🤖

ScottHub

Telegram Bot Hosting · Admin Panel

\n \n

\n${body}\n

`;\n}\n\nfunction loginPage(err = \"\"): string {\n return `\n\nLogin · ScottHub\n\n\n`;\n}\n\nfunction statCard(label: string, value: number | string, icon: string): string {\n return `

${icon}

${value}

${label}

`;\n}\n\nfunction statusBadge(s: string): string {\n const cls: Record = {\n running: \"bg-emerald-500/20 text-emerald-300 border-emerald-500/40\",\n stopped: \"bg-slate-600/20 text-slate-300 border-slate-600/40\",\n expired: \"bg-rose-500/20 text-rose-300 border-rose-500/40\",\n };\n return `${esc(s)}`;\n}\n\nasync function getSessionToken(req: Request): Promise {\n const c = req.headers.get(\"cookie\") || \"\";\n const m = c.match(/scotthub_sess=([^;]+)/);\n return m ? decodeURIComponent(m[1]) : null;\n}\nasync function requireAuth(req: Request): Promise {\n const t = await getSessionToken(req);\n if (!t) return false;\n return db.validateSession(t);\n}\nfunction redirectTo(url: string): Response {\n return new Response(null, { status: 302, headers: { Location: url } });\n}\n\nexport async function handlePanel(req: Request, url: URL): Promise {\n const path = url.pathname;\n const baseUrl = await getBaseUrl();\n\n if (path === \"/panel/login\") {\n if (req.method === \"GET\") return new Response(loginPage(), { headers: { \"content-type\": \"text/html\" } });\n if (req.method === \"POST\") {\n const form = await req.formData();\n const u = form.get(\"username\"); const p = form.get(\"password\");\n if (u === PANEL_USER && p === PANEL_PASS) {\n const token = await db.createSession(String(u));\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/panel\",\n \"set-cookie\": `scotthub_sess=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`,\n },\n });\n }\n return new Response(loginPage(\"Invalid credentials\"), { headers: { \"content-type\": \"text/html\" }, status: 401 });\n }\n }\n\n if (path === \"/panel/logout\") {\n const t = await getSessionToken(req);\n if (t) await db.deleteSession(t);\n return new Response(null, { status: 302, headers: { Location: \"/panel/login\", \"set-cookie\": \"scotthub_sess=; Path=/; Max-Age=0\" } });\n }\n\n if (!(await requireAuth(req))) return redirectTo(\"/panel/login\");\n\n // Dashboard\n if (path === \"/panel\" || path === \"/panel/\") {\n const stats = await db.globalStats();\n const projects = await db.listAllProjects();\n const running = projects.filter((p) => p.status === \"running\").length;\n const body = `\n

\n ${statCard(\"Users\", stats.users, \"👤\")}\n ${statCard(\"Projects\", stats.projects, \"📦\")}\n ${statCard(\"Running\", running, \"🟢\")}\n ${statCard(\"Messages\", stats.messages, \"✉️\")}\n

Recent projects

\n \n \n \n \n \n ${projects.slice(0, 30).map((p) => `\n \n \n \n \n \n \n \n `).join(\"\")}\n

ID	Name	Owner	Bot	Status	Expires
#${p.id}	`${esc(p.name)}`	${p.owner_id}	${p.bot_username ? \"@\" + esc(p.bot_username) : \"—\"}	${statusBadge(p.status)}	${fmtDate(p.expires_at)}	Manage →

`;\n return new Response(layout(\"Dashboard\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/projects\") {\n const projects = await db.listAllProjects();\n const body = `\n

All projects (${projects.length})

\n ${projects.length === 0 ? \"

No projects yet.

\" : projects.map((p) => `\n \n

${esc(p.name)} #${p.id}

owner ${p.owner_id} · ${p.bot_username ? \"@\" + esc(p.bot_username) : \"no bot token\"}

${statusBadge(p.status)}\n

${fmtDate(p.expires_at)}

`).join(\"\")}\n

`;\n return new Response(layout(\"Projects\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Project detail\n const projMatch = path.match(/^\\/panel\\/projects\\/(\\d+)$/);\n if (projMatch) {\n const id = Number(projMatch[1]);\n const project = await db.getProjectById(id);\n if (!project) return new Response(\"Not found\", { status: 404 });\n const files = await db.listFiles(id);\n const whUrl = project.webhook_secret ? projectWebhookUrl(baseUrl, id, project.webhook_secret) : \"\";\n\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"setwebhook\" && project.bot_token) {\n const r = await tg.setWebhook(project.bot_token, whUrl);\n await db.updateProject(id, { webhook_url: whUrl, status: \"running\" });\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook SET ✅ Bot ONLINE\" : \"Error: \" + r.description)}`);\n }\n if (action === \"delwebhook\" && project.bot_token) {\n const r = await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook removed\" : \"Error: \" + r.description)}`);\n }\n if (action === \"toggle\") {\n const newStatus = project.status === \"running\" ? \"stopped\" : \"running\";\n await db.updateProject(id, { status: newStatus, stopped_at: newStatus === \"stopped\" ? Math.floor(Date.now() / 1000) : null });\n if (newStatus === \"running\" && project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n else if (newStatus === \"stopped\" && project.bot_token) await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Status → \" + newStatus)}`);\n }\n if (action === \"extend\") {\n const days = Number(form.get(\"days\") || \"2\");\n const base = project.expires_at && project.expires_at > Math.floor(Date.now() / 1000) ? project.expires_at : Math.floor(Date.now() / 1000);\n await db.updateProject(id, { expires_at: base + days * 86400, status: \"running\" });\n if (project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Extended by \" + days + \"d\")}`);\n }\n if (action === \"settoken\") {\n const t = String(form.get(\"token\") || \"\").trim();\n if (t) {\n const me = await tg.getMe(t);\n await db.updateProject(id, { bot_token: t, bot_username: me.ok ? me.result.username : null });\n }\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Token updated\")}`);\n }\n if (action === \"delete\") {\n if (project.bot_token) { try { await tg.deleteWebhook(project.bot_token); } catch {} }\n await db.deleteProject(id);\n return redirectTo(`/panel/projects?msg=${encodeURIComponent(\"Project deleted\")}`);\n }\n }\n\n let whInfo = \"\";\n if (project.bot_token) {\n const info = await tg.getWebhookInfo(project.bot_token);\n whInfo = info.ok\n ? `

${esc(JSON.stringify(info.result, null, 2))}

`\n : `

Error: ${esc(info.description || \"\")}

`;\n }\n\n const msg = url.searchParams.get(\"msg\");\n const now = Math.floor(Date.now() / 1000);\n const remaining = project.expires_at ? project.expires_at - now : 0;\n\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n← all projects\n

${esc(project.name)} #${project.id}

Owner: ${project.owner_id} · Created ${fmtDate(project.created_at)}

\n\n

Bot Info

Status: ${statusBadge(project.status)}

Bot: ${project.bot_username ? \"@\" + esc(project.bot_username) : \"not set\"}

Token: ${project.bot_token ? esc(project.bot_token.slice(0, 10)) + \"…\" : \"not set\"}

Admin id: ${esc(project.admin_id || \"—\")}

Main file: ${esc(project.main_file || \"—\")}

Messages: ${project.message_count}

Expires: ${project.expires_at ? `${fmtDate(project.expires_at)} (${fmtDuration(Math.max(0, remaining))})` : \"—\"}

\n\n

Webhook Router URL

\n ${esc(whUrl)}\n \n

\n\n

Manual Controls

\n \n \n \n

\n\n

Telegram getWebhookInfo

\n ${whInfo || \"

No bot token set.

\"}\n

\n\n

Detected Imports (pip)

\n ${esc(project.detected_imports || \"—\")}\n

\n\n

Files (${files.length})

${files.map((f) => `

${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)}

${f.size}b · ${fmtDate(f.uploaded_at)}

`).join(\"\") || \"

No files.

\"}\n

`;\n return new Response(layout(project.name, body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/events\") {\n const events = await db.recentWebhookEvents(100);\n const body = `\n

Recent webhook events (${events.length})

\n \n \n \n \n ${events.map((e: any) => `\n \n \n \n \n \n `).join(\"\") || \"\"}\n

Time	Project	Dir	Status	Payload
${fmtDate(e.created_at)}	#${e.project_id ?? \"—\"}	${esc(e.direction)}	${e.status_code}	`${esc(String(e.payload \|\| \"\").slice(0, 200))}`
No events yet.

`;\n return new Response(layout(\"Events\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/main-webhook\") {\n const endpoint = `${baseUrl}/bot`;\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"set\") {\n const r = await tg.setWebhook(BOT_TOKEN, endpoint);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Main bot webhook set ✅\" : \"Error: \" + (r.description || \"\"))}`);\n }\n if (action === \"delete\") {\n const r = await tg.deleteWebhook(BOT_TOKEN);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Webhook deleted\" : \"Error: \" + (r.description || \"\"))}`);\n }\n }\n const info = await tg.getWebhookInfo(BOT_TOKEN);\n const me = await tg.getMe(BOT_TOKEN);\n const msg = url.searchParams.get(\"msg\");\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n

Main ScottHub Bot

Bot: ${me.ok ? `@${esc(me.result.username)} (${esc(me.result.first_name)})` : \"token invalid\"}

