'+x[0]+'

'+x[2]+'

'+x[1]+'

').join('');const items=[...urg.slice(0,4).map(x=>({kind:'urgent',title:x.objet||x.description||'Demande urgente',sub:clientName(x),time:dt(x.created_at)})),...overdue.slice(0,3).map(x=>({kind:'warn',title:'Facture '+(x.numero||'')+' en retard',sub:clientName(x)+' · '+money(x.total_ttc),time:dateOnly(x.date_echeance)})),...tasks.filter(x=>!/(termine|done|annule)/i.test(x.statut||'')).slice(0,3).map(x=>({kind:'warn',title:x.titre||'Tâche',sub:x.priorite||'',time:dt(x.due_at||x.created_at)}))];q('#priorityList').innerHTML=items.length?items.map(x=>'

'+esc(x.title)+'

'+esc(x.sub)+'

'+esc(x.time)+'

').join(''):'

Aucune priorité critique

La file du jour est maîtrisée.

';const upcoming=appointments.filter(x=>new Date(x.date_heure||0)>=new Date()).sort((a,b)=>new Date(a.date_heure)-new Date(b.date_heure)).slice(0,5);q('#upcomingList').innerHTML=upcoming.length?upcoming.map(x=>'

'+esc(clientName(x))+'

'+esc(x.type_rdv||x.objet||'Intervention')+' · '+esc(x.adresse||'Adresse à confirmer')+'

'+dt(x.date_heure)+'

').join(''):'

Aucun rendez-vous à venir

'}\nfunction renderRequests(){const term=(q('#requestSearch')?.value||'').toLowerCase(),filter=q('#requestFilter')?.value||'all';const rows=requests.filter(x=>{const hay=JSON.stringify([x.numero,x.objet,x.description,clientName(x)]).toLowerCase();return(!term||hay.includes(term))&&(filter==='all'||(filter==='urgent'?urgent(x):String(x.statut||'')===filter))});q('#requestsBody').innerHTML=rows.length?rows.map(x=>''+esc(x.objet||'Demande')+'

'+esc(clientName(x))+'

'+pill(x.urgence||'normale')+''+pill(x.statut||'nouveau')+''+esc(x.description||'—')+''+dt(x.created_at)+'').join(''):'Aucune demande';q('#requestsMobile').innerHTML=rows.map(x=>'

'+esc(x.objet||'Demande')+'

'+esc(clientName(x))+' · '+dt(x.created_at)+'

'+pill(x.statut||'nouveau')+'

').join('')||'

Aucune demande

';q('#requestCount').textContent=rows.length}\nq('#requestSearch').oninput=renderRequests;q('#requestFilter').onchange=renderRequests;\nfunction renderAgenda(){const rows=[...appointments].sort((a,b)=>new Date(a.date_heure||0)-new Date(b.date_heure||0));q('#agendaList').innerHTML=rows.length?rows.map(x=>'

'+esc(clientName(x))+'

'+esc(x.type_rdv||x.objet||'Intervention')+' · '+esc(x.adresse||'Adresse non renseignée')+'

'+dt(x.date_heure)+'
'+pill(x.statut||'planifie')+'

').join(''):'

Aucun rendez-vous

'}\nfunction renderClients(){q('#clientsBody').innerHTML=clients.length?clients.map(x=>''+esc(x.nom||'Sans nom')+'

'+esc(x.ville||'')+'

'+esc(x.telephone||'—')+''+esc(x.email||'—')+''+pill(x.vip?'VIP':'actif')+'').join(''):'Aucun client';q('#clientsMobile').innerHTML=clients.map(x=>'

'+esc(x.nom||x.telephone||'Client')+'

'+esc([x.telephone,x.email].filter(Boolean).join(' · '))+'

').join('')||'

Aucun client

';q('#clientCount').textContent=clients.length}\nlet documentTab='quotes';function quoteRows(){return quotes.map(x=>''+esc(x.numero||'Brouillon')+'

'+esc(clientName(x))+' · '+esc(x.objet||'Sans objet')+'

'+dateOnly(x.date_emission||x.created_at)+''+money(x.total_ttc)+'

'+esc(x.lignes_count||0)+' ligne(s)

'+pill(x.statut||'brouillon')+'

'+(String(x.statut)==='brouillon'?'':'')+(!invoices.some(f=>f.devis_id===x.id)&&!/(refuse|expire)/i.test(x.statut||'')?'':'')+'

').join('')}\nfunction invoiceRows(){return invoices.map(x=>''+esc(x.numero||'Brouillon')+'

'+esc(clientName(x))+' · '+esc(textStatus(x.type_facture||'simple'))+'

'+dateOnly(x.date_emission||x.created_at)+''+money(x.total_ttc)+'

Échéance '+dateOnly(x.date_echeance)+'

'+pill(x.statut||'brouillon')+'

'+(!isPaid(x)&&!isCancelled(x)?'':'')+'

').join('')}\nfunction purchaseRows(){return purchases.map(x=>''+esc(x.numero_facture||x.fournisseur||'Achat')+'

'+esc(x.fournisseur||'Fournisseur')+'

