🤖

ScottHub

Telegram Bot Hosting · Admin Panel

\n \n

\n${body}\n

`;\n}\n\nfunction loginPage(err = \"\"): string {\n return `\n\nLogin · ScottHub\n\n\n`;\n}\n\nfunction statCard(label: string, value: number | string, icon: string): string {\n return `

${icon}

${value}

${label}

`;\n}\n\nfunction statusBadge(s: string): string {\n const cls: Record = {\n running: \"bg-emerald-500/20 text-emerald-300 border-emerald-500/40\",\n stopped: \"bg-slate-600/20 text-slate-300 border-slate-600/40\",\n expired: \"bg-rose-500/20 text-rose-300 border-rose-500/40\",\n };\n return `${esc(s)}`;\n}\n\nasync function getSessionToken(req: Request): Promise {\n const c = req.headers.get(\"cookie\") || \"\";\n const m = c.match(/scotthub_sess=([^;]+)/);\n return m ? decodeURIComponent(m[1]) : null;\n}\nasync function requireAuth(req: Request): Promise {\n const t = await getSessionToken(req);\n if (!t) return false;\n return db.validateSession(t);\n}\nfunction redirectTo(url: string): Response {\n return new Response(null, { status: 302, headers: { Location: url } });\n}\n\nexport async function handlePanel(req: Request, url: URL): Promise {\n const path = url.pathname;\n const baseUrl = await getBaseUrl();\n\n if (path === \"/panel/login\") {\n if (req.method === \"GET\") return new Response(loginPage(), { headers: { \"content-type\": \"text/html\" } });\n if (req.method === \"POST\") {\n const form = await req.formData();\n const u = form.get(\"username\"); const p = form.get(\"password\");\n if (u === PANEL_USER && p === PANEL_PASS) {\n const token = await db.createSession(String(u));\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/panel\",\n \"set-cookie\": `scotthub_sess=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`,\n },\n });\n }\n return new Response(loginPage(\"Invalid credentials\"), { headers: { \"content-type\": \"text/html\" }, status: 401 });\n }\n }\n\n if (path === \"/panel/logout\") {\n const t = await getSessionToken(req);\n if (t) await db.deleteSession(t);\n return new Response(null, { status: 302, headers: { Location: \"/panel/login\", \"set-cookie\": \"scotthub_sess=; Path=/; Max-Age=0\" } });\n }\n\n if (!(await requireAuth(req))) return redirectTo(\"/panel/login\");\n\n // Dashboard\n if (path === \"/panel\" || path === \"/panel/\") {\n const stats = await db.globalStats();\n const projects = await db.listAllProjects();\n const running = projects.filter((p) => p.status === \"running\").length;\n const body = `\n

\n ${statCard(\"Users\", stats.users, \"👤\")}\n ${statCard(\"Projects\", stats.projects, \"📦\")}\n ${statCard(\"Running\", running, \"🟢\")}\n ${statCard(\"Messages\", stats.messages, \"✉️\")}\n

Recent projects

\n \n \n \n \n \n ${projects.slice(0, 30).map((p) => `\n \n \n \n \n \n \n \n `).join(\"\")}\n

ID	Name	Owner	Bot	Status	Expires
#${p.id}	`${esc(p.name)}`	${p.owner_id}	${p.bot_username ? \"@\" + esc(p.bot_username) : \"—\"}	${statusBadge(p.status)}	${fmtDate(p.expires_at)}	Manage →

`;\n return new Response(layout(\"Dashboard\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/projects\") {\n const projects = await db.listAllProjects();\n const body = `\n

All projects (${projects.length})

\n ${projects.length === 0 ? \"

No projects yet.

