🤖

ScottHub

Telegram Bot Hosting · Admin Panel

\n \n

\n${body}\n

`;\n}\n\nfunction loginPage(err = \"\"): string {\n return `\n\nLogin · ScottHub\n\n\n`;\n}\n\nfunction statCard(label: string, value: number | string, icon: string): string {\n return `

${icon}

${value}

${label}

`;\n}\n\nfunction statusBadge(s: string): string {\n const cls: Record = {\n running: \"bg-emerald-500/20 text-emerald-300 border-emerald-500/40\",\n stopped: \"bg-slate-600/20 text-slate-300 border-slate-600/40\",\n expired: \"bg-rose-500/20 text-rose-300 border-rose-500/40\",\n };\n return `${esc(s)}`;\n}\n\nasync function getSessionToken(req: Request): Promise {\n const c = req.headers.get(\"cookie\") || \"\";\n const m = c.match(/scotthub_sess=([^;]+)/);\n return m ? decodeURIComponent(m[1]) : null;\n}\nasync function requireAuth(req: Request): Promise {\n const t = await getSessionToken(req);\n if (!t) return false;\n return db.validateSession(t);\n}\nfunction redirectTo(url: string): Response {\n return new Response(null, { status: 302, headers: { Location: url } });\n}\n\nexport async function handlePanel(req: Request, url: URL): Promise {\n const path = url.pathname;\n const baseUrl = await getBaseUrl();\n\n if (path === \"/panel/login\") {\n if (req.method === \"GET\") return new Response(loginPage(), { headers: { \"content-type\": \"text/html\" } });\n if (req.method === \"POST\") {\n const form = await req.formData();\n const u = form.get(\"username\"); const p = form.get(\"password\");\n if (u === PANEL_USER && p === PANEL_PASS) {\n const token = await db.createSession(String(u));\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/panel\",\n \"set-cookie\": `scotthub_sess=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`,\n },\n });\n }\n return new Response(loginPage(\"Invalid credentials\"), { headers: { \"content-type\": \"text/html\" }, status: 401 });\n }\n }\n\n if (path === \"/panel/logout\") {\n const t = await getSessionToken(req);\n if (t) await db.deleteSession(t);\n return new Response(null, { status: 302, headers: { Location: \"/panel/login\", \"set-cookie\": \"scotthub_sess=; Path=/; Max-Age=0\" } });\n }\n\n if (!(await requireAuth(req))) return redirectTo(\"/panel/login\");\n\n // Dashboard\n if (path === \"/panel\" || path === \"/panel/\") {\n const stats = await db.globalStats();\n const projects = await db.listAllProjects();\n const running = projects.filter((p) => p.status === \"running\").length;\n const body = `\n

\n ${statCard(\"Users\", stats.users, \"👤\")}\n ${statCard(\"Projects\", stats.projects, \"📦\")}\n ${statCard(\"Running\", running, \"🟢\")}\n ${statCard(\"Messages\", stats.messages, \"✉️\")}\n

Recent projects

\n \n \n \n \n \n ${projects.slice(0, 30).map((p) => `\n \n \n \n \n \n \n \n `).join(\"\")}\n

ID	Name	Owner	Bot	Status	Expires
#${p.id}	`${esc(p.name)}`	${p.owner_id}	${p.bot_username ? \"@\" + esc(p.bot_username) : \"—\"}	${statusBadge(p.status)}	${fmtDate(p.expires_at)}	Manage →

`;\n return new Response(layout(\"Dashboard\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/projects\") {\n const projects = await db.listAllProjects();\n const body = `\n

All projects (${projects.length})

\n ${projects.length === 0 ? \"

No projects yet.

\" : projects.map((p) => `\n \n

${esc(p.name)} #${p.id}

owner ${p.owner_id} · ${p.bot_username ? \"@\" + esc(p.bot_username) : \"no bot token\"}

${statusBadge(p.status)}\n

${fmtDate(p.expires_at)}

`).join(\"\")}\n

`;\n return new Response(layout(\"Projects\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // Project detail\n const projMatch = path.match(/^\\/panel\\/projects\\/(\\d+)$/);\n if (projMatch) {\n const id = Number(projMatch[1]);\n const project = await db.getProjectById(id);\n if (!project) return new Response(\"Not found\", { status: 404 });\n const files = await db.listFiles(id);\n const whUrl = project.webhook_secret ? projectWebhookUrl(baseUrl, id, project.webhook_secret) : \"\";\n\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"setwebhook\" && project.bot_token) {\n const r = await tg.setWebhook(project.bot_token, whUrl);\n await db.updateProject(id, { webhook_url: whUrl, status: \"running\" });\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook SET ✅ Bot ONLINE\" : \"Error: \" + r.description)}`);\n }\n if (action === \"delwebhook\" && project.bot_token) {\n const r = await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(r.ok ? \"Webhook removed\" : \"Error: \" + r.description)}`);\n }\n if (action === \"toggle\") {\n const newStatus = project.status === \"running\" ? \"stopped\" : \"running\";\n await db.updateProject(id, { status: newStatus, stopped_at: newStatus === \"stopped\" ? Math.floor(Date.now() / 1000) : null });\n if (newStatus === \"running\" && project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n else if (newStatus === \"stopped\" && project.bot_token) await tg.deleteWebhook(project.bot_token);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Status → \" + newStatus)}`);\n }\n if (action === \"extend\") {\n const days = Number(form.get(\"days\") || \"2\");\n const base = project.expires_at && project.expires_at > Math.floor(Date.now() / 1000) ? project.expires_at : Math.floor(Date.now() / 1000);\n await db.updateProject(id, { expires_at: base + days * 86400, status: \"running\" });\n if (project.bot_token) await tg.setWebhook(project.bot_token, whUrl);\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Extended by \" + days + \"d\")}`);\n }\n if (action === \"settoken\") {\n const t = String(form.get(\"token\") || \"\").trim();\n if (t) {\n const me = await tg.getMe(t);\n await db.updateProject(id, { bot_token: t, bot_username: me.ok ? me.result.username : null });\n }\n return redirectTo(`/panel/projects/${id}?msg=${encodeURIComponent(\"Token updated\")}`);\n }\n if (action === \"delete\") {\n if (project.bot_token) { try { await tg.deleteWebhook(project.bot_token); } catch {} }\n await db.deleteProject(id);\n return redirectTo(`/panel/projects?msg=${encodeURIComponent(\"Project deleted\")}`);\n }\n }\n\n let whInfo = \"\";\n if (project.bot_token) {\n const info = await tg.getWebhookInfo(project.bot_token);\n whInfo = info.ok\n ? `

${esc(JSON.stringify(info.result, null, 2))}

`\n : `

Error: ${esc(info.description || \"\")}

`;\n }\n\n const msg = url.searchParams.get(\"msg\");\n const now = Math.floor(Date.now() / 1000);\n const remaining = project.expires_at ? project.expires_at - now : 0;\n\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n← all projects\n

${esc(project.name)} #${project.id}

Owner: ${project.owner_id} · Created ${fmtDate(project.created_at)}

\n\n

Bot Info

Status: ${statusBadge(project.status)}

Bot: ${project.bot_username ? \"@\" + esc(project.bot_username) : \"not set\"}

Token: ${project.bot_token ? esc(project.bot_token.slice(0, 10)) + \"…\" : \"not set\"}

Admin id: ${esc(project.admin_id || \"—\")}

Main file: ${esc(project.main_file || \"—\")}

Messages: ${project.message_count}

Expires: ${project.expires_at ? `${fmtDate(project.expires_at)} (${fmtDuration(Math.max(0, remaining))})` : \"—\"}

\n\n

Webhook Router URL

\n ${esc(whUrl)}\n \n

\n\n

Manual Controls

\n \n \n \n

\n\n

Telegram getWebhookInfo

\n ${whInfo || \"

No bot token set.

