[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_309":310,"_311":312},"routes/_app.x.$handle.$name",{"_103":102,"_37":50,"_111":93,"_32":106,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_26":-5,"_122":-5,"_123":-5,"_124":30,"_125":126,"_127":128,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_37":50,"_43":51,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":-5,"_62":30,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_75":-5,"_76":77,"_78":77,"_79":80,"_81":80,"_82":80,"_83":77,"_84":77,"_85":86,"_87":88,"_89":90,"_91":30},"version",14,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","a420d503-0830-4003-a179-fea354ccde46","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":14,"_46":47,"_29":30},"previous","deleted",false,"deletedHere","path","handlers/panel.ts","latestPath","fileId","c7217dba-3f25-11f1-a4ae-42b51c65c3df","name","panel.ts","fileType","script","content","// Web admin panel\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { esc, fmtDate, fmtDuration, getBaseUrl, projectWebhookUrl } from \"../lib/utils.ts\";\nimport { BOT_TOKEN, PANEL_USER, PANEL_PASS } from \"../lib/config.ts\";\n\nfunction layout(title: string, body: string): string {\n return `\n\n\n${esc(title)} · ScottHub\n\n\n

🤖

ScottHub

Telegram Bot Hosting · Admin Panel

\n \n

\n${body}\n

`;\n}\n\nfunction loginPage(err = \"\"): string {\n return `\n\nLogin · ScottHub\n\n\n`;\n}\n\nfunction statCard(label: string, value: number | string, icon: string): string {\n return `

${icon}

${value}

${label}

`;\n}\n\nfunction statusBadge(s: string): string {\n const cls: Record = {\n running: \"bg-emerald-500/20 text-emerald-300 border-emerald-500/40\",\n stopped: \"bg-slate-600/20 text-slate-300 border-slate-600/40\",\n expired: \"bg-rose-500/20 text-rose-300 border-rose-500/40\",\n };\n return `${esc(s)}`;\n}\n\nasync function getSessionToken(req: Request): Promise {\n const c = req.headers.get(\"cookie\") || \"\";\n const m = c.match(/scotthub_sess=([^;]+)/);\n return m ? decodeURIComponent(m[1]) : null;\n}\nasync function requireAuth(req: Request): Promise {\n const t = await getSessionToken(req);\n if (!t) return false;\n return db.validateSession(t);\n}\nfunction redirectTo(url: string): Response {\n return new Response(null, { status: 302, headers: { Location: url } });\n}\n\nexport async function handlePanel(req: Request, url: URL): Promise {\n const path = url.pathname;\n const baseUrl = await getBaseUrl();\n\n if (path === \"/panel/login\") {\n if (req.method === \"GET\") return new Response(loginPage(), { headers: { \"content-type\": \"text/html\" } });\n if (req.method === \"POST\") {\n const form = await req.formData();\n const u = form.get(\"username\"); const p = form.get(\"password\");\n if (u === PANEL_USER && p === PANEL_PASS) {\n const token = await db.createSession(String(u));\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/panel\",\n \"set-cookie\": `scotthub_sess=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`,\n },\n });\n }\n return new Response(loginPage(\"Invalid credentials\"), { headers: { \"content-type\": \"text/html\" }, status: 401 });\n }\n }\n\n if (path === \"/panel/logout\") {\n const t = await getSessionToken(req);\n if (t) await db.deleteSession(t);\n return new Response(null, { status: 302, headers: { Location: \"/panel/login\", \"set-cookie\": \"scotthub_sess=; Path=/; Max-Age=0\" } });\n }\n\n if (!(await requireAuth(req))) return redirectTo(\"/panel/login\");\n\n // Dashboard\n if (path === \"/panel\" || path === \"/panel/\") {\n const stats = await db.globalStats();\n const projects = await db.listAllProjects();\n const running = projects.filter((p) => p.status === \"running\").length;\n const body = `\n

\n ${statCard(\"Users\", stats.users, \"👤\")}\n ${statCard(\"Projects\", stats.projects, \"📦\")}\n ${statCard(\"Running\", running, \"🟢\")}\n ${statCard(\"Messages\", stats.messages, \"✉️\")}\n

Recent projects

\n \n \n \n \n \n ${projects.slice(0, 30).map((p) => `\n \n \n \n \n \n \n \n `).join(\"\")}\n

ID	Name	Owner	Bot	Status	Expires
#${p.id}	`${esc(p.name)}`	${p.owner_id}	${p.bot_username ? \"@\" + esc(p.bot_username) : \"—\"}	${statusBadge(p.status)}	${fmtDate(p.expires_at)}	Manage →

`;\n return new Response(layout(\"Dashboard\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/projects\") {\n const projects = await db.listAllProjects();\n const body = `\n

All projects (${projects.length})

\n ${projects.length === 0 ? \"

No projects yet.

\" : projects.map((p) => `\n \n

${esc(p.name)} #${p.id}

owner ${p.owner_id} · ${p.bot_username ? \"@\" + esc(p.bot_username) : \"no bot token\"}

${statusBadge(p.status)}\n

${fmtDate(p.expires_at)}

`).join(\"\")}\n

`;\n return new Response(layout(\"Projects\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Project detail\n const projMatch = path.match(/^\\/panel\\/projects\\/(\\d+)$/);\n if (projMatch) {\n const id = Number(projMatch[1]);\n const project = await db.getProjectById(id);\n if (!project) return new Response(\"Not found\", { status: 404 });\n const files = await db.listFiles(id);\n const whUrl = project.webhook_secret ? projectWebhookUrl(baseUrl, id, project.webhook_secret) : \"\";\n\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"setwebhook\" && project.bot_token) {\n const r = await tg.setWebhook(project.bot_token, whUrl);\n await db.updateProject(id, { webhook_url: whUrl, status: \"running\" });\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook SET ✅ Bot ONLINE\" : \"Error: \" + r.description)}`);\n }\n if (action === \"delwebhook\" && project.bot_token) {\n const r = await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook removed\" : \"Error: \" + r.description)}`);\n }\n if (action === \"toggle\") {\n const newStatus = project.status === \"running\" ? \"stopped\" : \"running\";\n await db.updateProject(id, { status: newStatus, stopped_at: newStatus === \"stopped\" ? Math.floor(Date.now() / 1000) : null });\n if (newStatus === \"running\" && project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n else if (newStatus === \"stopped\" && project.bot_token) await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Status → \" + newStatus)}`);\n }\n if (action === \"extend\") {\n const days = Number(form.get(\"days\") || \"2\");\n const base = project.expires_at && project.expires_at > Math.floor(Date.now() / 1000) ? project.expires_at : Math.floor(Date.now() / 1000);\n await db.updateProject(id, { expires_at: base + days * 86400, status: \"running\" });\n if (project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Extended by \" + days + \"d\")}`);\n }\n if (action === \"settoken\") {\n const t = String(form.get(\"token\") || \"\").trim();\n if (t) {\n const me = await tg.getMe(t);\n await db.updateProject(id, { bot_token: t, bot_username: me.ok ? me.result.username : null });\n }\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Token updated\")}`);\n }\n if (action === \"delete\") {\n if (project.bot_token) { try { await tg.deleteWebhook(project.bot_token); } catch {} }\n await db.deleteProject(id);\n return redirectTo(`/panel/projects?msg=${encodeURIComponent(\"Project deleted\")}`);\n }\n }\n\n let whInfo = \"\";\n if (project.bot_token) {\n const info = await tg.getWebhookInfo(project.bot_token);\n whInfo = info.ok\n ? `

${esc(JSON.stringify(info.result, null, 2))}

`\n : `

Error: ${esc(info.description || \"\")}

`;\n }\n\n const msg = url.searchParams.get(\"msg\");\n const now = Math.floor(Date.now() / 1000);\n const remaining = project.expires_at ? project.expires_at - now : 0;\n\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n← all projects\n

${esc(project.name)} #${project.id}

Owner: ${project.owner_id} · Created ${fmtDate(project.created_at)}

\n\n

Bot Info

Status: ${statusBadge(project.status)}

Bot: ${project.bot_username ? \"@\" + esc(project.bot_username) : \"not set\"}

Token: ${project.bot_token ? esc(project.bot_token.slice(0, 10)) + \"…\" : \"not set\"}

Admin id: ${esc(project.admin_id || \"—\")}

Main file: ${esc(project.main_file || \"—\")}

Messages: ${project.message_count}

Expires: ${project.expires_at ? `${fmtDate(project.expires_at)} (${fmtDuration(Math.max(0, remaining))})` : \"—\"}

\n\n

Webhook Router URL

\n ${esc(whUrl)}\n \n

\n\n

Manual Controls

\n \n \n \n

\n\n

Telegram getWebhookInfo

\n ${whInfo || \"

No bot token set.

\"}\n

\n\n

Detected Imports (pip)

\n ${esc(project.detected_imports || \"—\")}\n

\n\n

Files (${files.length})

${files.map((f) => `

${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)}

${f.size}b · ${fmtDate(f.uploaded_at)}

`).join(\"\") || \"

No files.

\"}\n

`;\n return new Response(layout(project.name, body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/events\") {\n const events = await db.recentWebhookEvents(100);\n const body = `\n

Recent webhook events (${events.length})

\n \n \n \n \n ${events.map((e: any) => `\n \n \n \n \n \n `).join(\"\") || \"\"}\n

Time	Project	Dir	Status	Payload
${fmtDate(e.created_at)}	#${e.project_id ?? \"—\"}	${esc(e.direction)}	${e.status_code}	`${esc(String(e.payload \|\| \"\").slice(0, 200))}`
No events yet.