Webhook endpoint: ${esc(endpoint)}

\n \n

Telegram getWebhookInfo

${esc(JSON.stringify(info, null, 2))}

`;\n return new Response(layout(\"Main Webhook\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n return new Response(\"Panel page not found\", { status: 404 });\n}\n",[19,73],"9643eb4c-3f25-11f1-986f-42b51c65c3df","hosted_webhook.ts","9643ec00-3f25-11f1-986f-42b51c65c3df",13,["D",1776956609241],"// Router for hosted bots\n// Telegram POSTs updates for the hosted bot to /tgwebhook/:projectId/:secret\n// We log the update and simulate basic responses based on parsed Python handlers.\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { hashToken } from \"../lib/utils.ts\";\n\nexport async function handleHostedWebhook(projectId: number, secret: string, body: any): Promise {\n const project = await db.getProjectById(projectId);\n if (!project || project.webhook_secret !== secret) return new Response(\"not found\", { status: 404 });\n\n const tokenHash = project.bot_token ? await hashToken(project.bot_token) : \"none\";\n const now = Math.floor(Date.now() / 1000);\n\n if (project.status !== \"running\" || (project.expires_at && project.expires_at <= now)) {\n await db.logWebhook(projectId, tokenHash, \"dropped\", JSON.stringify(body), 200);\n return new Response(\"ok (not running)\", { status: 200 });\n }\n\n await db.logWebhook(projectId, tokenHash, \"in\", JSON.stringify(body), 200);\n\n const msg = body?.message;\n if (msg && project.bot_token) {\n const chatId = msg.chat.id;\n const text: string = msg.text || \"\";\n\n const mainFile = project.main_file ? await db.getFile(project.id, project.main_file) : null;\n const allFiles = await db.listFiles(project.id);\n\n if (mainFile?.content) {\n const response = executeBotLogic(mainFile.content, allFiles, msg);\n if (response) {\n await tg.sendMessage(project.bot_token, chatId, response);\n return new Response(\"ok\", { status: 200 });\n }\n }\n\n if (text === \"/start\" || text === \"/help\" || text === \"/ping\") {\n const username = project.bot_username ? \"@\" + project.bot_username : \"this bot\";\n await tg.sendMessage(\n project.bot_token, chatId,\n `🤖 ${username} is hosted by ScottHub.\\n\\n` +\n `Project: ${project.name}\\n` +\n `Status: running\\nFiles: ${allFiles.length}\\n\\n` +\n `Running via ScottHub webhook router.`,\n );\n }\n }\n\n const cb = body?.callback_query;\n if (cb && project.bot_token) { try { await tg.answerCallback(project.bot_token, cb.id, \"ok\"); } catch {} }\n\n return new Response(\"ok\", { status: 200 });\n}\n\nfunction executeBotLogic(mainCode: string, allFiles: db.FileRow[], msg: any): string | null {\n const text: string = msg.text || \"\";\n const command = text.split(/\\s+/)[0]?.toLowerCase();\n const handlers = extractCommandHandlers(mainCode);\n for (const f of allFiles) if (f.path.endsWith(\".py\") && !f.is_main) handlers.push(...extractCommandHandlers(f.content));\n for (const h of handlers) if (command === \"/\" + h.command || command === h.command) if (h.replyText) return h.replyText;\n return null;\n}\n\ninterface CommandHandler { command: string; replyText: string | null }\nfunction extractCommandHandlers(code: string): CommandHandler[] {\n const handlers: CommandHandler[] = [];\n const patterns = [\n /commands?\\s*=\\s*\\[['\"](\\w+)['\"]/g,\n /Command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n /filters\\.command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n ];\n for (const pat of patterns) {\n let m;\n while ((m = pat.exec(code)) !== null) {\n const cmd = m[1];\n const nearby = code.slice(m.index, m.index + 600);\n const reply = nearby.match(/(?:reply|reply_text|send_message|answer|bot\\.reply_to)\\s*\\(\\s*[^,)]*,?\\s*[\"']([^\"']+)[\"']/)\n || nearby.match(/(?:reply|reply_text|send_message|answer)\\s*\\(\\s*[\"']([^\"']+)[\"']/);\n handlers.push({ command: cmd, replyText: reply ? reply[1] : null });\n }\n }\n return handlers;\n}\n",[19,80],"3beee0ca-3f25-11f1-8f86-42b51c65c3df","archive.ts","3beee1ba-3f25-11f1-8f86-42b51c65c3df",9,["D",1776956457692],"// Forward every uploaded file to @ProjectScottCode for safekeeping\nimport * as tg from \"../lib/telegram.ts\";\nimport { BOT_TOKEN, ARCHIVE_CHANNEL } from \"../lib/config.ts\";\n\nexport async function archiveUpload(\n ownerId: number, ownerName: string | null, projectName: string,\n filename: string, content: string,\n) {\n try {\n const bytes = new TextEncoder().encode(content);\n const caption = [\n `🗂 ScottHub Upload`,\n `Owner: ${ownerId}${ownerName ? \" (\" + ownerName + \")\" : \"\"}`,\n `Project: ${projectName}`,\n `File: ${filename}`,\n `Size: ${bytes.length} bytes`,\n `Time: ${new Date().toISOString()}`,\n ].join(\"\\n\");\n await tg.sendDocument(BOT_TOKEN, ARCHIVE_CHANNEL, bytes, filename, caption);\n } catch (e) {\n console.error(\"archive failed:\", e);\n }\n}\n",[19,87],"d2bebade-3f25-11f1-b87d-42b51c65c3df","app.ts","d2bebb9c-3f25-11f1-b87d-42b51c65c3df",15,["D",1776956710710],"// Hono HTTP entrypoint for ScottHub\nimport { Hono } from \"npm:hono\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { runMigrations } from \"../database/schema.ts\";\nimport { handleUpdate } from \"./router.ts\";\nimport { handleHostedWebhook } from \"./hosted_webhook.ts\";\nimport { handlePanel } from \"./panel.ts\";\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nlet migrated = false;\napp.use(\"*\", async (c, next) => {\n if (!migrated) { await runMigrations(); migrated = true; }\n await next();\n});\n\nfunction landing(): string {\n return `\n\nScottHub — Telegram Bot Hosting\n\n\n

🤖

ScottHub

Telegram Bot Hosting Platform

How to use

Open the bot in Telegram and press /start
Join @ScottHubs
Invite 2 friends via your Referral link
Upload your Python bot in 🖥 Host → ⬆️ Upload Files
Bot goes live automatically through the ScottHub webhook router!