\" : projects.map((p) => `\n \n

${esc(p.name)} #${p.id}

owner ${p.owner_id} · ${p.bot_username ? \"@\" + esc(p.bot_username) : \"no bot token\"}

${statusBadge(p.status)}\n

${fmtDate(p.expires_at)}

`).join(\"\")}\n

`;\n return new Response(layout(\"Projects\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Project detail\n const projMatch = path.match(/^\\/panel\\/projects\\/(\\d+)$/);\n if (projMatch) {\n const id = Number(projMatch[1]);\n const project = await db.getProjectById(id);\n if (!project) return new Response(\"Not found\", { status: 404 });\n const files = await db.listFiles(id);\n const whUrl = project.webhook_secret ? projectWebhookUrl(baseUrl, id, project.webhook_secret) : \"\";\n\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"setwebhook\" && project.bot_token) {\n const r = await tg.setWebhook(project.bot_token, whUrl);\n await db.updateProject(id, { webhook_url: whUrl, status: \"running\" });\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook SET ✅ Bot ONLINE\" : \"Error: \" + r.description)}`);\n }\n if (action === \"delwebhook\" && project.bot_token) {\n const r = await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook removed\" : \"Error: \" + r.description)}`);\n }\n if (action === \"toggle\") {\n const newStatus = project.status === \"running\" ? \"stopped\" : \"running\";\n await db.updateProject(id, { status: newStatus, stopped_at: newStatus === \"stopped\" ? Math.floor(Date.now() / 1000) : null });\n if (newStatus === \"running\" && project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n else if (newStatus === \"stopped\" && project.bot_token) await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Status → \" + newStatus)}`);\n }\n if (action === \"extend\") {\n const days = Number(form.get(\"days\") || \"2\");\n const base = project.expires_at && project.expires_at > Math.floor(Date.now() / 1000) ? project.expires_at : Math.floor(Date.now() / 1000);\n await db.updateProject(id, { expires_at: base + days * 86400, status: \"running\" });\n if (project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Extended by \" + days + \"d\")}`);\n }\n if (action === \"settoken\") {\n const t = String(form.get(\"token\") || \"\").trim();\n if (t) {\n const me = await tg.getMe(t);\n await db.updateProject(id, { bot_token: t, bot_username: me.ok ? me.result.username : null });\n }\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Token updated\")}`);\n }\n if (action === \"delete\") {\n if (project.bot_token) { try { await tg.deleteWebhook(project.bot_token); } catch {} }\n await db.deleteProject(id);\n return redirectTo(`/panel/projects?msg=${encodeURIComponent(\"Project deleted\")}`);\n }\n }\n\n let whInfo = \"\";\n if (project.bot_token) {\n const info = await tg.getWebhookInfo(project.bot_token);\n whInfo = info.ok\n ? `

${esc(JSON.stringify(info.result, null, 2))}

`\n : `

Error: ${esc(info.description || \"\")}

`;\n }\n\n const msg = url.searchParams.get(\"msg\");\n const now = Math.floor(Date.now() / 1000);\n const remaining = project.expires_at ? project.expires_at - now : 0;\n\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n← all projects\n

${esc(project.name)} #${project.id}

Owner: ${project.owner_id} · Created ${fmtDate(project.created_at)}

\n\n

Bot Info

Status: ${statusBadge(project.status)}

Bot: ${project.bot_username ? \"@\" + esc(project.bot_username) : \"not set\"}

Token: ${project.bot_token ? esc(project.bot_token.slice(0, 10)) + \"…\" : \"not set\"}

Admin id: ${esc(project.admin_id || \"—\")}

Main file: ${esc(project.main_file || \"—\")}

Messages: ${project.message_count}

Expires: ${project.expires_at ? `${fmtDate(project.expires_at)} (${fmtDuration(Math.max(0, remaining))})` : \"—\"}

\n\n

Webhook Router URL

\n ${esc(whUrl)}\n \n

\n\n

Manual Controls

\n \n \n \n

\n\n

Telegram getWebhookInfo

\n ${whInfo || \"

No bot token set.

\"}\n

\n\n

Detected Imports (pip)

\n ${esc(project.detected_imports || \"—\")}\n

\n\n

Files (${files.length})

${files.map((f) => `

${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)}

${f.size}b · ${fmtDate(f.uploaded_at)}

`).join(\"\") || \"

No files.

