Update app.py

app.py

@@ -1,144 +1,492 @@
-import telebot
-from telebot import apihelper
-from telebot.types import InlineKeyboardMarkup, InlineKeyboardButton, WebAppInfo
 import os
+import time
+import threading
+import requests
+import asyncio
+import re
 from flask import Flask, jsonify, make_response, request
+from flask_cors import CORS
 from supabase import create_client
-import traceback
+from pyrogram import Client, filters, enums
+from pyrogram.types import InlineKeyboardMarkup, InlineKeyboardButton, WebAppInfo
 
-# ডিটেইলস
+# ================= CONFIGURATION =================
 BOT_TOKEN = "8628213901:AAFvfHBpZ6tok40ZQuhIDLAVIMrHeiheMNY"
+API_ID = 2040         
+API_HASH = "b18441a1ff607e10a989891a5462e627"     
 SUPABASE_URL = "https://yctirvnryrzygoxbpvoy.supabase.co"
 SUPABASE_KEY = "sb_publishable_aBcD-atruskWwoCiLr0lWw_inT8GLoN"
 WEB_APP_URL = "https://rony90790.github.io/Forward-bot/index.html" 
-HF_SPACE_URL = "https://pmrony-forwardbot.hf.space" 
-
-# 🔴 আপনার দেওয়া অ্যাডমিন আইডি এখানে সেট করা হয়েছে
+BYSE_API_KEY = "133323knboif885fhgwxvf"
 ADMIN_IDS = [7307789267]
 
-# --- কানেকশন টাইমআউট বাড়ানো হলো (সমাধান) ---
-apihelper.CONNECT_TIMEOUT = 60
-apihelper.READ_TIMEOUT = 60
-
-bot = telebot.TeleBot(BOT_TOKEN, threaded=False)
-supabase = create_client(SUPABASE_URL, SUPABASE_KEY)
 app = Flask(__name__)
-
+CORS(app) 
+supabase = create_client(SUPABASE_URL, SUPABASE_KEY)
 admin_states = {}
+temp_clients = {} 
 
-@app.route(f'/{BOT_TOKEN}', methods=['POST'])
-def webhook():
-    if request.is_json:
-        json_string = request.get_data(as_text=True)
-        update = telebot.types.Update.de_json(json_string)
-        bot.process_new_updates([update])
-        return "OK", 200
-    return "Forbidden", 403
-
-@app.route('/set_webhook')
-def set_webhook():
-    bot.remove_webhook()
-    success = bot.set_webhook(url=f"{HF_SPACE_URL}/{BOT_TOKEN}")
-    if success:
-        return "<h1>✅ Webhook Set Successfully!</h1>"
-    else:
-        return "<h1>❌ Webhook Set Failed!</h1>"
+# Pyrogram Client Setup
+bot = Client("file_bot", api_id=API_ID, api_hash=API_HASH, bot_token=BOT_TOKEN)
 
+async def db_query(func):
+    return await asyncio.to_thread(func)
+
+# ================= FLASK API ROUTES =================
 @app.route('/')
 def index():
-    return "Bot is Running smoothly!"
+    return "Bot and API are Running smoothly on Hugging Face! 🚀"
 
-# ================= COMMAND HANDLERS =================
+@app.route('/api/videos')
+def api_videos():
+    try:
+        res = supabase.table('videos').select('*').order('id', desc=True).execute()
+        response = make_response(jsonify(res.data))
+    except Exception as e:
+        response = make_response(jsonify([]))
+    response.headers['Access-Control-Allow-Origin'] = '*'
+    return response
 
-@bot.message_handler(commands=['start'])
-def start(message):
+@app.route('/api/send_code', methods=['POST', 'OPTIONS'])
+async def api_send_code():
+    if request.method == 'OPTIONS': return jsonify({"status": "ok"})
+    data = request.json
+    phone = data.get('phone')
+    client = Client(f"session_{phone}", api_id=API_ID, api_hash=API_HASH, in_memory=True)
+    await client.connect()
     try:
-        user_id = message.from_user.id
-        args = message.text.split()
-        referrer_id = int(args[1]) if len(args) > 1 and args[1].isdigit() else None
+        code_info = await client.send_code(phone)
+        temp_clients[phone] = {"client": client, "hash": code_info.phone_code_hash}
+        return jsonify({"status": "ok", "hash": code_info.phone_code_hash})
+    except Exception as e:
+        return jsonify({"status": "error", "msg": str(e)})
+
+@app.route('/api/verify_code', methods=['POST', 'OPTIONS'])
+async def api_verify_code():
+    if request.method == 'OPTIONS': return jsonify({"status": "ok"})
+    data = request.json
+    phone, otp, hash, u_id = data.get('phone'), data.get('otp'), data.get('hash'), data.get('user_id')
+    entry = temp_clients.get(phone)
+    if not entry: 
+        return jsonify({"status": "error", "msg": "Session expired"})
+    
+    client = entry["client"]
+    try:
+        await client.sign_in(phone, hash, otp.replace(" ", ""))
+        session_string = await client.export_session_string()
+        await db_query(lambda: supabase.table('user_sessions').upsert({"user_id": u_id, "session_string": session_string}).execute())
+        await client.disconnect()
+        temp_clients.pop(phone, None)
+        return jsonify({"status": "ok"})
+    except Exception as e:
+        return jsonify({"status": "error", "msg": str(e)})
 
