Recherche serveur';card.before(toolbar);q('#clientSearchV10').oninput=event=>{clearTimeout(v10SearchTimer);const term=event.target.value.trim();if(v10State.clients.loaded&&v10State.clients.next===null){const rows=clients.filter(item=>!term||JSON.stringify([item.nom,item.telephone,item.email,item.ville]).toLowerCase().includes(term.toLowerCase()));q('#clientsBody').innerHTML=rows.length?rows.map(x=>''+esc(x.nom||'Sans nom')+'

'+esc(x.ville||'')+'

'+esc(x.telephone||'—')+''+esc(x.email||'—')+''+pill(x.vip?'VIP':'actif')+'').join(''):'Aucun client';qa('[data-client-open]').forEach(x=>x.onclick=()=>openClient360(x.dataset.clientOpen));return}if(term.length<2)return;v10SearchTimer=setTimeout(()=>v10Load('clients',{append:false,search:term}),700)}}\nv10InstallClientSearch();\nconst reqSearch=q('#requestSearch'),reqFilter=q('#requestFilter');if(reqSearch)reqSearch.oninput=()=>{clearTimeout(v10SearchTimer);if(v10State.requests.loaded&&v10State.requests.next===null){renderRequests();return}if(reqSearch.value.trim().length<2)return;v10SearchTimer=setTimeout(()=>v10Load('requests',{append:false,search:reqSearch.value.trim(),status:reqFilter?.value||'all'}),700)};if(reqFilter)reqFilter.onchange=()=>{if(v10State.requests.loaded&&v10State.requests.next===null)renderRequests();else v10Load('requests',{append:false,search:reqSearch?.value.trim()||'',status:reqFilter.value})};\nqa('[data-document-tab]').forEach(tab=>tab.onclick=async()=>{documentTab=tab.dataset.documentTab;v8Scope=documentTab==='quotes'?'action':documentTab==='invoices'?'open':'all';const key=documentTab==='quotes'?'quotes':documentTab==='invoices'?'invoices':'purchases';if(!v10State[key].loaded)await v10Load(key);else renderDocuments()});\nv10Decorate();v10EnsureView(location.hash.slice(1)||'today').catch(error=>toast(error.message,false));const v10IdleSupervision=()=>v10LoadSupervision().catch(()=>{});if('requestIdleCallback'in window)window.requestIdleCallback(v10IdleSupervision,{timeout:4000});else setTimeout(v10IdleSupervision,1500);\n`;\n","createdAt",["D",1784147277328],"branchVersion","branchId","6fcfc9de-b55f-4407-ae7e-2c2ee52675b9","id","c92dbf10-5379-4f27-826a-f88beea36657","secretariat-pisciniste",["D",1783720739803],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Plateforme multi-métiers de secrétariat IA autonome","imageUrl","b09e2b61-6d3d-45b4-9e47-483ceda2d63e","pinnedFileId","66ce4ade-7caf-11f1-8983-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019ee2d0-01b3-7462-a636-aad0cd2ecdf7","tursoName","c92dbf1053794f27826af88beea36657","tursoHostname","c92dbf1053794f27826af88beea36657-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789526460011],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_103":102,"_111":107},"org",{"_103":102,"_104":105,"_106":107,"_18":56,"_108":109,"_110":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":94,"_95":96,"_97":51,"_98":45,"_99":66,"_100":46,"_101":102},"isOwned",62,"multi-vertical-v12-20260715","projectId","forkedBranchId","002594a0-197f-4348-8ce0-a1205dd09edd","forkedBranchVersion",133,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","IDLEYER","handle","displayName","Lucas Bondi","avatar","https://lh3.googleusercontent.com/a/ACg8ocIOtmCQ3C5EHjNcuLBRZYhIsU0zzV95ucDS8yMqXk591M_byQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":704,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":705,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":706,"_85":707,"_87":708,"_89":25},"tree",[483,485,507,509,510,511,512],"files",[483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512],"counts",{"_471":64,"_472":473,"_474":64,"_475":476,"_477":478},"contents",[417,418,419,420,421,422,423],"upstreamProject","upstreamBranch",{"_44":94,"_39":410,"_411":412,"_32":413,"_92":45,"_13":414,"_93":-5,"_95":-5,"_415":416,"_48":-5,"_89":25,"_50":51,"_101":102,"_65":66,"_100":46},"emptyEnvVars","flags",[135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":409,"_273":-5},{"_44":408,"_273":-5},{"_44":407,"_273":-5},{"_44":406,"_273":-5},{"_44":405,"_273":-5},{"_44":404,"_273":-5},{"_44":403,"_273":-5},{"_44":402,"_273":-5},{"_44":401,"_273":-5},{"_44":400,"_273":-5},{"_44":399,"_273":-5},{"_44":398,"_273":-5},{"_44":397,"_273":-5},{"_44":396,"_273":-5},{"_44":395,"_273":-5},{"_44":394,"_273":-5},{"_44":393,"_273":-5},{"_44":392,"_273":-5},{"_44":391,"_273":-5},{"_44":390,"_273":-5},{"_44":389,"_273":-5},{"_44":388,"_273":-5},{"_44":387,"_273":-5},{"_44":386,"_273":-5},{"_44":385,"_273":-5},{"_44":384,"_273":-5},{"_44":383,"_273":-5},{"_44":382,"_273":-5},{"_44":381,"_273":-5},{"_44":380,"_273":-5},{"_44":379,"_273":-5},{"_44":378,"_273":-5},{"_44":377,"_273":-5},{"_44":376,"_273":-5},{"_44":375,"_273":-5},{"_44":374,"_273":-5},{"_44":373,"_273":-5},{"_44":372,"_273":-5},{"_44":371,"_273":-5},{"_44":370,"_273":-5},{"_44":369,"_273":-5},{"_44":368,"_273":-5},{"_44":367,"_273":-5},{"_44":366,"_273":-5},{"_44":365,"_273":-5},{"_44":364,"_273":-5},{"_44":363,"_273":-5},{"_44":362,"_273":-5},{"_44":361,"_273":-5},{"_44":360,"_273":-5},{"_44":359,"_273":-5},{"_44":358,"_273":-5},{"_44":357,"_273":-5},{"_44":356,"_273":-5},{"_44":355,"_273":-5},{"_44":354,"_273":-5},{"_44":353,"_273":-5},{"_44":352,"_273":-5},{"_44":351,"_273":-5},{"_44":350,"_273":-5},{"_44":349,"_273":-5},{"_44":348,"_273":-5},{"_44":347,"_273":-5},{"_44":346,"_273":-5},{"_44":345,"_273":-5},{"_44":344,"_273":-5},{"_44":343,"_273":-5},{"_44":342,"_273":-5},{"_44":341,"_273":-5},{"_44":340,"_273":-5},{"_44":339,"_273":-5},{"_44":338,"_273":-5},{"_44":337,"_273":-5},{"_44":336,"_273":-5},{"_44":335,"_273":-5},{"_44":334,"_273":-5},{"_44":333,"_273":-5},{"_44":332,"_273":-5},{"_44":331,"_273":-5},{"_44":330,"_273":-5},{"_44":329,"_273":-5},{"_44":328,"_273":-5},{"_44":327,"_273":-5},{"_44":326,"_273":-5},{"_44":325,"_273":-5},{"_44":324,"_273":-5},{"_44":323,"_273":-5},{"_44":322,"_273":-5},{"_44":321,"_273":-5},{"_44":320,"_273":-5},{"_44":319,"_273":-5},{"_44":318,"_273":-5},{"_44":317,"_273":-5},{"_44":316,"_273":-5},{"_44":315,"_273":-5},{"_44":314,"_273":-5},{"_44":313,"_273":-5},{"_44":312,"_273":-5},{"_44":311,"_273":-5},{"_44":310,"_273":-5},{"_44":309,"_273":-5},{"_44":308,"_273":-5},{"_44":307,"_273":-5},{"_44":306,"_273":-5},{"_44":305,"_273":-5},{"_44":304,"_273":-5},{"_44":303,"_273":-5},{"_44":302,"_273":-5},{"_44":301,"_273":-5},{"_44":300,"_273":-5},{"_44":299,"_273":-5},{"_44":298,"_273":-5},{"_44":297,"_273":-5},{"_44":296,"_273":-5},{"_44":295,"_273":-5},{"_44":294,"_273":-5},{"_44":293,"_273":-5},{"_44":292,"_273":-5},{"_44":291,"_273":-5},{"_44":290,"_273":-5},{"_44":289,"_273":-5},{"_44":288,"_273":-5},{"_44":287,"_273":-5},{"_44":286,"_273":-5},{"_44":285,"_273":-5},{"_44":284,"_273":-5},{"_44":283,"_273":-5},{"_44":282,"_273":-5},{"_44":281,"_273":-5},{"_44":280,"_273":-5},{"_44":279,"_273":-5},{"_44":278,"_273":-5},{"_44":277,"_273":-5},{"_44":276,"_273":-5},{"_44":275,"_273":-5},{"_44":274,"_273":-5},{"_44":272,"_273":-5},"542689e9-fad4-4a4c-8587-48db0cf784a0","reporterId","d4a2c63f-6184-4824-ab22-98fa61616eba","f7e0cfcf-3db3-4d7a-8b37-9c68671f1bbd","1af4df43-f65a-459a-a6f0-e15329502a6c","6fec7e58-f89b-445e-b426-3e816a9980db","7b5c17cc-c5eb-4aea-a668-a1eac1842eec","7ee741f1-8d0e-4818-b24b-d7d41aab26c1","39f210fd-dd7f-46f2-b9cc-07ecd6899100","88bd54cb-fcca-4da6-9396-d0f6edca73e8","228b20f4-1864-4359-b176-61ec12acd25b","b4907c4d-0fba-43f1-ada9-60dc2144215c","7bcd10dc-f8bd-4323-8517-bbc108146519","b98a1f13-4b43-4e3e-b74a-05ba709b3a13","6045833b-2002-4100-b388-b9df10527fcf","95fa5eee-0dde-46bb-8bd4-7df6188f6cd0","8454736e-8742-42ab-9f1e-a6aef4c76f80","6c51d5ae-d592-4fbf-bef4-12db698fd7f7","3a82a61f-bf3d-4533-a91b-59dd7318ec4a","7dcdb296-cd2e-4221-880b-17d0b1e58d4d","4bf611ba-6330-42ce-bee0-1aa40d7e5128","6837ec1a-adaf-4c1c-8e2a-3e3774b69f58","a7d60d11-0dae-4540-9f80-92e06c70221e","d56876d0-8ed3-4303-af87-d21f4db8323f","5e452c16-e378-4c61-8895-222f04e463bf","0177de03-8d92-43b7-8999-75e62f8c4123","81e1b3b0-707a-422c-a785-a5595e99dfa0","6c59484d-c963-443a-84d8-882d60a80fe9","affb3b18-14f9-4a95-bd36-b652fd4e5d81","8c64a2f0-1e58-47e0-9962-d4367ecdbb88","0275e772-ec7c-4b60-9d6c-2ca50a8071c1","5c113c95-0539-4cb2-8dda-53a2fe0b3f7c","47c55973-b401-49d3-a0b0-5ea6d07ed594","92fd09ec-3f2f-4b19-911e-1d1f5c3657e8","efdd76ee-2305-4f5f-91bf-f1e24d5ed6d0","dbc27fa0-3fc0-4347-8ff0-196699a0522e","0de0d2a4-2e9c-4092-9f44-9f3536138b57","53ca0acc-2a27-481d-9a6f-d6099bd6eb16","bd959d70-1eaf-41bb-8977-4ba913776ccb","cf2466ff-ef18-4cc8-8c6c-ac88c49c5fec","7b99ddf0-31e6-4669-97fe-4d1f6f427da9","e91d9779-320e-4a10-b44a-63742ae8f3d5","d16c6427-b2c5-4ec5-9147-33060ca780d4","6e500d3e-f624-42bc-a8ee-2f9f7641fef6","ef483d75-31c6-4c90-98f0-e7a18777d5ca","f62ebb84-a925-49bd-848b-74ddb19c938b","18c1233b-f549-4488-a70b-1671a420f7c2","f2dc4cd4-c2d3-4fbe-9fdd-eab0650f9154","a5aab4fb-1716-439f-b851-ea929cdb4d78","ecca598e-8ceb-46f8-bd62-e2c312bdf890","f61e76b0-96fe-4328-9c66-4c14d4638472","3c9eaf12-e314-4e6e-b757-3f1209d1b3f7","c50da6c8-49bc-43d8-a361-554c94fd4b29","22829e2c-60ff-4665-b70c-87e77d860a4a","f9b62c7d-a0c6-4d0a-9f4b-90948ffb3065","2c15d008-4fca-4b6b-9206-5d5d7ae2d9ef","84a69111-17c9-49ac-8e85-32ec7c1d6cc0","8ef3a3f2-04c9-435b-87a3-8f41902b937b","b38ec89a-cd4a-4f75-90c2-5971319b8c5b","aa08d5c4-0034-4999-8c3f-d3ee88f8e76a","21f20ca4-95fb-4d5f-87c5-31c207f9b17b","9711740e-df01-4aeb-9c4b-2d02a96a431e","109fdaae-c619-4952-9f3e-188f847df791","a31602d1-cccc-4d37-91cc-bb593e7dae6e","3feca0a3-048f-4ab7-82d0-5b082cc37850","32141064-0af7-438b-8872-2b3369de4bc8","fc55f710-c870-4109-885f-eafe969f4c6f","87ecdf3b-0243-4af3-9f97-775557c249e3","7275b990-9868-436d-a279-9c368f5d7f37","5b2c3262-424d-403a-b575-82064c9d1aff","4b1f8efa-c822-400a-bb06-407d14da627d","35b18b58-9296-4105-875d-c31fedb73367","fc884a77-b4b3-4dae-b648-770f7605b4c6","fde604e0-8f56-4213-be45-f1055125ad75","cd65df82-32b8-4436-83b0-567a17ad6c3f","d3cdf965-ae54-4a26-8a5c-8d71deb716f0","165b6e12-82b9-43ff-ad8a-3be6ed8f3cde","9cc21fb8-ec52-4f69-97d0-cb42848de969","eb20a7c3-4977-485a-b36e-dac8e6719280","659b236e-73fc-42aa-bd5c-c44ddfd48c34","41378c2c-55ef-4b1e-a390-a1efbf5b2879","40fde513-43d8-4845-9009-fbe3d149cb77","675eba4a-6eb8-4df3-b0d7-6754ae419adb","f3e83103-0d90-44a5-82b4-cd6a83660ad1","1c568c78-6cfb-49d9-962c-91c1930b5ed8","3afa4119-2e57-42be-9a17-826a696a5f1e","46fc15b7-6b0d-419c-acfd-2dbb1a88ee3e","ab96478d-6525-43a5-9285-a05f2b81b6f6","52e5f1da-7c6e-4423-a515-0f4f4507f57d","2259b253-044d-4363-963b-874a8594b458","586aacb7-f9bf-4791-8391-07bfcdb9a325","1a962d2c-4fbf-4f9e-9eff-fe497446bf85","0010b99a-fc2d-4728-ad11-2e45f9eeeb62","082657ff-66b1-4b53-a6ab-91b6cc27f126","a3f1f4f0-bfe1-4e01-933d-cfa6ddc02be2","d42e1764-73c9-4d5a-bd70-495015d4b9a2","9739b12b-cc2f-472a-b592-421b6de47767","9dc7547f-28ed-4b01-a7cf-55cb7f6e17e9","128b0024-b0d7-4acd-b99d-c139edbe5896","74112458-902b-4146-b4d3-b96545c16490","f14adfa1-f17b-4b79-947f-b55c3c8e5e11","b8415156-359b-4a37-88db-424ae1a89ba5","572c1d0d-d056-4b7f-b254-05417bdf32c7","a597e9da-3abe-4939-a916-0b8cdec59f9c","a3e9bf9b-d4f3-4406-9316-abffd7b860e7","32254314-c2d6-49a8-ba83-8a116b5bebcf","8cb9f84e-8754-4888-a704-67b685b5c9cb","fbeb3745-8644-4220-b087-a7167c57fb0d","add18493-5c68-4d3f-9f66-bd5b213fb90e","3c1a432c-b1ef-4aad-a4e9-904048e49bfc","d2c18752-4119-4c00-9f36-afd6e2608f73","3689fbde-33ce-4dd6-a88b-9e35e690612c","a9f8867a-095a-4838-a251-398620e5af18","b4c9c232-0ec5-4940-9f3a-5f33a7ab786e","9530f12d-1062-4986-aaa6-5c0ba00ce140","bd101a6c-2e5d-4c52-a993-57c8e349ef4f","80cd98d1-7beb-44a7-857c-3af5e392a2f2","33cfd66b-0277-41c3-8158-b24ba7d9547f","f3340c28-f929-4f41-b4e3-69bcc531a9cf","6a58dfd2-860b-4579-9f74-b4c52924e529","59db594e-8b9f-4b23-85c9-73ec95b316a5","dac38743-a136-47f5-a9dd-b428d1636a4c","af2982d2-eb22-4367-a89d-c039ad31f76f","786d0b44-bcf5-48cf-b702-f2b64083c8ea","cddea4dd-cc85-45bc-8e85-02187e3d055d","c17270c5-7777-40bf-81f2-19a3391c9ca3","98cac582-fe99-4248-a289-fb750130e4de","73c2d77e-5595-46ef-b32d-bace2ee4e25f","a8f061e6-ea5e-4969-a0c2-05c52933eb21","1d50c52d-5c7b-4f3e-a0cb-bb922bf4ef89","f40de11e-fe4e-44f8-93b0-26e41e2380ea","ecb63236-5530-49b3-a1b3-fdbd9d806a51","16ee483f-6553-4694-bc61-575667ca074a","0151c4cc-ac4d-499c-bfcd-5c35ff36db18","1cf7dc4d-8091-46be-9ae2-c69d1650713b","e8c0d200-2b3d-4d1c-aa66-c6aea48e0f9c","cf236c8c-84a8-41be-9556-9e85c3de943a","1ef1c4cf-c3bb-40b6-a530-1e581e8f6bd6",["D",1783720739809],"updatedAt",["D",1788667058385],"main",312,"lockfileKey","1788667058563-esm.town_v_IDLEYER_secretariat-pisciniste@312-main",{"_44":466,"_32":467,"_30":468,"_427":-5,"_42":43,"_41":428,"_429":60,"_39":469,"_13":64,"_34":459,"_36":-5,"_24":25,"_433":-5,"_27":470},{"_44":461,"_32":462,"_30":463,"_427":-5,"_42":43,"_41":428,"_429":60,"_39":464,"_13":64,"_34":459,"_36":-5,"_24":25,"_433":-5,"_27":465},{"_44":455,"_32":456,"_30":457,"_427":-5,"_42":43,"_41":428,"_429":60,"_39":458,"_13":64,"_34":459,"_36":-5,"_24":25,"_433":-5,"_27":460},{"_44":449,"_32":450,"_30":451,"_427":-5,"_42":43,"_41":428,"_429":60,"_39":452,"_13":64,"_34":431,"_36":453,"_24":25,"_433":-5,"_27":454},{"_44":442,"_32":443,"_30":444,"_427":-5,"_42":43,"_41":445,"_429":25,"_39":446,"_13":428,"_34":439,"_36":447,"_24":25,"_433":-5,"_27":448},{"_44":435,"_32":436,"_30":437,"_427":-5,"_42":43,"_41":428,"_429":25,"_39":438,"_13":64,"_34":439,"_36":440,"_24":25,"_433":-5,"_27":441},{"_44":424,"_32":425,"_30":426,"_427":-5,"_42":43,"_41":428,"_429":60,"_39":430,"_13":64,"_34":431,"_36":432,"_24":25,"_433":-5,"_27":434},"571c6829-9170-4bbe-96c1-0d337922131a","twilio-status-batch-flush.ts","019f675d-aa00-73de-b630-0c917ad1a287","parentId",1,"latest",["D",1784145619620],"interval","import {\n replayQueuedTwilioStatuses,\n twilioStatusQueueHealth,\n} from \"./lib/twilio-status.ts\";\nimport { n8nBudgetStatus } from \"./lib/n8n-budget.ts\";\n\nconst TIMEZONE = \"Europe/Paris\";\nconst INSTALLATION_LOCK_DAY = \"2026-07-12\";\n\nfunction localDay(date = new Date()): string {\n const parts = new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: TIMEZONE,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n }).formatToParts(date);\n const values = Object.fromEntries(parts.map((part) => [part.type, part.value]));\n return [values.year, values.month, values.day].join(\"-\");\n}\n\nexport default async function main() {\n const day = localDay();\n if (day === INSTALLATION_LOCK_DAY) {\n return {\n ok: true,\n skipped: true,\n reason: \"installation_day_n8n_lock\",\n n8n_executions: 0,\n };\n }\n\n const [budget, queue] = await Promise.all([\n n8nBudgetStatus(),\n twilioStatusQueueHealth(),\n ]);\n if (queue.pending < 1) {\n return {\n ok: true,\n skipped: true,\n reason: \"empty_queue\",\n pending: 0,\n n8n_executions: 0,\n };\n }\n if (budget.project_remaining < 1) {\n return {\n ok: true,\n skipped: true,\n reason: \"n8n_project_daily_budget_exhausted\",\n pending: queue.pending,\n n8n_executions: 0,\n };\n }\n\n return replayQueuedTwilioStatuses(50);\n}\n\nawait main();\n","label",[425],"b7c2d0bd-b04f-4ed8-a741-fc76415ba2be","realtime.ts","019f675d-aa00-73de-b630-094cd6983c18",["D",1784145619620],"http","import OpenAI from \"npm:openai\";\nimport WebSocket from \"npm:ws\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { buildAcceptConfig, buildSessionInstructions } from \"./lib/realtime-agent.ts\";\nimport { resolveChannelContext } from \"./lib/platform-auth.ts\";\nimport {\n bridgeConfigured,\n callBusinessTool,\n deliverQuote,\n normalizePhone,\n postVoiceEvent,\n type CallContext,\n} from \"./lib/realtime-bridge.ts\";\n\nconst OPENAI_API_KEY = Deno.env.get(\"OPENAI_API_KEY\") || \"\";\nconst OPENAI_WEBHOOK_SECRET = Deno.env.get(\"OPENAI_WEBHOOK_SECRET\") || \"\";\nconst TOOL_SECRET = Deno.env.get(\"PISCINE_TOOL_SECRET\") || \"\";\nconst MODEL = Deno.env.get(\"PISCINE_REALTIME_MODEL\") || \"gpt-realtime-2.1\";\nconst VOICE = Deno.env.get(\"PISCINE_REALTIME_VOICE_V3\") || \"marin\";\nconst MAX_BODY = 256_000;\nconst SEGMENT_MS = 42_000;\nconst MAX_CALL_MS = 55 * 60 * 1000;\nconst RECEIPTS_TABLE = \"openai_realtime_webhook_receipts\";\nconst encoder = new TextEncoder();\nlet receiptsReady: Promise | null = null;\n\nfunction securityHeaders(contentType = \"application/json; charset=utf-8\") {\n return {\n \"content-type\": contentType,\n \"cache-control\": \"no-store, max-age=0\",\n \"x-content-type-options\": \"nosniff\",\n \"x-frame-options\": \"DENY\",\n \"referrer-policy\": \"no-referrer\",\n };\n}\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), { status, headers: securityHeaders() });\n}\n\nfunction configured() {\n return {\n openai_api_key: Boolean(OPENAI_API_KEY),\n openai_webhook_secret: Boolean(OPENAI_WEBHOOK_SECRET),\n n8n_business_bridge: bridgeConfigured(),\n internal_session_security: Boolean(TOOL_SECRET),\n };\n}\n\nasync function ensureReceipts(): Promise {\n if (!receiptsReady) {\n receiptsReady = (async () => {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RECEIPTS_TABLE} (\n webhook_id TEXT PRIMARY KEY,\n call_id TEXT NOT NULL,\n received_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_${RECEIPTS_TABLE}_received ON ${RECEIPTS_TABLE}(received_at)`);\n })().catch((error) => {\n receiptsReady = null;\n throw error;\n });\n }\n await receiptsReady;\n}\n\nasync function alreadyAccepted(webhookId: string): Promise {\n if (!webhookId) return false;\n try {\n await ensureReceipts();\n const result = await sqlite.execute({\n sql: `SELECT 1 AS present FROM ${RECEIPTS_TABLE} WHERE webhook_id = ? LIMIT 1`,\n args: [webhookId],\n });\n return result.rows.length > 0;\n } catch {\n return false;\n }\n}\n\nasync function markAccepted(webhookId: string, callId: string): Promise {\n if (!webhookId) return;\n try {\n await ensureReceipts();\n const now = Date.now();\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO ${RECEIPTS_TABLE} (webhook_id, call_id, received_at) VALUES (?, ?, ?)`,\n args: [webhookId, callId, now],\n });\n await sqlite.execute({\n sql: `DELETE FROM ${RECEIPTS_TABLE} WHERE received_at < ?`,\n args: [now - 7 * 24 * 60 * 60 * 1000],\n });\n } catch {\n // La seconde protection d'idempotence est assurée par l'API OpenAI.\n }\n}\n\nfunction base64url(bytes: Uint8Array): string {\n let value = \"\";\n for (const byte of bytes) value += String.fromCharCode(byte);\n return btoa(value).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\n\nasync function sessionToken(callId: string, expiresAt: number): Promise {\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(TOOL_SECRET),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(`${callId}.${expiresAt}`));\n return base64url(new Uint8Array(signature));\n}\n\nfunction safeEqual(a: string, b: string): boolean {\n const aa = encoder.encode(a);\n const bb = encoder.encode(b);\n if (aa.length !== bb.length) return false;\n let diff = 0;\n for (let index = 0; index < aa.length; index++) diff |= aa[index] ^ bb[index];\n return diff === 0;\n}\n\nfunction sipHeader(data: Record, name: string): string {\n const headers = Array.isArray(data.sip_headers) ? data.sip_headers : [];\n const found = headers.find((header: any) => String(header?.name || \"\").toLowerCase() === name.toLowerCase()) as any;\n return String(found?.value || \"\");\n}\n\nasync function openaiCall(path: string, init: RequestInit): Promise {\n return fetch(`https://api.openai.com/v1/realtime/calls/${path}`, {\n ...init,\n headers: {\n authorization: `Bearer ${OPENAI_API_KEY}`,\n ...(init.body ? { \"content-type\": \"application/json\" } : {}),\n ...(init.headers || {}),\n },\n signal: AbortSignal.timeout(15_000),\n });\n}\n\nasync function acceptCall(callId: string): Promise<{ ok: boolean; status: number; error?: string }> {\n const response = await openaiCall(`${encodeURIComponent(callId)}/accept`, {\n method: \"POST\",\n body: JSON.stringify(buildAcceptConfig(MODEL, VOICE)),\n });\n if (response.ok) return { ok: true, status: response.status };\n await response.text();\n return { ok: false, status: response.status, error: \"openai_accept_rejected\" };\n}\n\nasync function referCall(callId: string, target: string): Promise {\n const phone = normalizePhone(target);\n if (!phone.startsWith(\"+\")) return false;\n const response = await openaiCall(`${encodeURIComponent(callId)}/refer`, {\n method: \"POST\",\n body: JSON.stringify({ target_uri: `tel:${phone}` }),\n });\n return response.ok;\n}\n\nasync function hangupCall(callId: string): Promise {\n try {\n await openaiCall(`${encodeURIComponent(callId)}/hangup`, { method: \"POST\" });\n } catch {\n // Fin forcée de sécurité : aucune nouvelle action métier.\n }\n}\n\nfunction compactClientContext(value: Record): Record {\n const client = value.client && typeof value.client === \"object\" ? value.client as Record : null;\n const qualification = value.qualification && typeof value.qualification === \"object\"\n ? value.qualification as Record\n : null;\n return {\n known_client: value.known_client === true,\n client: client ? {\n first_name: client.prenom || qualification?.first_name || null,\n last_name: client.nom_famille || qualification?.last_name || null,\n full_name: client.nom || qualification?.full_name || null,\n caller_phone: client.last_calling_phone || client.telephone || null,\n contact_phone: client.phone_reachable === false ? (client.alternate_phone || null) : (client.telephone || null),\n phone_reachable: client.phone_reachable === true ? true : client.phone_reachable === false ? false : null,\n alternate_phone: client.alternate_phone || null,\n address: client.adresse || null,\n postal_code: client.code_postal || null,\n city: client.ville || null,\n email: client.email || null,\n preferred_contact_channel: client.preferred_contact_channel || null,\n vip: client.vip === true,\n } : qualification,\n missing_core: Array.isArray(value.missing_core) ? value.missing_core : [],\n missing_for_appointment: Array.isArray(value.missing_for_appointment) ? value.missing_for_appointment : [],\n missing_for_email_quote: Array.isArray(value.missing_for_email_quote) ? value.missing_for_email_quote : [],\n piscines: Array.isArray(value.piscines) ? value.piscines.slice(0, 2) : [],\n demandes: Array.isArray(value.demandes) ? value.demandes.slice(0, 2) : [],\n prochain_rdv: value.prochain_rdv || null,\n devis_recents: Array.isArray(value.devis_recents) ? value.devis_recents.slice(0, 2) : [],\n };\n}\n\n\nconst LIVE_CALL_STATE_SCHEMA = `create table if not exists voice_live_call_state (\n call_id text primary key,\n state_json text not null,\n updated_at integer not null\n)`;\n\nasync function loadLiveCallState(callId: string): Promise | null> {\n try {\n await sqlite.execute(LIVE_CALL_STATE_SCHEMA);\n const result = await sqlite.execute({\n sql: \"select state_json from voice_live_call_state where call_id = :call_id limit 1\",\n args: { call_id: String(callId || \"\").slice(0, 220) },\n });\n const raw = String((result.rows[0] as Record | undefined)?.state_json || \"\");\n const parsed = raw ? JSON.parse(raw) : null;\n return parsed && typeof parsed === \"object\" && !Array.isArray(parsed) ? parsed : null;\n } catch {\n return null;\n }\n}\n\nasync function persistLiveCallState(callId: string, state: Record): Promise {\n try {\n await sqlite.execute(LIVE_CALL_STATE_SCHEMA);\n const now = Date.now();\n await sqlite.execute({\n sql: `insert into voice_live_call_state (call_id,state_json,updated_at)\n values (:call_id,:state_json,:updated_at)\n on conflict(call_id) do update set state_json=excluded.state_json,updated_at=excluded.updated_at`,\n args: {\n call_id: String(callId || \"\").slice(0, 220),\n state_json: JSON.stringify(state).slice(0, 60_000),\n updated_at: now,\n },\n });\n await sqlite.execute({\n sql: \"delete from voice_live_call_state where updated_at < :cutoff\",\n args: { cutoff: now - 2 * 60 * 60 * 1000 },\n });\n } catch {\n // La continuité de segment est une protection supplémentaire ; l'appel reste prioritaire.\n }\n}\n\nasync function clearLiveCallState(callId: string): Promise {\n try {\n await sqlite.execute(LIVE_CALL_STATE_SCHEMA);\n await sqlite.execute({\n sql: \"delete from voice_live_call_state where call_id = :call_id\",\n args: { call_id: String(callId || \"\").slice(0, 220) },\n });\n } catch {\n // Nettoyage opportuniste.\n }\n}\n\nfunction usefulText(...values: unknown[]): string {\n for (const value of values) {\n const text = String(value ?? \"\").trim();\n if (text) return text;\n }\n return \"\";\n}\n\nfunction ensureCallState(state: Record) {\n if (!state.facts || typeof state.facts !== \"object\" || Array.isArray(state.facts)) state.facts = {};\n if (!state.flags || typeof state.flags !== \"object\" || Array.isArray(state.flags)) state.flags = {};\n return state;\n}\n\nfunction mergeCallFacts(state: Record, action: string, args: Record) {\n ensureCallState(state);\n const facts = state.facts as Record;\n const assign = (key: string, value: unknown) => {\n if (typeof value === \"string\") {\n const clean = value.trim();\n if (clean) facts[key] = clean.slice(0, 4000);\n } else if (value !== undefined && value !== null) {\n facts[key] = value;\n }\n };\n for (const key of [\n \"first_name\", \"last_name\", \"customer_name\", \"email\", \"address\", \"postal_code\", \"city\",\n \"alternate_phone\", \"phone_reachable\", \"preferred_contact_channel\", \"pool_type\", \"problem\",\n \"intent\", \"urgency\", \"appointment_datetime\", \"appointment_type\", \"delivery_channel\",\n ]) assign(key, args[key]);\n if (action === \"knowledge_lookup\") assign(\"problem\", args.query);\n if (action === \"book_appointment\" || action === \"check_availability\") {\n if (!usefulText(facts.intent)) facts.intent = \"rendez_vous\";\n }\n if (action === \"estimate_quote\" || action === \"create_and_send_quote\") {\n if (!usefulText(facts.intent)) facts.intent = \"devis\";\n }\n if (action === \"transfer_to_human\" && !usefulText(facts.problem)) assign(\"problem\", args.problem);\n}\n\nfunction applyActionOutcome(\n state: Record,\n action: string,\n args: Record,\n result: Record,\n) {\n mergeCallFacts(state, action, args);\n ensureCallState(state);\n const flags = state.flags as Record;\n const accepted = result.ok !== false && (\n result.action_completed === true\n || result.queued === true\n || result.synchronization_pending === true\n || result.booked === true\n || result.cancelled === true\n );\n if (action === \"create_lead\" && accepted) state.demand_recorded = true;\n if (action === \"book_appointment\") {\n flags.appointment_requested = true;\n if (accepted) state.demand_recorded = true;\n if (result.booked === true) flags.appointment_booked = true;\n if (result.queued === true || result.synchronization_pending === true) flags.appointment_queued = true;\n }\n if (action === \"check_availability\") flags.appointment_requested = true;\n if (action === \"create_and_send_quote\") {\n flags.quote_requested = true;\n if (accepted) state.demand_recorded = true;\n if (result.action_completed === true) flags.quote_sent = true;\n if (result.queued === true || result.synchronization_pending === true) flags.quote_queued = true;\n }\n if (action === \"transfer_to_human\") {\n flags.callback_requested = true;\n if (accepted) state.demand_recorded = true;\n if (result.action_completed === true || result.callback_created === true || result.transfer_number) flags.callback_created = true;\n if (result.queued === true || result.synchronization_pending === true) flags.callback_queued = true;\n }\n}\n\nexport function evaluateCallCompletion(args: Record, state: Record): Record {\n ensureCallState(state);\n const facts = state.facts as Record;\n const flags = state.flags as Record;\n const client = state.client && typeof state.client === \"object\" ? state.client as Record : {};\n const summary = usefulText(args.summary);\n const intent = usefulText(args.intent, facts.intent).toLowerCase();\n const urgency = usefulText(args.urgency, facts.urgency).toLowerCase();\n const reason = usefulText(args.closing_reason, \"resolved\");\n const exception = usefulText(args.qualification_exception);\n const simpleIntent = [\"information\", \"faq\", \"conseil\"].includes(intent);\n const relaxed = exception === \"caller_refused\"\n || exception === \"caller_abusive\"\n || (exception === \"no_action_needed\" && simpleIntent);\n const problem = usefulText(facts.problem, simpleIntent ? summary : \"\");\n const firstName = usefulText(facts.first_name, client.first_name);\n const lastName = usefulText(facts.last_name, client.last_name);\n const fullName = usefulText(facts.customer_name, client.full_name);\n const hasIdentity = Boolean(fullName || (firstName && lastName));\n const street = usefulText(facts.address, client.address);\n const locality = usefulText(facts.city, facts.postal_code, client.city, client.postal_code);\n const hasLocation = Boolean(street && locality);\n const slot = usefulText(facts.appointment_datetime);\n const email = usefulText(facts.email, client.email);\n const delivery = usefulText(facts.delivery_channel).toLowerCase();\n const appointmentFlow = intent === \"rendez_vous\" || flags.appointment_requested === true || reason === \"appointment_booked\";\n const quoteFlow = intent === \"devis\" || flags.quote_requested === true || reason === \"quote_sent\";\n const actionable = !simpleIntent;\n const missing: string[] = [];\n\n if (summary.length < 18) missing.push(\"summary\");\n if (!intent) missing.push(\"intent\");\n if (!urgency) missing.push(\"urgency\");\n if (actionable && !relaxed && !problem) missing.push(\"problem\");\n if (actionable && !relaxed && !hasIdentity) missing.push(\"customer_identity\");\n if (appointmentFlow && !relaxed && !hasLocation) missing.push(\"intervention_location\");\n if (appointmentFlow && !relaxed && !slot) missing.push(\"appointment_datetime\");\n if (quoteFlow && delivery === \"email\" && !relaxed && !email) missing.push(\"email\");\n if (actionable && !relaxed && state.demand_recorded !== true) missing.push(\"demand_recording\");\n if (reason === \"appointment_booked\" && flags.appointment_booked !== true) missing.push(\"appointment_confirmation\");\n if (reason === \"quote_sent\" && flags.quote_sent !== true) missing.push(\"quote_delivery_confirmation\");\n if (reason === \"callback_created\" && flags.callback_created !