\n \n

📢 Channel

@ScottHubs

\n \n

🔐 Admin Panel

Manage webhooks

\n \n

📄 View Source

Read the code

`;\n}\n\napp.get(\"/\", (c) => c.html(landing()));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/health\", (c) => c.json({ ok: true, ts: Date.now() }));\n\n// Main ScottHub bot webhook\napp.post(\"/bot\", async (c) => {\n const body = await c.req.json().catch(() => null);\n if (body) { try { await handleUpdate(body); } catch (e) { console.error(\"handleUpdate:\", e); } }\n return c.text(\"ok\");\n});\n\n// Hosted-bot webhook router\napp.post(\"/tgwebhook/:id/:secret\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n return handleHostedWebhook(Number(c.req.param(\"id\")), c.req.param(\"secret\"), body);\n});\n\n// Panel (delegates to its own handler to preserve cookies + forms cleanly)\napp.all(\"/panel\", async (c) => handlePanel(c.req.raw, new URL(c.req.url)));\napp.all(\"/panel/*\", async (c) => handlePanel(c.req.raw, new URL(c.req.url)));\n\nexport default app;\n",[19,94],"7f782086-3f25-11f1-bed7-42b51c65c3df","actions.ts","7f78211c-3f25-11f1-bed7-42b51c65c3df",11,["D",1776956570998],"// Uploads, file mgmt, stop/restart, project switching\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { analyzePythonFile } from \"../lib/parser.ts\";\nimport { esc, fmtDuration, getBaseUrl, projectWebhookUrl, safePath } from \"../lib/utils.ts\";\nimport { BOT_TOKEN, MAX_FILE_BYTES, MAX_PROJECTS_PER_USER } from \"../lib/config.ts\";\nimport { canCreateNewProject, claimHostSlot, isAdmin } from \"./access.ts\";\nimport { archiveUpload } from \"./archive.ts\";\nimport { showHost, showManage } from \"./screens.ts\";\n\nexport async function handleDocument(chatId: number, userId: number, doc: { file_id: string; file_name: string; file_size: number; mime_type?: string }) {\n if (doc.file_size > MAX_FILE_BYTES) {\n await tg.sendMessage(BOT_TOKEN, chatId, `❌ File too large (max ${MAX_FILE_BYTES} bytes).`, { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const name = safePath(doc.file_name || \"file.txt\");\n\n const info = await tg.getFile(BOT_TOKEN, doc.file_id);\n if (!info?.file_path) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Could not fetch file from Telegram.\");\n return;\n }\n const content = await tg.downloadFile(BOT_TOKEN, info.file_path);\n\n const user = await db.getUser(userId);\n if (!user) return;\n const state = user.state || \"idle\";\n const isPy = name.endsWith(\".py\");\n\n // \"Add File\" sub-upload flow\n if (state === \"awaiting_sub_upload\") {\n const subPath = safePath((JSON.parse(user.state_data || \"{}\") as any).subPath || name);\n const project = await db.getActiveProject(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No active project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.addFile(project.id, subPath, content, false);\n await archiveUpload(userId, user.first_name, project.name, subPath, content);\n if (subPath.endsWith(\".py\")) {\n const a = analyzePythonFile(content);\n if (a.imports.pip.length) {\n const existing = JSON.parse(project.detected_imports || \"[]\") as string[];\n const merged = [...new Set([...existing, ...a.imports.pip])];\n await db.updateProject(project.id, { detected_imports: JSON.stringify(merged) });\n }\n }\n await tg.sendMessage(BOT_TOKEN, chatId,\n `✅ Added ${esc(subPath)} to project ${esc(project.name)}.\\nFile is saved in database and forwarded to @ProjectScottCode.`,\n { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n\n // Main upload flow — new or replace main of the ACTIVE slot\n const existingProjects = await db.listProjectsByOwner(userId);\n const active = await db.getActiveProject(userId);\n const now = Math.floor(Date.now() / 1000);\n const activeIsAlive = active && active.expires_at && active.expires_at > now;\n let project = activeIsAlive ? active! : null;\n\n if (!project) {\n // need a new slot (or re-using expired active)\n const check = await canCreateNewProject(userId);\n if (!check.allowed && !(active && !activeIsAlive)) {\n await tg.sendMessage(BOT_TOKEN, chatId,\n `🔒 Can't host yet.\\n${check.reason}\\nReferrals: ${check.have}/${check.need}\\n\\nTap 👥 Referral.`,\n { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n const claim = await claimHostSlot(userId);\n if (!claim.ok) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ \" + claim.reason, { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n if (active && !activeIsAlive) {\n // renew existing expired slot\n await db.updateProject(active.id, { expires_at: claim.expiresAt, started_at: now, stopped_at: null, status: \"running\" });\n project = await db.getProjectById(active.id);\n } else {\n // brand new project\n if (existingProjects.length >= MAX_PROJECTS_PER_USER && !isAdmin(userId)) {\n await tg.sendMessage(BOT_TOKEN, chatId, `❌ Slot limit: ${MAX_PROJECTS_PER_USER}. Stop & delete one first.`, { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n project = await db.createProject(userId, name.replace(/\\.py$/, \"\"));\n await db.updateProject(project.id, { expires_at: claim.expiresAt, started_at: now, status: \"running\" });\n project = await db.getProjectById(project.id);\n await db.setActiveProject(userId, project!.id);\n }\n }\n if (!project) return;\n\n // Store the file\n const existingFiles = await db.listFiles(project.id);\n const makeMain = isPy && (existingFiles.length === 0 || !project.main_file);\n await db.addFile(project.id, name, content, makeMain);\n if (makeMain) await db.setMainFile(project.id, name);\n\n // Archive to @ProjectScottCode\n await archiveUpload(userId, user.first_name, project.name, name, content);\n\n // Smart analysis\n let analysisText = \"\";\n if (isPy) {\n const a = analyzePythonFile(content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n\n if (a.botToken) {\n const me = await tg.getMe(a.botToken);\n if (me.ok) await db.updateProject(project.id, { bot_username: me.result.username });\n try {\n const base = await getBaseUrl();\n const whUrl = projectWebhookUrl(base, project.id, project.webhook_secret || \"\");\n await db.updateProject(project.id, { webhook_url: whUrl });\n const whResult = await tg.setWebhook(a.botToken, whUrl);\n if (whResult.ok) analysisText += \"\\n🔌 Webhook auto-configured! ✅ Bot is ONLINE.\";\n else analysisText += `\\n⚠️ Webhook set failed: ${whResult.description}`;\n } catch (e) { console.error(\"auto webhook:\", e); }\n }\n\n analysisText +=\n `\\n\\n🧠 Smart analysis\\n` +\n `• Bot token: ${a.botToken ? \"✅ detected\" : \"❌ not found\"}\\n` +\n `• Admin id: ${a.adminId ? `✅ ${esc(a.adminId)}` : \"❌ not found\"}\\n` +\n `• Imports detected: ${a.imports.imports.length}\\n` +\n (a.imports.pip.length ? `• Auto-install: ${esc(a.imports.pip.join(\" \"))}\\n` : \"\") +\n `• Lines: ${a.lines}`;\n }\n\n const updated = await db.getProjectById(project.id);\n const remaining = updated?.expires_at ? updated.expires_at - now : 0;\n\n await tg.sendMessage(BOT_TOKEN, chatId,\n `✅ File uploaded\\n\\n📄 ${esc(name)} (${content.length} bytes)\\n` +\n (makeMain ? `⭐ Marked as main file\\n` : \"\") +\n `📤 Forwarded to @ProjectScottCode\\n` +\n `⏱ Host time: ${fmtDuration(remaining)}${analysisText}`,\n { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n\nexport async function handleStop(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project to stop.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n await db.updateProject(project.id, { status: \"stopped\", stopped_at: Math.floor(Date.now() / 1000) });\n if (project.bot_token) { try { await tg.deleteWebhook(project.bot_token); } catch {} }\n await tg.sendMessage(BOT_TOKEN, chatId, \"⏹ Bot stopped.\\nWebhook removed.\", { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function handleRestart(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project to restart.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n const now = Math.floor(Date.now() / 1000);\n if (project.expires_at && project.expires_at <= now) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Host time expired. Invite 2 users and upload again.\", { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n await db.updateProject(project.id, { status: \"running\", stopped_at: null });\n if (project.bot_token && project.webhook_secret) {\n try {\n const base = await getBaseUrl();\n await tg.setWebhook(project.bot_token, projectWebhookUrl(base, project.id, project.webhook_secret));\n } catch {}\n }\n await tg.sendMessage(BOT_TOKEN, chatId, \"🔄 Bot restarted.\\nWebhook routing resumed.\", { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function promptUpload(chatId: number, userId: number) {\n const check = await canCreateNewProject(userId);\n const existing = await db.listProjectsByOwner(userId);\n const hasAlive = existing.some((p) => p.expires_at && p.expires_at > Math.floor(Date.now() / 1000));\n if (!check.allowed && !hasAlive) {\n await tg.sendMessage(BOT_TOKEN, chatId,\n `🔒 Locked\\n\\n${check.reason}\\nReferrals: ${check.have}/${check.need}\\n\\nTap 👥 Referral.`,\n { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_upload\");\n await tg.sendMessage(BOT_TOKEN, chatId,\n `⬆️ Upload your bot\\n\\nSend your Python bot file (.py) as a document.\\n\\nScottHub auto-detects:\\n• bot token • admin id • imports/pip packages\\n\\n/cancel to abort.`,\n { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function promptAddFile(chatId: number, userId: number) {\n await db.setUserState(userId, \"awaiting_sub_path\");\n await tg.sendMessage(BOT_TOKEN, chatId,\n \"📝 Send the relative path for the new file (e.g. plugins/helper.py or config.py).\\nThen send it as a document.\\n\\n/cancel to abort.\",\n { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleSubPath(chatId: number, userId: number, text: string) {\n const clean = safePath(text);\n if (!clean || clean.length > 120) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid path.