${escapeHtml(smsText)}

`;\n\n await editMessageText(message.chat.id, message.message_id, report, {\n parse_mode: \"HTML\",\n });\n\n if (settings.delete_trigger_message === \"1\" && okList.length) {\n await deleteMessage(record.chat_id, record.message_id).catch(() => {});\n }\n await audit(from.id, \"sms_group_send\", `record=${recordId} ok=${okList.length}`);\n return;\n }\n}\n\n// ---------- ۸-۲. چت خصوصی ----------\nasync function handlePrivate(msg: any) {\n const chatId = msg.chat.id;\n const text = (msg.text || \"\").trim();\n const fromId = msg.from.id;\n const admin = await isAdminUser(fromId);\n\n if (msg.contact) {\n if (msg.contact.user_id && msg.contact.user_id !== fromId) {\n return sendMessage(chatId, \"❌ لطفاً شماره متعلق به اکانت خودتان را ارسال کنید.\");\n }\n const phone = normalizeIranianPhone(msg.contact.phone_number);\n if (!isValidIranianMobile(phone)) {\n return sendMessage(chatId, \"❌ شماره دریافتی معتبر نیست.\");\n }\n await query(\n `INSERT INTO users (tg_id, first_name, last_name, username, phone, is_active, updated_at)\n VALUES (?, ?, ?, ?, ?, 1, CURRENT_TIMESTAMP)\n ON CONFLICT(tg_id) DO UPDATE SET\n phone = excluded.phone,\n first_name = excluded.first_name,\n last_name = excluded.last_name,\n username = excluded.username,\n is_active = 1,\n updated_at = CURRENT_TIMESTAMP;`,\n [\n fromId,\n msg.from.first_name || \"\",\n msg.from.last_name || \"\",\n msg.from.username || \"\",\n phone,\n ],\n );\n return sendMessage(\n chatId,\n `✅ شماره ${phone} با موفقیت ثبت شد.\\nبرای قطع دریافت پیامک هر زمان /stop را بفرستید.`,\n { reply_markup: { remove_keyboard: true } },\n );\n }\n\n if (text === \"/start\" || text === \"/help\") {\n const userRes = await query(\n \"SELECT phone, is_active FROM users WHERE tg_id = ? LIMIT 1\",\n [fromId],\n );\n const u = userRes.rows[0];\n const help = \"\\n\\nدستورها:\\n\" +\n \"/start ثبت یا وضعیت شماره\\n\" +\n \"/stop توقف دریافت پیامک\\n\" +\n \"/resume از سرگیری دریافت\\n\" +\n \"/whoami نمایش آیدی عددی\\n\" +\n (admin\n ? \"\\nدستورهای مدیریتی:\\n/panel لینک پنل\\n/stats آمار\\n/testsms شماره متن\\n/trigger کلمه\\n/limit عدد\\n/addadmin آیدی\\n/deladmin آیدی\\n(در گروه) /allow و /disallow\"\n : \"\");\n\n if (u?.phone) {\n return sendMessage(\n chatId,\n `سلام ${msg.from.first_name}!\\nشماره شما (${u.phone}) ثبت است و وضعیت دریافت: ${\n u.is_active ? \"فعال ✅\" : \"غیرفعال ⛔️\"\n }${help}`,\n );\n }\n return sendMessage(\n chatId,\n `سلام ${msg.from.first_name}!\\nبرای دریافت اطلاع‌رسانی پیامکی، دکمه زیر را لمس کنید.${help}`,\n {\n reply_markup: {\n keyboard: [[{ text: \"📱 اشتراک‌گذاری شماره تماس\", request_contact: true }]],\n resize_keyboard: true,\n one_time_keyboard: true,\n },\n },\n );\n }\n\n if (text === \"/whoami\") {\n return sendMessage(chatId, `آیدی عددی شما: ${fromId}`, {\n parse_mode: \"HTML\",\n });\n }\n\n if (text === \"/stop\") {\n await query(\"UPDATE users SET is_active = 0 WHERE tg_id = ?\", [fromId]);\n return sendMessage(chatId, \"⛔️ دریافت پیامک برای شما غیرفعال شد. (/resume برای فعال‌سازی)\");\n }\n\n if (text === \"/resume\") {\n await query(\"UPDATE users SET is_active = 1 WHERE tg_id = ?\", [fromId]);\n return sendMessage(chatId, \"✅ دریافت پیامک دوباره فعال شد.\");\n }\n\n if (!admin) return;\n\n if (text === \"/panel\") {\n return sendMessage(\n chatId,\n \"پنل مدیریت را از منوی Mini App بات باز کنید (مسیر /admin روی همین دامنه).\\nاگر منو ست نشده، در BotFather مسیر /admin را به‌عنوان Web App ثبت کنید.\",\n );\n }\n\n if (text === \"/stats\") {\n const s = await collectStats();\n return sendMessage(\n chatId,\n `📊 آمار سامانه\\n` +\n `پیام‌های ایندکس‌شده: ${s.totalMessages}\\n` +\n `مخاطبان دارای شماره: ${s.usersWithPhone} (فعال: ${s.activeUsers})\\n` +\n `گروه‌های متصل: ${s.connectedGroups}\\n` +\n `پیامک امروز: ${s.smsToday} | موفق: ${s.smsOkToday} | ناموفق: ${s.smsFailedToday}\\n` +\n `مجموع پیامک‌ها: ${s.smsTotal}`,\n );\n }\n\n if (text.startsWith(\"/trigger\")) {\n const word = text.replace(\"/trigger\", \"\").trim();\n if (!word) return sendMessage(chatId, \"فرمت: /trigger پپپ\");\n await setSetting(\"trigger_word\", word);\n return sendMessage(chatId, `✅ کلمه فعال‌ساز به «${word}» تغییر کرد.`);\n }\n\n if (text.startsWith(\"/limit\")) {\n const n = Number(text.replace(\"/limit\", \"\").trim());\n if (!Number.isFinite(n) || n < 0) return sendMessage(chatId, \"فرمت: /limit 50\");\n await setSetting(\"daily_limit\", String(n));\n return sendMessage(chatId, `✅ سقف روزانه ارسال ${n} پیامک تنظیم شد.`);\n }\n\n if (text.startsWith(\"/addadmin\")) {\n const id = Number(text.replace(\"/addadmin\", \"\").trim());\n if (!id) return sendMessage(chatId, \"فرمت: /addadmin 123456789\");\n await query(\n \"INSERT OR IGNORE INTO admins (tg_id, added_by) VALUES (?, ?)\",\n [id, fromId],\n );\n await audit(fromId, \"add_admin\", String(id));\n return sendMessage(chatId, `✅ کاربر ${id} به ادمین‌ها اضافه شد.`);\n }\n\n if (text.startsWith(\"/deladmin\")) {\n const id = Number(text.replace(\"/deladmin\", \"\").trim());\n if (!id) return sendMessage(chatId, \"فرمت: /deladmin 123456789\");\n if (id === ADMIN_ID) return sendMessage(chatId, \"⛔️ سوپر ادمین قابل حذف نیست.\");\n await query(\"DELETE FROM admins WHERE tg_id = ?\", [id]);\n return sendMessage(chatId, `✅ کاربر ${id} از ادمین‌ها حذف شد.`);\n }\n\n if (text.startsWith(\"/testsms\")) {\n const parts = text.replace(\"/testsms\", \"\").trim().split(/\\s+/);\n const mobile = parts.shift() || \"\";\n const body = parts.join(\" \");\n if (!mobile || !body) {\n return sendMessage(chatId, \"فرمت:\\n/testsms 09121111111 متن آزمایشی\", {\n parse_mode: \"HTML\",\n });\n }\n await sendMessage(chatId, \"⏳ در حال ارسال...