[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_250":251,"_252":253},"routes/_app.x.$handle.$name",{"_99":98,"_31":44,"_107":89,"_26":101,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":24,"_121":122,"_123":58,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":24},"version",9,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","backend/lib/shopping.ts","latestPath","fileId","281054da-a555-11f1-aeae-1607ee4eb77e","name","shopping.ts","fileType","script","content","import type { GeneratedMenu, ShoppingListItem } from \"../../shared/types.ts\";\n\n// Unités regroupées en familles convertibles : on ne peut sommer des\n// quantités que si elles partagent une famille (masse, volume, ou pièce).\n// Tout le reste (cuillère à soupe, pincée, botte, ...) reste \"libre\" et\n// s'affiche séparément plutôt que d'être additionné à tort.\nconst MASS_TO_GRAMS: Record = {\n g: 1,\n gramme: 1,\n grammes: 1,\n kg: 1000,\n kilo: 1000,\n kilos: 1000,\n};\n\nconst VOLUME_TO_ML: Record = {\n ml: 1,\n cl: 10,\n l: 1000,\n litre: 1000,\n litres: 1000,\n};\n\nconst PIECE_UNITS = new Set([\"\", \"piece\", \"pièce\", \"pieces\", \"pièces\", \"unite\", \"unité\"]);\n\nfunction normalizeUnit(unit: string): string {\n return unit.trim().toLowerCase();\n}\n\nfunction normalizeName(name: string): string {\n return name.trim().toLowerCase().replace(/\\s+/g, \" \");\n}\n\n/** Catégories de rayon simples, par mots-clés — pour un tri manuel utile en magasin. */\nconst CATEGORY_KEYWORDS: [string, string[]][] = [\n [\"Fruits & légumes\", [\n \"tomate\", \"carotte\", \"oignon\", \"ail\", \"pomme\", \"banane\", \"salade\", \"courgette\",\n \"poivron\", \"citron\", \"aubergine\", \"champignon\", \"epinard\", \"épinard\", \"brocoli\",\n \"poireau\", \"haricot\", \"concombre\", \"persil\", \"basilic\", \"herbe\",\n ]],\n [\"Viandes & poissons\", [\n \"poulet\", \"boeuf\", \"bœuf\", \"porc\", \"agneau\", \"saumon\", \"poisson\", \"dinde\",\n \"jambon\", \"lardons\", \"crevette\", \"thon\", \"steak\",\n ]],\n [\"Crèmerie\", [\n \"lait\", \"beurre\", \"creme\", \"crème\", \"fromage\", \"yaourt\", \"oeuf\", \"œuf\",\n ]],\n [\"Épicerie\", [\n \"pate\", \"pâte\", \"riz\", \"farine\", \"sucre\", \"sel\", \"poivre\", \"huile\", \"vinaigre\",\n \"conserve\", \"bouillon\", \"epice\", \"épice\", \"sauce\", \"lentille\", \"pois chiche\",\n ]],\n [\"Boulangerie\", [\"pain\", \"baguette\", \"brioche\"]],\n [\"Surgelés\", [\"surgele\", \"surgelé\", \"glace\"]],\n];\n\nfunction guessCategory(ingredientName: string): string {\n const normalized = normalizeName(ingredientName);\n for (const [category, keywords] of CATEGORY_KEYWORDS) {\n if (keywords.some((keyword) => normalized.includes(keyword))) return category;\n }\n return \"Autres\";\n}\n\ninterface Accumulator {\n nom: string;\n categorie: string;\n massGrams: number;\n volumeMl: number;\n pieceCount: number;\n freeQuantities: string[]; // \"2 cuillères à soupe\", etc., non convertibles\n hasMass: boolean;\n hasVolume: boolean;\n hasPiece: boolean;\n}\n\nfunction parseQuantity(raw: string): number | null {\n const normalized = raw.trim().replace(\",\", \".\");\n const value = parseFloat(normalized);\n return Number.isFinite(value) ? value : null;\n}\n\n/**\n * Agrège les ingrédients de plusieurs menus (plat principal uniquement — les\n * alternatives individuelles ne sont pas incluses dans la liste de courses\n * commune, car elles concernent un seul membre et sont affichées à part).