[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_172":173,"_174":175},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_108":89,"_27":53,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":58,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",20,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main2.ts","latestPath","fileId","9b3cfdac-ab8e-11f1-9511-1607ee4eb77e","name","fileType","http","content","// ============================================================================\n// ربات پیامک‌رسان تلگرام + پنل مدیریت (Val Town / Deno)\n// نسخه 3.0 — ادغام کد اول (پنل و ایندکس و برچسب) با کد دوم (پپپ، انتخاب مخاطب،\n// انقضای ۳۰ دقیقه، تحلیل خطای همایس) + امنیت و امکانات جدید\n// ============================================================================\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\n// ==========================================\n// ۱. تنظیمات\n// ==========================================\nconst getEnv = (key: string, fallback = \"\") =>\n Deno.env.get(key) ||\n (typeof process !== \"undefined\" ? process.env?.[key] : undefined) ||\n fallback;\n\nconst TELEGRAM_TOKEN = getEnv(\"TELEGRAM_TOKEN\");\nconst ADMIN_ID = Number(getEnv(\"ADMIN_ID\", \"0\"));\nconst WEBHOOK_SECRET = getEnv(\"WEBHOOK_SECRET\");\nconst ADMIN_SECRET = getEnv(\"ADMIN_SECRET\");\n\nconst HOMAIS_CONFIG = {\n username: getEnv(\"HOMAIS_USERNAME\", \"fr41160\"),\n password: getEnv(\"HOMAIS_PASSWORD\"),\n portalCode: getEnv(\"HOMAIS_PORTAL_CODE\", \"10003692\"),\n serverType: getEnv(\"HOMAIS_SERVER_TYPE\", \"100\"),\n};\n\nconst TG_API = `https://api.telegram.org/bot${TELEGRAM_TOKEN}`;\nconst RECIPIENTS_PAGE_SIZE = 8;\nconst MAX_BROADCAST = 300;\nconst SMS_CONCURRENCY = 5;\n\nconst DEFAULT_SETTINGS: Record = {\n trigger_word: \"پپپ\",\n daily_limit: \"50\",\n sms_signature: \"\",\n prompt_ttl_minutes: \"30\",\n require_whitelist: \"0\",\n delete_trigger_message: \"0\",\n index_all_messages: \"1\",\n max_sms_length: \"400\",\n};\n\nif (!TELEGRAM_TOKEN) console.warn(\"⚠️ TELEGRAM_TOKEN ست نشده است.\");\nif (!ADMIN_ID) console.warn(\"⚠️ ADMIN_ID ست نشده است.\");\n\n// ==========================================\n// ۲. لایه دیتابیس\n// ==========================================\nasync function query(sql: string, args: any[] = []) {\n const res = await sqlite.execute({ sql, args });\n const rows = (res.rows || []).map((row: any) => {\n if (!Array.isArray(row)) return row;\n const obj: Record = {};\n (res.columns || []).forEach((col: string, idx: number) => {\n obj[col] = row[idx];\n });\n return obj;\n });\n return {\n rows,\n lastInsertRowid: res.lastInsertRowid,\n rowsAffected: res.rowsAffected,\n };\n}\n\nlet dbReady = false;\nasync function initDatabase() {\n if (dbReady) return;\n\n await query(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n tg_id INTEGER UNIQUE,\n first_name TEXT,\n last_name TEXT,\n username TEXT,\n phone TEXT,\n is_active INTEGER DEFAULT 1,\n note TEXT,\n sms_received INTEGER DEFAULT 0,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n updated_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS admins (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n tg_id INTEGER UNIQUE,\n title TEXT,\n added_by INTEGER,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS allowed_chats (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER UNIQUE,\n title TEXT,\n enabled INTEGER DEFAULT 1,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS topic_members (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n thread_id INTEGER DEFAULT 0,\n tg_id INTEGER,\n last_active DATETIME DEFAULT CURRENT_TIMESTAMP,\n UNIQUE(chat_id, thread_id, tg_id)\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS messages_index (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n chat_title TEXT,\n message_thread_id INTEGER DEFAULT 0,\n message_id INTEGER,\n sender_id INTEGER,\n sender_name TEXT,\n text TEXT,\n has_media INTEGER DEFAULT 0,\n tag TEXT,\n sms_sent INTEGER DEFAULT 0,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n UNIQUE(chat_id, message_id)\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS predefined_tags (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT UNIQUE\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS pending_prompts (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n message_id INTEGER,\n thread_id INTEGER DEFAULT 0,\n record_id INTEGER,\n selected TEXT DEFAULT '[]',\n page INTEGER DEFAULT 0,\n expires_at DATETIME,\n UNIQUE(chat_id, message_id)\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS sms_logs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n record_id INTEGER,\n chat_id INTEGER,\n chat_title TEXT,\n actor_id INTEGER,\n actor_name TEXT,\n target_tg_id INTEGER,\n target_name TEXT,\n phone TEXT,\n text TEXT,\n parts INTEGER DEFAULT 1,\n status TEXT,\n provider_response TEXT,\n error_text TEXT,\n source TEXT DEFAULT 'group',\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY,\n value TEXT\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS processed_updates (\n update_id INTEGER PRIMARY KEY,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS audit_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n actor_id INTEGER,\n action TEXT,\n details TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n\n await query(\n `CREATE INDEX IF NOT EXISTS idx_msg_chat ON messages_index(chat_id, message_id);`,\n );\n await query(\n `CREATE INDEX IF NOT EXISTS idx_logs_created ON sms_logs(created_at DESC);`,\n );\n await query(\n `CREATE INDEX IF NOT EXISTS idx_logs_actor ON sms_logs(actor_id, created_at);`,\n );\n\n for (const [k, v] of Object.entries(DEFAULT_SETTINGS)) {\n await query(\n \"INSERT OR IGNORE INTO settings (key, value) VALUES (?, ?)\",\n [k, v],\n );\n }\n\n dbReady = true;\n}\n\nlet settingsCache: { data: Record; at: number } | null = null;\n\nasync function getSettings(force = false): Promise> {\n if (!force && settingsCache && Date.now() - settingsCache.at < 20_000) {\n return settingsCache.data;\n }\n const res = await query(\"SELECT key, value FROM settings\");\n const data = { ...DEFAULT_SETTINGS };\n res.rows.forEach((r: any) => (data[r.key] = r.value ?? \"\"));\n settingsCache = { data, at: Date.now() };\n return data;\n}\n\nasync function setSetting(key: string, value: string) {\n await query(\n `INSERT INTO settings (key, value) VALUES (?, ?)\n ON CONFLICT(key) DO UPDATE SET value = excluded.value;`,\n [key, value],\n );\n settingsCache = null;\n}\n\nasync function audit(actorId: number, action: string, details = \"\") {\n await query(\n \"INSERT INTO audit_log (actor_id, action, details) VALUES (?, ?, ?)\",\n [actorId, action, details],\n ).catch(() => {});\n}\n\n// ==========================================\n// ۳. درایور پیامک همایس + تحلیل خطا\n// ==========================================\nfunction normalizeIranianPhone(rawPhone: string): string {\n let cleaned = String(rawPhone || \"\").replace(/[^0-9]/g, \"\");\n if (cleaned.startsWith(\"0098\")) cleaned = \"0\" + cleaned.substring(4);\n else if (cleaned.startsWith(\"98\") && cleaned.length === 12) {\n cleaned = \"0\" + cleaned.substring(2);\n } else if (cleaned.startsWith(\"9\") && cleaned.length === 10) {\n cleaned = \"0\" + cleaned;\n }\n return cleaned;\n}\n\nfunction isValidIranianMobile(phone: string): boolean {\n return /^09\\d{9}$/.test(phone);\n}\n\nfunction smsPartCount(text: string): number {\n const isPersian = /[\\u0600-\\u06FF]/.test(text);\n const per = isPersian ? 70 : 160;\n return Math.max(1, Math.ceil(text.length / per));\n}\n\nfunction explainHomaisError(raw: string): string {\n const trimmed = (raw || \"\").trim();\n const code = parseInt(trimmed, 10);\n if (!isNaN(code) && String(code) === trimmed.replace(/^\\+/, \"\")) {\n switch (code) {\n case -1:\n case 101:\n return \"نام کاربری یا رمز عبور پنل همایس نامعتبر است.\";\n case -2:\n case 102:\n return \"شارژ (اعتبار ریالی) پنل همایس به اتمام رسیده است.\";\n case -3:\n case 103:\n return \"پورتال‌کد یا نوع سرور ارسال‌کننده نامعتبر است.\";\n case -4:\n case 104:\n return \"شماره گیرنده نامعتبر است یا در بلک‌لیست تبلیغاتی مخابرات قرار دارد.\";\n case -5:\n case 105:\n return \"متن پیامک خالی یا شامل عبارات غیرمجاز است.\";\n case -6:\n case 106:\n return \"محدودیت تعداد ارسال یا مسدودی موقت پنل.\";\n default:\n return `خطای سرور همایس با کد: ${code}`;\n }\n }\n if (/timeout/i.test(trimmed)) return \"پاسخ سرور همایس در زمان مجاز دریافت نشد.\";\n return trimmed || \"خطای نامشخص در ارتباط با سامانه پیامک همایس\";\n}\n\nasync function sendHomaisSms(mobile: string, text: string) {\n if (!HOMAIS_CONFIG.username || !HOMAIS_CONFIG.password) {\n return {\n ok: false,\n status: 500,\n body: \"\",\n errorDescription: \"تنظیمات پنل همایس (نام کاربری/رمز) در سرور کامل نیست.\",\n };\n }\n\n const targetMobile = normalizeIranianPhone(mobile);\n if (!isValidIranianMobile(targetMobile)) {\n return {\n ok: false,\n status: 400,\n body: targetMobile,\n errorDescription:\n `فرمت شماره «${mobile}» معتبر نیست (باید ۱۱ رقم و با 09 شروع شود).`,\n };\n }\n\n const params = new URLSearchParams({\n username: HOMAIS_CONFIG.username,\n password: HOMAIS_CONFIG.password,\n PortalCode: HOMAIS_CONFIG.portalCode,\n mobile: targetMobile,\n message: text,\n ServerType: HOMAIS_CONFIG.serverType,\n });\n\n const url =\n `http://api.homais.com/services/messaging/sms/api/sendMessage/direct/?${params.toString()}`;\n\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 20_000);\n try {\n const res = await fetch(url, { method: \"GET\", signal: controller.signal });\n const rawText = (await res.text()).trim();\n const isError = !res.ok ||\n rawText === \"\" ||\n rawText.toLowerCase().includes(\"error\") ||\n rawText.startsWith(\"-\");\n return {\n ok: !isError,\n status: res.status,\n body: rawText,\n errorDescription: isError ? explainHomaisError(rawText) : \"\",\n };\n } catch (err: any) {\n const msg = err?.name === \"AbortError\" ? \"timeout\" : err?.message;\n return {\n ok: false,\n status: 0,\n body: String(msg),\n errorDescription: `عدم برقراری ارتباط با وب‌سرویس همایس: ${\n explainHomaisError(String(msg))\n }`,\n };\n } finally {\n clearTimeout(timer);\n }\n}\n\nasync function dispatchSms(opts: {\n phone: string;\n text: string;\n targetTgId?: number | null;\n targetName?: string;\n actorId: number;\n actorName?: string;\n recordId?: number | null;\n chatId?: number | null;\n chatTitle?: string;\n source?: string;\n}) {\n const res = await sendHomaisSms(opts.phone, opts.text);\n await query(\n `INSERT INTO sms_logs\n (record_id, chat_id, chat_title, actor_id, actor_name, target_tg_id,\n target_name, phone, text, parts, status, provider_response, error_text, source)\n VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n [\n opts.recordId ?? null,\n opts.chatId ?? null,\n opts.chatTitle ?? \"\",\n opts.actorId,\n opts.actorName ?? \"\",\n opts.targetTgId ?? null,\n opts.targetName ?? \"\",\n normalizeIranianPhone(opts.phone),\n opts.text,\n smsPartCount(opts.text),\n res.ok ? \"ok\" : \"failed\",\n res.body,\n res.errorDescription,\n opts.source ?? \"group\",\n ],\n );\n if (res.ok && opts.targetTgId) {\n await query(\n \"UPDATE users SET sms_received = COALESCE(sms_received,0) + 1 WHERE tg_id = ?\",\n [opts.targetTgId],\n );\n }\n return res;\n}\n\nasync function runWithConcurrency(\n items: T[],\n limit: number,\n worker: (item: T) => Promise,\n) {\n const out: any[] = [];\n for (let i = 0; i < items.length; i += limit) {\n const chunk = items.slice(i, i + limit);\n out.push(...await Promise.all(chunk.map(worker)));\n }\n return out;\n}\n\n// ==========================================\n// ۴. ارتباط با تلگرام\n// ==========================================\nasync function callTelegram(method: string, payload: any) {\n if (!TELEGRAM_TOKEN) return null;\n try {\n const res = await fetch(`${TG_API}/${method}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(payload),\n });\n return await res.json();\n } catch (err) {\n console.error(`Telegram API Error [${method}]:`, err);\n return null;\n }\n}\n\nconst sendMessage = (chatId: number, text: string, extra: any = {}) =>\n callTelegram(\"sendMessage\", { chat_id: chatId, text, ...extra });\n\nconst answerCallbackQuery = (id: string, text = \"\", showAlert = false) =>\n callTelegram(\"answerCallbackQuery\", {\n callback_query_id: id,\n text: text.slice(0, 195),\n show_alert: showAlert,\n });\n\nconst editMessageText = (\n chatId: number,\n messageId: number,\n text: string,\n extra: any = {},\n) =>\n callTelegram(\"editMessageText\", {\n chat_id: chatId,\n message_id: messageId,\n text,\n ...extra,\n });\n\nconst editMessageReplyMarkup = (\n chatId: number,\n messageId: number,\n replyMarkup: any,\n) =>\n callTelegram(\"editMessageReplyMarkup\", {\n chat_id: chatId,\n message_id: messageId,\n reply_markup: replyMarkup,\n });\n\nconst deleteMessage = (chatId: number, messageId: number) =>\n callTelegram(\"deleteMessage\", { chat_id: chatId, message_id: messageId });\n\nasync function getChatMember(chatId: number, userId: number) {\n const res = await callTelegram(\"getChatMember\", {\n chat_id: chatId,\n user_id: userId,\n });\n return res?.result;\n}\n\nfunction escapeHtml(str: string): string {\n return String(str ?? \"\")\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\n// ==========================================\n// ۵. احراز هویت (initData تلگرام + سطوح دسترسی)\n// ==========================================\nconst encoder = new TextEncoder();\n\nasync function hmacSha256(keyData: ArrayBuffer | Uint8Array, msg: string) {\n const key = await crypto.subtle.importKey(\n \"raw\",\n keyData as any,\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n return crypto.subtle.sign(\"HMAC\", key, encoder.encode(msg));\n}\n\nconst toHex = (buf: ArrayBuffer) =>\n [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n\nasync function validateInitData(initData: string) {\n if (!initData || !TELEGRAM_TOKEN) return null;\n try {\n const params = new URLSearchParams(initData);\n const hash = params.get(\"hash\");\n if (!hash) return null;\n params.delete(\"hash\");\n\n const dataCheckString = [...params.entries()]\n .map(([k, v]) => `${k}=${v}`)\n .sort()\n .join(\"\\n\");\n\n const secret = await hmacSha256(encoder.encode(\"WebAppData\"), TELEGRAM_TOKEN);\n const signature = await hmacSha256(secret, dataCheckString);\n if (toHex(signature) !