\"}\n

\n\n

Detected Imports (pip)

\n ${esc(project.detected_imports || \"—\")}\n

\n\n

Files (${files.length})

${files.map((f) => `

${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)}

${f.size}b · ${fmtDate(f.uploaded_at)}

`).join(\"\") || \"

No files.

\"}\n

`;\n return new Response(layout(project.name, body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/events\") {\n const events = await db.recentWebhookEvents(100);\n const body = `\n

Recent webhook events (${events.length})

\n \n \n \n \n ${events.map((e: any) => `\n \n \n \n \n \n `).join(\"\") || \"\"}\n

Time	Project	Dir	Status	Payload
${fmtDate(e.created_at)}	#${e.project_id ?? \"—\"}	${esc(e.direction)}	${e.status_code}	`${esc(String(e.payload \|\| \"\").slice(0, 200))}`
No events yet.

`;\n return new Response(layout(\"Events\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n if (path === \"/panel/main-webhook\") {\n const endpoint = `${baseUrl}/bot`;\n if (req.method === \"POST\") {\n const form = await req.formData();\n const action = form.get(\"action\");\n if (action === \"set\") {\n const r = await tg.setWebhook(BOT_TOKEN, endpoint);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Main bot webhook set ✅\" : \"Error: \" + (r.description || \"\"))}`);\n }\n if (action === \"delete\") {\n const r = await tg.deleteWebhook(BOT_TOKEN);\n return redirectTo(`/panel/main-webhook?msg=${encodeURIComponent(r.ok ? \"Webhook deleted\" : \"Error: \" + (r.description || \"\"))}`);\n }\n }\n const info = await tg.getWebhookInfo(BOT_TOKEN);\n const me = await tg.getMe(BOT_TOKEN);\n const msg = url.searchParams.get(\"msg\");\n const body = `\n${msg ? `

${esc(msg)}

` : \"\"}\n

Main ScottHub Bot

Bot: ${me.ok ? `@${esc(me.result.username)} (${esc(me.result.first_name)})` : \"token invalid\"}

Webhook endpoint: ${esc(endpoint)}

\n \n

Telegram getWebhookInfo

${esc(JSON.stringify(info, null, 2))}

`;\n return new Response(layout(\"Main Webhook\", body), { headers: { \"content-type\": \"text/html\" } });\n }\n\n return new Response(\"Panel page not found\", { status: 404 });\n}\n",[],[154,185],"9643eb4c-3f25-11f1-986f-42b51c65c3df","hosted_webhook.ts","9643ec00-3f25-11f1-986f-42b51c65c3df",13,["D",1776956609241],"// Router for hosted bots\n// Telegram POSTs updates for the hosted bot to /tgwebhook/:projectId/:secret\n// We log the update and simulate basic responses based on parsed Python handlers.\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { hashToken } from \"../lib/utils.ts\";\n\nexport async function handleHostedWebhook(projectId: number, secret: string, body: any): Promise {\n const project = await db.getProjectById(projectId);\n if (!project || project.webhook_secret !== secret) return new Response(\"not found\", { status: 404 });\n\n const tokenHash = project.bot_token ? await hashToken(project.bot_token) : \"none\";\n const now = Math.floor(Date.now() / 1000);\n\n if (project.status !== \"running\" || (project.expires_at && project.expires_at <= now)) {\n await db.logWebhook(projectId, tokenHash, \"dropped\", JSON.stringify(body), 200);\n return new Response(\"ok (not running)\", { status: 200 });\n }\n\n await db.logWebhook(projectId, tokenHash, \"in\", JSON.stringify(body), 200);\n\n const msg = body?.message;\n if (msg && project.bot_token) {\n const chatId = msg.chat.id;\n const text: string = msg.text || \"\";\n\n const mainFile = project.main_file ? await db.getFile(project.id, project.main_file) : null;\n const allFiles = await db.listFiles(project.id);\n\n if (mainFile?.content) {\n const response = executeBotLogic(mainFile.content, allFiles, msg);\n if (response) {\n await tg.sendMessage(project.bot_token, chatId, response);\n return new Response(\"ok\", { status: 200 });\n }\n }\n\n if (text === \"/start\" || text === \"/help\" || text === \"/ping\") {\n const username = project.bot_username ? \"@\" + project.bot_username : \"this bot\";\n await tg.sendMessage(\n project.bot_token, chatId,\n `🤖 ${username} is hosted by ScottHub.\\n\\n` +\n `Project: ${project.name}\\n` +\n `Status: running\\nFiles: ${allFiles.length}\\n\\n` +\n `Running via ScottHub webhook router.`,\n );\n }\n }\n\n const cb = body?.callback_query;\n if (cb && project.bot_token) { try { await tg.answerCallback(project.bot_token, cb.id, \"ok\"); } catch {} }\n\n return new Response(\"ok\", { status: 200 });\n}\n\nfunction executeBotLogic(mainCode: string, allFiles: db.FileRow[], msg: any): string | null {\n const text: string = msg.text || \"\";\n const command = text.split(/\\s+/)[0]?.toLowerCase();\n const handlers = extractCommandHandlers(mainCode);\n for (const f of allFiles) if (f.path.endsWith(\".py\") && !f.is_main) handlers.push(...extractCommandHandlers(f.content));\n for (const h of handlers) if (command === \"/\" + h.command || command === h.command) if (h.replyText) return h.replyText;\n return null;\n}\n\ninterface CommandHandler { command: string; replyText: string | null }\nfunction extractCommandHandlers(code: string): CommandHandler[] {\n const handlers: CommandHandler[] = [];\n const patterns = [\n /commands?\\s*=\\s*\\[['\"](\\w+)['\"]/g,\n /Command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n /filters\\.command\\s*\$\\s*[\"'](\\w+)[\"']\\s*\$/g,\n ];\n for (const pat of patterns) {\n let m;\n while ((m = pat.exec(code)) !== null) {\n const cmd = m[1];\n const nearby = code.slice(m.index, m.index + 600);\n const reply = nearby.match(/(?:reply|reply_text|send_message|answer|bot\\.reply_to)\\s*\\(\\s*[^,)]*,?\\s*[\"']([^\"']+)[\"']/)\n || nearby.match(/(?:reply|reply_text|send_message|answer)\\s*\\(\\s*[\"']([^\"']+)[\"']/);\n handlers.push({ command: cmd, replyText: reply ? reply[1] : null });\n }\n }\n return handlers;\n}\n",[],[154,193],"3beee0ca-3f25-11f1-8f86-42b51c65c3df","archive.ts","3beee1ba-3f25-11f1-8f86-42b51c65c3df",9,["D",1776956457692],"// Forward every uploaded file to @ProjectScottCode for safekeeping\nimport * as tg from \"../lib/telegram.ts\";\nimport { BOT_TOKEN, ARCHIVE_CHANNEL } from \"../lib/config.ts\";\n\nexport async function archiveUpload(\n ownerId: number, ownerName: string | null, projectName: string,\n filename: string, content: string,\n) {\n try {\n const bytes = new TextEncoder().encode(content);\n const caption = [\n `🗂 ScottHub Upload`,\n `Owner: ${ownerId}${ownerName ? \" (\" + ownerName + \")\" : \"\"}`,\n `Project: ${projectName}`,\n `File: ${filename}`,\n `Size: ${bytes.length} bytes`,\n `Time: ${new Date().toISOString()}`,\n ].join(\"\\n\");\n await tg.sendDocument(BOT_TOKEN, ARCHIVE_CHANNEL, bytes, filename, caption);\n } catch (e) {\n console.error(\"archive failed:\", e);\n }\n}\n",[],[154,201],"d2bebade-3f25-11f1-b87d-42b51c65c3df","app.ts","d2bebb9c-3f25-11f1-b87d-42b51c65c3df",15,["D",1776956710710],"// Hono HTTP entrypoint for ScottHub\nimport { Hono } from \"npm:hono\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { runMigrations } from \"../database/schema.ts\";\nimport { handleUpdate } from \"./router.ts\";\nimport { handleHostedWebhook } from \"./hosted_webhook.ts\";\nimport { handlePanel } from \"./panel.ts\";\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nlet migrated = false;\napp.use(\"*\", async (c, next) => {\n if (!migrated) { await runMigrations(); migrated = true; }\n await next();\n});\n\nfunction landing(): string {\n return `\n\nScottHub — Telegram Bot Hosting\n\n\n