\n */\nexport function buildShoppingList(menus: GeneratedMenu[]): ShoppingListItem[] {\n const accumulators = new Map();\n\n for (const menu of menus) {\n for (const ingredient of menu.platPrincipal.ingredients) {\n const key = normalizeName(ingredient.nom);\n if (!accumulators.has(key)) {\n accumulators.set(key, {\n nom: ingredient.nom.trim(),\n categorie: guessCategory(ingredient.nom),\n massGrams: 0,\n volumeMl: 0,\n pieceCount: 0,\n freeQuantities: [],\n hasMass: false,\n hasVolume: false,\n hasPiece: false,\n });\n }\n const acc = accumulators.get(key)!;\n const unit = normalizeUnit(ingredient.unite);\n const qty = parseQuantity(ingredient.quantite);\n\n if (qty !== null && unit in MASS_TO_GRAMS) {\n acc.massGrams += qty * MASS_TO_GRAMS[unit];\n acc.hasMass = true;\n } else if (qty !== null && unit in VOLUME_TO_ML) {\n acc.volumeMl += qty * VOLUME_TO_ML[unit];\n acc.hasVolume = true;\n } else if (qty !== null && PIECE_UNITS.has(unit)) {\n acc.pieceCount += qty;\n acc.hasPiece = true;\n } else {\n acc.freeQuantities.push(`${ingredient.quantite} ${ingredient.unite}`.trim());\n }\n }\n }\n\n const items: ShoppingListItem[] = [];\n for (const acc of accumulators.values()) {\n // Une même ligne peut mélanger une quantité convertie et des quantités\n // libres (ex : \"500g\" + \"1 pincée\") : on émet une ligne principale pour\n // la quantité convertie, et on rattache le reste en quantité libre.\n if (acc.hasMass) {\n const useKg = acc.massGrams >= 1000;\n items.push({\n nom: acc.nom,\n quantite: useKg ? roundTo(acc.massGrams / 1000, 2) : acc.massGrams,\n unite: useKg ? \"kg\" : \"g\",\n categorie: acc.categorie,\n quantiteLibre: null,\n });\n }\n if (acc.hasVolume) {\n const useL = acc.volumeMl >= 1000;\n items.push({\n nom: acc.nom,\n quantite: useL ? roundTo(acc.volumeMl / 1000, 2) : acc.volumeMl,\n unite: useL ? \"L\" : \"ml\",\n categorie: acc.categorie,\n quantiteLibre: null,\n });\n }\n if (acc.hasPiece) {\n items.push({\n nom: acc.nom,\n quantite: acc.pieceCount,\n unite: \"pièce(s)\",\n categorie: acc.categorie,\n quantiteLibre: null,\n });\n }\n for (const free of acc.freeQuantities) {\n items.push({\n nom: acc.nom,\n quantite: null,\n unite: \"\",\n categorie: acc.categorie,\n quantiteLibre: free,\n });\n }\n }\n\n return items.sort((a, b) => {\n if (a.categorie !== b.categorie) return a.categorie.localeCompare(b.categorie, \"fr\");\n return a.nom.localeCompare(b.nom, \"fr\");\n });\n}\n\nexport function shoppingListToText(items: ShoppingListItem[]): string {\n const byCategory = new Map();\n for (const item of items) {\n if (!byCategory.has(item.categorie)) byCategory.set(item.categorie, []);\n byCategory.get(item.categorie)!.push(item);\n }\n const lines: string[] = [];\n for (const [category, categoryItems] of byCategory) {\n lines.push(`## ${category}`);\n for (const item of categoryItems) {\n const qty = item.quantite !== null\n ? `${formatQuantity(item.quantite)} ${item.unite}`.trim()\n : (item.quantiteLibre ?? \"\");\n lines.push(`- ${item.nom} — ${qty}`);\n }\n lines.push(\"\");\n }\n return lines.join(\"\\n\").trim();\n}\n\nfunction formatQuantity(n: number): string {\n return Number.isInteger(n) ? `${n}` : n.toFixed(2);\n}\n\nfunction roundTo(n: number, decimals: number): number {\n const factor = 10 ** decimals;\n return Math.round(n * factor) / factor;\n}\n","createdAt",["D",1788192058802],"branchVersion","branchId","59c640c1-d555-4902-a8d3-71ace8a5e5c4","id","6626b8d6-3420-4848-8c35-d06d05fe18fd","menu-planner",["D",1788191950718],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Planificateur de menus pour un foyer avec