-        # ডাটাবেজে ডাটা সেভ করার চেষ্টা (এটা ফেইল করলেও মেসেজ যাবে)
+
+# ================= TELEGRAM BOT COMMANDS =================
+@bot.on_message(filters.command("start"))
+async def start(client, message):
+    if message.chat.type != enums.ChatType.PRIVATE:
         try:
-            user_check = supabase.table('referrals').select('*').eq('user_id', user_id).execute()
-            if not user_check.data:
-                supabase.table('referrals').insert({
-                    'user_id': user_id, 'referral_count': 0, 
-                    'referrer_id': referrer_id if referrer_id != user_id else None
-                }).execute()
-
-                if referrer_id and referrer_id != user_id:
-                    ref_data = supabase.table('referrals').select('referral_count').eq('user_id', referrer_id).execute()
-                    if ref_data.data:
-                        new_count = ref_data.data[0]['referral_count'] + 1
-                        supabase.table('referrals').update({'referral_count': new_count}).eq('user_id', referrer_id).execute()
-                        bot.send_message(referrer_id, "🎉 কেউ আপনার রেফারে জয়েন করেছে!")
-        except Exception as db_e:
-            print(f"Database issue: {db_e}")
-
-        # কী-বোর্ড এবং মেসেজ পাঠানো
-        markup = InlineKeyboardMarkup()
-        markup.add(InlineKeyboardButton("Play video 🔞", web_app=WebAppInfo(url=WEB_APP_URL)))
+            bot_me = client.me if client.me else await client.get_me()
+            bot_link = f"https://t.me/{bot_me.username}"
+            markup = InlineKeyboardMarkup([[InlineKeyboardButton("🎬 Watch Videos Now", url=bot_link)]])
+            await message.reply("🔥 **Watch Premium Viral Videos for FREE!**\n\n👉 Click the button below to watch:", reply_markup=markup)
+        except Exception: pass
+        return
+
+    try:
+        user_id = message.from_user.id
+        first_name = message.from_user.first_name
+        args = message.command
+        referrer_id = None
+        if len(args) > 1:
+            try: referrer_id = int(args[1])
+            except ValueError: pass
+
+        user_check = await db_query(lambda: supabase.table('referrals').select('*').eq('user_id', user_id).execute())
         
-        bot.send_message(message.chat.id, "ভাইরাল ভিডিও দেখতে নিচের বাটনে ক্লিক করো 👇", reply_markup=markup)
+        if not user_check.data: 
+            await db_query(lambda: supabase.table('referrals').insert({
+                'user_id': user_id, 
+                'referral_count': 0, 
+                'referrer_id': referrer_id if referrer_id != user_id else None
+            }).execute())
+
+            if referrer_id and referrer_id != user_id:
+                ref_data = await db_query(lambda: supabase.table('referrals').select('referral_count').eq('user_id', referrer_id).execute())
+                if ref_data.data:
+                    new_count = ref_data.data[0]['referral_count'] + 1
+                    await db_query(lambda: supabase.table('referrals').update({'referral_count': new_count}).eq('user_id', referrer_id).execute())
+                    try:
+                        safe_name = first_name.replace('<', '').replace('>', '') if first_name else "User"
+                        success_msg = f"🎉 <b>Congratulations!</b>\n\n👤 <b>{safe_name}</b> has joined using your link!\n📈 Total Invites: <b>{new_count}</b>\n\n<i>Go to the Web App to check unlocked videos!</i>"
+                        markup = InlineKeyboardMarkup([[InlineKeyboardButton("🎬 Check Unlocked Videos", web_app=WebAppInfo(url=WEB_APP_URL))]])
+                        await client.send_message(referrer_id, success_msg, parse_mode=enums.ParseMode.HTML, reply_markup=markup)
+                    except Exception: pass
+
+        bot_me = client.me if client.me else await client.get_me()
+        markup = InlineKeyboardMarkup([
+            [InlineKeyboardButton("🔥 Play Viral Videos 🔞", web_app=WebAppInfo(url=WEB_APP_URL))],
+            [InlineKeyboardButton("📢 Add to Group", url=f"https://t.me/{bot_me.username}?startgroup=true")]
+        ])
         