== hash.toLowerCase()) return null;\n\n const authDate = Number(params.get(\"auth_date\") || 0);\n if (!authDate || Date.now() / 1000 - authDate > 86400) return null;\n\n return JSON.parse(params.get(\"user\") || \"null\");\n } catch {\n return null;\n }\n}\n\nasync function isAdminUser(tgId: number): Promise {\n if (!tgId) return false;\n if (ADMIN_ID && tgId === ADMIN_ID) return true;\n const res = await query(\"SELECT 1 AS ok FROM admins WHERE tg_id = ? LIMIT 1\", [\n tgId,\n ]);\n return Boolean(res.rows[0]);\n}\n\ntype Auth = { tgId: number; isSuper: boolean; via: string };\n\nasync function authenticate(req: Request, url: URL): Promise {\n const initData = req.headers.get(\"x-telegram-init-data\") ||\n url.searchParams.get(\"_auth\") || \"\";\n const user = await validateInitData(initData);\n if (user?.id && await isAdminUser(Number(user.id))) {\n return {\n tgId: Number(user.id),\n isSuper: Number(user.id) === ADMIN_ID,\n via: \"miniapp\",\n };\n }\n const secret = req.headers.get(\"x-admin-secret\") ||\n url.searchParams.get(\"secret\") || \"\";\n if (ADMIN_SECRET && secret && secret === ADMIN_SECRET) {\n return { tgId: ADMIN_ID, isSuper: true, via: \"secret\" };\n }\n return null;\n}\n\n// ==========================================\n// ۶. پاک‌سازی پیام‌های منقضی و آپدیت‌های تکراری\n// ==========================================\nasync function cleanupExpired() {\n try {\n const res = await query(\n \"SELECT id, chat_id, message_id FROM pending_prompts WHERE expires_at <= CURRENT_TIMESTAMP LIMIT 25\",\n );\n for (const row of res.rows) {\n await deleteMessage(row.chat_id, row.message_id).catch(() => {});\n await query(\"DELETE FROM pending_prompts WHERE id = ?\", [row.id]);\n }\n await query(\n \"DELETE FROM processed_updates WHERE created_at <= datetime('now','-1 day')\",\n );\n } catch (e) {\n console.error(\"cleanup error:\", e);\n }\n}\n\nasync function isDuplicateUpdate(updateId?: number): Promise {\n if (!updateId) return false;\n const res = await query(\n \"INSERT OR IGNORE INTO processed_updates (update_id) VALUES (?)\",\n [updateId],\n );\n return Number(res.rowsAffected || 0) === 0;\n}\n\n// ==========================================\n// ۷. ساخت کیبورد انتخاب مخاطبان\n// ==========================================\nasync function fetchActiveUsers() {\n const res = await query(\n `SELECT tg_id, first_name, last_name, phone FROM users\n WHERE phone IS NOT NULL AND phone != '' AND is_active = 1\n ORDER BY first_name COLLATE NOCASE ASC`,\n );\n return res.rows;\n}\n\nconst displayName = (u: any) =>\n `${u.first_name || \"\"} ${u.last_name || \"\"}`.trim() || \"کاربر\";\n\nfunction buildRecipientKeyboard(\n recordId: number,\n users: any[],\n selected: number[],\n page: number,\n) {\n const totalPages = Math.max(1, Math.ceil(users.length / RECIPIENTS_PAGE_SIZE));\n const safePage = Math.min(Math.max(0, page), totalPages - 1);\n const slice = users.slice(\n safePage * RECIPIENTS_PAGE_SIZE,\n safePage * RECIPIENTS_PAGE_SIZE + RECIPIENTS_PAGE_SIZE,\n );\n\n const rows: any[] = slice.map((u) => {\n const on = selected.includes(Number(u.tg_id));\n return [{\n text: `${on ? \"✅\" : \"⬜️\"} ${displayName(u)} — ${u.phone}`,\n callback_data: `tgl:${recordId}:${u.tg_id}`,\n }];\n });\n\n if (totalPages > 1) {\n rows.push([\n {\n text: \"⬅️ قبلی\",\n callback_data: `pg:${recordId}:${(safePage - 1 + totalPages) % totalPages}`,\n },\n { text: `${safePage + 1}/${totalPages}`, callback_data: `noop:${recordId}` },\n { text: \"بعدی ➡️\", callback_data: `pg:${recordId}:${(safePage + 1) % totalPages}` },\n ]);\n }\n\n rows.push([\n { text: \"☑️ انتخاب همه\", callback_data: `all:${recordId}` },\n { text: \"🧹 پاک‌کردن انتخاب\", callback_data: `none:${recordId}` },\n ]);\n rows.push([\n {\n text: `📩 ارسال پیامک (${selected.length})`,\n callback_data: `snd:${recordId}`,\n },\n ]);\n rows.push([\n { text: \"🏷 برچسب\", callback_data: `tagm:${recordId}` },\n { text: \"❌ انصراف\", callback_data: `dismiss:${recordId}` },\n ]);\n\n return { inline_keyboard: rows };\n}\n\nasync function getPrompt(chatId: number, messageId: number) {\n const res = await query(\n \"SELECT * FROM pending_prompts WHERE chat_id = ? AND message_id = ? LIMIT 1\",\n [chatId, messageId],\n );\n return res.rows[0];\n}\n\nasync function canActOnRecord(fromId: number, record: any): Promise {\n if (!record) return false;\n if (fromId === Number(record.sender_id)) return true;\n if (await isAdminUser(fromId)) return true;\n const member = await getChatMember(record.chat_id, fromId);\n return [\"creator\", \"administrator\"].includes(member?.status);\n}\n\nfunction buildSmsText(\n record: any,\n cleanedText: string,\n signature: string,\n maxLen: number,\n) {\n const lines: string[] = [];\n lines.push(`پیام از ${record.sender_name || \"کاربر\"}`);\n if (record.chat_title) lines.push(`گروه: ${record.chat_title}`);\n lines.push(cleanedText);\n if (signature) lines.push(signature);\n let out = lines.join(\"\\n\");\n if (out.length > maxLen) out = out.slice(0, maxLen - 3) + \"...\";\n return out;\n}\n\n// ==========================================\n// ۸. هندلر آپدیت‌های تلگرام\n// ==========================================\nasync function handleTelegramUpdate(update: any) {\n if (await isDuplicateUpdate(update?.update_id)) return;\n await cleanupExpired();\n\n if (update.callback_query) return handleCallback(update.callback_query);\n\n const msg = update.message || update.edited_message;\n if (!msg) return;\n\n if (msg.chat.type === \"private\") return handlePrivate(msg);\n if ([\"group\", \"supergroup\"].includes(msg.chat.type)) return handleGroup(msg);\n}\n\n// ---------- ۸-۱. دکمه‌های شیشه‌ای ----------\nasync function handleCallback(cb: any) {\n const { id, data, from, message } = cb;\n if (!data || !message) return;\n\n const settings = await getSettings();\n const [action, rawRecordId, extraParam] = data.split(\":\");\n const recordId = Number(rawRecordId);\n\n if (action === \"noop\") return answerCallbackQuery(id);\n\n const recRes = await query(\n \"SELECT * FROM messages_index WHERE id = ? LIMIT 1\",\n [recordId],\n );\n const record = recRes.rows[0];\n\n if (action === \"dismiss\") {\n if (record && !(await canActOnRecord(from.id, record))) {\n return answerCallbackQuery(id, \"⛔️ اجازه این کار را ندارید.\", true);\n }\n await query(\n \"DELETE FROM pending_prompts WHERE chat_id = ? AND message_id = ?\",\n [message.chat.id, message.message_id],\n );\n await deleteMessage(message.chat.id, message.message_id);\n return answerCallbackQuery(id, \"لغو شد.\");\n }\n\n if (!record) return answerCallbackQuery(id, \"پیام مرجع یافت نشد.\", true);\n if (!(await canActOnRecord(from.id, record))) {\n return answerCallbackQuery(\n id,\n \"⛔️ فقط فرستنده پیام، مدیر گروه یا ادمین بات مجاز است.\",\n true,\n );\n }\n\n const prompt = await getPrompt(message.chat.id, message.message_id);\n if (!prompt) {\n return answerCallbackQuery(id, \"این درخواست منقضی شده است.\", true);\n }\n let selected: number[] = [];\n try {\n selected = JSON.parse(prompt.selected || \"[]\");\n } catch { /* ignore */ }\n const users = await fetchActiveUsers();\n\n if (action === \"tagm\") {\n const tagsRes = await query(\n \"SELECT name FROM predefined_tags ORDER BY id DESC LIMIT 12\",\n );\n if (!tagsRes.rows.length) {\n return answerCallbackQuery(id, \"هنوز برچسبی در پنل ثبت نشده است.\", true);\n }\n const kb = tagsRes.rows.map((t: any) => [{\n text: `#${t.name}`,\n callback_data: `stag:${recordId}:${t.name}`,\n }]);\n kb.push([{ text: \"🔙 بازگشت\", callback_data: `back:${recordId}` }]);\n await editMessageReplyMarkup(message.chat.id, message.message_id, {\n inline_keyboard: kb,\n });\n return answerCallbackQuery(id);\n }\n\n if (action === \"stag\") {\n await query(\"UPDATE messages_index SET tag = ? WHERE id = ?\", [\n extraParam,\n recordId,\n ]);\n await editMessageReplyMarkup(\n message.chat.id,\n message.message_id,\n buildRecipientKeyboard(recordId, users, selected, Number(prompt.page || 0)),\n );\n return answerCallbackQuery(id, `برچسب #${extraParam} ثبت شد.`);\n }\n\n if (action === \"back\") {\n await editMessageReplyMarkup(\n message.chat.id,\n message.message_id,\n buildRecipientKeyboard(recordId, users, selected, Number(prompt.page || 0)),\n );\n return answerCallbackQuery(id);\n }\n\n if (action === \"tgl\" || action === \"all\" || action === \"none\" || action === \"pg\") {\n let page = Number(prompt.page || 0);\n if (action === \"tgl\") {\n const tgId = Number(extraParam);\n selected = selected.includes(tgId)\n ? selected.filter((x) => x !== tgId)\n : [...selected, tgId];\n } else if (action === \"all\") {\n selected = users.map((u: any) => Number(u.tg_id));\n } else if (action === \"none\") {\n selected = [];\n } else if (action === \"pg\") {\n page = Number(extraParam) || 0;\n }\n await query(\n \"UPDATE pending_prompts SET selected = ?, page = ? WHERE id = ?\",\n [JSON.stringify(selected), page, prompt.id],\n );\n await editMessageReplyMarkup(\n message.chat.id,\n message.message_id,\n buildRecipientKeyboard(recordId, users, selected, page),\n );\n return answerCallbackQuery(id);\n }\n\n if (action === \"snd\") {\n if (!selected.length) {\n return answerCallbackQuery(id, \"⚠️ هیچ مخاطبی انتخاب نشده است.\", true);\n }\n\n const limit = Number(settings.daily_limit || \"50\");\n if (limit > 0) {\n const usedRes = await query(\n `SELECT COUNT(*) AS c FROM sms_logs\n WHERE actor_id = ? AND status = 'ok' AND date(created_at) = date('now')`,\n [from.id],\n );\n const used = Number(usedRes.rows[0]?.c || 0);\n if (used + selected.length > limit) {\n return answerCallbackQuery(\n id,\n `⛔️ سقف روزانه (${limit} پیامک) پر شده است. مصرف امروز: ${used}`,\n true,\n );\n }\n }\n\n const targets = users.filter((u: any) => selected.includes(Number(u.tg_id)));\n const trigger = settings.trigger_word || \"پپپ\";\n let cleaned = String(record.text || \"\")\n .split(trigger).join(\"\")\n .replace(/\\s{2,}/g, \" \")\n .trim();\n if (!cleaned) cleaned = \"(بدون متن)\";\n\n const smsText = buildSmsText(\n record,\n cleaned,\n settings.sms_signature || \"\",\n Number(settings.max_sms_length || \"400\"),\n );\n\n await answerCallbackQuery(id, `⏳ در حال ارسال به ${targets.length} مخاطب...`);\n await editMessageText(\n message.chat.id,\n message.message_id,\n `⏳ در حال ارسال پیامک به ${targets.length} مخاطب...`,\n );\n\n const actorName = `${from.first_name || \"\"} ${from.last_name || \"\"}`.trim();\n const results = await runWithConcurrency(targets, SMS_CONCURRENCY, (u: any) =>\n dispatchSms({\n phone: u.phone,\n text: smsText,\n targetTgId: Number(u.tg_id),\n targetName: displayName(u),\n actorId: from.id,\n actorName,\n recordId,\n chatId: record.chat_id,\n chatTitle: record.chat_title,\n source: \"group\",\n }).then((r) => ({ u, r })));\n\n const okList = results.filter((x: any) => x.r.ok);\n const failList = results.filter((x: any) => !x.r.ok);\n\n await query(\"UPDATE messages_index SET sms_sent = ? WHERE id = ?\", [\n okList.length,\n recordId,\n ]);\n await query(\"DELETE FROM pending_prompts WHERE id = ?\", [prompt.id]);\n\n let report = `📊 گزارش ارسال پیامک\\n` +\n `👤 اقدام‌کننده: ${escapeHtml(actorName || String(from.id))}\\n` +\n `✅ موفق: ${okList.length} | ❌ ناموفق: ${failList.length}\\n` +\n `🔢 تعداد بخش پیامک: ${smsPartCount(smsText)}\\n\\n`;\n\n if (okList.length) {\n report += \"گیرندگان موفق:\\n\" +\n okList.slice(0, 15)\n .map((x: any) => `• ${escapeHtml(displayName(x.u))} (${x.u.phone})`)\n .join(\"\\n\") + \"\\n\\n\";\n }\n if (failList.length) {\n report += \"خطاها:\\n\" +\n failList.slice(0, 10)\n .map((x: any) =>\n `• ${escapeHtml(displayName(x.u))} (${x.u.phone}) → ${\n escapeHtml(x.r.errorDescription || x.r.body)\n }`\n ).join(\"\\n\") + \"\\n\\n\";\n }\n report += `متن ارسال‌شده:\\n

