).\nconst PROXY_MEDIA = false;\n\n// Se true, /:key/playlist.m3u faz 302 para o m3u real em vez de reenviar\n// os 20MB+ pelo Val (muito mais rápido; expõe user/pass no redirect).\n// Recomendado para listas TS grandes, onde nada é reescrito.\nconst PLAYLIST_REDIRECT = true;\n\n// --- init tabela ---\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS credentials (\n id INTEGER PRIMARY KEY,\n uuid TEXT NOT NULL,\n m3u TEXT NOT NULL,\n user TEXT NOT NULL,\n pass TEXT NOT NULL,\n server TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now'))\n )\n`);\n\n// --- migração: tabela antiga (linha única, sem uuid) ---\ntry {\n await sqlite.execute(`ALTER TABLE credentials ADD COLUMN uuid TEXT`);\n} catch (_) {\n /* coluna já existe */\n}\n\nawait sqlite.execute(\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_credentials_uuid ON credentials(uuid)`,\n);\n\n// --- geração de key curta (5 chars, sem caracteres ambíguos) ---\nconst KEY_ALPHABET = \"23456789abcdefghjkmnpqrstuvwxyz\";\n\nfunction genKey(len = 5): string {\n const bytes = crypto.getRandomValues(new Uint8Array(len));\n let s = \"\";\n for (let i = 0; i < len; i++) {\n s += KEY_ALPHABET[bytes[i] % KEY_ALPHABET.length];\n }\n return s;\n}\n\nasync function generateUniqueKey(): Promise {\n for (let i = 0; i < 12; i++) {\n const k = genKey(5);\n if (!(await loadCredentials(k))) return k;\n }\n return genKey(6);\n}\n\n// --- helpers SQLite ---\ntype Creds = {\n uuid: string;\n m3u: string;\n user: string;\n pass: string;\n server: string;\n expiresAt: string;\n createdAt?: string;\n};\n\nfunction rowToObj(columns: string[], row: any[]): Creds {\n const o: Record = {};\n columns.forEach((col, i) => (o[col] = row[i]));\n return {\n uuid: o.uuid,\n m3u: o.m3u,\n user: o.user,\n pass: o.pass,\n server: o.server,\n expiresAt: o.expires_at,\n createdAt: o.created_at,\n };\n}\n\nasync function saveCredentials(data: {\n uuid: string;\n m3u: string;\n user: string;\n pass: string;\n server: string;\n expiresAt: string;\n}) {\n await sqlite.execute({\n sql: `INSERT INTO credentials (uuid, m3u, user, pass, server, expires_at)\n VALUES (:uuid, :m3u, :user, :pass, :server, :expiresAt)\n ON CONFLICT(uuid) DO UPDATE SET\n m3u = excluded.m3u,\n user = excluded.user,\n pass = excluded.pass,\n server = excluded.server,\n expires_at = excluded.expires_at`,\n args: data,\n });\n}\n\nasync function loadCredentials(uuid: string): Promise {\n if (!uuid) return null;\n const res = await sqlite.execute({\n sql: `SELECT * FROM credentials WHERE uuid = :uuid LIMIT 1`,\n args: { uuid },\n });\n if (!res.rows.length) return null;\n return rowToObj(res.columns as string[], res.rows[0] as any[]);\n}\n\nfunction playlistUrl(base: string, key: string): string {\n return `${base}/${key}/playlist.m3u`;\n}\n\n// origem \"limpa\" (sem barra final) -> ex: http://host:port\nfunction originOf(stored: Creds): string {\n return (stored.server || new URL(stored.m3u).origin).replace(/\\/+$/, \"\");\n}\n\n// --- reescreve stream HLS (key vai no path das sub-playlists) ---\nfunction rewriteStream(\n srcUrl: string,\n base: string,\n key: string,\n): TransformStream {\n const decoder = new TextDecoder();\n const encoder = new TextEncoder();\n let leftover = \"\";\n\n return new TransformStream({\n transform(chunk, controller) {\n const text = leftover + decoder.decode(chunk, { stream: true });\n const lines = text.split(\"\\n\");\n leftover = lines.pop() ?? \"\";\n\n const out = lines.map((raw) => {\n const line = raw.trim();\n if (line.startsWith(\"#\") || line === \"\") return raw;\n\n let abs = line;\n if (!line.startsWith(\"http\")) {\n const u = new URL(srcUrl);\n const dir = u.origin + u.pathname.split(\"/\").slice(0, -1).join(\"/\") +\n \"/\";\n abs = new URL(line, dir).href;\n }\n\n if (abs.endsWith(\".m3u8\") || abs.endsWith(\".m3u\")) {\n return `${base}/${key}/proxy?url=${encodeURIComponent(abs)}`;\n }\n\n return abs;\n }).join(\"\\n\") + \"\\n\";\n\n controller.enqueue(encoder.encode(out));\n },\n flush(controller) {\n if (leftover.trim()) controller.enqueue(encoder.encode(leftover));\n },\n });\n}\n\n// ===============================================================\n// Gestão (root)\n// ===============================================================\n\napp.get(\"/save\", async (c) => {\n const user = c.req.query(\"user\") ?? \"\";\n const pass = c.req.query(\"pass\") ?? \"\";\n const server = c.req.query(\"server\") ?? \"\";\n const m3u = c.req.query(\"m3u\") ?? \"\";\n const expiresAt = c.req.query(\"expiresAt\") ?? \"\";\n const key = c.req.query(\"key\") || await generateUniqueKey();\n\n if (!user || !pass || !m3u) {\n return c.json(\n { ok: false, error: \"Parâmetros em falta (user, pass, m3u)\" },\n 400,\n CORS,\n );\n }\n\n await saveCredentials({ uuid: key, m3u, user, pass, server, expiresAt });\n\n const base = new URL(c.req.url).origin;\n return c.json(\n {\n ok: true,\n key,\n playlist: playlistUrl(base, key),\n xtream: { server: base, username: key, password: key },\n user,\n pass,\n server,\n m3u,\n expiresAt,\n },\n 200,\n CORS,\n );\n});\n\napp.get(\"/activate\", async (c) => {\n const token = c.req.query(\"token\");\n const session = c.req.query(\"session\");\n const key = c.req.query(\"key\") || await generateUniqueKey();\n\n if (!token || !session) {\n return c.json({ error: \"Falta token ou session\" }, 400, CORS);\n }\n\n const res = await fetch(\"https://freeiptv2023-d.ottc.xyz/index.php\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Cookie\": `ottc_sess=${session}`,\n \"User-Agent\": \"Mozilla/5.0 (compatible)\",\n \"Referer\": \"https://freeiptv2023-d.ottc.xyz/index.php\",\n \"Origin\": \"https://freeiptv2023-d.ottc.xyz\",\n },\n body: `cf-turnstile-response=${encodeURIComponent(token)}`,\n });\n\n if (!res.ok) {\n return c.json(\n { error: \"Falha no servidor freeiptv: \" + res.status },\n 502,\n CORS,\n );\n }\n\n const html = await res.text();\n const get = (id: string) => {\n const m = html.match(new RegExp(`id=\"${id}\"[^>]*value=\"([^\"]+)\"`));\n return m?.[1] ?? \"\";\n };\n\n const data = {\n server: get(\"serverUrl\"),\n user: get(\"accUser\"),\n pass: get(\"accPass\"),\n m3u: get(\"m3uLink\"),\n exp: get(\"accExp\"),\n };\n\n if (!data.m3u) {\n return c.json(\n { error: \"Credenciais não encontradas. Token inválido?\" },\n 400,\n CORS,\n );\n }\n\n await saveCredentials({\n uuid: key,\n m3u: data.m3u,\n user: data.user,\n pass: data.pass,\n server: data.server,\n expiresAt: data.exp,\n });\n\n const base = new URL(c.req.url).origin;\n return c.json(\n {\n ok: true,\n key,\n playlist: playlistUrl(base, key),\n xtream: { server: base, username: key, password: key },\n ...data,\n },\n 200,\n CORS,\n );\n});\n\napp.get(\"/list\", async (c) => {\n const res = await sqlite.execute(\n `SELECT uuid, user, server, expires_at, created_at\n FROM credentials\n WHERE uuid IS NOT NULL\n ORDER BY created_at DESC`,\n );\n const base = new URL(c.req.url).origin;\n const items = res.rows.map((r) => {\n const o = rowToObj(res.columns as string[], r as any[]);\n return {\n key: o.uuid,\n user: o.user,\n server: o.server,\n expiresAt: o.expiresAt,\n createdAt: o.createdAt,\n playlist: playlistUrl(base, o.uuid),\n xtream: { server: base, username: o.uuid, password: o.uuid },\n };\n });\n return c.json({ ok: true, count: items.length, items }, 200, CORS);\n});\n\napp.get(\"/delete\", async (c) => {\n const key = c.req.query(\"key\") ?? \"\";\n if (!key) return c.json({ ok: false, error: \"Falta ?key=\" }, 400, CORS);\n const res = await sqlite.execute({\n sql: `DELETE FROM credentials WHERE uuid = :uuid`,\n args: { uuid: key },\n });\n return c.json({ ok: true, deleted: res.rowsAffected ?? 0 }, 200, CORS);\n});\n\n// ===============================================================\n// Xtream Codes API (façade) — root\n// Na app IPTV: Server = este val, Username = KEY, Password = KEY\n// ===============================================================\n\n// resolve a key a partir do campo username (query)\nasync function xtreamCreds(c: any): Promise {\n return await loadCredentials(c.req.query(\"username\") ?? \"\");\n}\n\n// GET /player_api.php (auth + todas as actions)\nasync function playerApi(c: any) {\n const key = c.req.query(\"username\") ?? \"\";\n const stored = await loadCredentials(key);\n if (!stored) {\n return c.json({ user_info: { auth: 0, status: \"Disabled\" } }, 200, CORS);\n }\n\n const origin = originOf(stored);\n const real = new URL(origin + new