`;\n return new Response(layout(\"Events\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/main-webhook\") {\n const endpoint = `${baseUrl}/bot`;\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"set\") {\n const r = await tg.setWebhook(BOT_TOKEN, endpoint);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Main bot webhook set ✅\" : \"Error: \" + (r.description || \"\"))}`);\n }\n if (action === \"delete\") {\n const r = await tg.deleteWebhook(BOT_TOKEN);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Webhook deleted\" : \"Error: \" + (r.description || \"\"))}`);\n }\n }\n const info = await tg.getWebhookInfo(BOT_TOKEN);\n const me = await tg.getMe(BOT_TOKEN);\n const msg = url.searchParams.get(\"msg\");\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n

Main ScottHub Bot

Bot: ${me.ok ? `@${esc(me.result.username)} (${esc(me.result.first_name)})` : \"token invalid\"}

Webhook endpoint: ${esc(endpoint)}

\n \n

Telegram getWebhookInfo

${esc(JSON.stringify(info, null, 2))}

`;\n return new Response(layout(\"Main Webhook\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n return new Response(\"Panel page not found\", { status: 404 });\n}\n","createdAt",["D",1776956691227],"branchVersion","branchId","f2aa5b74-3f24-11f1-bf01-42b51c65c3df","id","f2a9c592-3f24-11f1-bf01-42b51c65c3df","scotthub",["D",1776956334773],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","ScottHub - Telegram Bot Hosting Platform with webhooks","imageUrl","3060ef0e-1f2c-4c3f-b663-3c9f482009b6","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019dbad4-a3c2-70f4-af59-375ca41cca1b","tursoName","f2a9c5923f2411f1bf0142b51c65c3df","tursoHostname","f2a9c5923f2411f1bf0142b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789508444194],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_103":102,"_110":106},"org",{"_103":102,"_104":-5,"_105":106,"_19":60,"_107":108,"_109":30},"branch",{"_13":92,"_37":93,"_48":47,"_94":49,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":50,"_101":102},"isOwned",19,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","reymonddilig13","handle","displayName","avatar","","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_48":49,"_37":50,"_43":304,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":-5,"_62":30,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":70,"_71":72,"_73":305,"_75":-5,"_76":77,"_78":77,"_79":80,"_81":80,"_82":80,"_83":77,"_84":77,"_85":306,"_87":307,"_89":308,"_91":30},"tree",[177,180,188,193],"files",[177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193],"counts",{"_167":66,"_168":141,"_169":66,"_170":171,"_172":173},"contents",[133,134,135,136],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_48":161,"_37":162,"_35":163,"_140":-5,"_46":47,"_45":164,"_142":128,"_43":165,"_13":66,"_39":153,"_41":-5,"_29":30,"_146":-5,"_32":166},{"_48":155,"_37":156,"_35":157,"_140":-5,"_46":47,"_45":158,"_142":128,"_43":159,"_13":66,"_39":153,"_41":-5,"_29":30,"_146":-5,"_32":160},{"_48":148,"_37":149,"_35":150,"_140":-5,"_46":47,"_45":151,"_142":128,"_43":152,"_13":66,"_39":153,"_41":-5,"_29":30,"_146":-5,"_32":154},{"_48":137,"_37":138,"_35":139,"_140":-5,"_46":47,"_45":141,"_142":30,"_43":143,"_13":66,"_39":144,"_41":145,"_29":30,"_146":-5,"_32":147},"f2afc41a-3f24-11f1-bf01-42b51c65c3df","main.ts","f2afc4ce-3f24-11f1-bf01-42b51c65c3df","parentId",1,"latest",["D",1776956334802],"http","// ScottHub bootstrap - real handler in handlers/\nimport app from \"./handlers/app.ts\";\nexport default app.fetch;\n","label",[138],"f7529f4c-3f24-11f1-bf01-42b51c65c3df","lib","a091f1d7-eade-4864-9db3-0c01aa453aef",2,["D",1776956342577],"directory",[149],"38f4c89e-3f25-11f1-8f86-42b51c65c3df","handlers","fe278bd7-3119-4141-b248-21626269f21c",8,["D",1776956452693],[156],"19d6e280-3f25-11f1-8c3e-42b51c65c3df","database","39b957e7-b36b-4e60-938e-3cb9062a4f18",6,["D",1776956400462],[162],"pulls","branches","forks","envVars",{"_174":66,"_176":66},"connections",{"_174":66,"_175":66},"count","unfilledCount","emptyCount",{"_48":161,"_37":162,"_35":163,"_140":-5,"_46":47,"_45":164,"_142":128,"_43":301,"_13":66,"_39":153,"_41":-5,"_29":30,"_146":-5,"_195":302,"_32":303},{"_48":293,"_37":294,"_35":295,"_140":163,"_46":47,"_45":296,"_142":128,"_43":297,"_13":66,"_39":40,"_41":298,"_29":30,"_146":-5,"_195":299,"_32":300},{"_48":286,"_37":287,"_35":288,"_140":163,"_46":47,"_45":164,"_142":128,"_43":289,"_13":66,"_39":40,"_41":290,"_29":30,"_146":-5,"_195":291,"_32":292},{"_48":155,"_37":156,"_35":157,"_140":-5,"_46":47,"_45":158,"_142":128,"_43":283,"_13":66,"_39":153,"_41":-5,"_29":30,"_146":-5,"_195":284,"_32":285},{"_48":276,"_37":277,"_35":278,"_140":157,"_46":47,"_45":158,"_142":128,"_43":279,"_13":66,"_39":40,"_41":280,"_29":30,"_146":-5,"_195":281,"_32":282},{"_48":268,"_37":269,"_35":270,"_140":157,"_46":47,"_45":271,"_142":128,"_43":272,"_13":66,"_39":40,"_41":273,"_29":30,"_146":-5,"_195":274,"_32":275},{"_48":260,"_37":261,"_35":262,"_140":157,"_46":47,"_45":263,"_142":128,"_43":264,"_13":66,"_39":40,"_41":265,"_29":30,"_146":-5,"_195":266,"_32":267},{"_48":252,"_37":253,"_35":254,"_140":157,"_46":47,"_45":255,"_142":128,"_43":256,"_13":66,"_39":40,"_41":257,"_29":30,"_146":-5,"_195":258,"_32":259},{"_48":248,"_37":38,"_35":36,"_140":157,"_46":47,"_45":14,"_142":128,"_43":249,"_13":66,"_39":40,"_41":42,"_29":30,"_146":-5,"_195":250,"_32":251},{"_48":240,"_37":241,"_35":242,"_140":157,"_46":47,"_45":243,"_142":128,"_43":244,"_13":66,"_39":40,"_41":245,"_29":30,"_146":-5,"_195":246,"_32":247},{"_48":232,"_37":233,"_35":234,"_140":157,"_46":47,"_45":235,"_142":128,"_43":236,"_13":66,"_39":40,"_41":237,"_29":30,"_146":-5,"_195":238,"_32":239},{"_48":148,"_37":149,"_35":150,"_140":-5,"_46":47,"_45":151,"_142":128,"_43":229,"_13":66,"_39":153,"_41":-5,"_29":30,"_146":-5,"_195":230,"_32":231},{"_48":222,"_37":223,"_35":224,"_140":150,"_46":47,"_45":151,"_142":128,"_43":225,"_13":66,"_39":40,"_41":226,"_29":30,"_146":-5,"_195":227,"_32":228},{"_48":214,"_37":215,"_35":216,"_140":150,"_46":47,"_45":217,"_142":128,"_43":218,"_13":66,"_39":40,"_41":219,"_29":30,"_146":-5,"_195":220,"_32":221},{"_48":206,"_37":207,"_35":208,"_140":150,"_46":47,"_45":209,"_142":128,"_43":210,"_13":66,"_39":40,"_41":211,"_29":30,"_146":-5,"_195":212,"_32":213},{"_48":198,"_37":199,"_35":200,"_140":150,"_46":47,"_45":201,"_142":128,"_43":202,"_13":66,"_39":40,"_41":203,"_29":30,"_146":-5,"_195":204,"_32":205},{"_48":137,"_37":138,"_35":139,"_140":-5,"_46":47,"_45":141,"_142":30,"_43":194,"_13":66,"_39":144,"_41":145,"_29":30,"_146":-5,"_195":196,"_32":197},["D",1776956334802],"children",[],[138],"06b0524a-3f25-11f1-8c3e-42b51c65c3df","utils.ts","06b05308-3f25-11f1-8c3e-42b51c65c3df",4,["D",1776956368356],"// Utilities\nimport { httpEndpoint, parseVal } from \"https://esm.town/v/std/utils/index.ts\";\n\nexport function esc(s: string | number | null | undefined): string {\n if (s === null || s === undefined) return \"\";\n return String(s).replaceAll(\"&\", \"&\").replaceAll(\"<\", \"<\").replaceAll(\">\", \">\");\n}\n\nexport function fmtDuration(seconds: number): string {\n if (seconds <= 0) return \"expired\";\n const d = Math.floor(seconds / 86400);\n const h = Math.floor((seconds % 86400) / 3600);\n const m = Math.floor((seconds % 3600) / 60);\n if (d > 0) return `${d}d ${h}h ${m}m`;\n if (h > 0) return `${h}h ${m}m`;\n return `${m}m`;\n}\n\nexport function fmtDate(ts: number | null | undefined): string {\n if (!ts) return \"—\";\n return new Date(ts * 1000).toISOString().replace(\"T\", \" \").slice(0, 16) + \" UTC\";\n}\n\nexport async function hashToken(token: string): Promise {\n const buf = new TextEncoder().encode(token);\n const digest = await crypto.subtle.digest(\"SHA-256\", buf);\n return Array.from(new Uint8Array(digest)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\").slice(0, 16);\n}\n\nlet _cachedBaseUrl: string | null = null;\nexport async function getBaseUrl(): Promise {\n if (_cachedBaseUrl) return _cachedBaseUrl;\n try {\n _cachedBaseUrl = await httpEndpoint(\"/main.ts\");\n return _cachedBaseUrl!;\n } catch {\n const v = parseVal();\n return `https://${v.author}--${v.name}.web.val.run`;\n }\n}\n\nexport function projectWebhookUrl(baseUrl: string, projectId: number, secret: string): string {\n return `${baseUrl}/tgwebhook/${projectId}/${secret}`;\n}\n\nexport function safePath(p: string): string {\n return p.trim().replace(/^\\/+/, \"\").replace(/\\.\\./g, \"\").replace(/[^\\w.