]/g, function(c){ return {'&':'&','<':'<','>':'>','"':'"'}[c]; }); } function computeEffective(rt){ rt = rt || {}; var st = SEV[rt.status] !== undefined ? rt.status : 'active', reason = null; var b = rt.billing; if(st !== 'active' && rt.statusReason === 'payment') reason = 'payment'; // v7.4.0.101: suspended by the Main system for an unpaid bill if(st === 'active' && b && !b.exempt){ if(b.suspended){ st = 'suspended'; reason = 'payment'; } else if(b.baselineDate){ var due = new Date(b.baselineDate + 'T00:00:00').getTime(); var grace = (typeof b.graceDays === 'number') ? b.graceDays : 7; if(!isNaN(due) && Date.now() > due + (grace + 1) * 86400000){ st = 'suspended'; reason = 'payment'; } } } return {status:st, reason:reason, message: rt.statusMessage || ''}; } var CACHE_KEY = 'nx_status_cache'; function readCache(){ try{ var v = W.localStorage.getItem(CACHE_KEY); return v ? JSON.parse(v) : null; }catch(e){ return null; } } function writeCache(o){ try{ W.localStorage.setItem(CACHE_KEY, JSON.stringify(o)); }catch(e){} } var centralEff = computeEffective(R); function apply(){ var eff = centralEff; if(state.ownDb && SEV[state.ownDb] !== undefined && state.ownDbAt > state.centralAt){ // v7.4.0.101: the website's OWN database can make the status stricter, but it can never lift a suspension for // an unpaid bill (the store owner can write settings/centralStatus there) — only the central billing can. if(!(centralEff.reason === 'payment' && SEV[state.ownDb] < SEV[centralEff.status])) eff = {status: state.ownDb, reason: null, message: centralEff.message}; } var changed = eff.status !== state.status || eff.reason !== state.reason; state.status = eff.status; state.reason = eff.reason; state.message = eff.message; writeCache({status:eff.status, reason:eff.reason, message:eff.message, at:Date.now()}); renderOverlay(); try{ upRenderBtn(); }catch(e){} if(changed){ for(var i = 0; i < subs.length; i++){ try{ subs[i](api.getStatus()); }catch(e){} } } // v7.4.0.101 — billing subscribers: called when the bill or the effective status changed try{ var bs = JSON.stringify(billCopy()); if(bs !== lastBillSig){ lastBillSig = bs; for(var j = 0; j < billSubs.length; j++){ try{ billSubs[j](billCopy()); }catch(e){} } } }catch(e){} } /* v7.4.0.101 — the bill of THIS website for templates (read-only; the Main system is the only source of truth). dueDate = the day the payment must be made (a Manual Start/Run moves it); nextPaymentDate = the real due date; payOpenDays = Billing Settings → warning days; amount = ONE cycle; amountDue = all unpaid cycles until today; daysLeft = days until dueDate (negative = late); status / reason = the effective website status. */ var billSubs = [], lastBillSig = ''; function billDay(s){ var m = /^(\d{4})-(\d{2})-(\d{2})/.exec(String(s || '')); return m ? Date.UTC(+m[1], +m[2] - 1, +m[3]) : NaN; } function billToday(){ var d = new Date(); return Date.UTC(d.getFullYear(), d.getMonth(), d.getDate()); } function billAddCycles(base, cycle, n, anchor){ var m = /^(\d{4})-(\d{2})-(\d{2})/.exec(String(base || '')); if(!m) return NaN; var months = cycle === 'yearly' ? 12 : 1, day = (anchor >= 1 && anchor <= 31) ? anchor : +m[3]; var t = (+m[2] - 1) + months * n, ny = +m[1] + Math.floor(t / 12), nm = ((t % 12) + 12) % 12; var last = new Date(Date.UTC(ny, nm + 1, 0)).getUTCDate(); return Date.UTC(ny, nm, Math.min(day, last)); } function billCopy(){ var b = (R.billing && typeof R.billing === 'object') ? R.billing : {}; var due = b.baselineDate || b.nextPaymentDate || '', real = b.nextPaymentDate || ''; var today = billToday(), dd = billDay(due), rd = billDay(real); var amount = Number(b.amount); amount = isFinite(amount) && amount > 0 ? Math.round(amount * 100) / 100 : 0; var unpaid = 1; if(!isNaN(rd) && rd < today){ var k = 1; while(k < 240 && billAddCycles(real, b.cycle, k, Number(b.anchorDay) || 0) < today) k++; unpaid = k; } var openDays = (typeof b.warnDays === 'number') ? b.warnDays : 3; return { dueDate: due ? String(due).slice(0, 10) : '', nextPaymentDate: real ? String(real).slice(0, 10) : '', daysLeft: isNaN(dd) ? null : Math.round((dd - today) / 86400000), payOpenDays: openDays, warnDays: openDays, graceDays: (typeof b.graceDays === 'number') ? b.graceDays : 0, amount: amount, amountDue: Math.round(amount * unpaid * 100) / 100, unpaidCycles: unpaid, currency: String(b.currency || 'BDT'), cycle: b.cycle === 'yearly' ? 'yearly' : 'monthly', exempt: !!b.exempt, suspended: state.status === 'suspended' && state.reason === 'payment', status: state.status, reason: state.reason, mainSiteUrl: String(R.mainSiteUrl || ''), known: !!(R.billing && typeof R.billing === 'object') }; } var centralReqSeq = 0, centralSeqApplied = 0; function fetchCentralRec(){ var base = R.central && R.central.databaseURL; if(!base || !W.fetch || !R.siteUid) return Promise.resolve(null); var url = String(base).replace(/\/+$/, '') + '/siteRuntime/' + encodeURIComponent(UID) + '.json'; // v7.4.0.102 — reads can overlap (poll + live listeners + refreshBilling): a slower, OLDER answer must never // overwrite a newer one (it could bring back "suspended" for a moment right after a payment). var seq = ++centralReqSeq; return W.fetch(url, {cache:'no-store'}).then(function(r){ if(!r.ok) throw new Error('HTTP ' + r.status); return r.json(); }) .then(function(rec){ if(!rec) return null; if(seq < centralSeqApplied) return rec; centralSeqApplied = seq; var rt = {status: rec.status, statusMessage: rec.statusMessage, statusReason: rec.statusReason, billing: rec.billing}; centralEff = computeEffective(rt); state.centralAt = Number(rec.statusUpdatedAt || rec.updatedAt || Date.now()); // v7.4.0.101 — live bill for NexusSite.getBilling() / onBilling() try{ if(rec.billing && typeof rec.billing === 'object') R.billing = rec.billing; if(rec.runtime && typeof rec.runtime.mainSiteUrl === 'string' && rec.runtime.mainSiteUrl) R.mainSiteUrl = rec.runtime.mainSiteUrl; }catch(e){} if(rec.runtime){ // Only ever THIS website's record (siteRuntime/{its own siteUid}). R.adminEmailHashes = rec.runtime.adminEmailHashes || []; // live list (an empty list is dropped by Firebase → no baked-in fallback) R.adminPwPolicy = rec.runtime.adminPwPolicy || {}; if(rec.runtime.handoffPubs) R.handoffPubs = rec.runtime.handoffPubs; watchConfig(rec.runtime.firebaseConfig); setFeatures(rec.runtime); // v7.4.0.93: features / upgradeTier / showUpgradeButton / mail } apply(); return rec; }).catch(function(){ return null; }); } function fetchCentral(){ fetchCentralRec(); } /* Live pickup of a changed Firebase connection (Customer page): when the Super Admin publishes a new runtime configuration, the page re-loads itself at a quiet moment (hidden tab or 90 s without interaction) — once per change. */ var bootCfgSig = JSON.stringify(cleanCfg(R.firebaseConfig)), lastTouch = Date.now(), reloadWanted = false; ['pointerdown', 'keydown', 'touchstart', 'scroll'].forEach(function(ev){ try{ W.addEventListener(ev, function(){ lastTouch = Date.now(); }, {passive:true, capture:true}); }catch(e){} }); function doConfigReload(){ try{ var k = 'nx_cfg_reload', sig = JSON.stringify(cleanCfg(R.nextConfig)); if(W.sessionStorage.getItem(k) === sig) return; W.sessionStorage.setItem(k, sig); W.location.reload(); }catch(e){} } function watchConfig(c){ if(!c || !c.apiKey || !/^https:\/\//.test(String(c.databaseURL || ''))) return; var sig = JSON.stringify(cleanCfg(c)); if(sig === bootCfgSig) return; R.nextConfig = c; try{ W.localStorage.setItem('nx_rt_conn', JSON.stringify({cfg: cleanCfg(c), at: Date.now()})); }catch(e){} if(!reloadWanted){ reloadWanted = true; D.addEventListener('visibilitychange', function(){ if(D.hidden) doConfigReload(); }); setInterval(function(){ if(Date.now() - lastTouch > 8000) doConfigReload(); }, 4000); } } /* ONE Firebase connection per website: the Customer page and the Admin page both use the website's own database through the template's default app (the runtime configuration). A change made on the Admin page therefore shows live on the Customer page. (Browser storage stays separate per page role.) */ var ownApp = null, ownTries = 0; function getOwnApp(){ if(ownApp) return ownApp; try{ var fb = W.firebase; if(!fb || typeof fb.initializeApp !== 'function' || !R.firebaseConfig || !R.firebaseConfig.apiKey) return null; try{ ownApp = fb.app(); }catch(e){ ownApp = (ownTries >= 10) ? fb.initializeApp(R.firebaseConfig) : null; } }catch(e){ ownApp = null; } return ownApp; } var liveTimer = null; function softNotice(on){ if(ROLE !== 'public') return; var el = D.getElementById('nx-live-note'); if(!on){ if(el && el.parentNode) el.parentNode.removeChild(el); return; } if(el) return; el = D.createElement('div'); el.id = 'nx-live-note'; el.setAttribute('style', 'position:fixed;left:50%;bottom:14px;transform:translateX(-50%);z-index:2147483640;background:rgba(20,26,34,.92);color:#E7ECF2;border-radius:20px;padding:7px 14px;font:12.5px/1.4 system-ui,sans-serif;max-width:92vw;text-align:center;pointer-events:none;'); el.textContent = LANGPREF === 'bn' ? 'এই মুহূর্তে লাইভ আপডেট নেই' : (LANGPREF === 'en' ? 'Live updates are unavailable right now' : 'Live updates are unavailable right now · এই মুহূর্তে লাইভ আপডেট নেই'); (D.body || D.documentElement).appendChild(el); } function noteLive(ok){ if(ROLE !== 'public') return; if(ok){ if(liveTimer){ clearTimeout(liveTimer); liveTimer = null; } softNotice(false); return; } if(!liveTimer) liveTimer = setTimeout(function(){ liveTimer = null; softNotice(true); }, 12000); } function startOwnDbStatus(){ try{ var app = getOwnApp(); if(!app || typeof app.database !== 'function'){ if(++ownTries < 24) setTimeout(startOwnDbStatus, 500); return; } var db = app.database(); db.ref('settings/centralStatus').on('value', function(s){ state.ownDb = s.val(); apply(); }, function(){ noteLive(false); }); db.ref('settings/centralStatusUpdatedAt').on('value', function(s){ state.ownDbAt = Number(s.val() || 0); apply(); fetchCentral(); }, function(){ noteLive(false); }); db.ref('.info/connected').on('value', function(s){ noteLive(!!s.val()); }, function(){}); }catch(e){} } function msgLines(key){ var t = TXT[key]; if(!t) return ''; var out = ''; if(LANGPREF !== 'bn') out += '

' + esc(t.en[0]) + '

' + esc(t.en[1]) + '

'; if(LANGPREF !== 'en') out += '

' + esc(t.bn[0]) + '

' + esc(t.bn[1]) + '

'; if(state.reason === 'payment') out += '

' + esc(LANGPREF === 'bn' ? PAYTXT.bn : (LANGPREF === 'en' ? PAYTXT.en : PAYTXT.en + ' · ' + PAYTXT.bn)) + '

'; if(state.message) out += '

' + esc(state.message) + '

'; return out; } function renderOverlay(){ var id = ROLE === 'admin' ? 'nx-status-banner' : 'nx-status-overlay'; var el = D.getElementById(id); if(state.status === 'active'){ if(el && el.parentNode) el.parentNode.removeChild(el); if(ROLE !== 'admin') D.documentElement.style.overflow = ''; return; } if(!el){ el = D.createElement('div'); el.id = id; D.documentElement.appendChild(el); } if(ROLE === 'admin'){ el.setAttribute('style', 'position:fixed;left:0;right:0;top:0;z-index:2147483646;background:#B42318;color:#fff;font:600 13px/1.4 system-ui,sans-serif;padding:8px 14px;text-align:center;'); el.textContent = 'Website status: ' + state.status.toUpperCase() + (state.reason === 'payment' ? ' (payment overdue)' : '') + ' — visitors currently see a "' + state.status + '" page. / ভিজিটররা বর্তমানে "' + state.status + '" পেজ দেখছে।'; return; } el.setAttribute('style', 'position:fixed;inset:0;z-index:2147483647;display:flex;align-items:center;justify-content:center;padding:24px;background:rgba(10,14,19,.96);color:#fff;font-family:system-ui,-apple-system,Segoe UI,sans-serif;text-align:center;'); el.innerHTML = '' + '