'+dateOnly(x.date_facture||x.created_at)+''+money(x.total_ttc)+''+pill(x.ocr_statut||'en_attente')+'').join('')}\nfunction renderDocuments(){qa('[data-document-tab]').forEach(x=>x.classList.toggle('active',x.dataset.documentTab===documentTab));const body=documentTab==='quotes'?quoteRows():documentTab==='invoices'?invoiceRows():purchaseRows();q('#documentsBody').innerHTML=body||'Aucun document';bindDocumentActions()}\nqa('[data-document-tab]').forEach(x=>x.onclick=()=>{documentTab=x.dataset.documentTab;renderDocuments()});\nfunction bindDocumentActions(){qa('[data-doc-quote]').forEach(x=>x.onclick=()=>openDoc('quote',x.dataset.docQuote));qa('[data-doc-invoice]').forEach(x=>x.onclick=()=>openDoc('invoice',x.dataset.docInvoice));qa('[data-quote-ready]').forEach(x=>x.onclick=async()=>{x.disabled=true;try{await action('quote.status',{id:x.dataset.quoteReady,statut:'pret'})}catch(e){toast(e.message,false);x.disabled=false}});qa('[data-invoice-from]').forEach(x=>x.onclick=()=>openInvoiceDialog(x.dataset.invoiceFrom));qa('[data-mark-paid]').forEach(x=>x.onclick=()=>openPaymentDialog(x.dataset.markPaid))}\n\nfunction renderPilot(){\n const paid=invoices.filter(isPaid);\n const open=invoices.filter(x=>!isPaid(x)&&!isCancelled(x));\n const overdue=open.filter(x=>x.date_echeance&&new Date(x.date_echeance)x.devis_id).filter(Boolean));\n const accepted=quotes.filter(x=>/accepte/i.test(x.statut||''));\n const toInvoice=accepted.filter(x=>!invoicedQuoteIds.has(x.id));\n const followups=quotes.filter(x=>/envoye/i.test(x.statut||'')&&daysAgo(x.date_envoi||x.updated_at)>=7);\n const calls=list(ai.recent_calls).filter(x=>Number(x.risk_score)>=60);\n const received=paid.reduce((sum,x)=>sum+Number(x.total_ttc||0),0);\n const due=open.reduce((sum,x)=>sum+Number(x.total_ttc||0),0);\n const late=overdue.reduce((sum,x)=>sum+Number(x.total_ttc||0),0);\n const rate=quotes.length?Math.round(accepted.length/quotes.length*100):0;\n const cards=[['Encaissé',money(received),'Factures réglées','accent'],['À encaisser',money(due),open.length+' facture(s)','warn'],['En retard',money(late),overdue.length+' échéance(s)','bad'],['Conversion',rate+' %',accepted.length+' devis accepté(s)','']];\n q('#pilotKpis').innerHTML=cards.map(x=>'

'+x[0]+'

'+x[2]+'

'+x[1]+'

').join('');\n const insightData=[['Devis à facturer',toInvoice.length],['Relances utiles',followups.length],['Appels à reprendre',calls.length]];\n q('#pilotInsights').innerHTML=insightData.map(x=>'

'+x[0]+''+x[1]+'

').join('');\n const queue=[];\n overdue.slice(0,5).forEach(x=>queue.push({kind:'urgent',title:'Encaisser '+(x.numero||'facture'),sub:clientName(x)+' · '+money(x.total_ttc),button:'Encaisser',action:'pay',id:x.id}));\n toInvoice.slice(0,5).forEach(x=>queue.push({kind:'ok',title:'Facturer '+(x.numero||'devis'),sub:clientName(x)+' · '+money(x.total_ttc),button:'Créer facture',action:'invoice',id:x.id}));\n followups.slice(0,4).forEach(x=>queue.push({kind:'warn',title:'Relancer '+(x.numero||'devis'),sub:clientName(x)+' · envoyé il y a '+daysAgo(x.date_envoi||x.updated_at)+' jours',button:'Créer tâche',action:'task',client_id:x.client_id}));\n calls.slice(0,3).forEach(x=>queue.push({kind:'urgent',title:'Reprendre un appel',sub:(x.intent||'Appel')+' · priorité élevée',button:'Créer rappel',action:'task'}));\n q('#actionCenter').innerHTML=queue.length?queue.map((x,i)=>'

'+esc(x.title)+'

'+esc(x.sub)+'

').join(''):'

Aucune action commerciale urgente.

';\n qa('[data-queue]').forEach(button=>button.onclick=async()=>{\n const item=queue[Number(button.dataset.queue)];\n if(item.action==='pay')return openPaymentDialog(item.id);\n if(item.action==='invoice')return openInvoiceDialog(item.id);\n button.disabled=true;\n try{await action('task.create',{type_tache:'rappeler',priorite:item.kind==='urgent'?'haute':'normale',titre:item.title,description:item.sub,client_id:item.client_id||null})}catch(error){toast(error.message,false);button.disabled=false}\n });\n}\nfunction renderSettings(){const rows=[['Nom',company.nom],['Téléphone',company.tel],['E-mail',company.email],['SIRET',company.siret],['Adresse',company.adresse],['IBAN',company.iban],['Zone',settings.zone_intervention],['Rayon',settings.rayon_km?settings.rayon_km+' km':null],['TVA par défaut',settings.tva_taux_defaut?settings.tva_taux_defaut+' %':null],['Acompte par défaut',settings.acompte_pct_defaut?settings.acompte_pct_defaut+' %':null]];q('#settingsDefinition').innerHTML=rows.map(x=>'

'+x[0]+'

'+esc(x[1]||'Non renseigné')+'

').join('');const missing=configMissing();q('#blockerList').innerHTML=missing.length?missing.map(x=>'

Compléter '+esc(x)+'

').join(''):'

Identité entreprise complète

'}\n\nconst dialog=q('#actionDialog'),dialogTitle=q('#dialogTitle'),dialogBody=q('#dialogBody');function closeDialog(){dialog.close()}\nfunction openSimple(kind){const forms={request:{title:'Nouvelle demande',action:'client.create',html:'

Nom

Téléphone *

E-mail

Urgence

Demande *

'},availability:{title:'Chercher un créneau',action:'availability.check',html:'

Date souhaitée *

Durée

Adresse

'},appointment:{title:'Planifier un rendez-vous',action:'rdv.create',html:'

Téléphone client *

Date et heure *

Type

Adresse

Le client a explicitement confirmé ce créneau.

