Planificateur de menus

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_410":411,"_412":413},"routes/_app.x.$handle.$name",{"_106":105,"_32":51,"_114":96,"_27":108,"_13":14,"_115":-5,"_11":116,"_117":118,"_119":120,"_121":122,"_123":124,"_21":-5,"_125":-5,"_126":-5,"_127":25,"_128":129,"_130":65,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_49":50,"_32":51,"_37":52,"_53":-5,"_54":25,"_55":56,"_57":56,"_58":59,"_60":-5,"_18":61,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":-5,"_79":80,"_81":80,"_82":83,"_84":83,"_85":83,"_86":80,"_87":80,"_88":89,"_90":91,"_92":93,"_94":25},"version",22,"changes",[19,20],"aiChatInfo","userId",{"_21":42,"_23":-7,"_24":25,"_26":25,"_27":43,"_29":43},{"_21":22,"_23":-7,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":-5,"_37":38,"_39":14,"_40":41,"_24":25},"previous","deleted",false,"deletedHere","path","frontend/context","latestPath","fileId","fe74614b-f1bd-4b0b-9e84-568bc89b2f26","name","context","fileType","directory","content","createdAt",["D",1788192198428],"branchVersion","branchId","59c640c1-d555-4902-a8d3-71ace8a5e5c4",{"_30":44,"_32":45,"_34":46,"_36":47,"_37":48,"_39":14,"_40":41,"_24":25},"frontend/context/AuthContext.tsx","7b4d5738-a555-11f1-8fcd-1607ee4eb77e","AuthContext.tsx","script","import React, {\n createContext,\n useCallback,\n useContext,\n useEffect,\n useState,\n} from \"https://esm.sh/react@18.2.0\";\nimport { ApiError, fetchMe } from \"../api.ts\";\nimport type { PublicUser } from \"../../shared/types.ts\";\n\ninterface AuthContextValue {\n user: PublicUser | null;\n loading: boolean;\n setUser: (user: PublicUser | null) => void;\n refresh: () => Promise;\n}\n\nconst AuthContext = createContext(null);\n\nexport function AuthProvider({ children }: { children: React.ReactNode }) {\n const [user, setUser] = useState(null);\n const [loading, setLoading] = useState(true);\n\n const refresh = useCallback(async () => {\n try {\n const { user } = await fetchMe();\n setUser(user);\n } catch (err) {\n if (err instanceof ApiError && err.status === 401) {\n setUser(null);\n }\n } finally {\n setLoading(false);\n }\n }, []);\n\n useEffect(() => {\n refresh();\n }, [refresh]);\n\n return (\n \n {children}\n \n );\n}\n\nexport function useAuth(): AuthContextValue {\n const ctx = useContext(AuthContext);\n if (!ctx) throw new Error(\"useAuth doit être utilisé dans un AuthProvider.\");\n return ctx;\n}\n",["D",1788192198428],"id","6626b8d6-3420-4848-8c35-d06d05fe18fd","menu-planner",["D",1788191950718],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Planificateur de menus pour un foyer avec IA","imageUrl","d66aba55-2367-403a-a570-71cd1c762bc0","pinnedFileId","faba7e02-a554-11f1-9530-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a05825-cbf0-705e-9846-aecf6611a871","tursoName","6626b8d6342048488c35d06d05fe18fd","tursoHostname","6626b8d6342048488c35d06d05fe18fd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789497078049],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_106":105,"_113":108},"org",{"_106":105,"_107":108,"_109":108,"_18":61,"_110":111,"_112":25},"branch",{"_13":95,"_32":96,"_49":41,"_97":50,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":-5,"_103":51,"_104":105},"isOwned",82,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","Antoine07","handle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_49":50,"_32":51,"_37":405,"_53":-5,"_54":25,"_55":56,"_57":56,"_58":59,"_60":-5,"_18":61,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":75,"_76":406,"_78":-5,"_79":80,"_81":80,"_82":83,"_84":83,"_85":83,"_86":80,"_87":80,"_88":407,"_90":408,"_92":409,"_94":25},"tree",[170,191,198],"files",[170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199],"counts",{"_159":69,"_160":156,"_161":69,"_162":163,"_164":165},"contents",[135,136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_49":153,"_32":154,"_30":155,"_141":-5,"_40":41,"_39":156,"_143":65,"_37":157,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_27":158},{"_49":147,"_32":148,"_30":149,"_141":-5,"_40":41,"_39":150,"_143":65,"_37":151,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_27":152},{"_49":138,"_32":139,"_30":140,"_141":-5,"_40":41,"_39":142,"_143":65,"_37":144,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_27":146},"664a69bc-f485-42f2-b3b1-5c4287a884bb","shared","954a3890-eb69-41ab-83ad-aab22e416c67","parentId",17,"latest",["D",1788192154580],"label",[139],"c3ca6672-6e19-48d7-9c83-71e8ddbe011e","frontend","bb9ecb4c-0463-4c6f-bba9-542a021ba6c0",18,["D",1788192157294],[148],"9b96b1fe-dcd9-4982-b1ac-c60845e1241f","backend","843381a2-2df1-475d-b92f-a3a8ce678481",1,["D",1788191982713],[154],"pulls","branches","forks","envVars",{"_166":168,"_169":69},"connections",{"_166":69,"_167":69},"count","unfilledCount",3,"emptyCount",{"_49":153,"_32":154,"_30":155,"_141":-5,"_40":41,"_39":156,"_143":65,"_37":402,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_205":403,"_27":404},{"_49":398,"_32":397,"_30":391,"_141":155,"_40":41,"_39":392,"_143":65,"_37":399,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_205":400,"_27":401},{"_49":388,"_32":389,"_30":390,"_141":391,"_40":41,"_39":392,"_143":25,"_37":393,"_13":69,"_34":46,"_36":394,"_24":25,"_145":-5,"_205":395,"_27":396},{"_49":384,"_32":337,"_30":331,"_141":155,"_40":41,"_39":168,"_143":65,"_37":385,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_205":386,"_27":387},{"_49":378,"_32":304,"_30":379,"_141":331,"_40":41,"_39":168,"_143":65,"_37":380,"_13":69,"_34":46,"_36":381,"_24":25,"_145":-5,"_205":382,"_27":383},{"_49":370,"_32":371,"_30":372,"_141":331,"_40":41,"_39":373,"_143":25,"_37":374,"_13":69,"_34":46,"_36":375,"_24":25,"_145":-5,"_205":376,"_27":377},{"_49":362,"_32":363,"_30":364,"_141":331,"_40":41,"_39":365,"_143":65,"_37":366,"_13":69,"_34":46,"_36":367,"_24":25,"_145":-5,"_205":368,"_27":369},{"_49":354,"_32":355,"_30":356,"_141":331,"_40":41,"_39":357,"_143":65,"_37":358,"_13":69,"_34":46,"_36":359,"_24":25,"_145":-5,"_205":360,"_27":361},{"_49":346,"_32":347,"_30":348,"_141":331,"_40":41,"_39":349,"_143":65,"_37":350,"_13":69,"_34":46,"_36":351,"_24":25,"_145":-5,"_205":352,"_27":353},{"_49":338,"_32":339,"_30":340,"_141":331,"_40":41,"_39":341,"_143":65,"_37":342,"_13":69,"_34":46,"_36":343,"_24":25,"_145":-5,"_205":344,"_27":345},{"_49":328,"_32":329,"_30":330,"_141":331,"_40":41,"_39":332,"_143":65,"_37":333,"_13":69,"_34":46,"_36":334,"_24":25,"_145":-5,"_205":335,"_27":336},{"_49":324,"_32":323,"_30":317,"_141":155,"_40":41,"_39":318,"_143":65,"_37":325,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_205":326,"_27":327},{"_49":315,"_32":304,"_30":316,"_141":317,"_40":41,"_39":318,"_143":65,"_37":319,"_13":69,"_34":46,"_36":320,"_24":25,"_145":-5,"_205":321,"_27":322},{"_49":311,"_32":270,"_30":264,"_141":155,"_40":41,"_39":306,"_143":65,"_37":312,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_205":313,"_27":314},{"_49":303,"_32":304,"_30":305,"_141":264,"_40":41,"_39":306,"_143":25,"_37":307,"_13":69,"_34":46,"_36":308,"_24":25,"_145":-5,"_205":309,"_27":310},{"_49":295,"_32":296,"_30":297,"_141":264,"_40":41,"_39":298,"_143":65,"_37":299,"_13":69,"_34":46,"_36":300,"_24":25,"_145":-5,"_205":301,"_27":302},{"_49":287,"_32":288,"_30":289,"_141":264,"_40":41,"_39":290,"_143":25,"_37":291,"_13":69,"_34":46,"_36":292,"_24":25,"_145":-5,"_205":293,"_27":294},{"_49":279,"_32":280,"_30":281,"_141":264,"_40":41,"_39":282,"_143":65,"_37":283,"_13":69,"_34":46,"_36":284,"_24":25,"_145":-5,"_205":285,"_27":286},{"_49":271,"_32":272,"_30":273,"_141":264,"_40":41,"_39":274,"_143":65,"_37":275,"_13":69,"_34":46,"_36":276,"_24":25,"_145":-5,"_205":277,"_27":278},{"_49":261,"_32":262,"_30":263,"_141":264,"_40":41,"_39":265,"_143":65,"_37":266,"_13":69,"_34":46,"_36":267,"_24":25,"_145":-5,"_205":268,"_27":269},{"_49":253,"_32":254,"_30":63,"_141":155,"_40":41,"_39":156,"_143":65,"_37":255,"_13":69,"_34":256,"_36":257,"_24":25,"_145":258,"_205":259,"_27":260},{"_49":147,"_32":148,"_30":149,"_141":-5,"_40":41,"_39":150,"_143":65,"_37":250,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_205":251,"_27":252},{"_49":246,"_32":33,"_30":31,"_141":149,"_40":41,"_39":14,"_143":65,"_37":247,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_205":248,"_27":249},{"_49":242,"_32":45,"_30":44,"_141":31,"_40":41,"_39":14,"_143":25,"_37":243,"_13":69,"_34":46,"_36":47,"_24":25,"_145":-5,"_205":244,"_27":245},{"_49":234,"_32":235,"_30":236,"_141":149,"_40":41,"_39":237,"_143":25,"_37":238,"_13":69,"_34":46,"_36":239,"_24":25,"_145":-5,"_205":240,"_27":241},{"_49":226,"_32":227,"_30":228,"_141":149,"_40":41,"_39":229,"_143":25,"_37":230,"_13":69,"_34":46,"_36":231,"_24":25,"_145":-5,"_205":232,"_27":233},{"_49":218,"_32":219,"_30":220,"_141":149,"_40":41,"_39":221,"_143":25,"_37":222,"_13":69,"_34":46,"_36":223,"_24":25,"_145":-5,"_205":224,"_27":225},{"_49":211,"_32":212,"_30":213,"_141":149,"_40":41,"_39":150,"_143":65,"_37":214,"_13":69,"_34":46,"_36":215,"_24":25,"_145":-5,"_205":216,"_27":217},{"_49":138,"_32":139,"_30":140,"_141":-5,"_40":41,"_39":142,"_143":65,"_37":208,"_13":69,"_34":35,"_36":-5,"_24":25,"_145":-5,"_205":209,"_27":210},{"_49":200,"_32":201,"_30":202,"_141":140,"_40":41,"_39":142,"_143":25,"_37":203,"_13":69,"_34":46,"_36":204,"_24":25,"_145":-5,"_205":206,"_27":207},"e4631fc9-78c4-40f0-93ba-93a546bd07c6","types.ts","61286708-a555-11f1-be7d-1607ee4eb77e",["D",1788192154580],"// Types partagés entre le backend et le frontend.