URL(c.req.url).pathname); // player_api.php ou panel_api.php\n for (const [k, v] of new URL(c.req.url).searchParams) {\n real.searchParams.set(k, v);\n }\n real.searchParams.set(\"username\", stored.user);\n real.searchParams.set(\"password\", stored.pass);\n\n const res = await fetch(real.href, {\n headers: { \"User-Agent\": \"Mozilla/5.0\" },\n signal: AbortSignal.timeout(30_000),\n });\n const text = await res.text();\n\n // reescrever para a app continuar a falar connosco (e não com a origem)\n try {\n const json = JSON.parse(text);\n const here = new URL(c.req.url);\n if (json.server_info) {\n json.server_info.url = here.hostname;\n json.server_info.port = here.port ||\n (here.protocol === \"https:\" ? \"443\" : \"80\");\n json.server_info.https_port = \"443\";\n json.server_info.server_protocol = here.protocol.replace(\":\", \"\");\n json.server_info.rtmp_port = \"\";\n }\n if (json.user_info) {\n json.user_info.username = key;\n json.user_info.password = key;\n }\n return c.json(json, 200, CORS);\n } catch {\n return new Response(text, {\n headers: { ...CORS, \"Content-Type\": \"application/json\" },\n });\n }\n}\n\napp.get(\"/player_api.php\", playerApi);\napp.get(\"/panel_api.php\", playerApi); // alias p/ apps mais antigas\n\n// GET /xmltv.php (EPG)\napp.get(\"/xmltv.php\", async (c) => {\n const stored = await xtreamCreds(c);\n if (!stored) return c.text(\"Key inválida.\", 403);\n const origin = originOf(stored);\n const real =\n `${origin}/xmltv.php?username=${encodeURIComponent(stored.user)}` +\n `&password=${encodeURIComponent(stored.pass)}`;\n const res = await fetch(real, {\n headers: { \"User-Agent\": \"Mozilla/5.0\" },\n signal: AbortSignal.timeout(60_000),\n });\n if (!res.ok || !res.body) return c.text(\"Erro EPG: \" + res.status, 502);\n return new Response(res.body, {\n headers: {\n ...CORS,\n \"Content-Type\": \"application/xml\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n});\n\n// GET /get.php (M3U via config Xtream/M3U, username = KEY)\napp.get(\"/get.php\", async (c) => {\n const key = c.req.query(\"username\") ?? \"\";\n const stored = await loadCredentials(key);\n if (!stored) return c.text(\"Key inválida.\", 403);\n\n const base = new URL(c.req.url).origin;\n const res = await fetch(stored.m3u, {\n headers: { \"User-Agent\": \"Mozilla/5.0\" },\n signal: AbortSignal.timeout(30_000),\n });\n if (!res.ok || !res.body) return c.text(\"Erro playlist: \" + res.status, 502);\n\n return new Response(\n res.body.pipeThrough(rewriteStream(stored.m3u, base, key)),\n {\n headers: {\n ...CORS,\n \"Content-Type\": \"application/x-mpegURL\",\n \"Cache-Control\": \"no-cache\",\n },\n },\n );\n});\n\n// --- media: /live|movie|series/:key/:pass/:file ---\nasync function mediaHandler(c: any, kind: string) {\n const key = c.req.param(\"key\");\n const file = c.req.param(\"file\"); // ex: 12345.ts | 12345.m3u8\n const stored = await loadCredentials(key);\n if (!stored) return c.text(\"Key inválida.\", 403);\n\n const origin = originOf(stored);\n const real = `${origin}/${kind}/${encodeURIComponent(stored.user)}/` +\n `${encodeURIComponent(stored.pass)}/${file}`;\n\n // barato: redirect (o player vê user/pass reais no Location)\n if (!PROXY_MEDIA) return c.redirect(real, 302);\n\n // passthrough: esconde credenciais, mas gasta banda do Val\n const range = c.req.header(\"range\");\n const res = await fetch(real, {\n headers: {\n \"User-Agent\": \"Mozilla/5.0\",\n ...(range ? { Range: range } : {}),\n },\n redirect: \"follow\",\n });\n if (!res.ok || !res.body) return c.text(\"Erro media: \" + res.status, 502);\n\n const headers: Record = { ...CORS };\n for (\n const h of [\n \"content-type\",\n \"content-length\",\n \"accept-ranges\",\n \"content-range\",\n ]\n ) {\n const v = res.headers.get(h);\n if (v) headers[h] = v;\n }\n return new Response(res.body, { status: res.status, headers });\n}\n\napp.get(\"/live/:key/:pass/:file\", (c) => mediaHandler(c, \"live\"));\napp.get(\"/movie/:key/:pass/:file\", (c) => mediaHandler(c, \"movie\"));\napp.get(\"/series/:key/:pass/:file\", (c) => mediaHandler(c, \"series\"));\n\n// ===============================================================\n// Streaming M3U (key no path)\n// ===============================================================\n\napp.get(\"/:key/status\", async (c) => {\n const key = c.req.param(\"key\");\n const stored = await loadCredentials(key);\n if (!stored) {\n return c.json({ ok: false, message: \"Key desconhecida.