[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_269":270,"_271":272},"routes/_app.x.$handle.$name",{"_106":105,"_32":51,"_114":96,"_27":108,"_13":14,"_115":-5,"_11":116,"_117":118,"_119":120,"_121":122,"_123":124,"_21":-5,"_125":-5,"_126":-5,"_127":25,"_128":129,"_130":65,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_49":50,"_32":51,"_37":52,"_53":-5,"_54":25,"_55":56,"_57":56,"_58":59,"_60":-5,"_18":61,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":-5,"_79":80,"_81":80,"_82":83,"_84":83,"_85":83,"_86":80,"_87":80,"_88":89,"_90":91,"_92":93,"_94":25},"version",10,"changes",[19,20],"aiChatInfo","userId",{"_21":42,"_23":-7,"_24":25,"_26":25,"_27":43,"_29":43},{"_21":22,"_23":-7,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":-5,"_37":38,"_39":14,"_40":41,"_24":25},"previous","deleted",false,"deletedHere","path","backend/middleware","latestPath","fileId","6b001f32-8ae5-4b85-89b5-e784270035c0","name","middleware","fileType","directory","content","createdAt",["D",1788192061434],"branchVersion","branchId","59c640c1-d555-4902-a8d3-71ace8a5e5c4",{"_30":44,"_32":45,"_34":46,"_36":47,"_37":48,"_39":14,"_40":41,"_24":25},"backend/middleware/auth.ts","29a1fe98-a555-11f1-9f75-1607ee4eb77e","auth.ts","script","import type { Context, Next } from \"npm:hono@4\";\nimport { getSessionFromCookie } from \"../lib/auth.ts\";\n\nexport interface AuthedVariables {\n userId: number;\n username: string;\n}\n\nexport type AppEnv = { Variables: AuthedVariables };\n\n/** Exige une session valide ; répond 401 sinon. */\nexport async function requireAuth(c: Context, next: Next) {\n const session = await getSessionFromCookie(c.req.header(\"cookie\") ?? null);\n if (!session) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n c.set(\"userId\", session.userId);\n c.set(\"username\", session.username);\n await next();\n}\n",["D",1788192061434],"id","6626b8d6-3420-4848-8c35-d06d05fe18fd","menu-planner",["D",1788191950718],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Planificateur de menus pour un foyer avec IA","imageUrl","d66aba55-2367-403a-a570-71cd1c762bc0","pinnedFileId","faba7e02-a554-11f1-9530-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a05825-cbf0-705e-9846-aecf6611a871","tursoName","6626b8d6342048488c35d06d05fe18fd","tursoHostname","6626b8d6342048488c35d06d05fe18fd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789497078049],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_106":105,"_113":108},"org",{"_106":105,"_107":108,"_109":108,"_18":61,"_110":111,"_112":25},"branch",{"_13":95,"_32":96,"_49":41,"_97":50,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":-5,"_103":51,"_104":105},"isOwned",82,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","Antoine07","handle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_49":50,"_32":51,"_37":264,"_53":-5,"_54":25,"_55":56,"_57":56,"_58":59,"_60":-5,"_18":61,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":75,"_76":265,"_78":-5,"_79":80,"_81":80,"_82":83,"_84":83,"_85":83,"_86":80,"_87":80,"_88":266,"_90":267,"_92":268,"_94":25},"tree",[156],"files",[156,157,158,159,160,161,162,163,164,165,166,167,168,169],"counts",{"_145":69,"_146":140,"_147":69,"_148":149,"_150":151},"contents",[135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_49":136,"_32":137,"_30":138,"_139":-5,"_40":41,"_39":140,"_141":65,"_37":142,"_13":69,"_34":35,"_36":-5,"_24":25,"_143":-5,"_27":144},"9b96b1fe-dcd9-4982-b1ac-c60845e1241f","backend","843381a2-2df1-475d-b92f-a3a8ce678481","parentId",1,"latest",["D",1788191982713],"label",[137],"pulls","branches","forks","envVars",{"_152":154,"_155":69},"connections",{"_152":69,"_153":69},"count","unfilledCount",3,"emptyCount",{"_49":136,"_32":137,"_30":138,"_139":-5,"_40":41,"_39":140,"_141":65,"_37":261,"_13":69,"_34":35,"_36":-5,"_24":25,"_143":-5,"_176":262,"_27":263},{"_49":257,"_32":256,"_30":250,"_139":138,"_40":41,"_39":251,"_141":65,"_37":258,"_13":69,"_34":35,"_36":-5,"_24