== true) missing.push(\"callback_confirmation\");\n if (exception === \"emergency_handled\" && state.demand_recorded !== true && flags.callback_created !== true && flags.callback_queued !== true) {\n missing.push(\"emergency_followup\");\n }\n\n const uniqueMissing = [...new Set(missing)];\n const questions: Record = {\n problem: \"Pouvez-vous me préciser exactement votre demande ou le problème rencontré ?\",\n customer_identity: \"Pouvez-vous me donner votre prénom et votre nom ?\",\n intervention_location: \"À quelle adresse complète l’intervention doit-elle avoir lieu ?\",\n appointment_datetime: \"Quel jour et à quelle heure souhaitez-vous le rendez-vous ?\",\n email: \"Quelle adresse email dois-je utiliser pour l’envoi ?\",\n };\n const actions: Record = {\n demand_recording: \"create_lead\",\n appointment_confirmation: \"book_appointment\",\n quote_delivery_confirmation: \"create_and_send_quote\",\n callback_confirmation: \"transfer_to_human\",\n emergency_followup: \"transfer_to_human\",\n };\n const nextQuestion = uniqueMissing.map((field) => questions[field]).find(Boolean) || null;\n const requiredAction = uniqueMissing.map((field) => actions[field]).find(Boolean) || null;\n\n if (uniqueMissing.length) {\n return {\n ok: false,\n action_completed: false,\n call_completion_allowed: false,\n needs_more_information: true,\n missing_fields: uniqueMissing,\n next_question: nextQuestion,\n required_action: requiredAction,\n safe_to_announce: true,\n assistant_message: nextQuestion\n ? `L’appel n’est pas encore assez qualifié. Posez uniquement cette question : « ${nextQuestion} »`\n : requiredAction\n ? `L’appel n’est pas prêt à être clôturé. Exécutez d’abord l’action ${requiredAction}, sans poser de question inutile.`\n : \"Complétez le résumé, l’intention et l’urgence avant de terminer l’appel.\",\n };\n }\n return {\n ok: true,\n call_completion_allowed: true,\n needs_more_information: false,\n qualification_complete: true,\n normalized_intent: intent,\n normalized_urgency: urgency,\n };\n}\n\nexport function deriveFinalCallFields(\n state: Record,\n userTranscript: string[],\n saved: { summary: string; intent: string; urgency: string },\n) {\n ensureCallState(state);\n const facts = state.facts as Record;\n const flags = state.flags as Record;\n const client = state.client && typeof state.client === \"object\" ? state.client as Record : {};\n const lastClientWords = [...userTranscript].reverse().map((value) => value.trim()).find(Boolean) || \"\";\n const problem = usefulText(facts.problem);\n const identity = usefulText(\n facts.customer_name,\n [usefulText(facts.first_name, client.first_name), usefulText(facts.last_name, client.last_name)].filter(Boolean).join(\" \"),\n client.full_name,\n );\n const inferredIntent = flags.appointment_requested === true ? \"rendez_vous\"\n : flags.quote_requested === true ? \"devis\"\n : usefulText(facts.intent, \"non_qualifie\");\n const summary = usefulText(\n saved.summary,\n [\n \"Compte rendu automatique d’un appel interrompu avant clôture.\",\n identity ? `Client : ${identity}.` : \"\",\n problem ? `Besoin : ${problem}.` : lastClientWords ? `Dernière demande entendue : ${lastClientWords.slice(0, 600)}` : \"\",\n ].filter(Boolean).join(\" \"),\n ).slice(0, 6000);\n const intent = usefulText(saved.intent, facts.intent, inferredIntent).slice(0, 100);\n const urgency = usefulText(saved.urgency, facts.urgency, \"non_evaluee\").slice(0, 60);\n const missing: string[] = [];\n if (!identity && ![\"information\", \"faq\", \"conseil\"].includes(intent)) missing.push(\"customer_identity\");\n if (!problem && !lastClientWords) missing.push(\"problem\");\n if (!usefulText(saved.intent, facts.intent)) missing.push(\"intent\");\n if (!usefulText(saved.urgency, facts.urgency)) missing.push(\"urgency\");\n if (flags.appointment_requested === true) {\n if (!usefulText(facts.address, client.address) || !usefulText(facts.city, facts.postal_code, client.city, client.postal_code)) {\n missing.push(\"intervention_location\");\n }\n if (!usefulText(facts.appointment_datetime)) missing.push(\"appointment_datetime\");\n }\n return {\n summary,\n intent,\n urgency,\n missing_fields: [...new Set(missing)],\n qualification_complete: missing.length === 0,\n };\n}\n\nasync function runSideband(call: CallContext, continuation = false): Promise> {\n const parsedStart = Date.parse(call.started_at);\n const startedMs = Number.isFinite(parsedStart) ? parsedStart : Date.now();\n const persisted = continuation ? await loadLiveCallState(call.call_id) : null;\n if (!continuation) await clearLiveCallState(call.call_id);\n const userTranscript: string[] = Array.isArray(persisted?.userTranscript)\n ? persisted.userTranscript.map((value: unknown) => String(value).slice(0, 1500)).slice(-12)\n : [];\n const assistantTranscript: string[] = Array.isArray(persisted?.assistantTranscript)\n ? persisted.assistantTranscript.map((value: unknown) => String(value).slice(0, 1500)).slice(-12)\n : [];\n let savedSummary = usefulText(persisted?.savedSummary).slice(0, 6000);\n let savedIntent = usefulText(persisted?.savedIntent).slice(0, 100);\n let savedUrgency = usefulText(persisted?.savedUrgency).slice(0, 60);\n let savedSentiment = usefulText(persisted?.savedSentiment).slice(0, 60);\n let finalReason = \"websocket_closed\";\n let finished = false;\n let rotating = false;\n let lastAssistantText = \"\";\n let lastSchedulingToolAt = 0;\n let closingRequested = persisted?.closingRequested === true;\n let closingHangupScheduled = false;\n const defaultCallState: Record = {\n client: null,\n demand_recorded: false,\n appointment: null,\n estimate: null,\n quote: null,\n facts: {},\n flags: {},\n };\n const restoredCallState = persisted?.callState && typeof persisted.callState === \"object\" && !Array.isArray(persisted.callState)\n ? persisted.callState as Record\n : {};\n const callState: Record = ensureCallState({\n ...defaultCallState,\n ...restoredCallState,\n facts: { ...defaultCallState.facts, ...(restoredCallState.facts || {}) },\n flags: { ...defaultCallState.flags, ...(restoredCallState.flags || {}) },\n });\n const stateSnapshot = () => ({\n userTranscript: userTranscript.slice(-12),\n assistantTranscript: assistantTranscript.slice(-12),\n savedSummary,\n savedIntent,\n savedUrgency,\n savedSentiment,\n closingRequested,\n callState,\n });\n let toolQueue: Promise = Promise.resolve();\n\n return await new Promise>((resolve) => {\n const ws = new WebSocket(`wss://api.openai.com/v1/realtime?call_id=${encodeURIComponent(call.call_id)}`, {\n headers: { Authorization: `Bearer ${OPENAI_API_KEY}` },\n });\n\n const send = (event: Record) => {\n if (ws.readyState === WebSocket.OPEN) ws.send(JSON.stringify(event));\n };\n\n const finish = async (reason: string, outcome = \"completed\") => {\n if (finished) return;\n finished = true;\n finalReason = reason;\n clearTimeout(timeout);\n const transcript = [\n ...userTranscript.map((text) => `Client: ${text}`),\n ...assistantTranscript.map((text) => `Secrétariat: ${text}`),\n ].join(\"\\n\").slice(0, 6000);\n const finalFields = deriveFinalCallFields(callState, userTranscript, {\n summary: savedSummary,\n intent: savedIntent,\n urgency: savedUrgency,\n });\n await postVoiceEvent({\n event_type: \"call.ended\",\n outcome,\n reason: finalReason,\n duration_ms: Math.max(0, Date.now() - startedMs),\n summary: finalFields.summary,\n intent: finalFields.intent,\n urgency: finalFields.urgency,\n sentiment: savedSentiment || null,\n transcript_excerpt: transcript || null,\n qualification_complete: finalFields.qualification_complete,\n missing_fields: finalFields.missing_fields,\n }, call);\n await clearLiveCallState(call.call_id);\n resolve({ ok: true, call_id: call.call_id, reason: finalReason });\n };\n\n const timeout = setTimeout(async () => {\n if (finished) return;\n if (Date.now() - startedMs >= MAX_CALL_MS) {\n finalReason = \"call_time_limit\";\n await hangupCall(call.call_id);\n try { ws.close(1000, \"call_time_limit\"); } catch { /* noop */ }\n await finish(finalReason, \"time_limit\");\n return;\n }\n rotating = true;\n finished = true;\n clearTimeout(timeout);\n await persistLiveCallState(call.call_id, stateSnapshot());\n try { ws.close(1000, \"segment_rotate\"); } catch { /* noop */ }\n resolve({ ok: true, rotate: true, call_id: call.call_id, state_persisted: true });\n }, SEGMENT_MS);\n\n ws.on(\"open\", () => {\n if (!continuation) {\n send({\n type: \"response.create\",\n response: {\n instructions: \"Décroche immédiatement. Dis uniquement une phrase d'accueil courte et naturelle au nom du secrétariat de l'entreprise, puis demande comment tu peux aider. N'invente ni le nom ni le métier avant le chargement du profil serveur.\",\n },\n });\n }\n void (async () => {\n let crm: Record | null = null;\n let businessContext: Record | null = null;\n try {\n businessContext = await resolveChannelContext(call.to_number);\n if (businessContext) {\n call.tenant_id = String(businessContext.tenant_id || \"\");\n call.organization_name = String(businessContext.organization_name || \"\");\n call.vertical_key = String(businessContext.vertical_key || \"\");\n call.vertical_display_name = String(businessContext.vertical_display_name || \"\");\n call.timezone = String(businessContext.timezone || \"Europe/Paris\");\n call.assistant_config = businessContext.assistant_config as Record;\n }\n } catch {\n businessContext = null;\n }\n if (!continuation) {\n void postVoiceEvent({ event_type: \"call.started\", outcome: \"active\" }, call);\n }\n try {\n const result = await callBusinessTool(\"client_context\", {}, call);\n if (result.ok !== false) {\n crm = compactClientContext(result);\n callState.client = crm.client || null;\n if (callState.client && typeof callState.client === \"object\") {\n mergeCallFacts(callState, \"client_context\", callState.client as Record);\n }\n }\n } catch {\n crm = null;\n }\n send({\n type: \"session.update\",\n session: {\n type: \"realtime\",\n instructions: buildSessionInstructions(crm, call.from_number, businessContext),\n },\n });\n })();\n });\n\n ws.on(\"message\", (raw) => {\n let event: any;\n try {\n event = JSON.parse(raw.toString());\n } catch {\n return;\n }\n\n if (event.type === \"response.output_audio_transcript.done\" && event.transcript) {\n lastAssistantText = String(event.transcript).slice(0, 1500);\n assistantTranscript.push(lastAssistantText);\n if (closingRequested && !closingHangupScheduled) {\n closingHangupScheduled = true;\n setTimeout(async () => {\n await hangupCall(call.call_id);\n try { ws.close(1000, \"assistant_completed_call\"); } catch { /* noop */ }\n }, 1800);\n }\n }\n if (String(event.type || \"\").includes(\"input_audio_transcription.completed\") && event.transcript) {\n userTranscript.push(String(event.transcript).slice(0, 1500));\n }\n if (event.type === \"conversation.item.done\" && event.item?.type === \"message\") {\n const role = String(event.item.role || \"\");\n for (const content of Array.isArray(event.item.content) ? event.item.content : []) {\n const transcript = String(content?.transcript || content?.text || \"\").trim();\n if (!transcript) continue;\n if (role === \"user\" && !userTranscript.includes(transcript)) userTranscript.push(transcript.slice(0, 1500));\n if (role === \"assistant\" && !assistantTranscript.includes(transcript)) assistantTranscript.push(transcript.slice(0, 1500));\n }\n }\n\n if (event.type === \"error\") {\n finalReason = \"openai_realtime_error\";\n void postVoiceEvent({\n event_type: \"call.error\",\n outcome: \"failed\",\n reason: String(event.error?.code || event.error?.type || \"realtime_error\").slice(0, 160),\n }, call);\n }\n\n if (event.type === \"response.done\") {\n const calls = (Array.isArray(event.response?.output) ? event.response.output : [])\n .filter((item: any) => item?.type === \"function_call\" && item?.status === \"completed\");\n const normalizedAssistant = lastAssistantText.toLowerCase().normalize(\"NFD\").replace(/[\\u0300-\\u036f]/g, \"\");\n const falselyWaitingForSlots = calls.length === 0\n && /(verifi|regard|consult|cherche)/.test(normalizedAssistant)\n && /(creneau|disponibil|rendez-vous|rendez vous)/.test(normalizedAssistant)\n && Date.now() - lastSchedulingToolAt > 5_000;\n if (falselyWaitingForSlots) {\n lastSchedulingToolAt = Date.now();\n toolQueue = toolQueue.then(async () => {\n const rescue = await callBusinessTool(\"check_availability\", {\n preferred_period: \"indifferent\",\n duration_min: 60,\n }, call);\n send({\n type: \"response.create\",\n response: {\n instructions: `Tu avais annoncé une vérification sans lancer l'action. Voici maintenant le résultat réel : ${JSON.stringify(rescue).slice(0, 12000)}. Donne immédiatement au client jusqu'à trois créneaux exacts, ou annonce le rappel réellement créé si la recherche a échoué.`,\n },\n });\n }).catch(() => undefined);\n }\n for (const item of calls) {\n toolQueue = toolQueue.then(async () => {\n const action = String(item.name || \"\");\n if (action === \"check_availability\" || action === \"book_appointment\") lastSchedulingToolAt = Date.now();\n let args: Record = {};\n try {\n const parsed = JSON.parse(String(item.arguments || \"{}\"));\n if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) args = parsed;\n } catch {\n args = {};\n }\n\n const allowed = new Set([\n \"client_context\", \"update_client\", \"knowledge_lookup\", \"create_lead\",\n \"check_availability\", \"book_appointment\", \"cancel_appointment\", \"estimate_quote\", \"transfer_to_human\",\n ]);\n mergeCallFacts(callState, action, args);\n void postVoiceEvent({ event_type: \"tool.started\", outcome: \"active\", action }, call);\n\n let result: Record;\n if (action === \"create_and_send_quote\") {\n const problemKey = String(args.problem || \"\").trim().toLowerCase();\n let created: Record = callState.quote?.devis_id && callState.quote?.problem_key === problemKey\n ? callState.quote\n : await callBusinessTool(\"create_quote\", args, call);\n if (created.ok !== false && created.devis_id) {\n const delivery = await deliverQuote(created.devis_id, args.delivery_channel);\n result = {\n ...created,\n ok: delivery.ok === true,\n action_completed: delivery.action_completed === true,\n delivery,\n delivery_channel: args.delivery_channel,\n safe_to_announce: true,\n assistant_message: delivery.assistant_message || \"Le devis est généré mais son envoi n’est pas confirmé.\",\n };\n callState.quote = { ...created, problem_key: problemKey, delivery };\n } else {\n result = { ...created, action_completed: false, safe_to_announce: true };\n }\n } else if (action === \"complete_call\") {\n const gate = evaluateCallCompletion(args, callState);\n if (gate.call_completion_allowed !== true) {\n closingRequested = false;\n result = gate;\n } else {\n savedSummary = String(args.summary || \"\").slice(0, 6000);\n savedIntent = String(args.intent || \"\").slice(0, 100);\n savedUrgency = String(args.urgency || \"\").slice(0, 60);\n savedSentiment = String(args.sentiment || \"\").slice(0, 60);\n const saved = await callBusinessTool(\"save_call_summary\", {\n summary: savedSummary,\n intent: savedIntent,\n urgency: savedUrgency,\n sentiment: savedSentiment,\n }, call);\n closingRequested = true;\n result = {\n ...gate,\n ok: saved.ok !