${escapeHtml(smsText)}

`;\n\n await editMessageText(message.chat.id, message.message_id, report, {\n parse_mode: \"HTML\",\n });\n\n if (settings.delete_trigger_message === \"1\" && okList.length) {\n await deleteMessage(record.chat_id, record.message_id).catch(() => {});\n }\n await audit(from.id, \"sms_group_send\", `record=${recordId} ok=${okList.length}`);\n return;\n }\n}\n\n// ---------- ۸-۲. چت خصوصی ----------\nasync function handlePrivate(msg: any) {\n const chatId = msg.chat.id;\n const text = (msg.text || \"\").trim();\n const fromId = msg.from.id;\n const admin = await isAdminUser(fromId);\n\n if (msg.contact) {\n if (msg.contact.user_id && msg.contact.user_id !== fromId) {\n return sendMessage(chatId, \"❌ لطفاً شماره متعلق به اکانت خودتان را ارسال کنید.\");\n }\n const phone = normalizeIranianPhone(msg.contact.phone_number);\n if (!isValidIranianMobile(phone)) {\n return sendMessage(chatId, \"❌ شماره دریافتی معتبر نیست.\");\n }\n await query(\n `INSERT INTO users (tg_id, first_name, last_name, username, phone, is_active, updated_at)\n VALUES (?, ?, ?, ?, ?, 1, CURRENT_TIMESTAMP)\n ON CONFLICT(tg_id) DO UPDATE SET\n phone = excluded.phone,\n first_name = excluded.first_name,\n last_name = excluded.last_name,\n username = excluded.username,\n is_active = 1,\n updated_at = CURRENT_TIMESTAMP;`,\n [\n fromId,\n msg.from.first_name || \"\",\n msg.from.last_name || \"\",\n msg.from.username || \"\",\n phone,\n ],\n );\n return sendMessage(\n chatId,\n `✅ شماره ${phone} با موفقیت ثبت شد.\\nبرای قطع دریافت پیامک هر زمان /stop را بفرستید.`,\n { reply_markup: { remove_keyboard: true } },\n );\n }\n\n if (text === \"/start\" || text === \"/help\") {\n const userRes = await query(\n \"SELECT phone, is_active FROM users WHERE tg_id = ? LIMIT 1\",\n [fromId],\n );\n const u = userRes.rows[0];\n const help = \"\\n\\nدستورها:\\n\" +\n \"/start ثبت یا وضعیت شماره\\n\" +\n \"/stop توقف دریافت پیامک\\n\" +\n \"/resume از سرگیری دریافت\\n\" +\n \"/whoami نمایش آیدی عددی\\n\" +\n (admin\n ? \"\\nدستورهای مدیریتی:\\n/panel لینک پنل\\n/stats آمار\\n/testsms شماره متن\\n/trigger کلمه\\n/limit عدد\\n/addadmin آیدی\\n/deladmin آیدی\\n(در گروه) /allow و /disallow\"\n : \"\");\n\n if (u?.phone) {\n return sendMessage(\n chatId,\n `سلام ${msg.from.first_name}!\\nشماره شما (${u.phone}) ثبت است و وضعیت دریافت: ${\n u.is_active ? \"فعال ✅\" : \"غیرفعال ⛔️\"\n }${help}`,\n );\n }\n return sendMessage(\n chatId,\n `سلام ${msg.from.first_name}!\\nبرای دریافت اطلاع‌رسانی پیامکی، دکمه زیر را لمس کنید.${help}`,\n {\n reply_markup: {\n keyboard: [[{ text: \"📱 اشتراک‌گذاری شماره تماس\", request_contact: true }]],\n resize_keyboard: true,\n one_time_keyboard: true,\n },\n },\n );\n }\n\n if (text === \"/whoami\") {\n return sendMessage(chatId, `آیدی عددی شما: ${fromId}`, {\n parse_mode: \"HTML\",\n });\n }\n\n if (text === \"/stop\") {\n await query(\"UPDATE users SET is_active = 0 WHERE tg_id = ?\", [fromId]);\n return sendMessage(chatId, \"⛔️ دریافت پیامک برای شما غیرفعال شد. (/resume برای فعال‌سازی)\");\n }\n\n if (text === \"/resume\") {\n await query(\"UPDATE users SET is_active = 1 WHERE tg_id = ?\", [fromId]);\n return sendMessage(chatId, \"✅ دریافت پیامک دوباره فعال شد.\");\n }\n\n if (!admin) return;\n\n if (text === \"/panel\") {\n return sendMessage(\n chatId,\n \"پنل مدیریت را از منوی Mini App بات باز کنید (مسیر /admin روی همین دامنه).\\nاگر منو ست نشده، در BotFather مسیر /admin را به‌عنوان Web App ثبت کنید.\",\n );\n }\n\n if (text === \"/stats\") {\n const s = await collectStats();\n return sendMessage(\n chatId,\n `📊 آمار سامانه\\n` +\n `پیام‌های ایندکس‌شده: ${s.totalMessages}\\n` +\n `مخاطبان دارای شماره: ${s.usersWithPhone} (فعال: ${s.activeUsers})\\n` +\n `گروه‌های متصل: ${s.connectedGroups}\\n` +\n `پیامک امروز: ${s.smsToday} | موفق: ${s.smsOkToday} | ناموفق: ${s.smsFailedToday}\\n` +\n `مجموع پیامک‌ها: ${s.smsTotal}`,\n );\n }\n\n if (text.startsWith(\"/trigger\")) {\n const word = text.replace(\"/trigger\", \"\").trim();\n if (!word) return sendMessage(chatId, \"فرمت: /trigger پپپ\");\n await setSetting(\"trigger_word\", word);\n return sendMessage(chatId, `✅ کلمه فعال‌ساز به «${word}» تغییر کرد.`);\n }\n\n if (text.startsWith(\"/limit\")) {\n const n = Number(text.replace(\"/limit\", \"\").trim());\n if (!Number.isFinite(n) || n < 0) return sendMessage(chatId, \"فرمت: /limit 50\");\n await setSetting(\"daily_limit\", String(n));\n return sendMessage(chatId, `✅ سقف روزانه ارسال ${n} پیامک تنظیم شد.`);\n }\n\n if (text.startsWith(\"/addadmin\")) {\n const id = Number(text.replace(\"/addadmin\", \"\").trim());\n if (!id) return sendMessage(chatId, \"فرمت: /addadmin 123456789\");\n await query(\n \"INSERT OR IGNORE INTO admins (tg_id, added_by) VALUES (?, ?)\",\n [id, fromId],\n );\n await audit(fromId, \"add_admin\", String(id));\n return sendMessage(chatId, `✅ کاربر ${id} به ادمین‌ها اضافه شد.`);\n }\n\n if (text.startsWith(\"/deladmin\")) {\n const id = Number(text.replace(\"/deladmin\", \"\").trim());\n if (!id) return sendMessage(chatId, \"فرمت: /deladmin 123456789\");\n if (id === ADMIN_ID) return sendMessage(chatId, \"⛔️ سوپر ادمین قابل حذف نیست.\");\n await query(\"DELETE FROM admins WHERE tg_id = ?\", [id]);\n return sendMessage(chatId, `✅ کاربر ${id} از ادمین‌ها حذف شد.`);\n }\n\n if (text.startsWith(\"/testsms\")) {\n const parts = text.replace(\"/testsms\", \"\").trim().split(/\\s+/);\n const mobile = parts.shift() || \"\";\n const body = parts.join(\" \");\n if (!mobile || !body) {\n return sendMessage(chatId, \"فرمت:\\n/testsms 09121111111 متن آزمایشی\", {\n parse_mode: \"HTML\",\n });\n }\n await sendMessage(chatId, \"⏳ در حال ارسال...\");\n const res = await dispatchSms({\n phone: mobile,\n text: body,\n actorId: fromId,\n actorName: msg.from.first_name || \"\",\n source: \"test\",\n });\n return sendMessage(\n chatId,\n `📡 وضعیت: ${res.ok ? \"✅ موفق\" : \"❌ خطا\"}\\n` +\n (res.ok ? \"\" : `علت: ${escapeHtml(res.errorDescription)}\\n`) +\n `پاسخ سرور: ${escapeHtml(res.body || \"-\")}`,\n { parse_mode: \"HTML\" },\n );\n }\n}\n\n// ---------- ۸-۳. گروه‌ها و تاپیک‌ها ----------\nasync function handleGroup(msg: any) {\n if (msg.new_chat_members || msg.left_chat_member || msg.pinned_message) return;\n\n const settings = await getSettings();\n const chatId = msg.chat.id;\n const groupTitle = msg.chat.title || \"گروه\";\n const threadId = msg.message_thread_id || 0;\n const userId = msg.from?.id;\n if (!userId) return;\n\n const rawText = (msg.text || msg.caption || \"\").trim();\n\n if (/^\\/(allow|disallow)/.test(rawText)) {\n if (!(await isAdminUser(userId))) return;\n if (rawText.startsWith(\"/allow\")) {\n await query(\n `INSERT INTO allowed_chats (chat_id, title, enabled) VALUES (?, ?, 1)\n ON CONFLICT(chat_id) DO UPDATE SET enabled = 1, title = excluded.title;`,\n [chatId, groupTitle],\n );\n return sendMessage(chatId, \"✅ این گروه در لیست مجاز فعال شد.\", {\n message_thread_id: threadId || undefined,\n });\n }\n await query(\"UPDATE allowed_chats SET enabled = 0 WHERE chat_id = ?\", [chatId]);\n return sendMessage(chatId, \"⛔️ این گروه از لیست مجاز خارج شد.\", {\n message_thread_id: threadId || undefined,\n });\n }\n\n await query(\n `INSERT OR IGNORE INTO allowed_chats (chat_id, title, enabled) VALUES (?, ?, ?)`,\n [chatId, groupTitle, settings.require_whitelist === \"1\" ? 0 : 1],\n );\n\n if (settings.require_whitelist === \"1\") {\n const okRes = await query(\n \"SELECT enabled FROM allowed_chats WHERE chat_id = ? LIMIT 1\",\n [chatId],\n );\n if (!Number(okRes.rows[0]?.enabled)) return;\n }\n\n const hasMedia = Boolean(msg.photo || msg.video || msg.document || msg.voice);\n let trimmed = rawText;\n if (hasMedia && !trimmed) trimmed = `یک رسانه در گروه ${groupTitle} بارگذاری شد.`;\n if (!trimmed) return;\n\n await query(\n `INSERT INTO topic_members (chat_id, thread_id, tg_id) VALUES (?, ?, ?)\n ON CONFLICT(chat_id, thread_id, tg_id) DO UPDATE SET last_active = CURRENT_TIMESTAMP;`,\n [chatId, threadId, userId],\n );\n\n const senderName = `${msg.from.first_name || \"\"} ${msg.from.last_name || \"\"}`.trim();\n let recordId = 0;\n if (settings.index_all_messages === \"1\" || trimmed.includes(settings.trigger_word)) {\n const ins = await query(\n `INSERT INTO messages_index\n (chat_id, chat_title, message_thread_id, message_id, sender_id, sender_name, text, has_media)\n VALUES (?,?,?,?,?,?,?,?)\n ON CONFLICT(chat_id, message_id) DO UPDATE SET\n text = excluded.text, has_media = excluded.has_media, chat_title = excluded.chat_title\n RETURNING id;`,\n [\n chatId,\n groupTitle,\n threadId,\n msg.message_id,\n userId,\n senderName,\n trimmed,\n hasMedia ? 1 : 0,\n ],\n );\n recordId = Number(ins.rows[0]?.id || ins.lastInsertRowid || 0);\n }\n\n const trigger = settings.trigger_word || \"پپپ\";\n let isTriggered = trimmed.includes(trigger);\n let targetRecordId = recordId;\n\n if (!isTriggered && msg.reply_to_message) {\n const repText = (msg.reply_to_message.text || msg.reply_to_message.caption || \"\");\n if (trimmed === trigger || repText.includes(trigger)) {\n isTriggered = true;\n const repRes = await query(\n \"SELECT id FROM messages_index WHERE chat_id = ? AND message_id = ? LIMIT 1\",\n [chatId, msg.reply_to_message.message_id],\n );\n if (repRes.rows[0]?.id) targetRecordId = Number(repRes.rows[0].id);\n }\n }\n\n if (!isTriggered || !targetRecordId) return;\n\n const users = await fetchActiveUsers();\n if (!users.length) {\n return sendMessage(\n chatId,\n `⚠️ کلمه «${trigger}» دریافت شد، اما هیچ مخاطب فعالی با شماره در سیستم ثبت نیست.`,\n {\n reply_to_message_id: msg.message_id,\n message_thread_id: threadId || undefined,\n },\n );\n }\n\n const ttl = Number(settings.prompt_ttl_minutes || \"30\");\n const sent = await sendMessage(\n chatId,\n `📋 پیامک به کدام مخاطبان ارسال شود؟\\nمخاطب(ها) را تیک بزنید و «ارسال پیامک» را بزنید.\\n⏱ در صورت بی‌پاسخ ماندن، پس از ${ttl} دقیقه حذف می‌شود.`,\n {\n reply_to_message_id: msg.message_id,\n message_thread_id: threadId || undefined,\n reply_markup: buildRecipientKeyboard(targetRecordId, users, [], 0),\n },\n );\n\n const promptId = sent?.result?.message_id;\n if (!promptId) return;\n\n await query(\n `INSERT INTO pending_prompts (chat_id, message_id, thread_id, record_id, selected, page, expires_at)\n VALUES (?, ?, ?, ?, '[]', 0, datetime('now', '+' || ? || ' minutes'))\n ON CONFLICT(chat_id, message_id) DO UPDATE SET selected='[]', page=0;`,\n [chatId, promptId, threadId, targetRecordId, ttl],\n );\n}\n\n// ==========================================\n// ۹. آمار\n// ==========================================\nasync function collectStats() {\n const one = async (sql: string, args: any[] = []) =>\n Number((await query(sql, args)).rows[0]?.c || 0);\n\n return {\n totalMessages: await one(\"SELECT COUNT(*) c FROM messages_index\"),\n usersWithPhone: await one(\n \"SELECT COUNT(*) c FROM users WHERE phone IS NOT NULL AND phone != ''\",\n ),\n activeUsers: await one(\n \"SELECT COUNT(*) c FROM users WHERE phone != '' AND is_active = 1\",\n ),\n connectedGroups: await one(\"SELECT COUNT(DISTINCT chat_id) c FROM messages_index\"),\n smsToday: await one(\"SELECT COUNT(*) c FROM sms_logs WHERE date(created_at)=date('now')\"),\n smsOkToday: await one(\n \"SELECT COUNT(*) c FROM sms_logs WHERE status='ok' AND date(created_at)=date('now')\",\n ),\n smsFailedToday: await one(\n \"SELECT COUNT(*) c FROM sms_logs WHERE status='failed' AND date(created_at)=date('now')\",\n ),\n smsTotal: await one(\"SELECT COUNT(*) c FROM sms_logs\"),\n smsParts: await one(\"SELECT COALESCE(SUM(parts),0) c FROM sms_logs WHERE status='ok'\"),\n pendingPrompts: await one(\"SELECT COUNT(*) c FROM pending_prompts\"),\n };\n}\n\n// ==========================================\n// ۱۰. APIهای پنل مدیریت\n// ==========================================\nconst json = (data: any, status = 200) =>\n Response.json(data, {\n status,\n headers: { \"Cache-Control\": \"no-store\" },\n });\n\nfunction csv(rows: any[], filename: string) {\n if (!rows.length) return new Response(\"\\uFEFF\", { status: 200 });\n const cols = Object.keys(rows[0]);\n const esc = (v: any) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`;\n const body = \"\\uFEFF\" + cols.join(\",\") + \"\\n\" +\n rows.map((r) => cols.map((c) => esc(r[c])).join(\",\")).join(\"\\n\");\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/csv; charset=utf-8\",\n \"Content-Disposition\": `attachment; filename=\"${filename}\"`,\n },\n });\n}\n\nasync function handleApi(req: Request, url: URL): Promise {\n const path = url.pathname;\n\n if (path === \"/api/health\") {\n return json({ ok: true, time: new Date().toISOString(), db: dbReady });\n }\n\n const auth = await authenticate(req, url);\n if (!auth) {\n return json(\n { error: \"دسترسی غیرمجاز. این پنل فقط از طریق مینی‌اپ تلگرام و برای ادمین‌ها باز می‌شود.\" },\n 401,\n );\n }\n\n if (path === \"/api/me\") {\n return json({ tg_id: auth.tgId, is_super: auth.isSuper, via: auth.via });\n }\n\n if (path === \"/api/stats\") return json(await collectStats());\n\n if (path === \"/api/users\") {\n if (req.method === \"GET\") {\n const res = await query(\"SELECT * FROM users ORDER BY id DESC\");\n return json(res.rows);\n }\n if (req.method === \"POST\") {\n const b = await req.json();\n const phone = normalizeIranianPhone(b.phone || \"\");\n if (!b.tg_id || !phone) return json({ error: \"آیدی عددی و شماره الزامی است\" }, 400);\n if (!isValidIranianMobile(phone)) return json({ error: \"شماره معتبر نیست\" }, 400);\n await query(\n `INSERT INTO users (tg_id, first_name, username, phone, note, is_active, updated_at)\n VALUES (?, ?, ?, ?, ?, 1, CURRENT_TIMESTAMP)\n ON CONFLICT(tg_id) DO UPDATE SET\n phone = excluded.phone,\n first_name = COALESCE(NULLIF(excluded.first_name,''), users.first_name),\n username = COALESCE(NULLIF(excluded.username,''), users.username),\n note = COALESCE(NULLIF(excluded.note,''), users.note),\n updated_at = CURRENT_TIMESTAMP;`,\n [\n Number(b.tg_id),\n b.first_name || \"ثبت دستی\",\n b.username || \"\",\n phone,\n b.note || \"\",\n ],\n );\n await audit(auth.tgId, \"user_upsert\", `${b.tg_id} / ${phone}`);\n return json({ success: true });\n }\n if (req.method === \"PATCH\") {\n const b = await req.json();\n await query(\"UPDATE users SET is_active = ? WHERE tg_id = ?\", [\n b.is_active ? 1 : 0,\n Number(b.tg_id),\n ]);\n return json({ success: true });\n }\n if (req.method === \"DELETE\") {\n const tgId = Number(url.searchParams.get(\"tg_id\"));\n await query(\"DELETE FROM users WHERE tg_id = ?\", [tgId]);\n await audit(auth.tgId, \"user_delete\", String(tgId));\n return json({ success: true });\n }\n }\n\n if (path === \"/api/groups\") {\n if (req.method === \"GET\") {\n const res = await query(\n `SELECT c.chat_id, c.title, c.enabled,\n (SELECT COUNT(*) FROM messages_index m WHERE m.chat_id = c.chat_id) AS msg_count\n FROM allowed_chats c ORDER BY c.id DESC`,\n );\n return json(res.rows);\n }\n if (req.method === \"PATCH\") {\n const b = await req.json();\n await query(\"UPDATE allowed_chats SET enabled = ? WHERE chat_id = ?\", [\n b.enabled ? 1 : 0,\n Number(b.chat_id),\n ]);\n return json({ success: true });\n }\n }\n\n if (path === \"/api/tags\") {\n if (req.method === \"GET\") {\n return json((await query(\"SELECT * FROM predefined_tags ORDER BY id DESC\")).rows);\n }\n if (req.method === \"POST\") {\n const { name } = await req.json();\n const clean = String(name || \"\").replace(/^#/, \"\").trim();\n if (!clean) return json({ error: \"نام برچسب الزامی است\" }, 400);\n await query(\"INSERT OR IGNORE INTO predefined_tags (name) VALUES (?)\", [clean]);\n return json({ success: true, name: clean });\n }\n if (req.method === \"DELETE\") {\n await query(\"DELETE FROM predefined_tags WHERE id = ?\", [\n Number(url.searchParams.get(\"id\")),\n ]);\n return json({ success: true });\n }\n }\n\n if (path === \"/api/search\") {\n const q = url.searchParams.get(\"q\") || \"\";\n const chatId = url.searchParams.get(\"chat_id\");\n const tag = url.searchParams.get(\"tag\");\n const page = Math.max(0, Number(url.searchParams.get(\"page\") || \"0\"));\n const size = Math.min(100, Number(url.searchParams.get(\"size\") || \"25\"));\n\n let sql = \"SELECT * FROM messages_index WHERE 1=1\";\n const args: any[] = [];\n if (q) {\n sql += \" AND (text LIKE ? OR sender_name LIKE ?)\";\n args.push(`%${q}%`, `%${q}%`);\n }\n if (chatId) {\n sql += \" AND chat_id = ?\";\n args.push(Number(chatId));\n }\n if (tag) {\n sql += \" AND tag = ?\";\n args.push(tag);\n }\n sql += \" ORDER BY id DESC LIMIT ? OFFSET ?\";\n args.push(size, page * size);\n return json((await query(sql, args)).rows);\n }\n\n if (path === \"/api/logs\") {\n const status = url.searchParams.get(\"status\") || \"\";\n const page = Math.max(0, Number(url.searchParams.get(\"page\") || \"0\"));\n let sql = \"SELECT * FROM sms_logs WHERE 1=1\";\n const args: any[] = [];\n if (status) {\n sql += \" AND status = ?\";\n args.push(status);\n }\n sql += \" ORDER BY id DESC LIMIT 50 OFFSET ?\";\n args.push(page * 50);\n return json((await query(sql, args)).rows);\n }\n\n if (path === \"/api/logs/retry\" && req.method === \"POST\") {\n const id = Number(url.searchParams.get(\"id\"));\n const res = await query(\"SELECT * FROM sms_logs WHERE id = ? LIMIT 1\", [id]);\n const log = res.rows[0];\n if (!log) return json({ error: \"لاگ یافت نشد\" }, 404);\n const out = await dispatchSms({\n phone: log.phone,\n text: log.text,\n targetTgId: log.target_tg_id,\n targetName: log.target_name,\n actorId: auth.tgId,\n actorName: \"پنل\",\n recordId: log.record_id,\n chatId: log.chat_id,\n chatTitle: log.chat_title,\n source: \"retry\",\n });\n return json({ ok: out.ok, error: out.errorDescription, body: out.body });\n }\n\n if (path === \"/api/broadcast\" && req.method === \"POST\") {\n const b = await req.json();\n const text = String(b.text || \"\").trim();\n if (!text) return json({ error: \"متن پیامک الزامی است\" }, 400);\n\n let targets: any[] = [];\n if (b.mode === \"all\") {\n targets = await fetchActiveUsers();\n } else if (b.mode === \"chat\" && b.chat_id) {\n const res = await query(\n `SELECT DISTINCT u.tg_id, u.first_name, u.last_name, u.phone\n FROM topic_members tm JOIN users u ON u.tg_id = tm.tg_id\n WHERE tm.chat_id = ? AND u.is_active = 1 AND u.phone != ''`,\n [Number(b.chat_id)],\n );\n targets = res.rows;\n } else if (Array.isArray(b.ids) && b.ids.length) {\n const all = await fetchActiveUsers();\n const set = b.ids.map(Number);\n targets = all.filter((u: any) => set.includes(Number(u.tg_id)));\n }\n\n if (!targets.length) return json({ error: \"مخاطبی برای ارسال یافت نشد\" }, 400);\n if (targets.length > MAX_BROADCAST) {\n return json({ error: `حداکثر ${MAX_BROADCAST} مخاطب در هر ارسال` }, 400);\n }\n\n const settings = await getSettings();\n const finalText = settings.sms_signature\n ? `${text}\\n${settings.sms_signature}`\n : text;\n\n const results = await runWithConcurrency(targets, SMS_CONCURRENCY, (u: any) =>\n dispatchSms({\n phone: u.phone,\n text: finalText,\n targetTgId: Number(u.tg_id),\n targetName: displayName(u),\n actorId: auth.tgId,\n actorName: \"پنل مدیریت\",\n source: \"broadcast\",\n }).then((r) => ({ name: displayName(u), phone: u.phone, ...r })));\n\n await audit(auth.tgId, \"broadcast\", `count=${targets.length}`);\n return json({\n total: results.length,\n ok: results.filter((r: any) => r.ok).length,\n failed: results.filter((r: any) => !r.ok).map((r: any) => ({\n name: r.name,\n phone: r.phone,\n error: r.errorDescription,\n })),\n parts: smsPartCount(finalText),\n });\n }\n\n if (path === \"/api/settings\") {\n if (req.method === \"GET\") return json(await getSettings(true));\n if (req.method === \"POST\") {\n const b = await req.json();\n for (const [k, v] of Object.entries(b)) {\n if (k in DEFAULT_SETTINGS) await setSetting(k, String(v));\n }\n await audit(auth.tgId, \"settings_update\", JSON.stringify(b).slice(0, 300));\n return json({ success: true, settings: await getSettings(true) });\n }\n }\n\n if (path === \"/api/admins\") {\n if (req.method === \"GET\") {\n const res = await query(\"SELECT * FROM admins ORDER BY id DESC\");\n return json({ super_admin: ADMIN_ID, list: res.rows });\n }\n if (!auth.isSuper) return json({ error: \"فقط سوپر ادمین\" }, 403);\n if (req.method === \"POST\") {\n const b = await req.json();\n if (!b.tg_id) return json({ error: \"آیدی الزامی است\" }, 400);\n await query(\n \"INSERT OR IGNORE INTO admins (tg_id, title, added_by) VALUES (?, ?, ?)\",\n [Number(b.tg_id), b.title || \"\", auth.tgId],\n );\n return json({ success: true });\n }\n if (req.method === \"DELETE\") {\n const id = Number(url.searchParams.get(\"tg_id\"));\n if (id === ADMIN_ID) return json({ error: \"سوپر ادمین قابل حذف نیست\" }, 400);\n await query(\"DELETE FROM admins WHERE tg_id = ?\", [id]);\n return json({ success: true });\n }\n }\n\n if (path === \"/api/export/users\") {\n return csv((await query(\"SELECT * FROM users ORDER BY id DESC\")).rows, \"users.csv\");\n }\n if (path === \"/api/export/logs\") {\n return csv(\n (await query(\"SELECT * FROM sms_logs ORDER BY id DESC LIMIT 5000\")).rows,\n \"sms_logs.csv\",\n );\n }\n\n if (path === \"/api/cron\" && req.method === \"POST\") {\n await cleanupExpired();\n return json({ success: true });\n }\n\n if (path === \"/api/setup-webhook\" && req.method === \"POST\") {\n if (!auth.isSuper) return json({ error: \"فقط سوپر ادمین\" }, 403);\n const res = await callTelegram(\"setWebhook\", {\n url: `${url.origin}/`,\n secret_token: WEBHOOK_SECRET || undefined,\n allowed_updates: [\"message\", \"edited_message\", \"callback_query\"],\n drop_pending_updates: true,\n });\n return json(res);\n }\n\n if (path === \"/api/audit\") {\n return json((await query(\"SELECT * FROM audit_log ORDER BY id DESC LIMIT 100\")).rows);\n }\n\n return json({ error: \"Not Found\" }, 404);\n}\n\n// ==========================================\n// ۱۱. مینی‌اپ پنل مدیریت\n// ==========================================\nfunction getMiniAppHtml(): string {\n return `\n\n\n\n\nپنل مدیریت پیامک همایس\n\n\n\n\n\n\n