' + ({suspended:'⛔', disabled:'🚫', maintenance:'🛠️', pending:'⏳'}[state.status] || '⛔') + '

' + '

' + esc(R.siteName || '') + '

' + msgLines(state.status) + '

'; D.documentElement.style.overflow = 'hidden'; } /* ---- 4. Admin gate (nxCred sign-in or a verified one-time Main Owner hand-off; website-specific) ---- */ var GATE_ID = 'nx-admin-gate', gateStarted = false, gateApp = null, statsTimer = null; // Opened from the Nexus Customer Dashboard → the customer's Gmail arrives in // the URL fragment (#nx-admin-email=…) so the sign-in form is pre-filled. var HINT_EMAIL = ''; try{ var hm = /[#&]nx-admin-email=([^&]+)/.exec(String(W.location.hash || '')); if(hm) HINT_EMAIL = decodeURIComponent(hm[1]).trim(); if(!HINT_EMAIL && W.NEXUS_ADMIN_HINT && W.NEXUS_ADMIN_HINT.email) HINT_EMAIL = String(W.NEXUS_ADMIN_HINT.email).trim(); if(!HINT_EMAIL && W.NEXUS_ADMIN_HANDOFF && W.NEXUS_ADMIN_HANDOFF.mainOwner && W.NEXUS_ADMIN_HANDOFF.email) HINT_EMAIL = String(W.NEXUS_ADMIN_HANDOFF.email).trim(); if(hm && W.history && W.history.replaceState){ try{ W.history.replaceState(null, '', String(W.location.href).split('#')[0]); }catch(e2){} } }catch(e){} function loadScript(src){ return new Promise(function(res, rej){ if(/firebase-auth/i.test(String(src))){ res(); return; } // never loaded: sign-in is nxCred only (see NX_AUTH_FACTORY) var s = D.createElement('script'); s.src = src; s.async = false; s.onload = function(){ res(); }; s.onerror = function(){ rej(new Error('Could not load ' + src)); }; (D.head || D.documentElement).appendChild(s); }); } function onReady(fn){ if(D.readyState === 'loading') D.addEventListener('DOMContentLoaded', fn); else fn(); } function lockPage(){ var s = D.createElement('style'); s.id = 'nx-gate-style'; s.textContent = 'html.nx-locked body>*:not(#' + GATE_ID + '){display:none!important}html.nx-locked body{overflow:hidden!important}'; (D.head || D.documentElement).appendChild(s); D.documentElement.classList.add('nx-locked'); } function waitDefaultApp(ms){ return new Promise(function(res){ var t0 = Date.now(); (function poll(){ if(state.app) return res(state.app); try{ if(W.firebase && W.firebase.apps){ for(var i = 0; i < W.firebase.apps.length; i++){ if(W.firebase.apps[i].name === '[DEFAULT]'){ onDefaultApp(W.firebase.apps[i]); return res(W.firebase.apps[i]); } } } }catch(e){} if(Date.now() - t0 > ms) return res(null); setTimeout(poll, 150); })(); }); } function ensureSdk(){ var p = Promise.resolve(); if(!W.firebase || typeof W.firebase.initializeApp !== 'function'){ p = loadScript('https://www.gstatic.com/firebasejs/10.12.2/firebase-app-compat.js'); } return p.then(function(){ var b = 'https://www.gstatic.com/firebasejs/' + (W.firebase.SDK_VERSION || '10.12.2') + '/', q = []; if(!W.firebase.database) q.push(loadScript(b + 'firebase-database-compat.js')); return Promise.all(q); }); } var GT = { title:'Website Admin Sign In · অ্যাডমিন লগইন', sub:'Only the Main Owner or this website\'s admin (e-mail + password controlled by Nexus) can open this panel. · শুধু মেইন ওনার বা এই ওয়েবসাইটের অ্যাডমিন (Nexus-নিয়ন্ত্রিত ইমেইল + পাসওয়ার্ড) প্রবেশ করতে পারবে।', email:'Email · ইমেইল', pass:'Password · পাসওয়ার্ড', signin:'Sign in · লগইন', forgot:'Forgot password? Open the Main Website → "Already submitted a request?" → "Forgot password" · পাসওয়ার্ড ভুলে গেছেন? মেইন ওয়েবসাইট → "ইতিমধ্যে অনুরোধ জমা দিয়েছেন?" → "পাসওয়ার্ড ভুলে গেছি"', loading:'Loading secure sign-in… · নিরাপদ লগইন লোড হচ্ছে…', checking:'Verifying admin access… · অ্যাডমিন অ্যাক্সেস যাচাই হচ্ছে…', notAdmin:'This account is not an admin of this website. · এই অ্যাকাউন্টটি এই ওয়েবসাইটের অ্যাডমিন নয়।', resetSent:'Go to the Main Website → Customer Login → "Already Submitted a Request", enter your Gmail and Tracking ID, and get a new password. · Main Website-এর Customer Login থেকে Already Submitted a Request-এ গিয়ে Gmail ও Tracking ID দিয়ে নতুন পাসওয়ার্ড নিন।', needEmail:'Enter your email first. · আগে আপনার ইমেইল লিখুন।', signout:'Sign out · লগআউট', customer:'You came from your Nexus Customer Dashboard — this is the admin panel of the website you bought. Enter your admin password to continue. · আপনি Nexus কাস্টমার ড্যাশবোর্ড থেকে এসেছেন — এটি আপনার কেনা ওয়েবসাইটের অ্যাডমিন প্যানেল। চালিয়ে যেতে অ্যাডমিন পাসওয়ার্ড দিন।', firstTime:'Forgot password? See how to get a new one · পাসওয়ার্ড ভুলে গেছেন? নতুন পাসওয়ার্ড নেওয়ার নিয়ম দেখুন', ownerFail:'The password-free Owner Login could not be verified (expired, already used, or not issued). Close this tab and press "Owner Login" again in Super Admin → Admin Pages. · পাসওয়ার্ড-ছাড়া Owner Login যাচাই হয়নি (মেয়াদ শেষ / আগেই ব্যবহৃত / ইস্যু হয়নি)। এই ট্যাব বন্ধ করে Super Admin → Admin Pages থেকে আবার "Owner Login" চাপুন।', mustChange:'You signed in with a temporary password. Set your own new password to continue — the temporary password stops working after this. · আপনি অস্থায়ী পাসওয়ার্ড দিয়ে লগইন করেছেন। চালিয়ে যেতে নিজের নতুন পাসওয়ার্ড সেট করুন — এরপর অস্থায়ী পাসওয়ার্ড আর কাজ করবে না।', newPass:'New password (min 8, letters + numbers) · নতুন পাসওয়ার্ড (কমপক্ষে ৮, অক্ষর + সংখ্যা)', newPass2:'Confirm new password · নতুন পাসওয়ার্ড নিশ্চিত করুন', setPass:'Save new password · নতুন পাসওয়ার্ড সেভ করুন', weak:'Use at least 8 characters with letters and numbers. · অক্ষর ও সংখ্যাসহ কমপক্ষে ৮ অক্ষর দিন।', mismatch:'The two passwords do not match. · দুটি পাসওয়ার্ড মেলেনি।', sameAsTemp:'Choose a password different from the temporary one. · অস্থায়ী পাসওয়ার্ড থেকে আলাদা পাসওয়ার্ড দিন।', reLogin:'For security, sign in again with your temporary password, then set the new one. · নিরাপত্তার জন্য অস্থায়ী পাসওয়ার্ড দিয়ে আবার লগইন করে নতুন পাসওয়ার্ড দিন।', viaDashboard:'This Admin panel is private. Open it from the Main Website: Customer Login → Admin Page. · এই অ্যাডমিন প্যানেল প্রাইভেট। মেইন ওয়েবসাইট থেকে খুলুন: কাস্টমার লগইন → Admin Page।', loggedOut:'You logged out of the Customer Dashboard — this Admin session has been closed. · আপনি কাস্টমার ড্যাশবোর্ড থেকে লগআউট করেছেন — এই অ্যাডমিন সেশন বন্ধ করা হয়েছে।', blocked:'This website is currently suspended / disabled — Admin access is not available. Please contact support. · এই ওয়েবসাইট বর্তমানে সাসপেন্ড / নিষ্ক্রিয় — অ্যাডমিন অ্যাক্সেস বন্ধ। সাপোর্টে যোগাযোগ করুন।', }; var lastTypedPw = ''; function authErr(e){ var c = (e && e.code) || ''; if(/invalid-credential|wrong-password|user-not-found|invalid-login/.test(c)) return 'Incorrect email or password. · ইমেইল বা পাসওয়ার্ড ভুল।'; if(/too-many-requests/.test(c)) return 'Too many attempts — try again later. · অনেকবার চেষ্টা হয়েছে — পরে আবার চেষ্টা করুন।'; if(/network-request-failed/.test(c)) return 'Network error — check your internet connection. · নেটওয়ার্ক সমস্যা।'; if(/operation-not-allowed/.test(c)) return ((e && e.message) || 'Database rules blocked this request.') + ' · ডাটাবেস rules আটকেছে — Nexus rules পাবলিশ করুন।'; if(/invalid-email/.test(c)) return 'Invalid email address. · ইমেইল ঠিকানা সঠিক নয়।'; return (e && e.message) || String(e); } function gateEl(){ var el = D.getElementById(GATE_ID); if(!el){ el = D.createElement('div'); el.id = GATE_ID; (D.body || D.documentElement).appendChild(el); } return el; } /* ---- v7.4.0.115 (engine e12): the LOOK of the sign-in pages only — the website's monogram, two columns on a wide screen, a show / hide button on EVERY password field, a Caps Lock warning, a strength + match meter on a new password, a busy button and a short shake on a wrong password. Every id, handler, rule and message of the sign-in (nxCred, hand-off, temporary password, blocked / logged-out) is exactly as before. Inline CSS + SVG only. ---- */ var GX = { show:'Show password · পাসওয়ার্ড দেখান', hide:'Hide password · পাসওয়ার্ড লুকান', caps:'Caps Lock is on · Caps Lock চালু আছে', aside:'This panel is only for the admin of this website. · এই প্যানেল শুধু এই ওয়েবসাইটের অ্যাডমিনের জন্য।', secure:'Protected sign-in · সুরক্ষিত লগইন', fromDash:'You came from your Customer Dashboard · আপনি কাস্টমার ড্যাশবোর্ড থেকে এসেছেন', first:'First sign-in — choose your own password · প্রথমবার লগইন — নিজের পাসওয়ার্ড দিন', lv:['Weak · দুর্বল', 'Medium · মাঝারি', 'Strong · শক্ত'], r8:'8+ characters · কমপক্ষে ৮ অক্ষর', rA:'Letters · অক্ষর', r1:'Numbers · সংখ্যা', same:'Both match ✓ · দুটো মিলেছে ✓', diff:'Not the same yet · এখনো মেলেনি', busy:'Checking… · যাচাই হচ্ছে…', next:'What to do next · পরের ধাপ' }; var GSVG = function(p, w){ return ''; }; var GI = { eye: GSVG(''), eyeOff: GSVG(''), shield: GSVG('', 22), key: GSVG('', 22), info: GSVG('', 22), alert: GSVG('', 22), lock: GSVG('', 14) }; function gMono(){ var n = String(R.siteName || '').trim(), p = n.split(/\s+/).filter(Boolean); var s = p.length > 1 ? p[0].charAt(0) + p[1].charAt(0) : n.slice(0, 2); return (s || 'A').toUpperCase(); } function gCss(){ var G = '#' + GATE_ID; return ''; } // the page around the card: the website's monogram + name (+ id, a short note and "protected sign-in" on a wide screen) function gShell(inner){ return gCss() + '

' + inner + '

'; } // one password field: input + a real show / hide button + the Caps Lock line function gPw(id, ac, label){ return '' + esc(label) + '

' + '