\" }, 200, CORS);\n }\n return c.json({ ok: true, ...stored }, 200, CORS);\n});\n\nasync function playlistHandler(c: any) {\n const key = c.req.param(\"key\");\n const stored = await loadCredentials(key);\n if (!stored) return c.text(\"Key inválida.\", 404);\n\n const base = new URL(c.req.url).origin;\n\n // atalho: redirecionar para o m3u real (evita streamar 20MB+ pelo Val)\n if (PLAYLIST_REDIRECT && c.req.method === \"GET\") {\n return c.redirect(stored.m3u, 302);\n }\n\n // apps costumam sondar com HEAD antes do GET -> responder só headers\n if (c.req.method === \"HEAD\") {\n return new Response(null, {\n headers: {\n ...CORS,\n \"Content-Type\": \"application/x-mpegURL\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n\n const res = await fetch(stored.m3u, {\n headers: { \"User-Agent\": \"Mozilla/5.0\" },\n signal: AbortSignal.timeout(30_000),\n });\n\n if (!res.ok || !res.body) {\n return c.text(\"Erro ao obter playlist: \" + res.status, 502);\n }\n\n return new Response(\n res.body.pipeThrough(rewriteStream(stored.m3u, base, key)),\n {\n headers: {\n ...CORS,\n \"Content-Type\": \"application/x-mpegURL\",\n \"Cache-Control\": \"no-cache\",\n },\n },\n );\n}\n\napp.on([\"GET\", \"HEAD\"], \"/:key/playlist.m3u\", playlistHandler);\n\napp.get(\"/:key/proxy\", async (c) => {\n const key = c.req.param(\"key\");\n const url = c.req.query(\"url\") ?? \"\";\n const base = new URL(c.req.url).origin;\n\n if (!url) return c.text(\"Falta ?url=\", 400);\n if (!(await loadCredentials(key))) return c.text(\"Key inválida.\", 403);\n\n const res = await fetch(url, {\n headers: { \"User-Agent\": \"Mozilla/5.0\" },\n signal: AbortSignal.timeout(15_000),\n });\n\n if (!res.ok || !res.body) {\n return c.text(\"Erro ao obter sub-playlist: \" + res.status, 502);\n }\n\n return new Response(res.body.pipeThrough(rewriteStream(url, base, key)), {\n headers: {\n ...CORS,\n \"Content-Type\": \"application/x-mpegURL\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n});\n\napp.options(\"*\", (c) => new Response(null, { headers: CORS }));\n\nexport default app.fetch;","createdAt",["D",1784109575882],"branchVersion","branchId","09b29e7c-43a7-11f1-a98b-42b51c65c3df","id","09b1e806-43a7-11f1-a98b-42b51c65c3df","m3u-proxy",["D",1777452012644],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","1e4d2157-cdd6-42c8-a0ed-7d707498307a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","eec31d76-5f30-4859-9ad3-ead49204cdd9","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_94":93,"_101":97},"org",{"_94":93,"_95":-5,"_96":97,"_18":54,"_98":99,"_100":25},"branch",{"_13":83,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"isOwned",47,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","nmsilva","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yZlNYVHdvT3FqSExKd0Y5Qmx5WllLWVR6UjMifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":198,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":199,"_78":200,"_80":201,"_82":25},"tree",[177,178,179,180,181],"files",[177,178,179,180,181],"counts",{"_166":60,"_167":168,"_169":60,"_170":171,"_172":173},"contents",[125,126,127,128,129],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":159,"_32":160,"_30":161,"_131":-5,"_41":42,"_40":162,"_132":120,"_38":163,"_13":60,"_33":20,"_35":164,"_24":25,"_135":-5,"_27":165},{"_43":152,"_32":153,"_30":154,"_131":-5,"_41":42,"_40":155,"_132":120,"_38":156,"_13":60,"_33":20,"_35":157,"_24":25,"_135":-5,"_27":158},{"_43":145,"_32":146,"_30":147,"_131":-5,"_41":42,"_40":148,"_132":120,"_38":149,"_13":60,"_33":20,"_35":150,"_24":25,"_135":-5,"_27":151},{"_43":137,"_32":138,"_30":139,"_131":-5,"_41":42,"_40":140,"_132":25,"_38":141,"_13":142,"_33":34,"_35":143,"_24":25,"_135":-5,"_27":144},{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":133,"_13":134,"_33":34,"_35":37,"_24":25,"_135":-5,"_27":136},"7b490d7e-a7fa-497d-8a62-6a6e75eaf596","parentId","latest",["D",1784109575882],15,"label",[28],"9c00d50b-493b-46f2-b406-4d2c8b851402","link.ts","bc497b70-478d-11f1-b115-42b51c65c3df",42,["D",1784105537592],13,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\n\nconst