\", { reply_markup: tg.BACK_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_sub_upload\", { subPath: clean });\n await tg.sendMessage(BOT_TOKEN, chatId, `📂 Path set to ${esc(clean)}\\n\\nNow send the file as a document.`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleDeleteFilePrompt(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n if (!files.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No files to delete.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n await db.setUserState(userId, \"awaiting_delete_path\");\n const list = files.map((f) => `• ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `🗑 Send the path to delete:\\n\\n${list}\\n\\n/cancel to abort.`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleDeletePath(chatId: number, userId: number, text: string) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file) { await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such file.\", { reply_markup: tg.MANAGE_KEYBOARD }); await db.setUserState(userId, \"manage\"); return; }\n if (file.is_main) { await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Can't delete main file.\", { reply_markup: tg.MANAGE_KEYBOARD }); await db.setUserState(userId, \"manage\"); return; }\n await db.deleteFileDb(project.id, clean);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Deleted ${esc(clean)}`, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleSetMainPrompt(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n const py = files.filter((f) => f.path.endsWith(\".py\"));\n if (!py.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No .py files yet.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n await db.setUserState(userId, \"awaiting_main_path\");\n const list = py.map((f) => `${f.is_main ? \"⭐\" : \" \"} ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Send path of file to mark as main:\\n\\n${list}`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleSetMainPath(chatId: number, userId: number, text: string) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file || !clean.endsWith(\".py\")) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such .py file.\", { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n await db.setMainFile(project.id, clean);\n const a = analyzePythonFile(file.content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Main file set to ${esc(clean)}`, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleListFiles(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n const files = await db.listFiles(project.id);\n if (!files.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No files.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n const list = files.map((f) => `${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)} — ${f.size}b`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `📁 Files in ${esc(project.name)}\\n\\n${list}`, { reply_markup: tg.MANAGE_KEYBOARD });\n}\n\nexport async function handleSwitchSelection(chatId: number, userId: number, text: string) {\n // expected text pattern: \"✅ #12 name\" or \"#12 name\"\n const m = text.match(/#(\\d+)/);\n if (!m) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid choice.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n const id = Number(m[1]);\n const proj = await db.getProjectById(id);\n if (!proj || proj.owner_id !== userId) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Not your project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.setActiveProject(userId, id);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Active project → ${esc(proj.name)}`, { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n",[19,101],"38f4ab02-3f25-11f1-8f86-42b51c65c3df","access.ts","38f4abca-3f25-11f1-8f86-42b51c65c3df",8,["D",1776956452693],"// Channel-join + referral gate\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { BOT_TOKEN, CHANNEL, ADMIN_ID, REFERRALS_REQUIRED, HOST_DURATION_SECONDS, MAX_PROJECTS_PER_USER } from \"../lib/config.ts\";\n\nexport function isAdmin(tgId: number): boolean { return tgId === ADMIN_ID; }\n\nexport async function ensureChannelJoined(chatId: number, userId: number): Promise {\n if (isAdmin(userId)) { await db.markJoined(userId, true); return true; }\n const r = await tg.checkChannelMember(BOT_TOKEN, CHANNEL, userId);\n if (r.ok && r.isMember) { await db.markJoined(userId, true); return true; }\n await db.markJoined(userId, false);\n await tg.sendMessage(\n BOT_TOKEN, chatId,\n `🔒 Join Required\\n\\nTo use ScottHub please join our channel:\\n👉 https://t.me/ScottHubs\\n\\nThen press /start again.`,\n { reply_markup: tg.REMOVE_KEYBOARD },\n );\n return false;\n}\n\nexport type HostCheck =\n | { allowed: true; reason: \"admin\" | \"referrals\" | \"renew\" }\n | { allowed: false; need: number; have: number; reason: string };\n\nexport async function canCreateNewProject(userId: number): Promise {\n if (isAdmin(userId)) return { allowed: true, reason: \"admin\" };\n const count = await db.countProjects(userId);\n if (count >= MAX_PROJECTS_PER_USER) {\n return { allowed: false, need: 0, have: count, reason: `Max ${MAX_PROJECTS_PER_USER} bot slots reached. Stop/delete one first.` };\n }\n const user = await db.getUser(userId);\n if (!user) return { allowed: false, need: REFERRALS_REQUIRED, have: 0, reason: \"User not registered\" };\n if (user.referral_count >= REFERRALS_REQUIRED) return { allowed: true, reason: \"referrals\" };\n return { allowed: false, need: REFERRALS_REQUIRED, have: user.referral_count, reason: \"Not enough referrals\" };\n}\n\n/** Claim (consume) referrals for a NEW host slot. Admin is free. */\nexport async function claimHostSlot(userId: number): Promise<{ ok: true; expiresAt: number } | { ok: false; reason: string }> {\n const expiresAt = Math.floor(Date.now() / 1000) + HOST_DURATION_SECONDS;\n if (isAdmin(userId)) return { ok: true, expiresAt };\n const user = await db.getUser(userId);\n if (!user) return { ok: false, reason: \"User not found\" };\n if (user.referral_count < REFERRALS_REQUIRED) {\n return { ok: false, reason: `Need ${REFERRALS_REQUIRED} referrals (you have ${user.referral_count})` };\n }\n await db.consumeReferrals(userId, REFERRALS_REQUIRED);\n return { ok: true, expiresAt };\n}\n",[19,108],"38f4c89e-3f25-11f1-8f86-42b51c65c3df",["D",1776956452693],"directory",[19],{"_41":252,"_13":253,"_44":254,"_46":-5,"_48":49,"_50":255,"_52":53,"_54":256,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_133":257,"_18":258},{"_41":114,"_13":19,"_44":47,"_46":-5,"_48":49,"_50":110,"_52":53,"_54":217,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_133":218,"_18":219},{"_41":201,"_13":202,"_44":203,"_46":-5,"_48":49,"_50":204,"_52":53,"_54":205,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_133":206,"_18":207},{"_41":159,"_13":160,"_44":161,"_46":-5,"_48":49,"_50":162,"_52":53,"_54":163,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_133":164,"_18":165},{"_41":144,"_13":145,"_44":146,"_46":-5,"_48":49,"_50":147,"_52":53,"_54":148,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_133":149,"_18":150},{"_41":136,"_13":137,"_44":138,"_46":-5,"_48":49,"_50":139,"_52":53,"_54":140,"_17":56,"_57":24,"_59":141,"_61":62,"_63":-5,"_133":142,"_18":143},{"_41":125,"_13":126,"_44":127,"_46":-5,"_48":49,"_50":128,"_52":53,"_54":129,"_17":130,"_57":131,"_59":132,"_61":62,"_63":-5,"_133":134,"_18":135},"06c5ad1a-3f26-11f1-9977-42b51c65c3df","main.ts","f2afc4ce-3f24-11f1-bf01-42b51c65c3df",19,["D",1776956797991],1,"http","// ScottHub — Telegram Bot Hosting Platform\n// Entrypoint: delegates all routing to the Hono app in handlers/app.ts\nimport app from \"./handlers/app.ts\";\nexport default app.fetch;\n","children",[],[126],"05ed81e2-3f26-11f1-b87d-42b51c65c3df","README.md","05ed828c-3f26-11f1-b87d-42b51c65c3df",18,["D",1776956796582],"# 🤖 ScottHub — Telegram Bot Hosting Platform\n\nA complete Telegram-bot hosting platform built on Val Town.\nUpload a Python bot file, and ScottHub wires it through a webhook router so it goes\nlive instantly — no server rental, no Python process to manage.\n\n> **Bot:** [@BlackCodeHatHostingBot](https://t.me/BlackCodeHatHostingBot)\n> **Channel:** [@ScottHubs](https://t.me/ScottHubs) (required to join)\n> **Archive:** every uploaded file is forwarded to `@ProjectScottCode`\n\n---\n\n## ✨ Features\n\n### For users (Telegram main interface — reply keyboards, not inline)\n- **🖥 Host** — main dashboard\n - 🗄 **Server** — shows the Free tier\n - ⬆️ **Upload Files** — drop your `main.py`\n - 📁 **Manage Files** — add, delete, set main file\n - ⏱ **Host Time** — 2-day countdown\n - ⏹ **Stop** / 🔄 **Restart**\n - 📜 **Logs** — recent webhook events for your bot\n - 🗂 **Switch Project** — flip between your 2 slots\n- **👥 Referral** — share your link, earn 2 friends → 1 free host slot\n- **📊 Status** — platform stats + your personal stats\n- **ℹ️ Help**\n\n### Smart uploader\nOn upload of a `.py` file ScottHub automatically:\n- Detects the bot token\n- Detects admin / owner id\n- Scans all `import` / `from … import …` and maps them to pip packages\n (`telegram→python-telegram-bot`, `bs4→beautifulsoup4`, `cv2→opencv-python`, etc.)\n- Registers the bot's webhook to the ScottHub router → bot is instantly ONLINE\n- Forwards the file to `@ProjectScottCode` for archival\n\n### Free-tier rules\n| Rule | Value |\n|----------------------------|-----------------|\n| Cost | Free |\n| Duration per slot | **2 days** |\n| Referrals required / slot | **2** |\n| Slots per user | **2** |\n| Admin (`6511143869`) | No referrals required |\n\n### Web Admin Panel\n`/panel` — login **Scott / ReyBalor21**\n- Dashboard (users, projects, running, messages)\n- All projects list\n- Per-project detail: set/remove webhook, extend time, override token, delete\n- Live Telegram `getWebhookInfo` feed\n- Event log\n- Main-bot webhook control (bring the ScottHub bot itself online)\n\n---\n\n## 🗺 Architecture\n\n```mermaid\nflowchart LR\n U([Telegram user]) -- messages --> TG[Telegram API]\n TG -- webhook --> BOT[/POST /bot/]\n TG -- webhook --> ROUTER[/POST /tgwebhook/:id/:secret/]\n BOT --> R[handlers/router.ts]\n R --> S[screens.ts]\n R --> A[actions.ts]\n A --> DB[(SQLite