'}};const cfg=forms[kind];if(!cfg)return;dialogTitle.textContent=cfg.title;dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#actionForm').onsubmit=async e=>{e.preventDefault();const button=q('[type=submit]',e.currentTarget),payload=Object.fromEntries(new FormData(e.currentTarget).entries());payload.explicit_confirmation=payload.explicit_confirmation==='on';button.disabled=true;try{const result=await action(cfg.action,payload,!['availability.check'].includes(cfg.action));if(cfg.action==='availability.check'){const box=q('#actionResult');box.textContent=result.message||JSON.stringify(result,null,2);box.classList.add('show')}}catch(err){toast(err.message,false);button.disabled=false}};dialog.showModal()}\nfunction quoteLine(prefill={}){const row=document.createElement('div');row.className='quote-line';row.innerHTML='';q('button',row).onclick=()=>{row.remove();updateQuoteTotals()};qa('input,select',row).forEach(x=>x.oninput=updateQuoteTotals);q('[name=designation]',row).onchange=()=>{const match=catalog.find(c=>c.designation===q('[name=designation]',row).value);if(match){q('[name=prix_unitaire_ht]',row).value=match.prix_ht||0;q('[name=tva_taux]',row).value=String(match.tva_taux||20);q('[name=unite]',row).value=match.unite||'u';updateQuoteTotals()}};q('#quoteLines').appendChild(row);updateQuoteTotals()}\nfunction updateQuoteTotals(){const lines=qa('.quote-line',dialogBody);let ht=0,tva=0;for(const row of lines){const total=Number(q('[name=quantite]',row).value||0)*Number(q('[name=prix_unitaire_ht]',row).value||0),rate=Number(q('[name=tva_taux]',row).value||0);ht+=total;tva+=total*rate/100}q('#quoteHt').textContent=money(ht);q('#quoteTva').textContent=money(tva);q('#quoteTtc').textContent=money(ht+tva)}\nfunction openQuoteDialog(){dialogTitle.textContent='Créer un devis';dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#addQuoteLine').onclick=()=>quoteLine();quoteLine();q('#quoteForm').onsubmit=async e=>{e.preventDefault();const button=q('[type=submit]',e.currentTarget),payload=Object.fromEntries(new FormData(e.currentTarget).entries());payload.lines=qa('.quote-line',e.currentTarget).map(row=>({type_ligne:q('[name=type_ligne]',row).value,designation:q('[name=designation]',row).value,quantite:Number(q('[name=quantite]',row).value||1),unite:q('[name=unite]',row).value,prix_unitaire_ht:Number(q('[name=prix_unitaire_ht]',row).value||0),tva_taux:Number(q('[name=tva_taux]',row).value||20)}));button.disabled=true;try{const result=await action('quote.create',payload,false);dialog.close();if(result.devis?.id)openDoc('quote',result.devis.id);setTimeout(()=>location.reload(),900)}catch(err){toast(err.message,false);button.disabled=false}};dialog.showModal()}\nfunction openInvoiceDialog(devisId){const quote=quotes.find(x=>x.id===devisId)||{};dialogTitle.textContent='Créer une facture';dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#invoiceForm').onsubmit=async e=>{e.preventDefault();const button=q('[type=submit]',e.currentTarget),payload=Object.fromEntries(new FormData(e.currentTarget).entries());payload.devis_id=devisId;button.disabled=true;try{const result=await action('invoice.from_quote',payload,false);dialog.close();if(result.facture?.id)openDoc('invoice',result.facture.id);setTimeout(()=>location.reload(),900)}catch(err){toast(err.message,false);button.disabled=false}};dialog.showModal()}\nfunction openPaymentDialog(id){if(!window.confirm('Confirmer cette facture comme réglée aujourd’hui par virement ?'))return;action('invoice.mark_paid',{id,date_paiement:todayIso(),mode_paiement:'virement'}).catch(error=>toast(error.message,false))}\nqa('[data-open-simple]').forEach(x=>x.onclick=()=>openSimple(x.dataset.openSimple));qa('[data-open-quote]').forEach(x=>x.onclick=openQuoteDialog);q('#dialogClose').onclick=closeDialog;\nconst searchDialog=q('#searchDialog'),searchInput=q('#globalSearch'),searchResults=q('#searchResults');\nfunction openSearch(){searchDialog.showModal();searchInput.value='';searchInput.focus();renderSearch('')}\nfunction renderSearch(term){term=term.toLowerCase().trim();const source=[...requests.map(x=>({view:'requests',title:x.objet||'Demande',sub:clientName(x)+' · '+textStatus(x.statut)})),...clients.map(x=>({view:'clients',title:x.nom||x.telephone||'Client',sub:[x.telephone,x.email].filter(Boolean).join(' · ')})),...quotes.map(x=>({view:'documents',title:x.numero||x.objet||'Devis',sub:clientName(x)+' · '+money(x.total_ttc)})),...invoices.map(x=>({view:'documents',title:x.numero||'Facture',sub:clientName(x)+' · '+money(x.total_ttc)}))].filter(x=>!term||(x.title+' '+x.sub).toLowerCase().includes(term)).slice(0,20);searchResults.innerHTML=source.length?source.map((x,i)=>'').join(''):'