":25,"_143":-5,"_176":259,"_27":260},{"_49":247,"_32":248,"_30":249,"_139":250,"_40":41,"_39":251,"_141":25,"_37":252,"_13":69,"_34":46,"_36":253,"_24":25,"_143":-5,"_176":254,"_27":255},{"_49":243,"_32":196,"_30":190,"_139":138,"_40":41,"_39":154,"_141":65,"_37":244,"_13":69,"_34":35,"_36":-5,"_24":25,"_143":-5,"_176":245,"_27":246},{"_49":237,"_32":45,"_30":238,"_139":190,"_40":41,"_39":154,"_141":65,"_37":239,"_13":69,"_34":46,"_36":240,"_24":25,"_143":-5,"_176":241,"_27":242},{"_49":229,"_32":230,"_30":231,"_139":190,"_40":41,"_39":232,"_141":25,"_37":233,"_13":69,"_34":46,"_36":234,"_24":25,"_143":-5,"_176":235,"_27":236},{"_49":221,"_32":222,"_30":223,"_139":190,"_40":41,"_39":224,"_141":65,"_37":225,"_13":69,"_34":46,"_36":226,"_24":25,"_143":-5,"_176":227,"_27":228},{"_49":213,"_32":214,"_30":215,"_139":190,"_40":41,"_39":216,"_141":65,"_37":217,"_13":69,"_34":46,"_36":218,"_24":25,"_143":-5,"_176":219,"_27":220},{"_49":205,"_32":206,"_30":207,"_139":190,"_40":41,"_39":208,"_141":65,"_37":209,"_13":69,"_34":46,"_36":210,"_24":25,"_143":-5,"_176":211,"_27":212},{"_49":197,"_32":198,"_30":199,"_139":190,"_40":41,"_39":200,"_141":65,"_37":201,"_13":69,"_34":46,"_36":202,"_24":25,"_143":-5,"_176":203,"_27":204},{"_49":187,"_32":188,"_30":189,"_139":190,"_40":41,"_39":191,"_141":65,"_37":192,"_13":69,"_34":46,"_36":193,"_24":25,"_143":-5,"_176":194,"_27":195},{"_49":183,"_32":33,"_30":31,"_139":138,"_40":41,"_39":14,"_141":65,"_37":184,"_13":69,"_34":35,"_36":-5,"_24":25,"_143":-5,"_176":185,"_27":186},{"_49":179,"_32":45,"_30":44,"_139":31,"_40":41,"_39":14,"_141":65,"_37":180,"_13":69,"_34":46,"_36":47,"_24":25,"_143":-5,"_176":181,"_27":182},{"_49":170,"_32":171,"_30":63,"_139":138,"_40":41,"_39":140,"_141":65,"_37":172,"_13":69,"_34":173,"_36":174,"_24":25,"_143":175,"_176":177,"_27":178},"cb965474-f417-4337-951b-3a5afae866bf","index.ts",["D",1788191982713],"http","import { Hono } from \"npm:hono@4\";\nimport { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { ensureSchema } from \"./db/schema.ts\";\nimport { authRoutes } from \"./routes/auth.ts\";\nimport { foyerRoutes } from \"./routes/foyers.ts\";\nimport { memberRoutes } from \"./routes/members.ts\";\nimport { weekRoutes } from \"./routes/weeks.ts\";\nimport { mealRoutes } from \"./routes/meals.ts\";\nimport { shareRoutes } from \"./routes/share.ts\";\nimport { Root } from \"../frontend/root.tsx\";\n\nconst app = new Hono();\n\n// Le schéma est idempotent (CREATE TABLE IF NOT EXISTS) ; on ne le rejoue\n// qu'une fois par instance froide plutôt qu'à chaque requête.\nlet schemaReady: Promise | null = null;\napp.use(\"*\", async (_c, next) => {\n schemaReady ??= ensureSchema();\n await schemaReady;\n await next();\n});\n\napp.route(\"/api/auth\", authRoutes);\napp.route(\"/api/foyers\", foyerRoutes);\napp.route(\"/api/members\", memberRoutes);\napp.route(\"/api/weeks\", weekRoutes);\napp.route(\"/api/meals\", mealRoutes);\napp.route(\"/api/share\", shareRoutes);\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/\", (c) => c.html(Root()));\n// Toute route côté client (ex. /partage/:token) doit servir la même coquille React.\napp.get(\"/partage/:token\", (c) => c.html(Root()));\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","planificateur-menus","children",[],[137,171],"346fa4c2-6e17-4687-a27a-68fcbffd8a41",["D",1788192061434],[],[137,33,45],"657a58f4-aa57-4eb1-910b-f24f9d516a88",["D",1788192061434],[168],[137,33],"f5a42b2f-69ff-41fd-9f2e-f515a8870fe5","shopping.ts","281054da-a555-11f1-aeae-1607ee4eb77e","625001a9-80e0-4b73-81da-267477a3a76f",9,["D",1788192058802],"import type { GeneratedMenu, ShoppingListItem } from \"../../shared/types.ts\";\n\n// Unités regroupées en familles convertibles : on ne peut sommer des\n// quantités que si elles partagent une famille (masse, volume, ou pièce).\n// Tout le reste (cuillère à soupe, pincée, botte, ...) reste \"libre\" et\n// s'affiche séparément plutôt que d'être additionné à tort.