BASE = \"https://nmsilva--09b5306a43a711f1a98b42b51c65c3df.web.val.run\";\n\ntype ParsedCredentials = {\n m3u: string;\n user: string;\n pass: string;\n server: string;\n expiresAt: string;\n};\n\ntype SaveResponse = {\n ok: boolean;\n key?: string;\n playlist?: string;\n error?: string;\n};\n\ntype ListItem = {\n key: string;\n user?: string;\n server?: string;\n expiresAt?: string;\n createdAt?: string;\n playlist: string;\n};\n\ntype ListResponse = {\n ok: boolean;\n count: number;\n items: ListItem[];\n};\n\nconst SAMPLE_URL =\n \"http://freeiptv.ottc.xyz:80/get.php?username=234919669440&password=735972853950&type=m3u_plus&output=ts\";\n\nfunction parseM3uUrl(raw: string): ParsedCredentials {\n const value = raw.trim();\n if (!value) {\n throw new Error(\"Cola primeiro um URL M3U.\");\n }\n\n const url = new URL(value);\n const user = url.searchParams.get(\"username\") || \"\";\n const pass = url.searchParams.get(\"password\") || \"\";\n const server = url.origin;\n\n if (!user || !pass) {\n throw new Error(\"O URL não contém username e password.\");\n }\n\n return {\n m3u: url.href,\n user,\n pass,\n server,\n expiresAt: \"\",\n };\n}\n\nfunction InfoCard(\n { label, value }: { label: string; value?: string | null },\n) {\n return (\n \n \n {label}\n \n \n {value || \"—\"}\n \n \n );\n}\n\nfunction CopyButton(\n { text, active, onCopy }: {\n text: string;\n active: boolean;\n onCopy: () => void;\n },\n) {\n return (\n \n {active ? \"Copiado ✓\" : \"Copiar\"}\n \n );\n}\n\nfunction App() {\n const [input, setInput] = useState(\"\");\n const [parsed, setParsed] = useState(null);\n const [items, setItems] = useState([]);\n const [result, setResult] = useState<\n { key: string; playlist: string } | null\n >(\n null,\n );\n const [message, setMessage] = useState(\"\");\n const [error, setError] = useState(\"\");\n const [saving, setSaving] = useState(false);\n const [copied, setCopied] = useState(\"\");\n const [keyInput, setKeyInput] = useState(\"\");\n\n async function loadList() {\n try {\n const res = await fetch(`${BASE}/list`);\n const data = await res.json() as ListResponse;\n setItems(data.ok ? data.items : []);\n } catch {\n setItems([]);\n }\n }\n\n useEffect(() => {\n loadList();\n }, []);\n\n async function copy(text: string, tag: string) {\n try {\n await navigator.clipboard.writeText(text);\n setCopied(tag);\n setTimeout(() => setCopied(\"\"), 1600);\n } catch {\n setError(\"Não foi possível copiar automaticamente. Copia manualmente.\");\n }\n }\n\n function handleParse() {\n try {\n const data = parseM3uUrl(input);\n setParsed(data);\n setMessage(\"Credenciais extraídas do link.\");\n setError(\"\");\n } catch (err) {\n setParsed(null);\n setMessage(\"\");\n setError(err instanceof Error ? err.message : \"Erro ao analisar o link.\");\n }\n }\n\n async function handleSave() {\n try {\n setSaving(true);\n setMessage(\"\");\n setError(\"\");\n setResult(null);\n\n const data = parsed ?? parseM3uUrl(input);\n setParsed(data);\n\n const key = keyInput.trim();\n const isUpdate = !!key;\n\n const params = new URLSearchParams({\n user: data.user,\n pass: data.pass,\n server: data.server,\n m3u: data.m3u,\n expiresAt: data.expiresAt,\n });\n if (isUpdate) params.set(\"key\", key);\n\n const res = await fetch(`${BASE}/save?${params.toString()}`);\n const out = await res.json() as SaveResponse;\n\n if (!res.ok || !out.ok || !out.key || !out.playlist) {\n throw new Error(out.error || \"Falha ao gravar as credenciais.\");\n }\n\n setResult({ key: out.key, playlist: out.playlist });\n setKeyInput(out.key);\n setMessage(\n isUpdate\n ? \"Playlist atualizada nesta chave.\"\n : \"Playlist criada. Usa o link/chave abaixo.\",\n );\n await loadList();\n } catch (err) {\n setError(err instanceof Error ? err.message : \"Erro ao gravar.\");\n } finally {\n setSaving(false);\n }\n }\n\n async function handleDelete(key: string) {\n try {\n await fetch(`${BASE}/delete?key=${encodeURIComponent(key)}`);\n if (result?.key === key) setResult(null);\n await loadList();\n } catch {\n setError(\"Erro ao apagar a entrada.\");\n }\n }\n\n return (\n \n