' + ''; } function gEye(btn, show){ var inp = D.getElementById(btn.getAttribute('data-eye')); if(!inp) return; var a = null, b = null; try{ a = inp.selectionStart; b = inp.selectionEnd; }catch(x){} inp.type = show ? 'text' : 'password'; var lb = show ? GX.hide : GX.show; btn.setAttribute('aria-pressed', show ? 'true' : 'false'); btn.setAttribute('aria-label', lb); btn.title = lb; btn.innerHTML = show ? GI.eyeOff : GI.eye; // the browser resets the cursor when the type changes (also a moment later) — put it back now and on the next frame var keep = function(){ try{ if(a !== null && D.activeElement === inp) inp.setSelectionRange(a, b); }catch(x){} }; keep(); if(W.requestAnimationFrame) W.requestAnimationFrame(keep); else setTimeout(keep, 16); } // every password back to hidden (submit, wrong password, another screen, page hidden) function gHideAll(){ var el = D.getElementById(GATE_ID); if(!el) return; var bs = el.querySelectorAll('.pw .eye'); for(var i = 0; i < bs.length; i++) if(bs[i].getAttribute('aria-pressed') === 'true') gEye(bs[i], false); } var gVisWired = false; function gWire(){ var el = D.getElementById(GATE_ID); if(!el) return; var bs = el.querySelectorAll('.pw .eye'); for(var i = 0; i < bs.length; i++) (function(btn){ btn.addEventListener('mousedown', function(ev){ ev.preventDefault(); }); // a click keeps the focus (and the cursor) in the field btn.addEventListener('click', function(){ var inp = D.getElementById(btn.getAttribute('data-eye')); gEye(btn, !!inp && inp.type === 'password'); }); })(bs[i]); var ins = el.querySelectorAll('.pw input'); for(var j = 0; j < ins.length; j++) (function(inp){ var cap = el.querySelector('[data-cap="' + inp.id + '"]'); var ck = function(ev){ if(cap && ev && typeof ev.getModifierState === 'function') cap.hidden = !ev.getModifierState('CapsLock'); }; inp.addEventListener('keydown', ck); inp.addEventListener('keyup', ck); inp.addEventListener('blur', function(){ if(cap) cap.hidden = true; }); })(ins[j]); if(!gVisWired){ gVisWired = true; D.addEventListener('visibilitychange', function(){ if(D.hidden) gHideAll(); }); } } function gBusy(btn, on, label){ if(!btn) return; btn.disabled = !!on; btn.innerHTML = on ? '' + esc(GX.busy) + '' : esc(label); } function gShake(){ var f = D.querySelector('#' + GATE_ID + ' .g'); if(!f) return; f.classList.remove('sh'); void f.offsetWidth; f.classList.add('sh'); setTimeout(function(){ f.classList.remove('sh'); }, 450); } // new password: strength (the same rule as before: 8+, letters + numbers) + "both match" function gMeter(){ var a = D.getElementById('nxgNew'), b = D.getElementById('nxgNew2'), m = D.getElementById('nxgMeter'), ml = D.getElementById('nxgMeterL'), mt = D.getElementById('nxgMatch'); if(!a || !m) return; var upd = function(){ var v = a.value, r = {len: v.length >= 8, abc: /[A-Za-z]/.test(v), num: /[0-9]/.test(v)}; var ok = r.len && r.abc && r.num, extra = (v.length >= 12 ? 1 : 0) + (/[^A-Za-z0-9]/.test(v) ? 1 : 0); var lv = !v ? -1 : (!ok ? 0 : (extra >= 2 ? 2 : 1)); m.setAttribute('data-lv', String(lv)); if(ml) ml.textContent = lv < 0 ? '' : GX.lv[lv]; var li = D.querySelectorAll('#' + GATE_ID + ' .ck li'); for(var i = 0; i < li.length; i++) li[i].className = r[li[i].getAttribute('data-r')] ? 'ok' : ''; if(b && mt){ if(!b.value){ mt.textContent = ''; mt.className = 'mt'; } else if(a.value === b.value){ mt.textContent = GX.same; mt.className = 'mt ok'; } else { mt.textContent = GX.diff; mt.className = 'mt no'; } } }; a.addEventListener('input', upd); if(b) b.addEventListener('input', upd); upd(); } function renderGate(mode, msg, cu, cdb){ var el = gateEl(); el.setAttribute('style', 'position:fixed;inset:0;z-index:2147483645;display:flex;'); var head = '

' + esc(R.siteName || '') + ' · ' + esc(R.siteId || '') + '

' + esc(GT.title) + '

'; if(mode === 'loading' || mode === 'checking'){ el.innerHTML = gShell('

' + head + '

' + esc(mode === 'loading' ? GT.loading : GT.checking) + '

'); return; } if(mode === 'error'){ // a website notice (blocked / logged out / open via the dashboard) is a calm amber card, not a red error var note = msg === GT.blocked || msg === GT.loggedOut || msg === GT.viaDashboard; el.innerHTML = gShell('

' + (note ? GI.info : GI.alert) + '

' + head + (note ? '

' + esc(GX.next) + '

' : '') + '

' + esc(msg || '') + '