\nconst MASS_TO_GRAMS: Record = {\n g: 1,\n gramme: 1,\n grammes: 1,\n kg: 1000,\n kilo: 1000,\n kilos: 1000,\n};\n\nconst VOLUME_TO_ML: Record = {\n ml: 1,\n cl: 10,\n l: 1000,\n litre: 1000,\n litres: 1000,\n};\n\nconst PIECE_UNITS = new Set([\"\", \"piece\", \"pièce\", \"pieces\", \"pièces\", \"unite\", \"unité\"]);\n\nfunction normalizeUnit(unit: string): string {\n return unit.trim().toLowerCase();\n}\n\nfunction normalizeName(name: string): string {\n return name.trim().toLowerCase().replace(/\\s+/g, \" \");\n}\n\n/** Catégories de rayon simples, par mots-clés — pour un tri manuel utile en magasin. */\nconst CATEGORY_KEYWORDS: [string, string[]][] = [\n [\"Fruits & légumes\", [\n \"tomate\", \"carotte\", \"oignon\", \"ail\", \"pomme\", \"banane\", \"salade\", \"courgette\",\n \"poivron\", \"citron\", \"aubergine\", \"champignon\", \"epinard\", \"épinard\", \"brocoli\",\n \"poireau\", \"haricot\", \"concombre\", \"persil\", \"basilic\", \"herbe\",\n ]],\n [\"Viandes & poissons\", [\n \"poulet\", \"boeuf\", \"bœuf\", \"porc\", \"agneau\", \"saumon\", \"poisson\", \"dinde\",\n \"jambon\", \"lardons\", \"crevette\", \"thon\", \"steak\",\n ]],\n [\"Crèmerie\", [\n \"lait\", \"beurre\", \"creme\", \"crème\", \"fromage\", \"yaourt\", \"oeuf\", \"œuf\",\n ]],\n [\"Épicerie\", [\n \"pate\", \"pâte\", \"riz\", \"farine\", \"sucre\", \"sel\", \"poivre\", \"huile\", \"vinaigre\",\n \"conserve\", \"bouillon\", \"epice\", \"épice\", \"sauce\", \"lentille\", \"pois chiche\",\n ]],\n [\"Boulangerie\", [\"pain\", \"baguette\", \"brioche\"]],\n [\"Surgelés\", [\"surgele\", \"surgelé\", \"glace\"]],\n];\n\nfunction guessCategory(ingredientName: string): string {\n const normalized = normalizeName(ingredientName);\n for (const [category, keywords] of CATEGORY_KEYWORDS) {\n if (keywords.some((keyword) => normalized.includes(keyword))) return category;\n }\n return \"Autres\";\n}\n\ninterface Accumulator {\n nom: string;\n categorie: string;\n massGrams: number;\n volumeMl: number;\n pieceCount: number;\n freeQuantities: string[]; // \"2 cuillères à soupe\", etc., non convertibles\n hasMass: boolean;\n hasVolume: boolean;\n hasPiece: boolean;\n}\n\nfunction parseQuantity(raw: string): number | null {\n const normalized = raw.trim().replace(\",\", \".\");\n const value = parseFloat(normalized);\n return Number.isFinite(value) ? value : null;\n}\n\n/**\n * Agrège les ingrédients de plusieurs menus (plat principal uniquement — les\n * alternatives individuelles ne sont pas incluses dans la liste de courses\n * commune, car elles concernent un seul membre et sont affichées à part).\n */\nexport function buildShoppingList(menus: GeneratedMenu[]): ShoppingListItem[] {\n const accumulators = new Map();\n\n for (const menu of menus) {\n for (const ingredient of menu.platPrincipal.ingredients) {\n const key = normalizeName(ingredient.nom);\n if (!accumulators.has(key)) {\n accumulators.set(key, {\n nom: ingredient.nom.trim(),\n categorie: guessCategory(ingredient.nom),\n massGrams: 0,\n volumeMl: 0,\n pieceCount: 0,\n freeQuantities: [],\n hasMass: false,\n hasVolume: false,\n hasPiece: false,\n });\n }\n const acc = accumulators.get(key)!;\n const unit = normalizeUnit(ingredient.unite);\n const qty = parseQuantity(ingredient.quantite);\n\n if (qty !== null && unit in MASS_TO_GRAMS) {\n acc.massGrams += qty * MASS_TO_GRAMS[unit];\n acc.hasMass = true;\n } else if (qty !== null && unit in VOLUME_TO_ML) {\n acc.volumeMl += qty * VOLUME_TO_ML[unit];\n acc.hasVolume = true;\n } else if (qty !== null && PIECE_UNITS.has(unit)) {\n acc.pieceCount += qty;\n acc.hasPiece = true;\n } else {\n acc.freeQuantities.push(`${ingredient.quantite} ${ingredient.unite}`.trim());\n }\n }\n }\n\n const items: ShoppingListItem[] = [];\n for (const acc of accumulators.values()) {\n // Une même ligne peut mélanger une quantité convertie et des quantités\n // libres (ex : \"500g\" + \"1 pincée\") : on émet une ligne principale pour\n // la quantité convertie, et on rattache le reste en quantité libre.