Aucun résultat

';qa('[data-result]',searchResults).forEach(x=>x.onclick=()=>{showView(source[Number(x.dataset.result)].view);searchDialog.close()})}\nq('#searchTrigger').onclick=openSearch;searchInput.oninput=()=>renderSearch(searchInput.value);q('#searchClose').onclick=()=>searchDialog.close();document.addEventListener('keydown',event=>{if((event.ctrlKey||event.metaKey)&&event.key.toLowerCase()==='k'){event.preventDefault();openSearch()}if(event.key==='Escape'){searchDialog.close();dialog.close()}});\nq('#logout').onclick=async()=>{await fetch('/logout',{method:'POST',headers:{'x-csrf-token':csrf}});location.href='/'};\nq('#goDocuments').onclick=()=>showView('documents');\nq('#todayDate').textContent=new Intl.DateTimeFormat('fr-FR',{weekday:'long',day:'numeric',month:'long'}).format(new Date());renderToday();renderRequests();renderAgenda();renderClients();renderDocuments();renderPilot();renderSettings();showView(location.hash.slice(1)||'today');\n`;\nfunction safeJson(value: unknown): string {\n return JSON.stringify(value).replace(/ {\n return {\n \"Content-Type\": contentType,\n \"Cache-Control\": \"no-store, max-age=0\",\n \"Pragma\": \"no-cache\",\n \"Content-Security-Policy\": `default-src 'self'; style-src 'nonce-${nonce}'; script-src 'nonce-${nonce}'; img-src 'self' data:; connect-src 'self'; font-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'`,\n \"X-Frame-Options\": \"DENY\",\n \"X-Content-Type-Options\": \"nosniff\",\n \"Referrer-Policy\": \"no-referrer\",\n \"Permissions-Policy\": \"camera=(), microphone=(), geolocation=(), payment=(), usb=()\",\n \"Cross-Origin-Opener-Policy\": \"same-origin\",\n \"Cross-Origin-Resource-Policy\": \"same-origin\",\n };\n}\n\nexport function loginPage(error: string, nonce: string): string {\n return `Connexion · Secrétariat`;\n}\n\nexport function appPage(data: Record, session: Session, nonce: string): string {\n return `Secrétariat PiscinisteAller au contenu

À traiter maintenant

Priorités commerciales et interventions du jour.

Priorités

Actions rapides

Prochains rendez-vous

File opérationnelle

Demandes

Demande	Priorité	Statut	Objet	Créée

Planning

Agenda

Portefeuille

Clients

0 clients

Client	Téléphone	E-mail	État

Vente et comptabilité

Documents

Créer, facturer, imprimer et encaisser.

Document	Date	Montant	Statut

Décisions utiles

Pilotage

Ce qui doit être encaissé, facturé ou relancé.

Centre d’actions

Actions réellement exécutables

Accès directs

Identité et conditions

Réglages

À compléter

\n \n \n

\n `;\n}\n",[],[514,505],"lib","11c11917-0e7c-4d27-9d06-e3e1864ac99d","documents.ts","70136f62-7cc7-11f1-ace4-1607ee4eb77e",3,["D",1783733144576],"type AnyRecord = Record;\n\nconst esc = (value: unknown) => String(value ?? \"\").replace(/[&<>\"']/g, (c) => ({\n \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\",\n}[c] || c));\n\nconst money = (value: unknown) => new Intl.NumberFormat(\"fr-FR\", {\n style: \"currency\", currency: \"EUR\",\n}).format(Number(value || 0));\n\nconst dateFr = (value: unknown) => {\n if (!value) return \"—\";\n const d = new Date(String(value));\n return Number.isNaN(d.getTime()) ? \"—\" : new Intl.DateTimeFormat(\"fr-FR\", { dateStyle: \"long\" }).format(d);\n};\n\nfunction companyBlock(settings: AnyRecord) {\n const e = settings?.entreprise || {};\n return {\n name: e.nom || \"Votre entreprise de piscine\",\n address: e.adresse || \"Adresse à compléter\",\n phone: e.tel || \"\",\n email: e.email || \"\",\n siret: e.siret || \"\",\n iban: e.iban || \"\",\n quoteTerms: e.mentions_devis || \"Devis valable selon la durée indiquée. Travaux réalisés après acceptation et versement de l’acompte prévu.\",\n invoiceTerms: e.mentions_facture || \"Paiement à l’échéance indiquée. En cas de retard, des pénalités peuvent être exigibles selon la réglementation applicable.\",\n };\n}\n\nfunction clientBlock(client: AnyRecord) {\n return {\n name: client?.nom || \"Client\",\n address: [client?.adresse, [client?.code_postal, client?.ville].filter(Boolean).join(\" \")].filter(Boolean).join(\"
\"),\n phone: client?.telephone || \"\",\n email: client?.email || \"\",\n };\n}\n\nfunction lineRows(lines: AnyRecord[]) {\n return lines.map((line) => {\n const total = Number(line.total_ht ?? (Number(line.quantite || 0) * Number(line.prix_unitaire_ht || 0)));\n return `\n

${esc(line.designation)}

${esc(line.type_ligne || \"prestation\")}

\n ${esc(Number(line.quantite || 0).toLocaleString(\"fr-FR\"))}\n ${esc(line.unite || \"u\")}\n ${money(line.prix_unitaire_ht)}\n ${esc(Number(line.tva_taux || 0).toLocaleString(\"fr-FR\"))} %\n ${money(total)}\n `;\n }).join(\"\");\n}\n\nfunction totalsBlock(document: AnyRecord) {\n return `