users/projects/files/events)]\n A --> AR[@ProjectScottCode]\n ROUTER --> HWH[handlers/hosted_webhook.ts]\n HWH --> DB\n HWH --> TG2[Telegram reply via bot token]\n PANEL[/panel web UI/] --> DB\n PANEL --> TG3[Telegram setWebhook]\n CRON{{cron expiry_sweep}} --> DB\n```\n\n## 📁 Project structure\n\n```\nmain.ts # bootstrap, re-exports Hono app\nhandlers/\n app.ts # Hono routes\n router.ts # main-bot update dispatcher\n screens.ts # every menu screen (Host, Server, Referral…)\n actions.ts # upload/manage/stop/restart actions\n hosted_webhook.ts # router for uploaded bots (webhook-only)\n access.ts # channel-join + referral gate\n archive.ts # forwarder to @ProjectScottCode\n panel.ts # web admin panel HTML\nlib/\n config.ts # all constants (token, api_id/hash, limits)\n telegram.ts # Telegram Bot API client + reply keyboards\n parser.ts # smart Python import/token/admin parser\n utils.ts # helpers, base URL, escaping\ndatabase/\n schema.ts # migrations\n queries.ts # typed query layer\njobs/\n expiry_sweep.ts # 15-min cron → expire projects\nscripts/\n setup_webhook.ts # one-time webhook registration\n```\n\n## ⚙️ Configuration\n\nAll config lives in `lib/config.ts`:\n| Key | Value |\n|-----------------------|-------------------------------------------------------|\n| `BOT_TOKEN` | `8779579899:AAEN…` |\n| `CHANNEL` | `@ScottHubs` |\n| `ARCHIVE_CHANNEL` | `@ProjectScottCode` |\n| `ADMIN_ID` | `6511143869` |\n| `TG_API_ID` | `31802482` |\n| `TG_API_HASH` | `184c16c584a0e350a252271029cf7eb7` |\n| `REFERRALS_REQUIRED` | `2` |\n| `HOST_DURATION_SECONDS` | `172800` (2 days) |\n| `MAX_PROJECTS_PER_USER` | `2` |\n\n## 🚦 Setup (already done)\n1. Run `scripts/setup_webhook.ts` → registers `POST /bot` as the main-bot webhook ✅\n2. The cron `jobs/expiry_sweep.ts` runs every 15 min to auto-expire slots ✅\n3. Open `/panel` to manage hosted bots through the web UI ✅\n\n## 🔒 Webhook-only hosting\nVal Town can't run Python processes — instead, ScottHub stores each bot's code,\nregisters its webhook to our router, and replies via the bot's token.\nWhen a command like `/start` comes in, ScottHub parses the handler text from the\nPython source and responds. For production Python execution you would plug in an\nexternal runner that reads the same DB and posts replies through the same router.\n\n## 📝 License / remixing\n`/source` redirects to the Val Town source — feel free to remix!\n",[],[137],"d95cc610-3f25-11f1-a845-42b51c65c3df","scripts","e08f9538-5ed5-4747-9de2-d35611dc32ba",17,["D",1776956721808],[151],[145],{"_41":152,"_13":153,"_44":154,"_46":146,"_48":49,"_50":147,"_52":53,"_54":155,"_17":56,"_57":58,"_59":156,"_61":62,"_63":-5,"_133":157,"_18":158},"d95cb4b8-3f25-11f1-a845-42b51c65c3df","setup_webhook.ts","d95cb5b2-3f25-11f1-a845-42b51c65c3df",["D",1776956721808],"// One-time: register main ScottHub bot webhook\nimport { setWebhook, getMe, getWebhookInfo } from \"../lib/telegram.ts\";\nimport { getBaseUrl } from \"../lib/utils.ts\";\nimport { BOT_TOKEN } from \"../lib/config.ts\";\nimport { runMigrations } from \"../database/schema.ts\";\n\nawait runMigrations();\n\nconst base = await getBaseUrl();\nconst url = `${base}/bot`;\nconsole.log(\"Base URL:\", base);\nconsole.log(\"Webhook URL:\", url);\n\nconst me = await getMe(BOT_TOKEN);\nconsole.log(\"Bot info:\", JSON.stringify(me));\n\nconst set = await setWebhook(BOT_TOKEN, url);\nconsole.log(\"setWebhook:\", JSON.stringify(set));\n\nconst info = await getWebhookInfo(BOT_TOKEN);\nconsole.log(\"getWebhookInfo:\", JSON.stringify(info));\n",[],[145,153],"f7529f4c-3f24-11f1-bf01-42b51c65c3df","lib","a091f1d7-eade-4864-9db3-0c01aa453aef",2,["D",1776956342577],[166,167,168,169],[160],{"_41":194,"_13":195,"_44":196,"_46":161,"_48":49,"_50":162,"_52":53,"_54":197,"_17":56,"_57":58,"_59":198,"_61":62,"_63":-5,"_133":199,"_18":200},{"_41":186,"_13":187,"_44":188,"_46":161,"_48":49,"_50":189,"_52":53,"_54":190,"_17":56,"_57":58,"_59":191,"_61":62,"_63":-5,"_133":192,"_18":193},{"_41":178,"_13":179,"_44":180,"_46":161,"_48":49,"_50":181,"_52":53,"_54":182,"_17":56,"_57":58,"_59":183,"_61":62,"_63":-5,"_133":184,"_18":185},{"_41":170,"_13":171,"_44":172,"_46":161,"_48":49,"_50":173,"_52":53,"_54":174,"_17":56,"_57":58,"_59":175,"_61":62,"_63":-5,"_133":176,"_18":177},"06b0524a-3f25-11f1-8c3e-42b51c65c3df","utils.ts","06b05308-3f25-11f1-8c3e-42b51c65c3df",4,["D",1776956368356],"// Utilities\nimport { httpEndpoint, parseVal } from \"https://esm.town/v/std/utils/index.ts\";\n\nexport function esc(s: string | number | null | undefined): string {\n if (s === null || s === undefined) return \"\";\n return String(s).replaceAll(\"&\", \"&\").replaceAll(\"<\", \"<\").replaceAll(\">\", \">\");\n}\n\nexport function fmtDuration(seconds: number): string {\n if (seconds <= 0) return \"expired\";\n const d = Math.floor(seconds / 86400);\n const h = Math.floor((seconds % 86400) / 3600);\n const m = Math.floor((seconds % 3600) / 60);\n if (d > 0) return `${d}d ${h}h ${m}m`;\n if (h > 0) return `${h}h ${m}m`;\n return `${m}m`;\n}\n\nexport function fmtDate(ts: number | null | undefined): string {\n if (!ts) return \"—\";\n return new Date(ts * 1000).toISOString().replace(\"T\", \" \").slice(0, 16) + \" UTC\";\n}\n\nexport async function hashToken(token: string): Promise {\n const buf = new TextEncoder().encode(token);\n const digest = await crypto.subtle.digest(\"SHA-256\", buf);\n return Array.from(new Uint8Array(digest)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\").slice(0, 16);\n}\n\nlet _cachedBaseUrl: string | null = null;\nexport async function getBaseUrl(): Promise {\n if (_cachedBaseUrl) return _cachedBaseUrl;\n try {\n _cachedBaseUrl = await httpEndpoint(\"/main.ts\");\n return _cachedBaseUrl!;\n } catch {\n const v = parseVal();\n return `https://${v.author}--${v.name}.web.val.run`;\n }\n}\n\nexport function projectWebhookUrl(baseUrl: string, projectId: number, secret: string): string {\n return `${baseUrl}/tgwebhook/${projectId}/${secret}`;\n}\n\nexport function safePath(p: string): string {\n return p.trim().replace(/^\\/+/, \"\").replace(/\\.\\./g, \"\").replace(/[^\\w.\\-\\/]/g, \"_\");\n}\n",[],[160,171],"01672a16-3f25-11f1-8f86-42b51c65c3df","telegram.ts","01672b1a-3f25-11f1-8f86-42b51c65c3df",3,["D",1776956359495],"// Telegram Bot API wrapper + keyboards\nconst BASE = \"https://api.telegram.org\";\n\nexport async function tg(token: string, method: string, body: Record = {}) {\n const res = await fetch(`${BASE}/bot${token}/${method}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n return res.json().catch(() => ({ ok: false, description: \"non-json response\" }));\n}\n\nexport async function sendMessage(token: string, chatId: number | string, text: string, extra: Record = {}) {\n return tg(token, \"sendMessage\", {\n chat_id: chatId, text, parse_mode: \"HTML\", disable_web_page_preview: true, ...extra,\n });\n}\n\nexport async function sendDocument(token: string, chatId: number | string, fileBytes: Uint8Array, filename: string, caption = \"\") {\n const form = new FormData();\n form.append(\"chat_id\", String(chatId));\n form.append(\"document\", new Blob([fileBytes]), filename);\n if (caption) { form.append(\"caption\", caption); form.append(\"parse_mode\", \"HTML\"); }\n const res = await fetch(`${BASE}/bot${token}/sendDocument`, { method: \"POST\", body: form });\n return res.json().catch(() => ({ ok: false }));\n}\n\nexport async function answerCallback(token: string, id: string, text = \"\") {\n return tg(token, \"answerCallbackQuery\", { callback_query_id: id, text });\n}\n\nexport async function getFile(token: string, fileId: string): Promise<{ file_path?: string } | null> {\n const r = await tg(token, \"getFile\", { file_id: fileId });\n return r.ok ? r.result : null;\n}\n\nexport async function downloadFile(token: string, filePath: string): Promise {\n const res = await fetch(`${BASE}/file/bot${token}/${filePath}`);\n if (!res.ok) throw new Error(\"download failed: \" + res.status);\n return res.text();\n}\n\nexport async function downloadFileBytes(token: string, filePath: string): Promise {\n const res = await fetch(`${BASE}/file/bot${token}/${filePath}`);\n if (!res.ok) throw new Error(\"download failed: \" + res.status);\n return new Uint8Array(await res.arrayBuffer());\n}\n\nexport async function checkChannelMember(token: string, channel: string, userId: number) {\n const r = await tg(token, \"getChatMember\", { chat_id: channel, user_id: userId });\n if (!r.ok) return { ok: false, isMember: false, error: r.description };\n const status = r.result?.status;\n return { ok: true, isMember: [\"creator\", \"administrator\", \"member\", \"restricted\"].includes(status) };\n}\n\nexport async function getMe(token: string) { return tg(token, \"getMe\"); }\nexport async function setWebhook(token: string, url: string, secret?: string) {\n return tg(token, \"setWebhook\", {\n url, secret_token: secret,\n allowed_updates: [\"message\", \"edited_message\", \"callback_query\", \"chat_member\", \"my_chat_member\"],\n drop_pending_updates: false,\n });\n}\nexport async function deleteWebhook(token: string) { return tg(token, \"deleteWebhook\", { drop_pending_updates: false }); }\nexport async function getWebhookInfo(token: string) { return tg(token, \"getWebhookInfo\"); }\n\n// ==== Main Reply Keyboards (NOT inline) ====\nexport const MAIN_KEYBOARD = {\n keyboard: [\n [{ text: \"🖥 Host\" }, { text: \"👥 Referral\" }],\n [{ text: \"📊 Status\" }, { text: \"ℹ️ Help\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const HOST_KEYBOARD = {\n keyboard: [\n [{ text: \"🗄 Server\" }, { text: \"⬆️ Upload Files\" }],\n [{ text: \"📁 Manage Files\" }, { text: \"⏱ Host Time\" }],\n [{ text: \"⏹ Stop\" }, { text: \"🔄 Restart\" }],\n [{ text: \"📜 Logs\" }, { text: \"🗂 Switch Project\" }],\n [{ text: \"⬅️ Back\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const MANAGE_KEYBOARD = {\n keyboard: [\n [{ text: \"📄 List Files\" }, { text: \"⭐ Set Main File\" }],\n [{ text: \"➕ Add File\" }, { text: \"🗑 Delete File\" }],\n [{ text: \"⬅️ Back to Host\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const BACK_KEYBOARD = {\n keyboard: [[{ text: \"⬅️ Back\" }]],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const REMOVE_KEYBOARD = { remove_keyboard: true };\n",[],[160,179],"12ed740c-3f25-11f1-9142-42b51c65c3df","parser.ts","12ed74b6-3f25-11f1-9142-42b51c65c3df",5,["D",1776956388892],"// Smart Python parser - detects imports, bot token, admin id, api id/hash\nconst STDLIB = new Set([\n \"os\",\"sys\",\"re\",\"json\",\"time\",\"datetime\",\"random\",\"math\",\"asyncio\",\"logging\",\n \"threading\",\"subprocess\",\"pathlib\",\"typing\",\"collections\",\"functools\",\"itertools\",\n \"traceback\",\"urllib\",\"http\",\"socket\",\"ssl\",\"hashlib\",\"hmac\",\"base64\",\"io\",\"struct\",\n \"copy\",\"pickle\",\"csv\",\"sqlite3\",\"zipfile\",\"tarfile\",\"gzip\",\"bz2\",\"string\",\"textwrap\",\n \"argparse\",\"configparser\",\"shutil\",\"tempfile\",\"glob\",\"uuid\",\"secrets\",\"dataclasses\",\n \"enum\",\"abc\",\"contextlib\",\"warnings\",\"weakref\",\"inspect\",\"importlib\",\"operator\",\n \"queue\",\"multiprocessing\",\"concurrent\",\"signal\",\"platform\",\"getpass\",\"calendar\",\n \"decimal\",\"fractions\",\"statistics\",\"unittest\",\"email\",\"html\",\"xml\",\"zoneinfo\",\n \"locale\",\"gettext\",\"codecs\",\"mimetypes\",\"encodings\",\"builtins\",\"__future__\",\n]);\n\nconst IMPORT_TO_PIP: Record = {\n telegram: \"python-telegram-bot\", telethon: \"Telethon\", pyrogram: \"Pyrogram\",\n aiogram: \"aiogram\", cv2: \"opencv-python\", PIL: \"Pillow\", Image: \"Pillow\",\n bs4: \"beautifulsoup4\", yaml: \"PyYAML\", dotenv: \"python-dotenv\", jwt: \"PyJWT\",\n MySQLdb: \"mysqlclient\", dns: \"dnspython\", sklearn: \"scikit-learn\",\n discord: \"discord.py\", requests: \"requests\", aiohttp: \"aiohttp\", httpx: \"httpx\",\n flask: \"Flask\", fastapi: \"fastapi\", uvicorn: \"uvicorn\", django: \"Django\",\n motor: \"motor\", pymongo: \"pymongo\", redis: \"redis\", psycopg2: \"psycopg2-binary\",\n sqlalchemy: \"SQLAlchemy\", numpy: \"numpy\", pandas: \"pandas\",\n apscheduler: \"APScheduler\", pydantic: \"pydantic\", tgcrypto: \"TgCrypto\",\n telebot: \"pyTelegramBotAPI\", pytelegrambotapi: \"pyTelegramBotAPI\",\n};\n\nexport function detectImports(code: string): { imports: string[]; pip: string[] } {\n const found = new Set();\n const cleaned = code\n .replace(/\"\"\"[\\s\\S]*?\"\"\"/g, \"\")\n .replace(/'''[\\s\\S]*?'''/g, \"\")\n .replace(/#[^\\n]*/g, \"\");\n for (const raw of cleaned.split(/\\r?\\n/)) {\n const line = raw.trim();\n let m = line.match(/^from\\s+([a-zA-Z_][\\w\\.]*)\\s+import\\s+/);\n if (m) { found.add(m[1].split(\".\")[0]); continue; }\n m = line.match(/^import\\s+(.+)$/);\n if (m) {\n for (const part of m[1].split(\",\")) {\n const name = part.trim().split(/\\s+as\\s+/)[0].trim().split(\".\")[0];\n if (name) found.add(name);\n }\n }\n }\n const imports = [...found].filter((x) => !STDLIB.has(x));\n const pip = [...new Set(imports.map((i) => IMPORT_TO_PIP[i.toLowerCase()] ?? IMPORT_TO_PIP[i] ?? i))];\n return { imports: [...found], pip };\n}\n\nexport function detectBotToken(code: string): string | null {\n const m = code.match(/(\\d{6,12}:[A-Za-z0-9_\\-]{30,})/);\n return m ? m[1] : null;\n}\n\nexport function detectAdminId(code: string): string | null {\n const patterns = [\n /(?:ADMIN_ID|OWNER_ID|SUDO_USERS|OWNER|ADMINS?)\\s*=\\s*\\[?\\s*[\"']?(\\d{5,})[\"']?/i,\n /(?:admin|owner)[_\\s]?id\\s*=\\s*[\"']?(\\d{5,})[\"']?/i,\n ];\n for (const p of patterns) {\n const m = code.match(p);\n if (m) return m[1];\n }\n return null;\n}\n\nexport function detectApiIdHash(code: string): { apiId?: string; apiHash?: string } {\n const out: { apiId?: string; apiHash?: string } = {};\n const idM = code.match(/API[_\\s]?ID\\s*=\\s*[\"']?(\\d{5,})[\"']?/i);\n if (idM) out.apiId = idM[1];\n const hashM = code.match(/API[_\\s]?HASH\\s*=\\s*[\"']([a-f0-9]{32})[\"']/i);\n if (hashM) out.apiHash = hashM[1];\n return out;\n}\n\nexport function analyzePythonFile(code: string) {\n return {\n imports: detectImports(code),\n botToken: detectBotToken(code),\n adminId: detectAdminId(code),\n apiCreds: detectApiIdHash(code),\n lines: code.split(/\\r?\\n/).length,\n size: code.length,\n };\n}\n",[],[160,187],"f7528d5e-3f24-11f1-bf01-42b51c65c3df","config.ts","f7528e4e-3f24-11f1-bf01-42b51c65c3df",["D",1776956342577],"// Central configuration for ScottHub\nexport const BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\nexport const CHANNEL = \"@ScottHubs\";\nexport const CHANNEL_URL = \"https://t.me/ScottHubs\";\nexport const ARCHIVE_CHANNEL = \"@ProjectScottCode\";\nexport const ADMIN_ID = 6511143869;\n\n// Telegram API credentials for hosted Telethon/Pyrogram bots\nexport const TG_API_ID = \"31802482\";\nexport const TG_API_HASH = \"184c16c584a0e350a252271029cf7eb7\";\n\n// Hosting rules\nexport const REFERRALS_REQUIRED = 2;\nexport const HOST_DURATION_SECONDS = 2 * 24 * 60 * 60; // 2 days\nexport const MAX_PROJECTS_PER_USER = 2; // 2 bot slots per user (free tier)\nexport const MAX_FILE_BYTES = 2_000_000;\n\n// Web panel login\nexport const PANEL_USER = \"Scott\";\nexport const PANEL_PASS = \"ReyBalor21\";\n",[],[160,195],"d71cc30a-3f25-11f1-932f-42b51c65c3df","jobs","8d6c9419-32f3-4ba4-b6b3-7abcb46bd720",16,["D",1776956718035],[208],[202],{"_41":209,"_13":210,"_44":211,"_46":203,"_48":49,"_50":204,"_52":53,"_54":212,"_17":56,"_57":213,"_59":214,"_61":62,"_63":-5,"_133":215,"_18":216},"d71c970e-3f25-11f1-932f-42b51c65c3df","expiry_sweep.ts","d71c97f4-3f25-11f1-932f-42b51c65c3df",["D",1776956718035],"interval","// Periodic cron - expire projects whose 2-day window is up\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { runMigrations } from \"../database/schema.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { BOT_TOKEN } from \"../lib/config.ts\";\n\nexport default async function (interval: Interval) {\n await runMigrations();\n const now = Math.floor(Date.now() / 1000);\n\n const expiring = await sqlite.execute({\n sql: \"SELECT * FROM projects WHERE status='running' AND expires_at IS NOT NULL AND expires_at<=?\",\n args: [now],\n });\n\n for (const p of expiring.rows as any[]) {\n if (p.bot_token) { try { await tg.deleteWebhook(p.bot_token); } catch {} }\n try {\n await tg.sendMessage(\n BOT_TOKEN, p.owner_id,\n `⏰ Hosting Expired\\n\\nYour project ${p.name} has expired.\\nInvite 2 new users to renew.\\n\\nTap 👥 Referral for your link.`,\n { reply_markup: tg.MAIN_KEYBOARD },\n );\n } catch {}\n }\n const result = await sqlite.execute({\n sql: \"UPDATE projects SET status='expired', stopped_at=? WHERE status='running' AND expires_at IS NOT NULL AND expires_at<=?\",\n args: [now, now],\n });\n console.log(`expiry_sweep: expired ${result.rowsAffected ?? 0} at ${new Date().toISOString()}`);\n}\n",[],[202,210],["D",1776956452693],[220,221,222,223,224,225,226,227],[19],{"_41":107,"_13":108,"_44":109,"_46":47,"_48":49,"_50":110,"_52":53,"_54":249,"_17":56,"_57":58,"_59":112,"_61":62,"_63":-5,"_133":250,"_18":251},{"_41":100,"_13":101,"_44":102,"_46":47,"_48":49,"_50":103,"_52":53,"_54":246,"_17":56,"_57":58,"_59":105,"_61":62,"_63":-5,"_133":247,"_18":248},{"_41":93,"_13":94,"_44":95,"_46":47,"_48":49,"_50":96,"_52":53,"_54":243,"_17":56,"_57":58,"_59":98,"_61":62,"_63":-5,"_133":244,"_18":245},{"_41":86,"_13":87,"_44":88,"_46":47,"_48":49,"_50":89,"_52":53,"_54":240,"_17":56,"_57":58,"_59":91,"_61":62,"_63":-5,"_133":241,"_18":242},{"_41":79,"_13":80,"_44":81,"_46":47,"_48":49,"_50":82,"_52":53,"_54":237,"_17":56,"_57":58,"_59":84,"_61":62,"_63":-5,"_133":238,"_18":239},{"_41":72,"_13":73,"_44":74,"_46":47,"_48":49,"_50":75,"_52":53,"_54":234,"_17":56,"_57":58,"_59":77,"_61":62,"_63":-5,"_133":235,"_18":236},{"_41":65,"_13":66,"_44":67,"_46":47,"_48":49,"_50":68,"_52":53,"_54":231,"_17":56,"_57":58,"_59":70,"_61":62,"_63":-5,"_133":232,"_18":233},{"_41":42,"_13":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":228,"_17":56,"_57":58,"_59":60,"_61":62,"_63":-5,"_133":229,"_18":230},["D",1776956507735],[],[19,43],["D",1776956591907],[],[19,66],["D",1776956691227],[],[19,73],["D",1776956609241],[],[19,80],["D",1776956457692],[],[19,87],["D",1776956710710],[],[19,94],["D",1776956570998],[],[19,101],["D",1776956452693],[],[19,108],"19d6e280-3f25-11f1-8c3e-42b51c65c3df","database","39b957e7-b36b-4e60-938e-3cb9062a4f18",6,["D",1776956400462],[259,260],[253],{"_41":268,"_13":269,"_44":270,"_46":254,"_48":49,"_50":271,"_52":53,"_54":272,"_17":56,"_57":58,"_59":273,"_61":62,"_63":-5,"_133":274,"_18":275},{"_41":261,"_13":262,"_44":263,"_46":254,"_48":49,"_50":255,"_52":53,"_54":264,"_17":56,"_57":58,"_59":265,"_61":62,"_63":-5,"_133":266,"_18":267},"19d6c426-3f25-11f1-8c3e-42b51c65c3df","schema.ts","19d6c4f8-3f25-11f1-8c3e-42b51c65c3df",["D",1776956400462],"// DB schema + migrations\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runMigrations() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS users (\n tg_id INTEGER PRIMARY KEY, username TEXT, first_name TEXT,\n referral_code TEXT UNIQUE, referred_by INTEGER,\n referral_count INTEGER DEFAULT 0,\n state TEXT DEFAULT 'idle', state_data TEXT,\n