\\-\\/]/g, \"_\");\n}\n",[],[149,199],"01672a16-3f25-11f1-8f86-42b51c65c3df","telegram.ts","01672b1a-3f25-11f1-8f86-42b51c65c3df",3,["D",1776956359495],"// Telegram Bot API wrapper + keyboards\nconst BASE = \"https://api.telegram.org\";\n\nexport async function tg(token: string, method: string, body: Record = {}) {\n const res = await fetch(`${BASE}/bot${token}/${method}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n return res.json().catch(() => ({ ok: false, description: \"non-json response\" }));\n}\n\nexport async function sendMessage(token: string, chatId: number | string, text: string, extra: Record = {}) {\n return tg(token, \"sendMessage\", {\n chat_id: chatId, text, parse_mode: \"HTML\", disable_web_page_preview: true, ...extra,\n });\n}\n\nexport async function sendDocument(token: string, chatId: number | string, fileBytes: Uint8Array, filename: string, caption = \"\") {\n const form = new FormData();\n form.append(\"chat_id\", String(chatId));\n form.append(\"document\", new Blob([fileBytes]), filename);\n if (caption) { form.append(\"caption\", caption); form.append(\"parse_mode\", \"HTML\"); }\n const res = await fetch(`${BASE}/bot${token}/sendDocument`, { method: \"POST\", body: form });\n return res.json().catch(() => ({ ok: false }));\n}\n\nexport async function answerCallback(token: string, id: string, text = \"\") {\n return tg(token, \"answerCallbackQuery\", { callback_query_id: id, text });\n}\n\nexport async function getFile(token: string, fileId: string): Promise<{ file_path?: string } | null> {\n const r = await tg(token, \"getFile\", { file_id: fileId });\n return r.ok ? r.result : null;\n}\n\nexport async function downloadFile(token: string, filePath: string): Promise {\n const res = await fetch(`${BASE}/file/bot${token}/${filePath}`);\n if (!res.ok) throw new Error(\"download failed: \" + res.status);\n return res.text();\n}\n\nexport async function downloadFileBytes(token: string, filePath: string): Promise {\n const res = await fetch(`${BASE}/file/bot${token}/${filePath}`);\n if (!res.ok) throw new Error(\"download failed: \" + res.status);\n return new Uint8Array(await res.arrayBuffer());\n}\n\nexport async function checkChannelMember(token: string, channel: string, userId: number) {\n const r = await tg(token, \"getChatMember\", { chat_id: channel, user_id: userId });\n if (!r.ok) return { ok: false, isMember: false, error: r.description };\n const status = r.result?.status;\n return { ok: true, isMember: [\"creator\", \"administrator\", \"member\", \"restricted\"].includes(status) };\n}\n\nexport async function getMe(token: string) { return tg(token, \"getMe\"); }\nexport async function setWebhook(token: string, url: string, secret?: string) {\n return tg(token, \"setWebhook\", {\n url, secret_token: secret,\n allowed_updates: [\"message\", \"edited_message\", \"callback_query\", \"chat_member\", \"my_chat_member\"],\n drop_pending_updates: false,\n });\n}\nexport async function deleteWebhook(token: string) { return tg(token, \"deleteWebhook\", { drop_pending_updates: false }); }\nexport async function getWebhookInfo(token: string) { return tg(token, \"getWebhookInfo\"); }\n\n// ==== Main Reply Keyboards (NOT inline) ====\nexport const MAIN_KEYBOARD = {\n keyboard: [\n [{ text: \"🖥 Host\" }, { text: \"👥 Referral\" }],\n [{ text: \"📊 Status\" }, { text: \"ℹ️ Help\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const HOST_KEYBOARD = {\n keyboard: [\n [{ text: \"🗄 Server\" }, { text: \"⬆️ Upload Files\" }],\n [{ text: \"📁 Manage Files\" }, { text: \"⏱ Host Time\" }],\n [{ text: \"⏹ Stop\" }, { text: \"🔄 Restart\" }],\n [{ text: \"📜 Logs\" }, { text: \"🗂 Switch Project\" }],\n [{ text: \"⬅️ Back\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const MANAGE_KEYBOARD = {\n keyboard: [\n [{ text: \"📄 List Files\" }, { text: \"⭐ Set Main File\" }],\n [{ text: \"➕ Add File\" }, { text: \"🗑 Delete File\" }],\n [{ text: \"⬅️ Back to Host\" }],\n ],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const BACK_KEYBOARD = {\n keyboard: [[{ text: \"⬅️ Back\" }]],\n resize_keyboard: true,\n is_persistent: true,\n};\n\nexport const REMOVE_KEYBOARD = { remove_keyboard: true };\n",[],[149,207],"12ed740c-3f25-11f1-9142-42b51c65c3df","parser.ts","12ed74b6-3f25-11f1-9142-42b51c65c3df",5,["D",1776956388892],"// Smart Python parser - detects imports, bot token, admin id, api id/hash\nconst STDLIB = new Set([\n \"os\",\"sys\",\"re\",\"json\",\"time\",\"datetime\",\"random\",\"math\",\"asyncio\",\"logging\",\n \"threading\",\"subprocess\",\"pathlib\",\"typing\",\"collections\",\"functools\",\"itertools\",\n \"traceback\",\"urllib\",\"http\",\"socket\",\"ssl\",\"hashlib\",\"hmac\",\"base64\",\"io\",\"struct\",\n \"copy\",\"pickle\",\"csv\",\"sqlite3\",\"zipfile\",\"tarfile\",\"gzip\",\"bz2\",\"string\",\"textwrap\",\n \"argparse\",\"configparser\",\"shutil\",\"tempfile\",\"glob\",\"uuid\",\"secrets\",\"dataclasses\",\n \"enum\",\"abc\",\"contextlib\",\"warnings\",\"weakref\",\"inspect\",\"importlib\",\"operator\",\n \"queue\",\"multiprocessing\",\"concurrent\",\"signal\",\"platform\",\"getpass\",\"calendar\",\n \"decimal\",\"fractions\",\"statistics\",\"unittest\",\"email\",\"html\",\"xml\",\"zoneinfo\",\n \"locale\",\"gettext\",\"codecs\",\"mimetypes\",\"encodings\",\"builtins\",\"__future__\",\n]);\n\nconst IMPORT_TO_PIP: Record = {\n telegram: \"python-telegram-bot\", telethon: \"Telethon\", pyrogram: \"Pyrogram\",\n aiogram: \"aiogram\", cv2: \"opencv-python\", PIL: \"Pillow\", Image: \"Pillow\",\n bs4: \"beautifulsoup4\", yaml: \"PyYAML\", dotenv: \"python-dotenv\", jwt: \"PyJWT\",\n MySQLdb: \"mysqlclient\", dns: \"dnspython\", sklearn: \"scikit-learn\",\n discord: \"discord.py\", requests: \"requests\", aiohttp: \"aiohttp\", httpx: \"httpx\",\n flask: \"Flask\", fastapi: \"fastapi\", uvicorn: \"uvicorn\", django: \"Django\",\n motor: \"motor\", pymongo: \"pymongo\", redis: \"redis\", psycopg2: \"psycopg2-binary\",\n sqlalchemy: \"SQLAlchemy\", numpy: \"numpy\", pandas: \"pandas\",\n apscheduler: \"APScheduler\", pydantic: \"pydantic\", tgcrypto: \"TgCrypto\",\n telebot: \"pyTelegramBotAPI\", pytelegrambotapi: \"pyTelegramBotAPI\",\n};\n\nexport function detectImports(code: string): { imports: string[]; pip: string[] } {\n const found = new Set();\n const cleaned = code\n .replace(/\"\"\"[\\s\\S]*?\"\"\"/g, \"\")\n .replace(/'''[\\s\\S]*?'''/g, \"\")\n .replace(/#[^\\n]*/g, \"\");\n for (const raw of cleaned.split(/\\r?\\n/)) {\n const line = raw.trim();\n let m = line.match(/^from\\s+([a-zA-Z_][\\w\\.]*)\\s+import\\s+/);\n if (m) { found.add(m[1].split(\".\")[0]); continue; }\n m = line.match(/^import\\s+(.+)$/);\n if (m) {\n for (const part of m[1].split(\",\")) {\n const name = part.trim().split(/\\s+as\\s+/)[0].trim().split(\".\")[0];\n if (name) found.add(name);\n }\n }\n }\n const imports = [...found].filter((x) => !STDLIB.has(x));\n const pip = [...new Set(imports.map((i) => IMPORT_TO_PIP[i.toLowerCase()] ?? IMPORT_TO_PIP[i] ?? i))];\n return { imports: [...found], pip };\n}\n\nexport function detectBotToken(code: string): string | null {\n const m = code.match(/(\\d{6,12}:[A-Za-z0-9_\\-]{30,})/);\n return m ? m[1] : null;\n}\n\nexport function detectAdminId(code: string): string | null {\n const patterns = [\n /(?:ADMIN_ID|OWNER_ID|SUDO_USERS|OWNER|ADMINS?)\\s*=\\s*\\[?\\s*[\"']?(\\d{5,})[\"']?/i,\n /(?:admin|owner)[_\\s]?id\\s*=\\s*[\"']?(\\d{5,})[\"']?/i,\n ];\n for (const p of patterns) {\n const m = code.match(p);\n if (m) return m[1];\n }\n return null;\n}\n\nexport function detectApiIdHash(code: string): { apiId?: string; apiHash?: string } {\n const out: { apiId?: string; apiHash?: string } = {};\n const idM = code.match(/API[_\\s]?ID\\s*=\\s*[\"']?(\\d{5,})[\"']?/i);\n if (idM) out.apiId = idM[1];\n const hashM = code.match(/API[_\\s]?HASH\\s*=\\s*[\"']([a-f0-9]{32})[\"']/i);\n if (hashM) out.apiHash = hashM[1];\n return out;\n}\n\nexport function analyzePythonFile(code: string) {\n return {\n imports: detectImports(code),\n botToken: detectBotToken(code),\n adminId: detectAdminId(code),\n apiCreds: detectApiIdHash(code),\n lines: code.split(/\\r?\\n/).length,\n size: code.length,\n };\n}\n",[],[149,215],"f7528d5e-3f24-11f1-bf01-42b51c65c3df","config.ts","f7528e4e-3f24-11f1-bf01-42b51c65c3df",["D",1776956342577],"// Central configuration for ScottHub\nexport const BOT_TOKEN = \"8779579899:AAEN9iro-5zo8Hr5XDKJ18iLSnr3FPkvefo\";\nexport const CHANNEL = \"@ScottHubs\";\nexport const CHANNEL_URL = \"https://t.me/ScottHubs\";\nexport const ARCHIVE_CHANNEL = \"@ProjectScottCode\";\nexport const ADMIN_ID = 6511143869;\n\n// Telegram API credentials for hosted Telethon/Pyrogram bots\nexport const TG_API_ID = \"31802482\";\nexport const TG_API_HASH = \"184c16c584a0e350a252271029cf7eb7\";\n\n// Hosting rules\nexport const REFERRALS_REQUIRED = 2;\nexport const HOST_DURATION_SECONDS = 2 * 24 * 60 * 60; // 2 days\nexport const MAX_PROJECTS_PER_USER = 2; // 2 bot slots per user (free tier)\nexport const MAX_FILE_BYTES = 2_000_000;\n\n// Web panel login\nexport const PANEL_USER = \"Scott\";\nexport const PANEL_PASS = \"ReyBalor21\";\n",[],[149,223],["D",1776956342577],[189,190,191,192],[149],"59c2db6a-3f25-11f1-986f-42b51c65c3df","screens.ts","59c2dc3c-3f25-11f1-986f-42b51c65c3df",10,["D",1776956507735],"// Screen renderers\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { esc, fmtDate, fmtDuration } from \"../lib/utils.ts\";\nimport { BOT_TOKEN, REFERRALS_REQUIRED, MAX_PROJECTS_PER_USER } from \"../lib/config.ts\";\nimport { isAdmin } from \"./access.ts\";\n\nexport async function showMain(chatId: number, userId: number, firstName: string | null) {\n const crown = isAdmin(userId) ? \" 👑\" : \"\";\n const text =\n `👋 Welcome${firstName ? \", \" + esc(firstName) : \"\"}!