\"}\n

`;\n return new Response(layout(project.name, body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/events\") {\n const events = await db.recentWebhookEvents(100);\n const body = `\n

Recent webhook events (${events.length})

\n \n \n \n \n ${events.map((e: any) => `\n \n \n \n \n \n `).join(\"\") || \"\"}\n

Time	Project	Dir	Status	Payload
${fmtDate(e.created_at)}	#${e.project_id ?? \"—\"}	${esc(e.direction)}	${e.status_code}	`${esc(String(e.payload \|\| \"\").slice(0, 200))}`
No events yet.

`;\n return new Response(layout(\"Events\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/main-webhook\") {\n const endpoint = `${baseUrl}/bot`;\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"set\") {\n const r = await tg.setWebhook(BOT_TOKEN, endpoint);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Main bot webhook set ✅\" : \"Error: \" + (r.description || \"\"))}`);\n }\n if (action === \"delete\") {\n const r = await tg.deleteWebhook(BOT_TOKEN);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Webhook deleted\" : \"Error: \" + (r.description || \"\"))}`);\n }\n }\n const info = await tg.getWebhookInfo(BOT_TOKEN);\n const me = await tg.getMe(BOT_TOKEN);\n const msg = url.searchParams.get(\"msg\");\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n

Main ScottHub Bot

Bot: ${me.ok ? `@${esc(me.result.username)} (${esc(me.result.first_name)})` : \"token invalid\"}