joined_channel INTEGER DEFAULT 0,\n active_project_id INTEGER,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n updated_at INTEGER DEFAULT (strftime('%s','now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS projects (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n owner_id INTEGER NOT NULL, name TEXT NOT NULL,\n main_file TEXT, bot_token TEXT, bot_username TEXT,\n admin_id TEXT, detected_imports TEXT,\n status TEXT DEFAULT 'stopped',\n webhook_secret TEXT, webhook_url TEXT,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n started_at INTEGER, expires_at INTEGER, stopped_at INTEGER,\n last_update_at INTEGER, message_count INTEGER DEFAULT 0\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS files (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER NOT NULL, path TEXT NOT NULL, content TEXT NOT NULL,\n size INTEGER DEFAULT 0, is_main INTEGER DEFAULT 0,\n uploaded_at INTEGER DEFAULT (strftime('%s','now')),\n UNIQUE(project_id, path)\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS referrals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n referrer_id INTEGER NOT NULL, invited_id INTEGER NOT NULL UNIQUE,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS webhook_events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER, bot_token_hash TEXT, direction TEXT,\n payload TEXT, status_code INTEGER,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS panel_sessions (\n token TEXT PRIMARY KEY, username TEXT NOT NULL,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n expires_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_projects_owner ON projects(owner_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_files_project ON files(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_referrals_ref ON referrals(referrer_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_webhook_project ON webhook_events(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_users_refcode ON users(referral_code)`);\n // Safe migrations\n try { await sqlite.execute(`ALTER TABLE users ADD COLUMN active_project_id INTEGER`); } catch {}\n try { await sqlite.execute(`ALTER TABLE projects ADD COLUMN webhook_url TEXT`); } catch {}\n}\n",[],[253,262],"3183b638-3f25-11f1-bf01-42b51c65c3df","queries.ts","3183b6d8-3f25-11f1-bf01-42b51c65c3df",7,["D",1776956440212],"// All DB queries\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type UserRow = {\n tg_id: number; username: string | null; first_name: string | null;\n referral_code: string; referred_by: number | null; referral_count: number;\n state: string; state_data: string | null; joined_channel: number;\n active_project_id: number | null;\n};\nexport type ProjectRow = {\n id: number; owner_id: number; name: string;\n main_file: string | null; bot_token: string | null; bot_username: string | null;\n admin_id: string | null; detected_imports: string | null; status: string;\n webhook_secret: string | null; webhook_url: string | null;\n created_at: number; started_at: number | null; expires_at: number | null;\n stopped_at: number | null; last_update_at: number | null; message_count: number;\n};\nexport type FileRow = {\n id: number; project_id: number; path: string; content: string;\n size: number; is_main: number; uploaded_at: number;\n};\n\nfunction genCode(prefix: string, len = 8): string {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let s = \"\"; for (let i = 0; i < len; i++) s += chars[Math.floor(Math.random() * chars.length)];\n return prefix + s;\n}\n\n// ===== USERS =====\nexport async function getOrCreateUser(tgId: number, username: string | null, firstName: string | null, referredBy: number | null = null) {\n const existing = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n if (existing.rows.length > 0) {\n await sqlite.execute({\n sql: \"UPDATE users SET username=?, first_name=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [username, firstName, tgId],\n });\n return { user: existing.rows[0] as unknown as UserRow, created: false };\n }\n let code = genCode(\"R\");\n for (let i = 0; i < 5; i++) {\n const c = await sqlite.execute({ sql: \"SELECT 1 FROM users WHERE referral_code=?\", args: [code] });\n if (c.rows.length === 0) break;\n code = genCode(\"R\");\n }\n await sqlite.execute({\n sql: \"INSERT INTO users (tg_id, username, first_name, referral_code, referred_by) VALUES (?, ?, ?, ?, ?)\",\n args: [tgId, username, firstName, code, referredBy],\n });\n const fresh = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return { user: fresh.rows[0] as unknown as UserRow, created: true };\n}\n\nexport async function getUser(tgId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\nexport async function getUserByRefCode(code: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE referral_code=?\", args: [code] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\nexport async function setUserState(tgId: number, state: string, data: Record | null = null) {\n await sqlite.execute({\n sql: \"UPDATE users SET state=?, state_data=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [state, data ? JSON.stringify(data) : null, tgId],\n });\n}\nexport async function setActiveProject(tgId: number, projectId: number | null) {\n await sqlite.execute({ sql: \"UPDATE users SET active_project_id=? WHERE tg_id=?\", args: [projectId, tgId] });\n}\nexport async function markJoined(tgId: number, joined: boolean) {\n await sqlite.execute({ sql: \"UPDATE users SET joined_channel=? WHERE tg_id=?\", args: [joined ? 1 : 0, tgId] });\n}\nexport async function addReferral(referrerId: number, invitedId: number): Promise {\n try {\n await sqlite.execute({ sql: \"INSERT INTO referrals (referrer_id, invited_id) VALUES (?, ?)\", args: [referrerId, invitedId] });\n await sqlite.execute({ sql: \"UPDATE users SET referral_count=referral_count+1 WHERE tg_id=?\", args: [referrerId] });\n return true;\n } catch { return false; }\n}\nexport async function consumeReferrals(userId: number, amount: number) {\n await sqlite.execute({ sql: \"UPDATE users SET referral_count=referral_count-? WHERE tg_id=?\", args: [amount, userId] });\n}\n\n// ===== PROJECTS =====\nexport async function listProjectsByOwner(ownerId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE owner_id=? ORDER BY id ASC\", args: [ownerId] });\n return r.rows as unknown as ProjectRow[];\n}\nexport async function getActiveProject(ownerId: number): Promise {\n const user = await getUser(ownerId);\n if (user?.active_project_id) {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE id=? AND owner_id=?\", args: [user.active_project_id, ownerId] });\n if (r.rows.length) return r.rows[0] as unknown as ProjectRow;\n }\n const projs = await listProjectsByOwner(ownerId);\n return projs[0] ?? null;\n}\nexport async function getProjectById(id: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE id=?\", args: [id] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\nexport async function getProjectByToken(token: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE bot_token=?\", args: [token] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\nexport async function countProjects(ownerId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT COUNT(*) as c FROM projects WHERE owner_id=?\", args: [ownerId] });\n return Number((r.rows[0] as any)?.c ?? 0);\n}\nexport async function createProject(ownerId: number, name: string): Promise {\n const secret = genCode(\"W\", 16);\n const r = await sqlite.execute({\n sql: \"INSERT INTO projects (owner_id, name, webhook_secret) VALUES (?, ?, ?) RETURNING *\",\n args: [ownerId, name, secret],\n });\n return r.rows[0] as unknown as ProjectRow;\n}\nexport async function updateProject(id: number, patch: Partial) {\n const keys = Object.keys(patch); if (!keys.length) return;\n const sets = keys.map((k) => `${k}=?`).join(\", \");\n const args = keys.map((k) => (patch as any)[k]); args.push(id);\n await sqlite.execute({ sql: `UPDATE projects SET ${sets} WHERE id=?`, args });\n}\nexport async function deleteProject(id: number) {\n await sqlite.execute({ sql: \"DELETE FROM files WHERE project_id=?\", args: [id] });\n await sqlite.execute({ sql: \"DELETE FROM webhook_events WHERE project_id=?\", args: [id] });\n await sqlite.execute({ sql: \"DELETE FROM projects WHERE id=?\", args: [id] });\n}\nexport async function listAllProjects(): Promise {\n const r = await sqlite.execute(\"SELECT * FROM projects ORDER BY id DESC\");\n return r.rows as unknown as ProjectRow[];\n}\n\n// ===== FILES =====\nexport async function addFile(projectId: number, path: string, content: string, isMain = false): Promise {\n await sqlite.execute({\n sql: `INSERT INTO files (project_id, path, content, size, is_main) VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(project_id, path) DO UPDATE SET content=excluded.content, size=excluded.size, uploaded_at=strftime('%s','now')`,\n args: [projectId, path, content, content.length, isMain ? 1 : 0],\n });\n const r = await sqlite.execute({ sql: \"SELECT * FROM files WHERE project_id=? AND path=?\", args: [projectId, path] });\n return r.rows[0] as unknown as FileRow;\n}\nexport async function listFiles(projectId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM files WHERE project_id=? ORDER BY is_main DESC, path ASC\", args: [projectId] });\n return r.rows as unknown as FileRow[];\n}\nexport async function getFile(projectId: number, path: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM files WHERE project_id=? AND path=?\", args: [projectId, path] });\n return r.rows.length ? (r.rows[0] as unknown as FileRow) : null;\n}\nexport async function deleteFileDb(projectId: number, path: string) {\n await sqlite.execute({ sql: \"DELETE FROM files WHERE project_id=? AND path=?