\n\nexport interface PublicUser {\n id: number;\n username: string;\n email: string | null;\n hasApiKey: boolean;\n createdAt: string;\n}\n\nexport interface Foyer {\n id: number;\n userId: number;\n name: string;\n shareToken: string;\n createdAt: string;\n}\n\nexport interface MemberPreferences {\n vegetarien: boolean;\n vegan: boolean;\n sansGluten: boolean;\n sansLactose: boolean;\n notesLibres: string;\n}\n\nexport interface Member {\n id: number;\n foyerId: number;\n name: string;\n preferences: MemberPreferences;\n}\n\nexport interface Week {\n id: number;\n foyerId: number;\n weekStartDate: string; // YYYY-MM-DD, lundi\n createdAt: string;\n}\n\nexport type MealType = \"midi\" | \"soir\";\n\nexport interface Ingredient {\n nom: string;\n quantite: string;\n unite: string;\n}\n\nexport interface PlatPrincipal {\n titre: string;\n ingredients: Ingredient[];\n instructions: string;\n}\n\nexport interface AlternativeIndividuelle {\n pourMemberId: number;\n membreName: string;\n titre: string;\n raison: string;\n}\n\nexport interface GeneratedMenu {\n platPrincipal: PlatPrincipal;\n alternativesIndividuelles: AlternativeIndividuelle[];\n}\n\nexport interface Meal {\n id: number;\n weekId: number;\n dayOfWeek: number; // 0 = lundi ... 6 = dimanche\n mealType: MealType;\n numPeople: number;\n generatedMenu: GeneratedMenu | null;\n createdAt: string;\n}\n\nexport interface MealModification {\n id: number;\n mealId: number;\n memberId: number | null;\n alternativeDish: {\n titre: string;\n ingredients: Ingredient[];\n instructions: string;\n };\n isIndividual: boolean;\n}\n\nexport interface ShoppingListItem {\n nom: string;\n quantite: number | null;\n unite: string;\n categorie: string;\n quantiteLibre: string | null; // quand la quantité n'a pas pu être convertie en nombre\n}\n\nexport const DAY_LABELS = [\n \"Lundi\",\n \"Mardi\",\n \"Mercredi\",\n \"Jeudi\",\n \"Vendredi\",\n \"Samedi\",\n \"Dimanche\",\n] as const;\n\nexport const MEAL_LABELS: Record = {\n midi: \"Midi\",\n soir: \"Soir\",\n};\n","children",[],[139,201],["D",1788192154580],[199],[139],"f61cd4b7-aa53-4e33-9fc8-ee90ab4e1e4a","root.tsx","62c4b440-a555-11f1-97f6-1607ee4eb77e",["D",1788192157294],"import { html } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\nexport function Root() {\n return html`\n\n \n \n \n Planificateur de menus\n \n \n \n \n

\n \n \n`;\n}\n",[],[148,212],"377c7229-f4b3-4798-ac78-e1ffd54809a0","index.tsx","6466a20e-a555-11f1-857d-1607ee4eb77e",19,["D",1788192160035],"import React from \"https://esm.sh/react@18.2.0\";\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport { App } from \"./App.tsx\";\n\nconst container = document.getElementById(\"root\");\nif (!container) throw new Error(\"Élément #root introuvable.\");\n\ncreateRoot(container).render();\n",[],[148,219],"25ac2332-c14b-4095-b16f-c3ffe74e02d8","api.ts","78decc98-a555-11f1-b410-1607ee4eb77e",21,["D",1788192194376],"import type {\n Foyer,\n Meal,\n MealModification,\n Member,\n MemberPreferences,\n PublicUser,\n ShoppingListItem,\n Week,\n} from \"../shared/types.ts\";\n\nclass ApiError extends Error {\n status: number;\n constructor(message: string, status: number) {\n super(message);\n this.status = status;\n }\n}\n\nasync function request(path: string, options: RequestInit = {}): Promise {\n const response = await fetch(path, {\n ...options,\n credentials: \"include\",\n headers: {\n \"content-type\": \"application/json\",\n ...(options.headers ?? {}),\n },\n });\n const data = await response.json().catch(() => ({}));\n if (!response.ok) {\n throw new ApiError(data?.error ?? \"Une erreur est survenue.\", response.status);\n }\n return data as T;\n}\n\nexport { ApiError };\n\n// --- Auth ---\n\nexport function signup(input: { username: string; password: string; email?: string; shareToken?: string }) {\n return request<{ user: PublicUser }>(\"/api/auth/signup\", { method: \"POST\", body: JSON.stringify(input) });\n}\n\nexport function login(input: { username: string; password: string }) {\n return request<{ user: PublicUser }>(\"/api/auth/login\", { method: \"POST\", body: JSON.stringify(input) });\n}\n\nexport function logout() {\n return request<{ ok: true }>(\"/api/auth/logout\", { method: \"POST\" });\n}\n\nexport function fetchMe() {\n return request<{ user: PublicUser }>(\"/api/auth/me\");\n}\n\nexport function saveApiKey(apiKey: string) {\n return request<{ ok: true }>(\"/api/auth/me/api-key\", { method: \"PUT\", body: JSON.stringify({ apiKey }) });\n}\n\nexport function deleteApiKey() {\n return request<{ ok: true }>(\"/api/auth/me/api-key\", { method: \"DELETE\" });\n}\n\n// --- Foyers ---\n\nexport function fetchCurrentFoyer() {\n return request<{ foyer: Foyer | null }>(\"/api/foyers/current\");\n}\n\nexport function createFoyer(name: string) {\n return request<{ foyer: Foyer }>(\"/api/foyers\", { method: \"POST\", body: JSON.stringify({ name }) });\n}\n\nexport function joinFoyer(shareToken: string) {\n return request<{ foyer: Foyer }>(\"/api/foyers/join\", { method: \"POST\", body: JSON.stringify({ shareToken }) });\n}\n\n// --- Members ---\n\nexport function fetchMembers() {\n return request<{ members: Member[] }>(\"/api/members\");\n}\n\nexport function createMember(input: { name: string; preferences: MemberPreferences }) {\n return request<{ member: Member }>(\"/api/members\", { method: \"POST\", body: JSON.stringify(input) });\n}\n\nexport function updateMember(id: number, input: { name: string; preferences: MemberPreferences }) {\n return request<{ member: Member }>(`/api/members/${id}`, { method: \"PUT\", body: JSON.stringify(input) });\n}\n\nexport function deleteMember(id: number) {\n return request<{ ok: true }>(`/api/members/${id}`, { method: \"DELETE\" });\n}\n\n// --- Weeks ---\n\nexport interface WeekDetail {\n week: Week;\n meals: Meal[];\n modifications: Record;\n readOnly?: boolean;\n}\n\nexport function fetchCurrentWeek() {\n return request(\"/api/weeks/current\");\n}\n\nexport function fetchWeekHistory() {\n return request<{ weeks: Week[] }>(\"/api/weeks/history\");\n}\n\nexport function fetchWeek(id: number) {\n return request(`/api/weeks/${id}`);\n}\n\nexport function fetchShoppingList(weekId: number) {\n return request<{ items: ShoppingListItem[]; text: string }>(`/api/weeks/${weekId}/shopping-list`);\n}\n\n// --- Meals ---\n\nexport function setNumPeople(mealId: number, numPeople: number) {\n return request<{ ok: true; numPeople: number }>(`/api/meals/${mealId}/num-people`, {\n method: \"PUT\",\n body: JSON.stringify({ numPeople }),\n });\n}\n\nexport function generateMenuForMeal(mealId: number) {\n return request<{ menu: Meal[\"generatedMenu\"] }>(`/api/meals/${mealId}/generate`, { method: \"POST\" });\n}\n\nexport interface AlternativeOption {\n titre: string;\n ingredients: { nom: string; quantite: string; unite: string }[];\n instructions: string;\n raison: string;\n}\n\nexport function fetchAlternativeOptions(mealId: number, memberId: number) {\n return request<{ options: AlternativeOption[] }>(`/api/meals/${mealId}/alternatives`, {\n method: \"POST\",\n body: JSON.stringify({ memberId }),\n });\n}\n\nexport function selectAlternative(mealId: number, memberId: number, option: AlternativeOption) {\n return request<{ ok: true }>(`/api/meals/${mealId}/alternatives/select`, {\n method: \"POST\",\n body: JSON.stringify({ memberId, option }),\n });\n}\n\n// --- Share (public, read-only) ---\n\nexport interface SharedFoyerData {\n foyer: { name: string };\n members: { id: number; name: string }[];\n week: { weekStartDate: string };\n meals: Meal[];\n modifications: Record;\n shoppingList: ShoppingListItem[];\n}\n\nexport function fetchSharedFoyer(token: string) {\n return request(`/api/share/${token}`);\n}\n",[],[148,227],"e255fb7e-4a3d-40e4-9feb-fe8534df3960","App.tsx","7173d980-a555-11f1-aa2c-1607ee4eb77e",20,["D",1788192181911],"import React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport { AuthProvider, useAuth } from \"./context/AuthContext.tsx\";\nimport { fetchCurrentFoyer, fetchMembers } from \"./api.ts\";\nimport type { Foyer, Member } from \"../shared/types.ts\";\nimport { LoginPage } from \"./pages/LoginPage.tsx\";\nimport { SignupPage } from \"./pages/SignupPage.tsx\";\nimport { FoyerSetupPage } from \"./pages/FoyerSetupPage.tsx\";\nimport { SharedFoyerPage } from \"./pages/SharedFoyerPage.tsx\";\nimport { PlannerPage } from \"./pages/PlannerPage.tsx\";\nimport { HistoryPage } from \"./pages/HistoryPage.tsx\";\nimport { ShoppingListPage } from \"./pages/ShoppingListPage.tsx\";\nimport { FoyerTab } from \"./pages/FoyerTab.tsx\";\nimport { Nav, type Tab } from \"./components/Nav.tsx\";\nimport { Spinner } from \"./components/Spinner.tsx\";\n\nfunction parseSharedToken(): string | null {\n const match = window.location.pathname.match(/^\\/partage\\/([^/?#]+)/);\n return match ? decodeURIComponent(match[1]) : null;\n}\n\nexport function App() {\n const [sharedToken] = useState(parseSharedToken);\n const [showSignupForShare, setShowSignupForShare] = useState(false);\n\n if (sharedToken && !showSignupForShare) {\n return (\n setShowSignupForShare(true)}\n />\n );\n }\n\n return (\n \n \n \n );\n}\n\nfunction AuthGate({ initialShareToken }: { initialShareToken: string | null }) {\n const { user, loading } = useAuth();\n const [authView, setAuthView] = useState<\"login\" | \"signup\">(initialShareToken ? \"signup\" : \"login\");\n\n useEffect(() => {\n // Une fois connecté depuis un lien de partage, on quitte l'URL /partage/:token\n // pour qu'un rechargement de page retombe sur le tableau de bord plutôt\n // que sur la vue lecture seule.\n if (user && initialShareToken) {\n window.history.replaceState(null, \"\", \"/\");\n }\n }, [user, initialShareToken]);\n\n if (loading) {\n return