IA","imageUrl","d66aba55-2367-403a-a570-71cd1c762bc0","pinnedFileId","faba7e02-a554-11f1-9530-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a05825-cbf0-705e-9846-aecf6611a871","tursoName","6626b8d6342048488c35d06d05fe18fd","tursoHostname","6626b8d6342048488c35d06d05fe18fd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789497078049],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_106":101},"org",{"_99":98,"_100":101,"_102":101,"_18":54,"_103":104,"_105":24},"branch",{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"isOwned",82,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","Antoine07","handle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_42":43,"_31":44,"_37":245,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":246,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":247,"_83":248,"_85":249,"_87":24},"tree",[150],"files",[150,151,152,153,154,155,156,157,158,159,160,161],"counts",{"_139":62,"_140":133,"_141":62,"_142":143,"_144":145},"contents",[128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":129,"_31":130,"_29":131,"_132":-5,"_40":41,"_39":133,"_134":58,"_37":135,"_13":62,"_33":136,"_35":-5,"_23":24,"_137":-5,"_26":138},"9b96b1fe-dcd9-4982-b1ac-c60845e1241f","backend","843381a2-2df1-475d-b92f-a3a8ce678481","parentId",1,"latest",["D",1788191982713],"directory","label",[130],"pulls","branches","forks","envVars",{"_146":148,"_149":62},"connections",{"_146":62,"_147":62},"count","unfilledCount",3,"emptyCount",{"_42":129,"_31":130,"_29":131,"_132":-5,"_40":41,"_39":133,"_134":58,"_37":242,"_13":62,"_33":136,"_35":-5,"_23":24,"_137":-5,"_168":243,"_26":244},{"_42":238,"_31":237,"_29":231,"_132":131,"_40":41,"_39":232,"_134":58,"_37":239,"_13":62,"_33":136,"_35":-5,"_23":24,"_137":-5,"_168":240,"_26":241},{"_42":228,"_31":229,"_29":230,"_132":231,"_40":41,"_39":232,"_134":24,"_37":233,"_13":62,"_33":34,"_35":234,"_23":24,"_137":-5,"_168":235,"_26":236},{"_42":224,"_31":176,"_29":172,"_132":131,"_40":41,"_39":148,"_134":58,"_37":225,"_13":62,"_33":136,"_35":-5,"_23":24,"_137":-5,"_168":226,"_26":227},{"_42":217,"_31":218,"_29":219,"_132":172,"_40":41,"_39":148,"_134":58,"_37":220,"_13":62,"_33":34,"_35":221,"_23":24,"_137":-5,"_168":222,"_26":223},{"_42":209,"_31":210,"_29":211,"_132":172,"_40":41,"_39":212,"_134":24,"_37":213,"_13":62,"_33":34,"_35":214,"_23":24,"_137":-5,"_168":215,"_26":216},{"_42":201,"_31":202,"_29":203,"_132":172,"_40":41,"_39":204,"_134":58,"_37":205,"_13":62,"_33":34,"_35":206,"_23":24,"_137":-5,"_168":207,"_26":208},{"_42":193,"_31":194,"_29":195,"_132":172,"_40":41,"_39":196,"_134":58,"_37":197,"_13":62,"_33":34,"_35":198,"_23":24,"_137":-5,"_168":199,"_26":200},{"_42":185,"_31":186,"_29":187,"_132":172,"_40":41,"_39":188,"_134":58,"_37":189,"_13":62,"_33":34,"_35":190,"_23":24,"_137":-5,"_168":191,"_26":192},{"_42":177,"_31":178,"_29":179,"_132":172,"_40":41,"_39":180,"_134":58,"_37":181,"_13":62,"_33":34,"_35":182,"_23":24,"_137":-5,"_168":183,"_26":184},{"_42":171,"_31":32,"_29":30,"_132":172,"_40":41,"_39":14,"_134":58,"_37":173,"_13":62,"_33":34,"_35":36,"_23":24,"_137":-5,"_168":174,"_26":175},{"_42":162,"_31":163,"_29":56,"_132":131,"_40":41,"_39":133,"_134":58,"_37":164,"_13":62,"_33":165,"_35":166,"_23":24,"_137":167,"_168":169,"_26":170},"cb965474-f417-4337-951b-3a5afae866bf","index.ts",["D",1788191982713],"http","import { Hono } from \"npm:hono@4\";\nimport { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { ensureSchema } from \"./db/schema.ts\";\nimport { authRoutes } from \"./routes/auth.ts\";\nimport { foyerRoutes } from \"./routes/foyers.ts\";\nimport { memberRoutes } from \"./routes/members.ts\";\nimport { weekRoutes } from \"./routes/weeks.ts\";\nimport { mealRoutes } from \"./routes/meals.ts\";\nimport { shareRoutes } from \"./routes/share.ts\";\nimport { Root } from \"../frontend/root.tsx\";\n\nconst app = new Hono();\n\n// Le schéma est idempotent (CREATE TABLE IF NOT EXISTS) ; on ne le rejoue\n// qu'une fois par instance froide plutôt qu'à chaque requête.