\", args: [projectId, path] });\n}\nexport async function setMainFile(projectId: number, path: string) {\n await sqlite.execute({ sql: \"UPDATE files SET is_main=0 WHERE project_id=?\", args: [projectId] });\n await sqlite.execute({ sql: \"UPDATE files SET is_main=1 WHERE project_id=? AND path=?\", args: [projectId, path] });\n await sqlite.execute({ sql: \"UPDATE projects SET main_file=? WHERE id=?\", args: [path, projectId] });\n}\n\n// ===== WEBHOOK LOG =====\nexport async function logWebhook(projectId: number | null, hash: string, direction: string, payload: string, status: number) {\n await sqlite.execute({\n sql: \"INSERT INTO webhook_events (project_id, bot_token_hash, direction, payload, status_code) VALUES (?, ?, ?, ?, ?)\",\n args: [projectId, hash, direction, payload.slice(0, 4000), status],\n });\n if (projectId) {\n await sqlite.execute({\n sql: \"UPDATE projects SET message_count=message_count+1, last_update_at=strftime('%s','now') WHERE id=?\",\n args: [projectId],\n });\n }\n}\nexport async function recentEventsForProject(projectId: number, limit = 20) {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM webhook_events WHERE project_id=? ORDER BY id DESC LIMIT ?\",\n args: [projectId, limit],\n });\n return r.rows as any[];\n}\nexport async function recentWebhookEvents(limit = 50) {\n const r = await sqlite.execute({ sql: \"SELECT * FROM webhook_events ORDER BY id DESC LIMIT ?\", args: [limit] });\n return r.rows as any[];\n}\n\n// ===== STATS / SESSIONS =====\nexport async function globalStats() {\n const num = (x: any) => Number(x.rows[0]?.c ?? 0);\n return {\n users: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM users\")),\n projects: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM projects\")),\n running: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM projects WHERE status='running'\")),\n files: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM files\")),\n messages: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM webhook_events\")),\n };\n}\nexport async function createSession(username: string): Promise {\n const token = genCode(\"S\", 32) + Date.now().toString(36);\n const expires = Math.floor(Date.now() / 1000) + 60 * 60 * 24 * 7;\n await sqlite.execute({ sql: \"INSERT INTO panel_sessions (token, username, expires_at) VALUES (?, ?, ?)\", args: [token, username, expires] });\n return token;\n}\nexport async function validateSession(token: string): Promise {\n const now = Math.floor(Date.now() / 1000);\n const r = await sqlite.execute({ sql: \"SELECT 1 FROM panel_sessions WHERE token=? AND expires_at>?\", args: [token, now] });\n return r.rows.length > 0;\n}\nexport async function deleteSession(token: string) {\n await sqlite.execute({ sql: \"DELETE FROM panel_sessions WHERE token=?\", args: [token] });\n}\n",[],[253,269],"f2a9c592-3f24-11f1-bf01-42b51c65c3df",["D",1776956334773],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","ScottHub - Telegram Bot Hosting Platform with webhooks","imageUrl","userId","3060ef0e-1f2c-4c3f-b663-3c9f482009b6","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019dbad4-a3c2-70f4-af59-375ca41cca1b","tursoName","f2a9c5923f2411f1bf0142b51c65c3df","tursoHostname","f2a9c5923f2411f1bf0142b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789508444194],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_332":328},"org",{"_11":12,"_326":-5,"_327":328,"_286":287,"_329":330,"_331":62},"branch",{"_17":128,"_13":16,"_41":49,"_318":276,"_319":-5,"_320":-5,"_321":-5,"_322":-5,"_323":-5,"_324":14,"_325":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_41":276,"_13":14,"_54":447,"_278":-5,"_279":62,"_280":281,"_282":281,"_283":284,"_285":-5,"_286":287,"_288":-5,"_289":62,"_290":-5,"_291":-5,"_292":56,"_293":294,"_295":296,"_297":298,"_299":448,"_301":-5,"_302":303,"_304":303,"_305":306,"_307":306,"_308":306,"_309":303,"_310":303,"_311":449,"_313":450,"_315":451,"_317":62},[378,381,390,392,397,399,400],"files",[378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400],"counts",{"_369":56,"_370":130,"_371":56,"_32":372,"_373":374},[353,354,355,356,357,358,359,360],{"_41":114,"_13":19,"_44":47,"_46":-5,"_48":49,"_50":110,"_52":53,"_54":115,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_18":352},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],{"_41":107,"_13":108,"_44":109,"_46":47,"_48":49,"_50":110,"_52":53,"_54":111,"_17":56,"_57":58,"_59":112,"_61":62,"_63":-5,"_18":368},{"_41":100,"_13":101,"_44":102,"_46":47,"_48":49,"_50":103,"_52":53,"_54":104,"_17":56,"_57":58,"_59":105,"_61":62,"_63":-5,"_18":367},{"_41":93,"_13":94,"_44":95,"_46":47,"_48":49,"_50":96,"_52":53,"_54":97,"_17":56,"_57":58,"_59":98,"_61":62,"_63":-5,"_18":366},{"_41":86,"_13":87,"_44":88,"_46":47,"_48":49,"_50":89,"_52":53,"_54":90,"_17":56,"_57":58,"_59":91,"_61":62,"_63":-5,"_18":365},{"_41":79,"_13":80,"_44":81,"_46":47,"_48":49,"_50":82,"_52":53,"_54":83,"_17":56,"_57":58,"_59":84,"_61":62,"_63":-5,"_18":364},{"_41":72,"_13":73,"_44":74,"_46":47,"_48":49,"_50":75,"_52":53,"_54":76,"_17":56,"_57":58,"_59":77,"_61":62,"_63":-5,"_18":363},{"_41":65,"_13":66,"_44":67,"_46":47,"_48":49,"_50":68,"_52":53,"_54":69,"_17":56,"_57":58,"_59":70,"_61":62,"_63":-5,"_18":362},{"_41":42,"_13":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_17":56,"_57":58,"_59":60,"_61":62,"_63":-5,"_18":361},[19,43],[19,66],[19,73],[19,80],[19,87],[19,94],[19,101],[19,108],"pulls","branches","forks",{"_375":56,"_377":56},"connections",{"_375":56,"_376":56},"count","unfilledCount","emptyCount",{"_41":252,"_13":253,"_44":254,"_46":-5,"_48":49,"_50":255,"_52":53,"_54":256,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_133":445,"_18":446},{"_41":268,"_13":269,"_44":270,"_46":254,"_48":49,"_50":271,"_52":53,"_54":272,"_17":56,"_57":58,"_59":273,"_61":62,"_63":-5,"_133":443,"_18":444},{"_41":261,"_13":262,"_44":263,"_46":254,"_48":49,"_50":255,"_52":53,"_54":264,"_17":56,"_57":58,"_59":265,"_61":62,"_63":-5,"_133":441,"_18":442},{"_41":114,"_13":19,"_44":47,"_46":-5,"_48":49,"_50":110,"_52":53,"_54":217,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_133":439,"_18":440},{"_41":107,"_13":108,"_44":109,"_46":47,"_48":49,"_50":110,"_52":53,"_54":249,"_17":56,"_57":58,"_59":112,"_61":62,"_63":-5,"_133":437,"_18":438},{"_41":100,"_13":101,"_44":102,"_46":47,"_48":49,"_50":103,"_52":53,"_54":246,"_17":56,"_57":58,"_59":105,"_61":62,"_63":-5,"_133":435,"_18":436},{"_41":93,"_13":94,"_44":95,"_46":47,"_48":49,"_50":96,"_52":53,"_54":243,"_17":56,"_57":58,"_59":98,"_61":62,"_63":-5,"_133":433,"_18":434},{"_41":86,"_13":87,"_44":88,"_46":47,"_48":49,"_50":89,"_52":53,"_54":240,"_17":56,"_57":58,"_59":91,"_61":62,"_63":-5,"_133":431,"_18":432},{"_41":79,"_13":80,"_44":81,"_46":47,"_48":49,"_50":82,"_52":53,"_54":237,"_17":56,"_57":58,"_59":84,"_61":62,"_63":-5,"_133":429,"_18":430},{"_41":72,"_13":73,"_44":74,"_46":47,"_48":49,"_50":75,"_52":53,"_54":234,"_17":56,"_57":58,"_59":77,"_61":62,"_63":-5,"_133":427,"_18":428},{"_41":65,"_13":66,"_44":67,"_46":47,"_48":49,"_50":68,"_52":53,"_54":231,"_17":56,"_57":58,"_59":70,"_61":62,"_63":-5,"_133":425,"_18":426},{"_41":42,"_13":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":228,"_17":56,"_57":58,"_59":60,"_61":62,"_63":-5,"_133":423,"_18":424},{"_41":201,"_13":202,"_44":203,"_46":-5,"_48":49,"_50":204,"_52":53,"_54":205,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_133":421,"_18":422},{"_41":209,"_13":210,"_44":211,"_46":203,"_48":49,"_50":204,"_52":53,"_54":212,"_17":56,"_57":213,"_59":214,"_61":62,"_63":-5,"_133":419,"_18":420},{"_41":159,"_13":160,"_44":161,"_46":-5,"_48":49,"_50":162,"_52":53,"_54":163,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_133":417,"_18":418},{"_41":194,"_13":195,"_44":196,"_46":161,"_48":49,"_50":162,"_52":53,"_54":197,"_17":56,"_57":58,"_59":198,"_61":62,"_63":-5,"_133":415,"_18":416},{"_41":186,"_13":187,"_44":188,"_46":161,"_48":49,"_50":189,"_52":53,"_54":190,"_17":56,"_57":58,"_59":191,"_61":62,"_63":-5,"_133":413,"_18":414},{"_41":178,"_13":179,"_44":180,"_46":161,"_48":49,"_50":181,"_52":53,"_54":182,"_17":56,"_57":58,"_59":183,"_61":62,"_63":-5,"_133":411,"_18":412},{"_41":170,"_13":171,"_44":172,"_46":161,"_48":49,"_50":173,"_52":53,"_54":174,"_17":56,"_57":58,"_59":175,"_61":62,"_63":-5,"_133":409,"_18":410},{"_41":144,"_13":145,"_44":146,"_46":-5,"_48":49,"_50":147,"_52":53,"_54":148,"_17":56,"_57":116,"_59":-5,"_61":62,"_63":-5,"_133":407,"_18":408},{"_41":152,"_13":153,"_44":154,"_46":146,"_48":49,"_50":147,"_52":53,"_54":155,"_17":56,"_57":58,"_59":156,"_61":62,"_63":-5,"_133":405,"_18":406},{"_41":136,"_13":137,"_44":138,"_46":-5,"_48":49,"_50":139,"_52":53,"_54":140,"_17":56,"_57":24,"_59":141,"_61":62,"_63":-5,"_133":403,"_18":404},{"_41":125,"_13":126,"_44":127,"_46":-5,"_48":49,"_50":128,"_52":53,"_54":129,"_17":130,"_57":131,"_59":132,"_61":62,"_63":-5,"_133":401,"_18":402},[],[126],[],[137],[],[145,153],[398],[145],[],[160,171],[],[160,179],[],[160,187],[],[160,195],[393,394,395,396],[160],[],[202,210],[391],[202],[],[19,43],[],[19,66],[],[19,73],[],[19,80],[],[19,87],[],[19,94],[],[19,101],[],[19,108],[382,383,384,385,386,387,388,389],[19],[],[253,262],[],[253,269],[379,380],[253],["D",1776956334773],["D",1789508444194],{"_11":12,"_332":328},{"_11":12,"_326":-5,"_327":328,"_286":287,"_329":330,"_331":62},{"_17":128,"_13":16,"_41":49,"_318":276,"_319":-5,"_320":-5,"_321":-5,"_322":-5,"_323":-5,"_324":14,"_325":12},"ctx",{"_311":-5,"_349":485,"_486":487,"_488":489,"_490":62,"_491":62,"_492":62,"_493":53,"_494":-5,"_495":-7,"_496":-7,"_497":56,"_498":62,"_499":62,"_500":-5,"_501":62,"_502":62,"_503":62,"_504":-5},"ENV",{"_456":457,"_458":459,"_460":16,"_461":462,"_463":464,"_465":466,"_467":468,"_469":470,"_471":472,"_473":474,"_475":476,"_477":478,"_479":480,"_481":482,"_483":484},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]