${crown}\\n\\n` +\n `🤖 ScottHub — Telegram Bot Hosting\\n\\n` +\n `• 🖥 Host — manage your hosted bots\\n` +\n `• 👥 Referral — invite 2 friends to unlock hosting\\n` +\n `• 📊 Status — platform & your stats\\n` +\n `• ℹ️ Help — how it works\\n\\n` +\n `Each user gets up to ${MAX_PROJECTS_PER_USER} bot slots (2 days each).`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n await db.setUserState(userId, \"main\");\n}\n\nexport async function showHost(chatId: number, userId: number) {\n const projects = await db.listProjectsByOwner(userId);\n const active = await db.getActiveProject(userId);\n const user = await db.getUser(userId);\n const now = Math.floor(Date.now() / 1000);\n\n let serverStatus = \"🟢 Free\";\n let timeInfo = \"No project\";\n let projInfo = `No projects yet (${projects.length}/${MAX_PROJECTS_PER_USER} slots used)`;\n\n if (active) {\n const remaining = active.expires_at ? active.expires_at - now : 0;\n projInfo =\n `Active: ${esc(active.name)} (#${active.id})\\n` +\n `Main: ${esc(active.main_file || \"—\")}\\n` +\n `Bot: ${active.bot_username ? \"@\" + esc(active.bot_username) : \"token not detected\"}\\n` +\n `Status: ${esc(active.status)}\\n` +\n `Messages: ${active.message_count}`;\n if (active.expires_at && remaining > 0) {\n timeInfo = `⏱ ${fmtDuration(remaining)} remaining`;\n serverStatus = `🟢 Running on FREE tier`;\n } else if (active.expires_at) {\n timeInfo = `❌ Expired ${fmtDate(active.expires_at)}\\nInvite ${REFERRALS_REQUIRED} users to renew.`;\n serverStatus = `🔴 Stopped (expired)`;\n }\n }\n\n const adminNote = isAdmin(userId) ? \"\\n👑 Admin mode — no referrals needed\" : \"\";\n const refInfo = user ? `\\n\\nReferrals: ${user.referral_count}` : \"\";\n const slotInfo = `\\nSlots: ${projects.length}/${MAX_PROJECTS_PER_USER}`;\n\n const text =\n `🖥 Host Dashboard${adminNote}\\n\\n` +\n `Server: ${serverStatus}\\n` +\n `Host time: ${timeInfo}${refInfo}${slotInfo}\\n\\n` +\n `${projInfo}\\n\\n` +\n `Tap a button below.`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n\nexport async function showServer(chatId: number, userId: number) {\n const active = await db.getActiveProject(userId);\n const now = Math.floor(Date.now() / 1000);\n let body: string;\n if (!active) {\n body =\n `🗄 Server Tier: Free\\n\\n` +\n `Cost: FREE\\n` +\n `Duration per slot: 2 days\\n` +\n `Unlock cost: ${REFERRALS_REQUIRED} referrals\\n` +\n `Slots per user: ${MAX_PROJECTS_PER_USER}\\n\\n` +\n `No active project — tap ⬆️ Upload Files to start.`;\n } else {\n const remaining = active.expires_at && active.expires_at > now ? active.expires_at - now : 0;\n body =\n `🗄 Server Tier: Free\\n\\n` +\n `Project: ${esc(active.name)}\\n` +\n `Status: ${esc(active.status)}\\n` +\n `Remaining: ${fmtDuration(remaining)}\\n` +\n `Messages processed: ${active.message_count}\\n` +\n `Webhook: ScottHub router (active)`;\n }\n await tg.sendMessage(BOT_TOKEN, chatId, body, { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function showReferral(chatId: number, userId: number) {\n const user = await db.getUser(userId);\n if (!user) return;\n const me = await tg.getMe(BOT_TOKEN);\n const botUsername = me.ok ? me.result.username : \"ScottHubBot\";\n const link = `https://t.me/${botUsername}?start=${user.referral_code}`;\n const text =\n `👥 Referral Program\\n\\n` +\n `Your code: ${esc(user.referral_code)}\\n` +\n `Your link:\\n${link}\\n\\n` +\n `Referrals: ${user.referral_count}\\n` +\n `Needed per host slot: ${REFERRALS_REQUIRED}\\n\\n` +\n `📢 Share your link. Each user who /starts via your link (and joins @ScottHubs) counts.\\n` +\n `${REFERRALS_REQUIRED} referrals = 1 free 2-day hosting slot.`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n}\n\nexport async function showStatus(chatId: number, userId: number) {\n const user = await db.getUser(userId);\n const stats = await db.globalStats();\n const projects = await db.listProjectsByOwner(userId);\n const running = projects.filter((p) => p.status === \"running\").length;\n const text =\n `📊 Status\\n\\n` +\n `Bot: 🟢 Online\\n` +\n `Webhook router: 🟢 Active\\n\\n` +\n `Platform stats\\n` +\n `• Users: ${stats.users}\\n` +\n `• Projects: ${stats.projects}\\n` +\n `• Running: ${stats.running}\\n` +\n `• Files stored: ${stats.files}\\n` +\n `• Webhook events: ${stats.messages}\\n\\n` +\n `Your stats\\n` +\n `• Referrals: ${user?.referral_count ?? 0}\\n` +\n `• Your projects: ${projects.length}/${MAX_PROJECTS_PER_USER}\\n` +\n `• Running: ${running}`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n}\n\nexport async function showHelp(chatId: number) {\n const text =\n `ℹ️ How ScottHub Works\\n\\n` +\n `1️⃣ Join @ScottHubs\\n` +\n `2️⃣ Invite ${REFERRALS_REQUIRED} friends via your Referral link\\n` +\n `3️⃣ Tap 🖥 Host → ⬆️ Upload Files\\n` +\n `4️⃣ Send your main.py — ScottHub auto-detects:\\n` +\n ` • bot token\\n` +\n ` • admin id\\n` +\n ` • all imports / pip packages\\n` +\n `5️⃣ Use 📁 Manage Files to add extra modules\\n` +\n `6️⃣ Bot goes online via ScottHub's webhook router for 2 days.\\n\\n` +\n `Commands: /start /menu /host /ref /status /logs /cancel`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MAIN_KEYBOARD });\n}\n\nexport async function showManage(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"You have no project yet. Upload a file first.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const files = await db.listFiles(project.id);\n const list = files.length\n ? files.map((f) => `${f.is_main ? \"⭐\" : \" \"} ${esc(f.path)} (${f.size}b)`).join(\"\\n\")\n : \"No files yet.\";\n const text = `📁 Manage Files\\n\\nProject: ${esc(project.name)} (#${project.id})\\nMain: ${esc(project.main_file || \"not set\")}\\n\\n${list}\\n\\nChoose an action:`;\n await tg.sendMessage(BOT_TOKEN, chatId, text, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function showLogs(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"No active project.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const events = await db.recentEventsForProject(project.id, 15);\n if (!events.length) {\n await tg.sendMessage(BOT_TOKEN, chatId, `📜 Logs\\n\\nNo events yet for ${esc(project.name)}.`, { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const lines = events.map((e) => {\n const when = fmtDate(e.created_at);\n const payload = String(e.payload || \"\").slice(0, 120).replace(/\\n/g, \" \");\n return `${esc(when)} · ${esc(e.direction)} · ${e.status_code}\\n${esc(payload)}`;\n }).join(\"\\n\\n\");\n await tg.sendMessage(\n BOT_TOKEN, chatId,\n `📜 Recent logs — ${esc(project.name)}\\n\\n${lines}`,\n { reply_markup: tg.HOST_KEYBOARD },\n );\n}\n\nexport async function showSwitchProject(chatId: number, userId: number) {\n const projects = await db.listProjectsByOwner(userId);\n if (projects.length <= 1) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"You only have one project (or none). Upload another to use 2 slots.\", { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const active = await db.getActiveProject(userId);\n const rows = projects.map((p) => [{ text: (active?.id === p.id ? \"✅ \" : \"\") + `#${p.id} ${p.name}` }]);\n rows.push([{ text: \"⬅️ Back\" }]);\n await db.setUserState(userId, \"awaiting_switch\");\n await tg.sendMessage(\n BOT_TOKEN, chatId,\n `🗂 Switch Project\\n\\nTap the project you want to make active:`,\n { reply_markup: { keyboard: rows, resize_keyboard: true } },\n );\n}\n",[],[156,233],"8bee8d14-3f25-11f1-a4ae-42b51c65c3df","router.ts","8bee8db4-3f25-11f1-a4ae-42b51c65c3df",12,["D",1776956591907],"// Telegram update dispatcher for main ScottHub bot\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { BOT_TOKEN } from \"../lib/config.ts\";\nimport { ensureChannelJoined, isAdmin } from \"./access.ts\";\nimport * as screens from \"./screens.ts\";\nimport * as actions from \"./actions.ts\";\n\nexport async function handleUpdate(update: any) {\n const msg = update.message || update.edited_message;\n if (!msg) return;\n const from = msg.from;\n if (!from || from.is_bot) return;\n const chatId = msg.chat.id;\n const userId = from.id;\n\n const text: string = msg.text?.trim() || \"\";\n const isStart = text.startsWith(\"/start\");\n\n let referredBy: number | null = null;\n if (isStart) {\n const parts = text.split(/\\s+/);\n if (parts[1]) {\n const r = await db.getUserByRefCode(parts[1]);\n if (r && r.tg_id !== userId) referredBy = r.tg_id;\n }\n }\n const { user, created } = await db.getOrCreateUser(userId, from.username || null, from.first_name || null, referredBy);\n\n const joined = await ensureChannelJoined(chatId, userId);\n if (!joined) return;\n\n // Credit referral (only when user is newly created & has a referrer & admin is exempt)\n if (created && user.referred_by && !isAdmin(userId)) {\n await db.addReferral(user.referred_by, userId);\n try {\n const refUser = await db.getUser(user.referred_by);\n if (refUser) {\n await tg.sendMessage(\n BOT_TOKEN, user.referred_by,\n `🎉 New referral!\\n${user.first_name || \"A user\"} joined via your link.\\nTotal referrals: ${refUser.referral_count}.