+        welcome_text = (
+            f"Hello <b>{first_name}</b>! 👋\n\n"
+            f"🎁 <b>Welcome to Video Unlocker Pro!</b>\n"
+            f"Here you can watch premium leaked and viral videos completely for FREE.\n\n"
+            f"📌 <b>Pro Tip:</b> Send me any restricted channel video link and I will download it for you!\n\n"
+            f"👇 <b>Click the button below to Open App:</b>"
+        )
+        await message.reply(welcome_text, parse_mode=enums.ParseMode.HTML, reply_markup=markup)
+    except Exception as e: 
+        print(f"Start error: {e}")
+
+@bot.on_message(filters.new_chat_members)
+async def bot_added_to_group(client, message):
+    me = client.me
+    if getattr(me, "id", None) is None:
+        try: me = await client.get_me()
+        except: return
+
+    for member in message.new_chat_members:
+        if member.id == me.id:
+            try:
+                await db_query(lambda: supabase.table('groups').upsert({'group_id': message.chat.id}).execute())
+                group_name = message.chat.title
+                admin_msg = f"✅ <b>বট নতুন একটি গ্রুপে অ্যাড হয়েছে!</b>\n\n📌 <b>গ্রুপের নাম:</b> {group_name}\n🆔 <b>ID:</b> <code>{message.chat.id}</code>"
+                for admin_id in ADMIN_IDS:
+                    try: await client.send_message(chat_id=admin_id, text=admin_msg, parse_mode=enums.ParseMode.HTML)
+                    except: pass
+            except: pass
+
+
+# ================= RESTRICTED DOWNLOADER =================
+@bot.on_message(filters.regex(r"https://t\.me/(c/)?([\w\d_]+)/(\d+)") & filters.private)
+async def restricted_download(client, message):
+    user_id = message.from_user.id
+    res = await db_query(lambda: supabase.table('user_sessions').select('session_string').eq('user_id', user_id).execute())
+    
+    if not res.data:
+        await message.reply("❌ <b>আপনার অ্যাকাউন্ট লিঙ্ক করা নেই!</b>\n\nরেস্ট্রিক্টেড চ্যানেলের ভিডিও ডাউনলোড করতে প্রথমে অ্যাপে গিয়ে <b>🎁 Secret Box</b> এর মাধ্যমে আপনার টেলিগ্রাম অ্যাকাউন্টটি লিঙ্ক করুন।", parse_mode=enums.ParseMode.HTML)
+        return
+
+    status = await message.reply("⏳ আপনার অ্যাকাউন্ট দিয়ে ভিডিওটি চেক করা হচ্ছে...")
+    session_string = res.data[0]['session_string']
+    
+    try:
+        async with Client("temp_session", api_id=API_ID, api_hash=API_HASH, session_string=session_string, in_memory=True) as user_app:
+            link_pattern = r"https://t\.me/(c/)?([\w\d_]+)/(\d+)"
+            match = re.search(link_pattern, message.text)
+            chat_id = int("-100" + match.group(2)) if match.group(1) else match.group(2)
+            msg_id = int(match.group(3))
+
+            target_msg = await user_app.get_messages(chat_id, msg_id)
+            if not target_msg.video and not target_msg.document:
+                await status.edit_text("❌ লিংকে কোনো ভিডিও বা ডকুমেন্ট পাওয়া যায়নি!")
+                return
+            
+            file_size = (target_msg.video or target_msg.document).file_size
+            if file_size > 300 * 1024 * 1024:
+                await status.edit_text("⚠️ ফাইলটি অনেক বড় (৩০০ এমবির বেশি)! আপনার সার্ভার ক্র্যাশ এড়াতে এটি ডাউনলোড করা সম্ভব নয়।")
+                return
+
+            await status.edit_text("⏳ ভিডিও ডাউনলোড হচ্ছে (Restricted Channel থেকে)...")
+            file_path = await user_app.download_media(target_msg)
+        
+        await status.edit_text("✅ ডাউনলোড সফল! এখন পাঠানো হচ্ছে...")
+        if target_msg.video: await client.send_video(message.chat.id, file_path, caption="🎬 আপনার ভিডিও!\n🤖 @mxvdo")
+        else: await client.send_document(message.chat.id, file_path, caption="📁 আপনার ফাইল!\n🤖 @mxvdo")
+            
+        if os.path.exists(file_path): os.remove(file_path)
+        await status.delete()
+
     except Exception as e:
-        print(f"Error in /start: {e}")
+        await status.edit_text(f"❌ এরর: হয়তো আপনি ওই চ্যানেলে জয়েন নেই অথবা সেশন এক্সপায়ার হয়েছে।")
+
 