🤖

ScottHub

Telegram Bot Hosting Platform

How to use

Open the bot in Telegram and press /start
Join @ScottHubs
Invite 2 friends via your Referral link
Upload your Python bot in 🖥 Host → ⬆️ Upload Files
Bot goes live automatically through the ScottHub webhook router!

\n \n

📢 Channel

@ScottHubs

\n \n

🔐 Admin Panel

Manage webhooks

\n \n

📄 View Source

Read the code

`;\n}\n\napp.get(\"/\", (c) => c.html(landing()));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/health\", (c) => c.json({ ok: true, ts: Date.now() }));\n\n// Main ScottHub bot webhook\napp.post(\"/bot\", async (c) => {\n const body = await c.req.json().catch(() => null);\n if (body) { try { await handleUpdate(body); } catch (e) { console.error(\"handleUpdate:\", e); } }\n return c.text(\"ok\");\n});\n\n// Hosted-bot webhook router\napp.post(\"/tgwebhook/:id/:secret\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n return handleHostedWebhook(Number(c.req.param(\"id\")), c.req.param(\"secret\"), body);\n});\n\n// Panel (delegates to its own handler to preserve cookies + forms cleanly)\napp.all(\"/panel\", async (c) => handlePanel(c.req.raw, new URL(c.req.url)));\napp.all(\"/panel/*\", async (c) => handlePanel(c.req.raw, new URL(c.req.url)));\n\nexport default app;\n",[],[154,209],"7f782086-3f25-11f1-bed7-42b51c65c3df","actions.ts","7f78211c-3f25-11f1-bed7-42b51c65c3df",11,["D",1776956570998],"// Uploads, file mgmt, stop/restart, project switching\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { analyzePythonFile } from \"../lib/parser.ts\";\nimport { esc, fmtDuration, getBaseUrl, projectWebhookUrl, safePath } from \"../lib/utils.ts\";\nimport { BOT_TOKEN, MAX_FILE_BYTES, MAX_PROJECTS_PER_USER } from \"../lib/config.ts\";\nimport { canCreateNewProject, claimHostSlot, isAdmin } from \"./access.ts\";\nimport { archiveUpload } from \"./archive.ts\";\nimport { showHost, showManage } from \"./screens.ts\";\n\nexport async function handleDocument(chatId: number, userId: number, doc: { file_id: string; file_name: string; file_size: number; mime_type?: string }) {\n if (doc.file_size > MAX_FILE_BYTES) {\n await tg.sendMessage(BOT_TOKEN, chatId, `❌ File too large (max ${MAX_FILE_BYTES} bytes).`, { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n const name = safePath(doc.file_name || \"file.txt\");\n\n const info = await tg.getFile(BOT_TOKEN, doc.file_id);\n if (!info?.file_path) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Could not fetch file from Telegram.\");\n return;\n }\n const content = await tg.downloadFile(BOT_TOKEN, info.file_path);\n\n const user = await db.getUser(userId);\n if (!user) return;\n const state = user.state || \"idle\";\n const isPy = name.endsWith(\".py\");\n\n // \"Add File\" sub-upload flow\n if (state === \"awaiting_sub_upload\") {\n const subPath = safePath((JSON.parse(user.state_data || \"{}\") as any).subPath || name);\n const project = await db.getActiveProject(userId);\n if (!project) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No active project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.addFile(project.id, subPath, content, false);\n await archiveUpload(userId, user.first_name, project.name, subPath, content);\n if (subPath.endsWith(\".py\")) {\n const a = analyzePythonFile(content);\n if (a.imports.pip.length) {\n const existing = JSON.parse(project.detected_imports || \"[]\") as string[];\n const merged = [...new Set([...existing, ...a.imports.pip])];\n await db.updateProject(project.id, { detected_imports: JSON.stringify(merged) });\n }\n }\n await tg.sendMessage(BOT_TOKEN, chatId,\n `✅ Added ${esc(subPath)} to project ${esc(project.name)}.\\nFile is saved in database and forwarded to @ProjectScottCode.`,\n { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n\n // Main upload flow — new or replace main of the ACTIVE slot\n const existingProjects = await db.listProjectsByOwner(userId);\n const active = await db.getActiveProject(userId);\n const now = Math.floor(Date.now() / 1000);\n const activeIsAlive = active && active.expires_at && active.expires_at > now;\n let project = activeIsAlive ? active! : null;\n\n if (!project) {\n // need a new slot (or re-using expired active)\n const check = await canCreateNewProject(userId);\n if (!check.allowed && !(active && !activeIsAlive)) {\n await tg.sendMessage(BOT_TOKEN, chatId,\n `🔒 Can't host yet.\\n${check.reason}\\nReferrals: ${check.have}/${check.need}\\n\\nTap 👥 Referral.`,\n { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n const claim = await claimHostSlot(userId);\n if (!claim.ok) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ \" + claim.reason, { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n if (active && !activeIsAlive) {\n // renew existing expired slot\n await db.updateProject(active.id, { expires_at: claim.expiresAt, started_at: now, stopped_at: null, status: \"running\" });\n project = await db.getProjectById(active.id);\n } else {\n // brand new project\n if (existingProjects.length >= MAX_PROJECTS_PER_USER && !isAdmin(userId)) {\n await tg.sendMessage(BOT_TOKEN, chatId, `❌ Slot limit: ${MAX_PROJECTS_PER_USER}. Stop & delete one first.`, { reply_markup: tg.HOST_KEYBOARD });\n return;\n }\n project = await db.createProject(userId, name.replace(/\\.py$/, \"\"));\n await db.updateProject(project.id, { expires_at: claim.expiresAt, started_at: now, status: \"running\" });\n project = await db.getProjectById(project.id);\n await db.setActiveProject(userId, project!.id);\n }\n }\n if (!project) return;\n\n // Store the file\n const existingFiles = await db.listFiles(project.id);\n const makeMain = isPy && (existingFiles.length === 0 || !project.main_file);\n await db.addFile(project.id, name, content, makeMain);\n if (makeMain) await db.setMainFile(project.id, name);\n\n // Archive to @ProjectScottCode\n await archiveUpload(userId, user.first_name, project.name, name, content);\n\n // Smart analysis\n let analysisText = \"\";\n if (isPy) {\n const a = analyzePythonFile(content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n\n if (a.botToken) {\n const me = await tg.getMe(a.botToken);\n if (me.ok) await db.updateProject(project.id, { bot_username: me.result.username });\n try {\n const base = await getBaseUrl();\n const whUrl = projectWebhookUrl(base, project.id, project.webhook_secret || \"\");\n await db.updateProject(project.id, { webhook_url: whUrl });\n const whResult = await tg.setWebhook(a.botToken, whUrl);\n if (whResult.ok) analysisText += \"\\n🔌 Webhook auto-configured! ✅ Bot is ONLINE.