\nlet schemaReady: Promise | null = null;\napp.use(\"*\", async (_c, next) => {\n schemaReady ??= ensureSchema();\n await schemaReady;\n await next();\n});\n\napp.route(\"/api/auth\", authRoutes);\napp.route(\"/api/foyers\", foyerRoutes);\napp.route(\"/api/members\", memberRoutes);\napp.route(\"/api/weeks\", weekRoutes);\napp.route(\"/api/meals\", mealRoutes);\napp.route(\"/api/share\", shareRoutes);\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/\", (c) => c.html(Root()));\n// Toute route côté client (ex. /partage/:token) doit servir la même coquille React.\napp.get(\"/partage/:token\", (c) => c.html(Root()));\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","planificateur-menus","children",[],[130,163],"f5a42b2f-69ff-41fd-9f2e-f515a8870fe5","625001a9-80e0-4b73-81da-267477a3a76f",["D",1788192058802],[],[130,176,32],"lib","72a641ba-3077-41df-9592-32759a2ef6ef","jwt.ts","1be43f32-a555-11f1-af6d-1607ee4eb77e",8,["D",1788192038382],"// Implémentation minimale de JWT (HS256) avec Web Crypto — pas de dépendance\n// externe. Utilisé pour les cookies de session et les liens de partage de foyer.\n\nfunction base64UrlEncode(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nfunction base64UrlDecode(str: string): Uint8Array {\n const padded = str.replace(/-/g, \"+\").replace(/_/g, \"/\").padEnd(\n str.length + ((4 - (str.length % 4)) % 4),\n \"=\",\n );\n const binary = atob(padded);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes;\n}\n\nasync function getHmacKey(secretName: string): Promise {\n const secret = Deno.env.get(secretName);\n if (!secret) {\n throw new Error(`${secretName} n'est pas configurée (variable d'environnement du val).`);\n }\n return crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\", \"verify\"],\n );\n}\n\nexport async function signJwt(\n payload: Record,\n secretName: string,\n expiresInSeconds?: number,\n): Promise {\n const header = { alg: \"HS256\", typ: \"JWT\" };\n const body = expiresInSeconds\n ? { ...payload, exp: Math.floor(Date.now() / 1000) + expiresInSeconds }\n : payload;\n\n const headerB64 = base64UrlEncode(new TextEncoder().encode(JSON.stringify(header)));\n const bodyB64 = base64UrlEncode(new TextEncoder().encode(JSON.stringify(body)));\n const signingInput = `${headerB64}.${bodyB64}`;\n\n const key = await getHmacKey(secretName);\n const signature = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(signingInput),\n );\n const signatureB64 = base64UrlEncode(new Uint8Array(signature));\n\n return `${signingInput}.${signatureB64}`;\n}\n\nexport async function verifyJwt>(\n token: string,\n secretName: string,\n): Promise {\n const parts = token.split(\".\");\n if (parts.length !== 3) return null;\n const [headerB64, bodyB64, signatureB64] = parts;\n\n try {\n const key = await getHmacKey(secretName);\n const valid = await crypto.subtle.verify(\n \"HMAC\",\n key,\n base64UrlDecode(signatureB64),\n new TextEncoder().encode(`${headerB64}.${bodyB64}`),\n );\n if (!valid) return null;\n\n const payload = JSON.parse(new TextDecoder().decode(base64UrlDecode(bodyB64)));\n if (typeof payload.exp === \"number\" && payload.exp < Math.floor(Date.now() / 1000)) {\n return null; // expiré\n }\n return payload as T;\n } catch {\n return null;\n }\n}\n",[],[130,176,178],"b1c8167d-1abd-44b0-abd6-ec3321d80692","foyerAccess.ts","16fda8fa-a555-11f1-8fbd-1607ee4eb77e",7,["D",1788192030140],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n/** Renvoie le foyer_id auquel l'utilisateur a accès (propriétaire ou invité), ou null. */\nexport async function getAccessibleFoyerId(userId: number): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT foyer_id FROM foyer_access WHERE user_id = ? ORDER BY id ASC LIMIT 