'); D.getElementById('nxgRetry').onclick = function(){ location.reload(); }; return; } if(mode === 'change'){ el.innerHTML = gShell(''); gWire(); gMeter(); var cerr = D.getElementById('nxgErr'); try{ D.getElementById('nxgNew').focus(); }catch(e){} D.getElementById('nxgOut').onclick = function(){ lastTypedPw = ''; gateApp.auth().signOut(); }; D.getElementById('nxgChange').onsubmit = function(ev){ ev.preventDefault(); gHideAll(); var a = D.getElementById('nxgNew').value, b = D.getElementById('nxgNew2').value, btn = D.getElementById('nxgBtn'); cerr.style.color = ''; cerr.textContent = ''; if(a.length < 8 || !/[A-Za-z]/.test(a) || !/[0-9]/.test(a)){ cerr.textContent = GT.weak; gShake(); return; } if(a !== b){ cerr.textContent = GT.mismatch; gShake(); return; } if(lastTypedPw && a === lastTypedPw){ cerr.textContent = GT.sameAsTemp; gShake(); return; } gBusy(btn, true); cu.updatePassword(a).then(function(){ lastTypedPw = ''; clearMustChange(cu, cdb); unlock(cu); }, function(e){ gBusy(btn, false, GT.setPass); if(/requires-recent-login/.test((e && e.code) || '')){ gateApp.auth().signOut().then(function(){ renderGate('login', GT.reLogin); }); return; } cerr.textContent = /weak-password/.test((e && e.code) || '') ? GT.weak : authErr(e); // v7.4.0.120: an account whose password lock nobody knows (set before the lock existed) cannot replace the // temporary password here — say so and let the admin continue; a new temporary password from the Super // Admin gives the account a lock that follows it. if(/credential-locked/.test((e && e.code) || '') && !D.getElementById('nxgGoOn')){ var go = D.createElement('button'); go.type = 'button'; go.className = 'l'; go.id = 'nxgGoOn'; go.textContent = 'Continue without changing · না বদলে চালিয়ে যান'; go.onclick = function(){ lastTypedPw = ''; unlock(cu); }; btn.parentNode.insertBefore(go, btn.nextSibling); } gShake(); }); }; return; } el.innerHTML = gShell(''); gWire(); var err = D.getElementById('nxgErr'); try{ if(HINT_EMAIL) D.getElementById('nxgPass').focus(); }catch(e){} D.getElementById('nxgForm').onsubmit = function(ev){ ev.preventDefault(); gHideAll(); var em = D.getElementById('nxgEmail').value.trim(), pw = D.getElementById('nxgPass').value; var btn = D.getElementById('nxgBtn'); gBusy(btn, true); err.textContent = ''; lastTypedPw = pw; gateApp.auth().signInWithEmailAndPassword(em, pw).catch(function(e){ gBusy(btn, false, GT.signin); err.textContent = authErr(e); gShake(); try{ D.getElementById('nxgPass').focus(); }catch(x){} }); }; D.getElementById('nxgForgot').onclick = function(){ err.style.color = 'var(--ok)'; err.textContent = GT.resetSent; var mu = String(R.mainSiteUrl || ''); if(/^https?:\/\//i.test(mu)){ var a = D.createElement('a'); a.href = mu; a.target = '_blank'; a.rel = 'noopener'; a.textContent = ' ' + mu.replace(/^https?:\/\//i, ''); a.style.cssText = 'color:var(--ok);text-decoration:underline;word-break:break-all;'; err.appendChild(a); } }; if(ownerFailed && !msg){ err.textContent = GT.ownerFail; } } function hashEmail(email){ try{ if(!W.crypto || !W.crypto.subtle || !W.TextEncoder) return Promise.resolve(''); return W.crypto.subtle.digest('SHA-256', new TextEncoder().encode(String(email || '').trim().toLowerCase())).then(function(buf){ return Array.prototype.map.call(new Uint8Array(buf), function(b){ return ('0' + b.toString(16)).slice(-2); }).join(''); }); }catch(e){ return Promise.resolve(''); } } function verifyAdmin(u){ renderGate('checking'); var db = null; try{ db = gateApp.database(); }catch(e){} var viaDb = !db ? Promise.resolve({r:'nodb'}) : new Promise(function(res){ var done = false, fin = function(v){ if(!done){ done = true; res(v); } }; db.ref('nexusAdmins/' + u.uid).once('value').then(function(s){ fin(s.exists() ? {r:'yes', entry: s.val() || {}} : {r:'no'}); }, function(){ fin({r:'denied'}); }); setTimeout(function(){ fin({r:'timeout'}); }, 8000); }); Promise.all([viaDb, hashEmail(u.email), fetchCentralRec()]).then(function(v){ var r = v[0], h = v[1]; if(state.status === 'suspended' || state.status === 'disabled'){ return gateApp.auth().signOut().then(function(){ renderGate('error', GT.blocked); }); } // The Main Owner entered through a verified, single-use hand-off (no password, no temporary-password policy). if(ownerEntry && W.NxAuth && W.NxAuth.norm(u.email) === ownerEntry){ lastTypedPw = ''; return unlock(u); } if(r.r === 'yes'){ state.adminEntryUid = u.uid; return checkPasswordPolicy(u, r.entry, h, db); } var list = R.adminEmailHashes || []; if(h && list.indexOf(h) !== -1) return checkPasswordPolicy(u, null, h, db); return gateApp.auth().signOut().then(function(){ renderGate('login', GT.notAdmin); }); }); } /* ---- temporary password policy (first sign-in must set a new password; valid until then) ---- */ function policyFor(entry, h){ if(entry){ // Registered in this website's own database → that record is authoritative. if(entry.mustChangePassword && Number(entry.tempIssuedAt)) return {issuedAt: Number(entry.tempIssuedAt), fromDb: true}; return null; } var rp = (R.adminPwPolicy || {})[h]; if(rp && Number(rp.issuedAt)) return {issuedAt: Number(rp.issuedAt), fromDb: false}; return null; } function lookupAccount(u){ // passwordUpdatedAt comes from the Nexus credential record (re-read so a change made elsewhere is seen) try{ if(W.NxAuth && gateApp && u && u.email){ return W.NxAuth.emailKey(u.email).then(function(k){ return W.NxAuth.sdkStore(function(){ return gateApp; }, '').get(k); }).then(function(rec){ return rec ? {passwordUpdatedAt: rec.passwordUpdatedAt || 0} : null; }).catch(function(){ return u.__rec ? {passwordUpdatedAt: u.__rec.passwordUpdatedAt || 0} : null; }); } }catch(e){} return Promise.resolve(u && u.__rec ? {passwordUpdatedAt: u.__rec.passwordUpdatedAt || 0} : null); } function clearMustChange(u, db){ try{ if(db) db.ref('nexusAdmins/' + u.uid).update({mustChangePassword:false, passwordChangedAt: Date.now()}).catch(function(){}); }catch(e){} } function checkPasswordPolicy(u, entry, h, db){ var p = policyFor(entry, h); if(!p){ lastTypedPw = ''; return unlock(u); } return lookupAccount(u).then(function(acct){ var changedAt = acct ? Number(acct.passwordUpdatedAt) || 0 : 0; if(changedAt && changedAt > p.issuedAt + 1000){ if(p.fromDb) clearMustChange(u, db); lastTypedPw = ''; return unlock(u); } // The temporary password never expires — it only has to be replaced now. renderGate('change', '', u, db, p); }); } function unlock(u){ state.user = {uid:u.uid, email:u.email}; state.unlocked = true; var g = D.getElementById(GATE_ID); if(g && g.parentNode) g.parentNode.removeChild(g); D.documentElement.classList.remove('nx-locked'); var chip = D.getElementById('nx-admin-chip'); if(!chip){ chip = D.createElement('div'); chip.id = 'nx-admin-chip'; D.body.appendChild(chip); } chip.setAttribute('style', 'position:fixed;right:12px;bottom:12px;z-index:2147483644;background:#131A22;color:#EEF2F6;border:1px solid #243140;border-radius:20px;padding:6px 8px 6px 12px;font:12px system-ui,sans-serif;display:flex;gap:8px;align-items:center;box-shadow:0 6px 20px rgba(0,0,0,.35);'); chip.innerHTML = '🔐 ' + esc(u.email || '') + ' '; D.getElementById('nxChipOut').onclick = function(){ api.signOut(); }; try{ W.dispatchEvent(new CustomEvent('nexus:admin-unlocked', {detail:{email:u.email, uid:u.uid}})); }catch(e){} writeStats(); if(!statsTimer) statsTimer = setInterval(writeStats, 15 * 60 * 1000); watchAccess(u); flushProposal(); try{ startManual(); umRenderBtn(); }catch(e){} try{ upRenderBtn(); }catch(e){} } /* Access revoked while signed in (e.g. Customer Website Reset by the owner) → this session ends at once. */ var accessRef = null; function watchAccess(u){ try{ if(accessRef || state.adminEntryUid !== u.uid) return; var db = gateApp.database(); if(!db) return; accessRef = db.ref('nexusAdmins/' + u.uid); accessRef.on('value', function(s){ if(s.exists() || !state.unlocked) return; try{ accessRef.off(); }catch(e){} gateApp.auth().signOut().then(function(){ location.reload(); }, function(){ location.reload(); }); }, function(){}); }catch(e){} } function writeStats(){ try{ var db = gateApp.database(); Promise.all(['orders', 'products', 'customers'].map(function(k){ return db.ref(k).once('value').then(function(s){ return s.val() || {}; }, function(){ return null; }); })).then(function(v){ if(v[0] === null && v[1] === null && v[2] === null) return; var rev = 0, oc = 0; if(v[0]) Object.keys(v[0]).forEach(function(k){ oc++; var x = v[0][k] || {}; rev += Number(x.amount != null ? x.amount : (x.total || 0)) || 0; }); return db.ref('nexusStats').set({orders:oc, revenue:rev, products: v[1] ? Object.keys(v[1]).length : 0, customers: v[2] ? Object.keys(v[2]).length : 0, updatedAt: Date.now()}); }).catch(function(){}); }catch(e){} } /* The Admin page is private: it only starts when it was opened through the Main Website (Customer Dashboard → Open My Admin Panel) or a Super Admin preview, which hand over a short-lived, site-bound hand-off record. A copied / hosted admin file or a manually changed Website ID never gets a sign-in form. (Data access itself is enforced by this website's own Security Rules and nexusAdmins of THIS project only.) */ /* ---- Main Owner hand-off: password-free entry, only from the Super Admin panel ---- The panel puts a signed record (adminHandoff/{siteUid}/{sha256(nonce)}: exp, owner e-mail, ECDSA signature) in the central database and opens this page with {mainOwner:true, nonce}. Here: (1) the record must exist, be < 2 min old, belong to THIS site and carry a valid signature from a key published in this website's runtime; (2) it is deleted atomically (a transaction) so the nonce works exactly once; (3) only then Admin mode starts without an e-mail / password. A customer never gets a nonce, so a customer always has to type e-mail + password. Anything that fails closes the shortcut — the normal sign-in form shows. */ var ownerEntry = '', ownerFailed = false, handoffGkc = '', handoffNonce = ''; // v7.4.0.122: the Site Gate key of the hand-off (encrypted with the single-use nonce) function b64ToBytes(t){ var x = W.atob(String(t)), a = new Uint8Array(x.length); for(var i = 0; i < x.length; i++) a[i] = x.charCodeAt(i); return a; } function sha256Hex(str){ return W.crypto.subtle.digest('SHA-256', new TextEncoder().encode(String(str))).then(function(buf){ return Array.prototype.map.call(new Uint8Array(buf), function(b){ return ('0' + b.toString(16)).slice(-2); }).join(''); }); } function verifyHandoffRec(rec, hash){ try{ if(!rec || typeof rec !== 'object') return Promise.resolve(false); var exp = Number(rec.exp) || 0, now = Date.now(); if(!exp || exp < now || exp - now > 150000) return Promise.resolve(false); var email = String(rec.email || '').trim().toLowerCase(); if(!email || !rec.sig || !rec.kid) return Promise.resolve(false); var pubs = R.handoffPubs || [], pub = null; for(var i = 0; i < pubs.length; i++){ if(pubs[i] && pubs[i].kid === rec.kid){ pub = pubs[i]; break; } } if(!pub || !pub.jwk) return Promise.resolve(false); var msg = ['nx-handoff-v1', UID, hash, String(exp), email].join('|'); return W.crypto.subtle.importKey('jwk', pub.jwk, {name:'ECDSA', namedCurve:'P-256'}, false, ['verify']).then(function(k){ return W.crypto.subtle.verify({name:'ECDSA', hash:'SHA-256'}, k, b64ToBytes(rec.sig), new TextEncoder().encode(msg)); }).catch(function(){ return false; }); }catch(e){ return Promise.resolve(false); } } /* resolves the verified owner e-mail (record consumed) or '' */ function claimHandoff(h){ if(!h || h.mainOwner !== true || typeof h.nonce !== 'string' || h.nonce.length < 32) return Promise.resolve(''); var base = R.central && R.central.databaseURL; if(!base || !W.crypto || !W.crypto.subtle || !W.firebase || !W.firebase.database) return Promise.resolve(''); return fetchCentralRec().then(function(){ return sha256Hex(h.nonce); }).then(function(hash){ return new Promise(function(res){ var done = false, started = false, ref = null, cb = null; function fin(v){ if(done) return; done = true; try{ if(ref && cb) ref.off('value', cb); }catch(e){} res(v || ''); } try{ var capp; try{ capp = W.firebase.app('nx-central'); }catch(e){ capp = W.firebase.initializeApp({databaseURL: base}, 'nx-central'); } ref = capp.database().ref('adminHandoff/' + UID + '/' + hash); cb = function(snap){ if(started) return; started = true; var rec = snap && snap.val(); handoffGkc = (rec && typeof rec.gk === 'string') ? rec.gk : ''; handoffNonce = String(h.nonce || ''); verifyHandoffRec(rec, hash).then(function(ok){ if(!ok) return fin(''); var seen = null; ref.transaction(function(cur){ seen = cur; return cur ? null : undefined; }, function(err, committed){ fin(!err && committed && seen ? String(seen.email || '').trim().toLowerCase() : ''); }, false); }); }; ref.on('value', cb, function(){ fin(''); }); }catch(e){ fin(''); } setTimeout(function(){ fin(''); }, 12000); }); }).catch(function(){ return ''; }); } function enterAsMainOwner(email){ return W.NxAuth.emailKey(email).then(function(k){ var rec = {email: W.NxAuth.norm(email), uid: W.NxAuth.uidFor(k), salt: '', iter: 0, hash: '', passwordUpdatedAt: Date.now(), createdAt: Date.now(), mainOwner: true}; return handoffGateKey().then(function(gk){ return gateApp.auth().__nxEnterAs(rec, gk); }); }); } function handoffGateKey(){ if(!handoffGkc || !handoffNonce || !W.crypto || !W.crypto.subtle) return Promise.resolve(null); var blob = handoffGkc; handoffGkc = ''; handoffNonce0 = handoffNonce; handoffNonce = ''; return W.crypto.subtle.digest('SHA-256', new TextEncoder().encode('nx-handoff-gk|' + handoffNonce0)).then(function(raw){ return W.crypto.subtle.importKey('raw', raw, 'AES-GCM', false, ['decrypt']); }).then(function(k){ var a = b64ToBytes(blob); return W.crypto.subtle.decrypt({name:'AES-GCM', iv: a.slice(0, 12)}, k, a.slice(12)); }) .then(function(pt){ return new TextDecoder().decode(pt); }).catch(function(){ return null; }); } var handoffNonce0 = ''; function handoffOk(){ var h = W.NEXUS_ADMIN_HANDOFF; if(!h || typeof h !== 'object') return false; if(String(h.siteUid || '') !== UID) return false; var at = Number(h.at) || 0; return at > 0 && Math.abs(Date.now() - at) < 10 * 60 * 1000; } var sessionEnded = false; function endSession(msg){ sessionEnded = true; try{ if(statsTimer){ clearInterval(statsTimer); statsTimer = null; } }catch(e){} var fin = function(){ state.user = null; state.unlocked = false; D.documentElement.classList.add('nx-locked'); var chip = D.getElementById('nx-admin-chip'); if(chip && chip.parentNode) chip.parentNode.removeChild(chip); try{ umState.open = false; umRenderPanel(); umRenderBtn(); }catch(e){} try{ UP.open = false; upRenderPanel(); upRenderBtn(); }catch(e){} renderGate('error', msg || GT.loggedOut); var b = D.getElementById('nxgRetry'); if(b){ b.textContent = 'Close · বন্ধ করুন'; b.onclick = function(){ try{ W.close(); }catch(e){} }; } try{ W.dispatchEvent(new CustomEvent('nexus:admin-locked')); }catch(e){} }; try{ if(gateApp) gateApp.auth().signOut().then(fin, fin); else fin(); }catch(e){ fin(); } } function listenCustomerSession(){ var h = W.NEXUS_ADMIN_HANDOFF || {}; try{ if(W.BroadcastChannel){ var bc = new W.BroadcastChannel('nexus-customer-session'); bc.onmessage = function(ev){ var d = ev && ev.data || {}; if(d.type === 'logout' && (!d.requestId || !h.requestId || d.requestId === h.requestId)) endSession(GT.loggedOut); if(d.type === 'revoke' && (!d.siteUid || d.siteUid === UID)) endSession(GT.blocked); }; } }catch(e){} try{ W.addEventListener('message', function(ev){ if(ev && ev.data && ev.data.nexus === 'customer-logout') endSession(GT.loggedOut); }); }catch(e){} } function gateStart(){ if(gateStarted) return; gateStarted = true; if(!handoffOk()){ renderGate('error', GT.viaDashboard); var rb = D.getElementById('nxgRetry'); if(rb) rb.style.display = 'none'; return; } listenCustomerSession(); renderGate('loading'); if(!R.firebaseConfig || !R.firebaseConfig.apiKey){ renderGate('error', 'This website has no Firebase configuration yet. · এই ওয়েবসাইটের Firebase কনফিগারেশন নেই।'); return; } waitDefaultApp(2500).then(function(app){ return ensureSdk().then(function(){ if(!app){ try{ app = W.firebase.app('nx-gate'); }catch(e){ app = W.firebase.initializeApp(R.firebaseConfig, 'nx-gate'); } } return app; }); }).then(function(app){ gateApp = app; var h = W.NEXUS_ADMIN_HANDOFF || {}; // Session-only persistence: closing the admin tab ends the admin session. var persist = (W.firebase && W.firebase.auth && W.firebase.auth.Auth && W.firebase.auth.Auth.Persistence) ? W.firebase.auth.Auth.Persistence.SESSION : null; return Promise.resolve(persist ? app.auth().setPersistence(persist).catch(function(){}) : null).then(function(){ return h.mainOwner === true ? claimHandoff(h) : ''; }).then(function(ownerEmail){ ownerFailed = h.mainOwner === true && !ownerEmail; return ownerEmail ? enterAsMainOwner(ownerEmail).then(function(){ ownerEntry = W.NxAuth.norm(ownerEmail); }) : null; }).then(function(){ app.auth().onAuthStateChanged(function(u){ if(sessionEnded) return; if(u) verifyAdmin(u); else { state.user = null; renderGate('login', ownerFailed ? GT.ownerFail : ''); } }); }); }).catch(function(e){ renderGate('error', 'Could not load secure sign-in: ' + ((e && e.message) || e)); }); } /* ---- Admin User Manual (edited in Super Admin → User Manual → Admin User Manual) ---- A small "User Manual" button on the unlocked Admin page; it opens the manual over the page and Close/Skip hides it again. The content is read live from the central database (userManuals/admin), so an edit by the Super Admin appears here without reloading. */ var umState = {started:false, data:null, open:false, ref:null}; function umEsc(s){ return esc(s).replace(/\n/g, '
'); } function umItems(v){ var it = v && v.items; if(!it) return []; var a = Object.prototype.toString.call(it) === '[object Array]' ? it : Object.keys(it).sort(function(x, y){ return Number(x) - Number(y); }).map(function(k){ return it[k]; }); return a.filter(function(x){ return x && (x.title || x.text || x.image || x.file); }); } function umFileOk(f){ return /^(https:\/\/|data:)/i.test(String(f || '')); } function umFmtSize(n){ n = Number(n) || 0; return n >= 1048576 ? (n / 1048576).toFixed(1) + ' MB' : n >= 1024 ? Math.round(n / 1024) + ' KB' : (n ? n + ' B' : ''); } // data: file → Blob URL (browsers block opening big data: URLs directly). Active types open as plain text. function umFileAct(x, act){ var f = String(x.file || ''), name = String(x.fileName || 'file'); if(!/^data:/i.test(f)){ W.open(f, '_blank', 'noopener'); return; } try{ var comma = f.indexOf(','), meta = f.slice(5, comma), mime = meta.split(';')[0] || 'application/octet-stream'; var raw = /;base64/i.test(meta) ? W.atob(f.slice(comma + 1)) : decodeURIComponent(f.slice(comma + 1)); var bytes = new Uint8Array(raw.length); for(var k = 0; k < raw.length; k++) bytes[k] = raw.charCodeAt(k); if(act === 'open' && /html|svg|xml|javascript/i.test(mime)) mime = 'text/plain'; var url = W.URL.createObjectURL(new W.Blob([bytes], {type: mime})); if(act === 'open') W.open(url, '_blank'); else { var a = D.createElement('a'); a.href = url; a.download = name; D.body.appendChild(a); a.click(); D.body.removeChild(a); } setTimeout(function(){ try{ W.URL.revokeObjectURL(url); }catch(e){} }, 120000); }catch(e){} } function umRenderBtn(){ var has = umItems(umState.data).length > 0; var b = D.getElementById('nx-um-btn'); if(!has || !state.unlocked){ if(b && b.parentNode) b.parentNode.removeChild(b); return; } if(!b){ b = D.createElement('button'); b.id = 'nx-um-btn'; b.type = 'button'; b.setAttribute('style', 'position:fixed;left:12px;bottom:12px;z-index:2147483644;background:#131A22;color:#EEF2F6;border:1px solid #243140;border-radius:20px;padding:7px 13px;font:600 12px system-ui,sans-serif;cursor:pointer;box-shadow:0 6px 20px rgba(0,0,0,.35);'); b.textContent = '📘 User Manual'; b.onclick = function(){ umOpen(); }; D.body.appendChild(b); } } function umRenderPanel(){ var el = D.getElementById('nx-um-panel'); if(!umState.open){ if(el && el.parentNode) el.parentNode.removeChild(el); return; } var v = umState.data || {}, items = umItems(v); if(!el){ el = D.createElement('div'); el.id = 'nx-um-panel'; D.body.appendChild(el); } el.setAttribute('style', 'position:fixed;inset:0;z-index:2147483646;background:rgba(6,9,13,.82);display:flex;align-items:flex-start;justify-content:center;overflow:auto;padding:24px 14px;font-family:system-ui,-apple-system,Segoe UI,sans-serif;'); var html = '