Total HT${money(document.total_ht)}

TVA${money(document.total_tva)}

Total TTC${money(document.total_ttc)}

`;\n}\n\nconst BASE_CSS = `\n:root{--ink:#17212b;--muted:#65717d;--line:#dfe5e8;--brand:#0f766e;--soft:#e8f5f2;--paper:#fff;--bg:#111820}\n*{box-sizing:border-box}html{background:var(--bg)}body{margin:0;font:13px/1.5 Inter,ui-sans-serif,system-ui,-apple-system,\"Segoe UI\",sans-serif;color:var(--ink);background:var(--bg);padding:28px}\n.toolbar{max-width:1000px;margin:0 auto 14px;display:flex;gap:8px;justify-content:flex-end}.toolbar button,.toolbar a{border:1px solid #33414d;background:#1b2630;color:#e9f0f4;padding:9px 13px;border-radius:10px;text-decoration:none;font-weight:750}.toolbar .primary{background:#0f766e;border-color:#0f766e;color:#fff}\n.paper{width:210mm;min-height:297mm;margin:auto;background:var(--paper);padding:18mm 17mm 15mm;box-shadow:0 24px 70px rgba(0,0,0,.35);position:relative}\n.header{display:grid;grid-template-columns:1fr auto;gap:30px;align-items:start;border-bottom:3px solid var(--brand);padding-bottom:18px}.brand h1{font-size:22px;margin:0 0 7px;letter-spacing:-.03em}.brand p{margin:2px 0;color:var(--muted)}.doc-title{text-align:right}.doc-title .kind{text-transform:uppercase;letter-spacing:.14em;color:var(--brand);font-size:11px;font-weight:850}.doc-title h2{font-size:30px;margin:3px 0 4px;letter-spacing:-.045em}.doc-title .status{display:inline-block;padding:4px 9px;border-radius:999px;background:var(--soft);color:var(--brand);font-weight:800;text-transform:capitalize}\n.meta-grid{display:grid;grid-template-columns:1fr 1fr;gap:32px;margin:24px 0}.box{border:1px solid var(--line);border-radius:12px;padding:14px}.box-label{text-transform:uppercase;letter-spacing:.09em;color:var(--muted);font-size:9px;font-weight:850;margin-bottom:8px}.box strong{font-size:15px}.box p{margin:3px 0;color:var(--muted)}\n.subject{background:#f6f8f9;border-radius:12px;padding:13px 15px;margin-bottom:18px}.subject span{color:var(--muted);font-size:10px;text-transform:uppercase;letter-spacing:.08em;font-weight:800}.subject strong{display:block;margin-top:3px;font-size:14px}\ntable{width:100%;border-collapse:collapse;margin-top:8px}th{text-align:left;padding:9px 8px;border-bottom:2px solid var(--ink);font-size:9px;text-transform:uppercase;letter-spacing:.08em;color:var(--muted)}td{padding:11px 8px;border-bottom:1px solid var(--line);vertical-align:top}.num{text-align:right}.strong{font-weight:800}.designation{font-weight:750}.line-kind{font-size:9px;color:var(--muted);text-transform:uppercase;letter-spacing:.05em;margin-top:2px}\n.summary{display:grid;grid-template-columns:1fr 280px;gap:30px;margin-top:22px}.notes{color:var(--muted);font-size:11px}.notes strong{display:block;color:var(--ink);margin-bottom:5px}.totals{border:1px solid var(--line);border-radius:12px;overflow:hidden}.totals div{display:flex;justify-content:space-between;padding:9px 12px;border-bottom:1px solid var(--line)}.totals div:last-child{border-bottom:0}.totals span{color:var(--muted)}.totals .grand{background:var(--ink);color:#fff;padding:13px 12px}.totals .grand span{color:#cbd5dc}.totals .grand strong{font-size:18px}\n.payment{margin-top:22px;border-left:4px solid var(--brand);background:var(--soft);padding:13px 15px;border-radius:0 10px 10px 0}.payment strong{display:block;margin-bottom:4px}.payment p{margin:2px 0;color:#35504e}.footer{position:absolute;left:17mm;right:17mm;bottom:12mm;border-top:1px solid var(--line);padding-top:9px;display:flex;justify-content:space-between;gap:20px;color:var(--muted);font-size:9px}.legal{margin-top:20px;font-size:9px;color:var(--muted)}\n@media(max-width:850px){body{padding:0}.toolbar{position:sticky;top:0;z-index:2;background:#111820;padding:10px;margin:0}.paper{width:100%;min-height:100vh;padding:25px 20px;box-shadow:none}.meta-grid,.summary{grid-template-columns:1fr}.footer{position:static;margin-top:35px}.doc-title h2{font-size:24px}}\n@media print{@page{size:A4;margin:0}html,body{background:#fff}.toolbar{display:none}.paper{box-shadow:none;margin:0;width:210mm;min-height:297mm}.footer{position:absolute}}\n`;\n\nfunction shell(content: string, title: string, nonce: string) {\n return `${esc(title)}${content}`;\n}\n\nexport function quotePage(data: AnyRecord, nonce: string): string {\n const quote = data.devis || {};\n const client = clientBlock(data.client || {});\n const company = companyBlock(data.settings || {});\n const lines = Array.isArray(data.lignes) ? data.lignes : [];\n const validUntil = quote.date_emission ? new Date(new Date(quote.date_emission).getTime() + Number(quote.validite_jours || 30) * 86400000) : null;\n const deposit = Number(quote.total_ttc || 0) * Number(quote.acompte_pct || 0) / 100;\n const content = `

\n \n

Destinataire

${esc(client.name)}

${client.address || \"Adresse non renseignée\"}

${esc([client.phone,client.email].filter(Boolean).join(\" · \"))}

Informations

Date d’émission : ${dateFr(quote.date_emission)}

Valable jusqu’au : ${dateFr(validUntil)}

Acompte à la commande : ${money(deposit)} (${esc(quote.acompte_pct || 0)} %)

Objet${esc(quote.objet || \"Prestations piscine\")}

\n ${lineRows(lines) || ``}

Désignation	Qté	Unité	Prix HT	TVA	Total HT
Aucune ligne renseignée.