`,\n );\n }\n } catch {}\n }\n\n if (msg.document) { await actions.handleDocument(chatId, userId, msg.document); return; }\n\n const current = await db.getUser(userId);\n const state = current?.state || \"idle\";\n\n if (text === \"/cancel\") {\n await db.setUserState(userId, \"main\");\n await screens.showMain(chatId, userId, from.first_name);\n return;\n }\n\n // Stateful handlers\n if (state === \"awaiting_sub_path\" && !text.startsWith(\"/\") && text !== \"⬅️ Back\") { await actions.handleSubPath(chatId, userId, text); return; }\n if (state === \"awaiting_delete_path\" && !text.startsWith(\"/\") && text !== \"⬅️ Back\") { await actions.handleDeletePath(chatId, userId, text); return; }\n if (state === \"awaiting_main_path\" && !text.startsWith(\"/\") && text !== \"⬅️ Back\") { await actions.handleSetMainPath(chatId, userId, text); return; }\n if (state === \"awaiting_switch\" && !text.startsWith(\"/\") && text !== \"⬅️ Back\") { await actions.handleSwitchSelection(chatId, userId, text); return; }\n\n switch (text) {\n case \"/start\":\n case \"/menu\":\n await screens.showMain(chatId, userId, from.first_name); return;\n case \"/host\":\n case \"🖥 Host\":\n await screens.showHost(chatId, userId); return;\n case \"/ref\":\n case \"/referral\":\n case \"👥 Referral\":\n await screens.showReferral(chatId, userId); return;\n case \"/status\":\n case \"📊 Status\":\n await screens.showStatus(chatId, userId); return;\n case \"ℹ️ Help\":\n case \"/help\":\n await screens.showHelp(chatId); return;\n case \"🗄 Server\":\n await screens.showServer(chatId, userId); return;\n case \"⬆️ Upload Files\":\n await actions.promptUpload(chatId, userId); return;\n case \"📁 Manage Files\":\n await screens.showManage(chatId, userId); return;\n case \"⏱ Host Time\":\n await screens.showHost(chatId, userId); return;\n case \"⏹ Stop\":\n await actions.handleStop(chatId, userId); return;\n case \"🔄 Restart\":\n await actions.handleRestart(chatId, userId); return;\n case \"📜 Logs\":\n case \"/logs\":\n await screens.showLogs(chatId, userId); return;\n case \"🗂 Switch Project\":\n await screens.showSwitchProject(chatId, userId); return;\n case \"📄 List Files\":\n await actions.handleListFiles(chatId, userId); return;\n case \"⭐ Set Main File\":\n await actions.handleSetMainPrompt(chatId, userId); return;\n case \"➕ Add File\":\n await actions.promptAddFile(chatId, userId); return;\n case \"🗑 Delete File\":\n await actions.handleDeleteFilePrompt(chatId, userId); return;\n case \"⬅️ Back\":\n if ([\"manage\",\"awaiting_sub_path\",\"awaiting_sub_upload\",\"awaiting_delete_path\",\"awaiting_main_path\",\"awaiting_switch\"].includes(state)) {\n await db.setUserState(userId, \"host\"); await screens.showHost(chatId, userId);\n } else {\n await screens.showMain(chatId, userId, from.first_name);\n }\n return;\n case \"⬅️ Back to Host\":\n await db.setUserState(userId, \"host\"); await screens.showHost(chatId, userId); return;\n }\n\n await screens.showMain(chatId, userId, from.first_name);\n}\n",[],[156,241],"c7217cfc-3f25-11f1-a4ae-42b51c65c3df",["D",1776956691227],[],[156,38],"9643eb4c-3f25-11f1-986f-42b51c65c3df","hosted_webhook.ts","9643ec00-3f25-11f1-986f-42b51c65c3df",13,["D",1776956609241],"// Router for hosted bots\n// Telegram POSTs updates for the hosted bot to /tgwebhook/:projectId/:secret\n// We log the update and simulate basic responses based on parsed Python handlers.\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { hashToken } from \"../lib/utils.ts\";\n\nexport async function handleHostedWebhook(projectId: number, secret: string, body: any): Promise {\n const project = await db.getProjectById(projectId);\n if (!project || project.webhook_secret !== secret) return new Response(\"not found\", { status: 404 });\n\n const tokenHash = project.bot_token ? await hashToken(project.bot_token) : \"none\";\n const now = Math.floor(Date.now() / 1000);\n\n if (project.status !== \"running\" || (project.expires_at && project.expires_at <= now)) {\n await db.logWebhook(projectId, tokenHash, \"dropped\", JSON.stringify(body), 200);\n return new Response(\"ok (not running)\", { status: 200 });\n }\n\n await db.logWebhook(projectId, tokenHash, \"in\", JSON.stringify(body), 200);\n\n const msg = body?.message;\n if (msg && project.bot_token) {\n const chatId = msg.chat.id;\n const text: string = msg.text || \"\";\n\n const mainFile = project.main_file ? await db.getFile(project.id, project.main_file) : null;\n const allFiles = await db.listFiles(project.id);\n\n if (mainFile?.content) {\n const response = executeBotLogic(mainFile.content, allFiles, msg);\n if (response) {\n await tg.sendMessage(project.bot_token, chatId, response);\n return new Response(\"ok\", { status: 200 });\n }\n }\n\n if (text === \"/start\" || text === \"/help\" || text === \"/ping\") {\n const username = project.bot_username ? \"@\" + project.bot_username : \"this bot\";\n await tg.sendMessage(\n project.bot_token, chatId,\n `🤖 ${username} is hosted by ScottHub.\\n\\n` +\n `Project: ${project.name}\\n` +\n `Status: running\\nFiles: ${allFiles.length}\\n\\n` +\n `Running via ScottHub webhook router.`,\n );\n }\n }\n\n const cb = body?.callback_query;\n if (cb && project.bot_token) { try { await tg.answerCallback(project.bot_token, cb.id, \"ok\"); } catch {} }\n\n return new Response(\"ok\", { status: 200 });\n}\n\nfunction executeBotLogic(mainCode: string, allFiles: db.FileRow[], msg: any): string | null {\n const text: string = msg.text || \"\";\n const command = text.split(/\\s+/)[0]?.toLowerCase();\n const handlers = extractCommandHandlers(mainCode);\n for (const f of allFiles) if (f.path.endsWith(\".py\") && !f.is_main) handlers.push(...extractCommandHandlers(f.content));\n for (const h of handlers) if (command === \"/\" + h.command || command === h.command) if (h.replyText) return h.replyText;\n return null;\n}\n\ninterface CommandHandler { command: string; replyText: string | null }\nfunction extractCommandHandlers(code: string): CommandHandler[] {\n const handlers: CommandHandler[] = [];\n const patterns = [\n /commands?\\s*=\\s*\\[['\"](\\w+)['\"]/g,\n /Command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n /filters\\.command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n ];\n for (const pat of patterns) {\n let m;\n while ((m = pat.exec(code)) !== null) {\n const cmd = m[1];\n const nearby = code.slice(m.index, m.index + 600);\n const reply = nearby.match(/(?:reply|reply_text|send_message|answer|bot\\.reply_to)\\s*\\(\\s*[^,)]*,?\\s*[\"']([^\"']+)[\"']/)\n || nearby.match(/(?:reply|reply_text|send_message|answer)\\s*\\(\\s*[\"']([^\"']+)[\"']/);\n handlers.push({ command: cmd, replyText: reply ? reply[1] : null });\n }\n }\n return handlers;\n}\n",[],[156,253],"3beee0ca-3f25-11f1-8f86-42b51c65c3df","archive.ts","3beee1ba-3f25-11f1-8f86-42b51c65c3df",9,["D",1776956457692],"// Forward every uploaded file to @ProjectScottCode for safekeeping\nimport * as tg from \"../lib/telegram.ts\";\nimport { BOT_TOKEN, ARCHIVE_CHANNEL } from \"../lib/config.ts\";\n\nexport async function archiveUpload(\n ownerId: number, ownerName: string | null, projectName: string,\n filename: string, content: string,\n) {\n try {\n const bytes = new TextEncoder().encode(content);\n const caption = [\n `🗂 ScottHub Upload`,\n `Owner: ${ownerId}${ownerName ? \" (\" + ownerName + \")\" : \"\"}`,\n `Project: ${projectName}`,\n `File: ${filename}`,\n `Size: ${bytes.length} bytes`,\n `Time: ${new Date().toISOString()}`,\n ].join(\"\\n\");\n await tg.sendDocument(BOT_TOKEN, ARCHIVE_CHANNEL, bytes, filename, caption);\n } catch (e) {\n console.error(\"archive failed:\", e);\n }\n}\n",[],[156,261],"7f782086-3f25-11f1-bed7-42b51c65c3df","actions.ts","7f78211c-3f25-11f1-bed7-42b51c65c3df",11,["D",1776956570998],"// Uploads, file mgmt, stop/restart, project switching\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { analyzePythonFile } from \"../lib/parser.ts\";\nimport { esc, fmtDuration, getBaseUrl, projectWebhookUrl, safePath } from \"../lib/utils.ts\";\nimport { BOT_TOKEN, MAX_FILE_BYTES, MAX_PROJECTS_PER_USER } from \"../lib/config.ts\";\nimport { canCreateNewProject, claimHostSlot, isAdmin } from \"./access.ts\";\nimport { archiveUpload } from \"./archive.ts\";\nimport { showHost, showManage } from \"./screens.ts\";\n\nexport async function handleDocument(chatId: number, userId: number, doc: { file_id: string; file_name: string; file_size: number; mime_type?: string }) {\n if (doc.file_size > MAX_FILE_BYTES) {\n await tg.sendMessage(BOT_TOKEN, chatId, `❌ File too large (max ${MAX_FILE_BYTES} bytes).`, { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const name = safePath(doc.file_name || \"file.txt\");\n\n const info = await tg.getFile(BOT_TOKEN, doc.file_id);\n if (!info?.file_path) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Could not fetch file from Telegram.