;\n }\n\n if (!user) {\n return authView === \"login\" ? (\n setAuthView(\"signup\")} />\n ) : (\n setAuthView(\"login\")} shareToken={initialShareToken} />\n );\n }\n\n return ;\n}\n\nfunction Dashboard() {\n const [foyer, setFoyer] = useState(undefined);\n const [members, setMembers] = useState([]);\n // true tant que le foyer n'existe pas encore, ou que l'utilisateur n'a pas\n // validé l'écran d'accueil après avoir ajouté ses premiers membres.\n const [onboarding, setOnboarding] = useState(false);\n const [tab, setTab] = useState(\"planning\");\n\n async function loadFoyer() {\n const { foyer } = await fetchCurrentFoyer();\n setFoyer(foyer);\n if (!foyer) setOnboarding(true);\n }\n\n async function loadMembers() {\n const { members } = await fetchMembers();\n setMembers(members);\n }\n\n useEffect(() => {\n loadFoyer();\n loadMembers();\n }, []);\n\n if (foyer === undefined) {\n return

;\n }\n\n if (onboarding || !foyer) {\n return (\n setOnboarding(false)}\n />\n );\n }\n\n return (\n

\n );\n}\n",[],[148,235],"7acbe2c1-d065-4610-952b-7ce267e7d1fd",["D",1788192198428],[],[148,33,45],"40f8c604-97c1-47aa-ae39-8bd214deae8c",["D",1788192198428],[193],[148,33],["D",1788192157294],[192,194,195,196,197],[148],"cb965474-f417-4337-951b-3a5afae866bf","index.ts",["D",1788191982713],"http","import { Hono } from \"npm:hono@4\";\nimport { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { ensureSchema } from \"./db/schema.ts\";\nimport { authRoutes } from \"./routes/auth.ts\";\nimport { foyerRoutes } from \"./routes/foyers.ts\";\nimport { memberRoutes } from \"./routes/members.ts\";\nimport { weekRoutes } from \"./routes/weeks.ts\";\nimport { mealRoutes } from \"./routes/meals.ts\";\nimport { shareRoutes } from \"./routes/share.ts\";\nimport { Root } from \"../frontend/root.tsx\";\n\nconst app = new Hono();\n\n// Le schéma est idempotent (CREATE TABLE IF NOT EXISTS) ; on ne le rejoue\n// qu'une fois par instance froide plutôt qu'à chaque requête.\nlet schemaReady: Promise | null = null;\napp.use(\"*\", async (_c, next) => {\n schemaReady ??= ensureSchema();\n await schemaReady;\n await next();\n});\n\napp.route(\"/api/auth\", authRoutes);\napp.route(\"/api/foyers\", foyerRoutes);\napp.route(\"/api/members\", memberRoutes);\napp.route(\"/api/weeks\", weekRoutes);\napp.route(\"/api/meals\", mealRoutes);\napp.route(\"/api/share\", shareRoutes);\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/\", (c) => c.html(Root()));\n// Toute route côté client (ex. /partage/:token) doit servir la même coquille React.\napp.get(\"/partage/:token\", (c) => c.html(Root()));\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","planificateur-menus",[],[154,254],"bb14c5fd-b4b9-4e20-b5d3-c6587fd0bbe5","weeks.ts","5d8e0bf2-a555-11f1-a661-1607ee4eb77e","3bdf4c9c-97f3-43b1-bb3a-fa5f83b8247c",16,["D",1788192148545],"import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { requireAuth, type AppEnv } from \"../middleware/auth.ts\";\nimport { getAccessibleFoyerId, userHasFoyerAccess } from \"../lib/foyerAccess.ts\";\nimport { currentWeekStart, previousWeekStarts } from \"../lib/dates.ts\";\nimport { buildShoppingList, shoppingListToText } from \"../lib/shopping.ts\";\nimport type { Meal, MealModification, MealType, Week } from \"../../shared/types.ts\";\n\nexport const weekRoutes = new Hono();\n\nconst HISTORY_WEEKS = 4;\nconst MEAL_TYPES: MealType[] = [\"midi\", \"soir\"];\n\ninterface WeekRow {\n id: number;\n foyer_id: number;\n week_start_date: string;\n created_at: string;\n}\n\ninterface MealRow {\n id: number;\n week_id: number;\n day_of_week: number;\n meal_type: MealType;\n num_people: number;\n generated_menu: string | null;\n created_at: string;\n}\n\nfunction toWeek(row: WeekRow): Week {\n return { id: row.id, foyerId: row.foyer_id, weekStartDate: row.week_start_date, createdAt: row.created_at };\n}\n\nfunction toMeal(row: MealRow): Meal {\n return {\n id: row.id,\n weekId: row.week_id,\n dayOfWeek: row.day_of_week,\n mealType: row.meal_type,\n numPeople: row.num_people,\n generatedMenu: row.generated_menu ? JSON.parse(row.generated_menu) : null,\n createdAt: row.created_at,\n };\n}\n\n/** Récupère (ou crée avec ses 14 repas vides) la semaine `weekStartDate` du foyer. */\nexport async function getOrCreateWeek(foyerId: number, weekStartDate: string): Promise {\n const existing = await sqlite.execute({\n sql: \"SELECT * FROM weeks WHERE foyer_id = ? AND week_start_date = ?\",\n args: [foyerId, weekStartDate],\n });\n if (existing.rows.length > 0) return existing.rows[0] as unknown as WeekRow;\n\n const insertResult = await sqlite.execute({\n sql: \"INSERT INTO weeks (foyer_id, week_start_date) VALUES (?, ?)\",\n args: [foyerId, weekStartDate],\n });\n const weekId = Number(insertResult.lastInsertRowid);\n\n const mealInserts = [];\n for (let day = 0; day < 7; day++) {\n for (const mealType of MEAL_TYPES) {\n mealInserts.push({\n sql: \"INSERT INTO meals (week_id, day_of_week, meal_type, num_people) VALUES (?, ?, ?, 0)\",\n args: [weekId, day, mealType],\n });\n }\n }\n await sqlite.batch(mealInserts);\n\n const created = await sqlite.execute({ sql: \"SELECT * FROM weeks WHERE id = ?\", args: [weekId] });\n return created.rows[0] as unknown as WeekRow;\n}\n\nexport async function getWeekMeals(weekId: number): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT * FROM meals WHERE week_id = ? ORDER BY day_of_week ASC, meal_type DESC\",\n args: [weekId],\n });\n return (result.rows as unknown as MealRow[]).map(toMeal);\n}\n\ninterface ModificationRow {\n id: number;\n meal_id: number;\n member_id: number | null;\n alternative_dish: string;\n is_individual: number;\n}\n\n/** Alternatives individuelles choisies manuellement, groupées par meal_id. */\nexport async function getModificationsForWeek(weekId: number): Promise> {\n const result = await sqlite.execute({\n sql: `SELECT mm.* FROM meal_modifications mm\n JOIN meals m ON m.id = mm.meal_id\n WHERE m.week_id = ?`,\n args: [weekId],\n });\n const grouped: Record = {};\n for (const row of result.rows as unknown as ModificationRow[]) {\n const mod: MealModification = {\n id: row.id,\n mealId: row.meal_id,\n memberId: row.member_id,\n alternativeDish: JSON.parse(row.alternative_dish),\n isIndividual: !!row.is_individual,\n };\n (grouped[row.meal_id] ??= []).push(mod);\n }\n return grouped;\n}\n\nweekRoutes.get(\"/current\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const foyerId = await getAccessibleFoyerId(userId);\n if (!foyerId) return c.json({ error: \"Créez d'abord votre foyer.\" }, 400);\n\n const weekRow = await getOrCreateWeek(foyerId, currentWeekStart());\n const meals = await getWeekMeals(weekRow.id);\n const modifications = await getModificationsForWeek(weekRow.id);\n return c.json({ week: toWeek(weekRow), meals, modifications });\n});\n\nweekRoutes.get(\"/history\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const foyerId = await getAccessibleFoyerId(userId);\n if (!foyerId) return c.json({ weeks: [] });\n\n const starts = previousWeekStarts(currentWeekStart(), HISTORY_WEEKS);\n const result = await sqlite.execute({\n sql: `SELECT * FROM weeks WHERE foyer_id = ? AND week_start_date IN (${starts.map(() => \"?\").join(\",\")})\n ORDER BY week_start_date DESC`,\n args: [foyerId, ...starts],\n });\n return c.json({ weeks: (result.rows as unknown as WeekRow[]).map(toWeek) });\n});\n\nweekRoutes.get(\"/:id\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const weekId = Number(c.req.param(\"id\"));\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM weeks WHERE id = ?\", args: [weekId] });\n const row = result.rows[0] as unknown as WeekRow | undefined;\n if (!row) return c.json({ error: \"Semaine introuvable.\" }, 404);\n if (!(await userHasFoyerAccess(userId, row.foyer_id))) return c.json({ error: \"Accès refusé.\" }, 403);\n\n const meals = await getWeekMeals(row.id);\n const modifications = await getModificationsForWeek(row.id);\n return c.json({\n week: toWeek(row),\n meals,\n modifications,\n readOnly: row.week_start_date !== currentWeekStart(),\n });\n});\n\nweekRoutes.get(\"/:id/shopping-list\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const weekId = Number(c.req.param(\"id\"));\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM weeks WHERE id = ?\", args: [weekId] });\n const row = result.rows[0] as unknown as WeekRow | undefined;\n if (!row) return c.json({ error: \"Semaine introuvable.\" }, 404);\n if (!(await userHasFoyerAccess(userId, row.foyer_id))) return c.json({ error: \"Accès refusé.\" }, 403);\n\n const meals = await getWeekMeals(row.id);\n const menus = meals.map((m) => m.generatedMenu).filter((m): m is NonNullable => m !== null);\n const items = buildShoppingList(menus);\n return c.json({ items, text: shoppingListToText(items) });\n});\n",[],[154,270,262],"routes","d076dc76-4d7e-4d32-8660-7c775ea28429","share.ts","53161016-a555-11f1-8846-1607ee4eb77e",15,["D",1788192130961],"import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { verifyJwt } from \"../lib/jwt.ts\";\nimport { currentWeekStart } from \"../lib/dates.ts\";\nimport { getOrCreateWeek, getWeekMeals, getModificationsForWeek } from \"./weeks.ts\";\nimport { buildShoppingList } from \"../lib/shopping.ts\";\n\nexport const shareRoutes = new Hono();\n\ninterface FoyerRow {\n id: number;\n name: string;\n}\n\ninterface MemberRow {\n id: number;\n name: string;\n preferences: string;\n}\n\n// Vue publique en lecture seule d'un foyer, accessible via son lien de partage.