\";\n else analysisText += `\\n⚠️ Webhook set failed: ${whResult.description}`;\n } catch (e) { console.error(\"auto webhook:\", e); }\n }\n\n analysisText +=\n `\\n\\n🧠 Smart analysis\\n` +\n `• Bot token: ${a.botToken ? \"✅ detected\" : \"❌ not found\"}\\n` +\n `• Admin id: ${a.adminId ? `✅ ${esc(a.adminId)}` : \"❌ not found\"}\\n` +\n `• Imports detected: ${a.imports.imports.length}\\n` +\n (a.imports.pip.length ? `• Auto-install: ${esc(a.imports.pip.join(\" \"))}\\n` : \"\") +\n `• Lines: ${a.lines}`;\n }\n\n const updated = await db.getProjectById(project.id);\n const remaining = updated?.expires_at ? updated.expires_at - now : 0;\n\n await tg.sendMessage(BOT_TOKEN, chatId,\n `✅ File uploaded\\n\\n📄 ${esc(name)} (${content.length} bytes)\\n` +\n (makeMain ? `⭐ Marked as main file\\n` : \"\") +\n `📤 Forwarded to @ProjectScottCode\\n` +\n `⏱ Host time: ${fmtDuration(remaining)}${analysisText}`,\n { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n\nexport async function handleStop(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project to stop.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n await db.updateProject(project.id, { status: \"stopped\", stopped_at: Math.floor(Date.now() / 1000) });\n if (project.bot_token) { try { await tg.deleteWebhook(project.bot_token); } catch {} }\n await tg.sendMessage(BOT_TOKEN, chatId, \"⏹ Bot stopped.\\nWebhook removed.\", { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function handleRestart(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project to restart.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n const now = Math.floor(Date.now() / 1000);\n if (project.expires_at && project.expires_at <= now) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Host time expired. Invite 2 users and upload again.\", { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n await db.updateProject(project.id, { status: \"running\", stopped_at: null });\n if (project.bot_token && project.webhook_secret) {\n try {\n const base = await getBaseUrl();\n await tg.setWebhook(project.bot_token, projectWebhookUrl(base, project.id, project.webhook_secret));\n } catch {}\n }\n await tg.sendMessage(BOT_TOKEN, chatId, \"🔄 Bot restarted.\\nWebhook routing resumed.\", { reply_markup: tg.HOST_KEYBOARD });\n}\n\nexport async function promptUpload(chatId: number, userId: number) {\n const check = await canCreateNewProject(userId);\n const existing = await db.listProjectsByOwner(userId);\n const hasAlive = existing.some((p) => p.expires_at && p.expires_at > Math.floor(Date.now() / 1000));\n if (!check.allowed && !hasAlive) {\n await tg.sendMessage(BOT_TOKEN, chatId,\n `🔒 Locked\\n\\n${check.reason}\\nReferrals: ${check.have}/${check.need}\\n\\nTap 👥 Referral.`,\n { reply_markup: tg.MAIN_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_upload\");\n await tg.sendMessage(BOT_TOKEN, chatId,\n `⬆️ Upload your bot\\n\\nSend your Python bot file (.py) as a document.\\n\\nScottHub auto-detects:\\n• bot token • admin id • imports/pip packages\\n\\n/cancel to abort.`,\n { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function promptAddFile(chatId: number, userId: number) {\n await db.setUserState(userId, \"awaiting_sub_path\");\n await tg.sendMessage(BOT_TOKEN, chatId,\n \"📝 Send the relative path for the new file (e.g. plugins/helper.py or config.py).\\nThen send it as a document.\\n\\n/cancel to abort.\",\n { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleSubPath(chatId: number, userId: number, text: string) {\n const clean = safePath(text);\n if (!clean || clean.length > 120) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid path.\", { reply_markup: tg.BACK_KEYBOARD });\n return;\n }\n await db.setUserState(userId, \"awaiting_sub_upload\", { subPath: clean });\n await tg.sendMessage(BOT_TOKEN, chatId, `📂 Path set to ${esc(clean)}\\n\\nNow send the file as a document.`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleDeleteFilePrompt(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n if (!files.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No files to delete.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n await db.setUserState(userId, \"awaiting_delete_path\");\n const list = files.map((f) => `• ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `🗑 Send the path to delete:\\n\\n${list}\\n\\n/cancel to abort.`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleDeletePath(chatId: number, userId: number, text: string) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file) { await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such file.\", { reply_markup: tg.MANAGE_KEYBOARD }); await db.setUserState(userId, \"manage\"); return; }\n if (file.is_main) { await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Can't delete main file.\", { reply_markup: tg.MANAGE_KEYBOARD }); await db.setUserState(userId, \"manage\"); return; }\n await db.deleteFileDb(project.id, clean);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Deleted ${esc(clean)}`, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleSetMainPrompt(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const files = await db.listFiles(project.id);\n const py = files.filter((f) => f.path.endsWith(\".py\"));\n if (!py.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No .py files yet.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n await db.setUserState(userId, \"awaiting_main_path\");\n const list = py.map((f) => `${f.is_main ? \"⭐\" : \" \"} ${esc(f.path)}`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Send path of file to mark as main:\\n\\n${list}`, { reply_markup: tg.BACK_KEYBOARD });\n}\n\nexport async function handleSetMainPath(chatId: number, userId: number, text: string) {\n const project = await db.getActiveProject(userId);\n if (!project) return;\n const clean = text.trim();\n const file = await db.getFile(project.id, clean);\n if (!file || !clean.endsWith(\".py\")) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ No such .py file.\", { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n return;\n }\n await db.setMainFile(project.id, clean);\n const a = analyzePythonFile(file.content);\n const patch: any = { detected_imports: JSON.stringify(a.imports.pip) };\n if (a.botToken) patch.bot_token = a.botToken;\n if (a.adminId) patch.admin_id = a.adminId;\n await db.updateProject(project.id, patch);\n await tg.sendMessage(BOT_TOKEN, chatId, `⭐ Main file set to ${esc(clean)}`, { reply_markup: tg.MANAGE_KEYBOARD });\n await db.setUserState(userId, \"manage\");\n}\n\nexport async function handleListFiles(chatId: number, userId: number) {\n const project = await db.getActiveProject(userId);\n if (!project) { await tg.sendMessage(BOT_TOKEN, chatId, \"No project.\", { reply_markup: tg.HOST_KEYBOARD }); return; }\n const files = await db.listFiles(project.id);\n if (!files.length) { await tg.sendMessage(BOT_TOKEN, chatId, \"No files.\", { reply_markup: tg.MANAGE_KEYBOARD }); return; }\n const list = files.map((f) => `${f.is_main ? \"⭐\" : \"📄\"} ${esc(f.path)} — ${f.size}b`).join(\"\\n\");\n await tg.sendMessage(BOT_TOKEN, chatId, `📁 Files in ${esc(project.name)}\\n\\n${list}`, { reply_markup: tg.MANAGE_KEYBOARD });\n}\n\nexport async function handleSwitchSelection(chatId: number, userId: number, text: string) {\n // expected text pattern: \"✅ #12 name\" or \"#12 name\"\n const m = text.match(/#(\\d+)/);\n if (!m) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Invalid choice.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n const id = Number(m[1]);\n const proj = await db.getProjectById(id);\n if (!proj || proj.owner_id !== userId) {\n await tg.sendMessage(BOT_TOKEN, chatId, \"❌ Not your project.\", { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n return;\n }\n await db.setActiveProject(userId, id);\n await tg.sendMessage(BOT_TOKEN, chatId, `✅ Active project → ${esc(proj.name)}`, { reply_markup: tg.HOST_KEYBOARD });\n await db.setUserState(userId, \"host\");\n}\n",[],[154,217],"38f4ab02-3f25-11f1-8f86-42b51c65c3df","access.ts","38f4abca-3f25-11f1-8f86-42b51c65c3df",["D",1776956452693],"// Channel-join + referral gate\nimport * as db from \"../database/queries.ts\";\nimport * as tg from \"../lib/telegram.ts\";\nimport { BOT_TOKEN, CHANNEL, ADMIN_ID, REFERRALS_REQUIRED, HOST_DURATION_SECONDS, MAX_PROJECTS_PER_USER } from \"../lib/config.ts\";\n\nexport function isAdmin(tgId: number): boolean { return tgId === ADMIN_ID; }\n\nexport async function ensureChannelJoined(chatId: number, userId: number): Promise {\n if (isAdmin(userId)) { await db.markJoined(userId, true); return true; }\n const r = await tg.checkChannelMember(BOT_TOKEN, CHANNEL, userId);\n if (r.ok && r.isMember) { await db.markJoined(userId, true); return true; }\n await db.markJoined(userId, false);\n await tg.sendMessage(\n BOT_TOKEN, chatId,\n `🔒 Join Required\\n\\nTo use ScottHub please join our channel:\\n👉 https://t.me/ScottHubs\\n\\nThen press /start again.`,\n { reply_markup: tg.REMOVE_KEYBOARD },\n );\n return false;\n}\n\nexport type HostCheck =\n | { allowed: true; reason: \"admin\" | \"referrals\" | \"renew\" }\n | { allowed: false; need: number; have: number; reason: string };\n\nexport async function canCreateNewProject(userId: number): Promise {\n if (isAdmin(userId)) return { allowed: true, reason: \"admin\" };\n const count = await db.countProjects(userId);\n if (count >= MAX_PROJECTS_PER_USER) {\n return { allowed: false, need: 0, have: count, reason: `Max ${MAX_PROJECTS_PER_USER} bot slots reached. Stop/delete one first.` };\n }\n const user = await db.getUser(userId);\n if (!user) return { allowed: false, need: REFERRALS_REQUIRED, have: 0, reason: \"User not registered\" };\n if (user.referral_count >= REFERRALS_REQUIRED) return { allowed: true, reason: \"referrals\" };\n return { allowed: false, need: REFERRALS_REQUIRED, have: user.referral_count, reason: \"Not enough referrals\" };\n}\n\n/** Claim (consume) referrals for a NEW host slot. Admin is free. */\nexport async function claimHostSlot(userId: number): Promise<{ ok: true; expiresAt: number } | { ok: false; reason: string }> {\n const expiresAt = Math.floor(Date.now() / 1000) + HOST_DURATION_SECONDS;\n if (isAdmin(userId)) return { ok: true, expiresAt };\n const user = await db.getUser(userId);\n if (!user) return { ok: false, reason: \"User not found\" };\n if (user.referral_count < REFERRALS_REQUIRED) {\n return { ok: false, reason: `Need ${REFERRALS_REQUIRED} referrals (you have ${user.referral_count})` };\n }\n await db.consumeReferrals(userId, REFERRALS_REQUIRED);\n return { ok: true, expiresAt };\n}\n",[],[154,225],"19d6e280-3f25-11f1-8c3e-42b51c65c3df","database","39b957e7-b36b-4e60-938e-3cb9062a4f18",6,["D",1776956400462],[238,239],[232],{"_34":247,"_13":248,"_37":249,"_39":233,"_41":42,"_43":250,"_45":46,"_47":251,"_17":49,"_50":51,"_52":252,"_54":55,"_56":-5,"_77":253,"_18":254},{"_34":240,"_13":241,"_37":242,"_39":233,"_41":42,"_43":234,"_45":46,"_47":243,"_17":49,"_50":51,"_52":244,"_54":55,"_56":-5,"_77":245,"_18":246},"19d6c426-3f25-11f1-8c3e-42b51c65c3df","schema.ts","19d6c4f8-3f25-11f1-8c3e-42b51c65c3df",["D",1776956400462],"// DB schema + migrations\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runMigrations() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS users (\n tg_id INTEGER PRIMARY KEY, username TEXT, first_name TEXT,\n referral_code TEXT UNIQUE, referred_by INTEGER,\n referral_count INTEGER DEFAULT 0,\n state TEXT DEFAULT 'idle', state_data TEXT,\n joined_channel INTEGER DEFAULT 0,\n active_project_id INTEGER,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n updated_at INTEGER DEFAULT (strftime('%s','now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS projects (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n owner_id INTEGER NOT NULL, name TEXT NOT NULL,\n main_file TEXT, bot_token TEXT, bot_username TEXT,\n admin_id TEXT, detected_imports TEXT,\n status TEXT DEFAULT 'stopped',\n webhook_secret TEXT, webhook_url TEXT,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n started_at INTEGER, expires_at INTEGER, stopped_at INTEGER,\n last_update_at INTEGER, message_count INTEGER DEFAULT 0\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS files (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER NOT NULL, path TEXT NOT NULL, content TEXT NOT NULL,\n size INTEGER DEFAULT 0, is_main INTEGER DEFAULT 0,\n uploaded_at INTEGER DEFAULT (strftime('%s','now')),\n UNIQUE(project_id, path)\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS referrals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n referrer_id INTEGER NOT NULL, invited_id INTEGER NOT NULL UNIQUE,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS webhook_events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER, bot_token_hash TEXT, direction TEXT,\n payload TEXT, status_code INTEGER,\n created_at INTEGER DEFAULT (strftime('%s','now'))\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS panel_sessions (\n token TEXT PRIMARY KEY, username TEXT NOT NULL,\n created_at INTEGER DEFAULT (strftime('%s','now')),\n expires_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_projects_owner ON projects(owner_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_files_project ON files(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_referrals_ref ON referrals(referrer_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_webhook_project ON webhook_events(project_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_users_refcode ON users(referral_code)`);\n // Safe migrations\n try { await sqlite.execute(`ALTER TABLE users ADD COLUMN active_project_id INTEGER`); } catch {}\n try { await sqlite.execute(`ALTER TABLE projects ADD COLUMN webhook_url TEXT`); } catch {}\n}\n",[],[232,241],"3183b638-3f25-11f1-bf01-42b51c65c3df","queries.ts","3183b6d8-3f25-11f1-bf01-42b51c65c3df",7,["D",1776956440212],"// All DB queries\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type UserRow = {\n tg_id: number; username: string | null; first_name: string | null;\n referral_code: string; referred_by: number | null; referral_count: number;\n state: string; state_data: string | null; joined_channel: number;\n active_project_id: number | null;\n};\nexport type ProjectRow = {\n id: number; owner_id: number; name: string;\n main_file: string | null; bot_token: string | null; bot_username: string | null;\n admin_id: string | null; detected_imports: string | null; status: string;\n webhook_secret: string | null; webhook_url: string | null;\n created_at: number; started_at: number | null; expires_at: number | null;\n stopped_at: number | null; last_update_at: number | null; message_count: number;\n};\nexport type FileRow = {\n id: number; project_id: number; path: string; content: string;\n size: number; is_main: number; uploaded_at: number;\n};\n\nfunction genCode(prefix: string, len = 8): string {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n let s = \"\"; for (let i = 0; i < len; i++) s += chars[Math.floor(Math.random() * chars.length)];\n return prefix + s;\n}\n\n// ===== USERS =====\nexport async function getOrCreateUser(tgId: number, username: string | null, firstName: string | null, referredBy: number | null = null) {\n const existing = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n if (existing.rows.length > 0) {\n await sqlite.execute({\n sql: \"UPDATE users SET username=?, first_name=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [username, firstName, tgId],\n });\n return { user: existing.rows[0] as unknown as UserRow, created: false };\n }\n let code = genCode(\"R\");\n for (let i = 0; i < 5; i++) {\n const c = await sqlite.execute({ sql: \"SELECT 1 FROM users WHERE referral_code=?\", args: [code] });\n if (c.rows.length === 0) break;\n code = genCode(\"R\");\n }\n await sqlite.execute({\n sql: \"INSERT INTO users (tg_id, username, first_name, referral_code, referred_by) VALUES (?, ?, ?, ?, ?)\",\n args: [tgId, username, firstName, code, referredBy],\n });\n const fresh = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return { user: fresh.rows[0] as unknown as UserRow, created: true };\n}\n\nexport async function getUser(tgId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE tg_id=?\", args: [tgId] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\nexport async function getUserByRefCode(code: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM users WHERE referral_code=?\", args: [code] });\n return r.rows.length ? (r.rows[0] as unknown as UserRow) : null;\n}\nexport async function setUserState(tgId: number, state: string, data: Record | null = null) {\n await sqlite.execute({\n sql: \"UPDATE users SET state=?, state_data=?, updated_at=strftime('%s','now') WHERE tg_id=?\",\n args: [state, data ? JSON.stringify(data) : null, tgId],\n });\n}\nexport async function setActiveProject(tgId: number, projectId: number | null) {\n await sqlite.execute({ sql: \"UPDATE users SET active_project_id=? WHERE tg_id=?\", args: [projectId, tgId] });\n}\nexport async function markJoined(tgId: number, joined: boolean) {\n await sqlite.execute({ sql: \"UPDATE users SET joined_channel=? WHERE tg_id=?\", args: [joined ? 1 : 0, tgId] });\n}\nexport async function addReferral(referrerId: number, invitedId: number): Promise {\n try {\n await sqlite.execute({ sql: \"INSERT INTO referrals (referrer_id, invited_id) VALUES (?, ?)\", args: [referrerId, invitedId] });\n await sqlite.execute({ sql: \"UPDATE users SET referral_count=referral_count+1 WHERE tg_id=?\", args: [referrerId] });\n return true;\n } catch { return false; }\n}\nexport async function consumeReferrals(userId: number, amount: number) {\n await sqlite.execute({ sql: \"UPDATE users SET referral_count=referral_count-? WHERE tg_id=?\", args: [amount, userId] });\n}\n\n// ===== PROJECTS =====\nexport async function listProjectsByOwner(ownerId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE owner_id=? ORDER BY id ASC\", args: [ownerId] });\n return r.rows as unknown as ProjectRow[];\n}\nexport async function getActiveProject(ownerId: number): Promise {\n const user = await getUser(ownerId);\n if (user?.active_project_id) {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE id=? AND owner_id=?\", args: [user.active_project_id, ownerId] });\n if (r.rows.length) return r.rows[0] as unknown as ProjectRow;\n }\n const projs = await listProjectsByOwner(ownerId);\n return projs[0] ?? null;\n}\nexport async function getProjectById(id: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE id=?\", args: [id] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\nexport async function getProjectByToken(token: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM projects WHERE bot_token=?\", args: [token] });\n return r.rows.length ? (r.rows[0] as unknown as ProjectRow) : null;\n}\nexport async function countProjects(ownerId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT COUNT(*) as c FROM projects WHERE owner_id=?\", args: [ownerId] });\n return Number((r.rows[0] as any)?.c ?? 0);\n}\nexport async function createProject(ownerId: number, name: string): Promise {\n const secret = genCode(\"W\", 16);\n const r = await sqlite.execute({\n sql: \"INSERT INTO projects (owner_id, name, webhook_secret) VALUES (?, ?, ?) RETURNING *\",\n args: [ownerId, name, secret],\n });\n return r.rows[0] as unknown as ProjectRow;\n}\nexport async function updateProject(id: number, patch: Partial) {\n const keys = Object.keys(patch); if (!keys.length) return;\n const sets = keys.map((k) => `${k}=?`).join(\", \");\n const args = keys.map((k) => (patch as any)[k]); args.push(id);\n await sqlite.execute({ sql: `UPDATE projects SET ${sets} WHERE id=?`, args });\n}\nexport async function deleteProject(id: number) {\n await sqlite.execute({ sql: \"DELETE FROM files WHERE project_id=?\", args: [id] });\n await sqlite.execute({ sql: \"DELETE FROM webhook_events WHERE project_id=?\", args: [id] });\n await sqlite.execute({ sql: \"DELETE FROM projects WHERE id=?\", args: [id] });\n}\nexport async function listAllProjects(): Promise {\n const r = await sqlite.execute(\"SELECT * FROM projects ORDER BY id DESC\");\n return r.rows as unknown as ProjectRow[];\n}\n\n// ===== FILES =====\nexport async function addFile(projectId: number, path: string, content: string, isMain = false): Promise {\n await sqlite.execute({\n sql: `INSERT INTO files (project_id, path, content, size, is_main) VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(project_id, path) DO UPDATE SET content=excluded.content, size=excluded.size, uploaded_at=strftime('%s','now')`,\n args: [projectId, path, content, content.length, isMain ? 1 : 0],\n });\n const r = await sqlite.execute({ sql: \"SELECT * FROM files WHERE project_id=? AND path=?\", args: [projectId, path] });\n return r.rows[0] as unknown as FileRow;\n}\nexport async function listFiles(projectId: number): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM files WHERE project_id=? ORDER BY is_main DESC, path ASC\", args: [projectId] });\n return r.rows as unknown as FileRow[];\n}\nexport async function getFile(projectId: number, path: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT * FROM files WHERE project_id=? AND path=?\", args: [projectId, path] });\n return r.rows.length ? (r.rows[0] as unknown as FileRow) : null;\n}\nexport async function deleteFileDb(projectId: number, path: string) {\n await sqlite.execute({ sql: \"DELETE FROM files WHERE project_id=? AND path=?\", args: [projectId, path] });\n}\nexport async function setMainFile(projectId: number, path: string) {\n await sqlite.execute({ sql: \"UPDATE files SET is_main=0 WHERE project_id=?\", args: [projectId] });\n await sqlite.execute({ sql: \"UPDATE files SET is_main=1 WHERE project_id=? AND path=?\", args: [projectId, path] });\n await sqlite.execute({ sql: \"UPDATE projects SET main_file=? WHERE id=?\", args: [path, projectId] });\n}\n\n// ===== WEBHOOK LOG =====\nexport async function logWebhook(projectId: number | null, hash: string, direction: string, payload: string, status: number) {\n await sqlite.execute({\n sql: \"INSERT INTO webhook_events (project_id, bot_token_hash, direction, payload, status_code) VALUES (?, ?, ?, ?, ?)\",\n args: [projectId, hash, direction, payload.slice(0, 4000), status],\n });\n if (projectId) {\n await sqlite.execute({\n sql: \"UPDATE projects SET message_count=message_count+1, last_update_at=strftime('%s','now') WHERE id=?\",\n args: [projectId],\n });\n }\n}\nexport async function recentEventsForProject(projectId: number, limit = 20) {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM webhook_events WHERE project_id=? ORDER BY id DESC LIMIT ?\",\n args: [projectId, limit],\n });\n return r.rows as any[];\n}\nexport async function recentWebhookEvents(limit = 50) {\n const r = await sqlite.execute({ sql: \"SELECT * FROM webhook_events ORDER BY id DESC LIMIT ?\", args: [limit] });\n return r.rows as any[];\n}\n\n// ===== STATS / SESSIONS =====\nexport async function globalStats() {\n const num = (x: any) => Number(x.rows[0]?.c ?? 0);\n return {\n users: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM users\")),\n projects: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM projects\")),\n running: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM projects WHERE status='running'\")),\n files: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM files\")),\n messages: num(await sqlite.execute(\"SELECT COUNT(*) as c FROM webhook_events\")),\n };\n}\nexport async function createSession(username: string): Promise {\n const token = genCode(\"S\", 32) + Date.now().toString(36);\n const expires = Math.floor(Date.now() / 1000) + 60 * 60 * 24 * 7;\n await sqlite.execute({ sql: \"INSERT INTO panel_sessions (token, username, expires_at) VALUES (?, ?, ?)\", args: [token, username, expires] });\n return token;\n}\nexport async function validateSession(token: string): Promise {\n const now = Math.floor(Date.now() / 1000);\n const r = await sqlite.execute({ sql: \"SELECT 1 FROM panel_sessions WHERE token=? AND expires_at>?\", args: [token, now] });\n return r.rows.length > 0;\n}\nexport async function deleteSession(token: string) {\n await sqlite.execute({ sql: \"DELETE FROM panel_sessions WHERE token=?\", args: [token] });\n}\n",[],[232,248],"f2a9c592-3f24-11f1-bf01-42b51c65c3df",["D",1776956334773],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","ScottHub - Telegram Bot Hosting Platform with webhooks","imageUrl","userId","3060ef0e-1f2c-4c3f-b663-3c9f482009b6","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019dbad4-a3c2-70f4-af59-375ca41cca1b","tursoName","f2a9c5923f2411f1bf0142b51c65c3df","tursoHostname","f2a9c5923f2411f1bf0142b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789508444194],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_311":307},"org",{"_11":12,"_305":-5,"_306":307,"_265":266,"_308":309,"_310":55},"branch",{"_17":72,"_13":16,"_34":42,"_297":255,"_298":-5,"_299":-5,"_300":-5,"_301":-5,"_302":-5,"_303":14,"_304":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":255,"_13":14,"_47":412,"_257":-5,"_258":55,"_259":260,"_261":260,"_262":263,"_264":-5,"_265":266,"_267":-5,"_268":55,"_269":-5,"_270":-5,"_271":49,"_272":273,"_274":275,"_276":277,"_278":413,"_280":-5,"_281":282,"_283":282,"_284":285,"_286":285,"_287":285,"_288":282,"_289":282,"_290":414,"_292":415,"_294":416,"_296":55},[343,346,355,357,362,364,365],"files",[343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365],"counts",{"_334":49,"_335":74,"_336":49,"_32":337,"_338":339},[332],{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":59,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_18":331},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_18":333},[19,36],"pulls","branches","forks",{"_340":49,"_342":49},"connections",{"_340":49,"_341":49},"count","unfilledCount","emptyCount",{"_34":231,"_13":232,"_37":233,"_39":-5,"_41":42,"_43":234,"_45":46,"_47":235,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_77":410,"_18":411},{"_34":247,"_13":248,"_37":249,"_39":233,"_41":42,"_43":250,"_45":46,"_47":251,"_17":49,"_50":51,"_52":252,"_54":55,"_56":-5,"_77":408,"_18":409},{"_34":240,"_13":241,"_37":242,"_39":233,"_41":42,"_43":234,"_45":46,"_47":243,"_17":49,"_50":51,"_52":244,"_54":55,"_56":-5,"_77":406,"_18":407},{"_34":153,"_13":154,"_37":155,"_39":-5,"_41":42,"_43":156,"_45":46,"_47":157,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_77":404,"_18":405},{"_34":224,"_13":225,"_37":226,"_39":155,"_41":42,"_43":156,"_45":46,"_47":227,"_17":49,"_50":51,"_52":228,"_54":55,"_56":-5,"_77":402,"_18":403},{"_34":216,"_13":217,"_37":218,"_39":155,"_41":42,"_43":219,"_45":46,"_47":220,"_17":49,"_50":51,"_52":221,"_54":55,"_56":-5,"_77":400,"_18":401},{"_34":208,"_13":209,"_37":210,"_39":155,"_41":42,"_43":211,"_45":46,"_47":212,"_17":49,"_50":51,"_52":213,"_54":55,"_56":-5,"_77":398,"_18":399},{"_34":200,"_13":201,"_37":202,"_39":155,"_41":42,"_43":203,"_45":46,"_47":204,"_17":49,"_50":51,"_52":205,"_54":55,"_56":-5,"_77":396,"_18":397},{"_34":192,"_13":193,"_37":194,"_39":155,"_41":42,"_43":195,"_45":46,"_47":196,"_17":49,"_50":51,"_52":197,"_54":55,"_56":-5,"_77":394,"_18":395},{"_34":184,"_13":185,"_37":186,"_39":155,"_41":42,"_43":187,"_45":46,"_47":188,"_17":49,"_50":51,"_52":189,"_54":55,"_56":-5,"_77":392,"_18":393},{"_34":176,"_13":177,"_37":178,"_39":155,"_41":42,"_43":179,"_45":46,"_47":180,"_17":49,"_50":51,"_52":181,"_54":55,"_56":-5,"_77":390,"_18":391},{"_34":168,"_13":169,"_37":170,"_39":155,"_41":42,"_43":171,"_45":46,"_47":172,"_17":49,"_50":51,"_52":173,"_54":55,"_56":-5,"_77":388,"_18":389},{"_34":137,"_13":138,"_37":139,"_39":-5,"_41":42,"_43":140,"_45":46,"_47":141,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_77":386,"_18":387},{"_34":145,"_13":146,"_37":147,"_39":139,"_41":42,"_43":140,"_45":46,"_47":148,"_17":49,"_50":149,"_52":150,"_54":55,"_56":-5,"_77":384,"_18":385},{"_34":95,"_13":96,"_37":97,"_39":-5,"_41":42,"_43":98,"_45":46,"_47":99,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_77":382,"_18":383},{"_34":130,"_13":131,"_37":132,"_39":97,"_41":42,"_43":98,"_45":46,"_47":133,"_17":49,"_50":51,"_52":134,"_54":55,"_56":-5,"_77":380,"_18":381},{"_34":122,"_13":123,"_37":124,"_39":97,"_41":42,"_43":125,"_45":46,"_47":126,"_17":49,"_50":51,"_52":127,"_54":55,"_56":-5,"_77":378,"_18":379},{"_34":114,"_13":115,"_37":116,"_39":97,"_41":42,"_43":117,"_45":46,"_47":118,"_17":49,"_50":51,"_52":119,"_54":55,"_56":-5,"_77":376,"_18":377},{"_34":106,"_13":107,"_37":108,"_39":97,"_41":42,"_43":109,"_45":46,"_47":110,"_17":49,"_50":51,"_52":111,"_54":55,"_56":-5,"_77":374,"_18":375},{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":88,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_77":372,"_18":373},{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":92,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_77":370,"_18":371},{"_34":80,"_13":81,"_37":82,"_39":-5,"_41":42,"_43":83,"_45":46,"_47":84,"_17":49,"_50":24,"_52":85,"_54":55,"_56":-5,"_77":368,"_18":369},{"_34":69,"_13":70,"_37":71,"_39":-5,"_41":42,"_43":72,"_45":46,"_47":73,"_17":74,"_50":75,"_52":76,"_54":55,"_56":-5,"_77":366,"_18":367},[],[70],[],[81],[],[19,36],[363],[19],[],[96,107],[],[96,115],[],[96,123],[],[96,131],[358,359,360,361],[96],[],[138,146],[356],[138],[],[154,169],[],[154,177],[],[154,185],[],[154,193],[],[154,201],[],[154,209],[],[154,217],[],[154,225],[347,348,349,350,351,352,353,354],[154],[],[232,241],[],[232,248],[344,345],[232],["D",1776956334773],["D",1789508444194],{"_11":12,"_311":307},{"_11":12,"_305":-5,"_306":307,"_265":266,"_308":309,"_310":55},{"_17":72,"_13":16,"_34":42,"_297":255,"_298":-5,"_299":-5,"_300":-5,"_301":-5,"_302":-5,"_303":14,"_304":12},"ctx",{"_290":-5,"_328":450,"_451":452,"_453":454,"_455":55,"_456":55,"_457":55,"_458":46,"_459":-5,"_460":-7,"_461":-7,"_462":49,"_463":55,"_464":55,"_465":-5,"_466":55,"_467":55,"_468":55,"_469":-5},"ENV",{"_421":422,"_423":424,"_425":16,"_426":427,"_428":429,"_430":431,"_432":433,"_434":435,"_436":437,"_438":439,"_440":441,"_442":443,"_444":445,"_446":447,"_448":449},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]