Webhook endpoint: ${esc(endpoint)}

\n \n

Telegram getWebhookInfo

${esc(JSON.stringify(info, null, 2))}

`;\n return new Response(layout(\"Main Webhook\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n return new Response(\"Panel page not found\", { status: 404 });\n}\n",[],[301,311],"9643eb4c-3f25-11f1-986f-42b51c65c3df","hosted_webhook.ts","9643ec00-3f25-11f1-986f-42b51c65c3df",13,["D",1776956609241],"// Router for hosted bots\n// Telegram POSTs updates for the hosted bot to /tgwebhook/:projectId/:secret\n// We log the update and simulate basic responses based on parsed Python handlers.\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { hashToken } from \"../lib/utils.ts\";\n\nexport async function handleHostedWebhook(projectId: number, secret: string, body: any): Promise {\n const project = await db.getProjectById(projectId);\n if (!project || project.webhook_secret !== secret) return new Response(\"not found\", { status: 404 });\n\n const tokenHash = project.bot_token ? await hashToken(project.bot_token) : \"none\";\n const now = Math.floor(Date.now() / 1000);\n\n if (project.status !== \"running\" || (project.expires_at && project.expires_at <= now)) {\n await db.logWebhook(projectId, tokenHash, \"dropped\", JSON.stringify(body), 200);\n return new Response(\"ok (not running)\", { status: 200 });\n }\n\n await db.logWebhook(projectId, tokenHash, \"in\", JSON.stringify(body), 200);\n\n const msg = body?.message;\n if (msg && project.bot_token) {\n const chatId = msg.chat.id;\n const text: string = msg.text || \"\";\n\n const mainFile = project.main_file ? await db.getFile(project.id, project.main_file) : null;\n const allFiles = await db.listFiles(project.id);\n\n if (mainFile?.content) {\n const response = executeBotLogic(mainFile.content, allFiles, msg);\n if (response) {\n await tg.sendMessage(project.bot_token, chatId, response);\n return new Response(\"ok\", { status: 200 });\n }\n }\n\n if (text === \"/start\" || text === \"/help\" || text === \"/ping\") {\n const username = project.bot_username ? \"@\" + project.bot_username : \"this bot\";\n await tg.sendMessage(\n project.bot_token, chatId,\n `🤖 ${username} is hosted by ScottHub.\\n\\n` +\n `Project: ${project.name}\\n` +\n `Status: running\\nFiles: ${allFiles.length}\\n\\n` +\n `Running via ScottHub webhook router.`,\n );\n }\n }\n\n const cb = body?.callback_query;\n if (cb && project.bot_token) { try { await tg.answerCallback(project.bot_token, cb.id, \"ok\"); } catch {} }\n\n return new Response(\"ok\", { status: 200 });\n}\n\nfunction executeBotLogic(mainCode: string, allFiles: db.FileRow[], msg: any): string | null {\n const text: string = msg.text || \"\";\n const command = text.split(/\\s+/)[0]?.toLowerCase();\n const handlers = extractCommandHandlers(mainCode);\n for (const f of allFiles) if (f.path.endsWith(\".py\") && !f.is_main) handlers.push(...extractCommandHandlers(f.content));\n for (const h of handlers) if (command === \"/\" + h.command || command === h.command) if (h.replyText) return h.replyText;\n return null;\n}\n\ninterface CommandHandler { command: string; replyText: string | null }\nfunction extractCommandHandlers(code: string): CommandHandler[] {\n const handlers: CommandHandler[] = [];\n const patterns = [\n /commands?\\s*=\\s*\\[['\"](\\w+)['\"]/g,\n /Command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n /filters\\.command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n ];\n for (const pat of patterns) {\n let m;\n while ((m = pat.exec(code)) !== null) {\n const cmd = m[1];\n const nearby = code.slice(m.index, m.index + 600);\n const reply = nearby.match(/(?:reply|reply_text|send_message|answer|bot\\.reply_to)\\s*\\(\\s*[^,)]*,?\\s*[\"']([^\"']+)[\"']/)\n || nearby.match(/(?:reply|reply_text|send_message|answer)\\s*\\(\\s*[\"']([^\"']+)[\"']/);\n handlers.push({ command: cmd, replyText: reply ? reply[1] : null });\n }\n }\n return handlers;\n}\n",[],[301,319],"3beee0ca-3f25-11f1-8f86-42b51c65c3df","archive.ts","3beee1ba-3f25-11f1-8f86-42b51c65c3df",9,["D",1776956457692],"// Forward every uploaded file to @ProjectScottCode for safekeeping\nimport * as tg from \"../lib/telegram.ts\";\nimport { BOT_TOKEN, ARCHIVE_CHANNEL } from \"../lib/config.ts\";\n\nexport async function archiveUpload(\n ownerId: number, ownerName: string | null, projectName: string,\n filename: string, content: string,\n) {\n try {\n const bytes = new TextEncoder().encode(content);\n const caption = [\n `🗂 ScottHub Upload`,\n `Owner: ${ownerId}${ownerName ? \" (\" + ownerName + \")\" : \"\"}`,\n `Project: ${projectName}`,\n `File: ${filename}`,\n `Size: ${bytes.length} bytes`,\n `Time: ${new Date().toISOString()}`,\n ].join(\"\\n\");\n await tg.sendDocument(BOT_TOKEN, ARCHIVE_CHANNEL, bytes, filename, caption);\n } catch (e) {\n console.error(\"archive failed:\", e);\n }\n}\n",[],[301,327],"d2bebade-3f25-11f1-b87d-42b51c65c3df","app.ts","d2bebb9c-3f25-11f1-b87d-42b51c65c3df",15,["D",1776956710710],"// Hono HTTP entrypoint for ScottHub\nimport { Hono } from \"npm:hono\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { runMigrations } from \"../database/schema.ts\";\nimport { handleUpdate } from \"./router.ts\";\nimport { handleHostedWebhook } from \"./hosted_webhook.ts\";\nimport { handlePanel } from \"./panel.ts\";\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nlet migrated = false;\napp.use(\"*\", async (c, next) => {\n if (!migrated) { await runMigrations(); migrated = true; }\n await next();\n});\n\nfunction landing(): string {\n return `\n\nScottHub — Telegram Bot Hosting\n\n\n

🤖

ScottHub

Telegram Bot Hosting Platform

How to use

Open the bot in Telegram and press /start
Join @ScottHubs
Invite 2 friends via your Referral link
Upload your Python bot in 🖥 Host → ⬆️ Upload Files
Bot goes live automatically through the ScottHub webhook router!