\");\n const res = await dispatchSms({\n phone: mobile,\n text: body,\n actorId: fromId,\n actorName: msg.from.first_name || \"\",\n source: \"test\",\n });\n return sendMessage(\n chatId,\n `📡 وضعیت: ${res.ok ? \"✅ موفق\" : \"❌ خطا\"}\\n` +\n (res.ok ? \"\" : `علت: ${escapeHtml(res.errorDescription)}\\n`) +\n `پاسخ سرور: ${escapeHtml(res.body || \"-\")}`,\n { parse_mode: \"HTML\" },\n );\n }\n}\n\n// ---------- ۸-۳. گروه‌ها و تاپیک‌ها ----------\nasync function handleGroup(msg: any) {\n if (msg.new_chat_members || msg.left_chat_member || msg.pinned_message) return;\n\n const settings = await getSettings();\n const chatId = msg.chat.id;\n const groupTitle = msg.chat.title || \"گروه\";\n const threadId = msg.message_thread_id || 0;\n const userId = msg.from?.id;\n if (!userId) return;\n\n const rawText = (msg.text || msg.caption || \"\").trim();\n\n // دستورهای مدیریتی داخل گروه\n if (/^\\/(allow|disallow)/.test(rawText)) {\n if (!(await isAdminUser(userId))) return;\n if (rawText.startsWith(\"/allow\")) {\n await query(\n `INSERT INTO allowed_chats (chat_id, title, enabled) VALUES (?, ?, 1)\n ON CONFLICT(chat_id) DO UPDATE SET enabled = 1, title = excluded.title;`,\n [chatId, groupTitle],\n );\n return sendMessage(chatId, \"✅ این گروه در لیست مجاز فعال شد.\", {\n message_thread_id: threadId || undefined,\n });\n }\n await query(\"UPDATE allowed_chats SET enabled = 0 WHERE chat_id = ?\", [chatId]);\n return sendMessage(chatId, \"⛔️ این گروه از لیست مجاز خارج شد.\", {\n message_thread_id: threadId || undefined,\n });\n }\n\n // ثبت خودکار گروه (برای مشاهده در پنل)\n await query(\n `INSERT OR IGNORE INTO allowed_chats (chat_id, title, enabled) VALUES (?, ?, ?)`,\n [chatId, groupTitle, settings.require_whitelist === \"1\" ? 0 : 1],\n );\n\n if (settings.require_whitelist === \"1\") {\n const okRes = await query(\n \"SELECT enabled FROM allowed_chats WHERE chat_id = ? LIMIT 1\",\n [chatId],\n );\n if (!Number(okRes.rows[0]?.enabled)) return;\n }\n\n const hasMedia = Boolean(msg.photo || msg.video || msg.document || msg.voice);\n let trimmed = rawText;\n if (hasMedia && !trimmed) trimmed = `یک رسانه در گروه ${groupTitle} بارگذاری شد.`;\n if (!trimmed) return;\n\n await query(\n `INSERT INTO topic_members (chat_id, thread_id, tg_id) VALUES (?, ?, ?)\n ON CONFLICT(chat_id, thread_id, tg_id) DO UPDATE SET last_active = CURRENT_TIMESTAMP;`,\n [chatId, threadId, userId],\n );\n\n // ایندکس پیام (درج یا به‌روزرسانی در حالت ویرایش)\n const senderName = `${msg.from.first_name || \"\"} ${msg.from.last_name || \"\"}`.trim();\n let recordId = 0;\n if (settings.index_all_messages === \"1\" || trimmed.includes(settings.trigger_word)) {\n const ins = await query(\n `INSERT INTO messages_index\n (chat_id, chat_title, message_thread_id, message_id, sender_id, sender_name, text, has_media)\n VALUES (?,?,?,?,?,?,?,?)\n ON CONFLICT(chat_id, message_id) DO UPDATE SET\n text = excluded.text, has_media = excluded.has_media, chat_title = excluded.chat_title\n RETURNING id;`,\n [\n chatId,\n groupTitle,\n threadId,\n msg.message_id,\n userId,\n senderName,\n trimmed,\n hasMedia ? 1 : 0,\n ],\n );\n recordId = Number(ins.rows[0]?.id || ins.lastInsertRowid || 0);\n }\n\n // تشخیص کلمه فعال‌ساز (در متن خود پیام یا در ریپلای)\n const trigger = settings.trigger_word || \"پپپ\";\n let isTriggered = trimmed.includes(trigger);\n let targetRecordId = recordId;\n\n if (!isTriggered && msg.reply_to_message) {\n const repText = (msg.reply_to_message.text || msg.reply_to_message.caption || \"\");\n if (trimmed === trigger || repText.includes(trigger)) {\n isTriggered = true;\n const repRes = await query(\n \"SELECT id FROM messages_index WHERE chat_id = ? AND message_id = ? LIMIT 1\",\n [chatId, msg.reply_to_message.message_id],\n );\n if (repRes.rows[0]?.id) targetRecordId = Number(repRes.rows[0].id);\n }\n }\n\n if (!isTriggered || !targetRecordId) return;\n\n const users = await fetchActiveUsers();\n if (!users.length) {\n return sendMessage(\n chatId,\n `⚠️ کلمه «${trigger}» دریافت شد، اما هیچ مخاطب فعالی با شماره در سیستم ثبت نیست.`,\n {\n reply_to_message_id: msg.message_id,\n message_thread_id: threadId || undefined,\n },\n );\n }\n\n const ttl = Number(settings.prompt_ttl_minutes || \"30\");\n const sent = await sendMessage(\n chatId,\n `📋 پیامک به کدام مخاطبان ارسال شود؟\\nمخاطب(ها) را تیک بزنید و «ارسال پیامک» را بزنید.\\n⏱ در صورت بی‌پاسخ ماندن، پس از ${ttl} دقیقه حذف می‌شود.`,\n {\n reply_to_message_id: msg.message_id,\n message_thread_id: threadId || undefined,\n reply_markup: buildRecipientKeyboard(targetRecordId, users, [], 0),\n },\n );\n\n const promptId = sent?.result?.message_id;\n if (!promptId) return;\n\n await query(\n `INSERT INTO pending_prompts (chat_id, message_id, thread_id, record_id, selected, page, expires_at)\n VALUES (?, ?, ?, ?, '[]', 0, datetime('now', '+' || ? || ' minutes'))\n ON CONFLICT(chat_id, message_id) DO UPDATE SET selected='[]', page=0;`,\n [chatId, promptId, threadId, targetRecordId, ttl],\n );\n}\n\n// ==========================================\n// ۹. آمار\n// ==========================================\nasync function collectStats() {\n const one = async (sql: string, args: any[] = []) =>\n Number((await query(sql, args)).rows[0]?.c || 0);\n\n return {\n totalMessages: await one(\"SELECT COUNT(*) c FROM messages_index\"),\n usersWithPhone: await one(\n \"SELECT COUNT(*) c FROM users WHERE phone IS NOT NULL AND phone != ''\",\n ),\n activeUsers: await one(\n \"SELECT COUNT(*) c FROM users WHERE phone != '' AND is_active = 1\",\n ),\n connectedGroups: await one(\"SELECT COUNT(DISTINCT chat_id) c FROM messages_index\"),\n smsToday: await one(\"SELECT COUNT(*) c FROM sms_logs WHERE date(created_at)=date('now')\"),\n smsOkToday: await one(\n \"SELECT COUNT(*) c FROM sms_logs WHERE status='ok' AND date(created_at)=date('now')\",\n ),\n smsFailedToday: await one(\n \"SELECT COUNT(*) c FROM sms_logs WHERE status='failed' AND date(created_at)=date('now')\",\n ),\n smsTotal: await one(\"SELECT COUNT(*) c FROM sms_logs\"),\n smsParts: await one(\"SELECT COALESCE(SUM(parts),0) c FROM sms_logs WHERE status='ok'\"),\n pendingPrompts: await one(\"SELECT COUNT(*) c FROM pending_prompts\"),\n };\n}\n\n// ==========================================\n// ۱۰. APIهای پنل مدیریت (همه محافظت‌شده)\n// ==========================================\nconst json = (data: any, status = 200) =>\n Response.json(data, {\n status,\n headers: { \"Cache-Control\": \"no-store\" },\n });\n\nfunction csv(rows: any[], filename: string) {\n if (!rows.length) return new Response(\"\\uFEFF\", { status: 200 });\n const cols = Object.keys(rows[0]);\n const esc = (v: any) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`;\n const body = \"\\uFEFF\" + cols.join(\",\") + \"\\n\" +\n rows.map((r) => cols.map((c) => esc(r[c])).join(\",\")).join(\"\\n\");\n return new Response(body, {\n headers: {\n \"Content-Type\": \"text/csv; charset=utf-8\",\n \"Content-Disposition\": `attachment; filename=\"${filename}\"`,\n },\n });\n}\n\nasync function handleApi(req: Request, url: URL): Promise {\n const path = url.pathname;\n\n if (path === \"/api/health\") {\n return json({ ok: true, time: new Date().toISOString(), db: dbReady });\n }\n\n // احراز هویت اجباری برای بقیه مسیرها\n const auth = await authenticate(req, url);\n if (!auth) {\n return json(\n { error: \"دسترسی غیرمجاز. این پنل فقط از طریق مینی‌اپ تلگرام و برای ادمین‌ها باز می‌شود.\" },\n 401,\n );\n }\n\n if (path === \"/api/me\") {\n return json({ tg_id: auth.tgId, is_super: auth.isSuper, via: auth.via });\n }\n\n if (path === \"/api/stats\") return json(await collectStats());\n\n // ---- مخاطبان ----\n if (path === \"/api/users\") {\n if (req.method === \"GET\") {\n const res = await query(\"SELECT * FROM users ORDER BY id DESC\");\n return json(res.rows);\n }\n if (req.method === \"POST\") {\n const b = await req.json();\n const phone = normalizeIranianPhone(b.phone || \"\");\n if (!b.tg_id || !phone) return json({ error: \"آیدی عددی و شماره الزامی است\" }, 400);\n if (!isValidIranianMobile(phone)) return json({ error: \"شماره معتبر نیست\" }, 400);\n await query(\n `INSERT INTO users (tg_id, first_name, username, phone, note, is_active, updated_at)\n VALUES (?, ?, ?, ?, ?, 1, CURRENT_TIMESTAMP)\n ON CONFLICT(tg_id) DO UPDATE SET\n phone = excluded.phone,\n first_name = COALESCE(NULLIF(excluded.first_name,''), users.first_name),\n username = COALESCE(NULLIF(excluded.username,''), users.username),\n note = COALESCE(NULLIF(excluded.note,''), users.note),\n updated_at = CURRENT_TIMESTAMP;`,\n [\n Number(b.tg_id),\n b.first_name || \"ثبت دستی\",\n b.username || \"\",\n phone,\n b.note || \"\",\n ],\n );\n await audit(auth.tgId, \"user_upsert\", `${b.tg_id} / ${phone}`);\n return json({ success: true });\n }\n if (req.method === \"PATCH\") {\n const b = await req.json();\n await query(\"UPDATE users SET is_active = ? WHERE tg_id = ?\", [\n b.is_active ? 1 : 0,\n Number(b.tg_id),\n ]);\n return json({ success: true });\n }\n if (req.method === \"DELETE\") {\n const tgId = Number(url.searchParams.get(\"tg_id\"));\n await query(\"DELETE FROM users WHERE tg_id = ?\", [tgId]);\n await audit(auth.tgId, \"user_delete\", String(tgId));\n return json({ success: true });\n }\n }\n\n // ---- گروه‌ها ----\n if (path === \"/api/groups\") {\n if (req.method === \"GET\") {\n const res = await query(\n `SELECT c.chat_id, c.title, c.enabled,\n (SELECT COUNT(*) FROM messages_index m WHERE m.chat_id = c.chat_id) AS msg_count\n FROM allowed_chats c ORDER BY c.id DESC`,\n );\n return json(res.rows);\n }\n if (req.method === \"PATCH\") {\n const b = await req.json();\n await query(\"UPDATE allowed_chats SET enabled = ? WHERE chat_id = ?\", [\n b.enabled ? 1 : 0,\n Number(b.chat_id),\n ]);\n return json({ success: true });\n }\n }\n\n // ---- برچسب‌ها ----\n if (path === \"/api/tags\") {\n if (req.method === \"GET\") {\n return json((await query(\"SELECT * FROM predefined_tags ORDER BY id DESC\")).rows);\n }\n if (req.method === \"POST\") {\n const { name } = await req.json();\n const clean = String(name || \"\").replace(/^#/, \"\").trim();\n if (!clean) return json({ error: \"نام برچسب الزامی است\" }, 400);\n await query(\"INSERT OR IGNORE INTO predefined_tags (name) VALUES (?)\", [clean]);\n return json({ success: true, name: clean });\n }\n if (req.method === \"DELETE\") {\n await query(\"DELETE FROM predefined_tags WHERE id = ?\", [\n Number(url.searchParams.get(\"id\")),\n ]);\n return json({ success: true });\n }\n }\n\n // ---- جستجو ----\n if (path === \"/api/search\") {\n const q = url.searchParams.get(\"q\") || \"\";\n const chatId = url.searchParams.get(\"chat_id\");\n const tag = url.searchParams.get(\"tag\");\n const page = Math.max(0, Number(url.searchParams.get(\"page\") || \"0\"));\n const size = Math.min(100, Number(url.searchParams.get(\"size\") || \"25\"));\n\n let sql = \"SELECT * FROM messages_index WHERE 1=1\";\n const args: any[] = [];\n if (q) {\n sql += \" AND (text LIKE ? OR sender_name LIKE ?)\";\n args.push(`%${q}%`, `%${q}%`);\n }\n if (chatId) {\n sql += \" AND chat_id = ?\";\n args.push(Number(chatId));\n }\n if (tag) {\n sql += \" AND tag = ?\";\n args.push(tag);\n }\n sql += \" ORDER BY id DESC LIMIT ? OFFSET ?