1\",\n args: [userId],\n });\n const row = result.rows[0] as unknown as { foyer_id: number } | undefined;\n return row ? row.foyer_id : null;\n}\n\nexport async function userHasFoyerAccess(userId: number, foyerId: number): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT 1 FROM foyer_access WHERE user_id = ? AND foyer_id = ? LIMIT 1\",\n args: [userId, foyerId],\n });\n return result.rows.length > 0;\n}\n",[],[130,176,186],"8ae70c7b-4aec-4556-872b-e202e2d8ac94","dates.ts","1560ab64-a555-11f1-9b2b-1607ee4eb77e",6,["D",1788192027447],"// Helpers de dates — toutes les semaines sont ancrées sur le lundi,\n// au format YYYY-MM-DD (UTC, pour rester stable indépendamment du fuseau du serveur).\n\nfunction toIsoDate(d: Date): string {\n return d.toISOString().slice(0, 10);\n}\n\n/** Renvoie le lundi (YYYY-MM-DD) de la semaine contenant `date` (par défaut aujourd'hui). */\nexport function mondayOf(date: Date = new Date()): string {\n const d = new Date(Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate()));\n const day = d.getUTCDay(); // 0 = dimanche ... 6 = samedi\n const diffToMonday = day === 0 ? -6 : 1 - day;\n d.setUTCDate(d.getUTCDate() + diffToMonday);\n return toIsoDate(d);\n}\n\nexport function currentWeekStart(): string {\n return mondayOf(new Date());\n}\n\n/** Liste les N lundis précédant (strictement) `weekStartDate`, du plus récent au plus ancien. */\nexport function previousWeekStarts(weekStartDate: string, count: number): string[] {\n const [y, m, d] = weekStartDate.split(\"-\").map(Number);\n const base = new Date(Date.UTC(y, m - 1, d));\n const result: string[] = [];\n for (let i = 1; i <= count; i++) {\n const prev = new Date(base);\n prev.setUTCDate(prev.getUTCDate() - 7 * i);\n result.push(toIsoDate(prev));\n }\n return result;\n}\n",[],[130,176,194],"bfdce5f1-8133-44c3-910c-5027ca3a263b","crypto.ts","126f38c6-a555-11f1-8062-1607ee4eb77e",5,["D",1788192022509],"// Chiffrement symétrique (AES-GCM) de la clé API Anthropic avant stockage en\n// base, et helpers de hachage de mot de passe + signature de session.\n// Tout repose sur Web Crypto (natif Deno), aucune dépendance externe.\n\nfunction getEncryptionKeyMaterial(): string {\n const secret = Deno.env.get(\"ENCRYPTION_SECRET\");\n if (!secret) {\n throw new Error(\n \"ENCRYPTION_SECRET n'est pas configurée (variable d'environnement du val).\",\n );\n }\n return secret;\n}\n\nasync function deriveAesKey(): Promise {\n const material = getEncryptionKeyMaterial();\n const keyBytes = await crypto.subtle.digest(\n \"SHA-256\",\n new TextEncoder().encode(material),\n );\n return crypto.subtle.importKey(\"raw\", keyBytes, \"AES-GCM\", false, [\n \"encrypt\",\n \"decrypt\",\n ]);\n}\n\nfunction toBase64(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary);\n}\n\nfunction fromBase64(b64: string): Uint8Array {\n const binary = atob(b64);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes;\n}\n\nexport async function encryptSecret(plaintext: string): Promise {\n const key = await deriveAesKey();\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const ciphertext = await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv },\n key,\n new TextEncoder().encode(plaintext),\n );\n return `${toBase64(iv)}.${toBase64(new Uint8Array(ciphertext))}`;\n}\n\nexport async function decryptSecret(payload: string): Promise {\n const [ivB64, dataB64] = payload.split(\".\");\n if (!ivB64 || !dataB64) throw new Error(\"Format de secret chiffré invalide.