\n// N'expose jamais la clé API, les mots de passe, ni les identifiants internes autres que ceux affichés.\nshareRoutes.get(\"/:token\", async (c) => {\n const token = c.req.param(\"token\");\n const payload = await verifyJwt<{ foyerId: number }>(token, \"SHARE_TOKEN_SECRET\");\n if (!payload?.foyerId) return c.json({ error: \"Lien de partage invalide ou expiré.\" }, 404);\n\n const foyerResult = await sqlite.execute({\n sql: \"SELECT id, name FROM foyers WHERE id = ?\",\n args: [payload.foyerId],\n });\n const foyer = foyerResult.rows[0] as unknown as FoyerRow | undefined;\n if (!foyer) return c.json({ error: \"Foyer introuvable.\" }, 404);\n\n const membersResult = await sqlite.execute({\n sql: \"SELECT id, name, preferences FROM members WHERE foyer_id = ? ORDER BY id ASC\",\n args: [foyer.id],\n });\n const members = (membersResult.rows as unknown as MemberRow[]).map((m) => ({\n id: m.id,\n name: m.name,\n }));\n\n const weekRow = await getOrCreateWeek(foyer.id, currentWeekStart());\n const meals = await getWeekMeals(weekRow.id);\n const modifications = await getModificationsForWeek(weekRow.id);\n const menus = meals.map((m) => m.generatedMenu).filter((m): m is NonNullable => m !== null);\n const shoppingList = buildShoppingList(menus);\n\n return c.json({\n foyer: { name: foyer.name },\n members,\n week: { weekStartDate: weekRow.week_start_date },\n meals,\n modifications,\n shoppingList,\n });\n});\n",[],[154,270,272],"5b175c61-5ef9-495a-8cf3-118d7ab2bfa8","members.ts","4f4c2b82-a555-11f1-8398-1607ee4eb77e",14,["D",1788192124625],"import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { requireAuth, type AppEnv } from \"../middleware/auth.ts\";\nimport { getAccessibleFoyerId, userHasFoyerAccess } from \"../lib/foyerAccess.ts\";\nimport type { Member, MemberPreferences } from \"../../shared/types.ts\";\n\nexport const memberRoutes = new Hono();\n\ninterface MemberRow {\n id: number;\n foyer_id: number;\n name: string;\n preferences: string;\n}\n\nconst DEFAULT_PREFERENCES: MemberPreferences = {\n vegetarien: false,\n vegan: false,\n sansGluten: false,\n sansLactose: false,\n notesLibres: \"\",\n};\n\nfunction toMember(row: MemberRow): Member {\n let preferences: MemberPreferences = DEFAULT_PREFERENCES;\n try {\n preferences = { ...DEFAULT_PREFERENCES, ...JSON.parse(row.preferences) };\n } catch {\n // préférences corrompues ou vides -> valeurs par défaut\n }\n return { id: row.id, foyerId: row.foyer_id, name: row.name, preferences };\n}\n\nfunction parsePreferencesInput(body: unknown): MemberPreferences {\n const b = body as Partial | undefined;\n return {\n vegetarien: !!b?.vegetarien,\n vegan: !!b?.vegan,\n sansGluten: !!b?.sansGluten,\n sansLactose: !!b?.sansLactose,\n notesLibres: typeof b?.notesLibres === \"string\" ? b.notesLibres.trim() : \"\",\n };\n}\n\nmemberRoutes.get(\"/\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const foyerId = await getAccessibleFoyerId(userId);\n if (!foyerId) return c.json({ members: [] });\n\n const result = await sqlite.execute({\n sql: \"SELECT * FROM members WHERE foyer_id = ? ORDER BY id ASC\",\n args: [foyerId],\n });\n return c.json({ members: (result.rows as unknown as MemberRow[]).map(toMember) });\n});\n\nmemberRoutes.post(\"/\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const foyerId = await getAccessibleFoyerId(userId);\n if (!foyerId) return c.json({ error: \"Créez d'abord votre foyer.\" }, 400);\n\n const body = await c.req.json().catch(() => null);\n const name = typeof body?.name === \"string\" ? body.name.trim() : \"\";\n if (!name) return c.json({ error: \"Le nom du membre est requis.\" }, 400);\n\n const preferences = parsePreferencesInput(body?.preferences);\n const insertResult = await sqlite.execute({\n sql: \"INSERT INTO members (foyer_id, name, preferences) VALUES (?, ?, ?)\",\n args: [foyerId, name, JSON.stringify(preferences)],\n });\n\n const result = await sqlite.execute({\n sql: \"SELECT * FROM members WHERE id = ?\",\n args: [Number(insertResult.lastInsertRowid)],\n });\n return c.json({ member: toMember(result.rows[0] as unknown as MemberRow) }, 201);\n});\n\nmemberRoutes.put(\"/:id\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const memberId = Number(c.req.param(\"id\"));\n\n const existing = await sqlite.execute({ sql: \"SELECT * FROM members WHERE id = ?\", args: [memberId] });\n const row = existing.rows[0] as unknown as MemberRow | undefined;\n if (!row) return c.json({ error: \"Membre introuvable.\" }, 404);\n if (!(await userHasFoyerAccess(userId, row.foyer_id))) return c.json({ error: \"Accès refusé.\" }, 403);\n\n const body = await c.req.json().catch(() => null);\n const name = typeof body?.name === \"string\" && body.name.trim() ? body.name.trim() : row.name;\n const preferences = parsePreferencesInput(body?.preferences ?? JSON.parse(row.preferences));\n\n await sqlite.execute({\n sql: \"UPDATE members SET name = ?, preferences = ? WHERE id = ?\",\n args: [name, JSON.stringify(preferences), memberId],\n });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM members WHERE id = ?\", args: [memberId] });\n return c.json({ member: toMember(result.rows[0] as unknown as MemberRow) });\n});\n\nmemberRoutes.delete(\"/:id\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const memberId = Number(c.req.param(\"id\"));\n\n const existing = await sqlite.execute({ sql: \"SELECT * FROM members WHERE id = ?\", args: [memberId] });\n const row = existing.rows[0] as unknown as MemberRow | undefined;\n if (!row) return c.json({ error: \"Membre introuvable.\" }, 404);\n if (!(await userHasFoyerAccess(userId, row.foyer_id))) return c.json({ error: \"Accès refusé.\" }, 403);\n\n await sqlite.batch([\n { sql: \"DELETE FROM meal_modifications WHERE member_id = ?\", args: [memberId] },\n { sql: \"DELETE FROM members WHERE id = ?\", args: [memberId] },\n ]);\n return c.json({ ok: true });\n});\n",[],[154,270,280],"04a35761-2b80-4bff-873a-0a02f2c1f211","meals.ts","48091d94-a555-11f1-ae0f-1607ee4eb77e",13,["D",1788192112411],"import { Hono, type Context } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { requireAuth, type AppEnv } from \"../middleware/auth.ts\";\nimport { userHasFoyerAccess } from \"../lib/foyerAccess.ts\";\nimport { decryptSecret } from \"../lib/crypto.ts\";\nimport { ClaudeGenerationError, generateAlternatives, generateMenu } from \"../lib/claude.ts\";\nimport { currentWeekStart } from \"../lib/dates.ts\";\nimport type { Member, MemberPreferences } from \"../../shared/types.ts\";\n\nexport const mealRoutes = new Hono();\n\ninterface MealRow {\n id: number;\n week_id: number;\n day_of_week: number;\n meal_type: string;\n num_people: number;\n generated_menu: string | null;\n}\n\ninterface WeekRow {\n id: number;\n foyer_id: number;\n week_start_date: string;\n}\n\ninterface MemberRow {\n id: number;\n foyer_id: number;\n name: string;\n preferences: string;\n}\n\nconst DEFAULT_PREFERENCES: MemberPreferences = {\n vegetarien: false,\n vegan: false,\n sansGluten: false,\n sansLactose: false,\n notesLibres: \"\",\n};\n\nfunction toMember(row: MemberRow): Member {\n let preferences: MemberPreferences = DEFAULT_PREFERENCES;\n try {\n preferences = { ...DEFAULT_PREFERENCES, ...JSON.parse(row.preferences) };\n } catch {\n // ignore\n }\n return { id: row.id, foyerId: row.foyer_id, name: row.name, preferences };\n}\n\n/**\n * Charge le repas + sa semaine et vérifie que l'utilisateur y a accès.\n * Renvoie soit `{ meal, week }`, soit directement la Response d'erreur à\n * retourner tel quel — le narrowing via `instanceof Response` évite les\n * unions mal discriminées.\n */\nasync function loadMealForUser(\n mealId: number,\n userId: number,\n c: Context,\n): Promise {\n const mealResult = await sqlite.execute({ sql: \"SELECT * FROM meals WHERE id = ?\", args: [mealId] });\n const meal = mealResult.rows[0] as unknown as MealRow | undefined;\n if (!meal) return c.json({ error: \"Repas introuvable.\" }, 404);\n\n const weekResult = await sqlite.execute({ sql: \"SELECT * FROM weeks WHERE id = ?\", args: [meal.week_id] });\n const week = weekResult.rows[0] as unknown as WeekRow | undefined;\n if (!week) return c.json({ error: \"Semaine introuvable.\" }, 404);\n\n if (!(await userHasFoyerAccess(userId, week.foyer_id))) {\n return c.json({ error: \"Accès refusé.\" }, 403);\n }\n if (week.week_start_date !== currentWeekStart()) {\n return c.json({ error: \"Cette semaine est en lecture seule.\" }, 403);\n }\n\n return { meal, week };\n}\n\nasync function getApiKeyForFoyer(foyerId: number): Promise {\n const result = await sqlite.execute({\n sql: `SELECT u.anthropic_api_key_encrypted AS key FROM users u\n JOIN foyers f ON f.user_id = u.id\n WHERE f.id = ?`,\n args: [foyerId],\n });\n const row = result.rows[0] as unknown as { key: string | null } | undefined;\n if (!row?.key) return null;\n return decryptSecret(row.key);\n}\n\nasync function getFoyerMembers(foyerId: number): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT * FROM members WHERE foyer_id = ? ORDER BY id ASC\",\n args: [foyerId],\n });\n return (result.rows as unknown as MemberRow[]).map(toMember);\n}\n\nmealRoutes.put(\"/:id/num-people\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const mealId = Number(c.req.param(\"id\"));\n const loaded = await loadMealForUser(mealId, userId, c);\n if (loaded instanceof Response) return loaded;\n\n const body = await c.req.json().catch(() => null);\n const numPeople = Number(body?.numPeople);\n if (!Number.isInteger(numPeople) || numPeople < 0 || numPeople > 30) {\n return c.json({ error: \"Nombre de personnes invalide.