Notes et conditions

${esc(quote.notes || company.quoteTerms)}

${totalsBlock(quote)}

Acceptation du devis

Bon pour accord, date et signature du client précédées de la mention « Lu et approuvé ».

${company.iban ? `

IBAN pour l’acompte : ${esc(company.iban)}

` : \"\"}

${esc(company.quoteTerms)}

\n \n

`;\n return shell(content, `Devis ${quote.numero || \"\"}`, nonce);\n}\n\nexport function invoicePage(data: AnyRecord, nonce: string): string {\n const invoice = data.facture || {};\n const quote = data.devis || {};\n const client = clientBlock(data.client || {});\n const company = companyBlock(data.settings || {});\n const allLines = Array.isArray(data.lignes) ? data.lignes : [];\n const isFull = invoice.type_facture === \"simple\";\n const invoiceLines = isFull ? allLines : [{\n designation: `${invoice.type_facture === \"acompte\" ? \"Acompte\" : \"Solde\"} sur devis ${quote.numero || \"\"} — ${quote.objet || \"Prestations piscine\"}`,\n type_ligne: invoice.type_facture || \"facturation\",\n quantite: 1,\n unite: \"forfait\",\n prix_unitaire_ht: invoice.total_ht,\n tva_taux: Number(invoice.total_ht || 0) ? Number(invoice.total_tva || 0) / Number(invoice.total_ht || 1) * 100 : 0,\n total_ht: invoice.total_ht,\n }];\n const paid = String(invoice.statut || \"\").toLowerCase() === \"payee\";\n const content = `

\n \n

Facturé à

${esc(client.name)}

${client.address || \"Adresse non renseignée\"}

${esc([client.phone,client.email].filter(Boolean).join(\" · \"))}

Informations

Date d’émission : ${dateFr(invoice.date_emission)}

Échéance : ${dateFr(invoice.date_echeance)}

${paid ? `

Payée le : ${dateFr(invoice.date_paiement)}

Mode : ${esc(invoice.mode_paiement || \"\")}

` : \"\"}

Référence${esc(quote.objet || `Devis ${quote.numero || \"\"}`)}

\n ${lineRows(invoiceLines)}

Désignation	Qté	Unité	Prix HT	TVA	Total HT

Notes

${esc(invoice.notes || company.invoiceTerms)}

${totalsBlock(invoice)}

${paid ? \"Paiement reçu\" : \"Modalités de paiement\"}${paid ? `

Cette facture est acquittée.

` : `

Montant à régler avant le ${dateFr(invoice.date_echeance)}.