\n \n \n \n M3U Proxy\n

\n \n Guardar link IPTV\n \n \n Abrir freeiptv2023-d.ottc.xyz →\n \n \n \n\n \n \n URL M3U\n \n setInput(event.target.value)}\n placeholder={SAMPLE_URL}\n spellCheck={false}\n autoCapitalize=\"none\"\n autoCorrect=\"off\"\n style={{\n width: \"100%\",\n minHeight: 170,\n marginTop: 12,\n boxSizing: \"border-box\",\n borderRadius: 24,\n border: \"1px solid rgba(255,255,255,0.1)\",\n background: \"#0c0a09\",\n color: \"#fafaf9\",\n padding: \"16px\",\n fontSize: 14,\n lineHeight: 1.6,\n }}\n />\n\n \n Chave a atualizar (opcional)\n \n

\n setKeyInput(event.target.value)}\n placeholder=\"vazio = cria nova playlist\"\n spellCheck={false}\n autoCapitalize=\"none\"\n autoCorrect=\"off\"\n style={{\n flex: 1,\n minWidth: 0,\n boxSizing: \"border-box\",\n borderRadius: 18,\n border: keyInput\n ? \"1px solid rgba(249,115,22,0.6)\"\n : \"1px solid rgba(255,255,255,0.1)\",\n background: \"#0c0a09\",\n color: \"#fafaf9\",\n padding: \"12px 14px\",\n fontSize: 13,\n }}\n />\n {keyInput\n ? (\n setKeyInput(\"\")}\n style={{\n border: \"1px solid rgba(255,255,255,0.14)\",\n borderRadius: 16,\n padding: \"0 16px\",\n background: \"rgba(255,255,255,0.05)\",\n color: \"#a8a29e\",\n fontSize: 13,\n fontWeight: 600,\n cursor: \"pointer\",\n whiteSpace: \"nowrap\",\n }}\n >\n Limpar\n \n )\n : null}\n

\n\n

\n \n Analisar\n \n \n {saving\n ? \"A gravar...\"\n : keyInput.trim()\n ? \"Atualizar\"\n : \"Gravar\"}\n \n

\n {message\n ? (\n \n {message}\n \n )\n : null}\n {error\n ? (\n \n {error}\n \n )\n : null}\n \n\n {result\n ? (\n \n \n

Playlist gerada

\n\n \n \n Chave (key)\n \n \n \n {result.key}\n \n copy(result.key, \"key\")}\n />\n \n \n\n \n \n Link para o player\n \n \n {result.playlist}\n \n