\" }, 400);\n }\n\n await sqlite.execute({ sql: \"UPDATE meals SET num_people = ? WHERE id = ?\", args: [numPeople, mealId] });\n return c.json({ ok: true, numPeople });\n});\n\nmealRoutes.post(\"/:id/generate\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const mealId = Number(c.req.param(\"id\"));\n const loaded = await loadMealForUser(mealId, userId, c);\n if (loaded instanceof Response) return loaded;\n const { meal, week } = loaded;\n\n if (meal.num_people <= 0) {\n return c.json({ error: \"Indiquez le nombre de personnes avant de générer un menu.\" }, 400);\n }\n\n const apiKey = await getApiKeyForFoyer(week.foyer_id);\n if (!apiKey) {\n return c.json({ error: \"Aucune clé API Anthropic configurée. Ajoutez-la dans votre profil.\" }, 400);\n }\n\n const members = await getFoyerMembers(week.foyer_id);\n\n try {\n const menu = await generateMenu(\n apiKey,\n meal.num_people,\n meal.meal_type as \"midi\" | \"soir\",\n members,\n );\n await sqlite.execute({\n sql: \"UPDATE meals SET generated_menu = ? WHERE id = ?\",\n args: [JSON.stringify(menu), mealId],\n });\n // Une nouvelle génération invalide les alternatives individuelles précédentes.\n await sqlite.execute({\n sql: \"DELETE FROM meal_modifications WHERE meal_id = ?\",\n args: [mealId],\n });\n return c.json({ menu });\n } catch (err) {\n if (err instanceof ClaudeGenerationError) return c.json({ error: err.message }, 502);\n throw err;\n }\n});\n\nmealRoutes.post(\"/:id/alternatives\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const mealId = Number(c.req.param(\"id\"));\n const loaded = await loadMealForUser(mealId, userId, c);\n if (loaded instanceof Response) return loaded;\n const { meal, week } = loaded;\n\n const body = await c.req.json().catch(() => null);\n const memberId = Number(body?.memberId);\n\n const memberResult = await sqlite.execute({ sql: \"SELECT * FROM members WHERE id = ?\", args: [memberId] });\n const memberRow = memberResult.rows[0] as unknown as MemberRow | undefined;\n if (!memberRow || memberRow.foyer_id !== week.foyer_id) {\n return c.json({ error: \"Membre introuvable.\" }, 404);\n }\n if (!meal.generated_menu) {\n return c.json({ error: \"Générez d'abord le menu de ce repas.\" }, 400);\n }\n\n const apiKey = await getApiKeyForFoyer(week.foyer_id);\n if (!apiKey) {\n return c.json({ error: \"Aucune clé API Anthropic configurée. Ajoutez-la dans votre profil.\" }, 400);\n }\n\n const currentDishTitle = JSON.parse(meal.generated_menu).platPrincipal.titre;\n\n try {\n const options = await generateAlternatives(apiKey, toMember(memberRow), currentDishTitle);\n return c.json({ options });\n } catch (err) {\n if (err instanceof ClaudeGenerationError) return c.json({ error: err.message }, 502);\n throw err;\n }\n});\n\nmealRoutes.post(\"/:id/alternatives/select\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const mealId = Number(c.req.param(\"id\"));\n const loaded = await loadMealForUser(mealId, userId, c);\n if (loaded instanceof Response) return loaded;\n const { week } = loaded;\n\n const body = await c.req.json().catch(() => null);\n const memberId = Number(body?.memberId);\n const option = body?.option;\n if (!option?.titre || !Array.isArray(option?.ingredients) || typeof option?.instructions !== \"string\") {\n return c.json({ error: \"Plat alternatif invalide.\" }, 400);\n }\n\n const memberResult = await sqlite.execute({ sql: \"SELECT * FROM members WHERE id = ?\", args: [memberId] });\n const memberRow = memberResult.rows[0] as unknown as MemberRow | undefined;\n if (!memberRow || memberRow.foyer_id !== week.foyer_id) {\n return c.json({ error: \"Membre introuvable.\" }, 404);\n }\n\n await sqlite.execute({\n sql: \"DELETE FROM meal_modifications WHERE meal_id = ? AND member_id = ?\",\n args: [mealId, memberId],\n });\n await sqlite.execute({\n sql: \"INSERT INTO meal_modifications (meal_id, member_id, alternative_dish, is_individual) VALUES (?, ?, ?, 1)\",\n args: [\n mealId,\n memberId,\n JSON.stringify({\n titre: option.titre,\n ingredients: option.ingredients,\n instructions: option.instructions,\n }),\n ],\n });\n\n return c.json({ ok: true });\n});\n",[],[154,270,288],"bc979431-db8d-4c06-83bc-432cc20a421c","foyers.ts","3be723b2-a555-11f1-8e97-1607ee4eb77e",12,["D",1788192092076],"import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { requireAuth, type AppEnv } from \"../middleware/auth.ts\";\nimport { getAccessibleFoyerId } from \"../lib/foyerAccess.ts\";\nimport { signJwt, verifyJwt } from \"../lib/jwt.ts\";\nimport type { Foyer } from \"../../shared/types.ts\";\n\nexport const foyerRoutes = new Hono();\n\ninterface FoyerRow {\n id: number;\n user_id: number;\n name: string;\n share_token: string;\n created_at: string;\n}\n\nfunction toFoyer(row: FoyerRow): Foyer {\n return {\n id: row.id,\n userId: row.user_id,\n name: row.name,\n shareToken: row.share_token,\n createdAt: row.created_at,\n };\n}\n\nfoyerRoutes.get(\"/current\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const foyerId = await getAccessibleFoyerId(userId);\n if (!foyerId) return c.json({ foyer: null });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM foyers WHERE id = ?\", args: [foyerId] });\n const row = result.rows[0] as unknown as FoyerRow | undefined;\n if (!row) return c.json({ foyer: null });\n return c.json({ foyer: toFoyer(row) });\n});\n\nfoyerRoutes.post(\"/\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n\n const existingFoyerId = await getAccessibleFoyerId(userId);\n if (existingFoyerId) {\n return c.json({ error: \"Vous faites déjà partie d'un foyer.\" }, 409);\n }\n\n const body = await c.req.json().catch(() => null);\n const name = typeof body?.name === \"string\" ? body.name.trim() : \"\";\n if (!name) return c.json({ error: \"Le nom du foyer est requis.\" }, 400);\n\n const insertResult = await sqlite.execute({\n sql: \"INSERT INTO foyers (user_id, name, share_token) VALUES (?, ?, '')\",\n args: [userId, name],\n });\n const foyerId = Number(insertResult.lastInsertRowid);\n\n const shareToken = await signJwt({ foyerId }, \"SHARE_TOKEN_SECRET\");\n await sqlite.execute({\n sql: \"UPDATE foyers SET share_token = ? WHERE id = ?\",\n args: [shareToken, foyerId],\n });\n await sqlite.execute({\n sql: \"INSERT INTO foyer_access (foyer_id, user_id, role) VALUES (?, ?, 'owner')\",\n args: [foyerId, userId],\n });\n\n const result = await sqlite.execute({ sql: \"SELECT * FROM foyers WHERE id = ?\", args: [foyerId] });\n return c.json({ foyer: toFoyer(result.rows[0] as unknown as FoyerRow) }, 201);\n});\n\nfoyerRoutes.post(\"/join\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const body = await c.req.json().catch(() => null);\n const shareToken = typeof body?.shareToken === \"string\" ? body.shareToken : \"\";\n\n const payload = await verifyJwt<{ foyerId: number }>(shareToken, \"SHARE_TOKEN_SECRET\");\n if (!payload?.foyerId) return c.json({ error: \"Lien de partage invalide.\" }, 400);\n\n const foyer = await sqlite.execute({ sql: \"SELECT * FROM foyers WHERE id = ?\", args: [payload.foyerId] });\n const row = foyer.rows[0] as unknown as FoyerRow | undefined;\n if (!row) return c.json({ error: \"Foyer introuvable.\" }, 404);\n\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO foyer_access (foyer_id, user_id, role) VALUES (?, ?, 'member')\",\n args: [row.id, userId],\n });\n\n return c.json({ foyer: toFoyer(row) });\n});\n",[],[154,270,296],"345b4fa4-b4b2-43c6-abdb-e7eb8be8bbe4","auth.ts","352c1726-a555-11f1-b76c-1607ee4eb77e",11,["D",1788192080765],"import { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {\n clearSessionCookie,\n createSessionCookie,\n hashPassword,\n verifyPassword,\n} from \"../lib/auth.ts\";\nimport { encryptSecret } from \"../lib/crypto.ts\";\nimport { requireAuth, type AppEnv } from \"../middleware/auth.ts\";\nimport { verifyJwt } from \"../lib/jwt.ts\";\nimport type { PublicUser } from \"../../shared/types.ts\";\n\nexport const authRoutes = new Hono();\n\nconst USERNAME_RE = /^[a-zA-Z0-9_-]{3,32}$/;\n\ninterface UserRow {\n id: number;\n username: string;\n email: string | null;\n anthropic_api_key_encrypted: string | null;\n created_at: string;\n}\n\nfunction toPublicUser(row: UserRow): PublicUser {\n return {\n id: row.id,\n username: row.username,\n email: row.email,\n hasApiKey: !!row.anthropic_api_key_encrypted,\n createdAt: row.created_at,\n };\n}\n\nauthRoutes.post(\"/signup\", async (c) => {\n const body = await c.req.json().catch(() => null);\n const username = typeof body?.username === \"string\" ? body.username.trim() : \"\";\n const password = typeof body?.password === \"string\" ? body.password : \"\";\n const email = typeof body?.email === \"string\" && body.email.trim() ? body.email.trim() : null;\n // Jeton de partage optionnel : rejoindre un foyer existant lors de l'inscription.\n const shareToken = typeof body?.shareToken === \"string\" ? body.shareToken : null;\n\n if (!USERNAME_RE.test(username)) {\n return c.json({ error: \"Nom d'utilisateur invalide (3 à 32 caractères, lettres/chiffres/-/_).\" }, 400);\n }\n if (password.length < 8) {\n return c.json({ error: \"Le mot de passe doit contenir au moins 8 caractères.