\";\n args.push(size, page * size);\n return json((await query(sql, args)).rows);\n }\n\n // ---- گزارش پیامک‌ها ----\n if (path === \"/api/logs\") {\n const status = url.searchParams.get(\"status\") || \"\";\n const page = Math.max(0, Number(url.searchParams.get(\"page\") || \"0\"));\n let sql = \"SELECT * FROM sms_logs WHERE 1=1\";\n const args: any[] = [];\n if (status) {\n sql += \" AND status = ?\";\n args.push(status);\n }\n sql += \" ORDER BY id DESC LIMIT 50 OFFSET ?\";\n args.push(page * 50);\n return json((await query(sql, args)).rows);\n }\n\n if (path === \"/api/logs/retry\" && req.method === \"POST\") {\n const id = Number(url.searchParams.get(\"id\"));\n const res = await query(\"SELECT * FROM sms_logs WHERE id = ? LIMIT 1\", [id]);\n const log = res.rows[0];\n if (!log) return json({ error: \"لاگ یافت نشد\" }, 404);\n const out = await dispatchSms({\n phone: log.phone,\n text: log.text,\n targetTgId: log.target_tg_id,\n targetName: log.target_name,\n actorId: auth.tgId,\n actorName: \"پنل\",\n recordId: log.record_id,\n chatId: log.chat_id,\n chatTitle: log.chat_title,\n source: \"retry\",\n });\n return json({ ok: out.ok, error: out.errorDescription, body: out.body });\n }\n\n // ---- ارسال گروهی از پنل ----\n if (path === \"/api/broadcast\" && req.method === \"POST\") {\n const b = await req.json();\n const text = String(b.text || \"\").trim();\n if (!text) return json({ error: \"متن پیامک الزامی است\" }, 400);\n\n let targets: any[] = [];\n if (b.mode === \"all\") {\n targets = await fetchActiveUsers();\n } else if (b.mode === \"chat\" && b.chat_id) {\n const res = await query(\n `SELECT DISTINCT u.tg_id, u.first_name, u.last_name, u.phone\n FROM topic_members tm JOIN users u ON u.tg_id = tm.tg_id\n WHERE tm.chat_id = ? AND u.is_active = 1 AND u.phone != ''`,\n [Number(b.chat_id)],\n );\n targets = res.rows;\n } else if (Array.isArray(b.ids) && b.ids.length) {\n const all = await fetchActiveUsers();\n const set = b.ids.map(Number);\n targets = all.filter((u: any) => set.includes(Number(u.tg_id)));\n }\n\n if (!targets.length) return json({ error: \"مخاطبی برای ارسال یافت نشد\" }, 400);\n if (targets.length > MAX_BROADCAST) {\n return json({ error: `حداکثر ${MAX_BROADCAST} مخاطب در هر ارسال` }, 400);\n }\n\n const settings = await getSettings();\n const finalText = settings.sms_signature\n ? `${text}\\n${settings.sms_signature}`\n : text;\n\n const results = await runWithConcurrency(targets, SMS_CONCURRENCY, (u: any) =>\n dispatchSms({\n phone: u.phone,\n text: finalText,\n targetTgId: Number(u.tg_id),\n targetName: displayName(u),\n actorId: auth.tgId,\n actorName: \"پنل مدیریت\",\n source: \"broadcast\",\n }).then((r) => ({ name: displayName(u), phone: u.phone, ...r })));\n\n await audit(auth.tgId, \"broadcast\", `count=${targets.length}`);\n return json({\n total: results.length,\n ok: results.filter((r: any) => r.ok).length,\n failed: results.filter((r: any) => !r.ok).map((r: any) => ({\n name: r.name,\n phone: r.phone,\n error: r.errorDescription,\n })),\n parts: smsPartCount(finalText),\n });\n }\n\n // ---- تنظیمات ----\n if (path === \"/api/settings\") {\n if (req.method === \"GET\") return json(await getSettings(true));\n if (req.method === \"POST\") {\n const b = await req.json();\n for (const [k, v] of Object.entries(b)) {\n if (k in DEFAULT_SETTINGS) await setSetting(k, String(v));\n }\n await audit(auth.tgId, \"settings_update\", JSON.stringify(b).slice(0, 300));\n return json({ success: true, settings: await getSettings(true) });\n }\n }\n\n // ---- ادمین‌ها ----\n if (path === \"/api/admins\") {\n if (req.method === \"GET\") {\n const res = await query(\"SELECT * FROM admins ORDER BY id DESC\");\n return json({ super_admin: ADMIN_ID, list: res.rows });\n }\n if (!auth.isSuper) return json({ error: \"فقط سوپر ادمین\" }, 403);\n if (req.method === \"POST\") {\n const b = await req.json();\n if (!b.tg_id) return json({ error: \"آیدی الزامی است\" }, 400);\n await query(\n \"INSERT OR IGNORE INTO admins (tg_id, title, added_by) VALUES (?, ?, ?)\",\n [Number(b.tg_id), b.title || \"\", auth.tgId],\n );\n return json({ success: true });\n }\n if (req.method === \"DELETE\") {\n const id = Number(url.searchParams.get(\"tg_id\"));\n if (id === ADMIN_ID) return json({ error: \"سوپر ادمین قابل حذف نیست\" }, 400);\n await query(\"DELETE FROM admins WHERE tg_id = ?\", [id]);\n return json({ success: true });\n }\n }\n\n // ---- خروجی CSV ----\n if (path === \"/api/export/users\") {\n return csv((await query(\"SELECT * FROM users ORDER BY id DESC\")).rows, \"users.csv\");\n }\n if (path === \"/api/export/logs\") {\n return csv(\n (await query(\"SELECT * FROM sms_logs ORDER BY id DESC LIMIT 5000\")).rows,\n \"sms_logs.csv\",\n );\n }\n\n // ---- ابزارها ----\n if (path === \"/api/cron\" && req.method === \"POST\") {\n await cleanupExpired();\n return json({ success: true });\n }\n\n if (path === \"/api/setup-webhook\" && req.method === \"POST\") {\n if (!auth.isSuper) return json({ error: \"فقط سوپر ادمین\" }, 403);\n const res = await callTelegram(\"setWebhook\", {\n url: `${url.origin}/`,\n secret_token: WEBHOOK_SECRET || undefined,\n allowed_updates: [\"message\", \"edited_message\", \"callback_query\"],\n drop_pending_updates: true,\n });\n return json(res);\n }\n\n if (path === \"/api/audit\") {\n return json((await query(\"SELECT * FROM audit_log ORDER BY id DESC LIMIT 100\")).rows);\n }\n\n return json({ error: \"Not Found\" }, 404);\n}\n\n// ==========================================\n// ۱۱. مینی‌اپ پنل مدیریت\n// ==========================================\nfunction getMiniAppHtml(): string {\n return `\n\n\n\n\nپنل مدیریت پیامک همایس\n\n\n\n\n\n\n