${company.iban ? `

Virement bancaire — IBAN : ${esc(company.iban)}

` : \"\"}`}

${esc(company.invoiceTerms)}

\n \n

`;\n return shell(content, `Facture ${invoice.numero || \"\"}`, nonce);\n}\n",[],[514,516],"d053016d-eba5-4453-8b30-9fb64efab572","auth.ts","019f4ebf-ee2c-749e-99a4-df1bd8fc193e",1,["D",1783732629041],"const encoder = new TextEncoder();\nconst decoder = new TextDecoder();\nconst ACCESS_CODE = Deno.env.get(\"PISCINE_ACCESS_CODE\") || \"\";\nconst BRIDGE_KEY = Deno.env.get(\"PISCINE_BRIDGE_KEY\") || \"\";\nconst COOKIE = \"piscine_session\";\nconst SESSION_TTL_MS = 8 * 60 * 60 * 1000;\nconst WINDOW_MS = 5 * 60 * 1000;\nconst MAX_FAILURES = 5;\n\nexport type Session = {\n v: 2;\n iat: number;\n exp: number;\n nonce: string;\n csrf: string;\n};\n\ntype Attempt = { count: number; resetAt: number; blockedUntil: number };\nconst attempts = new Map();\n\nfunction base64url(bytes: Uint8Array): string {\n let value = \"\";\n for (const byte of bytes) value += String.fromCharCode(byte);\n return btoa(value).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\n\nfunction decode64url(value: string): Uint8Array {\n const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\") + \"===\".slice((value.length + 3) % 4);\n const raw = atob(padded);\n return Uint8Array.from(raw, (char) => char.charCodeAt(0));\n}\n\nfunction safeEqual(a: string, b: string): boolean {\n const aa = encoder.encode(a);\n const bb = encoder.encode(b);\n if (aa.length !== bb.length) return false;\n let diff = 0;\n for (let index = 0; index < aa.length; index++) diff |= aa[index] ^ bb[index];\n return diff === 0;\n}\n\nasync function signingKey(): Promise {\n return crypto.subtle.importKey(\n \"raw\",\n encoder.encode(`${ACCESS_CODE}\\u0000${BRIDGE_KEY}`),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n}\n\nasync function signature(value: string): Promise {\n const signed = await crypto.subtle.sign(\"HMAC\", await signingKey(), encoder.encode(value));\n return base64url(new Uint8Array(signed));\n}\n\nfunction cookies(req: Request): Record {\n const result: Record = {};\n for (const chunk of (req.headers.get(\"cookie\") || \"\").split(\";\")) {\n const [rawKey, ...parts] = chunk.trim().split(\"=\");\n if (!rawKey) continue;\n try {\n result[rawKey] = decodeURIComponent(parts.join(\"=\"));\n } catch {\n result[rawKey] = \"\";\n }\n }\n return result;\n}\n\nasync function clientKey(req: Request): Promise {\n const forwarded = req.headers.get(\"cf-connecting-ip\") || req.headers.get(\"x-forwarded-for\") || \"unknown\";\n const ip = forwarded.split(\",\")[0].trim();\n const digest = await crypto.subtle.digest(\"SHA-256\", encoder.encode(`${ip}\\u0000${BRIDGE_KEY}`));\n return base64url(new Uint8Array(digest)).slice(0, 24);\n}\n\nasync function attemptFor(req: Request): Promise<[string, Attempt]> {\n const key = await clientKey(req);\n const now = Date.now();\n let state = attempts.get(key);\n if (!state || now >= state.resetAt) state = { count: 0, resetAt: now + WINDOW_MS, blockedUntil: 0 };\n attempts.set(key, state);\n return [key, state];\n}\n\nexport function authConfigured(): boolean {\n return Boolean(ACCESS_CODE && BRIDGE_KEY);\n}\n\nexport function validAccessCode(value: string): boolean {\n return Boolean(ACCESS_CODE) && safeEqual(value, ACCESS_CODE);\n}\n\nexport async function loginRetryAfter(req: Request): Promise {\n const [, state] = await attemptFor(req);\n return Math.max(0, Math.ceil((state.blockedUntil - Date.now()) / 1000));\n}\n\nexport async function recordLoginFailure(req: Request): Promise {\n const [key, state] = await attemptFor(req);\n state.count += 1;\n if (state.count >= MAX_FAILURES) state.blockedUntil = Date.now() + WINDOW_MS;\n attempts.set(key, state);\n await new Promise((resolve) => setTimeout(resolve, 450));\n return Math.max(0, Math.ceil((state.blockedUntil - Date.now()) / 1000));\n}\n\nexport async function clearLoginFailures(req: Request): Promise {\n attempts.delete(await clientKey(req));\n}\n\nexport function sameOrigin(req: Request): boolean {\n const target = new URL(req.url);\n const origin = req.headers.get(\"origin\");\n try {\n if (origin && origin !== \"null\") return new URL(origin).origin === target.origin;\n } catch {\n return false;\n }\n\n const referer = req.headers.get(\"referer\");\n if (referer) {\n try {\n const ref = new URL(referer);\n if (ref.origin === target.origin) return true;\n if (ref.hostname === \"val.town\" || ref.hostname.endsWith(\".val.town\")) return true;\n } catch {\n return false;\n }\n }\n\n const site = req.headers.get(\"sec-fetch-site\") || \"\";\n const mode = req.headers.get(\"sec-fetch-mode\") || \"\";\n return [\"same-origin\", \"same-site\", \"none\"].includes(site) && [\"navigate\", \"cors\", \"same-origin\"].includes(mode);\n}\n\nexport async function issueSession(): Promise<{ session: Session; cookie: string }> {\n const now = Date.now();\n const session: Session = {\n v: 2,\n iat: now,\n exp: now + SESSION_TTL_MS,\n nonce: crypto.randomUUID(),\n csrf: crypto.randomUUID(),\n };\n const payload = base64url(encoder.encode(JSON.stringify(session)));\n const token = `${payload}.${await signature(payload)}`;\n return {\n session,\n cookie: `${COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; Secure; SameSite=Strict; Max-Age=${Math.floor(SESSION_TTL_MS / 1000)}`,\n };\n}\n\nexport async function getSession(req: Request): Promise {\n if (!authConfigured()) return null;\n const token = cookies(req)[COOKIE] || \"\";\n const [payload, provided, extra] = token.split(\".\");\n if (!payload || !provided || extra || !safeEqual(provided, await signature(payload))) return null;\n try {\n const session = JSON.parse(decoder.decode(decode64url(payload))) as Session;\n const now = Date.now();\n if (session.v !