\n\n

سامانه اطلاع‌رسانی پیامکی همایس

پنل مدیریت سرورلس — در حال احراز هویت...

\n\n

دسترسی غیرمجاز

این پنل تنها برای ادمین‌ها و از طریق باز کردن مینی‌اپ داخل تلگرام قابل استفاده است.

\n\n

\n \n \n \n \n

\n \n \n \n

\n\n \n

آخرین ارسال‌ها

در حال بارگذاری...

\n\n \n

➕ ثبت / ویرایش دستی مخاطب

\n \n \n \n \n

\n \n

لیست مخاطبان

\n \n \n

\n\n \n

\n \n

\n \n \n

\n \n

\n\n \n

افزودن برچسب

\n \n \n

\n\n \n

📣 ارسال پیامک گروهی

\n \n

۰ کاراکتر — ۱ بخش پیامک

\n \n \n

\n \n

\n\n \n

\n \n \n

\n \n

\n\n \n

تنظیمات عمومی

\n کلمه فعال‌ساز\n \n سقف روزانه ارسال هر کاربر (۰ = بی‌نهایت)\n \n امضای انتهای پیامک\n \n مدت انقضای منوی انتخاب (دقیقه)\n \n حداکثر طول متن پیامک\n \n

\n فقط گروه‌های تاییدشده فعال باشند\n حذف پیام اصلی پس از ارسال موفق\n ایندکس تمام پیام‌های گروه برای جستجو\n