\n if (acc.hasMass) {\n const useKg = acc.massGrams >= 1000;\n items.push({\n nom: acc.nom,\n quantite: useKg ? roundTo(acc.massGrams / 1000, 2) : acc.massGrams,\n unite: useKg ? \"kg\" : \"g\",\n categorie: acc.categorie,\n quantiteLibre: null,\n });\n }\n if (acc.hasVolume) {\n const useL = acc.volumeMl >= 1000;\n items.push({\n nom: acc.nom,\n quantite: useL ? roundTo(acc.volumeMl / 1000, 2) : acc.volumeMl,\n unite: useL ? \"L\" : \"ml\",\n categorie: acc.categorie,\n quantiteLibre: null,\n });\n }\n if (acc.hasPiece) {\n items.push({\n nom: acc.nom,\n quantite: acc.pieceCount,\n unite: \"pièce(s)\",\n categorie: acc.categorie,\n quantiteLibre: null,\n });\n }\n for (const free of acc.freeQuantities) {\n items.push({\n nom: acc.nom,\n quantite: null,\n unite: \"\",\n categorie: acc.categorie,\n quantiteLibre: free,\n });\n }\n }\n\n return items.sort((a, b) => {\n if (a.categorie !== b.categorie) return a.categorie.localeCompare(b.categorie, \"fr\");\n return a.nom.localeCompare(b.nom, \"fr\");\n });\n}\n\nexport function shoppingListToText(items: ShoppingListItem[]): string {\n const byCategory = new Map();\n for (const item of items) {\n if (!byCategory.has(item.categorie)) byCategory.set(item.categorie, []);\n byCategory.get(item.categorie)!.push(item);\n }\n const lines: string[] = [];\n for (const [category, categoryItems] of byCategory) {\n lines.push(`## ${category}`);\n for (const item of categoryItems) {\n const qty = item.quantite !== null\n ? `${formatQuantity(item.quantite)} ${item.unite}`.trim()\n : (item.quantiteLibre ?? \"\");\n lines.push(`- ${item.nom} — ${qty}`);\n }\n lines.push(\"\");\n }\n return lines.join(\"\\n\").trim();\n}\n\nfunction formatQuantity(n: number): string {\n return Number.isInteger(n) ? `${n}` : n.toFixed(2);\n}\n\nfunction roundTo(n: number, decimals: number): number {\n const factor = 10 ** decimals;\n return Math.round(n * factor) / factor;\n}\n",[],[137,196,188],"lib","72a641ba-3077-41df-9592-32759a2ef6ef","jwt.ts","1be43f32-a555-11f1-af6d-1607ee4eb77e",8,["D",1788192038382],"// Implémentation minimale de JWT (HS256) avec Web Crypto — pas de dépendance\n// externe. Utilisé pour les cookies de session et les liens de partage de foyer.\n\nfunction base64UrlEncode(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nfunction base64UrlDecode(str: string): Uint8Array {\n const padded = str.replace(/-/g, \"+\").replace(/_/g, \"/\").padEnd(\n str.length + ((4 - (str.length % 4)) % 4),\n \"=\",\n );\n const binary = atob(padded);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes;\n}\n\nasync function getHmacKey(secretName: string): Promise {\n const secret = Deno.env.get(secretName);\n if (!secret) {\n throw new Error(`${secretName} n'est pas configurée (variable d'environnement du val).`);\n }\n return crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\", \"verify\"],\n );\n}\n\nexport async function signJwt(\n payload: Record,\n secretName: string,\n expiresInSeconds?: number,\n): Promise {\n const header = { alg: \"HS256\", typ: \"JWT\" };\n const body = expiresInSeconds\n ? { ...payload, exp: Math.floor(Date.now() / 1000) + expiresInSeconds }\n : payload;\n\n const headerB64 = base64UrlEncode(new TextEncoder().encode(JSON.stringify(header)));\n const bodyB64 = base64UrlEncode(new TextEncoder().encode(JSON.stringify(body)));\n const signingInput = `${headerB64}.${bodyB64}`;\n\n const key = await getHmacKey(secretName);\n const signature = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(signingInput),\n );\n const signatureB64 = base64UrlEncode(new Uint8Array(signature));\n\n return `${signingInput}.${signatureB64}`;\n}\n\nexport async function verifyJwt>(\n token: string,\n secretName: string,\n): Promise {\n const parts = token.split(\".\");\n if (parts.length !