\n\n

سامانه اطلاع‌رسانی پیامکی همایس

پنل مدیریت سرورلس — در حال احراز هویت...

\n\n

دسترسی غیرمجاز

این پنل تنها برای ادمین‌ها و از طریق باز کردن مینی‌اپ داخل تلگرام قابل استفاده است.

\n\n

\n \n \n \n \n

\n \n \n \n

\n\n \n

آخرین ارسال‌ها

در حال بارگذاری...

\n\n \n

➕ ثبت / ویرایش دستی مخاطب

\n \n \n \n \n

\n \n

لیست مخاطبان

\n \n \n

\n\n \n

\n \n

\n \n \n

\n \n

\n\n \n

افزودن برچسب

\n \n \n

\n\n \n

📣 ارسال پیامک گروهی

\n \n

۰ کاراکتر — ۱ بخش پیامک

\n \n \n

\n \n

\n\n \n

\n \n \n

\n \n

\n\n \n

تنظیمات عمومی

\n کلمه فعال‌ساز\n \n سقف روزانه ارسال هر کاربر (۰ = بی‌نهایت)\n \n امضای انتهای پیامک\n \n مدت انقضای منوی انتخاب (دقیقه)\n \n حداکثر طول متن پیامک\n \n

\n فقط گروه‌های تاییدشده فعال باشند\n حذف پیام اصلی پس از ارسال موفق\n ایندکس تمام پیام‌های گروه برای جستجو\n