\n \n

📢 Channel

@ScottHubs

\n \n

🔐 Admin Panel

Manage webhooks

\n \n

📄 View Source

Read the code

`;\n}\n\napp.get(\"/\", (c) => c.html(landing()));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/health\", (c) => c.json({ ok: true, ts: Date.now() }));\n\n// Main ScottHub bot webhook\napp.post(\"/bot\", async (c) => {\n const body = await c.req.json().catch(() => null);\n if (body) { try { await handleUpdate(body); } catch (e) { console.error(\"handleUpdate:\", e); } }\n return c.text(\"ok\");\n});\n\n// Hosted-bot webhook router\napp.post(\"/tgwebhook/:id/:secret\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n return handleHostedWebhook(Number(c.req.param(\"id\")), c.req.param(\"secret\"), body);\n});\n\n// Panel (delegates to its own handler to preserve cookies + forms cleanly)\napp.all(\"/panel\", async (c) => handlePanel(c.req.raw, new URL(c.req.url)));\napp.all(\"/panel/*\", async (c) => handlePanel(c.req.raw, new URL(c.req.url)));\n\nexport default app;\n",[],[301,335],"7f782086-3f25-11f1-bed7-42b51c65c3df","actions.ts","7f78211c-3f25-11f1-bed7-42b51c65c3df",11,["D",1776956570998],"// Uploads, file mgmt, stop/restart, project switching\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { analyzePythonFile } from \"../lib/parser.ts\";\nimport { esc, fmtDuration, getBaseUrl, projectWebhookUrl, safePath } from \"../lib/utils.ts\";\nimport { BOT_TOKEN, MAX_FILE_BYTES, MAX_PROJECTS_PER_USER } from \"../lib/config.ts\";\nimport { canCreateNewProject, claimHostSlot, isAdmin } from \"./access.ts\";\nimport { archiveUpload } from \"./archive.ts\";\nimport { showHost, showManage } from \"./screens.ts\";\n\nexport async function handleDocument(chatId: number, userId: number, doc: { file_id: string; file_name: string; file_size: number; mime_type?: string }) {\n if (doc.file_size > MAX_FILE_BYTES) {\n await tg.sendMessage(BOT_TOKEN, chatId, `❌ File too large (max ${MAX_FILE_BYTES} bytes).`, { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const name = safePath(doc.file_name || \"file.txt\");\n\n const info = await tg.getFile(BOT_TOKEN, doc.file_id);\n if (!info?.file_path) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Could not fetch file from Telegram.\");\n return;\n }\n const content = await tg.downloadFile(BOT_TOKEN, info.file_path);\n\n const user = await db.getUser(userId);\n if (!user) return;\n const state = user.state || \"idle\";\n const isPy = name.endsWith(\".py\");\n\n // \"Add File\" sub-upload flow\n if (state === \"awaiting_sub_upload\") {\n const subPath = safePath((JSON.parse(user.state_data || \"{}\") as any).subPath || name);\n const project = await db.getActiveProject(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No active project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.addFile(project.id, subPath, content, false);\n await archiveUpload(userId, user.first_name, project.name, subPath, content);\n if (subPath.endsWith(\".py\")) {\n const a = analyzePythonFile(content);\n if (a.imports.pip.length) {\n const existing = JSON.parse(project.detected_imports || \"[]\") as string[];\n const merged = [...new Set([...existing, ...a.imports.pip])];\n await db.updateProject(project.id, { detected_imports: JSON.stringify(merged) });\n }\n }\n await tg.sendMessage(BOT_TOKEN, chatId,\n `✅ Added ${esc(subPath)} to project ${esc(project.name)}.\\nFile is saved in database and forwarded to @ProjectScottCode.`,\n { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n\n // Main upload flow — new or replace main of the ACTIVE slot\n const existingProjects = await db.listProjectsByOwner(userId);\n const active = await db.getActiveProject(userId);\n const now = Math.floor(Date.now() / 1000);\n const activeIsAlive = active && active.expires_at && active.expires_at > now;\n let project = activeIsAlive ? active! : null;\n\n if (!project) {\n // need a new slot (or re-using expired active)\n const check = await canCreateNewProject(userId);\n if (!check.allowed && !(active && !activeIsAlive)) {\n await tg.sendMessage(BOT_TOKEN, chatId,\n `🔒 Can't host yet.\\n${check.reason}\\nReferrals: ${check.have}/${check.need}\\n\\nTap 👥 Referral.