\n copy(result.playlist, \"playlist\")}\n />\n \n Abrir\n \n

\n \n \n \n )\n : null}\n\n {parsed\n ? (\n \n \n \n \n \n )\n : null}\n\n \n \n

\n Playlists guardadas\n {items.length ? ` (${items.length})` : \"\"}\n

\n \n Atualizar\n \n \n\n {items.length\n ? (\n

\n {items.map((item) => (\n \n \n \n {item.user || \"—\"}\n

\n {item.expiresAt\n ? (\n

\n exp: {item.expiresAt}\n

\n )\n : null}\n \n\n

\n {item.server}\n

\n\n \n {item.playlist}\n \n\n

\n copy(item.playlist, item.key)}\n />\n \n Abrir\n \n {\n setKeyInput(item.key);\n setResult(null);\n setMessage(\n \"Chave selecionada. Cola o novo URL e carrega em Atualizar.\",\n );\n setError(\"\");\n window.scrollTo({ top: 0, behavior: \"smooth\" });\n }}\n style={{\n border: item.key === keyInput\n ? \"1px solid rgba(249,115,22,0.6)\"\n : \"1px solid rgba(255,255,255,0.14)\",\n borderRadius: 16,\n padding: \"10px 14px\",\n background: item.key === keyInput\n ? \"rgba(249,115,22,0.16)\"\n : \"rgba(255,255,255,0.05)\",\n color: item.key === keyInput ? \"#fdba74\" : \"#fafaf9\",\n fontSize: 13,\n fontWeight: 600,\n cursor: \"pointer\",\n }}\n >\n {item.key === keyInput ? \"Selecionada\" : \"Editar\"}\n \n handleDelete(item.key)}\n style={{\n marginLeft: \"auto\",\n border: \"1px solid rgba(239,68,68,0.35)\",\n borderRadius: 16,\n padding: \"10px 14px\",\n background: \"rgba(239,68,68,0.12)\",\n color: \"#fca5a5\",\n fontSize: 13,\n fontWeight: 600,\n cursor: \"pointer\",\n }}\n >\n Apagar\n \n

\n \n ))}\n \n )\n : (\n \n Ainda não há playlists guardadas.\n

\n )}\n \n \n \n );\n}\n\nfunction client() {\n createRoot(document.getElementById(\"root\")!).render();\n}\n\nif (typeof document !== \"undefined\") client();\n\nexport default async function server(_request: Request): Promise {\n return new Response(\n `\n \n \n M3U Proxy Link\n \n \n \n \n

\n \n \n \n \n `,\n {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n },\n );\n}",[138],"a4e865a4-478d-11f1-a13a-42b51c65c3df","deno.json","a4e8663a-478d-11f1-a13a-42b51c65c3df",25,["D",1777880910735],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/98f62cee78e85bfc47c62ed703777c6bc8794f1c/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": true,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"include\": [\"deno:/https/esm.town/**/*\"],\n \"rules\": {\n \"exclude\": [\"no-explicit-any\"]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}",[146],"a514fede-478d-11f1-b4ee-42b51c65c3df","AGENTS.md","a514ff88-478d-11f1-b4ee-42b51c65c3df",27,["D",1777880910723],"You are an advanced assistant specialized in generating Val Town code.\n\n## Core Guidelines\n\n- Ask clarifying questions when requirements are ambiguous\n- Provide complete, functional solutions rather than skeleton implementations\n- Test your logic against edge cases before presenting the final solution\n- Ensure all code follows Val Town's specific platform requirements\n- If a section of code that you're working on is getting too complex, consider refactoring it into subcomponents\n\n## Code Standards\n\n- Generate code in TypeScript or TSX\n- Add appropriate TypeScript types and interfaces for all data structures\n- Prefer official SDKs or libraries than writing API calls directly\n- Ask the user to supply API or library documentation if you are at all unsure about it\n- **Never bake in secrets into the code** - always use environment variables\n- Include comments explaining complex logic (avoid commenting obvious operations)\n- Follow modern ES6+ conventions and functional programming practices if possible\n\n## Types of triggers\n\n### 1. HTTP Trigger\n\n- Create web APIs and endpoints\n- Handle HTTP requests and responses\n- Example structure:\n\n```ts\nexport default async function (req: Request) {\n return new Response(\"Hello World\");\n}\n```\n\nFiles that are HTTP triggers have http in their name like `foobar.http.tsx`\n\n### 2. Cron Triggers\n\n- Run on a schedule\n- Use cron expressions for timing\n- Example structure:\n\n```ts\nexport default async function () {\n // Scheduled task code\n}\n```\n\nFiles that are Cron triggers have cron in their name like `foobar.cron.tsx`\n\n### 3. Email Triggers\n\n- Process incoming emails\n- Handle email-based workflows\n- Example structure:\n\n```ts\nexport default async function (email: Email) {\n // Process email\n}\n```\n\nFiles that are Email triggers have email in their name like `foobar.email.tsx`\n\n\n## Val Town Standard Libraries\n\nVal Town provides several hosted services and utility functions.\n\n### Blob Storage\n\n```ts\nimport { blob } from \"https://esm.town/v/std/blob\";\nawait blob.setJSON(\"myKey\", { hello: \"world\" });\nlet blobDemo = await blob.getJSON(\"myKey\");\nlet appKeys = await blob.list(\"app_\");\nawait blob.delete(\"myKey\");\n```\n\n### SQLite\n\n```ts\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nconst TABLE_NAME = 'todo_app_users_2';\n// Create table - do this before usage and change table name when modifying schema\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE_NAME} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL\n)`);\n// Query data\nconst result = await sqlite.execute(`SELECT * FROM ${TABLE_NAME} WHERE id = ?`, [1]);\n```\n\nNote: When changing a SQLite table's schema, change the table's name (e.g., add _2 or _3) to create a fresh table.\n\n### OpenAI\n\n```ts\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nconst openai = new OpenAI();\nconst completion = await openai.chat.completions.create({\n messages: [\n { role: \"user\", content: \"Say hello in a creative way\" },\n ],\n model: \"gpt-4o-mini\",\n max_tokens: 30,\n});\n```\n\n### Email\n\n```ts\nimport { email } from \"https://esm.town/v/std/email\";\n// By default emails the owner of the val\nawait email({ \n subject: \"Hi\", \n text: \"Hi\", \n html: \"