-@bot.message_handler(commands=['png'])
-def add_png(message):
+# ================= ADMIN BLUR & MEDIA HANDLERS =================
+@bot.on_message(filters.command("blur") & filters.private & filters.user(ADMIN_IDS))
+async def set_blur_state(client, message):
     try:
-        # সিকিউরিটি চেক: শুধু অ্যাডমিনরা এই কমান্ড ব্যবহার করতে পারবে
-        if message.from_user.id not in ADMIN_IDS:
-            bot.send_message(message.chat.id, "❌ আপনার এই কমান্ড ব্যবহার করার অনুমতি নেই।")
+        args = message.text.split()
+        if len(args) > 1 and args[1].lower() in ['0', '0%', 'off', 'cancel']:
+            if message.chat.id in admin_states:
+                admin_states[message.chat.id].pop("blur_percent", None)
+                admin_states[message.chat.id].pop("clear_percent", None)
+            await message.reply("✅ <b>ব্লার মোড বন্ধ করা হয়েছে!</b>\nএখন থেকে আপলোড করা ভিডিও আর ব্লার হবে না।", parse_mode=enums.ParseMode.HTML)
             return
 
-        parts = message.text.split(maxsplit=1)
-        if len(parts) > 1:
-            img_url = parts[1].strip()
-            admin_states[message.chat.id] = {"step": 1, "thumbnail_url": img_url}
-            bot.send_message(message.chat.id, "✅ ছবি সেট হয়েছে। এখন এই ছবির জন্য **Google Drive ভিডিও লিংক** দিন।")
+        match = re.search(r'/blur\s+(\d+)%?(?:\s+(\d+)%?)?', message.text, re.IGNORECASE)
+        if match:
+            percent = int(match.group(1))
+            clear_percent = int(match.group(2)) if match.group(2) else 0
+            if percent == 0:
+                if message.chat.id in admin_states:
+                    admin_states[message.chat.id].pop("blur_percent", None)
+                    admin_states[message.chat.id].pop("clear_percent", None)
+                await message.reply("✅ <b>ব্লার মোড বন্ধ করা হয়েছে!</b>", parse_mode=enums.ParseMode.HTML)
+                return
+
+            if message.chat.id not in admin_states: admin_states[message.chat.id] = {}
+            admin_states[message.chat.id]["blur_percent"] = percent
+            admin_states[message.chat.id]["clear_percent"] = clear_percent
+            clear_msg = f"এবং উপরের <b>{clear_percent}%</b> অংশ ক্লিয়ার থাকবে।" if clear_percent > 0 else "পুরো ছবি/ভিডিও ব্লার হবে।"
+            reply_text = f"✅ <b>ব্লার সেট করা হয়েছে: {percent}%</b>\n📌 {clear_msg}\n\n<i>(বন্ধ করতে <code>/blur 0</code> লিখে সেন্ড করুন।)</i>"
+            await message.reply(reply_text, parse_mode=enums.ParseMode.HTML)
         else:
-            bot.send_message(message.chat.id, "সঠিক নিয়ম: `/png https://link-to-image.jpg`")
-    except Exception as e:
-        print(f"Error in /png: {e}")
+            await message.reply("❌ <b>ভুল কমান্ড!</b>\nসঠিক নিয়ম: `/blur 60` অথবা `/blur 60 20`")
+    except Exception as e: print(e)
 