`,\n { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n const claim = await claimHostSlot(userId);\n if (!claim.ok) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ \" + claim.reason, { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n if (active && !activeIsAlive) {\n // renew existing expired slot\n await db.updateProject(active.id, { expires_at: claim.expiresAt, started_at: now, stopped_at: null, status: \"running\" });\n project = await db.getProjectById(active.id);\n } else {\n // brand new project\n if (existingProjects.length >= MAX_PROJECTS_PER_USER && !isAdmin(userId)) {\n await tg.sendMessage(BOT_TOKEN, chatId, `❌ Slot limit: ${MAX_PROJECTS_PER_USER}. Stop & delete one first.`, { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n project = await db.createProject(userId, name.replace(/\\.py$/, \"\"));\n await db.updateProject(project.id, { expires_at: claim.expiresAt, started_at: now, status: \"running\" });\n project = await db.getProjectById(project.id);\n await db.setActiveProject(userId, project!.id);\n }\n }\n if (!project) return;\n\n // Store the file\n const existingFiles = await db.listFiles(project.id);\n const makeMain = isPy && (existingFiles.length === 0 || !project.main_file);\n await db.addFile(project.id, name, content, makeMain);\n if (makeMain) await db.setMainFile(project.id, name);\n\n // Archive to @ProjectScottCode\n await archiveUpload(userId, user.first_name, project.name, name, content);\n\n // Smart analysis\n let analysisText = \"\";\n if (isPy) {\n const a = analyzePythonFile(content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n\n if (a.botToken) {\n const me = await tg.getMe(a.botToken);\n if (me.ok) await db.updateProject(project.id, { bot_username: me.result.username });\n try {\n const base = await getBaseUrl();\n const whUrl = projectWebhookUrl(base, project.id, project.webhook_secret || \"\");\n await db.updateProject(project.id, { webhook_url: whUrl });\n const whResult = await tg.setWebhook(a.botToken, whUrl);\n if (whResult.ok) analysisText += \"\\n🔌 Webhook auto-configured! ✅ Bot is ONLINE.\";\n else analysisText += `\\n⚠️ Webhook set failed: ${whResult.description}`;\n } catch (e) { console.error(\"auto webhook:\", e); }\n }\n\n analysisText +=\n `\\n\\n🧠 Smart analysis\\n` +\n `• Bot token: ${a.botToken ? \"✅ detected\" : \"❌ not found\"}\\n` +\n `• Admin id: ${a.adminId ? `✅ ${esc(a.adminId)}` : \"❌ not found\"}\\n` +\n `• Imports detected: ${a.imports.imports.length}\\n` +\n (a.imports.pip.length ? `• Auto-install: ${esc(a.imports.pip.join(\" \"))}\\n` : \"\") +\n `• Lines: ${a.lines}`;\n }\n\n const updated = await db.getProjectById(project.id);\n const remaining = updated?.expires_at ? updated.expires_at - now : 0;\n\n await tg.sendMessage(BOT_TOKEN, chatId,\n `✅ File uploaded\\n\\n📄 ${esc(name)} (${content.length} bytes)\\n` +\n (makeMain ? `⭐ Marked as main file\\n` : \"\") +\n `📤 Forwarded to @ProjectScottCode\\n` +\n `⏱ Host time: ${fmtDuration(remaining)}${analysisText}`,\n { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n\nexport async function handleStop(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project to stop.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n await db.updateProject(project.id, { status: \"stopped\", stopped_at: Math.floor(Date.now() / 1000) });\n if (project.bot_token) { try { await tg.deleteWebhook(project.bot_token); } catch {} }\n await tg.sendMessage(BOT_TOKEN, chatId, \"⏹ Bot stopped.\\nWebhook removed.\", { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function handleRestart(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project to restart.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n const now = Math.floor(Date.now() / 1000);\n if (project.expires_at && project.expires_at <= now) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Host time expired. Invite 2 users and upload again.\", { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n await db.updateProject(project.id, { status: \"running\", stopped_at: null });\n if (project.bot_token && project.webhook_secret) {\n try {\n const base = await getBaseUrl();\n await tg.setWebhook(project.bot_token, projectWebhookUrl(base, project.id, project.webhook_secret));\n } catch {}\n }\n await tg.sendMessage(BOT_TOKEN, chatId, \"🔄 Bot restarted.\\nWebhook routing resumed.\", { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function promptUpload(chatId: number, userId: number) {\n const check = await canCreateNewProject(userId);\n const existing = await db.listProjectsByOwner(userId);\n const hasAlive = existing.some((p) => p.expires_at && p.expires_at > Math.floor(Date.now() / 1000));\n if (!check.allowed && !hasAlive) {\n await tg.sendMessage(BOT_TOKEN, chatId,\n `🔒 Locked\\n\\n${check.reason}\\nReferrals: ${check.have}/${check.need}\\n\\nTap 👥 Referral.`,\n { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_upload\");\n await tg.sendMessage(BOT_TOKEN, chatId,\n `⬆️ Upload your bot\\n\\nSend your Python bot file (.py) as a document.\\n\\nScottHub auto-detects:\\n• bot token • admin id • imports/pip packages\\n\\n/cancel to abort.`,\n { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function promptAddFile(chatId: number, userId: number) {\n await db.setUserState(userId, \"awaiting_sub_path\");\n await tg.sendMessage(BOT_TOKEN, chatId,\n \"📝 Send the relative path for the new file (e.g. plugins/helper.py or config.py).\\nThen send it as a document.\\n\\n/cancel to abort.\",\n { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleSubPath(chatId: number, userId: number, text: string) {\n const clean = safePath(text);\n if (!clean || clean.length > 120) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid path.\", { reply_markup: tg.BACK_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_sub_upload\", { subPath: clean });\n await tg.sendMessage(BOT_TOKEN, chatId, `📂 Path set to ${esc(clean)}\\n\\nNow send the file as a document.`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleDeleteFilePrompt(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n if (!files.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No files to delete.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n await db.setUserState(userId, \"awaiting_delete_path\");\n const list = files.map((f) => `• ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `🗑 Send the path to delete:\\n\\n${list}\\n\\n/cancel to abort.`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleDeletePath(chatId: number, userId: number, text: string) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file) { await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such file.\", { reply_markup: tg.MANAGE_KEYBOARD }); await db.setUserState(userId, \"manage\"); return; }\n if (file.is_main) { await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Can't delete main file.\", { reply_markup: tg.MANAGE_KEYBOARD }); await db.setUserState(userId, \"manage\"); return; }\n await db.deleteFileDb(project.id, clean);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Deleted ${esc(clean)}`, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleSetMainPrompt(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n const py = files.filter((f) => f.path.endsWith(\".py\"));\n if (!py.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No .py files yet.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n await db.setUserState(userId, \"awaiting_main_path\");\n const list = py.map((f) => `${f.is_main ? \"⭐\" : \" \"} ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Send path of file to mark as main:\\n\\n${list}`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleSetMainPath(chatId: number, userId: number, text: string) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file || !clean.endsWith(\".py\")) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such .py file.\", { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n await db.setMainFile(project.id, clean);\n const a = analyzePythonFile(file.content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Main file set to ${esc(clean)}`, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleListFiles(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n const files = await db.listFiles(project.id);\n if (!files.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No files.