\");\n const key = await deriveAesKey();\n const plaintext = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv: fromBase64(ivB64) },\n key,\n fromBase64(dataB64),\n );\n return new TextDecoder().decode(plaintext);\n}\n",[],[130,176,202],"171b0eb6-1575-4ed4-8121-234cbbf3ae3f","claude.ts","0e9589bc-a555-11f1-976f-1607ee4eb77e",4,["D",1788192016043],"import type { GeneratedMenu, Member, MealType } from \"../../shared/types.ts\";\n\nconst ANTHROPIC_API_URL = \"https://api.anthropic.com/v1/messages\";\nconst MODEL = \"claude-sonnet-4-5\";\nconst REQUEST_TIMEOUT_MS = 15000;\n\nexport class ClaudeGenerationError extends Error {}\n\nfunction preferencesSummary(member: Member): string {\n const flags: string[] = [];\n if (member.preferences.vegetarien) flags.push(\"végétarien\");\n if (member.preferences.vegan) flags.push(\"vegan\");\n if (member.preferences.sansGluten) flags.push(\"sans gluten\");\n if (member.preferences.sansLactose) flags.push(\"sans lactose\");\n const notes = member.preferences.notesLibres?.trim();\n const parts = [...flags];\n if (notes) parts.push(notes);\n return parts.length > 0 ? parts.join(\", \") : \"aucune restriction particulière\";\n}\n\nasync function callClaude(apiKey: string, prompt: string): Promise {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);\n\n let response: Response;\n try {\n response = await fetch(ANTHROPIC_API_URL, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": apiKey,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: MODEL,\n max_tokens: 2048,\n messages: [{ role: \"user\", content: prompt }],\n }),\n signal: controller.signal,\n });\n } catch (err) {\n if (err instanceof DOMException && err.name === \"AbortError\") {\n throw new ClaudeGenerationError(\"Le service de génération a mis trop de temps à répondre.\");\n }\n throw new ClaudeGenerationError(\"Impossible de contacter le service de génération.\");\n } finally {\n clearTimeout(timeout);\n }\n\n if (response.status === 401) {\n throw new ClaudeGenerationError(\"Clé API Anthropic invalide ou expirée.\");\n }\n if (!response.ok) {\n throw new ClaudeGenerationError(`Le service de génération a répondu une erreur (${response.status}).`);\n }\n\n const data = await response.json();\n const text = data?.content?.[0]?.text;\n if (typeof text !== \"string\") {\n throw new ClaudeGenerationError(\"Réponse du service de génération illisible.\");\n }\n return text;\n}\n\nfunction extractJson(text: string): unknown {\n const fenced = text.match(/```(?:json)?\\s*([\\s\\S]*?)```/);\n const candidate = fenced ? fenced[1] : text;\n try {\n return JSON.parse(candidate.trim());\n } catch {\n throw new ClaudeGenerationError(\"Réponse du service de génération mal formée (JSON invalide).\");\n }\n}\n\nexport async function generateMenu(\n apiKey: string,\n numPeople: number,\n mealType: MealType,\n members: Member[],\n): Promise {\n const restrictionsCommunes = members.map((m) => `- ${m.name}: ${preferencesSummary(m)}`).join(\"\\n\");\n\n const prompt = `Tu es un assistant culinaire. Génère un menu pour ${numPeople} personne(s) pour un repas de ${mealType}.\n\nRestrictions et préférences des membres du foyer (à respecter pour le plat commun quand c'est possible ; sinon prévoir une alternative individuelle) :\n${restrictionsCommunes}\n\nRègles :\n- Le plat principal doit convenir à un maximum de monde. S'il ne peut pas convenir à un membre à cause d'une restriction stricte (allergie, régime), prévois une alternative individuelle pour ce membre uniquement.\n- Les quantités d'ingrédients doivent être adaptées au nombre de personnes indiqué.\n- Utilise des unités simples et cohérentes : \"g\", \"kg\", \"ml\", \"cl\", \"L\", ou \"\" (pièce) pour les ingrédients comptables.