\n \n

\n\n

گروه‌های ثبت‌شده

\n\n

ادمین‌ها

\n \n \n

\n\n

ابزارها

\n \n \n

\n\n\n\n`;\n}\n\n// ==========================================\n// ۱۲. ورودی اصلی سرورلس\n// ==========================================\nexport default async function (req: Request): Promise {\n await initDatabase();\n const url = new URL(req.url);\n\n if (url.pathname.startsWith(\"/api/\")) {\n try {\n return await handleApi(req, url);\n } catch (e: any) {\n console.error(\"API error:\", e);\n return json({ error: e?.message || \"خطای داخلی سرور\" }, 500);\n }\n }\n\n if (url.pathname === \"/admin\" || url.pathname === \"/miniapp\") {\n return new Response(getMiniAppHtml(), {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"no-store\",\n },\n });\n }\n\n if (req.method === \"POST\") {\n // اعتبارسنجی وب‌هوک با secret_token تلگرام\n if (\n WEBHOOK_SECRET &&\n req.headers.get(\"x-telegram-bot-api-secret-token\") !== WEBHOOK_SECRET\n ) {\n return new Response(\"Forbidden\", { status: 403 });\n }\n try {\n const update = await req.json();\n await handleTelegramUpdate(update);\n } catch (e) {\n console.error(\"Update error:\", e);\n }\n // همیشه 200 تا تلگرام آپدیت را دوباره نفرستد\n return new Response(\"OK\", { status: 200 });\n }\n\n return new Response(\n \"✅ ربات تلگرام و سامانه پیامک همایس فعال است.\\nپنل مدیریت: /admin (فقط ادمین‌ها)\",\n { headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } },\n );\n}","deleted","label",[113],"528a90e5-abf9-421d-a43f-4b3d4662fb8b","main.ts","c25f9f7e-ab76-11f1-b36a-1607ee4eb77e",15,["D",1788872982278],12,"import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\n// ==========================================\n// ۱. تنظیمات امن\n// ==========================================\nconst getEnv = (key: string, fallback = \"\") =>\n Deno.env.get(key) ||\n (typeof process !== \"undefined\" ? process.env[key] : undefined) || fallback;\n\nconst ADMIN_ID = Number(getEnv(\"ADMIN_ID\"));\n\nconst HOMAIS_CONFIG = {\n username: \"fr41160\",\n password: getEnv(\"HOMAIS_PASSWORD\"),\n portalCode: \"10003692\",\n serverType: \"100\",\n};\n\nconst TELEGRAM_TOKEN = getEnv(\"TELEGRAM_TOKEN\");\nconst TG_API = `https://api.telegram.org/bot${TELEGRAM_TOKEN}`;\nconst SINGLE_EMOJI_REGEX =\n /^(\\p{Extended_Pictographic}|\\p{Emoji_Presentation})$/u;\n\nif (!TELEGRAM_TOKEN) {\n console.warn(\"⚠️ متغیر TELEGRAM_TOKEN ست نشده است.\");\n}\n\n// ==========================================\n// ۲. دیتابیس SQLite\n// ==========================================\nasync function query(sql: string, args: any[] = []) {\n const res = await sqlite.execute({ sql, args });\n const rows = (res.rows || []).map((row: any) => {\n if (!Array.isArray(row)) return row;\n const obj: Record = {};\n (res.columns || []).forEach((col: string, idx: number) => {\n obj[col] = row[idx];\n });\n return obj;\n });\n return {\n rows,\n lastInsertRowid: res.lastInsertRowid,\n rowsAffected: res.rowsAffected,\n };\n}\n\nasync function initDatabase() {\n await query(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n tg_id INTEGER UNIQUE,\n first_name TEXT,\n username TEXT,\n phone TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS topic_members (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n thread_id INTEGER DEFAULT 0,\n tg_id INTEGER,\n last_active DATETIME DEFAULT CURRENT_TIMESTAMP,\n UNIQUE(chat_id, thread_id, tg_id)\n );\n `);\n await query(`\n CREATE TABLE IF NOT EXISTS messages_index (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n chat_title TEXT,\n message_thread_id INTEGER DEFAULT 0,\n message_id INTEGER,\n sender_id INTEGER,\n sender_name TEXT,\n text TEXT,\n has_media INTEGER DEFAULT 0,\n tag TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n // جدول مدیریت پیام‌های منقضی‌شونده بعد از ۳۰ دقیقه\n await query(`\n CREATE TABLE IF NOT EXISTS pending_prompts (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n chat_id INTEGER,\n message_id INTEGER,\n expires_at DATETIME\n );\n `);\n}\n\n// ==========================================\n// ۳. درایور پیامک همایس + تحلیل خطا\n// ==========================================\nfunction normalizeIranianPhone(rawPhone: string): string {\n let cleaned = rawPhone.replace(/[^0-9]/g, \"\");\n if (cleaned.startsWith(\"98\")) {\n cleaned = \"0\" + cleaned.substring(2);\n } else if (cleaned.startsWith(\"9\") && cleaned.length === 10) {\n cleaned = \"0\" + cleaned;\n }\n return cleaned;\n}\n\nfunction explainHomaisError(raw: string): string {\n const trimmed = raw.trim();\n const code = parseInt(trimmed, 10);\n if (!isNaN(code)) {\n switch (code) {\n case -1:\n case 101:\n return \"نام کاربری یا رمز عبور پنل همایس نامعتبر است.\";\n case -2:\n case 102:\n return \"شارژ (اعتبار ریالی) پنل همایس به اتمام رسیده است.\";\n case -3:\n case 103:\n return \"پورتال‌کد یا نوع سرور ارسال‌کننده نامعتبر است.\";\n case -4:\n case 104:\n return \"شماره گیرنده نامعتبر است یا در بلک‌لیست تبلیغاتی مخابرات قرار دارد.\";\n case -5:\n case 105:\n return \"متن پیامک خالی یا شامل عبارات غیرمجاز است.\";\n default:\n return `خطای سرور همایس با کد: ${code}`;\n }\n }\n return raw || \"خطای ارتباط با سرور سامانه پیامک همایس\";\n}\n\nasync function sendHomaisSms(mobile: string, text: string) {\n if (!HOMAIS_CONFIG.username || !HOMAIS_CONFIG.password) {\n return {\n status: 500,\n ok: false,\n body: \"نام کاربری یا پسورد پنل همایس در متغیرها تنظیم نشده است.\",\n errorDescription: \"تنظیمات پنل همایس در سرور کامل نیست.\",\n };\n }\n\n const targetMobile = normalizeIranianPhone(mobile);\n if (targetMobile.length !== 11 || !targetMobile.startsWith(\"09\")) {\n return {\n status: 400,\n ok: false,\n body: `شماره ${mobile} غیراستاندارد است.`,\n errorDescription:\n \"فرمت شماره تلفن همراه اشتباه است (باید ۱۱ رقم با 09 باشد).\",\n };\n }\n\n const params = new URLSearchParams({\n username: HOMAIS_CONFIG.username,\n password: HOMAIS_CONFIG.password,\n PortalCode: HOMAIS_CONFIG.portalCode,\n mobile: targetMobile,\n message: text,\n ServerType: HOMAIS_CONFIG.serverType,\n });\n\n const url =\n `http://api.homais.com/services/messaging/sms/api/sendMessage/direct/?${params.toString()}`;\n\n try {\n const res = await fetch(url, { method: \"GET\" });\n const rawText = (await res.text()).trim();\n\n // همایس در صورت موفقیت معمولاً کد پیگیری عددی مثبت بازمی‌گرداند\n const isError = !res.ok ||\n rawText.toLowerCase().includes(\"error\") ||\n rawText.startsWith(\"-\");\n\n return {\n status: res.status,\n ok: !isError,\n body: rawText,\n errorDescription: isError ? explainHomaisError(rawText) : \"\",\n };\n } catch (err: any) {\n return {\n status: 0,\n ok: false,\n body: err.message,\n errorDescription: `عدم برقراری ارتباط با وب‌سرویس همایس: ${err.message}`,\n };\n }\n}\n\n// ==========================================\n// ۴. ارتباط با تلگرام و مدیریت تایمر ۳۰ دقیقه\n// ==========================================\nasync function callTelegram(method: string, payload: any) {\n if (!TELEGRAM_TOKEN) return null;\n try {\n const res = await fetch(`${TG_API}/${method}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(payload),\n });\n return await res.json();\n } catch (err) {\n console.error(`Telegram API Error [${method}]:`, err);\n return null;\n }\n}\n\nasync function sendMessage(chatId: number, text: string, extra: any = {}) {\n return callTelegram(\"sendMessage\", { chat_id: chatId, text, ...extra });\n}\n\nasync function answerCallbackQuery(\n callbackQueryId: string,\n text = \"\",\n showAlert = false,\n) {\n return callTelegram(\"answerCallbackQuery\", {\n callback_query_id: callbackQueryId,\n text,\n show_alert: showAlert,\n });\n}\n\nasync function editMessageText(\n chatId: number,\n messageId: number,\n text: string,\n extra: any = {},\n) {\n return callTelegram(\"editMessageText\", {\n chat_id: chatId,\n message_id: messageId,\n text,\n ...extra,\n });\n}\n\nasync function deleteMessage(chatId: number, messageId: number) {\n return callTelegram(\"deleteMessage\", {\n chat_id: chatId,\n message_id: messageId,\n });\n}\n\nasync function getChatMember(chatId: number, userId: number) {\n const res = await callTelegram(\"getChatMember\", {\n chat_id: chatId,\n user_id: userId,\n });\n return res?.result;\n}\n\nfunction escapeHtml(str: string): string {\n return str\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\n// پاک‌سازی پیام‌هایی که بیش از ۳۰ دقیقه مانده‌اند\nasync function cleanupExpiredPrompts() {\n try {\n const res = await query(\n \"SELECT id, chat_id, message_id FROM pending_prompts WHERE expires_at <= CURRENT_TIMESTAMP\",\n );\n for (const row of res.rows) {\n await deleteMessage(row.chat_id, row.message_id).catch(() => {});\n await query(\"DELETE FROM pending_prompts WHERE id = ?\", [row.id]);\n }\n } catch (e) {\n console.error(\"Cleanup error:\", e);\n }\n}\n\n// ==========================================\n// ۵. هندلر آپدیت‌های تلگرام\n// ==========================================\nasync function handleTelegramUpdate(update: any) {\n await cleanupExpiredPrompts();\n\n // ۱. کلیک دکمه‌های شیشه‌ای\n if (update.callback_query) {\n const { id, data, from, message } = update.callback_query;\n if (!data) return;\n\n const [action, targetRecordId, extraParam] = data.split(\":\");\n const recordId = Number(targetRecordId);\n\n // ۱-۱. انتخاب شماره برای ارسال SMS\n if (action === \"send_to_user\") {\n const targetTgId = Number(extraParam);\n\n const msgRes = await query(\n \"SELECT * FROM messages_index WHERE id = ? LIMIT 1\",\n [recordId],\n );\n const msgRecord = msgRes.rows[0];\n\n if (!msgRecord) {\n return answerCallbackQuery(id, \"پیام اولیه یافت نشد.\", true);\n }\n\n let canDispatch = from.id === msgRecord.sender_id || from.id === ADMIN_ID;\n if (!canDispatch) {\n const member = await getChatMember(msgRecord.chat_id, from.id);\n canDispatch = [\"creator\", \"administrator\"].includes(member?.status);\n }\n if (!canDispatch) {\n return answerCallbackQuery(\n id,\n \"⛔️ فقط فرستنده پیام یا مدیر گروه مجاز به اقدام هستند.\",\n true,\n );\n }\n\n const userRes = await query(\n \"SELECT first_name, phone FROM users WHERE tg_id = ? LIMIT 1\",\n [targetTgId],\n );\n const targetUser = userRes.rows[0];\n\n if (!targetUser || !targetUser.phone) {\n return answerCallbackQuery(id, \"شماره تماس یافت نشد.\", true);\n }\n\n let cleanedText = msgRecord.text.replace(/پپپ/g, \"\").trim();\n if (!cleanedText) cleanedText = \"(بدون متن)\";\n\n const finalSmsText = `ارسال‌کننده: ${msgRecord.sender_name}\\n${cleanedText}`;\n\n await answerCallbackQuery(id, \"⏳ در حال ارسال پیامک به همایس...\");\n const smsRes = await sendHomaisSms(targetUser.phone, finalSmsText);\n\n // حذف از جدول انقضای ۳۰ دقیقه\n await query(\n \"DELETE FROM pending_prompts WHERE chat_id = ? AND message_id = ?\",\n [message.chat.id, message.message_id],\n );\n\n if (smsRes.ok) {\n // حذف پیام اصلی حاوی پپپ\n await deleteMessage(msgRecord.chat_id, msgRecord.message_id).catch(\n () => {},\n );\n\n const senderName = escapeHtml(msgRecord.sender_name || \"نامشخص\");\n const receiverName = escapeHtml(\n `${targetUser.first_name || \"کاربر\"} (${targetUser.phone})`,\n );\n const safeContent = escapeHtml(cleanedText);\n\n const confirmationMessage =\n `📩 ارسال پیامک موفق از طرف ${senderName} به ${receiverName}\\n\\n` +\n `