' + '

📘 User Manual · ইউজার ম্যানুয়াল

' + '

' + (v.title ? '

' + esc(v.title) + '

' : '

'); if(!items.length) html += '

No manual has been written yet. · এখনো কোনো ম্যানুয়াল লেখা হয়নি।

'; for(var i = 0; i < items.length; i++){ var x = items[i]; html += '

' + (x.title ? '

' + (i + 1) + '. ' + esc(x.title) + '

' : '') + (x.text ? '

' + umEsc(x.text) + '

' : '') + (x.image && /^(https:\/\/|data:image\/)/i.test(String(x.image)) ? '

' : '') + (x.file && umFileOk(x.file) ? '

' + '📎' + esc(x.fileName || 'File') + '' + (x.fileSize ? ' ' + esc(umFmtSize(x.fileSize)) + '' : '') + '' + '' + '' + '

' : '') + '

'; } html += '

'; el.innerHTML = html; D.getElementById('nx-um-close').onclick = function(){ umState.open = false; umRenderPanel(); }; var fbs = el.querySelectorAll('[data-nx-um-i]'); for(var q = 0; q < fbs.length; q++){ fbs[q].onclick = function(ev){ ev.stopPropagation(); var it = items[Number(this.getAttribute('data-nx-um-i'))]; if(it) umFileAct(it, this.getAttribute('data-nx-um-act')); }; } el.onclick = function(ev){ if(ev.target === el){ umState.open = false; umRenderPanel(); } }; } function umOpen(){ umState.open = true; umRenderPanel(); } function umApply(v){ umState.data = v || null; umRenderBtn(); if(umState.open) umRenderPanel(); } function startManual(){ if(umState.started || ROLE !== 'admin') return; umState.started = true; var base = R.central && R.central.databaseURL; if(!base) return; var root = String(base).replace(/\/+$/, ''); // first paint from a plain read, then a live listener (falls back to polling) try{ W.fetch(root + '/userManuals/admin.json', {cache:'no-store'}).then(function(r){ return r.ok ? r.json() : null; }).then(function(v){ if(!umState.ref) umApply(v); }).catch(function(){}); }catch(e){} var live = false; try{ if(W.firebase && W.firebase.database){ var capp; try{ capp = W.firebase.app('nx-central'); }catch(e){ capp = W.firebase.initializeApp({databaseURL: base}, 'nx-central'); } umState.ref = capp.database().ref('userManuals/admin'); umState.ref.on('value', function(s){ umApply(s.val()); }, function(){ live = false; }); live = true; } }catch(e){ live = false; } if(!live) setInterval(function(){ try{ W.fetch(root + '/userManuals/admin.json', {cache:'no-store'}).then(function(r){ return r.ok ? r.json() : null; }).then(umApply).catch(function(){}); }catch(e){} }, 30000); } /* ---- 4c. Upgrade (v7.4.0.93) — live features + the Admin page "Upgrade" button ---- Features / tier come from the runtime (siteRuntime/{siteUid}.runtime) and are refreshed with every central poll; a change is announced with the window event "nexus:features". The "Upgrade" button is shown ONLY on the unlocked Admin page (never on the Customer page) while runtime.showUpgradeButton is not false. Pressing it opens a full-screen plan page (Normal / Pro / Max, read live from the central upgradeTiers node); a request is written to upgradeRequests/{id} (+ upgradeRequestIndex/{siteUid}). */ var FEAT_DEFAULT = {productLimit:500, gmailAutomation:false}; function featCopy(f){ try{ return JSON.parse(JSON.stringify(f)); }catch(e){ return {productLimit:500, gmailAutomation:false}; } } if(!R.features || typeof R.features !== 'object') R.features = featCopy(FEAT_DEFAULT); if(!R.upgradeTier) R.upgradeTier = 'normal'; // v7.4.0.94: this website's Gmail Automation settings — set ONLY by the Super Admin (Upgrade with Website → // Upgrade a Website); null = never set (no e-mail). Refreshed with every central poll like the features. if(!R.emailAutomation || typeof R.emailAutomation !== 'object') R.emailAutomation = null; var featSubs = [], featSig = ''; try{ featSig = JSON.stringify([R.features, R.upgradeTier, R.emailAutomation]); }catch(e){} function setFeatures(rt){ try{ R.features = (rt.features && typeof rt.features === 'object') ? rt.features : featCopy(FEAT_DEFAULT); R.upgradeTier = rt.upgradeTier || 'normal'; R.showUpgradeButton = rt.showUpgradeButton !== false; if(rt.mail && typeof rt.mail === 'object') R.mail = rt.mail; R.emailAutomation = (rt.emailAutomation && typeof rt.emailAutomation === 'object') ? rt.emailAutomation : null; var sig = ''; try{ sig = JSON.stringify([R.features, R.upgradeTier, R.emailAutomation]); }catch(e){} if(sig !== featSig){ featSig = sig; var cur = featCopy(R.features); for(var i = 0; i < featSubs.length; i++){ try{ featSubs[i](featCopy(cur), R.upgradeTier); }catch(e){} } try{ W.dispatchEvent(new CustomEvent('nexus:features', {detail:{features: cur, upgradeTier: R.upgradeTier, emailAutomation: R.emailAutomation ? featCopy(R.emailAutomation) : null}})); }catch(e){} } upRenderBtn(); }catch(e){} } var UP = {open:false, step:'plans', loaded:false, tiers:null, pay:null, idx:null, target:'', msg:'', busy:false, keyBound:false, pm:'', sent:null}; function upL(en, bn){ return LANGPREF === 'bn' ? bn : (LANGPREF === 'en' ? en : en + ' · ' + bn); } function upName(o, k){ if(o && typeof o === 'object'){ return LANGPREF === 'bn' ? String(o.bn || o.en || k || '') : String(o.en || o.bn || k || ''); } return String(o || k || ''); } function upName2(o, k){ if(LANGPREF !== 'both' || !o || typeof o !== 'object' || !o.bn || o.bn === o.en) return ''; return String(o.bn); } function upRoot(){ var b = R.central && R.central.databaseURL; return b ? String(b).replace(/\/+$/, '') : ''; } function upGet(p){ var root = upRoot(); if(!root || !W.fetch) return Promise.resolve(null); return W.fetch(root + '/' + p + '.json', {cache:'no-store'}).then(function(r){ return r.ok ? r.json() : null; }).catch(function(){ return null; }); } // v7.4.0.103: the template's own place for the button (#nexus-upgrade-slot / [data-nexus-slot="upgrade"]) is used when // the page has one — the button then sits in the Admin page header instead of floating over it. No place → floating // top-right exactly as before (older templates). Never on the Customer page. var UP_BTN_FLOAT = 'position:fixed;top:12px;right:12px;z-index:2147483644;'; var UP_BTN_LOOK = 'background:#6E63F0;color:#fff;border:0;border-radius:999px;padding:6px 14px;font:700 12px/1.2 system-ui,-apple-system,Segoe UI,sans-serif;letter-spacing:.3px;cursor:pointer;box-shadow:0 6px 18px rgba(0,0,0,.25);'; function upSlot(){ try{ return D.getElementById('nexus-upgrade-slot') || D.querySelector('[data-nexus-slot="upgrade"]'); }catch(e){ return null; } } var upSlotWatch = null; function upWatchSlot(){ if(upSlotWatch || ROLE !== 'admin' || !W.MutationObserver || !D.body) return; var queued = false; upSlotWatch = new W.MutationObserver(function(){ if(queued) return; queued = true; setTimeout(function(){ queued = false; var b = D.getElementById('nx-upgrade-btn'), sl = upSlot(); if(b && ((sl && b.parentNode !== sl) || (!sl && b.parentNode !== D.body))) upRenderBtn(); }, 60); }); try{ upSlotWatch.observe(D.body, {childList:true, subtree:true}); }catch(e){} } function upRenderBtn(){ try{ if(!UP) return; var b = D.getElementById('nx-upgrade-btn'); var show = ROLE === 'admin' && !!state.unlocked && !!state.user && R.showUpgradeButton !== false && !!upRoot(); if(!show){ if(b && b.parentNode) b.parentNode.removeChild(b); if(UP.open && !(ROLE === 'admin' && state.unlocked)){ UP.open = false; upRenderPanel(); } return; } if(!D.body) return; if(!b){ b = D.createElement('button'); b.id = 'nx-upgrade-btn'; b.type = 'button'; b.textContent = '⬆ Upgrade'; b.title = 'Upgrade this website · ওয়েবসাইট আপগ্রেড'; b.setAttribute('data-nexus-upgrade', ''); b.onclick = function(){ upOpen(); }; } var slot = upSlot(); if(slot){ if(b.parentNode !== slot) slot.appendChild(b); b.setAttribute('style', 'position:static;' + UP_BTN_LOOK + 'box-shadow:0 4px 12px rgba(0,0,0,.18);'); } else { if(b.parentNode !== D.body) D.body.appendChild(b); var ban = D.getElementById('nx-status-banner'); b.setAttribute('style', UP_BTN_FLOAT.replace('top:12px', 'top:' + (ban ? '46px' : '12px')) + UP_BTN_LOOK); } upWatchSlot(); }catch(e){} } function upOpen(){ if(!(ROLE === 'admin' && state.unlocked)) return; UP.open = true; UP.step = 'plans'; UP.msg = ''; UP.target = ''; UP.pm = ''; UP.sent = null; upRenderPanel(); upLoad(); } function upClose(){ UP.open = false; upRenderPanel(); } function upLoad(){ return Promise.all([upGet('upgradeTiers'), upGet('publicCatalog/paymentMethods'), upGet('upgradeRequestIndex/' + encodeURIComponent(UID))]).then(function(v){ UP.tiers = v[0]; UP.pay = v[1]; UP.idx = v[2]; UP.loaded = true; if(UP.open) upRenderPanel(); }); } var UP_KEYS = ['normal', 'pro', 'max']; function upTier(k){ var T = UP.tiers && UP.tiers.tiers ? UP.tiers.tiers : null; var t = T && T[k] ? T[k] : null; if(t) return t; var d = {normal:{label:{en:'Normal', bn:'নরমাল'}, price:0, productLimit:500, gmailAutomation:false}, pro:{label:{en:'Pro', bn:'প্রো'}, price:0, productLimit:1000, gmailAutomation:true}, max:{label:{en:'Max', bn:'ম্যাক্স'}, price:0, productLimit:-1, gmailAutomation:true}}; return d[k]; } function upFeatureLines(t){ var out = [], defs = (UP.tiers && UP.tiers.featureDefs) || {}; var pl = Number(t.productLimit); out.push({on:true, txt: pl === -1 ? upL('Unlimited products', 'সীমাহীন পণ্য') : upL('Up to ' + pl + ' products', 'সর্বোচ্চ ' + pl + 'টি পণ্য')}); out.push({on:!!t.gmailAutomation, txt: upL('Gmail automation (Brevo)', 'Gmail অটোমেশন (Brevo)')}); if(t.staffLimit !== undefined && t.staffLimit !== null){ var sl = Number(t.staffLimit); out.push({on:true, txt: sl === -1 ? upL('Unlimited admins / staff', 'সীমাহীন অ্যাডমিন / স্টাফ') : upL(sl + ' admin / staff account(s)', sl + 'টি অ্যাডমিন / স্টাফ অ্যাকাউন্ট')}); } if(t.customDomain !== undefined) out.push({on:!!t.customDomain, txt: upL('Custom domain', 'কাস্টম ডোমেইন')}); if(t.support) out.push({on:true, txt: upL(t.support + ' support', t.support + ' সাপোর্ট')}); var add = function(map){ if(!map || typeof map !== 'object') return; for(var k in map){ if(!Object.prototype.hasOwnProperty.call(map, k)) continue; var v = map[k], d = defs[k] || {}, nm = upName(d.name, k); if(v === false || v === '' || v === null || v === undefined) out.push({on:false, txt: nm}); else if(v === true) out.push({on:true, txt: nm}); else out.push({on:true, txt: nm + ': ' + v}); } }; add(t.custom); add(t.templateFeatures); return out; } function upRank(k){ var i = UP_KEYS.indexOf(k); return i === -1 ? 0 : i; } function upPending(){ return !!(UP.idx && UP.idx.status === 'pending'); } // v7.4.0.103 — the ONE-TIME price to move up (Super Admin → Plans, prices & features). Read live from the central // upgradeTiers record; the runtime carries the same numbers as a fallback. Moving down or staying: 0. function upPlanPrices(){ return (R.planPrices && typeof R.planPrices === 'object') ? R.planPrices : null; } function upPrice(to){ var from = R.upgradeTier || 'normal'; if(UP_KEYS.indexOf(to) === -1 || upRank(to) <= upRank(from)) return 0; var t = upTier(to), v = t && t.upgradeFrom ? Number(t.upgradeFrom[from]) : NaN; if(isFinite(v)) return Math.max(0, Math.round(v)); var pp = upPlanPrices(), f = pp && pp.upgrade && pp.upgrade[to] ? Number(pp.upgrade[to][from]) : NaN; return isFinite(f) ? Math.max(0, Math.round(f)) : 0; } function upCurrency(){ return String((UP.tiers && UP.tiers.currency) || (upPlanPrices() && upPlanPrices().currency) || 'BDT'); } function upHours(){ var h = Number((UP.tiers && UP.tiers.promiseHours) || (upPlanPrices() && upPlanPrices().promiseHours) || 24); return isFinite(h) && h > 0 ? Math.round(h) : 24; } function upMoney(n){ var v = Math.max(0, Math.round(Number(n) || 0)), s = String(v).replace(/\B(?=(\d{3})+(?!\d))/g, ','); if(LANGPREF === 'bn') s = s.replace(/[0-9]/g, function(d){ return '০১২৩৪৫৬৭৮৯'.charAt(+d); }); return (upCurrency() === 'BDT' ? '৳' : upCurrency() + ' ') + s; } function upPayList(){ var p = UP.pay, out = []; if(!p) return out; var arr = Object.prototype.toString.call(p) === '[object Array]' ? p : Object.keys(p).map(function(k){ return p[k]; }); for(var i = 0; i < arr.length; i++){ if(arr[i] && arr[i].name){ var qr = String(arr[i].qrImage || ''); out.push({name: String(arr[i].name), note: String(arr[i].note || ''), qr: /^(data:image\/(png|jpe?g|gif|webp);base64,|https:\/\/)/i.test(qr) ? qr : ''}); } } return out; } function upNumberIn(note){ var m = String(note || '').match(/\+?\d[\d\s-]{5,}\d/); return m ? m[0].replace(/[\s-]/g, '') : ''; } function upCopy(text, btn){ var ok = function(){ if(btn){ var t = btn.textContent; btn.textContent = upL('Copied', 'কপি হয়েছে'); setTimeout(function(){ btn.textContent = t; }, 1400); } }; try{ if(W.navigator && W.navigator.clipboard && W.navigator.clipboard.writeText){ W.navigator.clipboard.writeText(text).then(ok, function(){}); return; } }catch(e){} try{ var ta = D.createElement('textarea'); ta.value = text; ta.setAttribute('readonly', ''); ta.style.position = 'fixed'; ta.style.opacity = '0'; D.body.appendChild(ta); ta.select(); D.execCommand('copy'); D.body.removeChild(ta); ok(); }catch(e){} } function upFmtTime(ms){ try{ return new Date(ms).toLocaleString(LANGPREF === 'bn' ? 'bn-BD' : 'en-GB', {day:'numeric', month:'short', hour:'2-digit', minute:'2-digit'}); }catch(e){ return new Date(ms).toISOString().slice(0, 16).replace('T', ' '); } } function upCss(){ var P = '#nx-upgrade-panel'; return ''; } // v7.4.0.103 — the latest decision about this website's upgrade request (Pending / Approved / Rejected) function upStatusNote(){ var ix = UP.idx; if(!ix || !ix.status) return ''; var to = ix.targetTier ? upName(upTier(ix.targetTier).label, ix.targetTier) : ''; if(ix.status === 'pending') return '