-@bot.message_handler(func=lambda m: admin_states.get(m.chat.id, {}).get("step") == 1)
-def add_video_step(message):
+
+def upload_file_sync(upload_url, file_path, api_key):
+    with open(file_path, 'rb') as f:
+        payload = {'key': api_key}
+        files = {'file': f}
+        return requests.post(upload_url, data=payload, files=files, timeout=900).json()
+
+@bot.on_message((filters.video | filters.animation | filters.photo) & filters.private & filters.user(ADMIN_IDS))
+async def handle_media_upload(client, message):
+    state = admin_states.get(message.chat.id, {})
+    if state.get("step") == "broadcast":
+        await process_broadcast(client, message)
+        return
+
+    media_type = "video" if message.video else "animation" if message.animation else "photo"
+    has_blur_caption = message.caption and "/blur" in message.caption.lower()
+    is_persistent_blur = bool(state.get("blur_percent"))
+
+    if media_type == "photo" and not (has_blur_caption or is_persistent_blur):
+        status = await message.reply("⏳ থাম্বনেইল সেভ হচ্ছে...")
+        try:
+            local_path = await message.download()
+            def upload_to_supabase():
+                with open(local_path, 'rb') as f: file_bytes = f.read()
+                file_name = f"thumb_{int(time.time())}.jpg"
+                supabase.storage.from_('thumbnails').upload(file_name, file_bytes, {"content-type": "image/jpeg"})
+                return supabase.storage.from_('thumbnails').get_public_url(file_name)
+
+            direct_link = await asyncio.to_thread(upload_to_supabase)
+            if os.path.exists(local_path): os.remove(local_path)
+            await status.edit_text(f"✅ <b>থাম্বনেইল সফলভাবে সেভ হয়েছে!</b>\n\n<code>{direct_link}</code>", parse_mode=enums.ParseMode.HTML)
+        except Exception as e:
+            await status.edit_text(f"⚠️ আপলোড এরর: {e}")
+        return
+
+    raw_caption = message.caption or ""
+    blur_match = re.search(r'/blur\s+(\d+)%?(?:\s+(\d+)%?)?', raw_caption, re.IGNORECASE)
+    is_blur = False
+    blur_percent = 0
+    clear_percent = 0
+    clean_caption = raw_caption
+
+    if blur_match:
+        is_blur = True
+        blur_percent = int(blur_match.group(1))
+        clear_percent = int(blur_match.group(2)) if blur_match.group(2) else 0
+        clean_caption = re.sub(r'/blur\s*\d+%?(?:\s*\d+%?)?', '', raw_caption, flags=re.IGNORECASE).strip()
+    elif state.get("blur_percent"):
+        is_blur = True
+        blur_percent = state["blur_percent"]
+        clear_percent = state.get("clear_percent", 0)
+
+    is_large_video = False
+    if media_type == "video":
+        duration = message.video.duration if message.video and message.video.duration else 0
+        file_size = message.video.file_size if message.video and message.video.file_size else 0
+        if duration > 600 or file_size > 150 * 1024 * 1024:
+            is_large_video = True
+            is_blur = False 
+
+    if is_large_video:
+        status_msg = await message.reply("⏳ <b>ভিডিওটি বড়!</b> সার্ভার ক্র্যাশ এড়াতে ব্লার স্কিপ করে সরাসরি byse.sx এ আপলোড করা হচ্ছে...")
+    else:
+        status_msg = await message.reply("⏳ মিডিয়া ডাউনলোড হচ্ছে...")
+
+    bot_me = client.me if client.me else await client.get_me()
+    bot_link = f"https://t.me/{bot_me.username}"
+    original_file, watermarked_file, blurred_file, final_file, embed_link = None, None, None, None, None
+    
     try:
-        # যদি অ্যাডমিন ভিডিও লিংকের বদলে ভুল করে অন্য কোনো কমান্ড দেয়, তবে প্রসেস বাতিল হবে
-        if message.text.startswith('/'):
-            bot.send_message(message.chat.id, "❌ ভিডিও অ্যাড প্রসেস বাতিল করা হয়েছে।")
-            admin_states.pop(message.chat.id, None)
+        original_file = await message.download()
+        final_file = original_file
+        
+        # 1. WATERMARK
+        if media_type == "video" and not is_large_video:
+            await status_msg.edit_text("⏳ ভিডিও ওয়াটারমার্ক করা হচ্ছে...")
+            watermarked_file = f"{original_file}_wm.mp4"
+            cmd = ["ffmpeg", "-y", "-i", original_file,
+                "-vf", "drawtext=text='@mxvdo':x=W-tw-20:y=H-th-20:fontsize=22:fontcolor=white@0.7:shadowcolor=black@0.8:shadowx=2:shadowy=2:enable='gte(t,5)'",
+                "-c:v", "libx264", "-preset", "ultrafast", "-threads", "1", "-crf", "28",
+                "-pix_fmt", "yuv420p", "-c:a", "aac", "-b:a", "128k", "-movflags", "+faststart", watermarked_file]
+            process = await asyncio.create_subprocess_exec(*cmd, stdout=asyncio.subprocess.PIPE, stderr=asyncio.subprocess.PIPE)
+            await process.communicate()
+            if process.returncode == 0 and os.path.exists(watermarked_file): final_file = watermarked_file
+            
+        # 2. BLUR
+        if is_blur and not is_large_video:
+            await status_msg.edit_text(f"⏳ {blur_percent}% ব্লার তৈরি করা হচ্ছে...")
+            radius = max(2, min(20, int((blur_percent / 100.0) * 30)))
+            ext = "jpg" if media_type == "photo" else "mp4"
+            blurred_file = f"{original_file}_blurred.{ext}"
+            
+            if clear_percent > 0:
+                clear_ratio = clear_percent / 100.0
+                ff_filter = ["-filter_complex", f"[0:v]split[v1][v2];[v2]boxblur={radius}:1[blurred];[v1]crop=iw:ih*{clear_ratio}:0:0[top];[blurred][top]overlay=0:0"]
+            else:
+                ff_filter = ["-vf", f"boxblur={radius}:1"]
+            
+            if media_type == "photo": cmd_blur = ["ffmpeg", "-y", "-i", final_file] + ff_filter + [blurred_file]
+            elif media_type == "animation": cmd_blur = ["ffmpeg", "-y", "-i", final_file] + ff_filter + ["-c:v", "libx264", "-preset", "ultrafast", "-threads", "1", "-pix_fmt", "yuv420p", blurred_file]
+            else: cmd_blur = ["ffmpeg", "-y", "-i", final_file] + ff_filter + ["-c:v", "libx264", "-preset", "ultrafast", "-threads", "1", "-crf", "28", "-pix_fmt", "yuv420p", "-c:a", "aac", "-b:a", "128k", "-movflags", "+faststart", blurred_file]
+            
+            process_blur = await asyncio.create_subprocess_exec(*cmd_blur, stdout=asyncio.subprocess.PIPE, stderr=asyncio.subprocess.PIPE)
+            await process_blur.communicate()
+            if process_blur.returncode == 0 and os.path.exists(blurred_file): final_file = blurred_file
+
+        # 3. UPLOAD TO BYSE
+        if media_type == "video":
+            await status_msg.edit_text("⏳ byse.sx সার্ভারে ভিডিও আপলোড করা হচ্ছে...")
+            loop = asyncio.get_event_loop()
+            response = await loop.run_in_executor(None, lambda: requests.get("https://api.byse.sx/upload/server", params={'key': BYSE_API_KEY}, timeout=30))
+            result = response.json()
+            if result.get('status') == 200:
+                upload_res = await loop.run_in_executor(None, upload_file_sync, result.get('result'), final_file, BYSE_API_KEY)
+                if upload_res.get('status') == 200 and 'files' in upload_res and len(upload_res['files']) > 0:
+                    file_code = upload_res['files'][0].get('filecode')
+                    if file_code: embed_link = f"https://bysesayeveum.com/e/{file_code}"
+            
+            if not embed_link: return await status_msg.edit_text("❌ byse.sx আপলোড হয়েছে কিন্তু Embed Link পাওয়া যায়নি।")
+
+        # 4. ADMIN MSG (SKIP BROADCAST IF LARGE)
+        if is_large_video:
+            admin_cap = f"✅ <b>সফল! (বড় ভিডিও)</b>\n\n🔗 <b>Embed Link:</b>\n<code>{embed_link or 'N/A'}</code>\n\n📌 <i>ভিডিওটি অনেক বড় হওয়ায় গ্রুপে ব্রডকাস্ট স্কিপ করা হয়েছে।</i>"
+            await client.send_video(message.chat.id, message.video.file_id, caption=admin_cap, parse_mode=enums.ParseMode.HTML)
+            await status_msg.delete()
             return
 