== false,\n action_completed: saved.action_completed === true,\n summary_saved: saved.ok !== false,\n synchronization_pending: saved.synchronization_pending === true,\n closing_reason: args.closing_reason || \"resolved\",\n safe_to_announce: true,\n assistant_message: saved.assistant_message || (\n saved.ok !== false\n ? \"Le dossier est enregistré. Terminez maintenant en une seule phrase chaleureuse, sans nouvelle question.\"\n : \"Le compte rendu n’a pas pu être enregistré. Signalez qu’un rappel humain est nécessaire.\"\n ),\n };\n }\n } else {\n result = allowed.has(action)\n ? await callBusinessTool(action, args, call)\n : { ok: false, action_completed: false, error: \"tool_not_allowed\", safe_to_announce: false };\n }\n\n applyActionOutcome(callState, action, args, result);\n if (action === \"update_client\" && result.ok === true) callState.client = result.client || callState.client;\n if (action === \"estimate_quote\" && result.ok === true) callState.estimate = result;\n if (action === \"book_appointment\" && result.booked === true) callState.appointment = result;\n if (action === \"cancel_appointment\" && result.cancelled === true) callState.appointment = null;\n void persistLiveCallState(call.call_id, stateSnapshot());\n\n if (action === \"book_appointment\" && result.conflict === true) {\n const replacement = await callBusinessTool(\"check_availability\", {\n appointment_datetime: args.appointment_datetime,\n duration_min: args.duration_min || 60,\n preferred_period: \"indifferent\",\n }, call);\n result = { ...result, replacement_availability: replacement };\n }\n\n if ((action === \"check_availability\" || action === \"book_appointment\") && result.ok === false && result.queued !== true && result.conflict !== true && result.error !== \"missing_address\") {\n const fallback = await callBusinessTool(\"transfer_to_human\", {\n problem: `Échec de l'action ${action} pendant l'appel ; rappel à organiser.`,\n urgency: \"normale\",\n }, call);\n result = { ...result, callback_fallback: fallback };\n }\n\n const output = {\n ...result,\n call_progress: {\n client_qualified: Boolean(callState.client),\n demand_recorded: callState.demand_recorded,\n appointment_booked: Boolean(callState.appointment),\n estimate_provided: Boolean(callState.estimate),\n quote_created: Boolean(callState.quote?.devis_id),\n quote_sent: callState.quote?.delivery?.action_completed === true,\n },\n };\n void postVoiceEvent({\n event_type: \"tool.completed\",\n outcome: result.ok === false ? \"failed\" : \"completed\",\n action,\n action_completed: result.action_completed === true,\n }, call);\n\n send({\n type: \"conversation.item.create\",\n item: {\n type: \"function_call_output\",\n call_id: String(item.call_id || \"\"),\n output: JSON.stringify(output).slice(0, 20_000),\n },\n });\n if (action === \"complete_call\" && result.call_completion_allowed === true) {\n send({\n type: \"response.create\",\n response: {\n instructions: \"Dis une seule formule de fin naturelle et chaleureuse, par exemple souhaiter une bonne journée. Ne pose aucune question et ne répète pas tout le dossier.\",\n },\n });\n } else if (action === \"complete_call\") {\n send({\n type: \"response.create\",\n response: {\n instructions: result.next_question\n ? `Ne conclus pas l’appel. Pose uniquement cette question : « ${String(result.next_question)} »`\n : `Ne conclus pas l’appel. ${String(result.assistant_message || \"Complète les informations manquantes.\")}`,\n },\n });\n } else {\n send({ type: \"response.create\" });\n }\n\n if (action === \"transfer_to_human\" && result.ok === true && result.transfer_number) {\n setTimeout(async () => {\n const referred = await referCall(call.call_id, String(result.transfer_number));\n await postVoiceEvent({\n event_type: referred ? \"call.transfer_started\" : \"call.transfer_failed\",\n outcome: referred ? \"transferred\" : \"transfer_failed\",\n }, call);\n }, 1400);\n }\n }).catch(() => {\n send({\n type: \"conversation.item.create\",\n item: {\n type: \"function_call_output\",\n call_id: String(item.call_id || \"\"),\n output: JSON.stringify({ ok: false, error: \"tool_execution_failed\" }),\n },\n });\n send({ type: \"response.create\" });\n });\n }\n }\n });\n\n ws.on(\"close\", () => {\n if (rotating) return;\n void finish(finalReason, finalReason === \"openai_realtime_error\" ? \"failed\" : \"completed\");\n });\n ws.on(\"error\", () => {\n if (rotating) return;\n finalReason = \"sideband_connection_error\";\n void finish(finalReason, \"failed\");\n });\n });\n}\n\nasync function handleWebhook(req: Request): Promise {\n const state = configured();\n if (!Object.values(state).every(Boolean)) return json({ ok: false, error: \"realtime_not_configured\", configured: state }, 503);\n\n const declared = Number(req.headers.get(\"content-length\") || 0);\n if (declared > MAX_BODY) return json({ ok: false, error: \"payload_too_large\" }, 413);\n const raw = await req.text();\n if (raw.length > MAX_BODY) return json({ ok: false, error: \"payload_too_large\" }, 413);\n\n let event: any;\n try {\n const client = new OpenAI({\n apiKey: OPENAI_API_KEY,\n webhookSecret: OPENAI_WEBHOOK_SECRET,\n });\n event = await client.webhooks.unwrap(raw, Object.fromEntries(req.headers.entries()));\n } catch (error) {\n console.error(JSON.stringify({\n event: \"openai_webhook_verification_failed\",\n error_name: error instanceof Error ? error.name : \"UnknownError\",\n error_message: error instanceof Error ? error.message.slice(0, 240) : \"unknown\",\n has_webhook_id: Boolean(req.headers.get(\"webhook-id\")),\n has_webhook_timestamp: Boolean(req.headers.get(\"webhook-timestamp\")),\n has_webhook_signature: Boolean(req.headers.get(\"webhook-signature\")),\n body_length: raw.length,\n }));\n return json({ ok: false, error: \"invalid_openai_signature\" }, 400);\n }\n\n if (event?.type !== \"realtime.call.incoming\") return json({ ok: true, ignored: true });\n const callId = String(event?.data?.call_id || \"\").slice(0, 220);\n if (!callId) return json({ ok: false, error: \"missing_call_id\" }, 400);\n\n const webhookId = String(req.headers.get(\"webhook-id\") || event.id || \"\").slice(0, 220);\n if (await alreadyAccepted(webhookId)) return json({ ok: true, duplicate: true });\n\n let accepted: { ok: boolean; status: number; error?: string };\n try {\n accepted = await acceptCall(callId);\n } catch {\n return json({ ok: false, error: \"openai_accept_unavailable\" }, 502);\n }\n if (!accepted.ok) return json({ ok: false, error: accepted.error, upstream_status: accepted.status }, 502);\n await markAccepted(webhookId, callId);\n\n const fromNumber = normalizePhone(sipHeader(event.data || {}, \"From\"));\n const toNumber = normalizePhone(sipHeader(event.data || {}, \"To\"));\n const context: CallContext = {\n call_id: callId,\n from_number: fromNumber,\n to_number: toNumber,\n started_at: new Date().toISOString(),\n };\n const expiresAt = Date.now() + 90_000;\n const token = await sessionToken(callId, expiresAt);\n const sessionUrl = new URL(\"/session\", req.url);\n fetch(sessionUrl, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\", \"x-realtime-session-token\": token },\n body: JSON.stringify({ ...context, expires_at: expiresAt }),\n }).catch(() => undefined);\n\n return json({ ok: true, accepted: true, call_id: callId });\n}\n\nasync function handleSession(req: Request): Promise {\n if (!OPENAI_API_KEY || !TOOL_SECRET) return json({ ok: false, error: \"session_not_configured\" }, 503);\n let body: any = {};\n try {\n body = JSON.parse((await req.text()).slice(0, 16_000));\n } catch {\n return json({ ok: false, error: \"invalid_session_payload\" }, 400);\n }\n const callId = String(body.call_id || \"\").slice(0, 220);\n const expiresAt = Number(body.expires_at || 0);\n const supplied = req.headers.get(\"x-realtime-session-token\") || \"\";\n if (!callId || !Number.isFinite(expiresAt) || expiresAt < Date.now() || expiresAt > Date.now() + 120_000) {\n return json({ ok: false, error: \"expired_session_request\" }, 401);\n }\n const expected = await sessionToken(callId, expiresAt);\n if (!safeEqual(supplied, expected)) return json({ ok: false, error: \"invalid_session_token\" }, 401);\n\n const call: CallContext = {\n call_id: callId,\n from_number: normalizePhone(body.from_number),\n to_number: normalizePhone(body.to_number),\n started_at: String(body.started_at || new Date().toISOString()).slice(0, 50),\n };\n const continuation = body.continuation === true;\n const result = await runSideband(call, continuation);\n if (result.rotate === true) {\n const nextExpiresAt = Date.now() + 90_000;\n const nextToken = await sessionToken(callId, nextExpiresAt);\n const sessionUrl = new URL(\"/session\", req.url);\n void fetch(sessionUrl, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\", \"x-realtime-session-token\": nextToken },\n body: JSON.stringify({ ...call, expires_at: nextExpiresAt, continuation: true }),\n }).catch(() => undefined);\n }\n return json(result);\n}\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname.endsWith(\"/health\")) {\n const state = configured();\n const ok = Object.values(state).every(Boolean);\n return json({\n ok,\n service: \"secretariat-ia-openai-realtime-sip\",\n provider: \"openai_realtime\",\n model: MODEL,\n voice: VOICE,\n configured: state,\n role_scope: \"multi_vertical_server_routed\",\n tenant_routing: \"twilio_called_number_v1\",\n completion_gate: \"intent_aware_v1\",\n segment_continuity: \"durable_sqlite_v1\",\n retell: \"removed\",\n }, ok ? 200 : 503);\n }\n if (req.method === \"POST\" && url.pathname.endsWith(\"/session\")) return handleSession(req);\n if (req.method === \"POST\") return handleWebhook(req);\n return json({ ok: false, error: \"not_found\" }, 404);\n}\n",[436],"ebeddb40-8cd1-4d19-91c8-2368662457e3","cockpit.ts","019f675d-aa00-73de-b630-06908bf4b332",11,["D",1784146229455],"import {\n authConfigured,\n clearLoginFailures,\n expiredCookie,\n getSession,\n issueSession,\n issueTenantSession,\n legacyAuthConfigured,\n loginRetryAfter,\n recordLoginFailure,\n sameOrigin,\n validAccessCode,\n validCsrf,\n type Session,\n} from \"./lib/auth.ts\";\nimport { aiSupervision, cockpitAction, cockpitApi, integrationConfig, securityAudit } from \"./lib/api.ts\";\nimport { appPage, callbackPage, loginPage, securityHeaders } from \"./lib/ui.ts\";\nimport { invoicePage, quotePage } from \"./lib/documents.ts\";\nimport { n8nBudgetStatus } from \"./lib/n8n-budget.ts\";\nimport { businessQueueStatus } from \"./lib/business-queue.ts\";\nimport {\n createOwnerRealtimeCall,\n executeOwnerCockpitAction,\n ownerCapabilities,\n} from \"./lib/owner-runtime.ts\";\nimport {\n ownerAccessToken,\n refreshOwnerSession,\n requestOwnerMagicLink,\n revokeOwnerSession,\n verifyOwnerAccessToken,\n} from \"./lib/owner-auth.ts\";\nimport {\n exchangeTenantIdentity,\n platformAuthConfigured,\n requestTenantMagicLink,\n resolveTenantContext,\n type TenantIdentity,\n} from \"./lib/platform-auth.ts\";\n\nconst VERSION = \"2026.07.15-platform-v12.0-multi-vertical-runtime\";\nconst ACTIONS = new Set([\n \"client.create\", \"client.context\", \"availability.check\", \"rdv.create\", \"devis.create\", \"knowledge.lookup\", \"next.action\",\n \"quote.create\", \"quote.update\", \"quote.recalculate\", \"quote.get\", \"quote.status\", \"quote.send\",\n \"invoice.from_quote\", \"invoice.get\", \"invoice.send\", \"invoice.mark_paid\", \"task.create\",\n]);\n\nfunction nonce(): string {\n return crypto.randomUUID().replaceAll(\"-\", \"\");\n}\n\nfunction json(data: unknown, status = 200, pageNonce = nonce()): Response {\n return new Response(JSON.stringify(data), { status, headers: securityHeaders(pageNonce, \"application/json; charset=utf-8\") });\n}\n\nfunction html(body: string, pageNonce: string, status = 200, extra: Record = {}): Response {\n return new Response(body, { status, headers: { ...securityHeaders(pageNonce, \"text/html; charset=utf-8\"), ...extra } });\n}\n\nfunction redirect(location: string, cookie?: string): Response {\n const headers: Record = { Location: location, \"Cache-Control\": \"no-store\" };\n if (cookie) headers[\"Set-Cookie\"] = cookie;\n return new Response(null, { status: 303, headers });\n}\n\nfunction apiRequest(url: URL): boolean {\n return url.pathname.startsWith(\"/api/\");\n}\n\nfunction tenantId(session: Session): string {\n return session.v === 3\n ? session.tenantId\n : Deno.env.get(\"PISCINE_TENANT\") || \"pisciniste_01\";\n}\n\nfunction tenantData(\n session: Session,\n data: Record = {},\n): Record {\n return { ...data, tenant_id: tenantId(session) };\n}\n\nfunction sessionActor(session: Session): Record {\n return session.v === 3\n ? {\n id: session.staffId,\n staff_id: session.staffId,\n tenant_id: session.tenantId,\n auth_user_id: session.authUserId,\n role: session.role,\n organization_name: session.organizationName,\n vertical_key: session.verticalKey,\n vertical_display_name: session.verticalDisplayName,\n }\n : {\n id: Deno.env.get(\"PISCINE_OWNER_STAFF_ID\") || \"\",\n staff_id: Deno.env.get(\"PISCINE_OWNER_STAFF_ID\") || \"\",\n tenant_id: tenantId(session),\n role: \"owner\",\n };\n}\n\nasync function ownerAuthForSession(\n session: Session,\n req: Request,\n) {\n if (session.v === 3) {\n return {\n configured: true,\n verified: true,\n email_hint: \"\",\n provider: \"supabase_email\" as const,\n };\n }\n return verifyOwnerAccessToken(ownerAccessToken(req));\n}\n\nasync function readJson(req: Request): Promise> {\n const declared = Number(req.headers.get(\"content-length\") || 0);\n if (declared > 32_768) throw new Error(\"payload_too_large\");\n const raw = await req.text();\n if (raw.length > 32_768) throw new Error(\"payload_too_large\");\n const parsed = raw ? JSON.parse(raw) : {};\n if (!parsed || Array.isArray(parsed) || typeof parsed !== \"object\") throw new Error(\"invalid_payload\");\n return parsed as Record;\n}\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const pageNonce = nonce();\n\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n const configured = integrationConfig();\n const ok = authConfigured() && platformAuthConfigured() && configured.businessApi && configured.actionApi;\n return json({\n ok,\n service: \"secretariat-ia-platform\",\n version: VERSION,\n mode: \"liveness\",\n configured: {\n authentication: authConfigured() && platformAuthConfigured(),\n business_api: configured.businessApi,\n action_api: configured.actionApi,\n intelligence_api: configured.aiApi,\n security_api: configured.securityApi,\n },\n }, ok ? 