\" }, 400);\n }\n\n const existing = await sqlite.execute({\n sql: \"SELECT id FROM users WHERE username = ?\",\n args: [username],\n });\n if (existing.rows.length > 0) {\n return c.json({ error: \"Ce nom d'utilisateur est déjà pris.\" }, 409);\n }\n\n const passwordHash = await hashPassword(password);\n const insertResult = await sqlite.execute({\n sql: \"INSERT INTO users (username, password_hash, email) VALUES (?, ?, ?)\",\n args: [username, passwordHash, email],\n });\n const userId = Number(insertResult.lastInsertRowid);\n\n if (shareToken) {\n const payload = await verifyJwt<{ foyerId: number }>(shareToken, \"SHARE_TOKEN_SECRET\");\n if (payload?.foyerId) {\n const foyer = await sqlite.execute({\n sql: \"SELECT id FROM foyers WHERE id = ?\",\n args: [payload.foyerId],\n });\n if (foyer.rows.length > 0) {\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO foyer_access (foyer_id, user_id, role) VALUES (?, ?, 'member')\",\n args: [payload.foyerId, userId],\n });\n }\n }\n }\n\n const cookie = await createSessionCookie({ userId, username });\n c.header(\"Set-Cookie\", cookie);\n\n const row = (await sqlite.execute({ sql: \"SELECT * FROM users WHERE id = ?\", args: [userId] }))\n .rows[0] as unknown as UserRow;\n return c.json({ user: toPublicUser(row) }, 201);\n});\n\nauthRoutes.post(\"/login\", async (c) => {\n const body = await c.req.json().catch(() => null);\n const username = typeof body?.username === \"string\" ? body.username.trim() : \"\";\n const password = typeof body?.password === \"string\" ? body.password : \"\";\n\n const result = await sqlite.execute({\n sql: \"SELECT * FROM users WHERE username = ?\",\n args: [username],\n });\n const row = result.rows[0] as unknown as (UserRow & { password_hash: string }) | undefined;\n if (!row || !(await verifyPassword(password, row.password_hash))) {\n return c.json({ error: \"Identifiants incorrects.\" }, 401);\n }\n\n const cookie = await createSessionCookie({ userId: row.id, username: row.username });\n c.header(\"Set-Cookie\", cookie);\n return c.json({ user: toPublicUser(row) });\n});\n\nauthRoutes.post(\"/logout\", (c) => {\n c.header(\"Set-Cookie\", clearSessionCookie());\n return c.json({ ok: true });\n});\n\nauthRoutes.get(\"/me\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const result = await sqlite.execute({ sql: \"SELECT * FROM users WHERE id = ?\", args: [userId] });\n const row = result.rows[0] as unknown as UserRow | undefined;\n if (!row) return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n return c.json({ user: toPublicUser(row) });\n});\n\nauthRoutes.put(\"/me/api-key\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n const body = await c.req.json().catch(() => null);\n const apiKey = typeof body?.apiKey === \"string\" ? body.apiKey.trim() : \"\";\n if (!apiKey) return c.json({ error: \"Clé API manquante.\" }, 400);\n\n const encrypted = await encryptSecret(apiKey);\n await sqlite.execute({\n sql: \"UPDATE users SET anthropic_api_key_encrypted = ? WHERE id = ?\",\n args: [encrypted, userId],\n });\n return c.json({ ok: true });\n});\n\nauthRoutes.delete(\"/me/api-key\", requireAuth, async (c) => {\n const userId = c.get(\"userId\");\n await sqlite.execute({\n sql: \"UPDATE users SET anthropic_api_key_encrypted = NULL WHERE id = ?\",\n args: [userId],\n });\n return c.json({ ok: true });\n});\n",[],[154,270,304],"6690d559-7bf6-4310-aefc-de5a687be263",["D",1788192080765],[184,185,186,187,188,189],[154,270],"346fa4c2-6e17-4687-a27a-68fcbffd8a41","29a1fe98-a555-11f1-9f75-1607ee4eb77e","6b001f32-8ae5-4b85-89b5-e784270035c0",10,["D",1788192061434],"import type { Context, Next } from \"npm:hono@4\";\nimport { getSessionFromCookie } from \"../lib/auth.ts\";\n\nexport interface AuthedVariables {\n userId: number;\n username: string;\n}\n\nexport type AppEnv = { Variables: AuthedVariables };\n\n/** Exige une session valide ; répond 401 sinon. */\nexport async function requireAuth(c: Context, next: Next) {\n const session = await getSessionFromCookie(c.req.header(\"cookie\") ?? null);\n if (!session) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n c.set(\"userId\", session.userId);\n c.set(\"username\", session.username);\n await next();\n}\n",[],[154,323,304],"middleware","657a58f4-aa57-4eb1-910b-f24f9d516a88",["D",1788192061434],[182],[154,323],"f5a42b2f-69ff-41fd-9f2e-f515a8870fe5","shopping.ts","281054da-a555-11f1-aeae-1607ee4eb77e","625001a9-80e0-4b73-81da-267477a3a76f",9,["D",1788192058802],"import type { GeneratedMenu, ShoppingListItem } from \"../../shared/types.ts\";\n\n// Unités regroupées en familles convertibles : on ne peut sommer des\n// quantités que si elles partagent une famille (masse, volume, ou pièce).\n// Tout le reste (cuillère à soupe, pincée, botte, ...) reste \"libre\" et\n// s'affiche séparément plutôt que d'être additionné à tort.\nconst MASS_TO_GRAMS: Record = {\n g: 1,\n gramme: 1,\n grammes: 1,\n kg: 1000,\n kilo: 1000,\n kilos: 1000,\n};\n\nconst VOLUME_TO_ML: Record = {\n ml: 1,\n cl: 10,\n l: 1000,\n litre: 1000,\n litres: 1000,\n};\n\nconst PIECE_UNITS = new Set([\"\", \"piece\", \"pièce\", \"pieces\", \"pièces\", \"unite\", \"unité\"]);\n\nfunction normalizeUnit(unit: string): string {\n return unit.trim().toLowerCase();\n}\n\nfunction normalizeName(name: string): string {\n return name.trim().toLowerCase().replace(/\\s+/g, \" \");\n}\n\n/** Catégories de rayon simples, par mots-clés — pour un tri manuel utile en magasin. */\nconst CATEGORY_KEYWORDS: [string, string[]][] = [\n [\"Fruits & légumes\", [\n \"tomate\", \"carotte\", \"oignon\", \"ail\", \"pomme\", \"banane\", \"salade\", \"courgette\",\n \"poivron\", \"citron\", \"aubergine\", \"champignon\", \"epinard\", \"épinard\", \"brocoli\",\n \"poireau\", \"haricot\", \"concombre\", \"persil\", \"basilic\", \"herbe\",\n ]],\n [\"Viandes & poissons\", [\n \"poulet\", \"boeuf\", \"bœuf\", \"porc\", \"agneau\", \"saumon\", \"poisson\", \"dinde\",\n \"jambon\", \"lardons\", \"crevette\", \"thon\", \"steak\",\n ]],\n [\"Crèmerie\", [\n \"lait\", \"beurre\", \"creme\", \"crème\", \"fromage\", \"yaourt\", \"oeuf\", \"œuf\",\n ]],\n [\"Épicerie\", [\n \"pate\", \"pâte\", \"riz\", \"farine\", \"sucre\", \"sel\", \"poivre\", \"huile\", \"vinaigre\",\n \"conserve\", \"bouillon\", \"epice\", \"épice\", \"sauce\", \"lentille\", \"pois chiche\",\n ]],\n [\"Boulangerie\", [\"pain\", \"baguette\", \"brioche\"]],\n [\"Surgelés\", [\"surgele\", \"surgelé\", \"glace\"]],\n];\n\nfunction guessCategory(ingredientName: string): string {\n const normalized = normalizeName(ingredientName);\n for (const [category, keywords] of CATEGORY_KEYWORDS) {\n if (keywords.some((keyword) => normalized.includes(keyword))) return category;\n }\n return \"Autres\";\n}\n\ninterface Accumulator {\n nom: string;\n categorie: string;\n massGrams: number;\n volumeMl: number;\n pieceCount: number;\n freeQuantities: string[]; // \"2 cuillères à soupe\", etc., non convertibles\n hasMass: boolean;\n hasVolume: boolean;\n hasPiece: boolean;\n}\n\nfunction parseQuantity(raw: string): number | null {\n const normalized = raw.trim().replace(\",\", \".\");\n const value = parseFloat(normalized);\n return Number.isFinite(value) ? value : null;\n}\n\n/**\n * Agrège les ingrédients de plusieurs menus (plat principal uniquement — les\n * alternatives individuelles ne sont pas incluses dans la liste de courses\n * commune, car elles concernent un seul membre et sont affichées à part).\n */\nexport function buildShoppingList(menus: GeneratedMenu[]): ShoppingListItem[] {\n const accumulators = new Map();\n\n for (const menu of menus) {\n for (const ingredient of menu.platPrincipal.ingredients) {\n const key = normalizeName(ingredient.nom);\n if (!accumulators.has(key)) {\n accumulators.set(key, {\n nom: ingredient.nom.trim(),\n categorie: guessCategory(ingredient.nom),\n massGrams: 0,\n volumeMl: 0,\n pieceCount: 0,\n freeQuantities: [],\n hasMass: false,\n hasVolume: false,\n hasPiece: false,\n });\n }\n const acc = accumulators.get(key)!;\n const unit = normalizeUnit(ingredient.unite);\n const qty = parseQuantity(ingredient.quantite);\n\n if (qty !== null && unit in MASS_TO_GRAMS) {\n acc.massGrams += qty * MASS_TO_GRAMS[unit];\n acc.hasMass = true;\n } else if (qty !== null && unit in VOLUME_TO_ML) {\n acc.volumeMl += qty * VOLUME_TO_ML[unit];\n acc.hasVolume = true;\n } else if (qty !== null && PIECE_UNITS.has(unit)) {\n acc.pieceCount += qty;\n acc.hasPiece = true;\n } else {\n acc.freeQuantities.push(`${ingredient.quantite} ${ingredient.unite}`.trim());\n }\n }\n }\n\n const items: ShoppingListItem[] = [];\n for (const acc of accumulators.values()) {\n // Une même ligne peut mélanger une quantité convertie et des quantités\n // libres (ex : \"500g\" + \"1 pincée\") : on émet une ligne principale pour\n // la quantité convertie, et on rattache le reste en quantité libre.\n if (acc.hasMass) {\n const useKg = acc.massGrams >= 1000;\n items.push({\n nom: acc.nom,\n quantite: useKg ? roundTo(acc.massGrams / 1000, 2) : acc.massGrams,\n unite: useKg ? \"kg\" : \"g\",\n categorie: acc.categorie,\n quantiteLibre: null,\n });\n }\n if (acc.hasVolume) {\n const useL = acc.volumeMl >= 1000;\n items.push({\n nom: acc.nom,\n quantite: useL ? roundTo(acc.volumeMl / 1000, 2) : acc.volumeMl,\n unite: useL ? \"L\" : \"ml\",\n categorie: acc.categorie,\n quantiteLibre: null,\n });\n }\n if (acc.hasPiece) {\n items.push({\n nom: acc.nom,\n quantite: acc.pieceCount,\n unite: \"pièce(s)\",\n categorie: acc.categorie,\n quantiteLibre: null,\n });\n }\n for (const free of acc.freeQuantities) {\n items.push({\n nom: acc.nom,\n quantite: null,\n unite: \"\",\n categorie: acc.categorie,\n quantiteLibre: free,\n });\n }\n }\n\n return items.sort((a, b) => {\n if (a.categorie !