\n- Réponds UNIQUEMENT avec un objet JSON valide, sans texte autour, au format exact suivant :\n\n{\n \"plat_principal\": {\n \"titre\": \"string\",\n \"ingredients\": [{\"nom\": \"string\", \"quantite\": \"string\", \"unite\": \"string\"}],\n \"instructions\": \"string (quelques phrases courtes)\"\n },\n \"alternatives_individuelles\": [\n {\"pour_membre\": \"nom exact du membre\", \"titre\": \"string\", \"raison\": \"string\"}\n ]\n}\n\nSi aucune alternative n'est nécessaire, renvoie \"alternatives_individuelles\": [].`;\n\n const raw = await callClaude(apiKey, prompt);\n const parsed = extractJson(raw) as {\n plat_principal: { titre: string; ingredients: { nom: string; quantite: string; unite: string }[]; instructions: string };\n alternatives_individuelles: { pour_membre: string; titre: string; raison: string }[];\n };\n\n const byName = new Map(members.map((m) => [m.name, m]));\n\n return {\n platPrincipal: {\n titre: parsed.plat_principal.titre,\n ingredients: parsed.plat_principal.ingredients,\n instructions: parsed.plat_principal.instructions,\n },\n alternativesIndividuelles: (parsed.alternatives_individuelles ?? [])\n .map((alt) => {\n const member = byName.get(alt.pour_membre);\n if (!member) return null;\n return {\n pourMemberId: member.id,\n membreName: member.name,\n titre: alt.titre,\n raison: alt.raison,\n };\n })\n .filter((alt): alt is NonNullable => alt !== null),\n };\n}\n\nexport interface AlternativeOption {\n titre: string;\n ingredients: { nom: string; quantite: string; unite: string }[];\n instructions: string;\n raison: string;\n}\n\nexport async function generateAlternatives(\n apiKey: string,\n member: Member,\n currentDishTitle: string,\n): Promise {\n const prompt = `Le plat prévu pour ce repas est \"${currentDishTitle}\", mais il ne convient pas (ou peu) à ${member.name}.\nPréférences et restrictions de ${member.name} : ${preferencesSummary(member)}.\n\nPropose exactement 3 plats alternatifs adaptés, variés entre eux. Réponds UNIQUEMENT avec un objet JSON valide au format exact :\n\n{\n \"options\": [\n {\n \"titre\": \"string\",\n \"ingredients\": [{\"nom\": \"string\", \"quantite\": \"string\", \"unite\": \"string\"}],\n \"instructions\": \"string (quelques phrases courtes)\",\n \"raison\": \"string (pourquoi ce plat convient)\"\n }\n ]\n}\n\nLe tableau \"options\" doit contenir exactement 3 éléments.`;\n\n const raw = await callClaude(apiKey, prompt);\n const parsed = extractJson(raw) as { options: AlternativeOption[] };\n return parsed.options ?? [];\n}\n",[],[130,176,210],"ddcb559a-43ce-432c-b953-bdc207ccb83e","auth.ts","040f543c-a555-11f1-97f0-1607ee4eb77e",["D",1788191998400],"import bcrypt from \"npm:bcryptjs@2.4.3\";\nimport { signJwt, verifyJwt } from \"./jwt.ts\";\n\nconst SESSION_COOKIE = \"session\";\nconst SESSION_SECRET_NAME = \"SESSION_SECRET\";\nconst SESSION_TTL_SECONDS = 60 * 60 * 24 * 30; // 30 jours\n\nexport interface SessionPayload {\n userId: number;\n username: string;\n}\n\nexport async function hashPassword(password: string): Promise {\n return bcrypt.hash(password, 10);\n}\n\nexport async function verifyPassword(password: string, hash: string): Promise {\n return bcrypt.compare(password, hash);\n}\n\nexport async function createSessionCookie(payload: SessionPayload): Promise {\n const token = await signJwt({ ...payload }, SESSION_SECRET_NAME, SESSION_TTL_SECONDS);\n const maxAge = SESSION_TTL_SECONDS;\n return `${SESSION_COOKIE}=${token}; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=${maxAge}`;\n}\n\nexport function clearSessionCookie(): string {\n return `${SESSION_COOKIE}=; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=0`;\n}\n\nexport function readSessionCookieValue(cookieHeader: string | null): string | null {\n if (!cookieHeader) return null;\n const match = cookieHeader\n .split(\";\")\n .map((part) => part.trim())\n .find((part) => part.startsWith(`${SESSION_COOKIE}=`));\n