Upload admin.html

admin.html

@@ -225,7 +225,17 @@ let MOVIE_FN=MV_SRC[msrc].fn;
 let MOVIE_ANON=MV_SRC[msrc].anon;
 const ABS_KEY='jaynestv'; // x-admin-key ya movie-public2 (sync)
 // x-admin-key kwa kila chanzo cha filamu: mpya (MP4) = jaynestv, Absalom = jaynestv, za zamani = jaynes (project nyingine, haijathibitishwa)
-const MV_KEYS={new:'jaynestv',old:'jaynes',absalom:ABS_KEY};
+const MV_KEYS={new:sget('mvk_new')||'jaynestv',old:sget('mvk_old')||'jaynes',absalom:sget('mvk_absalom')||ABS_KEY};
+/* x-admin-key ikikataliwa (401): jaribu funguo nyingine, kisha ukumbuke ile inayofaa (ikishindikana zote, uliza mara moja) */
+(()=>{const _f=window.fetch.bind(window),CAND=['jaynestv','jaynes-max-tv','jaynes'];let asked=false;
+window.fetch=async(url,opt={})=>{const r=await _f(url,opt),h=opt&&opt.headers;
+  if(r.status!==401||!h||!h['x-admin-key']||!/functions\/v1\/(movie-|jaynes-max-tv-zilizotafsiriwa)/.test(String(url)))return r;
+  const keys=CAND.filter(k=>k!==h['x-admin-key']);
+  for(let i=0;i<=keys.length;i++){let k=keys[i];
+    if(i===keys.length){if(asked)break;asked=true;k=(prompt('x-admin-key ya '+String(url).split('?')[0].split('/').pop()+' (thamani ya secret kwenye Supabase):')||'').trim();if(!k)break}
+    const r2=await _f(url,{...opt,headers:{...h,'x-admin-key':k}});
+    if(r2.status!==401){MV_KEYS[msrc]=k;sset('mvk_'+msrc,k);return r2}}
+  return r}})();
 const CONTENT_URL='https://ooqvsqmsnwjqvuzbhczx.supabase.co'; // backend ya app (filamu, live TV, mechi)
 const CONTENT_KEY=HOME_FN.anon;