== 2 || !session.csrf || !session.nonce || session.iat > now + 30_000 || session.exp <= now) return null;\n return session;\n } catch {\n return null;\n }\n}\n\nexport function validCsrf(req: Request, session: Session): boolean {\n return sameOrigin(req) && safeEqual(req.headers.get(\"x-csrf-token\") || \"\", session.csrf);\n}\n\nexport function expiredCookie(): string {\n return `${COOKIE}=; Path=/; HttpOnly; Secure; SameSite=Strict; Max-Age=0`;\n}\n",[],[514,524],"955bd129-b5c8-485d-9f60-a348722703e6","api.ts","019f4ebf-ee2c-749e-99a4-d9ad996bc1a3",35,["D",1783734115080],"export type ApiResult> = T & { ok?: boolean; error?: string };\n\nconst BASE = (Deno.env.get(\"PISCINE_N8N_BASE\") || \"\").replace(/\\/$/, \"\");\nconst BRIDGE_KEY = Deno.env.get(\"PISCINE_BRIDGE_KEY\") || \"\";\nconst INTERNAL_PATH = (Deno.env.get(\"PISCINE_N8N_INTERNAL_PATH\") || \"\").trim();\nconst AI_PATH = `${Deno.env.get(\"PISCINE_AI_PATH_A\") || \"\"}${Deno.env.get(\"PISCINE_AI_PATH_B\") || \"\"}`;\n\nconst ACTION_MAP: Record = {\n \"client.create\": \"create_lead\",\n \"client.context\": \"client_context\",\n \"availability.check\": \"check_availability\",\n \"rdv.create\": \"book_appointment\",\n \"devis.create\": \"create_quote\",\n \"knowledge.lookup\": \"knowledge_lookup\",\n \"next.action\": \"next_best_action\",\n \"quote.create\": \"quote_create_v2\",\n \"quote.get\": \"quote_get_v2\",\n \"quote.status\": \"quote_status_v2\",\n \"invoice.from_quote\": \"invoice_from_quote\",\n \"invoice.get\": \"invoice_get\",\n \"invoice.mark_paid\": \"invoice_mark_paid\",\n \"task.create\": \"task_create\",\n};\n\nfunction errorCode(value: unknown, fallback: string): string {\n const text = String(value || fallback).slice(0, 120);\n return /^[a-z0-9_:-]+$/i.test(text) ? text : fallback;\n}\n\nasync function fetchJson(url: string, init: RequestInit, timeoutMs = 10_000): Promise> {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), timeoutMs);\n try {\n const response = await fetch(url, { ...init, signal: controller.signal });\n const raw = (await response.text()).slice(0, 100_000);\n let payload: any = {};\n try {\n payload = raw ? JSON.parse(raw) : {};\n } catch {\n throw new Error(\"invalid_upstream_json\");\n }\n if (!response.ok || payload?.ok === false) throw new Error(errorCode(payload?.error || payload?.code, `upstream_${response.status}`));\n return payload as ApiResult;\n } finally {\n clearTimeout(timer);\n }\n}\n\nexport function integrationConfig() {\n return {\n businessApi: Boolean(BASE && BRIDGE_KEY),\n actionApi: Boolean(BASE && INTERNAL_PATH && BRIDGE_KEY),\n aiApi: Boolean(BASE && BRIDGE_KEY && AI_PATH),\n securityApi: Boolean(BASE && BRIDGE_KEY),\n };\n}\n\nexport async function cockpitApi>(action: string, data: Record = {}): Promise> {\n if (!BASE || !BRIDGE_KEY) throw new Error(\"cockpit_gateway_not_configured\");\n return fetchJson(`${BASE}/webhook/secretariat-pisciniste-cockpit-api-v1`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-key\": BRIDGE_KEY,\n \"x-piscine-source\": \"valtown-cockpit\",\n \"x-request-id\": crypto.randomUUID(),\n },\n body: JSON.stringify({ action, data }),\n });\n}\n\nexport async function cockpitAction>(action: string, data: Record = {}): Promise> {\n if (!BASE || !INTERNAL_PATH || !BRIDGE_KEY) throw new Error(\"cockpit_action_gateway_not_configured\");\n const mapped = ACTION_MAP[action];\n if (!mapped) throw new Error(\"unsupported_cockpit_action\");\n\n const customerPhone = String(data.telephone ?? data.customer_phone ?? \"\").trim();\n const explicit = data.explicit_confirmation === true || data.explicit_confirmation === \"true\" || data.explicit_confirmation === \"on\";\n const businessData = {\n ...data,\n customer_name: data.nom ?? data.customer_name ?? \"\",\n customer_phone: customerPhone,\n address: data.adresse ?? data.address ?? \"\",\n city: data.ville ?? data.city ?? \"\",\n pool_type: data.type_bassin ?? data.pool_type ?? \"\",\n problem: data.objet ?? data.description ?? data.problem ?? \"\",\n intent: data.intent ?? \"autre\",\n urgency: data.urgence ?? \"normale\",\n appointment_datetime: data.date_heure ?? data.appointment_datetime ?? \"\",\n explicit_confirmation: explicit,\n };\n\n return fetchJson(`${BASE}/webhook/${INTERNAL_PATH}`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-key\": BRIDGE_KEY,\n \"x-piscine-source\": \"valtown-cockpit\",\n \"x-request-id\": crypto.randomUUID(),\n },\n body: JSON.stringify({\n args: { action: mapped, data: businessData },\n call: { call_id: `cockpit-${crypto.randomUUID()}`, from_number: customerPhone },\n }),\n }, 12_000);\n}\n\nexport async function aiSupervision>(): Promise> {\n if (!BASE || !BRIDGE_KEY || !AI_PATH) throw new Error(\"ai_supervision_gateway_not_configured\");\n return fetchJson(`${BASE}/webhook/${AI_PATH}`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-key\": BRIDGE_KEY,\n \"x-piscine-source\": \"valtown-cockpit\",\n \"x-request-id\": crypto.randomUUID(),\n },\n body: JSON.stringify({ action: \"supervision.snapshot\" }),\n });\n}\n\nexport async function securityAudit>(): Promise> {\n if (!BASE || !BRIDGE_KEY) throw new Error(\"security_audit_gateway_not_configured\");\n return fetchJson(`${BASE}/webhook/secretariat-pisciniste-security-audit-v1`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-key\": BRIDGE_KEY,\n \"x-piscine-source\": \"valtown-cockpit\",\n \"x-request-id\": crypto.randomUUID(),\n },\n body: \"{}\",\n });\n}\n",[],[514,532],"f5dc9033-6cc1-4d72-a3bd-941fbffe9994",["D",1783732629041],"directory",[451,452,453,454],[514],["D",1783720739803],["D",1789526460011],{"_11":12,"_125":68},{"_11":12,"_120":121,"_67":68,"_30":66,"_122":123,"_124":24},{"_38":109,"_13":16,"_32":35,"_110":70,"_111":112,"_113":114,"_115":75,"_116":70,"_117":41,"_118":14,"_119":12},"ctx",{"_51":-5,"_145":582,"_583":584,"_585":586,"_587":24,"_588":24,"_589":24,"_590":83,"_591":-5,"_592":-7,"_593":-7,"_594":26,"_595":24,"_596":24,"_597":-5,"_598":24,"_599":24,"_600":24,"_601":-5},"ENV",{"_553":554,"_555":556,"_557":426,"_558":559,"_560":561,"_562":563,"_564":565,"_566":567,"_568":569,"_570":571,"_572":573,"_574":575,"_576":577,"_578":579,"_580":581},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Lignes du devis

'+esc(quote.numero||'Devis')+' · '+money(quote.total_ttc)+'

À traiter maintenant

Priorités

Actions rapides

Prochains rendez-vous

Demandes

Agenda

Clients

Documents

Pilotage

Centre d’actions

Accès directs

Réglages

À compléter

Recherche

${esc(company.name)}

${esc(quote.numero || \"Brouillon\")}

${esc(company.name)}

${esc(invoice.numero || \"Brouillon\")}

History · validate-v4.ts