\");\n return;\n }\n const content = await tg.downloadFile(BOT_TOKEN, info.file_path);\n\n const user = await db.getUser(userId);\n if (!user) return;\n const state = user.state || \"idle\";\n const isPy = name.endsWith(\".py\");\n\n // \"Add File\" sub-upload flow\n if (state === \"awaiting_sub_upload\") {\n const subPath = safePath((JSON.parse(user.state_data || \"{}\") as any).subPath || name);\n const project = await db.getActiveProject(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No active project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.addFile(project.id, subPath, content, false);\n await archiveUpload(userId, user.first_name, project.name, subPath, content);\n if (subPath.endsWith(\".py\")) {\n const a = analyzePythonFile(content);\n if (a.imports.pip.length) {\n const existing = JSON.parse(project.detected_imports || \"[]\") as string[];\n const merged = [...new Set([...existing, ...a.imports.pip])];\n await db.updateProject(project.id, { detected_imports: JSON.stringify(merged) });\n }\n }\n await tg.sendMessage(BOT_TOKEN, chatId,\n `✅ Added ${esc(subPath)} to project ${esc(project.name)}.\\nFile is saved in database and forwarded to @ProjectScottCode.`,\n { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n\n // Main upload flow — new or replace main of the ACTIVE slot\n const existingProjects = await db.listProjectsByOwner(userId);\n const active = await db.getActiveProject(userId);\n const now = Math.floor(Date.now() / 1000);\n const activeIsAlive = active && active.expires_at && active.expires_at > now;\n let project = activeIsAlive ? active! : null;\n\n if (!project) {\n // need a new slot (or re-using expired active)\n const check = await canCreateNewProject(userId);\n if (!check.allowed && !(active && !activeIsAlive)) {\n await tg.sendMessage(BOT_TOKEN, chatId,\n `🔒 Can't host yet.\\n${check.reason}\\nReferrals: ${check.have}/${check.need}\\n\\nTap 👥 Referral.`,\n { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n const claim = await claimHostSlot(userId);\n if (!claim.ok) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ \" + claim.reason, { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n if (active && !activeIsAlive) {\n // renew existing expired slot\n await db.updateProject(active.id, { expires_at: claim.expiresAt, started_at: now, stopped_at: null, status: \"running\" });\n project = await db.getProjectById(active.id);\n } else {\n // brand new project\n if (existingProjects.length >= MAX_PROJECTS_PER_USER && !isAdmin(userId)) {\n await tg.sendMessage(BOT_TOKEN, chatId, `❌ Slot limit: ${MAX_PROJECTS_PER_USER}. Stop & delete one first.`, { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n project = await db.createProject(userId, name.replace(/\\.py$/, \"\"));\n await db.updateProject(project.id, { expires_at: claim.expiresAt, started_at: now, status: \"running\" });\n project = await db.getProjectById(project.id);\n await db.setActiveProject(userId, project!.id);\n }\n }\n if (!project) return;\n\n // Store the file\n const existingFiles = await db.listFiles(project.id);\n const makeMain = isPy && (existingFiles.length === 0 || !project.main_file);\n await db.addFile(project.id, name, content, makeMain);\n if (makeMain) await db.setMainFile(project.id, name);\n\n // Archive to @ProjectScottCode\n await archiveUpload(userId, user.first_name, project.name, name, content);\n\n // Smart analysis\n let analysisText = \"\";\n if (isPy) {\n const a = analyzePythonFile(content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n\n if (a.botToken) {\n const me = await tg.getMe(a.botToken);\n if (me.ok) await db.updateProject(project.id, { bot_username: me.result.username });\n try {\n const base = await getBaseUrl();\n const whUrl = projectWebhookUrl(base, project.id, project.webhook_secret || \"\");\n await db.updateProject(project.id, { webhook_url: whUrl });\n const whResult = await tg.setWebhook(a.botToken, whUrl);\n if (whResult.ok) analysisText += \"\\n🔌 Webhook auto-configured! ✅ Bot is ONLINE.\";\n else analysisText += `\\n⚠️ Webhook set failed: ${whResult.description}`;\n } catch (e) { console.error(\"auto webhook:\", e); }\n }\n\n analysisText +=\n `\\n\\n🧠 Smart analysis\\n` +\n `• Bot token: ${a.botToken ? \"✅ detected\" : \"❌ not found\"}\\n` +\n `• Admin id: ${a.adminId ? `✅ ${esc(a.adminId)}` : \"❌ not found\"}\\n` +\n `• Imports detected: ${a.imports.imports.length}\\n` +\n (a.imports.pip.length ? `• Auto-install: ${esc(a.imports.pip.join(\" \"))}\\n` : \"\") +\n `• Lines: ${a.lines}`;\n }\n\n const updated = await db.getProjectById(project.id);\n const remaining = updated?.expires_at ? updated.expires_at - now : 0;\n\n await tg.sendMessage(BOT_TOKEN, chatId,\n `✅ File uploaded\\n\\n📄 ${esc(name)} (${content.length} bytes)\\n` +\n (makeMain ? `⭐ Marked as main file\\n` : \"\") +\n `📤 Forwarded to @ProjectScottCode\\n` +\n `⏱ Host time: ${fmtDuration(remaining)}${analysisText}`,\n { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n\nexport async function handleStop(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project to stop.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n await db.updateProject(project.id, { status: \"stopped\", stopped_at: Math.floor(Date.now() / 1000) });\n if (project.bot_token) { try { await tg.deleteWebhook(project.bot_token); } catch {} }\n await tg.sendMessage(BOT_TOKEN, chatId, \"⏹ Bot stopped.\\nWebhook removed.\", { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function handleRestart(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project to restart.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n const now = Math.floor(Date.now() / 1000);\n if (project.expires_at && project.expires_at <= now) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Host time expired. Invite 2 users and upload again.\", { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n await db.updateProject(project.id, { status: \"running\", stopped_at: null });\n if (project.bot_token && project.webhook_secret) {\n try {\n const base = await getBaseUrl();\n await tg.setWebhook(project.bot_token, projectWebhookUrl(base, project.id, project.webhook_secret));\n } catch {}\n }\n await tg.sendMessage(BOT_TOKEN, chatId, \"🔄 Bot restarted.\\nWebhook routing resumed.\", { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function promptUpload(chatId: number, userId: number) {\n const check = await canCreateNewProject(userId);\n const existing = await db.listProjectsByOwner(userId);\n const hasAlive = existing.some((p) => p.expires_at && p.expires_at > Math.floor(Date.now() / 1000));\n if (!check.allowed && !hasAlive) {\n await tg.sendMessage(BOT_TOKEN, chatId,\n `🔒 Locked\\n\\n${check.reason}\\nReferrals: ${check.have}/${check.need}\\n\\nTap 👥 Referral.`,\n { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_upload\");\n await tg.sendMessage(BOT_TOKEN, chatId,\n `⬆️ Upload your bot\\n\\nSend your Python bot file (.py) as a document.\\n\\nScottHub auto-detects:\\n• bot token • admin id • imports/pip packages\\n\\n/cancel to abort.`,\n { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function promptAddFile(chatId: number, userId: number) {\n await db.setUserState(userId, \"awaiting_sub_path\");\n await tg.sendMessage(BOT_TOKEN, chatId,\n \"📝 Send the relative path for the new file (e.g. plugins/helper.py or config.py).\\nThen send it as a document.\\n\\n/cancel to abort.\",\n { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleSubPath(chatId: number, userId: number, text: string) {\n const clean = safePath(text);\n if (!clean || clean.length > 120) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid path.\", { reply_markup: tg.BACK_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_sub_upload\", { subPath: clean });\n await tg.sendMessage(BOT_TOKEN, chatId, `📂 Path set to ${esc(clean)}\\n\\nNow send the file as a document.`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleDeleteFilePrompt(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n if (!files.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No files to delete.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n await db.setUserState(userId, \"awaiting_delete_path\");\n const list = files.map((f) => `• ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `🗑 Send the path to delete:\\n\\n${list}\\n\\n/cancel to abort.`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleDeletePath(chatId: number, userId: number, text: string) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file) { await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such file.\", { reply_markup: tg.MANAGE_KEYBOARD }); await db.setUserState(userId, \"manage\"); return; }\n if (file.is_main) { await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Can't delete main file.\", { reply_markup: tg.MANAGE_KEYBOARD }); await db.setUserState(userId, \"manage\"); return; }\n await db.deleteFileDb(project.id, clean);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Deleted ${esc(clean)}`, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleSetMainPrompt(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n const py = files.filter((f) => f.path.endsWith(\".py\"));\n if (!py.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No .py files yet.