== 3) return null;\n const [headerB64, bodyB64, signatureB64] = parts;\n\n try {\n const key = await getHmacKey(secretName);\n const valid = await crypto.subtle.verify(\n \"HMAC\",\n key,\n base64UrlDecode(signatureB64),\n new TextEncoder().encode(`${headerB64}.${bodyB64}`),\n );\n if (!valid) return null;\n\n const payload = JSON.parse(new TextDecoder().decode(base64UrlDecode(bodyB64)));\n if (typeof payload.exp === \"number\" && payload.exp < Math.floor(Date.now() / 1000)) {\n return null; // expiré\n }\n return payload as T;\n } catch {\n return null;\n }\n}\n",[],[137,196,198],"b1c8167d-1abd-44b0-abd6-ec3321d80692","foyerAccess.ts","16fda8fa-a555-11f1-8fbd-1607ee4eb77e",7,["D",1788192030140],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n/** Renvoie le foyer_id auquel l'utilisateur a accès (propriétaire ou invité), ou null. */\nexport async function getAccessibleFoyerId(userId: number): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT foyer_id FROM foyer_access WHERE user_id = ? ORDER BY id ASC LIMIT 1\",\n args: [userId],\n });\n const row = result.rows[0] as unknown as { foyer_id: number } | undefined;\n return row ? row.foyer_id : null;\n}\n\nexport async function userHasFoyerAccess(userId: number, foyerId: number): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT 1 FROM foyer_access WHERE user_id = ? AND foyer_id = ? LIMIT 1\",\n args: [userId, foyerId],\n });\n return result.rows.length > 0;\n}\n",[],[137,196,206],"8ae70c7b-4aec-4556-872b-e202e2d8ac94","dates.ts","1560ab64-a555-11f1-9b2b-1607ee4eb77e",6,["D",1788192027447],"// Helpers de dates — toutes les semaines sont ancrées sur le lundi,\n// au format YYYY-MM-DD (UTC, pour rester stable indépendamment du fuseau du serveur).\n\nfunction toIsoDate(d: Date): string {\n return d.toISOString().slice(0, 10);\n}\n\n/** Renvoie le lundi (YYYY-MM-DD) de la semaine contenant `date` (par défaut aujourd'hui). */\nexport function mondayOf(date: Date = new Date()): string {\n const d = new Date(Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate()));\n const day = d.getUTCDay(); // 0 = dimanche ... 6 = samedi\n const diffToMonday = day === 0 ? -6 : 1 - day;\n d.setUTCDate(d.getUTCDate() + diffToMonday);\n return toIsoDate(d);\n}\n\nexport function currentWeekStart(): string {\n return mondayOf(new Date());\n}\n\n/** Liste les N lundis précédant (strictement) `weekStartDate`, du plus récent au plus ancien. */\nexport function previousWeekStarts(weekStartDate: string, count: number): string[] {\n const [y, m, d] = weekStartDate.split(\"-\").map(Number);\n const base = new Date(Date.UTC(y, m - 1, d));\n const result: string[] = [];\n for (let i = 1; i <= count; i++) {\n const prev = new Date(base);\n prev.setUTCDate(prev.getUTCDate() - 7 * i);\n result.push(toIsoDate(prev));\n }\n return result;\n}\n",[],[137,196,214],"bfdce5f1-8133-44c3-910c-5027ca3a263b","crypto.ts","126f38c6-a555-11f1-8062-1607ee4eb77e",5,["D",1788192022509],"// Chiffrement symétrique (AES-GCM) de la clé API Anthropic avant stockage en\n// base, et helpers de hachage de mot de passe + signature de session.\n// Tout repose sur Web Crypto (natif Deno), aucune dépendance externe.\n\nfunction getEncryptionKeyMaterial(): string {\n const secret = Deno.env.get(\"ENCRYPTION_SECRET\");\n if (!secret) {\n throw new Error(\n \"ENCRYPTION_SECRET n'est pas configurée (variable d'environnement du val).\",\n );\n }\n return secret;\n}\n\nasync function deriveAesKey(): Promise {\n const material = getEncryptionKeyMaterial();\n const keyBytes = await crypto.subtle.digest(\n \"SHA-256\",\n new TextEncoder().encode(material),\n );\n return crypto.subtle.importKey(\"raw\", keyBytes, \"AES-GCM\", false, [\n \"encrypt\",\n \"decrypt\",\n ]);\n}\n\nfunction toBase64(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary);\n}\n\nfunction fromBase64(b64: string): Uint8Array {\n const binary = atob(b64);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes;\n}\n\nexport async function encryptSecret(plaintext: string): Promise {\n const key = await deriveAesKey();\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const ciphertext = await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv },\n key,\n new TextEncoder().encode(plaintext),\n );\n return `${toBase64(iv)}.