Hi

\"\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport { parseProject, readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\" urls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's *extremely importing* to note that `parseProject` and other Standard Library utilities ONLY RUN ON THE SERVER.\nIf you need access to this data on the client, run it in the server and pass it to the client by splicing it into the HTML page\nor by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})` instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use: `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys) unless otherwise specified\n- **View Source:** Add a view source link by importing & using `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the client) and include `target=\"_top\"` attribute\n- **Error Debugging:** Add `` to HTML to capture client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local resolution; Avoid catches that merely log or return 500s. Let errors bubble up with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with `?deps=react@18.2.0,react-dom@18.2.0` and start the file with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same version\n- **Styling:** Default to using TailwindCSS via `` unless otherwise specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project files:\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n \n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n \n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to see full stack traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:** \n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with `export default app.fetch // This is the entry point for HTTP vals`\n\n",[153],"a4dfdb46-478d-11f1-992a-42b51c65c3df",".vtignore","a4dfdc22-478d-11f1-992a-42b51c65c3df",24,["D",1777880910712],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor",[160],"pulls","branches",1,"forks","envVars",{"_174":60,"_176":60},"connections",{"_174":60,"_175":60},"count","unfilledCount","emptyCount",{"_43":159,"_32":160,"_30":161,"_131":-5,"_41":42,"_40":162,"_132":120,"_38":195,"_13":60,"_33":20,"_35":164,"_24":25,"_135":-5,"_183":196,"_27":197},{"_43":152,"_32":153,"_30":154,"_131":-5,"_41":42,"_40":155,"_132":120,"_38":192,"_13":60,"_33":20,"_35":157,"_24":25,"_135":-5,"_183":193,"_27":194},{"_43":145,"_32":146,"_30":147,"_131":-5,"_41":42,"_40":148,"_132":120,"_38":189,"_13":60,"_33":20,"_35":150,"_24":25,"_135":-5,"_183":190,"_27":191},{"_43":137,"_32":138,"_30":139,"_131":-5,"_41":42,"_40":140,"_132":25,"_38":186,"_13":142,"_33":34,"_35":143,"_24":25,"_135":-5,"_183":187,"_27":188},{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":182,"_13":134,"_33":34,"_35":37,"_24":25,"_135":-5,"_183":184,"_27":185},["D",1784109575882],"children",[],[28],["D",1784105537592],[],[138],["D",1777880910735],[],[146],["D",1777880910723],[],[153],["D",1777880910712],[],[160],["D",1777452012644],{"_94":93,"_101":97},{"_94":93,"_95":-5,"_96":97,"_18":54,"_98":99,"_100":25},{"_13":83,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"ctx",{"_76":-5,"_122":235,"_236":237,"_238":239,"_240":25,"_241":25,"_242":25,"_243":120,"_244":-5,"_245":-7,"_246":-7,"_247":60,"_248":25,"_249":25,"_250":-5,"_251":25,"_252":25,"_253":25,"_254":-5},"ENV",{"_206":207,"_208":209,"_210":84,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v45