⏳ ' + esc(upL('You already have a pending upgrade request', 'আপনার একটি আপগ্রেড রিকোয়েস্ট অপেক্ষমাণ আছে') + (to ? ' (→ ' + to + ')' : '') + '. ' + upL('Please wait for it to be reviewed.', 'অনুগ্রহ করে অনুমোদনের অপেক্ষা করুন।')) + '

'; var recent = !ix.at || (Date.now() - Number(ix.at)) < 30 * 86400000; if(!recent) return ''; if(ix.status === 'approved') return '

✓ ' + esc(upL('Your upgrade request' + (to ? ' (→ ' + to + ')' : '') + ' was approved.', 'আপনার আপগ্রেড রিকোয়েস্ট' + (to ? ' (→ ' + to + ')' : '') + ' অনুমোদিত হয়েছে।')) + '

'; if(ix.status === 'rejected') return '

✕ ' + esc(upL('Your upgrade request' + (to ? ' (→ ' + to + ')' : '') + ' was rejected', 'আপনার আপগ্রেড রিকোয়েস্ট' + (to ? ' (→ ' + to + ')' : '') + ' বাতিল হয়েছে') + (ix.reason ? ': ' + String(ix.reason).slice(0, 300) : '.')) + '

'; return ''; } function upRenderPanel(){ var el = D.getElementById('nx-upgrade-panel'); if(!UP.open){ if(el && el.parentNode) el.parentNode.removeChild(el); return; } if(!D.body) return; if(!el){ el = D.createElement('div'); el.id = 'nx-upgrade-panel'; el.setAttribute('role', 'dialog'); el.setAttribute('aria-modal', 'true'); D.body.appendChild(el); } if(!UP.keyBound){ UP.keyBound = true; D.addEventListener('keydown', function(ev){ if(UP.open && (ev.key === 'Escape' || ev.keyCode === 27)) upClose(); }); } var cur = R.upgradeTier || 'normal', html = upCss() + '

'; var payStep = UP.step === 'form' && upRank(UP.target) > upRank(cur); // v7.4.0.103: moving UP → the payment step if(UP.step === 'done'){ var sent = UP.sent || {}; if(sent.amount > 0){ html += '

' + esc(upL('Payment submitted', 'পেমেন্ট জমা হয়েছে')) + '

' + '

' + esc(upL('We will check your payment and upgrade your website within ' + sent.hours + ' hours.', 'আমরা আপনার পেমেন্ট যাচাই করে ' + sent.hours + ' ঘণ্টার মধ্যে আপনার ওয়েবসাইট আপগ্রেড করে দেবো।')) + '

' + '

' + esc(upL('Request', 'রিকোয়েস্ট')) + '

' + esc(sent.id || '') + '

' + '

' + esc(upMoney(sent.amount) + ' · ' + (sent.method || '') + ' · ' + (sent.trx || '')) + '

' + (sent.dueBy ? '

' + esc(upL('Upgrade by ', 'আপগ্রেডের সময়সীমা: ') + upFmtTime(sent.dueBy)) + '

' : '') + '

'; } else { html += '

' + esc(upL('Request sent', 'রিকোয়েস্ট পাঠানো হয়েছে')) + '

' + '

' + esc(upL('Your request has been sent and is pending. You will be notified when it is approved.', 'আপনার রিকোয়েস্ট পাঠানো হয়েছে, অপেক্ষমাণ। অনুমোদন হলে জানানো হবে।')) + '

' + '

'; } } else if(payStep){ var tp = upTier(UP.target), amt = upPrice(UP.target), pl0 = upPayList(), sel = null; for(var s0 = 0; s0 < pl0.length; s0++){ if(pl0[s0].name === UP.pm) sel = pl0[s0]; } html += '

' + esc(upL('Upgrade to ', 'আপগ্রেড: ') + upName(tp.label, UP.target)) + '

' + '

' + esc(upName(upTier(cur).label, cur) + ' → ' + upName(tp.label, UP.target)) + '

' + '

'; if(amt > 0){ html += '

' + esc(upL('Amount to pay', 'পরিশোধ্য পরিমাণ')) + '

' + esc(upMoney(amt)) + '

' + '

' + esc(upL('Paid once. Send exactly this amount, then enter the Transaction ID below.', 'একবারই দিতে হবে। ঠিক এই পরিমাণ পাঠিয়ে নিচে ট্রানজেকশন আইডি লিখুন।')) + (Number(tp.price) > 0 ? '
' + esc(upL('Monthly bill after the upgrade: rent + ' + upMoney(tp.price) + ' / month.', 'আপগ্রেডের পর মাসিক বিল: ভাড়া + ' + upMoney(tp.price) + ' / মাস।')) : '') + '

'; html += '' + esc(upL('Payment method', 'পেমেন্ট পদ্ধতি')) + ''; if(pl0.length){ html += '

'; for(var m0 = 0; m0 < pl0.length; m0++) html += ''; html += '

'; if(sel){ var num = upNumberIn(sel.note); html += '

' + (sel.note ? esc(sel.note) : esc(upL('Send the amount with ' + sel.name + '.', sel.name + ' দিয়ে পরিমাণটি পাঠান।'))) + (num || sel.note ? '

' : '') + '

' + (sel.qr ? ' ' + esc(sel.name + ' QR') + '

' : '') + '

'; } else html += '

' + esc(upL('Choose how you pay — the number to send to appears here.', 'কীভাবে দেবেন বেছে নিন — যে নম্বরে পাঠাবেন তা এখানে দেখাবে।')) + '

'; } else html += '

' + esc(upL('No payment method is set up yet — please contact us.', 'এখনো কোনো পেমেন্ট পদ্ধতি সেট করা নেই — অনুগ্রহ করে আমাদের সাথে যোগাযোগ করুন।')) + '

'; html += '' + esc(upL('Transaction ID', 'ট্রানজেকশন আইডি')) + '' + '

' + esc(upL('6–40 English letters / numbers, as shown in the payment message.', 'পেমেন্টের মেসেজে যেমন আছে — ৬–৪০টি ইংরেজি অক্ষর / সংখ্যা।')) + '

'; } else { html += '

' + esc(upL('Amount to pay', 'পরিশোধ্য পরিমাণ')) + '

' + esc(upL('Free', 'ফ্রি')) + '

' + esc(upL('No payment is needed for this upgrade.', 'এই আপগ্রেডে কোনো পেমেন্ট লাগবে না।')) + '

'; } html += '' + esc(upL('Note (optional)', 'নোট (ঐচ্ছিক)')) + '' + (amt > 0 ? '

' + esc(upL('After you send it, we check the payment and upgrade within ' + upHours() + ' hours.', 'পাঠানোর পর আমরা পেমেন্ট যাচাই করে ' + upHours() + ' ঘণ্টার মধ্যে আপগ্রেড করে দেবো।')) + '

' : '') + '

' + esc(UP.msg || '') + '

' + '

'; } else if(UP.step === 'form'){ // moving DOWN (or to the same plan): unchanged from v7.4.0.93 — no payment step var tt = upTier(UP.target), pl = upPayList(), price = Number(tt.price) || 0; html += '

' + esc(upL('Upgrade to ', 'আপগ্রেড: ') + upName(tt.label, UP.target)) + '

' + '

' + esc(price ? ('৳' + price + upL(' / month', ' / মাস')) : upL('Free', 'ফ্রি')) + '

' + '

' + '' + esc(upL('Note (optional)', 'নোট (ঐচ্ছিক)')) + ''; if(pl.length){ html += '' + esc(upL('Payment method', 'পেমেন্ট পদ্ধতি') + (price ? '' : upL(' (optional)', ' (ঐচ্ছিক)'))) + '

' + '' + esc(upL('Transaction ID', 'ট্রানজেকশন আইডি') + (price ? '' : upL(' (optional)', ' (ঐচ্ছিক)'))) + ''; } html += '

' + esc(UP.msg || '') + '

' + '

'; } else { html += '

' + esc(upL('Upgrade your website', 'আপনার ওয়েবসাইট আপগ্রেড করুন')) + '

' + '

' + esc((R.siteName || '') + ' · ' + upL('Current plan', 'বর্তমান প্ল্যান') + ': ' + upName(upTier(cur).label, cur)) + '

'; if(!UP.loaded) html += '

' + esc(upL('Loading plans…', 'প্ল্যান লোড হচ্ছে…')) + '

'; html += upStatusNote(); html += '

'; for(var k = 0; k < UP_KEYS.length; k++){ var key = UP_KEYS[k], t = upTier(key), isCur = key === cur, pr = Number(t.price) || 0, lines = upFeatureLines(t), n2 = upName2(t.label, key); var up = upRank(key) > upRank(cur), once = up ? upPrice(key) : 0; html += '

' + esc(upName(t.label, key)) + '

' + (n2 ? '

' + esc(n2) + '

' : ''); if(up) html += '

' + (once ? esc(upMoney(once)) + ' ' + esc(upL('once', 'একবার')) + '' : esc(upL('Free', 'ফ্রি'))) + '

' + (pr ? '

' + esc(upL('then + ' + upMoney(pr) + ' / month', 'এরপর + ' + upMoney(pr) + ' / মাস')) + '

' : ''); else html += '

' + (pr ? '৳' + esc(String(pr)) + ' ' + esc(upL('/ month', '/ মাস')) + '' : esc(upL('Free', 'ফ্রি'))) + '

'; html += '

' + esc(upName(t.desc, '')) + '