${toBase64(new Uint8Array(ciphertext))}`;\n}\n\nexport async function decryptSecret(payload: string): Promise {\n const [ivB64, dataB64] = payload.split(\".\");\n if (!ivB64 || !dataB64) throw new Error(\"Format de secret chiffré invalide.\");\n const key = await deriveAesKey();\n const plaintext = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv: fromBase64(ivB64) },\n key,\n fromBase64(dataB64),\n );\n return new TextDecoder().decode(plaintext);\n}\n",[],[137,196,222],"171b0eb6-1575-4ed4-8121-234cbbf3ae3f","claude.ts","0e9589bc-a555-11f1-976f-1607ee4eb77e",4,["D",1788192016043],"import type { GeneratedMenu, Member, MealType } from \"../../shared/types.ts\";\n\nconst ANTHROPIC_API_URL = \"https://api.anthropic.com/v1/messages\";\nconst MODEL = \"claude-sonnet-4-5\";\nconst REQUEST_TIMEOUT_MS = 15000;\n\nexport class ClaudeGenerationError extends Error {}\n\nfunction preferencesSummary(member: Member): string {\n const flags: string[] = [];\n if (member.preferences.vegetarien) flags.push(\"végétarien\");\n if (member.preferences.vegan) flags.push(\"vegan\");\n if (member.preferences.sansGluten) flags.push(\"sans gluten\");\n if (member.preferences.sansLactose) flags.push(\"sans lactose\");\n const notes = member.preferences.notesLibres?.trim();\n const parts = [...flags];\n if (notes) parts.push(notes);\n return parts.length > 0 ? parts.join(\", \") : \"aucune restriction particulière\";\n}\n\nasync function callClaude(apiKey: string, prompt: string): Promise {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);\n\n let response: Response;\n try {\n response = await fetch(ANTHROPIC_API_URL, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": apiKey,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: MODEL,\n max_tokens: 2048,\n messages: [{ role: \"user\", content: prompt }],\n }),\n signal: controller.signal,\n });\n } catch (err) {\n if (err instanceof DOMException && err.name === \"AbortError\") {\n throw new ClaudeGenerationError(\"Le service de génération a mis trop de temps à répondre.\");\n }\n throw new ClaudeGenerationError(\"Impossible de contacter le service de génération.\");\n } finally {\n clearTimeout(timeout);\n }\n\n if (response.status === 401) {\n throw new ClaudeGenerationError(\"Clé API Anthropic invalide ou expirée.\");\n }\n if (!response.ok) {\n throw new ClaudeGenerationError(`Le service de génération a répondu une erreur (${response.status}).`);\n }\n\n const data = await response.json();\n const text = data?.content?.[0]?.text;\n if (typeof text !== \"string\") {\n throw new ClaudeGenerationError(\"Réponse du service de génération illisible.\");\n }\n return text;\n}\n\nfunction extractJson(text: string): unknown {\n const fenced = text.match(/```(?:json)?\\s*([\\s\\S]*?)```/);\n const candidate = fenced ? fenced[1] : text;\n try {\n return JSON.parse(candidate.trim());\n } catch {\n throw new ClaudeGenerationError(\"Réponse du service de génération mal formée (JSON invalide).\");\n }\n}\n\nexport async function generateMenu(\n apiKey: string,\n numPeople: number,\n mealType: MealType,\n members: Member[],\n): Promise {\n const restrictionsCommunes = members.map((m) => `- ${m.name}: ${preferencesSummary(m)}`).join(\"\\n\");\n\n const prompt = `Tu es un assistant culinaire. Génère un menu pour ${numPeople} personne(s) pour un repas de ${mealType}.\n\nRestrictions et préférences des membres du foyer (à respecter pour le plat commun quand c'est possible ; sinon prévoir une alternative individuelle) :\n${restrictionsCommunes}\n\nRègles :\n- Le plat principal doit convenir à un maximum de monde. S'il ne peut pas convenir à un membre à cause d'une restriction stricte (allergie, régime), prévois une alternative individuelle pour ce membre uniquement.