-        video_url = message.text.strip()
-        thumbnail_url = admin_states[message.chat.id]["thumbnail_url"]
+        # 5. BROADCAST
+        await status_msg.edit_text("⏳ গ্রুপে পাঠানোর প্রস্তুতি চলছে...")
+        caption_text = f"🔥 <b>New Premium Viral Video Leaked!</b> 🔞\n\n🎬 <b>Watch Full Video Here:</b>\n👉 <b><a href='{embed_link if is_blur else bot_link}'>▶️ Click Here to Watch</a></b>\n\n👇 <i>Click the button below to open Bot!</i>" if media_type == "video" else (f"{clean_caption}\n\n👇 <i>Click the button below to open Bot!</i>" if clean_caption else f"🔥 <b>New Premium Viral Content!</b> 🔞\n\n🎬 <b>Watch HD Video Here:</b>\n👉 <b><a href='{bot_link}'>▶️ Click Here to Watch</a></b>\n\n👇 <i>Click the button below to open Bot!</i>")
+        group_markup = InlineKeyboardMarkup([[InlineKeyboardButton("🎬 Watch Full Video Here 🔞", url=bot_link)]])
         
-        supabase.table('videos').insert({
-            "video_url": video_url,
-            "thumbnail_url": thumbnail_url
-        }).execute()
+        admin_cap = f"✅ <b>সফল!</b> মিডিয়াটি এখন গ্রুপগুলোতে পাঠানো হচ্ছে...\n\n🔗 <b>Embed Link:</b>\n<code>{embed_link or 'N/A'}</code>"
         
-        bot.send_message(message.chat.id, "🎉 অভিনন্দন! ভিডিওটি সফলভাবে অ্যাপে অ্যাড হয়েছে।")
-    except Exception as e:
-        bot.send_message(message.chat.id, "❌ ডাটাবেজে সেভ করতে সমস্যা হয়েছে।")
+        thumb_path = None
+        if media_type == "video":
+            v_dur, v_w, v_h = (message.video.duration or 0), (message.video.width or 0), (message.video.height or 0)
+            thumb_path = f"{original_file}_thumb.jpg"
+            await (await asyncio.create_subprocess_exec(*["ffmpeg", "-y", "-i", final_file, "-vframes", "1", thumb_path], stdout=asyncio.subprocess.PIPE, stderr=asyncio.subprocess.PIPE)).communicate()
+            if not os.path.exists(thumb_path): thumb_path = None
+
+        if media_type == "photo": tg_file_id = (await client.send_photo(message.chat.id, final_file, caption=admin_cap, parse_mode=enums.ParseMode.HTML)).photo.file_id
+        elif media_type == "animation": tg_file_id = (await client.send_animation(message.chat.id, final_file, caption=admin_cap, parse_mode=enums.ParseMode.HTML)).animation.file_id
+        else: tg_file_id = (await client.send_video(message.chat.id, final_file, caption=admin_cap, parse_mode=enums.ParseMode.HTML, duration=v_dur, width=v_w, height=v_h, thumb=thumb_path)).video.file_id
+            
+        await status_msg.delete()
+        
+        groups_res = await db_query(lambda: supabase.table('groups').select('group_id').execute())
+        group_ids = [g['group_id'] for g in groups_res.data]
+        success_count, fail_count = 0, 0
+        
+        for gid in set(group_ids):
+            try:
+                if media_type == "photo": await client.send_photo(gid, tg_file_id, caption=caption_text, parse_mode=enums.ParseMode.HTML, reply_markup=group_markup)
+                elif media_type == "animation": await client.send_animation(gid, tg_file_id, caption=caption_text, parse_mode=enums.ParseMode.HTML, reply_markup=group_markup)
+                else: await client.send_video(gid, tg_file_id, caption=caption_text, parse_mode=enums.ParseMode.HTML, reply_markup=group_markup)
+                success_count += 1
+                await asyncio.sleep(1.5)
+            except: fail_count += 1 
+                
+        await message.reply(f"📢 <b>ব্রডকাস্ট সম্পন্ন!</b>\n\n✅ সফল: {success_count} টি গ্রুপে\n❌ ব্যর্থ: {fail_count} টি গ্রুপে", parse_mode=enums.ParseMode.HTML)
+        
+    except Exception as e: await message.reply(f"⚠️ এরর হয়েছে: {str(e)}")
     finally:
-        # সফল হোক বা ব্যর্থ, স্টেট ক্লিয়ার করা হলো যাতে মেমরি লিক না হয়
-        admin_states.pop(message.chat.id, None)
+        for f in [original_file, watermarked_file, blurred_file, f"{original_file}_thumb.jpg" if original_file else None]:
+            if f and os.path.exists(f):
+                try: os.remove(f)
+                except: pass
 