\n \n

\n\n

گروه‌های ثبت‌شده

\n\n

ادمین‌ها

\n \n \n

\n\n

ابزارها

\n \n \n

\n\n\n\n`;\n}\n\n// ==========================================\n// ۱۲. ورودی اصلی سرورلس\n// ==========================================\nexport default async function handler(req: Request): Promise {\n await initDatabase();\n const url = new URL(req.url);\n\n if (url.pathname.startsWith(\"/api/\")) {\n try {\n return await handleApi(req, url);\n } catch (e: any) {\n console.error(\"API error:\", e);\n return json({ error: e?.message || \"خطای داخلی سرور\" }, 500);\n }\n }\n\n if (url.pathname === \"/admin\" || url.pathname === \"/miniapp\") {\n return new Response(getMiniAppHtml(), {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"no-store\",\n },\n });\n }\n\n if (req.method === \"POST\") {\n if (\n WEBHOOK_SECRET &&\n req.headers.get(\"x-telegram-bot-api-secret-token\") !== WEBHOOK_SECRET\n ) {\n return new Response(\"Forbidden\", { status: 403 });\n }\n try {\n const update = await req.json();\n await handleTelegramUpdate(update);\n } catch (e) {\n console.error(\"Update error:\", e);\n }\n return new Response(\"OK\", { status: 200 });\n }\n\n return new Response(\n \"✅ ربات تلگرام و سامانه پیامک همایس فعال است.\\nپنل مدیریت: /admin (فقط ادمین‌ها)\",\n { headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } },\n );\n}","import{sqlite}from\"https://esm.town/v/std/sqlite\";const getEnv=(k:string,f=\"\")=>Deno.env.get(k)||(typeof process!==\"undefined\"?process.env?.[k]:undefined)||f,TELEGRAM_TOKEN=getEnv(\"TELEGRAM_TOKEN\"),ADMIN_ID=Number(getEnv(\"ADMIN_ID\",\"0\")),WEBHOOK_SECRET=getEnv(\"WEBHOOK_SECRET\"),ADMIN_SECRET=getEnv(\"ADMIN_SECRET\"),HOMAIS_CONFIG={username:getEnv(\"HOMAIS_USERNAME\",\"fr41160\"),password:getEnv(\"HOMAIS_PASSWORD\"),portalCode:getEnv(\"HOMAIS_PORTAL_CODE\",\"10003692\"),serverType:getEnv(\"HOMAIS_SERVER_TYPE\",\"100\")},TG_API=`https://api.telegram.org/bot${TELEGRAM_TOKEN}`,RECIPIENTS_PAGE_SIZE=8,MAX_BROADCAST=300,SMS_CONCURRENCY=5,DEFAULT_SETTINGS:Record={trigger_word:\"پپپ\",daily_limit:\"50\",sms_signature:\"\",prompt_ttl_minutes:\"30\",require_whitelist:\"0\",delete_trigger_message:\"0\",index_all_messages:\"1\",max_sms_length:\"400\"};async function query(sql:string,args:any[]=[]){const res=await sqlite.execute({sql,args}),rows=(res.rows||[]).map((row:any)=>{if(!Array.isArray(row))return row;const obj:Record={};(res.columns||[]).forEach((col:string,idx:number)=>{obj[col]=row[idx]});return obj});return{rows,lastInsertRowid:res.lastInsertRowid,rowsAffected:res.rowsAffected}}let dbReady=false;async function initDatabase(){if(dbReady)return;await query(`CREATE TABLE IF NOT EXISTS users(id INTEGER PRIMARY KEY AUTOINCREMENT,tg_id INTEGER UNIQUE,first_name TEXT,last_name TEXT,username TEXT,phone TEXT,is_active INTEGER DEFAULT 1,note TEXT,sms_received INTEGER DEFAULT 0,created_at DATETIME DEFAULT CURRENT_TIMESTAMP,updated_at DATETIME DEFAULT CURRENT_TIMESTAMP);`);await query(`CREATE TABLE IF NOT EXISTS admins(id INTEGER PRIMARY KEY AUTOINCREMENT,tg_id INTEGER UNIQUE,title TEXT,added_by INTEGER,created_at DATETIME DEFAULT CURRENT_TIMESTAMP);`);await query(`CREATE TABLE IF NOT EXISTS allowed_chats(id INTEGER PRIMARY KEY AUTOINCREMENT,chat_id INTEGER UNIQUE,title TEXT,enabled INTEGER DEFAULT 1,created_at DATETIME DEFAULT CURRENT_TIMESTAMP);`);await query(`CREATE TABLE IF NOT EXISTS topic_members(id INTEGER PRIMARY KEY AUTOINCREMENT,chat_id INTEGER,thread_id INTEGER DEFAULT 0,tg_id INTEGER,last_active DATETIME DEFAULT CURRENT_TIMESTAMP,UNIQUE(chat_id,thread_id,tg_id));`);await query(`CREATE TABLE IF NOT EXISTS messages_index(id INTEGER PRIMARY KEY AUTOINCREMENT,chat_id INTEGER,chat_title TEXT,message_thread_id INTEGER DEFAULT 0,message_id INTEGER,sender_id INTEGER,sender_name TEXT,text TEXT,has_media INTEGER DEFAULT 0,tag TEXT,sms_sent INTEGER DEFAULT 0,created_at DATETIME DEFAULT CURRENT_TIMESTAMP,UNIQUE(chat_id,message_id));`);await query(`CREATE TABLE IF NOT EXISTS predefined_tags(id INTEGER PRIMARY KEY AUTOINCREMENT,name TEXT UNIQUE);`);await query(`CREATE TABLE IF NOT EXISTS pending_prompts(id INTEGER PRIMARY KEY AUTOINCREMENT,chat_id INTEGER,message_id INTEGER,thread_id INTEGER DEFAULT 0,record_id INTEGER,selected TEXT DEFAULT '[]',page INTEGER DEFAULT 0,expires_at DATETIME,UNIQUE(chat_id,message_id));`);await query(`CREATE TABLE IF NOT EXISTS sms_logs(id INTEGER PRIMARY KEY AUTOINCREMENT,record_id INTEGER,chat_id INTEGER,chat_title TEXT,actor_id INTEGER,actor_name TEXT,target_tg_id INTEGER,target_name TEXT,phone TEXT,text TEXT,parts INTEGER DEFAULT 1,status TEXT,provider_response TEXT,error_text TEXT,source TEXT DEFAULT 'group',created_at DATETIME DEFAULT CURRENT_TIMESTAMP);`);await query(`CREATE TABLE IF NOT EXISTS settings(key TEXT PRIMARY KEY,value TEXT);`);await query(`CREATE TABLE IF NOT EXISTS processed_updates(update_id INTEGER PRIMARY KEY,created_at DATETIME DEFAULT CURRENT_TIMESTAMP);`);await query(`CREATE TABLE IF NOT EXISTS audit_log(id INTEGER PRIMARY KEY AUTOINCREMENT,actor_id INTEGER,action TEXT,details TEXT,created_at DATETIME DEFAULT CURRENT_TIMESTAMP);`);await query(`CREATE INDEX IF NOT EXISTS idx_msg_chat ON messages_index(chat_id,message_id);`);await query(`CREATE INDEX IF NOT EXISTS idx_logs_created ON sms_logs(created_at DESC);`);await query(`CREATE INDEX IF NOT EXISTS idx_logs_actor ON sms_logs(actor_id,created_at);`);for(const[k,v]of Object.entries(DEFAULT_SETTINGS)){await query(\"INSERT OR IGNORE INTO settings (key, value) VALUES (?, ?)\",[k,v])}dbReady=true}let settingsCache:{data:Record;at:number}|null=null;async function getSettings(force=false):Promise>{if(!force&&settingsCache&&Date.now()-settingsCache.at<20000)return settingsCache.data;const res=await query(\"SELECT key, value FROM settings\"),data={...DEFAULT_SETTINGS};res.rows.forEach((r:any)=>(data[r.key]=r.value??\"\"));settingsCache={data,at:Date.now()};return data}async function setSetting(key:string,value:string){await query(`INSERT INTO settings (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value;`,[key,value]);settingsCache=null}async function audit(actorId:number,action:string,details=\"\"){await query(\"INSERT INTO audit_log (actor_id, action, details) VALUES (?, ?, ?)\",[actorId,action,details]).catch(()=>{})}function normalizeIranianPhone(rawPhone:string):string{let cleaned=String(rawPhone||\"\").replace(/[^0-9]/g,\"\");if(cleaned.startsWith(\"0098\"))cleaned=\"0\"+cleaned.substring(4);else if(cleaned.startsWith(\"98\")&&cleaned.length===12)cleaned=\"0\"+cleaned.substring(2);else if(cleaned.startsWith(\"9\")&&cleaned.length===10)cleaned=\"0\"+cleaned;return cleaned}function isValidIranianMobile(phone:string):boolean{return /^09\\d{9}$/.test(phone)}function smsPartCount(text:string):number{const isPersian=/[\\u0600-\\u06FF]/.test(text),per=isPersian?70:160;return Math.max(1,Math.ceil(text.length/per))}function explainHomaisError(raw:string):string{const trimmed=(raw||\"\").trim(),code=parseInt(trimmed,10);if(!isNaN(code)&&String(code)===trimmed.replace(/^\\+/,\"\")){switch(code){case -1:case 101:return\"نام کاربری یا رمز عبور پنل همایس نامعتبر است.\";case -2:case 102:return\"شارژ (اعتبار ریالی) پنل همایس به اتمام رسیده است.\";case -3:case 103:return\"پورتال‌کد یا نوع سرور ارسال‌کننده نامعتبر است.\";case -4:case 104:return\"شماره گیرنده نامعتبر است یا در بلک‌لیست تبلیغاتی مخابرات قرار دارد.\";case -5:case 105:return\"متن پیامک خالی یا شامل عبارات غیرمجاز است.\";case -6:case 106:return\"محدودیت تعداد ارسال یا مسدودی موقت پنل.\";default:return`خطای سرور همایس با کد: ${code}`}}if(/timeout/i.test(trimmed))return\"پاسخ سرور همایس در زمان مجاز دریافت نشد.\";return trimmed||\"خطای نامشخص در ارتباط با سامانه پیامک همایس\"}async function sendHomaisSms(mobile:string,text:string){if(!HOMAIS_CONFIG.username||!HOMAIS_CONFIG.password)return{ok:false,status:500,body:\"\",errorDescription:\"تنظیمات پنل همایس (نام کاربری/رمز) در سرور کامل نیست.\"};const targetMobile=normalizeIranianPhone(mobile);if(!isValidIranianMobile(targetMobile))return{ok:false,status:400,body:targetMobile,errorDescription:`فرمت شماره «${mobile}» معتبر نیست (باید ۱۱ رقم و با 09 شروع شود).`};const params=new URLSearchParams({username:HOMAIS_CONFIG.username,password:HOMAIS_CONFIG.password,PortalCode:HOMAIS_CONFIG.portalCode,mobile:targetMobile,message:text,ServerType:HOMAIS_CONFIG.serverType}),url=`http://api.homais.com/services/messaging/sms/api/sendMessage/direct/?${params.toString()}`,controller=new AbortController(),timer=setTimeout(()=>controller.abort(),20000);try{const res=await fetch(url,{method:\"GET\",signal:controller.signal}),rawText=(await res.text()).trim(),isError=!res.ok||rawText===\"\"||rawText.toLowerCase().includes(\"error\")||rawText.startsWith(\"-\");return{ok:!isError,status:res.status,body:rawText,errorDescription:isError?explainHomaisError(rawText):\"\"}}catch(err:any){const msg=err?.name===\"AbortError\"?\"timeout\":err?.message;return{ok:false,status:0,body:String(msg),errorDescription:`عدم برقراری ارتباط با وب‌سرویس همایس: ${explainHomaisError(String(msg))}`}}finally{clearTimeout(timer)}}async function dispatchSms(opts:{phone:string;text:string;targetTgId?:number|null;targetName?:string;actorId:number;actorName?:string;recordId?:number|null;chatId?:number|null;chatTitle?:string;source?:string}){const res=await sendHomaisSms(opts.phone,opts.text);await query(`INSERT INTO sms_logs (record_id, chat_id, chat_title, actor_id, actor_name, target_tg_id, target_name, phone, text, parts, status, provider_response, error_text, source) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,[opts.recordId??null,opts.chatId??null,opts.chatTitle??\"\",opts.actorId,opts.actorName??\"\",opts.targetTgId??null,opts.targetName??\"\",normalizeIranianPhone(opts.phone),opts.text,smsPartCount(opts.text),res.ok?\"ok\":\"failed\",res.body,res.errorDescription,opts.source??\"group\"]);if(res.ok&&opts.targetTgId){await query(\"UPDATE users SET sms_received = COALESCE(sms_received,0) + 1 WHERE tg_id = ?\",[opts.targetTgId])}return res}async function runWithConcurrency(items:T[],limit:number,worker:(item:T)=>Promise){const out:any[]=[];for(let i=0;icallTelegram(\"sendMessage\",{chat_id:chatId,text,...extra}),answerCallbackQuery=(id:string,text=\"\",showAlert=false)=>callTelegram(\"answerCallbackQuery\",{callback_query_id:id,text:text.slice(0,195),show_alert:showAlert}),editMessageText=(chatId:number,messageId:number,text:string,extra:any={})=>callTelegram(\"editMessageText\",{chat_id:chatId,message_id:messageId,text,...extra}),editMessageReplyMarkup=(chatId:number,messageId:number,replyMarkup:any)=>callTelegram(\"editMessageReplyMarkup\",{chat_id:chatId,message_id:messageId,reply_markup:replyMarkup}),deleteMessage=(chatId:number,messageId:number)=>callTelegram(\"deleteMessage\",{chat_id:chatId,message_id:messageId});async function getChatMember(chatId:number,userId:number){const res=await callTelegram(\"getChatMember\",{chat_id:chatId,user_id:userId});return res?.result}function escapeHtml(str:string):string{return String(str??\"\").replace(/&/g,\"&\").replace(//g,\">\").replace(/\"/g,\""\")}const encoder=new TextEncoder();async function hmacSha256(keyData:ArrayBuffer|Uint8Array,msg:string){const key=await crypto.subtle.importKey(\"raw\",keyData as any,{name:\"HMAC\",hash:\"SHA-256\"},false,[\"sign\"]);return crypto.subtle.sign(\"HMAC\",key,encoder.encode(msg))}const toHex=(buf:ArrayBuffer)=>[...new Uint8Array(buf)].map((b)=>b.toString(16).padStart(2,\"0\")).join(\"\");async function validateInitData(initData:string){if(!initData||!TELEGRAM_TOKEN)return null;try{const params=new URLSearchParams(initData),hash=params.get(\"hash\");if(!hash)return null;params.delete(\"hash\");const dataCheckString=[...params.entries()].map(([k,v])=>`${k}=${v}`).sort().join(\"\\n\"),secret=await hmacSha256(encoder.encode(\"WebAppData\"),TELEGRAM_TOKEN),signature=await hmacSha256(secret,dataCheckString);if(toHex(signature)!==hash.toLowerCase())return null;const authDate=Number(params.get(\"auth_date\")||0);if(!authDate||Date.now()/1000-authDate>86400)return null;return JSON.parse(params.get(\"user\")||\"null\")}catch{return null}}async function isAdminUser(tgId:number):Promise{if(!tgId)return false;if(ADMIN_ID&&tgId===ADMIN_ID)return true;const res=await query(\"SELECT 1 AS ok FROM admins WHERE tg_id = ? LIMIT 1\",[tgId]);return Boolean(res.rows[0])}type Auth={tgId:number;isSuper:boolean;via:string};async function authenticate(req:Request,url:URL):Promise{const initData=req.headers.get(\"x-telegram-init-data\")||url.searchParams.get(\"_auth\")||\"\",user=await validateInitData(initData);if(user?.id&&await isAdminUser(Number(user.id))){return{tgId:Number(user.id),isSuper:Number(user.id)===ADMIN_ID,via:\"miniapp\"}}const secret=req.headers.get(\"x-admin-secret\")||url.searchParams.get(\"secret\")||\"\";if(ADMIN_SECRET&&secret&&secret===ADMIN_SECRET){return{tgId:ADMIN_ID,isSuper:true,via:\"secret\"}}return null}async function cleanupExpired(){try{const res=await query(\"SELECT id, chat_id, message_id FROM pending_prompts WHERE expires_at <= CURRENT_TIMESTAMP LIMIT 25\");for(const row of res.rows){await deleteMessage(row.chat_id,row.message_id).catch(()=>{});await query(\"DELETE FROM pending_prompts WHERE id = ?\",[row.id])}await query(\"DELETE FROM processed_updates WHERE created_at <= datetime('now','-1 day')\")}catch(e){console.error(\"cleanup error:\",e)}}async function isDuplicateUpdate(updateId?:number):Promise{if(!updateId)return false;const res=await query(\"INSERT OR IGNORE INTO processed_updates (update_id) VALUES (?)\",[updateId]);return Number(res.rowsAffected||0)===0}async function fetchActiveUsers(){const res=await query(`SELECT tg_id, first_name, last_name, phone FROM users WHERE phone IS NOT NULL AND phone != '' AND is_active = 1 ORDER BY first_name COLLATE NOCASE ASC`);return res.rows}const displayName=(u:any)=>`${u.first_name||\"\"} ${u.last_name||\"\"}`.trim()||\"کاربر\";function buildRecipientKeyboard(recordId:number,users:any[],selected:number[],page:number){const totalPages=Math.max(1,Math.ceil(users.length/RECIPIENTS_PAGE_SIZE)),safePage=Math.min(Math.max(0,page),totalPages-1),slice=users.slice(safePage*RECIPIENTS_PAGE_SIZE,safePage*RECIPIENTS_PAGE_SIZE+RECIPIENTS_PAGE_SIZE),rows:any[]=slice.map((u)=>{const on=selected.includes(Number(u.tg_id));return[{text:`${on?\"✅\":\"⬜️\"} ${displayName(u)} — ${u.phone}`,callback_data:`tgl:${recordId}:${u.tg_id}`}]});if(totalPages>1){rows.push([{text:\"⬅️ قبلی\",callback_data:`pg:${recordId}:${(safePage-1+totalPages)%totalPages}`},{text:`${safePage+1}/${totalPages}`,callback_data:`noop:${recordId}`},{text:\"بعدی ➡️\",callback_data:`pg:${recordId}:${(safePage+1)%totalPages}`}])}rows.push([{text:\"☑️ انتخاب همه\",callback_data:`all:${recordId}`},{text:\"🧹 پاک‌کردن انتخاب\",callback_data:`none:${recordId}`}]);rows.push([{text:`📩 ارسال پیامک (${selected.length})`,callback_data:`snd:${recordId}`}]);rows.push([{text:\"🏷 برچسب\",callback_data:`tagm:${recordId}`},{text:\"❌ انصراف\",callback_data:`dismiss:${recordId}`}]);return{inline_keyboard:rows}}async function getPrompt(chatId:number,messageId:number){const res=await query(\"SELECT * FROM pending_prompts WHERE chat_id = ? AND message_id = ? LIMIT 1\",[chatId,messageId]);return res.rows[0]}async function canActOnRecord(fromId:number,record:any):Promise{if(!record)return false;if(fromId===Number(record.sender_id))return true;if(await isAdminUser(fromId))return true;const member=await getChatMember(record.chat_id,fromId);return[\"creator\",\"administrator\"].includes(member?.status)}function buildSmsText(record:any,cleanedText:string,signature:string,maxLen:number){const lines:string[]=[];lines.push(`پیام از ${record.sender_name||\"کاربر\"}`);if(record.chat_title)lines.push(`گروه: ${record.chat_title}`);lines.push(cleanedText);if(signature)lines.push(signature);let out=lines.join(\"\\n\");if(out.length>maxLen)out=out.slice(0,maxLen-3)+\"...\";return out}async function handleTelegramUpdate(update:any){if(await isDuplicateUpdate(update?.update_id))return;await cleanupExpired();if(update.callback_query)return handleCallback(update.callback_query);const msg=update.message||update.edited_message;if(!msg)return;if(msg.chat.type===\"private\")return handlePrivate(msg);if([\"group\",\"supergroup\"].includes(msg.chat.type))return handleGroup(msg)}async function handleCallback(cb:any){const{id,data,from,message}=cb;if(!data||!message)return;const settings=await getSettings(),[action,rawRecordId,extraParam]=data.split(\":\"),recordId=Number(rawRecordId);if(action===\"noop\")return answerCallbackQuery(id);const recRes=await query(\"SELECT * FROM messages_index WHERE id = ? LIMIT 1\",[recordId]),record=recRes.rows[0];if(action===\"dismiss\"){if(record&&!(await canActOnRecord(from.id,record))){return answerCallbackQuery(id,\"⛔️ اجازه این کار را ندارید.\",true)}await query(\"DELETE FROM pending_prompts WHERE chat_id = ? AND message_id = ?\",[message.chat.id,message.message_id]);await deleteMessage(message.chat.id,message.message_id);return answerCallbackQuery(id,\"لغو شد.\")}if(!record)return answerCallbackQuery(id,\"پیام مرجع یافت نشد.\",true);if(!(await canActOnRecord(from.id,record))){return answerCallbackQuery(id,\"⛔️ فقط فرستنده پیام، مدیر گروه یا ادمین بات مجاز است.\",true)}const prompt=await getPrompt(message.chat.id,message.message_id);if(!prompt){return answerCallbackQuery(id,\"این درخواست منقضی شده است.\",true)}let selected:number[]=[];try{selected=JSON.parse(prompt.selected||\"[]\")}catch{}const users=await fetchActiveUsers();if(action===\"tagm\"){const tagsRes=await query(\"SELECT name FROM predefined_tags ORDER BY id DESC LIMIT 12\");if(!tagsRes.rows.length){return answerCallbackQuery(id,\"هنوز برچسبی در پنل ثبت نشده است.\",true)}const kb=tagsRes.rows.map((t:any)=>[{text:`#${t.name}`,callback_data:`stag:${recordId}:${t.name}`}]);kb.push([{text:\"🔙 بازگشت\",callback_data:`back:${recordId}`}]);await editMessageReplyMarkup(message.chat.id,message.message_id,{inline_keyboard:kb});return answerCallbackQuery(id)}if(action===\"stag\"){await query(\"UPDATE messages_index SET tag = ? WHERE id = ?\",[extraParam,recordId]);await editMessageReplyMarkup(message.chat.id,message.message_id,buildRecipientKeyboard(recordId,users,selected,Number(prompt.page||0)));return answerCallbackQuery(id,`برچسب #${extraParam} ثبت شد.`)}if(action===\"back\"){await editMessageReplyMarkup(message.chat.id,message.message_id,buildRecipientKeyboard(recordId,users,selected,Number(prompt.page||0)));return answerCallbackQuery(id)}if(action===\"tgl\"||action===\"all\"||action===\"none\"||action===\"pg\"){let page=Number(prompt.page||0);if(action===\"tgl\"){const tgId=Number(extraParam);selected=selected.includes(tgId)?selected.filter((x)=>x!==tgId):[...selected,tgId]}else if(action===\"all\"){selected=users.map((u:any)=>Number(u.tg_id))}else if(action===\"none\"){selected=[]}else if(action===\"pg\"){page=Number(extraParam)||0}await query(\"UPDATE pending_prompts SET selected = ?, page = ? WHERE id = ?\",[JSON.stringify(selected),page,prompt.id]);await editMessageReplyMarkup(message.chat.id,message.message_id,buildRecipientKeyboard(recordId,users,selected,page));return answerCallbackQuery(id)}if(action===\"snd\"){if(!selected.length){return answerCallbackQuery(id,\"⚠️ هیچ مخاطبی انتخاب نشده است.\",true)}const limit=Number(settings.daily_limit||\"50\");if(limit>0){const usedRes=await query(`SELECT COUNT(*) AS c FROM sms_logs WHERE actor_id = ? AND status = 'ok' AND date(created_at) = date('now')`,[from.id]),used=Number(usedRes.rows[0]?.c||0);if(used+selected.length>limit){return answerCallbackQuery(id,`⛔️ سقف روزانه (${limit} پیامک) پر شده است. مصرف امروز: ${used}`,true)}}const targets=users.filter((u:any)=>selected.includes(Number(u.tg_id))),trigger=settings.trigger_word||\"پپپ\";let cleaned=String(record.text||\"\").split(trigger).join(\"\").replace(/\\s{2,}/g,\" \").trim();if(!cleaned)cleaned=\"(بدون متن)\";const smsText=buildSmsText(record,cleaned,settings.sms_signature||\"\",Number(settings.max_sms_length||\"400\"));await answerCallbackQuery(id,`⏳ در حال ارسال به ${targets.length} مخاطب...`);await editMessageText(message.chat.id,message.message_id,`⏳ در حال ارسال پیامک به ${targets.length} مخاطب...`);const actorName=`${from.first_name||\"\"} ${from.last_name||\"\"}`.trim(),results=await runWithConcurrency(targets,SMS_CONCURRENCY,(u:any)=>dispatchSms({phone:u.phone,text:smsText,targetTgId:Number(u.tg_id),targetName:displayName(u),actorId:from.id,actorName,recordId,chatId:record.chat_id,chatTitle:record.chat_title,source:\"group\"}).then((r)=>({u,r}))),okList=results.filter((x:any)=>x.r.ok),failList=results.filter((x:any)=>!x.r.ok);await query(\"UPDATE messages_index SET sms_sent = ? WHERE id = ?\",[okList.length,recordId]);await query(\"DELETE FROM pending_prompts WHERE id = ?\",[prompt.id]);let report=`📊 گزارش ارسال پیامک\\n`+`👤 اقدام‌کننده: ${escapeHtml(actorName||String(from.id))}\\n`+`✅ موفق: ${okList.length} | ❌ ناموفق: ${failList.length}\\n`+`🔢 تعداد بخش پیامک: ${smsPartCount(smsText)}\\n\\n`;if(okList.length){report+=\"گیرندگان موفق:\\n\"+okList.slice(0,15).map((x:any)=>`• ${escapeHtml(displayName(x.u))} (${x.u.phone})`).join(\"\\n\")+\"\\n\\n\"}if(failList.length){report+=\"خطاها:\\n\"+failList.slice(0,10).map((x:any)=>`• ${escapeHtml(displayName(x.u))} (${x.u.phone}) → ${escapeHtml(x.r.errorDescription||x.r.body)}`).join(\"\\n\")+\"\\n\\n\"}report+=`متن ارسال‌شده:\\n