${safeContent}

`;\n\n await editMessageText(\n message.chat.id,\n message.message_id,\n confirmationMessage,\n { parse_mode: \"HTML\" },\n );\n } else {\n // 🔴 گزارش دقیق علت خطا\n const errorDetail = smsRes.errorDescription || smsRes.body;\n await answerCallbackQuery(\n id,\n `❌ خطا: ${errorDetail}`,\n true, // نمایش در قالب آلرت پاپ‌آپ\n );\n\n await editMessageText(\n message.chat.id,\n message.message_id,\n `❌ ارسال پیامک با خطا مواجه شد:\\n\\n` +\n `⚠️ علت: ${escapeHtml(errorDetail)}\\n` +\n `📌 پاسخ سرور همایس: ${\n escapeHtml(smsRes.body || \"نامشخص\")\n }\\n` +\n `📱 شماره مقصد: ${targetUser.phone}`,\n { parse_mode: \"HTML\" },\n );\n }\n return;\n }\n\n // ۱-۲. کلیک روی انصراف\n if (action === \"dismiss\") {\n await query(\n \"DELETE FROM pending_prompts WHERE chat_id = ? AND message_id = ?\",\n [message.chat.id, message.message_id],\n );\n await deleteMessage(message.chat.id, message.message_id);\n await answerCallbackQuery(id, \"لغو شد.\");\n return;\n }\n\n return;\n }\n\n // ۲. مدیریت پیام‌های دریافتی و ویرایش‌شده\n const msg = update.message || update.edited_message;\n if (!msg) return;\n\n const chatId = msg.chat.id;\n\n // ۲-۱. پیام خصوصی (ثبت شماره)\n if (msg.chat.type === \"private\") {\n if (msg.text === \"/start\") {\n const userRes = await query(\n \"SELECT phone FROM users WHERE tg_id = ? LIMIT 1\",\n [msg.from.id],\n );\n if (userRes.rows[0]?.phone) {\n return sendMessage(\n chatId,\n `سلام ${msg.from.first_name}!\\nشماره شما (${\n userRes.rows[0].phone\n }) در سیستم ثبت است.`,\n );\n }\n return sendMessage(\n chatId,\n `سلام ${msg.from.first_name}!\\nبرای ثبت شماره خود، دکمه زیر را لمس کنید:`,\n {\n reply_markup: {\n keyboard: [[{\n text: \"📱 اشتراک‌گذاری شماره تماس\",\n request_contact: true,\n }]],\n resize_keyboard: true,\n one_time_keyboard: true,\n },\n },\n );\n }\n\n if (msg.contact) {\n if (msg.contact.user_id !== msg.from.id) {\n return sendMessage(\n chatId,\n \"❌ لطفاً شماره متعلق به اکانت خودتان را ارسال کنید.\",\n );\n }\n await query(\n `INSERT INTO users (tg_id, first_name, username, phone) \n VALUES (?, ?, ?, ?)\n ON CONFLICT(tg_id) DO UPDATE SET phone = excluded.phone, first_name = excluded.first_name, username = excluded.username;`,\n [\n msg.from.id,\n msg.from.first_name,\n msg.from.username || \"\",\n msg.contact.phone_number,\n ],\n );\n return sendMessage(\n chatId,\n \"✅ شماره شما در سامانه ثبت گردید.\",\n { reply_markup: { remove_keyboard: true } },\n );\n }\n return;\n }\n\n // ۲-۲. پیام داخل گروه\n if ([\"group\", \"supergroup\"].includes(msg.chat.type)) {\n if (msg.new_chat_members || msg.left_chat_member || msg.pinned_message) {\n return;\n }\n\n const groupTitle = msg.chat.title || \"گروه\";\n const hasMedia = Boolean(msg.photo || msg.video || msg.document);\n let trimmed = (msg.text || msg.caption || \"\").trim();\n\n if (hasMedia && !trimmed) {\n trimmed = `یک رسانه در گروه ${groupTitle} بارگذاری شد.`;\n }\n\n const threadId = msg.message_thread_id || 0;\n const userId = msg.from.id;\n\n await query(\n `INSERT INTO topic_members (chat_id, thread_id, tg_id) VALUES (?, ?, ?)\n ON CONFLICT(chat_id, thread_id, tg_id) DO UPDATE SET last_active = CURRENT_TIMESTAMP;`,\n [chatId, threadId, userId],\n );\n\n let targetRecordId: number;\n const existingMsg = await query(\n \"SELECT id FROM messages_index WHERE chat_id = ? AND message_id = ? LIMIT 1\",\n [chatId, msg.message_id],\n );\n\n if (existingMsg.rows[0]?.id) {\n targetRecordId = existingMsg.rows[0].id;\n await query(\n \"UPDATE messages_index SET text = ?, has_media = ? WHERE id = ?\",\n [trimmed, hasMedia ? 1 : 0, targetRecordId],\n );\n } else {\n const insRes = await query(\n `INSERT INTO messages_index (chat_id, chat_title, message_thread_id, message_id, sender_id, sender_name, text, has_media)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?) RETURNING id;`,\n [\n chatId,\n groupTitle,\n threadId,\n msg.message_id,\n userId,\n `${msg.from.first_name || \"\"} ${msg.from.last_name || \"\"}`.trim(),\n trimmed,\n hasMedia ? 1 : 0,\n ],\n );\n targetRecordId = insRes.rows[0]?.id || insRes.lastInsertRowid;\n }\n\n let isPPP = trimmed.includes(\"پپپ\");\n\n if (!isPPP && msg.reply_to_message) {\n const repText = msg.reply_to_message.text ||\n msg.reply_to_message.caption || \"\";\n if (repText.includes(\"پپپ\") || trimmed === \"پپپ\") {\n isPPP = true;\n const repRes = await query(\n \"SELECT id FROM messages_index WHERE chat_id = ? AND message_id = ? LIMIT 1\",\n [chatId, msg.reply_to_message.message_id],\n );\n if (repRes.rows[0]?.id) {\n targetRecordId = repRes.rows[0].id;\n }\n }\n }\n\n // اگر پپپ نداشت، کاری انجام نمی‌شود\n if (!isPPP) {\n return;\n }\n\n const usersRes = await query(\n \"SELECT tg_id, first_name, phone FROM users WHERE phone IS NOT NULL AND phone != '' ORDER BY id DESC\",\n );\n\n if (usersRes.rows.length === 0) {\n return sendMessage(\n chatId,\n \"⚠️ کلمه «پپپ» دریافت شد، اما شماره‌ای در سیستم ثبت نیست.\",\n {\n reply_to_message_id: msg.message_id,\n message_thread_id: threadId || undefined,\n },\n );\n }\n\n const phoneButtons = usersRes.rows.map((u: any) => [\n {\n text: `📱 ${u.first_name || \"کاربر\"} (${u.phone})`,\n callback_data: `send_to_user:${targetRecordId}:${u.tg_id}`,\n },\n ]);\n\n phoneButtons.push([\n { text: \"❌ انصراف\", callback_data: `dismiss:${targetRecordId}` },\n ]);\n\n const sent = await sendMessage(\n chatId,\n \"📋 پیامک به کدام شماره ارسال شود؟ (در صورت عدم انتخاب، پس از ۳۰ دقیقه حذف می‌شود):\",\n {\n reply_to_message_id: msg.message_id,\n message_thread_id: threadId || undefined,\n reply_markup: { inline_keyboard: phoneButtons },\n },\n );\n\n // ⏱ تنظیم تایمر ۳۰ دقیقه برای پاک شدن خودکار\n if (sent?.result?.message_id) {\n const promptMsgId = sent.result.message_id;\n\n // ذخیره در جدول انقضا\n await query(\n \"INSERT INTO pending_prompts (chat_id, message_id, expires_at) VALUES (?, ?, datetime('now', '+30 minutes'))\",\n [chatId, promptMsgId],\n );\n\n // تایمر در حافظه (برای حذف آنی سر ۳۰ دقیقه در صورت فعال بودن پروسس)\n setTimeout(async () => {\n await deleteMessage(chatId, promptMsgId).catch(() => {});\n await query(\n \"DELETE FROM pending_prompts WHERE chat_id = ? AND message_id = ?\",\n [chatId, promptMsgId],\n );\n }, 30 * 60 * 1000);\n }\n }\n}\n\n// ==========================================\n// ۶. مدیریت API پنل\n// ==========================================\nasync function handleApiRequests(req: Request, url: URL): Promise {\n if (url.pathname === \"/api/users\") {\n if (req.method === \"GET\") {\n const usersList = await query(\"SELECT * FROM users ORDER BY id DESC\");\n return Response.json(usersList.rows);\n }\n if (req.method === \"POST\") {\n const { tg_id, first_name, username, phone } = await req.json();\n if (!tg_id || !phone) {\n return Response.json({ error: \"آیدی و شماره الزامی است\" }, {\n status: 400,\n });\n }\n\n await query(\n `INSERT INTO users (tg_id, first_name, username, phone)\n VALUES (?, ?, ?, ?)\n ON CONFLICT(tg_id) DO UPDATE SET\n phone = excluded.phone,\n first_name = COALESCE(NULLIF(excluded.first_name, ''), users.first_name),\n username = COALESCE(NULLIF(excluded.username, ''), users.username);`,\n [Number(tg_id), first_name || \"ثبت دستی\", username || \"\", phone],\n );\n\n return Response.json({ success: true });\n }\n if (req.method === \"DELETE\") {\n const tgId = Number(url.searchParams.get(\"tg_id\"));\n await query(\"DELETE FROM users WHERE tg_id = ?\", [tgId]);\n return Response.json({ success: true });\n }\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n\n// ==========================================\n// ۷. وب‌اپ پنل ادمین\n// ==========================================\nfunction getMiniAppHtml(): string {\n return `\n\n\n \n \n مدیریت پیامک همایس\n \n \n \n\n\n