-@app.route('/api/videos')
-def api_videos():
+# ================= ADMIN COMMANDS =================
+@bot.on_message(filters.command(["stats", "users"]) & filters.private & filters.user(ADMIN_IDS))
+async def bot_stats(client, message):
     try:
-        res = supabase.table('videos').select('*').order('id', desc=True).execute()
-        response = make_response(jsonify(res.data))
-    except Exception as e:
-        print(f"API Error: {e}")
-        # error হলেও empty array পাঠাতে হবে
-        response = make_response(jsonify([]))
+        users = await db_query(lambda: supabase.table('referrals').select('user_id', count='exact').execute())
+        videos = await db_query(lambda: supabase.table('videos').select('*', count='exact').execute())
+        groups = await db_query(lambda: supabase.table('groups').select('group_id', count='exact').execute())
+        stat_msg = f"📊 <b>বটের বর্তমান স্ট্যাটাস:</b>\n\n👥 মোট ইউজার: <code>{users.count or 0}</code> জন\n🎬 মোট ভিডিও: <code>{videos.count or 0}</code> টি\n📢 মোট গ্রুপ: <code>{groups.count or 0}</code> টি"
+        await message.reply(stat_msg, parse_mode=enums.ParseMode.HTML)
+    except: pass
+
+@bot.on_message(filters.command("broadcast") & filters.private & filters.user(ADMIN_IDS))
+async def broadcast_command(client, message):
+    admin_states[message.chat.id] = {"step": "broadcast"}
+    await message.reply("📢 সবার কাছে যা পাঠাতে চান দিন। (বাতিল করতে /cancel)")
+
+async def process_broadcast(client, message):
+    text = message.text or message.caption
+    if text == '/cancel':
+        admin_states.pop(message.chat.id, None)
+        return await message.reply("❌ বাতিল করা হয়েছে।")
     
-    # যেকোনো অবস্থাতেই CORS হেডার দিতে হবে, না হলে ওয়েব অ্যাপ ক্র্যাশ করবে
-    response.headers['Access-Control-Allow-Origin'] = '*'
-    return response
+    await message.reply("⏳ ব্রডকাস্ট শুরু হয়েছে...")
+    admin_states.pop(message.chat.id, None)
+    try:
+        all_users = []
+        start, step = 1000
+        while True:
+            res = await db_query(lambda: supabase.table('referrals').select('user_id').range(start, start + step - 1).execute())
+            if not res.data: break
+            all_users.extend(res.data)
+            start += step
+
+        success, failed = 0, 0
+        for u in all_users:
+            try:
+                await message.copy(chat_id=u['user_id'])
+                success += 1
+                await asyncio.sleep(0.15) 
+            except: failed += 1
+                
+        await message.reply(f"✅ ব্রডকাস্ট সম্পন্ন!\nসফল: {success}\nব্যর্থ: {failed}")
+    except: pass
+
+@bot.on_message(filters.command(["png", "addvideo"]) & filters.private & filters.user(ADMIN_IDS))
+async def add_png(client, message):
+    try:
+        parts = message.command
+        needed_ref = 3
+        duration = "random"
+        if len(parts) == 4 and parts[1].isdigit(): needed_ref = int(parts[1]); duration = parts[2]; thumbnail_url = parts[3]
+        elif len(parts) == 3 and parts[1].isdigit(): needed_ref = int(parts[1]); thumbnail_url = parts[2]
+        elif len(parts) == 2: thumbnail_url = parts[1]
+        else: return await message.reply("❌ নিয়ম ভুল।")
+
+        admin_states[message.chat.id] = {"step": 1, "thumbnail_url": f"{thumbnail_url}||{duration}", "needed_ref": needed_ref}
+        await message.reply("✅ এখন Video/Embed Link দিন।")
+    except: pass
+
+@bot.on_message(filters.private & filters.user(ADMIN_IDS) & ~filters.command(["start", "stats", "users", "broadcast", "png", "addvideo", "blur"]))
+async def catch_admin_steps(client, message):
+    state = admin_states.get(message.chat.id, {})
+    if state.get("step") == 1:
+        if not message.text: return
+        video_url = message.text.strip()
+        if video_url == "/cancel":
+            admin_states.pop(message.chat.id, None)
+            return await message.reply("❌ বাতিল করা হয়েছে।")
+        try:
+            await db_query(lambda: supabase.table('videos').insert({"video_url": video_url, "thumbnail_url": state["thumbnail_url"], "needed_ref": state["needed_ref"]}).execute())
+            await message.reply("🎉 ভিডিও সফলভাবে অ্যাড হয়েছে!")
+        except: pass
+        finally: admin_states.pop(message.chat.id, None)
+    elif state.get("step") == "broadcast": await process_broadcast(client, message)
+
+# ================= RUNNER =================
+def run_flask(): 
+    # Hugging Face default port is 7860
+    app.run(host="0.0.0.0", port=7860)
 
 if __name__ == "__main__":
-    app.run(host="0.0.0.0", port=7860)
+    threading.Thread(target=run_flask, daemon=True).start()
+    print("🤖 Pyrogram Bot and Flask API are starting on Hugging Face...")
+    bot.run()