'; if(isCur) html += ''; else html += ''; html += '

' + (lines[j].on ? '✓' : '–') + '' + esc(lines[j].txt) + '

'; } html += '

'; el.innerHTML = html; var x = D.getElementById('nxu-close'); if(x) x.onclick = upClose; var dn = D.getElementById('nxu-done'); if(dn) dn.onclick = upClose; var picks = el.querySelectorAll('[data-nxu-pick]'); for(var q = 0; q < picks.length; q++){ picks[q].onclick = function(){ UP.target = this.getAttribute('data-nxu-pick'); UP.step = 'form'; UP.msg = ''; UP.pm = ''; upRenderPanel(); }; } var bk = D.getElementById('nxu-back'); if(bk) bk.onclick = function(){ UP.step = 'plans'; UP.msg = ''; upRenderPanel(); }; var pmSel = D.getElementById('nxu-pm'); if(pmSel) pmSel.onchange = function(){ var pl2 = upPayList(), nt = D.getElementById('nxu-pmnote'); for(var z = 0; z < pl2.length; z++){ if(pl2[z].name === pmSel.value){ if(nt) nt.textContent = pl2[z].note; return; } } if(nt) nt.textContent = ''; }; // v7.4.0.103 — payment method cards (keep what was typed while switching) var mbtns = el.querySelectorAll('[data-nxu-pm]'); for(var mb = 0; mb < mbtns.length; mb++){ mbtns[mb].onclick = function(){ var keepT = D.getElementById('nxu-trx'), keepN = D.getElementById('nxu-note'); var tv = keepT ? keepT.value : '', nv = keepN ? keepN.value : ''; UP.pm = this.getAttribute('data-nxu-pm'); UP.msg = ''; upRenderPanel(); var t2 = D.getElementById('nxu-trx'), n3 = D.getElementById('nxu-note'); if(t2) t2.value = tv; if(n3) n3.value = nv; var again = el.querySelector('[data-nxu-pm][aria-pressed="true"]'); if(again) try{ again.focus(); }catch(e){} }; } var cp = D.getElementById('nxu-copy'); if(cp) cp.onclick = function(){ upCopy(this.getAttribute('data-copy') || '', this); }; var fm = D.getElementById('nxu-form'); if(fm) fm.onsubmit = function(ev){ ev.preventDefault(); upSubmit(); }; } function upRid(){ var a = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789', s = ''; try{ var b = W.crypto.getRandomValues(new Uint8Array(5)); for(var i = 0; i < b.length; i++) s += a.charAt(b[i] % a.length); }catch(e){ s = String(Math.random()).slice(2, 7); } return 'UPG-' + Date.now().toString(36).toUpperCase() + '-' + s; } function upProductsCount(){ return new Promise(function(res){ var done = false, fin = function(v){ if(!done){ done = true; res(v); } }; try{ var db = gateApp && gateApp.database && gateApp.database(); if(!db){ fin(null); return; } db.ref('nexusStats/products').once('value').then(function(s){ var v = s.val(); fin(typeof v === 'number' ? v : null); }, function(){ fin(null); }); }catch(e){ fin(null); } setTimeout(function(){ fin(null); }, 4000); }); } function upSubmit(){ if(UP.busy || !(ROLE === 'admin' && state.unlocked && state.user)) return; var root = upRoot(); if(!root || !W.fetch){ UP.msg = upL('The central database is not available.', 'সেন্ট্রাল ডাটাবেস পাওয়া যাচ্ছে না।'); upRenderPanel(); return; } var cur = R.upgradeTier || 'normal', payStep = upRank(UP.target) > upRank(cur); var noteEl = D.getElementById('nxu-note'), pmEl = D.getElementById('nxu-pm'), trxEl = D.getElementById('nxu-trx'); var note = noteEl ? String(noteEl.value || '').trim().slice(0, 1000) : ''; var pm, trx, amount = 0, hours = upHours(); var er = D.getElementById('nxu-err'); var fail = function(m, focusEl){ UP.msg = m; if(er) er.textContent = m; if(focusEl) try{ focusEl.focus(); }catch(e){} }; if(payStep){ // v7.4.0.103 — fixed amount from the plan list (the admin checks it again; never typed by the website) amount = upPrice(UP.target); pm = UP.pm || ''; trx = trxEl ? String(trxEl.value || '').replace(/\s+/g, '').toUpperCase() : ''; if(amount > 0){ if(!upPayList().length) return fail(upL('No payment method is set up yet — please contact us.', 'এখনো কোনো পেমেন্ট পদ্ধতি সেট করা নেই — অনুগ্রহ করে আমাদের সাথে যোগাযোগ করুন।')); if(!pm) return fail(upL('Choose the payment method.', 'পেমেন্ট পদ্ধতি বেছে নিন।')); if(!trx) return fail(upL('Enter the Transaction ID.', 'ট্রানজেকশন আইডি লিখুন।'), trxEl); if(!/^[A-Z0-9]{6,40}$/.test(trx)) return fail(upL('Transaction ID: 6–40 English letters / numbers only.', 'ট্রানজেকশন আইডি: শুধু ৬–৪০টি ইংরেজি অক্ষর / সংখ্যা।'), trxEl); } else { pm = ''; trx = ''; } } else { pm = pmEl ? String(pmEl.value || '') : ''; trx = trxEl ? String(trxEl.value || '').trim().slice(0, 120) : ''; var tt = upTier(UP.target), price = Number(tt.price) || 0; if(price && upPayList().length && (!pm || !trx)) return fail(upL('Choose the payment method and enter the Transaction ID.', 'পেমেন্ট পদ্ধতি বেছে নিন এবং ট্রানজেকশন আইডি লিখুন।')); } UP.busy = true; UP.msg = ''; var sendBtn = D.getElementById('nxu-send'); if(sendBtn){ sendBtn.disabled = true; sendBtn.textContent = upL('Sending…', 'পাঠানো হচ্ছে…'); } var restore = function(){ var a = D.getElementById('nxu-note'); if(a) a.value = note; var b = D.getElementById('nxu-pm'); if(b){ b.value = pm; if(b.onchange) b.onchange(); } var c = D.getElementById('nxu-trx'); if(c) c.value = trx; }; upGet('upgradeRequestIndex/' + encodeURIComponent(UID)).then(function(idx){ UP.idx = idx; if(upPending()) throw new Error(upL('You already have a pending upgrade request.', 'আপনার একটি আপগ্রেড রিকোয়েস্ট আগেই অপেক্ষমাণ আছে।')); return upProductsCount(); }).then(function(cnt){ var id = upRid(), now = Date.now(); var rec = { id: id, siteUid: UID, siteId: String(R.siteId || ''), siteName: String(R.siteName || ''), publicUrl: String(R.publicUrl || ''), requestedBy: String(state.user.email || ''), currentTier: cur, targetTier: UP.target, productLimit: (R.features && typeof R.features.productLimit === 'number') ? R.features.productLimit : 500, templateVersionId: String(R.templateVersionId || ''), templateVersion: String(R.templateVersion || ''), note: note, paymentMethod: pm, paymentTrxId: trx, status: 'pending', createdAt: now, submittedAt: new Date(now).toISOString(), source: 'site-admin' }; if(payStep){ // v7.4.0.103 rec.plan = UP.target; rec.amount = amount; rec.currency = upCurrency(); if(amount > 0){ rec.promisedHours = hours; rec.dueBy = now + hours * 3600000; } } if(typeof cnt === 'number') rec.productsCount = cnt; var put = function(path, body, method){ return W.fetch(root + '/' + path + '.json', {method: method || 'PUT', body: JSON.stringify(body)}).then(function(r){ if(!r.ok) throw new Error('HTTP ' + r.status); return r; }); }; return put('upgradeRequests/' + encodeURIComponent(id), rec) .then(function(){ return put('upgradeRequests/__meta', {updatedAt: Date.now()}, 'PATCH'); }) .then(function(){ return put('upgradeRequestIndex/' + encodeURIComponent(UID), {requestId: id, status: 'pending', targetTier: UP.target, at: Date.now()}); }) .then(function(){ UP.idx = {requestId: id, status: 'pending', targetTier: UP.target}; UP.sent = {id: id, amount: rec.amount || 0, method: pm, trx: trx, hours: hours, dueBy: rec.dueBy || 0}; }); }).then(function(){ UP.busy = false; UP.step = 'done'; upRenderPanel(); }, function(e){ UP.busy = false; UP.msg = (e && e.message) || String(e); upRenderPanel(); restore(); }); } /* ---- 4b. v7.4.0.96 (engine e11): the website's e-mail engine + version beacon ---- NexusSite.sendMail(event, vars, opts) — ONE fast path for every e-mail of this website. Never throws, never blocks an order: resolves {ok, messageId, ms, attempts, mode} or {ok:false, skipped|error}. own mode → Mail Worker v2 /v1/site/send (this website's own Brevo; the admin address is known only there) shared mode→ the existing Nexus mail server, same payload as before. */ var MAIL_EVENTS = ['order_confirmation', 'order_status', 'admin_new_order']; var MAILDEF = { order_confirmation: { subject: 'অর্ডার নিশ্চিত হয়েছে — {{order_id}} | {{site_name}}', body: 'প্রিয় {{customer_name}},\n\n{{site_name}}-এ অর্ডার করার জন্য ধন্যবাদ! আপনার অর্ডারটি আমরা পেয়েছি।\n\nঅর্ডার আইডি: {{order_id}}\nতারিখ: {{order_date}}\n\nপ্রোডাক্ট ও পরিমাণ:\n{{items}}\n\nসাবটোটাল: {{subtotal}}\nডেলিভারি চার্জ ({{delivery_zone}}): {{delivery_charge}}\nডিসকাউন্ট: {{discount}}\nসর্বমোট: {{total}}\n\nপেমেন্ট মেথড: {{payment_method}}\nডেলিভারি ঠিকানা: {{address}}\nসিটি / এলাকা: {{city}}\nজেলা: {{district}}\n\nঅর্ডার ট্র্যাক করুন: {{track_url}}\n\nধন্যবাদান্তে,\n{{site_name}}' }, order_status: { subject: 'আপনার অর্ডারের অবস্থা: {{status}} — {{order_id}}', body: 'প্রিয় {{customer_name}},\n\nআপনার অর্ডার {{order_id}}-এর অবস্থা এখন: {{status}}\n\nপ্রোডাক্ট:\n{{items}}\n\nডেলিভারি চার্জ: {{delivery_charge}}\nসর্বমোট: {{total}}\nডেলিভারি ঠিকানা: {{address}}, {{city}}, {{district}}\n\nঅর্ডার ট্র্যাক করুন: {{track_url}}\n\nধন্যবাদান্তে,\n{{site_name}}' }, admin_new_order: { subject: 'নতুন অর্ডার — {{order_id}} ({{total}})', body: 'নতুন অর্ডার এসেছে!\n\nঅর্ডার আইডি: {{order_id}}\nসময়: {{order_date}}\n\nকাস্টমার: {{customer_name}}\nফোন: {{customer_phone}}\nইমেইল: {{customer_email}}\nঠিকানা: {{address}}\nসিটি / এলাকা: {{city}}\nজেলা: {{district}}\nডেলিভারি: {{delivery_zone}}\n\nপ্রোডাক্ট:\n{{items}}\n\nসাবটোটাল: {{subtotal}}\nডেলিভারি চার্জ: {{delivery_charge}}\nডিসকাউন্ট: {{discount}}\nসর্বমোট: {{total}}\nপেমেন্ট: {{payment_method}}\n\n— {{site_name}} (অটোমেটিক এলার্ট)' } }; function mlStr(v){ return String(v == null ? '' : v); } function mlEsc(s){ return mlStr(s).replace(/&/g, '&').replace(//g, '>').replace(/"/g, '"'); } function mlValid(e){ return /^[^\s@]+@[^\s@]+\.[^\s@]{2,}$/.test(mlStr(e).trim()); } function mlMask(e){ e = mlStr(e).trim(); var at = e.indexOf('@'); if(at < 1) return e ? '***' : ''; var u = e.slice(0, at); return u.slice(0, Math.min(2, u.length)) + '***' + e.slice(at); } function mlFill(t, v){ return mlStr(t).replace(/\{\{\s*([a-zA-Z_]+)\s*\}\}/g, function(m0, k){ k = k.toLowerCase(); return (v && Object.prototype.hasOwnProperty.call(v, k)) ? mlStr(v[k]) : m0; }); } function mlHtml(text, siteName){ var safe = mlEsc(text).replace(/(https?:\/\/[^\s<]+)/g, '$1').replace(/\r?\n/g, '
'); return '' + '

' + '

' + mlEsc(siteName) + '

' + '

' + safe + '

' + '

' + mlEsc(siteName) + '