200 : 503, pageNonce);\n }\n\n if (req.method === \"GET\" && url.pathname === \"/auth/callback\") {\n return html(callbackPage(pageNonce), pageNonce);\n }\n\n if (req.method === \"POST\" && url.pathname === \"/auth/request\") {\n if (!sameOrigin(req)) {\n return json({ ok: false, error: \"request_rejected\" }, 403, pageNonce);\n }\n try {\n const body = await readJson(req);\n const result = await requestTenantMagicLink(\n req,\n body.login_identifier,\n body.email,\n );\n const status = Number(result.http_status || (result.ok === false ? 503 : 202));\n return json(result, status, pageNonce);\n } catch {\n return json({ ok: false, error: \"invalid_login_request\" }, 400, pageNonce);\n }\n }\n\n if (req.method === \"POST\" && url.pathname === \"/auth/exchange\") {\n if (!sameOrigin(req)) {\n return json({ ok: false, error: \"request_rejected\" }, 403, pageNonce);\n }\n try {\n const body = await readJson(req);\n const token = (req.headers.get(\"authorization\") || \"\")\n .replace(/^Bearer\\s+/i, \"\")\n .trim();\n const result = await exchangeTenantIdentity(body.intent_token, token);\n if (result.ok !== true || !result.identity) {\n return json(\n { ok: false, error: \"identity_exchange_rejected\" },\n Number(result.http_status || 403),\n pageNonce,\n );\n }\n const issued = await issueTenantSession(result.identity as TenantIdentity);\n return new Response(JSON.stringify({\n ok: true,\n authenticated: true,\n organization_name: issued.session.organizationName,\n vertical: issued.session.verticalDisplayName,\n n8n_execution_used: false,\n }), {\n status: 200,\n headers: {\n ...securityHeaders(pageNonce, \"application/json; charset=utf-8\"),\n \"Set-Cookie\": issued.cookie,\n },\n });\n } catch {\n return json({ ok: false, error: \"identity_exchange_rejected\" }, 403, pageNonce);\n }\n }\n\n if (req.method === \"POST\" && url.pathname === \"/login\") {\n if (!legacyAuthConfigured()) return json({ ok: false, error: \"legacy_login_disabled\" }, 404, pageNonce);\n if (!sameOrigin(req)) return html(loginPage(\"Requête refusée.\", pageNonce), pageNonce, 403);\n const retryAfter = await loginRetryAfter(req);\n if (retryAfter > 0) return html(loginPage(\"Trop de tentatives. Réessayez plus tard.\", pageNonce), pageNonce, 429, { \"Retry-After\": String(retryAfter) });\n const form = new URLSearchParams((await req.text()).slice(0, 2048));\n const code = String(form.get(\"code\") || \"\").slice(0, 256);\n if (!validAccessCode(code)) {\n await recordLoginFailure(req);\n return html(loginPage(\"Code incorrect.\", pageNonce), pageNonce, 401);\n }\n await clearLoginFailures(req);\n const issued = await issueSession();\n return redirect(\"/\", issued.cookie);\n }\n\n const session = await getSession(req);\n if (!session) {\n if (apiRequest(url)) return json({ ok: false, error: \"unauthorized\" }, 401, pageNonce);\n const ready = authConfigured() && platformAuthConfigured();\n return html(loginPage(ready ? \"\" : \"Authentification indisponible.\", pageNonce), pageNonce, ready ? 200 : 503);\n }\n\n if (req.method === \"GET\" && url.pathname === \"/api/n8n-budget\") {\n return json(await n8nBudgetStatus(), 200, pageNonce);\n }\n\n if (req.method === \"GET\" && url.pathname === \"/api/owner/capabilities\") {\n const ownerAuth = await ownerAuthForSession(session, req);\n return json(ownerCapabilities(ownerAuth, sessionActor(session)), 200, pageNonce);\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/owner/auth/request\") {\n if (session.v === 3) {\n return json({ ok: false, error: \"identity_already_verified\" }, 409, pageNonce);\n }\n if (!validCsrf(req, session)) {\n return json({ ok: false, error: \"csrf_rejected\" }, 403, pageNonce);\n }\n const result = await requestOwnerMagicLink(url.origin);\n const status = Number(result.http_status || (result.ok === false ? 400 : 200));\n const headers = status === 429 && result.retry_after\n ? { \"Retry-After\": String(result.retry_after) }\n : {};\n return new Response(JSON.stringify(result), {\n status,\n headers: {\n ...securityHeaders(pageNonce, \"application/json; charset=utf-8\"),\n ...headers,\n },\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/owner/auth/refresh\") {\n if (!validCsrf(req, session)) {\n return json({ ok: false, error: \"csrf_rejected\" }, 403, pageNonce);\n }\n try {\n const body = await readJson(req);\n const result = await refreshOwnerSession(body.refresh_token);\n const status = Number(result.http_status || (result.ok === false ? 401 : 200));\n return json(result, status, pageNonce);\n } catch {\n return json({ ok: false, error: \"owner_refresh_payload_invalid\" }, 400, pageNonce);\n }\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/owner/auth/logout\") {\n if (!validCsrf(req, session)) {\n return json({ ok: false, error: \"csrf_rejected\" }, 403, pageNonce);\n }\n const result = await revokeOwnerSession(ownerAccessToken(req));\n return json(result, result.ok === false ? 502 : 200, pageNonce);\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/owner/action\") {\n if (!validCsrf(req, session)) return json({ ok: false, error: \"csrf_rejected\" }, 403, pageNonce);\n try {\n const body = await readJson(req);\n const action = String(body.action || \"\").slice(0, 120);\n const data = body.data && typeof body.data === \"object\" && !Array.isArray(body.data)\n ? body.data as Record\n : {};\n const result = await executeOwnerCockpitAction(\n action,\n data,\n session.nonce,\n sessionActor(session),\n session.v === 2 ? ownerAccessToken(req) : \"\",\n );\n return json(result, result.ok === false ? 409 : 200, pageNonce);\n } catch (error) {\n const code = error instanceof Error && /^[a-z0-9_:-]+$/i.test(error.message)\n ? error.message\n : \"owner_action_failed\";\n return json({\n ok: false,\n action_completed: false,\n execution_state: \"failed\",\n error: code,\n gateway_mode: \"direct_supabase\",\n n8n_execution_used: false,\n }, code === \"payload_too_large\" ? 413 : 400, pageNonce);\n }\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/owner/session\") {\n if (!validCsrf(req, session)) return json({ ok: false, error: \"csrf_rejected\" }, 403, pageNonce);\n if (!(req.headers.get(\"content-type\") || \"\").toLowerCase().startsWith(\"application/sdp\")) {\n return json({ ok: false, error: \"invalid_content_type\" }, 415, pageNonce);\n }\n const declared = Number(req.headers.get(\"content-length\") || 0);\n if (declared > 64_000) return json({ ok: false, error: \"sdp_too_large\" }, 413, pageNonce);\n const offer = await req.text();\n if (offer.length > 64_000) return json({ ok: false, error: \"sdp_too_large\" }, 413, pageNonce);\n const ownerAuth = await ownerAuthForSession(session, req);\n const result = await createOwnerRealtimeCall(offer, session.nonce, ownerAuth, sessionActor(session));\n if (!result.ok || !result.sdp) {\n return json({ ok: false, error: result.error || \"owner_voice_unavailable\" }, result.status, pageNonce);\n }\n return new Response(result.sdp, {\n status: 200,\n headers: securityHeaders(pageNonce, \"application/sdp\"),\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/api/operations-status\") {\n const [budget, queue] = await Promise.all([n8nBudgetStatus(), businessQueueStatus()]);\n const circuitOpen = budget.circuit?.open === true;\n const pending = Number(queue.pending || 0);\n return json({\n ok: true,\n mode: circuitOpen ? \"limited\" : pending > 0 ? \"recovery\" : \"available\",\n label: circuitOpen ? \"Mode limité\" : pending > 0 ? \"Synchronisation en cours\" : \"Disponible\",\n explanation: circuitOpen\n ? \"Les demandes sont conservées localement et seront synchronisées au retour du service.\"\n : pending > 0\n ? \"Des actions enregistrées attendent encore leur synchronisation.\"\n : \"Les actions sont traitées normalement.\",\n pending_actions: pending,\n oldest_pending: queue.oldest_pending || null,\n circuit: budget.circuit,\n budget: {\n test_used: budget.test_used,\n test_remaining: budget.test_remaining,\n production_used: budget.production_used,\n project_remaining: budget.project_remaining,\n },\n }, 200, pageNonce);\n }\n\n if (req.method === \"GET\" && url.pathname === \"/api/deep-health\") {\n const [business, ai, security] = await Promise.allSettled([cockpitApi(\"health\", tenantData(session)), aiSupervision(), securityAudit()]);\n const services = {\n business: business.status === \"fulfilled\" && business.value.ok !== false,\n intelligence: ai.status === \"fulfilled\" && ai.value.ok !== false,\n security: security.status === \"fulfilled\" && security.value.security_ok === true,\n };\n const ok = services.business && services.security;\n return json({\n ok,\n service: \"secretariat-ia-platform\",\n version: VERSION,\n mode: \"deep\",\n checked_at: new Date().toISOString(),\n services,\n }, ok ? 200 : 503, pageNonce);\n }\n\n if (req.method === \"POST\" && url.pathname === \"/logout\") {\n if (!validCsrf(req, session)) return json({ ok: false, error: \"csrf_rejected\" }, 403, pageNonce);\n return redirect(\"/\", expiredCookie());\n }\n\n const documentParts = url.pathname.split(\"/\").filter(Boolean);\n if (req.method === \"GET\" && documentParts.length === 3 && documentParts[0] === \"documents\") {\n const documentKind = documentParts[1];\n const documentId = documentParts[2];\n if (!/^[0-9a-f-]{36}$/i.test(documentId)) return json({ ok: false, error: \"invalid_document_id\" }, 400, pageNonce);\n try {\n if (documentKind === \"devis\") {\n const document = await cockpitAction(\"quote.get\", tenantData(session, { id: documentId }));\n if (!document.devis) return json({ ok: false, error: \"quote_not_found\" }, 404, pageNonce);\n return html(quotePage(document, pageNonce), pageNonce);\n }\n if (documentKind === \"facture\") {\n const document = await cockpitAction(\"invoice.get\", tenantData(session, { id: documentId }));\n if (!document.facture) return json({ ok: false, error: \"invoice_not_found\" }, 404, pageNonce);\n return html(invoicePage(document, pageNonce), pageNonce);\n }\n } catch {\n return json({ ok: false, error: \"document_unavailable\" }, 502, pageNonce);\n }\n }\n\n\n if (req.method === \"GET\" && url.pathname === \"/api/bootstrap\") {\n try {\n return json(await cockpitApi(\"bootstrap\", tenantData(session)), 200, pageNonce);\n } catch {\n return json({ ok: false, error: \"business_api_unavailable\" }, 502, pageNonce);\n }\n }\n\n if (req.method === \"GET\" && url.pathname.startsWith(\"/api/data/\")) {\n const resource = url.pathname.slice(\"/api/data/\".length);\n const limit = Math.min(100, Math.max(10, Number(url.searchParams.get(\"limit\")) || 50));\n const offset = Math.min(100_000, Math.max(0, Number(url.searchParams.get(\"offset\")) || 0));\n const search = String(url.searchParams.get(\"search\") || \"\").slice(0, 120);\n const status = String(url.searchParams.get(\"status\") || \"all\").slice(0, 40);\n try {\n if (resource === \"snapshot\") return json(await cockpitApi(\"dashboard.snapshot\", tenantData(session)), 200, pageNonce);\n if (resource === \"requests\") return json(await cockpitApi(\"requests.list\", tenantData(session, { limit, offset, search, status })), 200, pageNonce);\n if (resource === \"clients\") return json(await cockpitApi(\"clients.list\", tenantData(session, { limit, offset, search })), 200, pageNonce);\n if (resource === \"appointments\") {\n const from = String(url.searchParams.get(\"from\") || \"\").slice(0, 40);\n const to = String(url.searchParams.get(\"to\") || \"\").slice(0, 40);\n return json(await cockpitApi(\"appointments.list\", tenantData(session, { limit, offset, from, to })), 200, pageNonce);\n }\n if (resource === \"documents\") {\n const kind = String(url.searchParams.get(\"kind\") || \"quotes\");\n if (![\"quotes\", \"invoices\", \"purchases\"].includes(kind)) return json({ ok: false, error: \"invalid_document_kind\" }, 400, pageNonce);\n return json(await cockpitApi(\"documents.list\", tenantData(session, { limit, offset, search, status, kind })), 200, pageNonce);\n }\n return json({ ok: false, error: \"unsupported_data_resource\" }, 404, pageNonce);\n } catch {\n return json({ ok: false, error: \"data_api_unavailable\" }, 502, pageNonce);\n }\n }\n\n if (req.method === \"GET\" && url.pathname === \"/api/ai-supervision\") {\n try {\n return json(await aiSupervision(), 200, pageNonce);\n } catch {\n return json({ ok: false, error: \"intelligence_api_unavailable\" }, 502, pageNonce);\n }\n }\n\n if (req.method === \"GET\" && url.pathname === \"/api/security-audit\") {\n try {\n return json(await securityAudit(), 200, pageNonce);\n } catch {\n return json({ ok: false, error: \"security_audit_unavailable\" }, 502, pageNonce);\n }\n }\n\n if (req.method === \"POST\" && url.pathname === \"/api/action\") {\n if (!validCsrf(req, session)) return json({ ok: false, error: \"csrf_rejected\" }, 403, pageNonce);\n try {\n const body = await readJson(req);\n const action = String(body.action || \"\");\n if (!ACTIONS.has(action)) return json({ ok: false, error: \"action_not_enabled\" }, 409, pageNonce);\n const data = body.data && typeof body.data === \"object\" && !Array.isArray(body.data) ? body.data as Record : {};\n return json(await cockpitAction(action, tenantData(session, data)), 200, pageNonce);\n } catch (error) {\n const code = error instanceof Error && /^[a-z0-9_:-]+$/i.test(error.message) ? error.message : \"action_failed\";\n return json({ ok: false, error: code }, code === \"payload_too_large\" ? 413 : 400, pageNonce);\n }\n }\n\n if (req.method !== \"GET\" || url.pathname !== \"/\") return json({ ok: false, error: \"not_found\" }, 404, pageNonce);\n\n const business = {\n ok: true,\n deferred_business: true,\n mode: \"progressive\",\n counts: { clients: 0, demandes: 0, rendez_vous: 0, devis: 0, factures: 0, achats: 0 },\n settings: { entreprise: {} },\n clients: [], piscines: [], demandes: [], rendez_vous: [], devis: [], factures: [], achats: [], catalogue: [], contrats: [], taches: [], integrations: {},\n };\n const ai = { ok: false, deferred: true, metrics: {}, recent_calls: [], alerts: [], action_metrics: [], knowledge: [], capabilities: [] };\n const security = { ok: false, deferred: true, security_ok: false, rls_disabled: [], rls_without_policies: [], tables_with_public_grants: [] };\n const resolvedContext = session.v === 3\n ? await resolveTenantContext(session.tenantId)\n : null;\n const businessContext = {\n ...(resolvedContext || {}),\n ...sessionActor(session),\n ui_config: resolvedContext?.ui_config || {},\n assistant_config: resolvedContext?.assistant_config || {},\n feature_flags: resolvedContext?.feature_flags || {},\n };\n return html(appPage({\n ...business,\n ai,\n security,\n runtime: integrationConfig(),\n business_context: businessContext,\n }, session, pageNonce), pageNonce);\n}\n",[443],"13ab7cf6-fe8a-4c1c-aba1-70575438c043","business-action-recovery.ts","019f675d-aa00-73de-b630-0080f4feb0c8",["D",1784145619620],"import { businessQueueStatus } from \"./lib/business-queue.ts\";\nimport { n8nCircuitStatus } from \"./lib/n8n-budget.ts\";\nimport {\n replayBufferedVoiceCalls,\n replayQueuedBusinessActions,\n voiceEventBufferStatus,\n} from \"./lib/realtime-bridge.ts\";\n\nconst MAX_RECOVERY_EXECUTIONS_PER_RUN = 4;\n\nexport default async function () {\n const [businessQueue, voiceQueue] = await Promise.all([\n businessQueueStatus(),\n voiceEventBufferStatus(),\n ]);\n const pendingBusiness = Number(businessQueue.pending || 0);\n const readyVoiceCalls = Number(voiceQueue.ready_calls || 0);\n if (pendingBusiness < 1 && readyVoiceCalls < 1) {\n return {\n ok: true,\n skipped: true,\n reason: \"all_recovery_queues_empty\",\n execution_cap: MAX_RECOVERY_EXECUTIONS_PER_RUN,\n business_queue: businessQueue,\n voice_queue: voiceQueue,\n };\n }\n\n const circuit = await n8nCircuitStatus();\n if (circuit.open) {\n return {\n ok: true,\n skipped: true,\n reason: \"n8n_circuit_open\",\n circuit,\n execution_cap: MAX_RECOVERY_EXECUTIONS_PER_RUN,\n business_queue: businessQueue,\n voice_queue: voiceQueue,\n };\n }\n\n const bothQueuesReady = pendingBusiness > 0 && readyVoiceCalls > 0;\n const businessLimit = pendingBusiness > 0\n ? (bothQueuesReady ? 