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n await db.setUserState(userId, \"awaiting_main_path\");\n const list = py.map((f) => `${f.is_main ? \"⭐\" : \" \"} ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Send path of file to mark as main:\\n\\n${list}`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleSetMainPath(chatId: number, userId: number, text: string) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file || !clean.endsWith(\".py\")) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such .py file.\", { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n await db.setMainFile(project.id, clean);\n const a = analyzePythonFile(file.content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Main file set to ${esc(clean)}`, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleListFiles(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n const files = await db.listFiles(project.id);\n if (!files.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No files.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n const list = files.map((f) => `${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)} — ${f.size}b`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `📁 Files in ${esc(project.name)}\\n\\n${list}`, { reply_markup: tg.MANAGE_KEYBOARD });\n}\n\nexport async function handleSwitchSelection(chatId: number, userId: number, text: string) {\n // expected text pattern: \"✅ #12 name\" or \"#12 name\"\n const m = text.match(/#(\\d+)/);\n if (!m) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid choice.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n const id = Number(m[1]);\n const proj = await db.getProjectById(id);\n if (!proj || proj.owner_id !== userId) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Not your project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.setActiveProject(userId, id);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Active project → ${esc(proj.name)}`, { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n",[],[156,269],"38f4ab02-3f25-11f1-8f86-42b51c65c3df","access.ts","38f4abca-3f25-11f1-8f86-42b51c65c3df",["D",1776956452693],"// Channel-join + referral gate\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { BOT_TOKEN, CHANNEL, ADMIN_ID, REFERRALS_REQUIRED, HOST_DURATION_SECONDS, MAX_PROJECTS_PER_USER } from \"../lib/config.ts\";\n\nexport function isAdmin(tgId: number): boolean { return tgId === ADMIN_ID; }\n\nexport async function ensureChannelJoined(chatId: number, userId: number): Promise {\n if (isAdmin(userId)) { await db.markJoined(userId, true); return true; }\n const r = await tg.checkChannelMember(BOT_TOKEN, CHANNEL, userId);\n if (r.ok && r.isMember) { await db.markJoined(userId, true); return true; }\n await db.markJoined(userId, false);\n await tg.sendMessage(\n BOT_TOKEN, chatId,\n `🔒 Join Required\\n\\nTo use ScottHub please join our channel:\\n👉 https://t.me/ScottHubs\\n\\nThen press /start again.`,\n { reply_markup: tg.REMOVE_KEYBOARD },\n );\n return false;\n}\n\nexport type HostCheck =\n | { allowed: true; reason: \"admin\" | \"referrals\" | \"renew\" }\n | { allowed: false; need: number; have: number; reason: string };\n\nexport async function canCreateNewProject(userId: number): Promise {\n if (isAdmin(userId)) return { allowed: true, reason: \"admin\" };\n const count = await db.countProjects(userId);\n if (count >= MAX_PROJECTS_PER_USER) {\n return { allowed: false, need: 0, have: count, reason: `Max ${MAX_PROJECTS_PER_USER} bot slots reached. Stop/delete one first.` };\n }\n const user = await db.getUser(userId);\n if (!user) return { allowed: false, need: REFERRALS_REQUIRED, have: 0, reason: \"User not registered\" };\n if (user.referral_count >= REFERRALS_REQUIRED) return { allowed: true, reason: \"referrals\" };\n return { allowed: false, need: REFERRALS_REQUIRED, have: user.referral_count, reason: \"Not enough referrals\" };\n}\n\n/** Claim (consume) referrals for a NEW host slot. Admin is free. */\nexport async function claimHostSlot(userId: number): Promise<{ ok: true; expiresAt: number } | { ok: false; reason: string }> {\n const expiresAt = Math.floor(Date.now() / 1000) + HOST_DURATION_SECONDS;\n if (isAdmin(userId)) return { ok: true, expiresAt };\n const user = await db.getUser(userId);\n if (!user) return { ok: false, reason: \"User not found\" };\n if (user.referral_count < REFERRALS_REQUIRED) {\n return { ok: false, reason: `Need ${REFERRALS_REQUIRED} referrals (you have ${user.referral_count})` };\n }\n await db.consumeReferrals(userId, REFERRALS_REQUIRED);\n return { ok: true, expiresAt };\n}\n",[],[156,277],["D",1776956452693],[181,182,183,184,185,186,187],[156],"19d6c426-3f25-11f1-8c3e-42b51c65c3df","schema.ts","19d6c4f8-3f25-11f1-8c3e-42b51c65c3df",["D",1776956400462],"// DB schema + migrations\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runMigrations() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS users (\n tg_id INTEGER PRIMARY KEY, username TEXT, first_name TEXT,\n referral_code TEXT UNIQUE, referred_by INTEGER,\n referral_count INTEGER DEFAULT 0,\n state TEXT DEFAULT 'idle', state_data TEXT,\n joined_channel INTEGER DEFAULT 0,\n active_project_id INTEGER,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n updated_at INTEGER DEFAULT (strftime('%s','now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS projects (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n owner_id INTEGER NOT NULL, name TEXT NOT NULL,\n main_file TEXT, bot_token TEXT, bot_username TEXT,\n admin_id TEXT, detected_imports TEXT,\n status TEXT DEFAULT 'stopped',\n webhook_secret TEXT, webhook_url TEXT,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n started_at INTEGER, expires_at INTEGER, stopped_at INTEGER,\n last_update_at INTEGER, message_count INTEGER DEFAULT 0\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS files (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER NOT NULL, path TEXT NOT NULL, content TEXT NOT NULL,\n size INTEGER DEFAULT 0, is_main INTEGER DEFAULT 0,\n uploaded_at INTEGER DEFAULT (strftime('%s','now')),\n UNIQUE(project_id, path)\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS referrals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n referrer_id INTEGER NOT NULL, invited_id INTEGER NOT NULL UNIQUE,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS webhook_events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER, bot_token_hash TEXT, direction TEXT,\n payload TEXT, status_code INTEGER,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS panel_sessions (\n token TEXT PRIMARY KEY, username TEXT NOT NULL,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n expires_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_projects_owner ON projects(owner_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_files_project ON files(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_referrals_ref ON referrals(referrer_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_webhook_project ON webhook_events(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_users_refcode ON users(referral_code)`);\n // Safe migrations\n try { await sqlite.execute(`ALTER TABLE users ADD COLUMN active_project_id INTEGER`); } catch {}\n try { await sqlite.execute(`ALTER TABLE projects ADD COLUMN webhook_url TEXT`); } catch {}\n}\n",[],[162,287],"3183b638-3f25-11f1-bf01-42b51c65c3df","queries.ts","3183b6d8-3f25-11f1-bf01-42b51c65c3df",7,["D",1776956440212],"// All DB queries\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type UserRow = {\n tg_id: number; username: string | null; first_name: string | null;\n referral_code: string; referred_by: number | null; referral_count: number;\n state: string; state_data: string | null; joined_channel: number;\n active_project_id: number | null;\n};\nexport type ProjectRow = {\n id: number; owner_id: number; name: string;\n main_file: string | null; bot_token: string | null; bot_username: string | null;\n admin_id: string | null; detected_imports: string | null; status: string;\n webhook_secret: string | null; webhook_url: string | null;\n created_at: number; started_at: number | null; expires_at: number | null;\n stopped_at: number | null; last_update_at: number | null; message_count: number;\n};\nexport type FileRow = {\n id: number; project_id: number; path: string; content: string;\n size: number; is_main: number; uploaded_at: number;\n};\n\nfunction genCode(prefix: string, len = 8): string {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let s = \"\"; for (let i = 0; i < len; i++) s += chars[Math.floor(Math.random() * chars.length)];\n return prefix + s;\n}\n\n// ===== USERS =====\nexport async function getOrCreateUser(tgId: number, username: string | null, firstName: string | null, referredBy: number | null = null) {\n const existing = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n if (existing.rows.length > 0) {\n await sqlite.execute({\n sql: \"UPDATE users SET username=?, first_name=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [username, firstName, tgId],\n });\n return { user: existing.rows[0] as unknown as UserRow, created: false };\n }\n let code = genCode(\"R\");\n for (let i = 0; i < 5; i++) {\n const c = await sqlite.execute({ sql: \"SELECT 1 FROM users WHERE referral_code=?\", args: [code] });\n if (c.rows.length === 0) break;\n code = genCode(\"R\");\n }\n await sqlite.execute({\n sql: \"INSERT INTO users (tg_id, username, first_name, referral_code, referred_by) VALUES (?, ?, ?, ?, ?)\",\n args: [tgId, username, firstName, code, referredBy],\n });\n const fresh = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return { user: fresh.rows[0] as unknown as UserRow, created: true };\n}\n\nexport async function getUser(tgId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\nexport async function getUserByRefCode(code: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE referral_code=?\", args: [code] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\nexport async function setUserState(tgId: number, state: string, data: Record | null = null) {\n await sqlite.execute({\n sql: \"UPDATE users SET state=?, state_data=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [state, data ? JSON.stringify(data) : null, tgId],\n });\n}\nexport async function setActiveProject(tgId: number, projectId: number | null) {\n await sqlite.execute({ sql: \"UPDATE users SET active_project_id=? WHERE tg_id=?\", args: [projectId, tgId] });\n}\nexport async function markJoined(tgId: number, joined: boolean) {\n await sqlite.execute({ sql: \"UPDATE users SET joined_channel=? WHERE tg_id=?\", args: [joined ? 1 : 0, tgId] });\n}\nexport async function addReferral(referrerId: number, invitedId: number): Promise {\n try {\n await sqlite.execute({ sql: \"INSERT INTO referrals (referrer_id, invited_id) VALUES (?, ?)\", args: [referrerId, invitedId] });\n await sqlite.execute({ sql: \"UPDATE users SET referral_count=referral_count+1 WHERE tg_id=?\", args: [referrerId] });\n return true;\n } catch { return false; }\n}\nexport async function consumeReferrals(userId: number, amount: number) {\n await sqlite.execute({ sql: \"UPDATE users SET referral_count=referral_count-? WHERE tg_id=?\", args: [amount, userId] });\n}\n\n// ===== PROJECTS =====\nexport async function listProjectsByOwner(ownerId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE owner_id=? ORDER BY id ASC\", args: [ownerId] });\n return r.rows as unknown as ProjectRow[];\n}\nexport async function getActiveProject(ownerId: number): Promise {\n const user = await getUser(ownerId);\n if (user?.active_project_id) {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE id=? AND owner_id=?\", args: [user.active_project_id, ownerId] });\n if (r.rows.length) return r.rows[0] as unknown as ProjectRow;\n }\n const projs = await listProjectsByOwner(ownerId);\n return projs[0] ?? null;\n}\nexport async function getProjectById(id: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE id=?\", args: [id] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\nexport async function getProjectByToken(token: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE bot_token=?\", args: [token] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\nexport async function countProjects(ownerId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT COUNT(*) as c FROM projects WHERE owner_id=?\", args: [ownerId] });\n return Number((r.rows[0] as any)?.c ?? 0);\n}\nexport async function createProject(ownerId: number, name: string): Promise {\n const secret = genCode(\"W\", 16);\n const r = await sqlite.execute({\n sql: \"INSERT INTO projects (owner_id, name, webhook_secret) VALUES (?, ?, ?) RETURNING *\",\n args: [ownerId, name, secret],\n });\n return r.rows[0] as unknown as ProjectRow;\n}\nexport async function updateProject(id: number, patch: Partial) {\n const keys = Object.keys(patch); if (!keys.length) return;\n const sets = keys.map((k) => `${k}=?`).join(\", \");\n const args = keys.map((k) => (patch as any)[k]); args.push(id);\n await sqlite.execute({ sql: `UPDATE projects SET ${sets} WHERE id=?`, args });\n}\nexport async function deleteProject(id: number) {\n await sqlite.execute({ sql: \"DELETE FROM files WHERE project_id=?\", args: [id] });\n await sqlite.execute({ sql: \"DELETE FROM webhook_events WHERE project_id=?\", args: [id] });\n await sqlite.execute({ sql: \"DELETE FROM projects WHERE id=?\", args: [id] });\n}\nexport async function listAllProjects(): Promise {\n const r = await sqlite.execute(\"SELECT * FROM projects ORDER BY id DESC\");\n return r.rows as unknown as ProjectRow[];\n}\n\n// ===== FILES =====\nexport async function addFile(projectId: number, path: string, content: string, isMain = false): Promise {\n await sqlite.execute({\n sql: `INSERT INTO files (project_id, path, content, size, is_main) VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(project_id, path) DO UPDATE SET content=excluded.content, size=excluded.size, uploaded_at=strftime('%s','now')`,\n args: [projectId, path, content, content.length, isMain ? 1 : 0],\n });\n const r = await sqlite.execute({ sql: \"SELECT * FROM files WHERE project_id=? AND path=?\", args: [projectId, path] });\n return r.rows[0] as unknown as FileRow;\n}\nexport async function listFiles(projectId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM files WHERE project_id=? ORDER BY is_main DESC, path ASC\", args: [projectId] });\n return r.rows as unknown as FileRow[];\n}\nexport async function getFile(projectId: number, path: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM files WHERE project_id=? AND path=?\", args: [projectId, path] });\n return r.rows.length ? (r.rows[0] as unknown as FileRow) : null;\n}\nexport async function deleteFileDb(projectId: number, path: string) {\n await sqlite.execute({ sql: \"DELETE FROM files WHERE project_id=? AND path=?\", args: [projectId, path] });\n}\nexport async function setMainFile(projectId: number, path: string) {\n await sqlite.execute({ sql: \"UPDATE files SET is_main=0 WHERE project_id=?\", args: [projectId] });\n await sqlite.execute({ sql: \"UPDATE files SET is_main=1 WHERE project_id=? AND path=?\", args: [projectId, path] });\n await sqlite.execute({ sql: \"UPDATE projects SET main_file=? WHERE id=?\", args: [path, projectId] });\n}\n\n// ===== WEBHOOK LOG =====\nexport async function logWebhook(projectId: number | null, hash: string, direction: string, payload: string, status: number) {\n await sqlite.execute({\n sql: \"INSERT INTO webhook_events (project_id, bot_token_hash, direction, payload, status_code) VALUES (?, ?, ?, ?, ?)\",\n args: [projectId, hash, direction, payload.slice(0, 4000), status],\n });\n if (projectId) {\n await sqlite.execute({\n sql: \"UPDATE projects SET message_count=message_count+1, last_update_at=strftime('%s','now') WHERE id=?\",\n args: [projectId],\n });\n }\n}\nexport async function recentEventsForProject(projectId: number, limit = 20) {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM webhook_events WHERE project_id=? ORDER BY id DESC LIMIT ?\",\n args: [projectId, limit],\n });\n return r.rows as any[];\n}\nexport async function recentWebhookEvents(limit = 50) {\n const r = await sqlite.execute({ sql: \"SELECT * FROM webhook_events ORDER BY id DESC LIMIT ?\", args: [limit] });\n return r.rows as any[];\n}\n\n// ===== STATS / SESSIONS =====\nexport async function globalStats() {\n const num = (x: any) => Number(x.rows[0]?.c ?? 0);\n return {\n users: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM users\")),\n projects: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM projects\")),\n running: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM projects WHERE status='running'\")),\n files: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM files\")),\n messages: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM webhook_events\")),\n };\n}\nexport async function createSession(username: string): Promise {\n const token = genCode(\"S\", 32) + Date.now().toString(36);\n const expires = Math.floor(Date.now() / 1000) + 60 * 60 * 24 * 7;\n await sqlite.execute({ sql: \"INSERT INTO panel_sessions (token, username, expires_at) VALUES (?, ?, ?)\", args: [token, username, expires] });\n return token;\n}\nexport async function validateSession(token: string): Promise {\n const now = Math.floor(Date.now() / 1000);\n const r = await sqlite.execute({ sql: \"SELECT 1 FROM panel_sessions WHERE token=? AND expires_at>?\", args: [token, now] });\n return r.rows.length > 0;\n}\nexport async function deleteSession(token: string) {\n await sqlite.execute({ sql: \"DELETE FROM panel_sessions WHERE token=?\", args: [token] });\n}\n",[],[162,294],["D",1776956400462],[178,179],[162],["D",1776956334773],["D",1789508444194],{"_103":102,"_110":106},{"_103":102,"_104":-5,"_105":106,"_19":60,"_107":108,"_109":30},{"_13":92,"_37":93,"_48":47,"_94":49,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":50,"_101":102},"ctx",{"_85":-5,"_130":342,"_343":344,"_345":346,"_347":30,"_348":30,"_349":30,"_350":128,"_351":-5,"_352":-7,"_353":-7,"_354":66,"_355":30,"_356":30,"_357":-5,"_358":30,"_359":30,"_360":30,"_361":-5},"ENV",{"_313":314,"_315":316,"_317":93,"_318":319,"_320":321,"_322":323,"_324":325,"_326":327,"_328":329,"_330":331,"_332":333,"_334":335,"_336":337,"_338":339,"_340":341},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v14