\n- Les quantités d'ingrédients doivent être adaptées au nombre de personnes indiqué.\n- Utilise des unités simples et cohérentes : \"g\", \"kg\", \"ml\", \"cl\", \"L\", ou \"\" (pièce) pour les ingrédients comptables.\n- Réponds UNIQUEMENT avec un objet JSON valide, sans texte autour, au format exact suivant :\n\n{\n \"plat_principal\": {\n \"titre\": \"string\",\n \"ingredients\": [{\"nom\": \"string\", \"quantite\": \"string\", \"unite\": \"string\"}],\n \"instructions\": \"string (quelques phrases courtes)\"\n },\n \"alternatives_individuelles\": [\n {\"pour_membre\": \"nom exact du membre\", \"titre\": \"string\", \"raison\": \"string\"}\n ]\n}\n\nSi aucune alternative n'est nécessaire, renvoie \"alternatives_individuelles\": [].`;\n\n const raw = await callClaude(apiKey, prompt);\n const parsed = extractJson(raw) as {\n plat_principal: { titre: string; ingredients: { nom: string; quantite: string; unite: string }[]; instructions: string };\n alternatives_individuelles: { pour_membre: string; titre: string; raison: string }[];\n };\n\n const byName = new Map(members.map((m) => [m.name, m]));\n\n return {\n platPrincipal: {\n titre: parsed.plat_principal.titre,\n ingredients: parsed.plat_principal.ingredients,\n instructions: parsed.plat_principal.instructions,\n },\n alternativesIndividuelles: (parsed.alternatives_individuelles ?? [])\n .map((alt) => {\n const member = byName.get(alt.pour_membre);\n if (!member) return null;\n return {\n pourMemberId: member.id,\n membreName: member.name,\n titre: alt.titre,\n raison: alt.raison,\n };\n })\n .filter((alt): alt is NonNullable => alt !== null),\n };\n}\n\nexport interface AlternativeOption {\n titre: string;\n ingredients: { nom: string; quantite: string; unite: string }[];\n instructions: string;\n raison: string;\n}\n\nexport async function generateAlternatives(\n apiKey: string,\n member: Member,\n currentDishTitle: string,\n): Promise {\n const prompt = `Le plat prévu pour ce repas est \"${currentDishTitle}\", mais il ne convient pas (ou peu) à ${member.name}.\nPréférences et restrictions de ${member.name} : ${preferencesSummary(member)}.\n\nPropose exactement 3 plats alternatifs adaptés, variés entre eux. Réponds UNIQUEMENT avec un objet JSON valide au format exact :\n\n{\n \"options\": [\n {\n \"titre\": \"string\",\n \"ingredients\": [{\"nom\": \"string\", \"quantite\": \"string\", \"unite\": \"string\"}],\n \"instructions\": \"string (quelques phrases courtes)\",\n \"raison\": \"string (pourquoi ce plat convient)\"\n }\n ]\n}\n\nLe tableau \"options\" doit contenir exactement 3 éléments.`;\n\n const raw = await callClaude(apiKey, prompt);\n const parsed = extractJson(raw) as { options: AlternativeOption[] };\n return parsed.options ?? [];\n}\n",[],[137,196,230],"ddcb559a-43ce-432c-b953-bdc207ccb83e","040f543c-a555-11f1-97f0-1607ee4eb77e",["D",1788191998400],"import bcrypt from \"npm:bcryptjs@2.4.3\";\nimport { signJwt, verifyJwt } from \"./jwt.ts\";\n\nconst SESSION_COOKIE = \"session\";\nconst SESSION_SECRET_NAME = \"SESSION_SECRET\";\nconst SESSION_TTL_SECONDS = 60 * 60 * 24 * 30; // 30 jours\n\nexport interface SessionPayload {\n userId: number;\n username: string;\n}\n\nexport async function hashPassword(password: string): Promise {\n return bcrypt.hash(password, 10);\n}\n\nexport async function verifyPassword(password: string, hash: string): Promise {\n return bcrypt.compare(password, hash);\n}\n\nexport async function createSessionCookie(payload: SessionPayload): Promise {\n const token = await signJwt({ ...payload }, SESSION_SECRET_NAME, SESSION_TTL_SECONDS);\n const maxAge = SESSION_TTL_SECONDS;\n return `${SESSION_COOKIE}=${token}; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=${maxAge}`;\n}\n\nexport function clearSessionCookie(): string {\n return `${SESSION_COOKIE}=; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=0`;\n}\n\nexport function readSessionCookieValue(cookieHeader: string | null): string | null {\n if (!cookieHeader) return null;\n const match = cookieHeader\n .split(\";\")\n .map((part) => part.trim())\n .find((part) => part.startsWith(`${SESSION_COOKIE}=`));\n if (!match) return null;\n return match.slice(SESSION_COOKIE.length + 1);\n}\n\nexport async function getSessionFromCookie(\n cookieHeader: string | null,\n): Promise {\n const token = readSessionCookieValue(cookieHeader);\n if (!token) return null;\n const payload = await verifyJwt(\n token,\n SESSION_SECRET_NAME,\n );\n if (!payload) return null;\n return { userId: payload.userId, username: payload.username };\n}\n",[],[137,196,45],"776b0922-f1d9-49cf-8ebd-5d82c9279641",["D",1788191998400],[160,161,162,163,164,165,166],[137,196],"fd4c5f3e-9205-46c7-b61a-988472846d13","schema.ts","015ccdb4-a555-11f1-b518-1607ee4eb77e","33d9d9fc-70d9-4462-9b17-b10ca5880ffa",2,["D",1788191993442],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// Idempotent schema setup — appelé au démarrage de chaque requête froide.\n// CREATE TABLE IF NOT EXISTS partout : sûr à ré-exécuter.\nexport async function ensureSchema() {\n await sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n email TEXT,\n anthropic_api_key_encrypted TEXT,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS foyers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL REFERENCES users(id),\n name TEXT NOT NULL,\n share_token TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n // Table de jonction : un foyer peut être partagé et rejoint par plusieurs\n // comptes utilisateurs (propriétaire inclus).\n {\n sql: `CREATE TABLE IF NOT EXISTS foyer_access (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n foyer_id INTEGER NOT NULL REFERENCES foyers(id),\n user_id INTEGER NOT NULL REFERENCES users(id),\n role TEXT NOT NULL DEFAULT 'member',\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(foyer_id, user_id)\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS members (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n foyer_id INTEGER NOT NULL REFERENCES foyers(id),\n name TEXT NOT NULL,\n preferences TEXT NOT NULL DEFAULT '{}',\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS weeks (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n foyer_id INTEGER NOT NULL REFERENCES foyers(id),\n week_start_date TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(foyer_id, week_start_date)\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS meals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n week_id INTEGER NOT NULL REFERENCES weeks(id),\n day_of_week INTEGER NOT NULL,\n meal_type TEXT NOT NULL CHECK (meal_type IN ('midi', 'soir')),\n num_people INTEGER NOT NULL DEFAULT 0,\n generated_menu TEXT,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(week_id, day_of_week, meal_type)\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS meal_modifications (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n meal_id INTEGER NOT NULL REFERENCES meals(id),\n member_id INTEGER REFERENCES members(id),\n alternative_dish TEXT NOT NULL,\n is_individual INTEGER NOT NULL DEFAULT 1,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n ]);\n}\n",[],[137,256,248],"db","e3698a61-28ac-40d3-bb2f-c5feb458113b",["D",1788191993442],[158],[137,256],["D",1788191982713],[157,159,167,169],[137],["D",1788191950718],["D",1789497078049],{"_106":105,"_113":108},{"_106":105,"_107":108,"_109":108,"_18":61,"_110":111,"_112":25},{"_13":95,"_32":96,"_49":41,"_97":50,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":-5,"_103":51,"_104":105},"ctx",{"_88":-5,"_132":302,"_303":304,"_305":306,"_307":25,"_308":25,"_309":25,"_310":65,"_311":-5,"_312":-7,"_313":-7,"_314":69,"_315":25,"_316":25,"_317":-5,"_318":25,"_319":25,"_320":25,"_321":-5},"ENV",{"_273":274,"_275":276,"_277":96,"_278":279,"_280":281,"_282":283,"_284":285,"_286":287,"_288":289,"_290":291,"_292":293,"_294":295,"_296":297,"_298":299,"_300":301},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v10