${escapeHtml(smsText)}

`;await editMessageText(message.chat.id,message.message_id,report,{parse_mode:\"HTML\"});if(settings.delete_trigger_message===\"1\"&&okList.length){await deleteMessage(record.chat_id,record.message_id).catch(()=>{})}await audit(from.id,\"sms_group_send\",`record=${recordId} ok=${okList.length}`)}}async function handlePrivate(msg:any){const chatId=msg.chat.id,text=(msg.text||\"\").trim(),fromId=msg.from.id,admin=await isAdminUser(fromId);if(msg.contact){if(msg.contact.user_id&&msg.contact.user_id!==fromId){return sendMessage(chatId,\"❌ لطفاً شماره متعلق به اکانت خودتان را ارسال کنید.\")}const phone=normalizeIranianPhone(msg.contact.phone_number);if(!isValidIranianMobile(phone)){return sendMessage(chatId,\"❌ شماره دریافتی معتبر نیست.\")}await query(`INSERT INTO users (tg_id, first_name, last_name, username, phone, is_active, updated_at) VALUES (?, ?, ?, ?, ?, 1, CURRENT_TIMESTAMP) ON CONFLICT(tg_id) DO UPDATE SET phone = excluded.phone, first_name = excluded.first_name, last_name = excluded.last_name, username = excluded.username, is_active = 1, updated_at = CURRENT_TIMESTAMP;`,[fromId,msg.from.first_name||\"\",msg.from.last_name||\"\",msg.from.username||\"\",phone]);return sendMessage(chatId,`✅ شماره ${phone} با موفقیت ثبت شد.\\nبرای قطع دریافت پیامک هر زمان /stop را بفرستید.`,{reply_markup:{remove_keyboard:true}})}if(text===\"/start\"||text===\"/help\"){const userRes=await query(\"SELECT phone, is_active FROM users WHERE tg_id = ? LIMIT 1\",[fromId]),u=userRes.rows[0],help=\"\\n\\nدستورها:\\n/start ثبت یا وضعیت شماره\\n/stop توقف دریافت پیامک\\n/resume از سرگیری دریافت\\n/whoami نمایش آیدی عددی\\n\"+(admin?\"\\nدستورهای مدیریتی:\\n/panel لینک پنل\\n/stats آمار\\n/testsms شماره متن\\n/trigger کلمه\\n/limit عدد\\n/addadmin آیدی\\n/deladmin آیدی\\n(در گروه) /allow و /disallow\":\"\");if(u?.phone){return sendMessage(chatId,`سلام ${msg.from.first_name}!\\nشماره شما (${u.phone}) ثبت است و وضعیت دریافت: ${u.is_active?\"فعال ✅\":\"غیرفعال ⛔️\"}${help}`)}return sendMessage(chatId,`سلام ${msg.from.first_name}!\\nبرای دریافت اطلاع‌رسانی پیامکی، دکمه زیر را لمس کنید.${help}`,{reply_markup:{keyboard:[[{text:\"📱 اشتراک‌گذاری شماره تماس\",request_contact:true}]],resize_keyboard:true,one_time_keyboard:true}})}if(text===\"/whoami\"){return sendMessage(chatId,`آیدی عددی شما: ${fromId}`,{parse_mode:\"HTML\"})}if(text===\"/stop\"){await query(\"UPDATE users SET is_active = 0 WHERE tg_id = ?\",[fromId]);return sendMessage(chatId,\"⛔️ دریافت پیامک برای شما غیرفعال شد. (/resume برای فعال‌سازی)\")}if(text===\"/resume\"){await query(\"UPDATE users SET is_active = 1 WHERE tg_id = ?\",[fromId]);return sendMessage(chatId,\"✅ دریافت پیامک دوباره فعال شد.\")}if(!admin)return;if(text===\"/panel\"){return sendMessage(chatId,\"پنل مدیریت را از منوی Mini App بات باز کنید (مسیر /admin روی همین دامنه).\\nاگر منو ست نشده، در BotFather مسیر /admin را به‌عنوان Web App ثبت کنید.\")}if(text===\"/stats\"){const s=await collectStats();return sendMessage(chatId,`📊 آمار سامانه\\nپیام‌های ایندکس‌شده: ${s.totalMessages}\\nمخاطبان دارای شماره: ${s.usersWithPhone} (فعال: ${s.activeUsers})\\nگروه‌های متصل: ${s.connectedGroups}\\nپیامک امروز: ${s.smsToday} | موفق: ${s.smsOkToday} | ناموفق: ${s.smsFailedToday}\\nمجموع پیامک‌ها: ${s.smsTotal}`)}if(text.startsWith(\"/trigger\")){const word=text.replace(\"/trigger\",\"\").trim();if(!word)return sendMessage(chatId,\"فرمت: /trigger پپپ\");await setSetting(\"trigger_word\",word);return sendMessage(chatId,`✅ کلمه فعال‌ساز به «${word}» تغییر کرد.`)}if(text.startsWith(\"/limit\")){const n=Number(text.replace(\"/limit\",\"\").trim());if(!Number.isFinite(n)||n<0)return sendMessage(chatId,\"فرمت: /limit 50\");await setSetting(\"daily_limit\",String(n));return sendMessage(chatId,`✅ سقف روزانه ارسال ${n} پیامک تنظیم شد.`)}if(text.startsWith(\"/addadmin\")){const id=Number(text.replace(\"/addadmin\",\"\").trim());if(!id)return sendMessage(chatId,\"فرمت: /addadmin 123456789\");await query(\"INSERT OR IGNORE INTO admins (tg_id, added_by) VALUES (?, ?)\",[id,fromId]);await audit(fromId,\"add_admin\",String(id));return sendMessage(chatId,`✅ کاربر ${id} به ادمین‌ها اضافه شد.`)}if(text.startsWith(\"/deladmin\")){const id=Number(text.replace(\"/deladmin\",\"\").trim());if(!id)return sendMessage(chatId,\"فرمت: /deladmin 123456789\");if(id===ADMIN_ID)return sendMessage(chatId,\"⛔️ سوپر ادمین قابل حذف نیست.\");await query(\"DELETE FROM admins WHERE tg_id = ?\",[id]);return sendMessage(chatId,`✅ کاربر ${id} از ادمین‌ها حذف شد.`)}if(text.startsWith(\"/testsms\")){const parts=text.replace(\"/testsms\",\"\").trim().split(/\\s+/),mobile=parts.shift()||\"\",body=parts.join(\" \");if(!mobile||!body){return sendMessage(chatId,\"فرمت:\\n/testsms 09121111111 متن آزمایشی\",{parse_mode:\"HTML\"})}await sendMessage(chatId,\"⏳ در حال ارسال...\");const res=await dispatchSms({phone:mobile,text:body,actorId:fromId,actorName:msg.from.first_name||\"\",source:\"test\"});return sendMessage(chatId,`📡 وضعیت: ${res.ok?\"✅ موفق\":\"❌ خطا\"}\\n`+(res.ok?\"\":`علت: ${escapeHtml(res.errorDescription)}\\n`)+`پاسخ سرور: ${escapeHtml(res.body||\"-\")}`,{parse_mode:\"HTML\"})}}async function handleGroup(msg:any){if(msg.new_chat_members||msg.left_chat_member||msg.pinned_message)return;const settings=await getSettings(),chatId=msg.chat.id,groupTitle=msg.chat.title||\"گروه\",threadId=msg.message_thread_id||0,userId=msg.from?.id;if(!userId)return;const rawText=(msg.text||msg.caption||\"\").trim();if(/^\\/(allow|disallow)/.test(rawText)){if(!(await isAdminUser(userId)))return;if(rawText.startsWith(\"/allow\")){await query(`INSERT INTO allowed_chats (chat_id, title, enabled) VALUES (?, ?, 1) ON CONFLICT(chat_id) DO UPDATE SET enabled = 1, title = excluded.title;`,[chatId,groupTitle]);return sendMessage(chatId,\"✅ این گروه در لیست مجاز فعال شد.\",{message_thread_id:threadId||undefined})}await query(\"UPDATE allowed_chats SET enabled = 0 WHERE chat_id = ?\",[chatId]);return sendMessage(chatId,\"⛔️ این گروه از لیست مجاز خارج شد.\",{message_thread_id:threadId||undefined})}await query(`INSERT OR IGNORE INTO allowed_chats (chat_id, title, enabled) VALUES (?, ?, ?)`,[chatId,groupTitle,settings.require_whitelist===\"1\"?0:1]);if(settings.require_whitelist===\"1\"){const okRes=await query(\"SELECT enabled FROM allowed_chats WHERE chat_id = ? LIMIT 1\",[chatId]);if(!Number(okRes.rows[0]?.enabled))return}const hasMedia=Boolean(msg.photo||msg.video||msg.document||msg.voice);let trimmed=rawText;if(hasMedia&&!trimmed)trimmed=`یک رسانه در گروه ${groupTitle} بارگذاری شد.`;if(!trimmed)return;await query(`INSERT INTO topic_members (chat_id, thread_id, tg_id) VALUES (?, ?, ?) ON CONFLICT(chat_id, thread_id, tg_id) DO UPDATE SET last_active = CURRENT_TIMESTAMP;`,[chatId,threadId,userId]);const senderName=`${msg.from.first_name||\"\"} ${msg.from.last_name||\"\"}`.trim();let recordId=0;if(settings.index_all_messages===\"1\"||trimmed.includes(settings.trigger_word)){const ins=await query(`INSERT INTO messages_index (chat_id, chat_title, message_thread_id, message_id, sender_id, sender_name, text, has_media) VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(chat_id, message_id) DO UPDATE SET text = excluded.text, has_media = excluded.has_media, chat_title = excluded.chat_title RETURNING id;`,[chatId,groupTitle,threadId,msg.message_id,userId,senderName,trimmed,hasMedia?1:0]);recordId=Number(ins.rows[0]?.id||ins.lastInsertRowid||0)}const trigger=settings.trigger_word||\"پپپ\";let isTriggered=trimmed.includes(trigger),targetRecordId=recordId;if(!isTriggered&&msg.reply_to_message){const repText=(msg.reply_to_message.text||msg.reply_to_message.caption||\"\");if(trimmed===trigger||repText.includes(trigger)){isTriggered=true;const repRes=await query(\"SELECT id FROM messages_index WHERE chat_id = ? AND message_id = ? LIMIT 1\",[chatId,msg.reply_to_message.message_id]);if(repRes.rows[0]?.id)targetRecordId=Number(repRes.rows[0].id)}}if(!isTriggered||!targetRecordId)return;const users=await fetchActiveUsers();if(!users.length){return sendMessage(chatId,`⚠️ کلمه «${trigger}» دریافت شد، اما هیچ مخاطب فعالی با شماره در سیستم ثبت نیست.`,{reply_to_message_id:msg.message_id,message_thread_id:threadId||undefined})}const ttl=Number(settings.prompt_ttl_minutes||\"30\"),sent=await sendMessage(chatId,`📋 پیامک به کدام مخاطبان ارسال شود؟\\nمخاطب(ها) را تیک بزنید و «ارسال پیامک» را بزنید.\\n⏱ در صورت بی‌پاسخ ماندن، پس از ${ttl} دقیقه حذف می‌شود.`,{reply_to_message_id:msg.message_id,message_thread_id:threadId||undefined,reply_markup:buildRecipientKeyboard(targetRecordId,users,[],0)}),promptId=sent?.result?.message_id;if(!promptId)return;await query(`INSERT INTO pending_prompts (chat_id, message_id, thread_id, record_id, selected, page, expires_at) VALUES (?, ?, ?, ?, '[]', 0, datetime('now', '+' || ? || ' minutes')) ON CONFLICT(chat_id, message_id) DO UPDATE SET selected='[]', page=0;`,[chatId,promptId,threadId,targetRecordId,ttl])}async function collectStats(){const one=async(sql:string,args:any[]=[])=>Number((await query(sql,args)).rows[0]?.c||0);return{totalMessages:await one(\"SELECT COUNT(*) c FROM messages_index\"),usersWithPhone:await one(\"SELECT COUNT(*) c FROM users WHERE phone IS NOT NULL AND phone != ''\"),activeUsers:await one(\"SELECT COUNT(*) c FROM users WHERE phone != '' AND is_active = 1\"),connectedGroups:await one(\"SELECT COUNT(DISTINCT chat_id) c FROM messages_index\"),smsToday:await one(\"SELECT COUNT(*) c FROM sms_logs WHERE date(created_at)=date('now')\"),smsOkToday:await one(\"SELECT COUNT(*) c FROM sms_logs WHERE status='ok' AND date(created_at)=date('now')\"),smsFailedToday:await one(\"SELECT COUNT(*) c FROM sms_logs WHERE status='failed' AND date(created_at)=date('now')\"),smsTotal:await one(\"SELECT COUNT(*) c FROM sms_logs\"),smsParts:await one(\"SELECT COALESCE(SUM(parts),0) c FROM sms_logs WHERE status='ok'\"),pendingPrompts:await one(\"SELECT COUNT(*) c FROM pending_prompts\")}}const json=(data:any,status=200)=>Response.json(data,{status,headers:{\"Cache-Control\":\"no-store\"}});function csv(rows:any[],filename:string){if(!rows.length)return new Response(\"\\uFEFF\",{status:200});const cols=Object.keys(rows[0]),esc=(v:any)=>`\"${String(v??\"\").replace(/\"/g,'\"\"')}\"`,body=\"\\uFEFF\"+cols.join(\",\")+\"\\n\"+rows.map((r)=>cols.map((c)=>esc(r[c])).join(\",\")).join(\"\\n\");return new Response(body,{headers:{\"Content-Type\":\"text/csv; charset=utf-8\",\"Content-Disposition\":`attachment; filename=\"${filename}\"`}})}async function handleApi(req:Request,url:URL):Promise{const path=url.pathname;if(path===\"/api/health\"){return json({ok:true,time:new Date().toISOString(),db:dbReady})}const auth=await authenticate(req,url);if(!auth){return json({error:\"دسترسی غیرمجاز. این پنل فقط از طریق مینی‌اپ تلگرام و برای ادمین‌ها باز می‌شود.\"},401)}if(path===\"/api/me\"){return json({tg_id:auth.tgId,is_super:auth.isSuper,via:auth.via})}if(path===\"/api/stats\")return json(await collectStats());if(path===\"/api/users\"){if(req.method===\"GET\"){const res=await query(\"SELECT * FROM users ORDER BY id DESC\");return json(res.rows)}if(req.method===\"POST\"){const b=await req.json(),phone=normalizeIranianPhone(b.phone||\"\");if(!b.tg_id||!phone)return json({error:\"آیدی عددی و شماره الزامی است\"},400);if(!isValidIranianMobile(phone))return json({error:\"شماره معتبر نیست\"},400);await query(`INSERT INTO users (tg_id, first_name, username, phone, note, is_active, updated_at) VALUES (?, ?, ?, ?, ?, 1, CURRENT_TIMESTAMP) ON CONFLICT(tg_id) DO UPDATE SET phone = excluded.phone, first_name = COALESCE(NULLIF(excluded.first_name,''), users.first_name), username = COALESCE(NULLIF(excluded.username,''), users.username), note = COALESCE(NULLIF(excluded.note,''), users.note), updated_at = CURRENT_TIMESTAMP;`,[Number(b.tg_id),b.first_name||\"ثبت دستی\",b.username||\"\",phone,b.note||\"\"]);await audit(auth.tgId,\"user_upsert\",`${b.tg_id} / ${phone}`);return json({success:true})}if(req.method===\"PATCH\"){const b=await req.json();await query(\"UPDATE users SET is_active = ? WHERE tg_id = ?\",[b.is_active?1:0,Number(b.tg_id)]);return json({success:true})}if(req.method===\"DELETE\"){const tgId=Number(url.searchParams.get(\"tg_id\"));await query(\"DELETE FROM users WHERE tg_id = ?\",[tgId]);await audit(auth.tgId,\"user_delete\",String(tgId));return json({success:true})}}if(path===\"/api/groups\"){if(req.method===\"GET\"){const res=await query(`SELECT c.chat_id, c.title, c.enabled, (SELECT COUNT(*) FROM messages_index m WHERE m.chat_id = c.chat_id) AS msg_count FROM allowed_chats c ORDER BY c.id DESC`);return json(res.rows)}if(req.method===\"PATCH\"){const b=await req.json();await query(\"UPDATE allowed_chats SET enabled = ? WHERE chat_id = ?\",[b.enabled?1:0,Number(b.chat_id)]);return json({success:true})}}if(path===\"/api/tags\"){if(req.method===\"GET\"){return json((await query(\"SELECT * FROM predefined_tags ORDER BY id DESC\")).rows)}if(req.method===\"POST\"){const{name}=await req.json(),clean=String(name||\"\").replace(/^#/,\"\").trim();if(!clean)return json({error:\"نام برچسب الزامی است\"},400);await query(\"INSERT OR IGNORE INTO predefined_tags (name) VALUES (?)\",[clean]);return json({success:true,name:clean})}if(req.method===\"DELETE\"){await query(\"DELETE FROM predefined_tags WHERE id = ?\",[Number(url.searchParams.get(\"id\"))]);return json({success:true})}}if(path===\"/api/search\"){const q=url.searchParams.get(\"q\")||\"\",chatId=url.searchParams.get(\"chat_id\"),tag=url.searchParams.get(\"tag\"),page=Math.max(0,Number(url.searchParams.get(\"page\")||\"0\")),size=Math.min(100,Number(url.searchParams.get(\"size\")||\"25\"));let sql=\"SELECT * FROM messages_index WHERE 1=1\";const args:any[]=[];if(q){sql+=\" AND (text LIKE ? OR sender_name LIKE ?)\";args.push(`%${q}%`,`%${q}%`)}if(chatId){sql+=\" AND chat_id = ?\";args.push(Number(chatId))}if(tag){sql+=\" AND tag = ?\";args.push(tag)}sql+=\" ORDER BY id DESC LIMIT ? OFFSET ?\";args.push(size,page*size);return json((await query(sql,args)).rows)}if(path===\"/api/logs\"){const status=url.searchParams.get(\"status\")||\"\",page=Math.max(0,Number(url.searchParams.get(\"page\")||\"0\"));let sql=\"SELECT * FROM sms_logs WHERE 1=1\";const args:any[]=[];if(status){sql+=\" AND status = ?\";args.push(status)}sql+=\" ORDER BY id DESC LIMIT 50 OFFSET ?\";args.push(page*50);return json((await query(sql,args)).rows)}if(path===\"/api/logs/retry\"&&req.method===\"POST\"){const id=Number(url.searchParams.get(\"id\")),res=await query(\"SELECT * FROM sms_logs WHERE id = ? LIMIT 1\",[id]),log=res.rows[0];if(!log)return json({error:\"لاگ یافت نشد\"},404);const out=await dispatchSms({phone:log.phone,text:log.text,targetTgId:log.target_tg_id,targetName:log.target_name,actorId:auth.tgId,actorName:\"پنل\",recordId:log.record_id,chatId:log.chat_id,chatTitle:log.chat_title,source:\"retry\"});return json({ok:out.ok,error:out.errorDescription,body:out.body})}if(path===\"/api/broadcast\"&&req.method===\"POST\"){const b=await req.json(),text=String(b.text||\"\").trim();if(!text)return json({error:\"متن پیامک الزامی است\"},400);let targets:any[]=[];if(b.mode===\"all\"){targets=await fetchActiveUsers()}else if(b.mode===\"chat\"&&b.chat_id){const res=await query(`SELECT DISTINCT u.tg_id, u.first_name, u.last_name, u.phone FROM topic_members tm JOIN users u ON u.tg_id = tm.tg_id WHERE tm.chat_id = ? AND u.is_active = 1 AND u.phone != ''`,[Number(b.chat_id)]);targets=res.rows}else if(Array.isArray(b.ids)&&b.ids.length){const all=await fetchActiveUsers(),set=b.ids.map(Number);targets=all.filter((u:any)=>set.includes(Number(u.tg_id)))}if(!targets.length)return json({error:\"مخاطبی برای ارسال یافت نشد\"},400);if(targets.length>MAX_BROADCAST){return json({error:`حداکثر ${MAX_BROADCAST} مخاطب در هر ارسال`},400)}const settings=await getSettings(),finalText=settings.sms_signature?`${text}\\n${settings.sms_signature}`:text,results=await runWithConcurrency(targets,SMS_CONCURRENCY,(u:any)=>dispatchSms({phone:u.phone,text:finalText,targetTgId:Number(u.tg_id),targetName:displayName(u),actorId:auth.tgId,actorName:\"پنل مدیریت\",source:\"broadcast\"}).then((r)=>({name:displayName(u),phone:u.phone,...r})));await audit(auth.tgId,\"broadcast\",`count=${targets.length}`);return json({total:results.length,ok:results.filter((r:any)=>r.ok).length,failed:results.filter((r:any)=>!r.ok).map((r:any)=>({name:r.name,phone:r.phone,error:r.errorDescription})),parts:smsPartCount(finalText)})}if(path===\"/api/settings\"){if(req.method===\"GET\")return json(await getSettings(true));if(req.method===\"POST\"){const b=await req.json();for(const[k,v]of Object.entries(b)){if(k in DEFAULT_SETTINGS)await setSetting(k,String(v))}await audit(auth.tgId,\"settings_update\",JSON.stringify(b).slice(0,300));return json({success:true,settings:await getSettings(true)})}}if(path===\"/api/admins\"){if(req.method===\"GET\"){const res=await query(\"SELECT * FROM admins ORDER BY id DESC\");return json({super_admin:ADMIN_ID,list:res.rows})}if(!auth.isSuper)return json({error:\"فقط سوپر ادمین\"},403);if(req.method===\"POST\"){const b=await req.json();if(!b.tg_id)return json({error:\"آیدی الزامی است\"},400);await query(\"INSERT OR IGNORE INTO admins (tg_id, title, added_by) VALUES (?, ?, ?)\",[Number(b.tg_id),b.title||\"\",auth.tgId]);return json({success:true})}if(req.method===\"DELETE\"){const id=Number(url.searchParams.get(\"tg_id\"));if(id===ADMIN_ID)return json({error:\"سوپر ادمین قابل حذف نیست\"},400);await query(\"DELETE FROM admins WHERE tg_id = ?\",[id]);return json({success:true})}}if(path===\"/api/export/users\"){return csv((await query(\"SELECT * FROM users ORDER BY id DESC\")).rows,\"users.csv\")}if(path===\"/api/export/logs\"){return csv((await query(\"SELECT * FROM sms_logs ORDER BY id DESC LIMIT 5000\")).rows,\"sms_logs.csv\")}if(path===\"/api/cron\"&&req.method===\"POST\"){await cleanupExpired();return json({success:true})}if(path===\"/api/setup-webhook\"&&req.method===\"POST\"){if(!auth.isSuper)return json({error:\"فقط سوپر ادمین\"},403);const res=await callTelegram(\"setWebhook\",{url:`${url.origin}/`,secret_token:WEBHOOK_SECRET||undefined,allowed_updates:[\"message\",\"edited_message\",\"callback_query\"],drop_pending_updates:true});return json(res)}if(path===\"/api/audit\"){return json((await query(\"SELECT * FROM audit_log ORDER BY id DESC LIMIT 100\")).rows)}return json({error:\"Not Found\"},404)}function getMiniAppHtml():string{return `پنل مدیریت پیامک همایس