== b.categorie) return a.categorie.localeCompare(b.categorie, \"fr\");\n return a.nom.localeCompare(b.nom, \"fr\");\n });\n}\n\nexport function shoppingListToText(items: ShoppingListItem[]): string {\n const byCategory = new Map();\n for (const item of items) {\n if (!byCategory.has(item.categorie)) byCategory.set(item.categorie, []);\n byCategory.get(item.categorie)!.push(item);\n }\n const lines: string[] = [];\n for (const [category, categoryItems] of byCategory) {\n lines.push(`## ${category}`);\n for (const item of categoryItems) {\n const qty = item.quantite !== null\n ? `${formatQuantity(item.quantite)} ${item.unite}`.trim()\n : (item.quantiteLibre ?? \"\");\n lines.push(`- ${item.nom} — ${qty}`);\n }\n lines.push(\"\");\n }\n return lines.join(\"\\n\").trim();\n}\n\nfunction formatQuantity(n: number): string {\n return Number.isInteger(n) ? `${n}` : n.toFixed(2);\n}\n\nfunction roundTo(n: number, decimals: number): number {\n const factor = 10 ** decimals;\n return Math.round(n * factor) / factor;\n}\n",[],[154,337,329],"lib","72a641ba-3077-41df-9592-32759a2ef6ef","jwt.ts","1be43f32-a555-11f1-af6d-1607ee4eb77e",8,["D",1788192038382],"// Implémentation minimale de JWT (HS256) avec Web Crypto — pas de dépendance\n// externe. Utilisé pour les cookies de session et les liens de partage de foyer.\n\nfunction base64UrlEncode(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nfunction base64UrlDecode(str: string): Uint8Array {\n const padded = str.replace(/-/g, \"+\").replace(/_/g, \"/\").padEnd(\n str.length + ((4 - (str.length % 4)) % 4),\n \"=\",\n );\n const binary = atob(padded);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes;\n}\n\nasync function getHmacKey(secretName: string): Promise {\n const secret = Deno.env.get(secretName);\n if (!secret) {\n throw new Error(`${secretName} n'est pas configurée (variable d'environnement du val).`);\n }\n return crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\", \"verify\"],\n );\n}\n\nexport async function signJwt(\n payload: Record,\n secretName: string,\n expiresInSeconds?: number,\n): Promise {\n const header = { alg: \"HS256\", typ: \"JWT\" };\n const body = expiresInSeconds\n ? { ...payload, exp: Math.floor(Date.now() / 1000) + expiresInSeconds }\n : payload;\n\n const headerB64 = base64UrlEncode(new TextEncoder().encode(JSON.stringify(header)));\n const bodyB64 = base64UrlEncode(new TextEncoder().encode(JSON.stringify(body)));\n const signingInput = `${headerB64}.${bodyB64}`;\n\n const key = await getHmacKey(secretName);\n const signature = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(signingInput),\n );\n const signatureB64 = base64UrlEncode(new Uint8Array(signature));\n\n return `${signingInput}.${signatureB64}`;\n}\n\nexport async function verifyJwt>(\n token: string,\n secretName: string,\n): Promise {\n const parts = token.split(\".\");\n if (parts.length !== 3) return null;\n const [headerB64, bodyB64, signatureB64] = parts;\n\n try {\n const key = await getHmacKey(secretName);\n const valid = await crypto.subtle.verify(\n \"HMAC\",\n key,\n base64UrlDecode(signatureB64),\n new TextEncoder().encode(`${headerB64}.${bodyB64}`),\n );\n if (!valid) return null;\n\n const payload = JSON.parse(new TextDecoder().decode(base64UrlDecode(bodyB64)));\n if (typeof payload.exp === \"number\" && payload.exp < Math.floor(Date.now() / 1000)) {\n return null; // expiré\n }\n return payload as T;\n } catch {\n return null;\n }\n}\n",[],[154,337,339],"b1c8167d-1abd-44b0-abd6-ec3321d80692","foyerAccess.ts","16fda8fa-a555-11f1-8fbd-1607ee4eb77e",7,["D",1788192030140],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n/** Renvoie le foyer_id auquel l'utilisateur a accès (propriétaire ou invité), ou null. */\nexport async function getAccessibleFoyerId(userId: number): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT foyer_id FROM foyer_access WHERE user_id = ? ORDER BY id ASC LIMIT 1\",\n args: [userId],\n });\n const row = result.rows[0] as unknown as { foyer_id: number } | undefined;\n return row ? row.foyer_id : null;\n}\n\nexport async function userHasFoyerAccess(userId: number, foyerId: number): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT 1 FROM foyer_access WHERE user_id = ? AND foyer_id = ? LIMIT 1\",\n args: [userId, foyerId],\n });\n return result.rows.length > 0;\n}\n",[],[154,337,347],"8ae70c7b-4aec-4556-872b-e202e2d8ac94","dates.ts","1560ab64-a555-11f1-9b2b-1607ee4eb77e",6,["D",1788192027447],"// Helpers de dates — toutes les semaines sont ancrées sur le lundi,\n// au format YYYY-MM-DD (UTC, pour rester stable indépendamment du fuseau du serveur).\n\nfunction toIsoDate(d: Date): string {\n return d.toISOString().slice(0, 10);\n}\n\n/** Renvoie le lundi (YYYY-MM-DD) de la semaine contenant `date` (par défaut aujourd'hui). */\nexport function mondayOf(date: Date = new Date()): string {\n const d = new Date(Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate()));\n const day = d.getUTCDay(); // 0 = dimanche ... 6 = samedi\n const diffToMonday = day === 0 ? -6 : 1 - day;\n d.setUTCDate(d.getUTCDate() + diffToMonday);\n return toIsoDate(d);\n}\n\nexport function currentWeekStart(): string {\n return mondayOf(new Date());\n}\n\n/** Liste les N lundis précédant (strictement) `weekStartDate`, du plus récent au plus ancien. */\nexport function previousWeekStarts(weekStartDate: string, count: number): string[] {\n const [y, m, d] = weekStartDate.split(\"-\").map(Number);\n const base = new Date(Date.UTC(y, m - 1, d));\n const result: string[] = [];\n for (let i = 1; i <= count; i++) {\n const prev = new Date(base);\n prev.setUTCDate(prev.getUTCDate() - 7 * i);\n result.push(toIsoDate(prev));\n }\n return result;\n}\n",[],[154,337,355],"bfdce5f1-8133-44c3-910c-5027ca3a263b","crypto.ts","126f38c6-a555-11f1-8062-1607ee4eb77e",5,["D",1788192022509],"// Chiffrement symétrique (AES-GCM) de la clé API Anthropic avant stockage en\n// base, et helpers de hachage de mot de passe + signature de session.\n// Tout repose sur Web Crypto (natif Deno), aucune dépendance externe.\n\nfunction getEncryptionKeyMaterial(): string {\n const secret = Deno.env.get(\"ENCRYPTION_SECRET\");\n if (!secret) {\n throw new Error(\n \"ENCRYPTION_SECRET n'est pas configurée (variable d'environnement du val).\",\n );\n }\n return secret;\n}\n\nasync function deriveAesKey(): Promise {\n const material = getEncryptionKeyMaterial();\n const keyBytes = await crypto.subtle.digest(\n \"SHA-256\",\n new TextEncoder().encode(material),\n );\n return crypto.subtle.importKey(\"raw\", keyBytes, \"AES-GCM\", false, [\n \"encrypt\",\n \"decrypt\",\n ]);\n}\n\nfunction toBase64(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary);\n}\n\nfunction fromBase64(b64: string): Uint8Array {\n const binary = atob(b64);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes;\n}\n\nexport async function encryptSecret(plaintext: string): Promise {\n const key = await deriveAesKey();\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const ciphertext = await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv },\n key,\n new TextEncoder().encode(plaintext),\n );\n return `${toBase64(iv)}.${toBase64(new Uint8Array(ciphertext))}`;\n}\n\nexport async function decryptSecret(payload: string): Promise {\n const [ivB64, dataB64] = payload.split(\".\");\n if (!ivB64 || !dataB64) throw new Error(\"Format de secret chiffré invalide.\");\n const key = await deriveAesKey();\n const plaintext = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv: fromBase64(ivB64) },\n key,\n fromBase64(dataB64),\n );\n return new TextDecoder().decode(plaintext);\n}\n",[],[154,337,363],"171b0eb6-1575-4ed4-8121-234cbbf3ae3f","claude.ts","0e9589bc-a555-11f1-976f-1607ee4eb77e",4,["D",1788192016043],"import type { GeneratedMenu, Member, MealType } from \"../../shared/types.ts\";\n\nconst ANTHROPIC_API_URL = \"https://api.anthropic.com/v1/messages\";\nconst MODEL = \"claude-sonnet-4-5\";\nconst REQUEST_TIMEOUT_MS = 15000;\n\nexport class ClaudeGenerationError extends Error {}\n\nfunction preferencesSummary(member: Member): string {\n const flags: string[] = [];\n if (member.preferences.vegetarien) flags.push(\"végétarien\");\n if (member.preferences.vegan) flags.push(\"vegan\");\n if (member.preferences.sansGluten) flags.push(\"sans gluten\");\n if (member.preferences.sansLactose) flags.push(\"sans lactose\");\n const notes = member.preferences.notesLibres?.trim();\n const parts = [...flags];\n if (notes) parts.push(notes);\n return parts.length > 0 ? parts.join(\", \") : \"aucune restriction particulière\";\n}\n\nasync function callClaude(apiKey: string, prompt: string): Promise {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);\n\n let response: Response;\n try {\n response = await fetch(ANTHROPIC_API_URL, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": apiKey,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: MODEL,\n max_tokens: 2048,\n messages: [{ role: \"user\", content: prompt }],\n }),\n signal: controller.signal,\n });\n } catch (err) {\n if (err instanceof DOMException && err.name === \"AbortError\") {\n throw new ClaudeGenerationError(\"Le service de génération a mis trop de temps à répondre.\");\n }\n throw new ClaudeGenerationError(\"Impossible de contacter le service de génération.