2 : MAX_RECOVERY_EXECUTIONS_PER_RUN)\n : 0;\n const voiceLimit = readyVoiceCalls > 0\n ? (bothQueuesReady ? 2 : MAX_RECOVERY_EXECUTIONS_PER_RUN)\n : 0;\n\n const businessReplay = businessLimit > 0\n ? await replayQueuedBusinessActions(businessLimit)\n : { ok: true, replayed: 0, skipped: true };\n const circuitAfterBusiness = await n8nCircuitStatus();\n const voiceReplay = voiceLimit > 0 && !circuitAfterBusiness.open\n ? await replayBufferedVoiceCalls(voiceLimit)\n : { ok: true, replayed: 0, skipped: true, reason: circuitAfterBusiness.open ? \"n8n_circuit_open\" : \"voice_queue_empty\" };\n\n return {\n ok: businessReplay.ok !== false && voiceReplay.ok !== false,\n execution_cap: MAX_RECOVERY_EXECUTIONS_PER_RUN,\n business_queue_before: businessQueue,\n voice_queue_before: voiceQueue,\n business_replay: businessReplay,\n voice_replay: voiceReplay,\n };\n}\n",[450],"de49effe-9bbb-4215-a0a0-7bfadc0fff67","scripts","019f675d-aa00-73de-b62f-fcc5ad5ed588",["D",1784145619620],"directory",[456],"435c1994-76a9-4aa7-927b-73fdb7c228fb","lib","019f675d-aa00-73de-b62f-f8cd0ec5422b",["D",1784145619620],[462],"2e7778f9-3ae5-4b5e-9e97-4e812d4f230e","docs","019f675d-aa00-73de-b62f-a0bff3a8d54b",["D",1784145619620],[467],"pulls","branches",100,"forks","envVars",{"_479":481,"_482":64},"connections",{"_479":64,"_480":64},"count","unfilledCount",51,"emptyCount",{"_44":466,"_32":467,"_30":468,"_427":-5,"_42":43,"_41":428,"_429":60,"_39":701,"_13":64,"_34":459,"_36":-5,"_24":25,"_433":-5,"_514":702,"_27":703},{"_44":694,"_32":695,"_30":696,"_427":468,"_42":43,"_41":428,"_429":60,"_39":697,"_13":64,"_34":20,"_36":698,"_24":25,"_433":-5,"_514":699,"_27":700},{"_44":461,"_32":462,"_30":463,"_427":-5,"_42":43,"_41":428,"_429":60,"_39":691,"_13":64,"_34":459,"_36":-5,"_24":25,"_433":-5,"_514":692,"_27":693},{"_44":684,"_32":685,"_30":686,"_427":463,"_42":43,"_41":428,"_429":25,"_39":687,"_13":64,"_34":35,"_36":688,"_24":25,"_433":-5,"_514":689,"_27":690},{"_44":677,"_32":678,"_30":679,"_427":463,"_42":43,"_41":428,"_429":60,"_39":680,"_13":64,"_34":35,"_36":681,"_24":25,"_433":-5,"_514":682,"_27":683},{"_44":670,"_32":671,"_30":672,"_427":463,"_42":43,"_41":428,"_429":60,"_39":673,"_13":64,"_34":35,"_36":674,"_24":25,"_433":-5,"_514":675,"_27":676},{"_44":666,"_32":33,"_30":31,"_427":463,"_42":43,"_41":14,"_429":25,"_39":667,"_13":572,"_34":35,"_36":38,"_24":25,"_433":-5,"_514":668,"_27":669},{"_44":657,"_32":658,"_30":659,"_427":463,"_42":43,"_41":660,"_429":60,"_39":661,"_13":662,"_34":35,"_36":663,"_24":25,"_433":-5,"_514":664,"_27":665},{"_44":650,"_32":651,"_30":652,"_427":463,"_42":43,"_41":428,"_429":60,"_39":653,"_13":64,"_34":35,"_36":654,"_24":25,"_433":-5,"_514":655,"_27":656},{"_44":643,"_32":644,"_30":645,"_427":463,"_42":43,"_41":428,"_429":60,"_39":646,"_13":64,"_34":35,"_36":647,"_24":25,"_433":-5,"_514":648,"_27":649},{"_44":636,"_32":637,"_30":638,"_427":463,"_42":43,"_41":428,"_429":60,"_39":639,"_13":64,"_34":35,"_36":640,"_24":25,"_433":-5,"_514":641,"_27":642},{"_44":629,"_32":630,"_30":631,"_427":463,"_42":43,"_41":428,"_429":60,"_39":632,"_13":64,"_34":35,"_36":633,"_24":25,"_433":-5,"_514":634,"_27":635},{"_44":622,"_32":623,"_30":624,"_427":463,"_42":43,"_41":428,"_429":60,"_39":625,"_13":64,"_34":35,"_36":626,"_24":25,"_433":-5,"_514":627,"_27":628},{"_44":615,"_32":616,"_30":617,"_427":463,"_42":43,"_41":428,"_429":60,"_39":618,"_13":64,"_34":35,"_36":619,"_24":25,"_433":-5,"_514":620,"_27":621},{"_44":607,"_32":608,"_30":609,"_427":463,"_42":43,"_41":610,"_429":60,"_39":611,"_13":428,"_34":35,"_36":612,"_24":25,"_433":-5,"_514":613,"_27":614},{"_44":600,"_32":601,"_30":602,"_427":463,"_42":43,"_41":428,"_429":60,"_39":603,"_13":64,"_34":35,"_36":604,"_24":25,"_433":-5,"_514":605,"_27":606},{"_44":592,"_32":593,"_30":594,"_427":463,"_42":43,"_41":595,"_429":25,"_39":596,"_13":428,"_34":35,"_36":597,"_24":25,"_433":-5,"_514":598,"_27":599},{"_44":584,"_32":585,"_30":586,"_427":463,"_42":43,"_41":587,"_429":25,"_39":588,"_13":529,"_34":35,"_36":589,"_24":25,"_433":-5,"_514":590,"_27":591},{"_44":577,"_32":578,"_30":579,"_427":463,"_42":43,"_41":428,"_429":25,"_39":580,"_13":64,"_34":35,"_36":581,"_24":25,"_433":-5,"_514":582,"_27":583},{"_44":569,"_32":570,"_30":571,"_427":463,"_42":43,"_41":572,"_429":60,"_39":573,"_13":428,"_34":35,"_36":574,"_24":25,"_433":-5,"_514":575,"_27":576},{"_44":561,"_32":562,"_30":563,"_427":463,"_42":43,"_41":564,"_429":60,"_39":565,"_13":428,"_34":35,"_36":566,"_24":25,"_433":-5,"_514":567,"_27":568},{"_44":553,"_32":554,"_30":555,"_427":463,"_42":43,"_41":556,"_429":25,"_39":557,"_13":529,"_34":35,"_36":558,"_24":25,"_433":-5,"_514":559,"_27":560},{"_44":546,"_32":547,"_30":548,"_427":463,"_42":43,"_41":428,"_429":60,"_39":549,"_13":64,"_34":35,"_36":550,"_24":25,"_433":-5,"_514":551,"_27":552},{"_44":537,"_32":538,"_30":539,"_427":463,"_42":43,"_41":540,"_429":25,"_39":541,"_13":542,"_34":35,"_36":543,"_24":25,"_433":-5,"_514":544,"_27":545},{"_44":455,"_32":456,"_30":457,"_427":-5,"_42":43,"_41":428,"_429":60,"_39":534,"_13":64,"_34":459,"_36":-5,"_24":25,"_433":-5,"_514":535,"_27":536},{"_44":526,"_32":527,"_30":528,"_427":457,"_42":43,"_41":529,"_429":25,"_39":530,"_13":64,"_34":35,"_36":531,"_24":25,"_433":-5,"_514":532,"_27":533},{"_44":449,"_32":450,"_30":451,"_427":-5,"_42":43,"_41":428,"_429":60,"_39":523,"_13":64,"_34":431,"_36":453,"_24":25,"_433":-5,"_514":524,"_27":525},{"_44":442,"_32":443,"_30":444,"_427":-5,"_42":43,"_41":445,"_429":25,"_39":520,"_13":428,"_34":439,"_36":447,"_24":25,"_433":-5,"_514":521,"_27":522},{"_44":435,"_32":436,"_30":437,"_427":-5,"_42":43,"_41":428,"_429":25,"_39":517,"_13":64,"_34":439,"_36":440,"_24":25,"_433":-5,"_514":518,"_27":519},{"_44":424,"_32":425,"_30":426,"_427":-5,"_42":43,"_41":428,"_429":60,"_39":513,"_13":64,"_34":431,"_36":432,"_24":25,"_433":-5,"_514":515,"_27":516},["D",1784145619620],"children",[],[425],["D",1784145619620],[],[436],["D",1784146229455],[],[443],["D",1784145619620],[],[450],"1391f1b9-d88d-48bd-83bf-90996cb8ec59","verify-owner-capabilities.ts","d5ff2adc-8087-11f1-a3ea-1607ee4eb77e",2,["D",1784145632430],"import { ownerCapabilities } from \"../lib/owner-runtime.ts\";\n\nconst caps = ownerCapabilities(\n { configured: true, verified: true, email_hint: \"\", provider: \"supabase_email\" },\n {\n staff_id: \"1ac6e421-bedc-4212-85c4-cf598981fa2f\",\n tenant_id: \"pisciniste_01\",\n role: \"owner\",\n organization_name: \"Entreprise Lucas\",\n vertical_key: \"pool_service\",\n vertical_display_name: \"Pisciniste\",\n },\n);\nconsole.log(JSON.stringify({\n console_available: caps.console_available,\n voice_available: caps.voice_available,\n strong_identity_verified: caps.strong_identity_verified,\n voice_blockers: caps.voice_blockers,\n console_blockers: caps.console_blockers,\n model: caps.model,\n n8n_execution_used: caps.n8n_execution_used,\n}));\n",[],[456,527],["D",1784145619620],[508],[456],"43e16007-c99b-4bae-9b27-e86d859692d5","ui.ts","019f675d-aa00-73de-b62f-f4b9d356995e",29,["D",1784147233560],13,"import { CLIENT_V5 } from \"./client-v5.ts\";\nimport { CLIENT_V6, CSS_V6 } from \"./client-v6.ts\";\nimport { CLIENT_V7, CSS_V7 } from \"./client-v7.ts\";\nimport { CLIENT_V8, CSS_V8 } from \"./client-v8.ts\";\nimport { CLIENT_V9, CSS_V9 } from \"./client-v9.ts\";\nimport { CLIENT_V10, CSS_V10 } from \"./client-v10.ts\";\nimport { CLIENT_OWNER, CLIENT_OWNER_BOOT, CSS_OWNER } from \"./owner-ui.ts\";\nimport type { Session } from \"./auth.ts\";\n\nconst CSS = String.raw`\n:root{color-scheme:dark;--bg:#091017;--panel:#101922;--panel2:#14212b;--panel3:#192833;--ink:#eef5f7;--muted:#8fa3ad;--line:#24343e;--accent:#35d1b5;--accent2:#103d38;--blue:#70a7ff;--warn:#f1b75b;--warnbg:#342713;--danger:#ff7a70;--dangerbg:#391c1d;--ok:#55d692;--okbg:#123326;--shadow:0 22px 70px rgba(0,0,0,.3);--radius:18px}\n*{box-sizing:border-box}html{scroll-behavior:smooth}body{margin:0;background:radial-gradient(circle at 85% -10%,color-mix(in srgb,var(--accent) 9%,transparent),transparent 27%),var(--bg);color:var(--ink);font:14px/1.48 Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,\"Segoe UI\",sans-serif}button,input,select,textarea{font:inherit}button{cursor:pointer}button:disabled{cursor:not-allowed;opacity:.5}a{color:inherit}.skip{position:fixed;left:12px;top:-60px;z-index:200;background:#fff;color:#111;padding:10px;border-radius:10px}.skip:focus{top:12px}\n.shell{min-height:100vh;display:grid;grid-template-columns:238px minmax(0,1fr)}.side{position:sticky;top:0;height:100vh;padding:22px 15px;background:rgba(10,17,23,.96);border-right:1px solid var(--line);display:flex;flex-direction:column;gap:24px}.brand{display:flex;align-items:center;gap:11px;padding:0 8px}.brand-mark{width:38px;height:38px;border-radius:13px;background:linear-gradient(145deg,var(--accent),var(--accent2));display:grid;place-items:center;color:var(--accent-text,#06251f);font-weight:950;box-shadow:0 10px 28px color-mix(in srgb,var(--accent) 18%,transparent)}.brand b{display:block;font-size:15px}.brand span{display:block;color:var(--muted);font-size:10px;letter-spacing:.06em;text-transform:uppercase}.nav{display:grid;gap:5px}.nav button{border:0;background:transparent;color:#9fb0b8;text-align:left;padding:10px 12px;border-radius:11px;font-weight:700;display:flex;align-items:center;gap:10px}.nav button:hover,.nav button:focus-visible{background:var(--panel2);color:#fff}.nav button.active{background:linear-gradient(90deg,var(--accent2),var(--panel2));color:#fff}.nav-dot{width:7px;height:7px;border-radius:50%;background:#52646d}.nav button.active .nav-dot{background:var(--accent);box-shadow:0 0 0 4px color-mix(in srgb,var(--accent) 9%,transparent)}.side-foot{margin-top:auto;border-top:1px solid var(--line);padding:14px 8px 0;color:var(--muted);font-size:11px}.side-foot strong{display:block;color:#dbe8ec;margin-bottom:4px}\n.main{min-width:0}.topbar{height:72px;display:flex;align-items:center;gap:12px;padding:0 28px;border-bottom:1px solid var(--line);background:rgba(9,16,23,.82);backdrop-filter:blur(16px);position:sticky;top:0;z-index:50}.page-title{font-size:16px;font-weight:850;margin-right:auto}.system-state{display:flex;align-items:center;gap:7px;border:1px solid var(--line);background:var(--panel);color:var(--muted);border-radius:999px;padding:7px 10px;font-size:10px;font-weight:800;white-space:nowrap}.system-state:before{content:\"\";width:7px;height:7px;border-radius:50%;background:var(--ok)}.system-state.limited{color:var(--warn);border-color:#5a4422;background:var(--warnbg)}.system-state.limited:before{background:var(--warn)}.system-state.recovery{color:var(--blue)}.system-state.recovery:before{background:var(--blue)}.search-trigger{width:min(360px,38vw);display:flex;align-items:center;justify-content:space-between;border:1px solid var(--line);background:var(--panel);color:var(--muted);border-radius:12px;padding:9px 12px}.kbd{font-size:10px;border:1px solid var(--line);background:var(--panel2);border-radius:6px;padding:2px 6px}.content{max-width:1460px;margin:auto;padding:28px 30px 64px}.view{display:none}.view.active{display:block;animation:in .18s ease-out}@keyframes in{from{opacity:.25;transform:translateY(5px)}to{opacity:1;transform:none}}\n.hero{display:flex;align-items:flex-end;justify-content:space-between;gap:20px;margin-bottom:20px}.eyebrow{text-transform:uppercase;letter-spacing:.12em;color:var(--accent);font-size:10px;font-weight:850}.hero h1{font-size:31px;line-height:1.08;margin:5px 0 0;letter-spacing:-.04em}.hero p{margin:7px 0 0;color:var(--muted)}.hero-state{text-align:right}.hero-state strong{font-size:25px;display:block}.hero-state span{color:var(--muted);font-size:11px}\n.grid{display:grid;gap:16px}.kpis{grid-template-columns:repeat(4,minmax(0,1fr));margin-bottom:16px}.cols{grid-template-columns:minmax(0,1.4fr) minmax(310px,.6fr)}.cols-equal{grid-template-columns:repeat(2,minmax(0,1fr))}.card{background:linear-gradient(180deg,rgba(20,32,42,.98),rgba(15,24,32,.98));border:1px solid var(--line);border-radius:var(--radius);box-shadow:0 1px 0 rgba(255,255,255,.015)}.pad{padding:18px}.kpi{padding:17px}.kpi .label{color:var(--muted);font-size:11px;font-weight:700}.kpi .value{font-size:27px;font-weight:900;letter-spacing:-.04em;margin-top:7px}.kpi .meta{font-size:10px;color:var(--muted);margin-top:3px}.kpi.accent .value{color:var(--accent)}.kpi.warn .value{color:var(--warn)}.kpi.bad .value{color:var(--danger)}.card-head{display:flex;align-items:center;gap:12px;padding:15px 18px;border-bottom:1px solid var(--line)}.card-head h2{font-size:13px;margin:0}.card-head .count{color:var(--muted);font-size:10px}.card-head>*:last-child:not(:first-child){margin-left:auto}.empty{padding:34px 18px;text-align:center;color:var(--muted)}\n.btn{border:1px solid var(--line);background:var(--panel2);color:var(--ink);padding:9px 12px;border-radius:11px;font-weight:780;display:inline-flex;align-items:center;justify-content:center;gap:7px}.btn:hover,.btn:focus-visible{border-color:#3b505c;background:var(--panel3)}.btn.primary{background:var(--accent);border-color:var(--accent);color:var(--accent-text,#06251f)}.btn.primary:hover{filter:brightness(1.08)}.btn.ghost{background:transparent}.btn.danger{color:var(--danger)}.btn.small{padding:6px 9px;font-size:11px}.actions{display:flex;gap:8px;flex-wrap:wrap}.quick-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:9px;padding:16px}.quick{border:1px solid var(--line);background:var(--panel2);color:var(--ink);border-radius:14px;padding:14px;text-align:left}.quick:hover{border-color:var(--accent);background:var(--accent2)}.quick b{display:block;margin-bottom:3px}.quick span{color:var(--muted);font-size:10px}\n.list{list-style:none;padding:0;margin:0}.list li{display:flex;align-items:center;gap:12px;padding:13px 18px;border-bottom:1px solid var(--line)}.list li:last-child{border-bottom:0}.grow{min-width:0;flex:1}.grow b,.truncate{white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.sub{color:var(--muted);font-size:10px;margin-top:3px}.time{text-align:right;color:var(--muted);font-size:10px}.mark{width:9px;height:9px;border-radius:50%;background:#60727b;flex:0 0 auto}.mark.urgent{background:var(--danger)}.mark.warn{background:var(--warn)}.mark.ok{background:var(--ok)}\n.pill{display:inline-flex;align-items:center;gap:5px;border-radius:999px;padding:4px 