سامانه اطلاع‌رسانی پیامکی همایس

پنل مدیریت سرورلس — در حال احراز هویت...

دسترسی غیرمجاز

این پنل تنها برای ادمین‌ها و از طریق باز کردن مینی‌اپ داخل تلگرام قابل استفاده است.

آخرین ارسال‌ها

در حال بارگذاری...

➕ ثبت / ویرایش دستی مخاطب

لیست مخاطبان

افزودن برچسب

📣 ارسال پیامک گروهی

۰ کاراکتر — ۱ بخش پیامک

تنظیمات عمومی

کلمه فعال‌سازسقف روزانه ارسال هر کاربر (۰ = بی‌نهایت)امضای انتهای پیامکمدت انقضای منوی انتخاب (دقیقه)حداکثر طول متن پیامک

فقط گروه‌های تاییدشده فعال باشند حذف پیام اصلی پس از ارسال موفق ایندکس تمام پیام‌های گروه برای جستجو

گروه‌های ثبت‌شده

ادمین‌ها

ابزارها

`}export default async function(req:Request):Promise{await initDatabase();const url=new URL(req.url);if(url.pathname.startsWith(\"/api/\")){try{return await handleApi(req,url)}catch(e:any){console.error(\"API error:\",e);return json({error:e?.message||\"خطای داخلی سرور\"},500)}}if(url.pathname===\"/admin\"||url.pathname===\"/miniapp\"){return new Response(getMiniAppHtml(),{headers:{\"Content-Type\":\"text/html; charset=utf-8\",\"Cache-Control\":\"no-store\"}})}if(req.method===\"POST\"){if(WEBHOOK_SECRET&&req.headers.get(\"x-telegram-bot-api-secret-token\")!==WEBHOOK_SECRET){return new Response(\"Forbidden\",{status:403})}try{const update=await req.json();await handleTelegramUpdate(update)}catch(e){console.error(\"Update error:\",e)}return new Response(\"OK\",{status:200})}return new Response(\"✅ ربات تلگرام و سامانه پیامک همایس فعال است.\\nپنل مدیریت: /admin (فقط ادمین‌ها)\",{headers:{\"Content-Type\":\"text/plain; charset=utf-8\"}})}","createdAt",["D",1788878100999],"branchVersion","branchId","6027edb3-917a-401d-8a09-f5434f2882b2","id","5e5f428a-e3d1-414b-858a-a4281c850f1a","telegram",["D",1788866198021],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","0c10d4b3-a9b8-43e9-8be3-54116d58fe53","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a07bcd-74fd-7086-a12b-f5d75098a171","tursoName","5e5f428ae3d1414b858aa4281c850f1a","tursoHostname","5e5f428ae3d1414b858aa4281c850f1a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789485645684],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",29,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","omid13841384","handle","displayName","omid13841384 omid1384138","avatar","https://lh3.googleusercontent.com/a/ACg8ocIXl3UwWZDaTFVGW5NJGINpBCP0DAKvx9qWWJBZSW5Q-F3gDA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":167,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":168,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":169,"_83":170,"_85":171,"_87":25},"tree",[158,159],"files",[158,159],"counts",{"_146":62,"_147":148,"_149":62,"_150":151,"_152":153},"contents",[129,130],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":138,"_32":139,"_30":140,"_132":-5,"_41":42,"_40":141,"_133":58,"_38":142,"_13":143,"_33":34,"_35":144,"_24":25,"_136":-5,"_27":145},{"_43":131,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_133":25,"_38":134,"_13":135,"_33":34,"_35":37,"_24":25,"_136":-5,"_27":137},"441fd42e-0aaf-4161-8cd0-81aaa1cdf2d9","parentId","latest",["D",1788878100999],4,"label",[28],"528a90e5-abf9-421d-a43f-4b3d4662fb8b","main.ts","c25f9f7e-ab76-11f1-b36a-1607ee4eb77e",15,["D",1788872982278],12,"import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\n// ==========================================\n// ۱. تنظیمات امن\n// ==========================================\nconst getEnv = (key: string, fallback = \"\") =>\n Deno.env.get(key) ||\n (typeof process !== \"undefined\" ? process.env[key] : undefined) || fallback;\n\nconst ADMIN_ID = Number(getEnv(\"ADMIN_ID\"));\n\nconst HOMAIS_CONFIG = {\n username: \"fr41160\",\n password: getEnv(\"HOMAIS_PASSWORD\"),\n portalCode: \"10003692\",\n serverType: \"100\",\n};\n\nconst TELEGRAM_TOKEN = getEnv(\"TELEGRAM_TOKEN\");\nconst TG_API = `https://api.telegram.org/bot${TELEGRAM_TOKEN}`;\nconst SINGLE_EMOJI_REGEX =\n /^(\\p{Extended_Pictographic}|\\p{Emoji_Presentation})$/u;\n\nif (!TELEGRAM_TOKEN) {\n console.warn(\"⚠️ متغیر TELEGRAM_TOKEN ست نشده است.\");\n}\n\n// ==========================================\n// ۲. دیتابیس SQLite\n// ==========================================\nasync function query(sql: string, args: any[] = []) {\n const res = await sqlite.execute({ sql, args });\n const rows = (res.rows || []).map((row: any) => {\n if (!Array.isArray(row)) return row;\n const obj: Record = {};\n (res.columns || []).forEach((col: string, idx: number) => {\n obj[col] = row[idx];\n });\n return obj;\n });\n return {\n rows,\n lastInsertRowid: res.lastInsertRowid,\n rowsAffected: res.rowsAffected,\n };\n}\n\nasync function initDatabase() {\n await query(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n tg_id INTEGER UNIQUE,\n first_name TEXT,\n username TEXT,\n phone TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS topic_members (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n thread_id INTEGER DEFAULT 0,\n tg_id INTEGER,\n last_active DATETIME DEFAULT CURRENT_TIMESTAMP,\n UNIQUE(chat_id, thread_id, tg_id)\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS messages_index (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n chat_title TEXT,\n message_thread_id INTEGER DEFAULT 0,\n message_id INTEGER,\n sender_id INTEGER,\n sender_name TEXT,\n text TEXT,\n has_media INTEGER DEFAULT 0,\n tag TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n // جدول مدیریت پیام‌های منقضی‌شونده بعد از ۳۰ دقیقه\n await query(`\n CREATE TABLE IF NOT EXISTS pending_prompts (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n message_id INTEGER,\n expires_at DATETIME\n );\n `);\n}\n\n// ==========================================\n// ۳. درایور پیامک همایس + تحلیل خطا\n// ==========================================\nfunction normalizeIranianPhone(rawPhone: string): string {\n let cleaned = rawPhone.replace(/[^0-9]/g, \"\");\n if (cleaned.startsWith(\"98\")) {\n cleaned = \"0\" + cleaned.substring(2);\n } else if (cleaned.startsWith(\"9\") && cleaned.length === 10) {\n cleaned = \"0\" + cleaned;\n }\n return cleaned;\n}\n\nfunction explainHomaisError(raw: string): string {\n const trimmed = raw.trim();\n const code = parseInt(trimmed, 10);\n if (!isNaN(code)) {\n switch (code) {\n case -1:\n case 101:\n return \"نام کاربری یا رمز عبور پنل همایس نامعتبر است.\";\n case -2:\n case 102:\n return \"شارژ (اعتبار ریالی) پنل همایس به اتمام رسیده است.\";\n case -3:\n case 103:\n return \"پورتال‌کد یا نوع سرور ارسال‌کننده نامعتبر است.\";\n case -4:\n case 104:\n return \"شماره گیرنده نامعتبر است یا در بلک‌لیست تبلیغاتی مخابرات قرار دارد.\";\n case -5:\n case 105:\n return \"متن پیامک خالی یا شامل عبارات غیرمجاز است.\";\n default:\n return `خطای سرور همایس با کد: ${code}`;\n }\n }\n return raw || \"خطای ارتباط با سرور سامانه پیامک همایس\";\n}\n\nasync function sendHomaisSms(mobile: string, text: string) {\n if (!HOMAIS_CONFIG.username || !HOMAIS_CONFIG.password) {\n return {\n status: 500,\n ok: false,\n body: \"نام کاربری یا پسورد پنل همایس در متغیرها تنظیم نشده است.\",\n errorDescription: \"تنظیمات پنل همایس در سرور کامل نیست.\",\n };\n }\n\n const targetMobile = normalizeIranianPhone(mobile);\n if (targetMobile.length !== 11 || !targetMobile.startsWith(\"09\")) {\n return {\n status: 400,\n ok: false,\n body: `شماره ${mobile} غیراستاندارد است.`,\n errorDescription:\n \"فرمت شماره تلفن همراه اشتباه است (باید ۱۱ رقم با 09 باشد).\",\n };\n }\n\n const params = new URLSearchParams({\n username: HOMAIS_CONFIG.username,\n password: HOMAIS_CONFIG.password,\n PortalCode: HOMAIS_CONFIG.portalCode,\n mobile: targetMobile,\n message: text,\n ServerType: HOMAIS_CONFIG.serverType,\n });\n\n const url =\n `http://api.homais.com/services/messaging/sms/api/sendMessage/direct/?${params.toString()}`;\n\n try {\n const res = await fetch(url, { method: \"GET\" });\n const rawText = (await res.text()).trim();\n\n // همایس در صورت موفقیت معمولاً کد پیگیری عددی مثبت بازمی‌گرداند\n const isError = !res.ok ||\n rawText.toLowerCase().includes(\"error\") ||\n rawText.startsWith(\"-\");\n\n return {\n status: res.status,\n ok: !isError,\n body: rawText,\n errorDescription: isError ? explainHomaisError(rawText) : \"\",\n };\n } catch (err: any) {\n return {\n status: 0,\n ok: false,\n body: err.message,\n errorDescription: `عدم برقراری ارتباط با وب‌سرویس همایس: ${err.message}`,\n };\n }\n}\n\n// ==========================================\n// ۴. ارتباط با تلگرام و مدیریت تایمر ۳۰ دقیقه\n// ==========================================\nasync function callTelegram(method: string, payload: any) {\n if (!TELEGRAM_TOKEN) return null;\n try {\n const res = await fetch(`${TG_API}/${method}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(payload),\n });\n return await res.json();\n } catch (err) {\n console.error(`Telegram API Error [${method}]:`, err);\n return null;\n }\n}\n\nasync function sendMessage(chatId: number, text: string, extra: any = {}) {\n return callTelegram(\"sendMessage\", { chat_id: chatId, text, ...extra });\n}\n\nasync function answerCallbackQuery(\n callbackQueryId: string,\n text = \"\",\n showAlert = false,\n) {\n return callTelegram(\"answerCallbackQuery\", {\n callback_query_id: callbackQueryId,\n text,\n show_alert: showAlert,\n });\n}\n\nasync function editMessageText(\n chatId: number,\n messageId: number,\n text: string,\n extra: any = {},\n) {\n return callTelegram(\"editMessageText\", {\n chat_id: chatId,\n message_id: messageId,\n text,\n ...extra,\n });\n}\n\nasync function deleteMessage(chatId: number, messageId: number) {\n return callTelegram(\"deleteMessage\", {\n chat_id: chatId,\n message_id: messageId,\n });\n}\n\nasync function getChatMember(chatId: number, userId: number) {\n const res = await callTelegram(\"getChatMember\", {\n chat_id: chatId,\n user_id: userId,\n });\n return res?.result;\n}\n\nfunction escapeHtml(str: string): string {\n return str\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\n// پاک‌سازی پیام‌هایی که بیش از ۳۰ دقیقه مانده‌اند\nasync function cleanupExpiredPrompts() {\n try {\n const res = await query(\n \"SELECT id, chat_id, message_id FROM pending_prompts WHERE expires_at <= CURRENT_TIMESTAMP\",\n );\n for (const row of res.rows) {\n await deleteMessage(row.chat_id, row.message_id).catch(() => {});\n await query(\"DELETE FROM pending_prompts WHERE id = ?\", [row.id]);\n }\n } catch (e) {\n console.error(\"Cleanup error:\", e);\n }\n}\n\n// ==========================================\n// ۵. هندلر آپدیت‌های تلگرام\n// ==========================================\nasync function handleTelegramUpdate(update: any) {\n await cleanupExpiredPrompts();\n\n // ۱. کلیک دکمه‌های شیشه‌ای\n if (update.callback_query) {\n const { id, data, from, message } = update.callback_query;\n if (!data) return;\n\n const [action, targetRecordId, extraParam] = data.split(\":\");\n const recordId = Number(targetRecordId);\n\n // ۱-۱. انتخاب شماره برای ارسال SMS\n if (action === \"send_to_user\") {\n const targetTgId = Number(extraParam);\n\n const msgRes = await query(\n \"SELECT * FROM messages_index WHERE id = ? LIMIT 1\",\n [recordId],\n );\n const msgRecord = msgRes.rows[0];\n\n if (!msgRecord) {\n return answerCallbackQuery(id, \"پیام اولیه یافت نشد.\", true);\n }\n\n let canDispatch = from.id === msgRecord.sender_id || from.id === ADMIN_ID;\n if (!canDispatch) {\n const member = await getChatMember(msgRecord.chat_id, from.id);\n canDispatch = [\"creator\", \"administrator\"].includes(member?.status);\n }\n if (!canDispatch) {\n return answerCallbackQuery(\n id,\n \"⛔️ فقط فرستنده پیام یا مدیر گروه مجاز به اقدام هستند.\",\n true,\n );\n }\n\n const userRes = await query(\n \"SELECT first_name, phone FROM users WHERE tg_id = ? LIMIT 1\",\n [targetTgId],\n );\n const targetUser = userRes.rows[0];\n\n if (!targetUser || !targetUser.phone) {\n return answerCallbackQuery(id, \"شماره تماس یافت نشد.\", true);\n }\n\n let cleanedText = msgRecord.text.replace(/پپپ/g, \"\").trim();\n if (!cleanedText) cleanedText = \"(بدون متن)\";\n\n const finalSmsText = `ارسال‌کننده: ${msgRecord.sender_name}\\n${cleanedText}`;\n\n await answerCallbackQuery(id, \"⏳ در حال ارسال پیامک به همایس...\");\n const smsRes = await sendHomaisSms(targetUser.phone, finalSmsText);\n\n // حذف از جدول انقضای ۳۰ دقیقه\n await query(\n \"DELETE FROM pending_prompts WHERE chat_id = ? AND message_id = ?\",\n [message.chat.id, message.message_id],\n );\n\n if (smsRes.ok) {\n // حذف پیام اصلی حاوی پپپ\n await deleteMessage(msgRecord.chat_id, msgRecord.message_id).catch(\n () => {},\n );\n\n const senderName = escapeHtml(msgRecord.sender_name || \"نامشخص\");\n const receiverName = escapeHtml(\n `${targetUser.first_name || \"کاربر\"} (${targetUser.phone})`,\n );\n const safeContent = escapeHtml(cleanedText);\n\n const confirmationMessage =\n `📩 ارسال پیامک موفق از طرف ${senderName} به ${receiverName}\\n\\n` +\n `