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n const list = files.map((f) => `${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)} — ${f.size}b`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `📁 Files in ${esc(project.name)}\\n\\n${list}`, { reply_markup: tg.MANAGE_KEYBOARD });\n}\n\nexport async function handleSwitchSelection(chatId: number, userId: number, text: string) {\n // expected text pattern: \"✅ #12 name\" or \"#12 name\"\n const m = text.match(/#(\\d+)/);\n if (!m) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid choice.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n const id = Number(m[1]);\n const proj = await db.getProjectById(id);\n if (!proj || proj.owner_id !== userId) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Not your project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.setActiveProject(userId, id);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Active project → ${esc(proj.name)}`, { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n",[],[301,343],"38f4ab02-3f25-11f1-8f86-42b51c65c3df","access.ts","38f4abca-3f25-11f1-8f86-42b51c65c3df",8,["D",1776956452693],"// Channel-join + referral gate\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { BOT_TOKEN, CHANNEL, ADMIN_ID, REFERRALS_REQUIRED, HOST_DURATION_SECONDS, MAX_PROJECTS_PER_USER } from \"../lib/config.ts\";\n\nexport function isAdmin(tgId: number): boolean { return tgId === ADMIN_ID; }\n\nexport async function ensureChannelJoined(chatId: number, userId: number): Promise {\n if (isAdmin(userId)) { await db.markJoined(userId, true); return true; }\n const r = await tg.checkChannelMember(BOT_TOKEN, CHANNEL, userId);\n if (r.ok && r.isMember) { await db.markJoined(userId, true); return true; }\n await db.markJoined(userId, false);\n await tg.sendMessage(\n BOT_TOKEN, chatId,\n `🔒 Join Required\\n\\nTo use ScottHub please join our channel:\\n👉 https://t.me/ScottHubs\\n\\nThen press /start again.`,\n { reply_markup: tg.REMOVE_KEYBOARD },\n );\n return false;\n}\n\nexport type HostCheck =\n | { allowed: true; reason: \"admin\" | \"referrals\" | \"renew\" }\n | { allowed: false; need: number; have: number; reason: string };\n\nexport async function canCreateNewProject(userId: number): Promise {\n if (isAdmin(userId)) return { allowed: true, reason: \"admin\" };\n const count = await db.countProjects(userId);\n if (count >= MAX_PROJECTS_PER_USER) {\n return { allowed: false, need: 0, have: count, reason: `Max ${MAX_PROJECTS_PER_USER} bot slots reached. Stop/delete one first.` };\n }\n const user = await db.getUser(userId);\n if (!user) return { allowed: false, need: REFERRALS_REQUIRED, have: 0, reason: \"User not registered\" };\n if (user.referral_count >= REFERRALS_REQUIRED) return { allowed: true, reason: \"referrals\" };\n return { allowed: false, need: REFERRALS_REQUIRED, have: user.referral_count, reason: \"Not enough referrals\" };\n}\n\n/** Claim (consume) referrals for a NEW host slot. Admin is free. */\nexport async function claimHostSlot(userId: number): Promise<{ ok: true; expiresAt: number } | { ok: false; reason: string }> {\n const expiresAt = Math.floor(Date.now() / 1000) + HOST_DURATION_SECONDS;\n if (isAdmin(userId)) return { ok: true, expiresAt };\n const user = await db.getUser(userId);\n if (!user) return { ok: false, reason: \"User not found\" };\n if (user.referral_count < REFERRALS_REQUIRED) {\n return { ok: false, reason: `Need ${REFERRALS_REQUIRED} referrals (you have ${user.referral_count})` };\n }\n await db.consumeReferrals(userId, REFERRALS_REQUIRED);\n return { ok: true, expiresAt };\n}\n",[],[301,351],"38f4c89e-3f25-11f1-8f86-42b51c65c3df",["D",1776956452693],[189,190,191,192,193,194,195,196],[301],["D",1776956400462],[],[18,66],["D",1776956440212],[],[18,81],["D",1776956400462],[186,187],[18],["D",1776956334773],["D",1789508444194],{"_11":12,"_135":72},{"_11":12,"_131":-5,"_71":72,"_31":70,"_132":133,"_134":30},{"_40":122,"_13":16,"_34":37,"_123":85,"_124":-5,"_125":-5,"_126":-5,"_127":-5,"_128":-5,"_129":14,"_130":12},"ctx",{"_54":-5,"_154":409,"_410":411,"_412":413,"_414":30,"_415":30,"_416":30,"_417":24,"_418":-5,"_419":-7,"_420":-7,"_421":26,"_422":30,"_423":30,"_424":-5,"_425":30,"_426":30,"_427":30,"_428":-5},"ENV",{"_380":381,"_382":383,"_384":16,"_385":386,"_387":388,"_389":390,"_391":392,"_393":394,"_395":396,"_397":398,"_399":400,"_401":402,"_403":404,"_405":406,"_407":408},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · database