const SHEET_USERS = 'Users'; const SHEET_STOCK = 'Stock'; const BC_WORKER_URL = 'https://bencheikh-worker.mounirlahgui.workers.dev'; const ADMIN_EMAIL = 'mounirlahgui@gmail.com'; function doGet(e) { const cb = e.parameter.callback; try { const raw = e.parameter.data; if (!raw) return out(cb, {ok:true, msg:'API OK'}); return out(cb, handle(JSON.parse(raw))); } catch(err) { return out(cb, {ok:false, error:err.message}); } } function getOrCreateSheet(ss, name, headers) { let sheet = ss.getSheetByName(name); if (!sheet) { sheet = ss.insertSheet(name); sheet.appendRow(headers); } return sheet; } function handle(d) { const ss = SpreadsheetApp.getActiveSpreadsheet(); const usersSheet = getOrCreateSheet(ss, SHEET_USERS, ['email','hash','tasks','updated','token','created','lastLogin','active']); const rows = usersSheet.getDataRange().getValues(); if (d.action === 'register') { if (rows.slice(1).find(r => r[0] === d.email)) return {ok:false, error:'الإيميل مسجل بالفعل'}; const token = Utilities.getUuid(); const now = new Date().toISOString(); usersSheet.appendRow([d.email, sha(d.pass), '{}', now, token, now, now, true]); return {ok:true, token}; } if (d.action === 'login') { const i = rows.findIndex((r,n) => n>0 && r[0]===d.email); if (i < 1) return {ok:false, error:'الإيميل غير موجود'}; if (rows[i][1] !== sha(d.pass)) return {ok:false, error:'الرقم السري غلط'}; if (d.email !== ADMIN_EMAIL && rows[i][7] === false) return {ok:false, blocked:true}; const token = rows[i][4] || Utilities.getUuid(); const now = new Date().toISOString(); usersSheet.getRange(i+1,5).setValue(token); usersSheet.getRange(i+1,7).setValue(now); return {ok:true, token}; } if (d.action === 'save') { const i = rows.findIndex((r,n) => n>0 && r[0]===d.email && r[4]===d.token); if (i < 1) return {ok:false, error:'غير مصرح'}; usersSheet.getRange(i+1,3).setValue(JSON.stringify(d.tasks)); usersSheet.getRange(i+1,4).setValue(new Date().toISOString()); return {ok:true}; } if (d.action === 'load') { const i = rows.findIndex((r,n) => n>0 && r[0]===d.email && r[4]===d.token); if (i < 1) return {ok:true, tasks:'{}'}; return {ok:true, tasks: rows[i][2] || '{}'}; } if (d.action === 'saveStock') { const stockSheet = getOrCreateSheet(ss, SHEET_STOCK, ['email','stock','updated']); const srows = stockSheet.getDataRange().getValues(); const si = srows.findIndex((r,n) => n>0 && r[0]===d.email); const now = new Date().toISOString(); if (si >= 1) { stockSheet.getRange(si+1,2).setValue(JSON.stringify(d.stock||[])); stockSheet.getRange(si+1,3).setValue(now); } else { stockSheet.appendRow([d.email, JSON.stringify(d.stock||[]), now]); } return {ok:true}; } if (d.action === 'loadStock') { const stockSheet = getOrCreateSheet(ss, SHEET_STOCK, ['email','stock','updated']); const srows = stockSheet.getDataRange().getValues(); const si = srows.findIndex((r,n) => n>0 && r[0]===d.email); if (si < 1) return {ok:true, stock:[]}; try { return {ok:true, stock: JSON.parse(srows[si][1]||'[]')}; } catch(e) { return {ok:true, stock:[]}; } } if (d.action === 'listUsers') { if (d.email !== ADMIN_EMAIL) return {ok:false, error:'غير مصرح'}; const list = rows.slice(1).map(r => ({ email: r[0], created: r[5]||'', lastLogin: r[6]||r[3]||'', active: r[7] !== false })); return {ok:true, users: list}; } if (d.action === 'toggleUser') { if (d.email !== ADMIN_EMAIL) return {ok:false, error:'غير مصرح'}; const i = rows.findIndex((r,n) => n>0 && r[0]===d.target); if (i < 1) return {ok:false, error:'المستخدم غير موجود'}; const newActive = !(rows[i][7] !== false); usersSheet.getRange(i+1,8).setValue(newActive); return {ok:true, active: newActive}; } if (d.action === 'ping') return {ok:true, msg:'pong'}; return {ok:false, error:'unknown action'}; } function sha(s) { return Utilities.computeDigest(Utilities.DigestAlgorithm.SHA_256, s, Utilities.Charset.UTF_8) .map(b => ('0'+(b&0xFF).toString(16)).slice(-2)).join(''); } function out(cb, obj) { const text = cb ? cb+'('+JSON.stringify(obj)+')' : JSON.stringify(obj); const mime = cb ? ContentService.MimeType.JAVASCRIPT : ContentService.MimeType.JSON; return ContentService.createTextOutput(text).setMimeType(mime); }