${safeContent}

`;\n\n await editMessageText(\n message.chat.id,\n message.message_id,\n confirmationMessage,\n { parse_mode: \"HTML\" },\n );\n } else {\n // 🔴 گزارش دقیق علت خطا\n const errorDetail = smsRes.errorDescription || smsRes.body;\n await answerCallbackQuery(\n id,\n `❌ خطا: ${errorDetail}`,\n true, // نمایش در قالب آلرت پاپ‌آپ\n );\n\n await editMessageText(\n message.chat.id,\n message.message_id,\n `❌ ارسال پیامک با خطا مواجه شد:\\n\\n` +\n `⚠️ علت: ${escapeHtml(errorDetail)}\\n` +\n `📌 پاسخ سرور همایس: ${\n escapeHtml(smsRes.body || \"نامشخص\")\n }\\n` +\n `📱 شماره مقصد: ${targetUser.phone}`,\n { parse_mode: \"HTML\" },\n );\n }\n return;\n }\n\n // ۱-۲. کلیک روی انصراف\n if (action === \"dismiss\") {\n await query(\n \"DELETE FROM pending_prompts WHERE chat_id = ? AND message_id = ?\",\n [message.chat.id, message.message_id],\n );\n await deleteMessage(message.chat.id, message.message_id);\n await answerCallbackQuery(id, \"لغو شد.\");\n return;\n }\n\n return;\n }\n\n // ۲. مدیریت پیام‌های دریافتی و ویرایش‌شده\n const msg = update.message || update.edited_message;\n if (!msg) return;\n\n const chatId = msg.chat.id;\n\n // ۲-۱. پیام خصوصی (ثبت شماره)\n if (msg.chat.type === \"private\") {\n if (msg.text === \"/start\") {\n const userRes = await query(\n \"SELECT phone FROM users WHERE tg_id = ? LIMIT 1\",\n [msg.from.id],\n );\n if (userRes.rows[0]?.phone) {\n return sendMessage(\n chatId,\n `سلام ${msg.from.first_name}!\\nشماره شما (${\n userRes.rows[0].phone\n }) در سیستم ثبت است.`,\n );\n }\n return sendMessage(\n chatId,\n `سلام ${msg.from.first_name}!\\nبرای ثبت شماره خود، دکمه زیر را لمس کنید:`,\n {\n reply_markup: {\n keyboard: [[{\n text: \"📱 اشتراک‌گذاری شماره تماس\",\n request_contact: true,\n }]],\n resize_keyboard: true,\n one_time_keyboard: true,\n },\n },\n );\n }\n\n if (msg.contact) {\n if (msg.contact.user_id !== msg.from.id) {\n return sendMessage(\n chatId,\n \"❌ لطفاً شماره متعلق به اکانت خودتان را ارسال کنید.\",\n );\n }\n await query(\n `INSERT INTO users (tg_id, first_name, username, phone) \n VALUES (?, ?, ?, ?)\n ON CONFLICT(tg_id) DO UPDATE SET phone = excluded.phone, first_name = excluded.first_name, username = excluded.username;`,\n [\n msg.from.id,\n msg.from.first_name,\n msg.from.username || \"\",\n msg.contact.phone_number,\n ],\n );\n return sendMessage(\n chatId,\n \"✅ شماره شما در سامانه ثبت گردید.\",\n { reply_markup: { remove_keyboard: true } },\n );\n }\n return;\n }\n\n // ۲-۲. پیام داخل گروه\n if ([\"group\", \"supergroup\"].includes(msg.chat.type)) {\n if (msg.new_chat_members || msg.left_chat_member || msg.pinned_message) {\n return;\n }\n\n const groupTitle = msg.chat.title || \"گروه\";\n const hasMedia = Boolean(msg.photo || msg.video || msg.document);\n let trimmed = (msg.text || msg.caption || \"\").trim();\n\n if (hasMedia && !trimmed) {\n trimmed = `یک رسانه در گروه ${groupTitle} بارگذاری شد.`;\n }\n\n const threadId = msg.message_thread_id || 0;\n const userId = msg.from.id;\n\n await query(\n `INSERT INTO topic_members (chat_id, thread_id, tg_id) VALUES (?, ?, ?)\n ON CONFLICT(chat_id, thread_id, tg_id) DO UPDATE SET last_active = CURRENT_TIMESTAMP;`,\n [chatId, threadId, userId],\n );\n\n let targetRecordId: number;\n const existingMsg = await query(\n \"SELECT id FROM messages_index WHERE chat_id = ? AND message_id = ? LIMIT 1\",\n [chatId, msg.message_id],\n );\n\n if (existingMsg.rows[0]?.id) {\n targetRecordId = existingMsg.rows[0].id;\n await query(\n \"UPDATE messages_index SET text = ?, has_media = ? WHERE id = ?\",\n [trimmed, hasMedia ? 1 : 0, targetRecordId],\n );\n } else {\n const insRes = await query(\n `INSERT INTO messages_index (chat_id, chat_title, message_thread_id, message_id, sender_id, sender_name, text, has_media)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?) RETURNING id;`,\n [\n chatId,\n groupTitle,\n threadId,\n msg.message_id,\n userId,\n `${msg.from.first_name || \"\"} ${msg.from.last_name || \"\"}`.trim(),\n trimmed,\n hasMedia ? 1 : 0,\n ],\n );\n targetRecordId = insRes.rows[0]?.id || insRes.lastInsertRowid;\n }\n\n let isPPP = trimmed.includes(\"پپپ\");\n\n if (!isPPP && msg.reply_to_message) {\n const repText = msg.reply_to_message.text ||\n msg.reply_to_message.caption || \"\";\n if (repText.includes(\"پپپ\") || trimmed === \"پپپ\") {\n isPPP = true;\n const repRes = await query(\n \"SELECT id FROM messages_index WHERE chat_id = ? AND message_id = ? LIMIT 1\",\n [chatId, msg.reply_to_message.message_id],\n );\n if (repRes.rows[0]?.id) {\n targetRecordId = repRes.rows[0].id;\n }\n }\n }\n\n // اگر پپپ نداشت، کاری انجام نمی‌شود\n if (!isPPP) {\n return;\n }\n\n const usersRes = await query(\n \"SELECT tg_id, first_name, phone FROM users WHERE phone IS NOT NULL AND phone != '' ORDER BY id DESC\",\n );\n\n if (usersRes.rows.length === 0) {\n return sendMessage(\n chatId,\n \"⚠️ کلمه «پپپ» دریافت شد، اما شماره‌ای در سیستم ثبت نیست.\",\n {\n reply_to_message_id: msg.message_id,\n message_thread_id: threadId || undefined,\n },\n );\n }\n\n const phoneButtons = usersRes.rows.map((u: any) => [\n {\n text: `📱 ${u.first_name || \"کاربر\"} (${u.phone})`,\n callback_data: `send_to_user:${targetRecordId}:${u.tg_id}`,\n },\n ]);\n\n phoneButtons.push([\n { text: \"❌ انصراف\", callback_data: `dismiss:${targetRecordId}` },\n ]);\n\n const sent = await sendMessage(\n chatId,\n \"📋 پیامک به کدام شماره ارسال شود؟ (در صورت عدم انتخاب، پس از ۳۰ دقیقه حذف می‌شود):\",\n {\n reply_to_message_id: msg.message_id,\n message_thread_id: threadId || undefined,\n reply_markup: { inline_keyboard: phoneButtons },\n },\n );\n\n // ⏱ تنظیم تایمر ۳۰ دقیقه برای پاک شدن خودکار\n if (sent?.result?.message_id) {\n const promptMsgId = sent.result.message_id;\n\n // ذخیره در جدول انقضا\n await query(\n \"INSERT INTO pending_prompts (chat_id, message_id, expires_at) VALUES (?, ?, datetime('now', '+30 minutes'))\",\n [chatId, promptMsgId],\n );\n\n // تایمر در حافظه (برای حذف آنی سر ۳۰ دقیقه در صورت فعال بودن پروسس)\n setTimeout(async () => {\n await deleteMessage(chatId, promptMsgId).catch(() => {});\n await query(\n \"DELETE FROM pending_prompts WHERE chat_id = ? AND message_id = ?\",\n [chatId, promptMsgId],\n );\n }, 30 * 60 * 1000);\n }\n }\n}\n\n// ==========================================\n// ۶. مدیریت API پنل\n// ==========================================\nasync function handleApiRequests(req: Request, url: URL): Promise {\n if (url.pathname === \"/api/users\") {\n if (req.method === \"GET\") {\n const usersList = await query(\"SELECT * FROM users ORDER BY id DESC\");\n return Response.json(usersList.rows);\n }\n if (req.method === \"POST\") {\n const { tg_id, first_name, username, phone } = await req.json();\n if (!tg_id || !phone) {\n return Response.json({ error: \"آیدی و شماره الزامی است\" }, {\n status: 400,\n });\n }\n\n await query(\n `INSERT INTO users (tg_id, first_name, username, phone)\n VALUES (?, ?, ?, ?)\n ON CONFLICT(tg_id) DO UPDATE SET\n phone = excluded.phone,\n first_name = COALESCE(NULLIF(excluded.first_name, ''), users.first_name),\n username = COALESCE(NULLIF(excluded.username, ''), users.username);`,\n [Number(tg_id), first_name || \"ثبت دستی\", username || \"\", phone],\n );\n\n return Response.json({ success: true });\n }\n if (req.method === \"DELETE\") {\n const tgId = Number(url.searchParams.get(\"tg_id\"));\n await query(\"DELETE FROM users WHERE tg_id = ?\", [tgId]);\n return Response.json({ success: true });\n }\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n\n// ==========================================\n// ۷. وب‌اپ پنل ادمین\n// ==========================================\nfunction getMiniAppHtml(): string {\n return `\n\n\n \n \n مدیریت پیامک همایس\n \n \n \n\n\n

پنل مدیریت شماره‌ها

\n \n \n \n \n

\n \n\n`;\n}\n\n// ==========================================\n// ۸. ورودی سرورلس اصلی\n// ==========================================\nexport default async function (req: Request): Promise {\n await initDatabase();\n const url = new URL(req.url);\n\n if (url.pathname.startsWith(\"/api/\")) {\n return handleApiRequests(req, url);\n }\n\n if (url.pathname === \"/admin\" || url.pathname === \"/miniapp\") {\n return new Response(getMiniAppHtml(), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"POST\") {\n try {\n const update = await req.json();\n await handleTelegramUpdate(update);\n return new Response(\"OK\", { status: 200 });\n } catch (e: any) {\n console.error(\"Update Error:\", e);\n return new Response(\"Error\", { status: 500 });\n }\n }\n\n return new Response(\"ربات فعال است.\", {\n headers: { \"Content-Type\": \"text/plain; charset=utf-8\" },\n });\n}",[139],"pulls","branches",1,"forks","envVars",{"_154":156,"_157":62},"connections",{"_154":62,"_155":62},"count","unfilledCount",6,"emptyCount",{"_43":138,"_32":139,"_30":140,"_132":-5,"_41":42,"_40":141,"_133":58,"_38":164,"_13":143,"_33":34,"_35":144,"_24":25,"_136":-5,"_161":165,"_27":166},{"_43":131,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_133":25,"_38":160,"_13":135,"_33":34,"_35":37,"_24":25,"_136":-5,"_161":162,"_27":163},["D",1788878100999],"children",[],[28],["D",1788872982278],[],[139],["D",1788866198021],["D",1789485645684],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_126":205,"_206":207,"_208":209,"_210":25,"_211":25,"_212":25,"_213":58,"_214":-5,"_215":-7,"_216":-7,"_217":62,"_218":25,"_219":25,"_220":-5,"_221":25,"_222":25,"_223":25,"_224":-5},"ENV",{"_176":177,"_178":179,"_180":89,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v20