\");\n } finally {\n clearTimeout(timeout);\n }\n\n if (response.status === 401) {\n throw new ClaudeGenerationError(\"Clé API Anthropic invalide ou expirée.\");\n }\n if (!response.ok) {\n throw new ClaudeGenerationError(`Le service de génération a répondu une erreur (${response.status}).`);\n }\n\n const data = await response.json();\n const text = data?.content?.[0]?.text;\n if (typeof text !== \"string\") {\n throw new ClaudeGenerationError(\"Réponse du service de génération illisible.\");\n }\n return text;\n}\n\nfunction extractJson(text: string): unknown {\n const fenced = text.match(/```(?:json)?\\s*([\\s\\S]*?)```/);\n const candidate = fenced ? fenced[1] : text;\n try {\n return JSON.parse(candidate.trim());\n } catch {\n throw new ClaudeGenerationError(\"Réponse du service de génération mal formée (JSON invalide).\");\n }\n}\n\nexport async function generateMenu(\n apiKey: string,\n numPeople: number,\n mealType: MealType,\n members: Member[],\n): Promise {\n const restrictionsCommunes = members.map((m) => `- ${m.name}: ${preferencesSummary(m)}`).join(\"\\n\");\n\n const prompt = `Tu es un assistant culinaire. Génère un menu pour ${numPeople} personne(s) pour un repas de ${mealType}.\n\nRestrictions et préférences des membres du foyer (à respecter pour le plat commun quand c'est possible ; sinon prévoir une alternative individuelle) :\n${restrictionsCommunes}\n\nRègles :\n- Le plat principal doit convenir à un maximum de monde. S'il ne peut pas convenir à un membre à cause d'une restriction stricte (allergie, régime), prévois une alternative individuelle pour ce membre uniquement.\n- Les quantités d'ingrédients doivent être adaptées au nombre de personnes indiqué.\n- Utilise des unités simples et cohérentes : \"g\", \"kg\", \"ml\", \"cl\", \"L\", ou \"\" (pièce) pour les ingrédients comptables.\n- Réponds UNIQUEMENT avec un objet JSON valide, sans texte autour, au format exact suivant :\n\n{\n \"plat_principal\": {\n \"titre\": \"string\",\n \"ingredients\": [{\"nom\": \"string\", \"quantite\": \"string\", \"unite\": \"string\"}],\n \"instructions\": \"string (quelques phrases courtes)\"\n },\n \"alternatives_individuelles\": [\n {\"pour_membre\": \"nom exact du membre\", \"titre\": \"string\", \"raison\": \"string\"}\n ]\n}\n\nSi aucune alternative n'est nécessaire, renvoie \"alternatives_individuelles\": [].`;\n\n const raw = await callClaude(apiKey, prompt);\n const parsed = extractJson(raw) as {\n plat_principal: { titre: string; ingredients: { nom: string; quantite: string; unite: string }[]; instructions: string };\n alternatives_individuelles: { pour_membre: string; titre: string; raison: string }[];\n };\n\n const byName = new Map(members.map((m) => [m.name, m]));\n\n return {\n platPrincipal: {\n titre: parsed.plat_principal.titre,\n ingredients: parsed.plat_principal.ingredients,\n instructions: parsed.plat_principal.instructions,\n },\n alternativesIndividuelles: (parsed.alternatives_individuelles ?? [])\n .map((alt) => {\n const member = byName.get(alt.pour_membre);\n if (!member) return null;\n return {\n pourMemberId: member.id,\n membreName: member.name,\n titre: alt.titre,\n raison: alt.raison,\n };\n })\n .filter((alt): alt is NonNullable => alt !== null),\n };\n}\n\nexport interface AlternativeOption {\n titre: string;\n ingredients: { nom: string; quantite: string; unite: string }[];\n instructions: string;\n raison: string;\n}\n\nexport async function generateAlternatives(\n apiKey: string,\n member: Member,\n currentDishTitle: string,\n): Promise {\n const prompt = `Le plat prévu pour ce repas est \"${currentDishTitle}\", mais il ne convient pas (ou peu) à ${member.name}.\nPréférences et restrictions de ${member.name} : ${preferencesSummary(member)}.\n\nPropose exactement 3 plats alternatifs adaptés, variés entre eux. Réponds UNIQUEMENT avec un objet JSON valide au format exact :\n\n{\n \"options\": [\n {\n \"titre\": \"string\",\n \"ingredients\": [{\"nom\": \"string\", \"quantite\": \"string\", \"unite\": \"string\"}],\n \"instructions\": \"string (quelques phrases courtes)\",\n \"raison\": \"string (pourquoi ce plat convient)\"\n }\n ]\n}\n\nLe tableau \"options\" doit contenir exactement 3 éléments.`;\n\n const raw = await callClaude(apiKey, prompt);\n const parsed = extractJson(raw) as { options: AlternativeOption[] };\n return parsed.options ?? [];\n}\n",[],[154,337,371],"ddcb559a-43ce-432c-b953-bdc207ccb83e","040f543c-a555-11f1-97f0-1607ee4eb77e",["D",1788191998400],"import bcrypt from \"npm:bcryptjs@2.4.3\";\nimport { signJwt, verifyJwt } from \"./jwt.ts\";\n\nconst SESSION_COOKIE = \"session\";\nconst SESSION_SECRET_NAME = \"SESSION_SECRET\";\nconst SESSION_TTL_SECONDS = 60 * 60 * 24 * 30; // 30 jours\n\nexport interface SessionPayload {\n userId: number;\n username: string;\n}\n\nexport async function hashPassword(password: string): Promise {\n return bcrypt.hash(password, 10);\n}\n\nexport async function verifyPassword(password: string, hash: string): Promise {\n return bcrypt.compare(password, hash);\n}\n\nexport async function createSessionCookie(payload: SessionPayload): Promise {\n const token = await signJwt({ ...payload }, SESSION_SECRET_NAME, SESSION_TTL_SECONDS);\n const maxAge = SESSION_TTL_SECONDS;\n return `${SESSION_COOKIE}=${token}; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=${maxAge}`;\n}\n\nexport function clearSessionCookie(): string {\n return `${SESSION_COOKIE}=; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=0`;\n}\n\nexport function readSessionCookieValue(cookieHeader: string | null): string | null {\n if (!cookieHeader) return null;\n const match = cookieHeader\n .split(\";\")\n .map((part) => part.trim())\n .find((part) => part.startsWith(`${SESSION_COOKIE}=`));\n if (!match) return null;\n return match.slice(SESSION_COOKIE.length + 1);\n}\n\nexport async function getSessionFromCookie(\n cookieHeader: string | null,\n): Promise {\n const token = readSessionCookieValue(cookieHeader);\n if (!token) return null;\n const payload = await verifyJwt(\n token,\n SESSION_SECRET_NAME,\n );\n if (!payload) return null;\n return { userId: payload.userId, username: payload.username };\n}\n",[],[154,337,304],"776b0922-f1d9-49cf-8ebd-5d82c9279641",["D",1788191998400],[174,175,176,177,178,179,180],[154,337],"fd4c5f3e-9205-46c7-b61a-988472846d13","schema.ts","015ccdb4-a555-11f1-b518-1607ee4eb77e","33d9d9fc-70d9-4462-9b17-b10ca5880ffa",2,["D",1788191993442],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// Idempotent schema setup — appelé au démarrage de chaque requête froide.\n// CREATE TABLE IF NOT EXISTS partout : sûr à ré-exécuter.\nexport async function ensureSchema() {\n await sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n email TEXT,\n anthropic_api_key_encrypted TEXT,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS foyers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL REFERENCES users(id),\n name TEXT NOT NULL,\n share_token TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n // Table de jonction : un foyer peut être partagé et rejoint par plusieurs\n // comptes utilisateurs (propriétaire inclus).\n {\n sql: `CREATE TABLE IF NOT EXISTS foyer_access (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n foyer_id INTEGER NOT NULL REFERENCES foyers(id),\n user_id INTEGER NOT NULL REFERENCES users(id),\n role TEXT NOT NULL DEFAULT 'member',\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(foyer_id, user_id)\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS members (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n foyer_id INTEGER NOT NULL REFERENCES foyers(id),\n name TEXT NOT NULL,\n preferences TEXT NOT NULL DEFAULT '{}',\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS weeks (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n foyer_id INTEGER NOT NULL REFERENCES foyers(id),\n week_start_date TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(foyer_id, week_start_date)\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS meals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n week_id INTEGER NOT NULL REFERENCES weeks(id),\n day_of_week INTEGER NOT NULL,\n meal_type TEXT NOT NULL CHECK (meal_type IN ('midi', 'soir')),\n num_people INTEGER NOT NULL DEFAULT 0,\n generated_menu TEXT,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(week_id, day_of_week, meal_type)\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS meal_modifications (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n meal_id INTEGER NOT NULL REFERENCES meals(id),\n member_id INTEGER REFERENCES members(id),\n alternative_dish TEXT NOT NULL,\n is_individual INTEGER NOT NULL DEFAULT 1,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n ]);\n}\n",[],[154,397,389],"db","e3698a61-28ac-40d3-bb2f-c5feb458113b",["D",1788191993442],[172],[154,397],["D",1788191982713],[171,173,181,183,190],[154],["D",1788191950718],["D",1789497078049],{"_106":105,"_113":108},{"_106":105,"_107":108,"_109":108,"_18":61,"_110":111,"_112":25},{"_13":95,"_32":96,"_49":41,"_97":50,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":-5,"_103":51,"_104":105},"ctx",{"_88":-5,"_132":443,"_444":445,"_446":447,"_448":25,"_449":25,"_450":25,"_451":65,"_452":-5,"_453":-7,"_454":-7,"_455":69,"_456":25,"_457":25,"_458":-5,"_459":25,"_460":25,"_461":25,"_462":-5},"ENV",{"_414":415,"_416":417,"_418":96,"_419":420,"_421":422,"_423":424,"_425":426,"_427":428,"_429":430,"_431":432,"_433":434,"_435":436,"_437":438,"_439":440,"_441":442},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v22