8px;background:#21303a;color:#afbec5;font-size:9px;font-weight:850;white-space:nowrap;text-transform:capitalize}.pill.ok{background:var(--okbg);color:var(--ok)}.pill.warn{background:var(--warnbg);color:var(--warn)}.pill.bad{background:var(--dangerbg);color:var(--danger)}.pill.info{background:#172b47;color:#8ab4ff}\n.toolbar{display:flex;gap:10px;align-items:center;margin-bottom:14px}.toolbar .field{margin:0}.toolbar input{min-width:260px}.toolbar .spacer{margin-left:auto}.field{display:grid;gap:6px;margin-bottom:13px}.field label{font-size:10px;font-weight:800;color:#b2c0c6}.field input,.field select,.field textarea{width:100%;border:1px solid #31434d;background:#0d161d;border-radius:11px;padding:10px 11px;color:var(--ink);outline:none}.field textarea{min-height:86px;resize:vertical}.field input:focus,.field select:focus,.field textarea:focus{border-color:var(--accent);box-shadow:0 0 0 3px rgba(53,209,181,.09)}.form-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:0 12px}.form-grid .wide{grid-column:1/-1}.check{display:flex;align-items:flex-start;gap:9px;margin:7px 0 15px}.check input{margin-top:3px}.check span{font-size:11px;color:var(--muted)}\n.table-wrap{overflow:auto}.table{width:100%;border-collapse:collapse;min-width:780px}.table th{text-align:left;font-size:9px;text-transform:uppercase;letter-spacing:.08em;color:var(--muted);font-weight:850;padding:11px 15px;border-bottom:1px solid var(--line)}.table td{padding:13px 15px;border-bottom:1px solid var(--line);vertical-align:middle}.table tr:last-child td{border-bottom:0}.table tbody tr:hover{background:rgba(255,255,255,.015)}.table b{font-size:12px}.table .num{text-align:right}.row-actions{display:flex;justify-content:flex-end;gap:6px;flex-wrap:wrap}.mobile-list{display:none}\n.segmented{display:flex;gap:3px;border:1px solid var(--line);background:#0d161d;padding:3px;border-radius:11px}.segmented button{border:0;background:transparent;padding:7px 10px;border-radius:8px;color:var(--muted);font-weight:780}.segmented button.active{background:var(--panel3);color:var(--ink);box-shadow:0 1px 3px rgba(0,0,0,.25)}\n.action-center{display:grid;gap:8px;padding:12px}.action-item{display:grid;grid-template-columns:auto minmax(0,1fr) auto;gap:12px;align-items:center;padding:12px;border:1px solid var(--line);background:#0d161d;border-radius:13px}.action-item strong{display:block}.action-item p{margin:3px 0 0;color:var(--muted);font-size:10px}.action-item .score{font-size:11px;color:var(--muted)}.insights{grid-template-columns:repeat(3,minmax(0,1fr));margin-bottom:16px}.insight{padding:16px}.insight span{font-size:10px;color:var(--muted)}.insight strong{display:block;font-size:20px;margin-top:5px}.progress{height:6px;background:#0a1117;border-radius:999px;margin-top:12px;overflow:hidden}.progress i{display:block;height:100%;background:var(--accent);border-radius:inherit}\n.mt14{margin-top:14px}.mt16{margin-top:16px}.tight-title{margin:5px 0}.card-head.flat{padding:0 0 13px;border:0}.settings-grid{grid-template-columns:minmax(0,1fr) minmax(310px,.65fr)}.definition{display:grid;grid-template-columns:160px 1fr;gap:0}.definition dt,.definition dd{padding:11px 0;border-bottom:1px solid var(--line);margin:0}.definition dt{color:var(--muted);font-size:10px}.definition dd{font-weight:700}.blockers{display:grid;gap:8px}.blocker{padding:11px 12px;border:1px solid #5d4721;background:#211a10;border-radius:12px;color:#e5bd79;font-size:11px}\ndialog{border:1px solid var(--line);padding:0;border-radius:20px;width:min(760px,calc(100vw - 28px));max-height:calc(100vh - 34px);box-shadow:0 32px 100px rgba(0,0,0,.55);color:var(--ink);background:var(--panel)}dialog::backdrop{background:rgba(2,7,11,.74);backdrop-filter:blur(5px)}.dialog-head{display:flex;align-items:center;padding:17px 19px;border-bottom:1px solid var(--line)}.dialog-head h2{font-size:15px;margin:0}.dialog-head button{margin-left:auto;border:0;background:transparent;font-size:22px;color:var(--muted)}.dialog-body{padding:18px;overflow:auto;max-height:calc(100vh - 110px)}.dialog-foot{display:flex;justify-content:flex-end;gap:8px;padding-top:10px}.result{margin-top:12px;padding:12px;border-radius:12px;background:#0d161d;font-size:11px;white-space:pre-wrap;display:none}.result.show{display:block}.quote-head{display:grid;grid-template-columns:1.1fr .9fr;gap:14px}.quote-line{display:grid;grid-template-columns:110px minmax(180px,1fr) 70px 75px 110px 82px 38px;gap:7px;margin-bottom:8px}.quote-line input,.quote-line select{min-width:0}.quote-summary{display:flex;justify-content:flex-end;gap:20px;padding:13px 0 4px;color:var(--muted)}.quote-summary strong{color:var(--ink);font-size:16px}.search-box{border:0;border-bottom:1px solid var(--line);background:#0d161d;color:var(--ink);width:100%;padding:17px 19px;font-size:16px;outline:none}.search-results{max-height:55vh;overflow:auto}.search-result{width:100%;border:0;border-bottom:1px solid var(--line);background:var(--panel);color:var(--ink);text-align:left;padding:13px 18px}.search-result:hover{background:var(--panel2)}.search-result b{display:block}.search-result span{color:var(--muted);font-size:10px}\n.toast{position:fixed;right:22px;bottom:22px;z-index:300;background:#eaf6f4;color:#102521;border-radius:13px;padding:12px 15px;box-shadow:var(--shadow);transform:translateY(90px);opacity:0;transition:.2s;max-width:380px;font-weight:750}.toast.show{transform:none;opacity:1}.toast.bad{background:#501f1d;color:#ffd7d3}.login{min-height:100vh;display:grid;place-items:center;padding:22px;background:radial-gradient(circle at 30% 20%,rgba(53,209,181,.12),transparent 35%),var(--bg)}.login-card{width:min(390px,100%);background:var(--panel);border:1px solid var(--line);border-radius:24px;padding:28px;box-shadow:var(--shadow)}.login-card .brand{padding:0;margin-bottom:25px}.login-card h1{font-size:24px;margin:0 0 5px}.login-card p{color:var(--muted);margin:0 0 20px}.login-error{background:var(--dangerbg);color:var(--danger);border-radius:11px;padding:10px 12px;margin-bottom:13px;font-size:11px}.login-card .btn{width:100%;margin-top:4px}\n@media(max-width:1150px){.kpis{grid-template-columns:repeat(2,1fr)}.insights{grid-template-columns:1fr 1fr}.cols,.settings-grid{grid-template-columns:1fr}.quote-line{grid-template-columns:95px minmax(160px,1fr) 65px 70px 100px 75px 36px}}\n@media(max-width:850px){.shell{display:block}.side{height:auto;position:sticky;z-index:80;padding:11px 14px;gap:10px}.brand{display:none}.nav{display:flex;overflow:auto}.nav button{white-space:nowrap;padding:8px 10px}.side-foot{display:none}.topbar{top:54px;height:62px;padding:0 16px}.content{padding:18px 16px 50px}.search-trigger{width:auto}.search-trigger>span:first-child{display:none}.hero h1{font-size:25px}.quote-head{grid-template-columns:1fr}}\n@media(max-width:660px){.kpis,.cols-equal,.insights,.quick-grid{grid-template-columns:1fr}.kpi{display:flex;align-items:center;justify-content:space-between}.kpi .value{font-size:22px;margin:0}.kpi .meta{display:none}.hero{align-items:flex-start}.hero-state{display:none}.topbar .btn.primary span{display:none}.toolbar{align-items:stretch;flex-wrap:wrap}.toolbar input{min-width:0;flex:1}.toolbar .spacer{display:none}.table-wrap{display:none}.mobile-list{display:block}.form-grid{grid-template-columns:1fr}.definition{grid-template-columns:110px 1fr}.quote-line{grid-template-columns:1fr 70px 38px}.quote-line .kind,.quote-line .unit,.quote-line .vat{display:none}.quote-line .price{grid-column:1/2}.quote-summary{justify-content:space-between;gap:8px}.action-item{grid-template-columns:auto 1fr}.action-item .btn{grid-column:2}.toast{left:14px;right:14px;bottom:14px}}\n`;\n\nconst CSS_V5 = String.raw`\n.detail-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px;margin:14px 0}.detail-stat{padding:13px;border:1px solid var(--line);border-radius:13px;background:#0d161d}.detail-stat span{display:block;color:var(--muted);font-size:10px}.detail-stat strong{display:block;margin-top:4px;font-size:17px}.detail-section{margin-top:17px}.detail-section h3{margin:0 0 9px;font-size:12px}.detail-list{display:grid;gap:7px}.detail-row{display:flex;align-items:center;gap:10px;padding:10px 12px;border:1px solid var(--line);border-radius:12px;background:#0d161d}.detail-row .grow{min-width:0}.completeness{display:flex;align-items:center;gap:10px}.score-ring{width:48px;height:48px;border-radius:50%;display:grid;place-items:center;background:conic-gradient(var(--accent) calc(var(--score)*1%),#263640 0);position:relative;font-size:10px;font-weight:900}.score-ring:before{content:'';position:absolute;inset:5px;border-radius:50%;background:var(--panel)}.score-ring span{position:relative}.score-ring.low{background:conic-gradient(var(--danger) 40%,#263640 0)}.score-ring.mid{background:conic-gradient(var(--warn) 65%,#263640 0)}.score-ring.high{background:conic-gradient(var(--accent) 88%,#263640 0)}.proof{padding:11px 12px;border-radius:12px;background:var(--okbg);color:var(--ok);font-size:11px;margin-top:10px}.proof.warn{background:var(--warnbg);color:var(--warn)}.next-step{border:1px solid #31544d;background:#102a27;border-radius:14px;padding:13px;margin-top:12px}.next-step b{display:block}.next-step p{margin:3px 0 10px;color:var(--muted);font-size:10px}.loading-doc{font:14px system-ui;padding:30px;color:#263640}.mobile-docs{display:none}.inline-actions{display:flex;gap:6px;flex-wrap:wrap;margin-top:8px}.field-help{font-size:9px;color:var(--muted)}\n@media(max-width:660px){.detail-grid{grid-template-columns:1fr 1fr}.mobile-docs{display:block}.documents-table{display:none}.detail-row{align-items:flex-start}.detail-row .row-actions{justify-content:flex-start}}\n`;\n\nconst CLIENT = String.raw`\nconst data=window.__BOOT__||{},csrf=window.__CSRF__||'';\nconst q=(s,r=document)=>r.querySelector(s),qa=(s,r=document)=>[...r.querySelectorAll(s)],list=v=>Array.isArray(v)?v:[],esc=v=>String(v??'').replace(/[&<>\"']/g,c=>({'&':'&','<':'<','>':'>','\"':'"',\"'\":'''}[c]));\nconst present=v=>v!==null&&v!==undefined&&String(v).trim()!=='';\nconst money=v=>new Intl.NumberFormat('fr-FR',{style:'currency',currency:'EUR'}).format(Number(v||0));\nconst dt=v=>{if(!v)return '—';const d=new Date(v);return Number.isNaN(d.getTime())?'—':new Intl.DateTimeFormat('fr-FR',{dateStyle:'medium',timeStyle:'short'}).format(d)};\nconst dateOnly=v=>{if(!v)return '—';const d=new Date(v);return Number.isNaN(d.getTime())?'—':new Intl.DateTimeFormat('fr-FR',{dateStyle:'medium'}).format(d)};\nconst textStatus=v=>String(v||'inconnu').replaceAll('_',' ');\nfunction tone(value){const s=String(value||'').toLowerCase();if(/confirm|termine|signe|paye|payee|livre|active|success|accepte|pret/.test(s))return'ok';if(/urgent|erreur|echec|failed|bloque|critical|annule|retard/.test(s))return'bad';if(/attente|brouillon|nouveau|partiel|pending|warning|envoye/.test(s))return'warn';return'info'}\nconst pill=v=>''+esc(textStatus(v))+'';function toast(message,ok=true){const el=q('#toast');el.textContent=message;el.className='toast show'+(ok?'':' bad');clearTimeout(window.__toast);window.__toast=setTimeout(()=>el.className='toast',3300)}\nconst clients=list(data.clients),requests=list(data.demandes),appointments=list(data.rendez_vous),quotes=list(data.devis),invoices=list(data.factures),purchases=list(data.achats),tasks=list(data.taches),catalog=list(data.catalogue),ai=data.ai||{};\nconst settings=data.settings||{},company=settings.entreprise||{};\nconst business=window.__BUSINESS_CONTEXT__&&typeof window.__BUSINESS_CONTEXT__==='object'?window.__BUSINESS_CONTEXT__:{};\nconst uiConfig=business.ui_config&&typeof business.ui_config==='object'?business.ui_config:{};\nconst vocabulary=uiConfig.vocabulary&&typeof uiConfig.vocabulary==='object'?uiConfig.vocabulary:{};\nconst assistantConfig=business.assistant_config&&typeof business.assistant_config==='object'?business.assistant_config:{};\nconst intakeSchema=list(assistantConfig.intake_schema).filter(x=>x&&typeof x==='object').slice(0,30);\nconst businessLabel=(key,fallback)=>String(vocabulary[key]||fallback);\nconst titles={today:businessLabel('today',\"Aujourd'hui\"),requests:businessLabel('requests','Demandes'),agenda:businessLabel('appointments','Agenda'),clients:businessLabel('customers','Clients'),documents:businessLabel('documents','Documents'),pilot:businessLabel('pilot','Pilotage'),owner:businessLabel('assistant','Assistante IA'),settings:businessLabel('settings','Réglages')};\nfunction showView(view){if(!titles[view])view='today';qa('.view').forEach(x=>x.classList.toggle('active',x.id==='view-'+view));qa('.nav button').forEach(x=>x.classList.toggle('active',x.dataset.view===view));q('#pageTitle').textContent=titles[view];history.replaceState(null,'','#'+view);window.scrollTo({top:0,behavior:'smooth'})}\nqa('.nav button').forEach(x=>x.onclick=()=>showView(x.dataset.view));\nfunction clientName(x){return x?.client?.nom||x?.client_nom||x?.nom_client||x?.nom||x?.telephone||'Client'}\nfunction urgent(x){return ['haute','urgente'].includes(String(x?.urgence||'').toLowerCase())}\nfunction isPaid(x){return /paye|payee|acquitte/i.test(String(x?.statut||''))}\nfunction isCancelled(x){return /annule/i.test(String(x?.statut||''))}\nfunction daysAgo(v){return v?Math.floor((Date.now()-new Date(v).getTime())/86400000):0}\nfunction todayIso(){return new Date().toISOString().slice(0,10)}\nfunction configMissing(){const fields=[['Nom',company.nom],['Téléphone',company.tel],['E-mail',company.email],['SIRET',company.siret],['Adresse',company.adresse],['IBAN',company.iban]];return fields.filter(x=>!present(x[1])).map(x=>x[0])}\nasync function action(action,data={},reload=true){const response=await fetch('/api/action',{method:'POST',headers:{'content-type':'application/json','x-csrf-token':csrf},body:JSON.stringify({action,data})});const result=await response.json();if(!response.ok||result.ok===false)throw new Error(result.message||result.assistant_message||result.error||'Action refusée');const message=result.assistant_message||result.message||(result.queued?'Action enregistrée en attente de synchronisation':'Action exécutée');toast(message);if(result.queued){await loadOperationsStatus();return result}if(reload)setTimeout(()=>location.reload(),650);return result}\nfunction openDoc(kind,id){window.open('/documents/'+(kind==='quote'?'devis':'facture')+'/'+encodeURIComponent(id),'_blank','noopener')}\n\nfunction renderToday(){const urg=requests.filter(x=>urgent(x)&&!/(termine|annule|ferme)/i.test(x.statut||''));const rdv=appointments.filter(x=>String(x.date_heure||'').slice(0,10)===todayIso());const overdue=invoices.filter(x=>!isPaid(x)&&!isCancelled(x)&&x.date_echeance&&new Date(x.date_echeance)/(brouillon|pret)/i.test(x.statut||''));q('#todayKpis').innerHTML=[['Urgences',urg.length,'Demandes prioritaires','bad'],['Rendez-vous',rdv.length,\"Aujourd'hui\",''],['À encaisser',money(overdue.reduce((s,x)=>s+Number(x.total_ttc||0),0)),'Factures échues','warn'],['Devis à finaliser',draftQuotes.length,'Brouillons et prêts','accent']].map(x=>'