if (!match) return null;\n return match.slice(SESSION_COOKIE.length + 1);\n}\n\nexport async function getSessionFromCookie(\n cookieHeader: string | null,\n): Promise {\n const token = readSessionCookieValue(cookieHeader);\n if (!token) return null;\n const payload = await verifyJwt(\n token,\n SESSION_SECRET_NAME,\n );\n if (!payload) return null;\n return { userId: payload.userId, username: payload.username };\n}\n",[],[130,176,218],"776b0922-f1d9-49cf-8ebd-5d82c9279641",["D",1788191998400],[154,155,156,157,158,159,160],[130,176],"fd4c5f3e-9205-46c7-b61a-988472846d13","schema.ts","015ccdb4-a555-11f1-b518-1607ee4eb77e","33d9d9fc-70d9-4462-9b17-b10ca5880ffa",2,["D",1788191993442],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// Idempotent schema setup — appelé au démarrage de chaque requête froide.\n// CREATE TABLE IF NOT EXISTS partout : sûr à ré-exécuter.\nexport async function ensureSchema() {\n await sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n email TEXT,\n anthropic_api_key_encrypted TEXT,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS foyers (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL REFERENCES users(id),\n name TEXT NOT NULL,\n share_token TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n // Table de jonction : un foyer peut être partagé et rejoint par plusieurs\n // comptes utilisateurs (propriétaire inclus).\n {\n sql: `CREATE TABLE IF NOT EXISTS foyer_access (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n foyer_id INTEGER NOT NULL REFERENCES foyers(id),\n user_id INTEGER NOT NULL REFERENCES users(id),\n role TEXT NOT NULL DEFAULT 'member',\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(foyer_id, user_id)\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS members (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n foyer_id INTEGER NOT NULL REFERENCES foyers(id),\n name TEXT NOT NULL,\n preferences TEXT NOT NULL DEFAULT '{}',\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS weeks (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n foyer_id INTEGER NOT NULL REFERENCES foyers(id),\n week_start_date TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(foyer_id, week_start_date)\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS meals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n week_id INTEGER NOT NULL REFERENCES weeks(id),\n day_of_week INTEGER NOT NULL,\n meal_type TEXT NOT NULL CHECK (meal_type IN ('midi', 'soir')),\n num_people INTEGER NOT NULL DEFAULT 0,\n generated_menu TEXT,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n UNIQUE(week_id, day_of_week, meal_type)\n )`,\n args: [],\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS meal_modifications (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n meal_id INTEGER NOT NULL REFERENCES meals(id),\n member_id INTEGER REFERENCES members(id),\n alternative_dish TEXT NOT NULL,\n is_individual INTEGER NOT NULL DEFAULT 1,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n args: [],\n },\n ]);\n}\n",[],[130,237,229],"db","e3698a61-28ac-40d3-bb2f-c5feb458113b",["D",1788191993442],[152],[130,237],["D",1788191982713],[151,153,161],[130],["D",1788191950718],["D",1789497078049],{"_99":98,"_106":101},{"_99":98,"_100":101,"_102":101,"_18":54,"_103":104,"_105":24},{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"ctx",{"_81":-5,"_125":283,"_284":285,"_286":287,"_288":24,"_289":24,"_290":24,"_291":58,"_292":-5,"_293":-7,"_294":-7,"_295":62,"_296":24,"_297":24,"_298":-5,"_299":24,"_300":24,"_301":24,"_302":-5},"ENV",{"_254":255,"_256":257,"_258":89,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280,"_281":282},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v9