پنل مدیریت شماره‌ها

\n \n \n \n \n

\n \n\n`;\n}\n\n// ==========================================\n// ۸. ورودی سرورلس اصلی\n// ==========================================\nexport default async function (req: Request): Promise {\n await initDatabase();\n const url = new URL(req.url);\n\n if (url.pathname.startsWith(\"/api/\")) {\n return handleApiRequests(req, url);\n }\n\n if (url.pathname === \"/admin\" || url.pathname === \"/miniapp\") {\n return new Response(getMiniAppHtml(), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"POST\") {\n try {\n const update = await req.json();\n await handleTelegramUpdate(update);\n return new Response(\"OK\", { status: 200 });\n } catch (e: any) {\n console.error(\"Update Error:\", e);\n return new Response(\"Error\", { status: 500 });\n }\n }\n\n return new Response(\"ربات فعال است.\", {\n headers: { \"Content-Type\": \"text/plain; charset=utf-8\" },\n });\n}",[129],"pulls","branches",1,"forks","envVars",{"_144":146,"_147":42},"connections",{"_144":42,"_145":42},"count","unfilledCount",6,"emptyCount",{"_18":128,"_20":129,"_114":130,"_115":-5,"_116":71,"_117":131,"_118":38,"_22":154,"_68":133,"_121":122,"_123":134,"_125":26,"_126":-5,"_151":155,"_89":156},{"_18":112,"_20":113,"_114":36,"_115":-5,"_116":71,"_117":69,"_118":38,"_22":150,"_68":120,"_121":122,"_123":124,"_125":26,"_126":-5,"_151":152,"_89":153},["D",1789042107397],"children",[],[113],["D",1788872982278],[],[129],["D",1788866198021],["D",1789485645684],{"_16":17,"_87":83},{"_16":17,"_80":81,"_82":83,"_33":34,"_84":85,"_86":26},{"_68":69,"_20":70,"_18":71,"_72":19,"_73":-5,"_74":-5,"_75":-5,"_76":-5,"_77":-5,"_78":21,"_79":17},"ctx",{"_61":-5,"_107":195,"_196":197,"_198":199,"_200":26,"_201":26,"_202":26,"_203":38,"_204":-5,"_205":-7,"_206":-7,"_207":42,"_208":26,"_209":26,"_210":-5,"_211":26,"_212":26,"_213":26,"_214":-5},"ENV",{"_166":167,"_168":169,"_170":70,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]