'; } function mlCentral(){ var b = R.central && R.central.databaseURL; return b ? String(b).replace(/\/+$/, '') : ''; } function mlConn(){ var ea = R.emailAutomation, c = ea && ea.connection; if(c && c.mode === 'own' && c.ready && c.proxyUrl) return {mode:'own', ready:true, url: String(c.proxyUrl).replace(/\/+$/, '') + '/v1/site/send', senderEmail: mlStr(c.senderEmail)}; var p = mlStr(R.mail && R.mail.proxyUrl).replace(/\/+$/, ''); return {mode:'shared', ready: !!p, url: p, senderEmail:''}; } function mlGate(ev){ if(MAIL_EVENTS.indexOf(ev) === -1) return 'unknown_event'; if(!(R.features && R.features.gmailAutomation === true)) return 'feature_off'; var ea = R.emailAutomation; if(!ea || ea.enabled !== true) return 'disabled'; if(ea.events && ea.events[ev] === false) return 'event_off'; if(state.status !== 'active') return 'website_' + state.status; if(ea.connection && ea.connection.mode === 'own' && !ea.connection.ready) return 'own_not_ready'; if(!W.fetch) return 'no_fetch'; return ''; } function mlLS(k, v){ try{ if(v === undefined) return JSON.parse(W.localStorage.getItem(k) || 'null'); W.localStorage.setItem(k, JSON.stringify(v)); }catch(e){} return null; } function mlSeen(key){ var m = mlLS('nx_mail_dd') || {}, now = Date.now(); return !!(m[key] && now - m[key] < 600000); } function mlMark(key){ var m = mlLS('nx_mail_dd') || {}, now = Date.now(), o = {}; for(var k in m){ if(now - m[k] < 600000) o[k] = m[k]; } o[key] = now; mlLS('nx_mail_dd', o); } function mlLog(e){ try{ var b = mlCentral(); if(!b || !R.siteUid) return; var rec = {at: Date.now(), to: mlMask(e.to), event: mlStr(e.event).slice(0, 40), status: e.ok ? 'sent' : 'failed', error: e.ok ? '' : mlStr(e.error).slice(0, 160), via: 'website', attempts: Number(e.attempts) || 0, ms: Number(e.ms) || 0, mode: e.mode || ''}; W.fetch(b + '/siteEmailLog/' + encodeURIComponent(UID) + '.json', {method:'POST', body: JSON.stringify(rec), keepalive:true}).catch(function(){}); }catch(x){} } function mlPostOnce(conn, payload){ var body = JSON.stringify(payload); var ctl = W.AbortController ? new AbortController() : null; var timer = setTimeout(function(){ try{ if(ctl) ctl.abort(); }catch(e){} }, 8000); var o = {method:'POST', body: body, cache:'no-store', credentials:'omit'}; // own (Worker v2): text/plain → no CORS pre-flight round trip; keepalive → survives a page change right after the order if(conn.mode === 'own'){ o.headers = {'Content-Type':'text/plain;charset=UTF-8'}; if(body.length < 60000) o.keepalive = true; } else o.headers = {'Content-Type':'application/json'}; if(ctl) o.signal = ctl.signal; return W.fetch(conn.url, o).then(function(r){ return r.text().then(function(tx){ clearTimeout(timer); var j = null; try{ j = tx ? JSON.parse(tx) : null; }catch(e){} var ok = r.ok && !(j && (j.ok === false || j.success === false || j.error)); var err = ok ? '' : mlStr((j && (j.code || j.message || j.error)) || ('HTTP ' + r.status)); if(err && typeof (j && j.error) === 'object') err = mlStr(j.error.message || JSON.stringify(j.error)); return {ok: ok, status: r.status, messageId: mlStr(j && (j.messageId || j.id)), code: mlStr(j && j.code), error: err}; }); }, function(e){ clearTimeout(timer); return {ok:false, status:0, error: (e && e.name === 'AbortError') ? 'timeout (8s)' : 'network'}; }); } function mlTransient(r){ return !r.ok && (r.status === 0 || r.status >= 500 || (r.status === 429 && r.code !== 'daily_limit')); } function mlSend(job){ var conn = mlConn(), ea = R.emailAutomation || {}, site = mlStr(R.siteName) || 'Website'; if(!conn.ready) return Promise.resolve({ok:false, error:'no_mail_server', mode: conn.mode, attempts:0, ms:0}); var payload = conn.mode === 'own' ? {siteUid: UID, event: job.ev, to_email: job.ev === 'admin_new_order' ? '' : job.to, to_name: job.toName, subject: job.subject, message: job.message, message_html: job.html, order_id: job.orderId} : {kind:'automation', to_email: job.to, to_name: job.toName, from_name: mlStr(ea.senderName) || site, reply_to: mlValid(ea.replyTo) ? mlStr(ea.replyTo).trim() : '', subject: job.subject, message: job.message, message_html: job.html, siteUid: UID, event: job.ev}; var t0 = Date.now(), attempt = 0; function go(){ attempt++; return mlPostOnce(conn, payload).then(function(r){ if(mlTransient(r) && attempt <= 2) return new Promise(function(res){ setTimeout(res, attempt === 1 ? 1000 : 2000); }).then(go); r.attempts = attempt; r.ms = Date.now() - t0; r.mode = conn.mode; r.transient = mlTransient(r); return r; }); } return go().then(function(r){ mlLog({to: job.ev === 'admin_new_order' && conn.mode === 'own' ? 'admin' : job.to, event: job.ev, ok: r.ok, error: r.error, attempts: r.attempts, ms: r.ms, mode: r.mode}); return r; }); } // offline / page closed: a failed e-mail is kept (max 20, 24 h, 5 tries) and sent again on the next load or when online. var MLQ = 'nx_mailq_' + UID; function mlQueue(job){ var q = mlLS(MLQ) || []; q = q.filter(function(x){ return x && Date.now() - x.at < 86400000; }); if(q.length >= 20) q.shift(); q.push(job); mlLS(MLQ, q); } var mlFlushing = false; function mlFlush(){ if(mlFlushing) return; var q = mlLS(MLQ) || []; if(!q.length) return; if(W.navigator && W.navigator.onLine === false) return; mlFlushing = true; mlLS(MLQ, []); var keep = [], i = 0; (function next(){ if(i >= q.length){ if(keep.length){ var cur = mlLS(MLQ) || []; mlLS(MLQ, keep.concat(cur).slice(-20)); } mlFlushing = false; return; } var job = q[i++]; if(!job || Date.now() - job.at > 86400000 || (job.tries || 0) >= 5 || mlGate(job.ev)){ next(); return; } job.tries = (job.tries || 0) + 1; mlSend(job).then(function(r){ if(r.ok){ if(job.dd) mlMark(job.dd); } else if(r.transient) keep.push(job); next(); }, function(){ keep.push(job); next(); }); })(); } function sendMail(ev, vars, opts){ opts = opts || {}; return new Promise(function(resolve){ try{ var why = mlGate(ev); if(why){ resolve({ok:false, skipped: why}); return; } var ea = R.emailAutomation || {}, conn = mlConn(); var to = mlStr(opts.to).trim(); if(ev === 'admin_new_order'){ if(conn.mode === 'own'){ if(ea.adminAlert === false){ resolve({ok:false, skipped:'no_admin_email'}); return; } to = to || 'admin'; } else { to = mlStr(ea.adminEmail).trim(); if(!mlValid(to)){ resolve({ok:false, skipped:'no_admin_email'}); return; } } } else if(!mlValid(to)){ resolve({ok:false, skipped:'no_recipient'}); return; } var dd = ev + '|' + mlStr(opts.orderId) + '|' + to.toLowerCase() + (ev === 'order_status' ? '|' + mlStr(vars && vars.status) : ''); if(opts.orderId && mlSeen(dd)){ resolve({ok:false, skipped:'duplicate'}); return; } var tp = (ea.templates && ea.templates[ev]) || {}, d = MAILDEF[ev] || {subject:'', body:''}; var site = mlStr(R.siteName) || 'Website'; var v = {}; for(var k in (vars || {})){ if(Object.prototype.hasOwnProperty.call(vars, k)) v[String(k).toLowerCase()] = vars[k]; } if(!('site_name' in v)) v.site_name = site; // a template that already composed the e-mail (its own wording / design) passes subject + message (+ html) var subject = (mlStr(opts.subject).trim() ? mlStr(opts.subject) : mlFill(mlStr(tp.subject).trim() ? tp.subject : d.subject, v)).replace(/\s+/g, ' ').trim().slice(0, 200); var message = mlStr(opts.message).trim() ? mlStr(opts.message).slice(0, 50000) : mlFill(mlStr(tp.body).trim() ? tp.body : d.body, v); var html = mlStr(opts.html).trim() && mlStr(opts.html).length < 150000 ? mlStr(opts.html) : mlHtml(message, site); var job = {ev: ev, to: to, toName: mlStr(opts.toName).slice(0, 120), subject: subject, message: message, html: html, orderId: mlStr(opts.orderId).slice(0, 80), at: Date.now(), tries: 0, dd: opts.orderId ? dd : ''}; if(opts.orderId) mlMark(dd); // a second call for the same order while this one runs is a duplicate mlSend(job).then(function(r){ if(!r.ok && r.transient) mlQueue(job); resolve(r.ok ? {ok:true, messageId: r.messageId, ms: r.ms, attempts: r.attempts, mode: r.mode} : {ok:false, error: r.error, code: r.code, status: r.status, ms: r.ms, attempts: r.attempts, mode: r.mode, queued: !!r.transient}); }, function(e){ resolve({ok:false, error: mlStr(e && e.message || e)}); }); }catch(e){ resolve({ok:false, error: mlStr(e && e.message || e)}); } }); } function sendMails(list){ var jobs = (list || []).map(function(x){ return sendMail(x && x.event, x && x.vars, x && x.opts); }); if(typeof Promise.allSettled === 'function') return Promise.allSettled(jobs); return Promise.all(jobs.map(function(p){ return p.then(function(v){ return {status:'fulfilled', value:v}; }); })); } function getMailConnection(){ var c = mlConn(); return {mode: c.mode, ready: c.ready, senderEmail: c.senderEmail}; } try{ W.addEventListener('online', function(){ setTimeout(mlFlush, 500); }); }catch(e){} setTimeout(mlFlush, 3000); // Version beacon (Customer page only): which version runs where. At most once an hour per version, best effort, silent. function beacon(){ try{ if(ROLE !== 'public' || !R.siteUid || !W.fetch) return; var loc = W.location, b = mlCentral(); if(!b || !/^https?:$/.test(loc.protocol) || !loc.host) return; var last = mlLS('nx_beacon') || {}, vid = mlStr(R.templateVersionId); if(last.v === vid && last.o === loc.origin && Date.now() - (Number(last.at) || 0) < 3600000) return; mlLS('nx_beacon', {v: vid, o: loc.origin, at: Date.now()}); W.fetch(b + '/siteBeacon/' + encodeURIComponent(UID) + '.json', {method:'PUT', body: JSON.stringify({versionId: vid, version: mlStr(R.templateVersion), origin: loc.origin, at: Date.now()}), keepalive:true}).catch(function(){}); }catch(e){} } setTimeout(beacon, 1500); /* ---- 5. public API for templates ---- */ var api = { runtime: R, nsPath: nsPath, getStatus: function(){ return {status: state.status, reason: state.reason, message: state.message}; }, onStatus: function(cb){ if(typeof cb === 'function'){ subs.push(cb); try{ cb(api.getStatus()); }catch(e){} } }, isAdminUnlocked: function(){ return !!state.unlocked; }, currentAdmin: function(){ return state.user; }, signOut: function(){ try{ gateApp.auth().signOut().then(function(){ location.reload(); }); }catch(e){ location.reload(); } }, // v7.4.0.93 — live features of this website (Super Admin → Upgrade with Website). productLimit -1 = unlimited. getFeatures: function(){ return featCopy(R.features || FEAT_DEFAULT); }, onFeatures: function(cb){ if(typeof cb === 'function'){ featSubs.push(cb); try{ cb(featCopy(R.features || FEAT_DEFAULT), R.upgradeTier || 'normal'); }catch(e){} } }, getUpgradeTier: function(){ return R.upgradeTier || 'normal'; }, // v7.4.0.94 — this website's Gmail Automation settings (set only by the Super Admin; null = not set) getEmailAutomation: function(){ return R.emailAutomation ? featCopy(R.emailAutomation) : null; }, // v7.4.0.96 (e11) — the website's e-mail engine (see 4b) sendMail: sendMail, sendMails: sendMails, getMailConnection: getMailConnection, openUpgrade: function(){ upOpen(); }, // v7.4.0.101 — this website's bill (read-only) + live updates (called once at once, then on every change) getBilling: function(){ return billCopy(); }, onBilling: function(cb){ if(typeof cb === 'function'){ billSubs.push(cb); try{ cb(billCopy()); }catch(e){} } }, refreshBilling: function(){ fetchCentral(); } }; W.NexusSite = api; /* ---- 6. start ---- */ var cached = readCache(); if(cached && cached.at && R.builtAt && cached.at > R.builtAt && SEV[cached.status] !== undefined){ centralEff = {status: cached.status, reason: cached.reason || null, message: cached.message || ''}; } apply(); fetchCentral(); setInterval(fetchCentral, Math.max(15, Math.min(30, Number(R.pollSec) || 30)) * 1000); D.addEventListener('visibilitychange', function(){ if(!D.hidden) fetchCentral(); }); if(ROLE === 'admin'){ lockPage(); onReady(gateStart); } })();}