'+x[0]+'

'+x[2]+'

'+x[1]+'

').join('');const items=[...urg.slice(0,4).map(x=>({kind:'urgent',title:x.objet||x.description||'Demande urgente',sub:clientName(x),time:dt(x.created_at)})),...overdue.slice(0,3).map(x=>({kind:'warn',title:'Facture '+(x.numero||'')+' en retard',sub:clientName(x)+' · '+money(x.total_ttc),time:dateOnly(x.date_echeance)})),...tasks.filter(x=>!/(termine|done|annule)/i.test(x.statut||'')).slice(0,3).map(x=>({kind:'warn',title:x.titre||'Tâche',sub:x.priorite||'',time:dt(x.due_at||x.created_at)}))];q('#priorityList').innerHTML=items.length?items.map(x=>'

'+esc(x.title)+'

'+esc(x.sub)+'

'+esc(x.time)+'

').join(''):'

Aucune priorité critique

La file du jour est maîtrisée.

';const upcoming=appointments.filter(x=>new Date(x.date_heure||0)>=new Date()).sort((a,b)=>new Date(a.date_heure)-new Date(b.date_heure)).slice(0,5);q('#upcomingList').innerHTML=upcoming.length?upcoming.map(x=>'

'+esc(clientName(x))+'

'+esc(x.type_rdv||x.objet||'Intervention')+' · '+esc(x.adresse||'Adresse à confirmer')+'

'+dt(x.date_heure)+'

').join(''):'

Aucun rendez-vous à venir

'}\nfunction renderRequests(){const term=(q('#requestSearch')?.value||'').toLowerCase(),filter=q('#requestFilter')?.value||'all';const rows=requests.filter(x=>{const hay=JSON.stringify([x.numero,x.objet,x.description,clientName(x)]).toLowerCase();return(!term||hay.includes(term))&&(filter==='all'||(filter==='urgent'?urgent(x):String(x.statut||'')===filter))});q('#requestsBody').innerHTML=rows.length?rows.map(x=>''+esc(x.objet||'Demande')+'

'+esc(clientName(x))+'

'+pill(x.urgence||'normale')+''+pill(x.statut||'nouveau')+''+esc(x.description||'—')+''+dt(x.created_at)+'').join(''):'Aucune demande';q('#requestsMobile').innerHTML=rows.map(x=>'

'+esc(x.objet||'Demande')+'

'+esc(clientName(x))+' · '+dt(x.created_at)+'

'+pill(x.statut||'nouveau')+'

').join('')||'

Aucune demande

';q('#requestCount').textContent=rows.length}\nq('#requestSearch').oninput=renderRequests;q('#requestFilter').onchange=renderRequests;\nfunction renderAgenda(){const rows=[...appointments].sort((a,b)=>new Date(a.date_heure||0)-new Date(b.date_heure||0));q('#agendaList').innerHTML=rows.length?rows.map(x=>'

'+esc(clientName(x))+'

'+esc(x.type_rdv||x.objet||'Intervention')+' · '+esc(x.adresse||'Adresse non renseignée')+'

'+dt(x.date_heure)+'
'+pill(x.statut||'planifie')+'

').join(''):'

Aucun rendez-vous

'}\nfunction renderClients(){q('#clientsBody').innerHTML=clients.length?clients.map(x=>''+esc(x.nom||'Sans nom')+'

'+esc(x.ville||'')+'

'+esc(x.telephone||'—')+''+esc(x.email||'—')+''+pill(x.vip?'VIP':'actif')+'').join(''):'Aucun client';q('#clientsMobile').innerHTML=clients.map(x=>'

'+esc(x.nom||x.telephone||'Client')+'

'+esc([x.telephone,x.email].filter(Boolean).join(' · '))+'

').join('')||'

Aucun client

';q('#clientCount').textContent=clients.length}\nlet documentTab='quotes';function quoteRows(){return quotes.map(x=>''+esc(x.numero||'Brouillon')+'

'+esc(clientName(x))+' · '+esc(x.objet||'Sans objet')+'

'+dateOnly(x.date_emission||x.created_at)+''+money(x.total_ttc)+'

'+esc(x.lignes_count||0)+' ligne(s)

'+pill(x.statut||'brouillon')+'

'+(String(x.statut)==='brouillon'?'':'')+(!invoices.some(f=>f.devis_id===x.id)&&!/(refuse|expire)/i.test(x.statut||'')?'':'')+'

').join('')}\nfunction invoiceRows(){return invoices.map(x=>''+esc(x.numero||'Brouillon')+'

'+esc(clientName(x))+' · '+esc(textStatus(x.type_facture||'simple'))+'

'+dateOnly(x.date_emission||x.created_at)+''+money(x.total_ttc)+'

Échéance '+dateOnly(x.date_echeance)+'

'+pill(x.statut||'brouillon')+'

'+(!isPaid(x)&&!isCancelled(x)?'':'')+'

').join('')}\nfunction purchaseRows(){return purchases.map(x=>''+esc(x.numero_facture||x.fournisseur||'Achat')+'

'+esc(x.fournisseur||'Fournisseur')+'

'+dateOnly(x.date_facture||x.created_at)+''+money(x.total_ttc)+''+pill(x.ocr_statut||'en_attente')+'').join('')}\nfunction renderDocuments(){qa('[data-document-tab]').forEach(x=>x.classList.toggle('active',x.dataset.documentTab===documentTab));const body=documentTab==='quotes'?quoteRows():documentTab==='invoices'?invoiceRows():purchaseRows();q('#documentsBody').innerHTML=body||'Aucun document';bindDocumentActions()}\nqa('[data-document-tab]').forEach(x=>x.onclick=()=>{documentTab=x.dataset.documentTab;renderDocuments()});\nfunction bindDocumentActions(){qa('[data-doc-quote]').forEach(x=>x.onclick=()=>openDoc('quote',x.dataset.docQuote));qa('[data-doc-invoice]').forEach(x=>x.onclick=()=>openDoc('invoice',x.dataset.docInvoice));qa('[data-quote-ready]').forEach(x=>x.onclick=async()=>{x.disabled=true;try{await action('quote.status',{id:x.dataset.quoteReady,statut:'pret'})}catch(e){toast(e.message,false);x.disabled=false}});qa('[data-invoice-from]').forEach(x=>x.onclick=()=>openInvoiceDialog(x.dataset.invoiceFrom));qa('[data-mark-paid]').forEach(x=>x.onclick=()=>openPaymentDialog(x.dataset.markPaid))}\n\nfunction renderPilot(){\n const paid=invoices.filter(isPaid);\n const open=invoices.filter(x=>!isPaid(x)&&!isCancelled(x));\n const overdue=open.filter(x=>x.date_echeance&&new Date(x.date_echeance)x.devis_id).filter(Boolean));\n const accepted=quotes.filter(x=>/accepte/i.test(x.statut||''));\n const toInvoice=accepted.filter(x=>!invoicedQuoteIds.has(x.id));\n const followups=quotes.filter(x=>/envoye/i.test(x.statut||'')&&daysAgo(x.date_envoi||x.updated_at)>=7);\n const calls=list(ai.recent_calls).filter(x=>Number(x.risk_score)>=60);\n const received=paid.reduce((sum,x)=>sum+Number(x.total_ttc||0),0);\n const due=open.reduce((sum,x)=>sum+Number(x.total_ttc||0),0);\n const late=overdue.reduce((sum,x)=>sum+Number(x.total_ttc||0),0);\n const rate=quotes.length?Math.round(accepted.length/quotes.length*100):0;\n const cards=[['Encaissé',money(received),'Factures réglées','accent'],['À encaisser',money(due),open.length+' facture(s)','warn'],['En retard',money(late),overdue.length+' échéance(s)','bad'],['Conversion',rate+' %',accepted.length+' devis accepté(s)','']];\n q('#pilotKpis').innerHTML=cards.map(x=>'

'+x[0]+'

'+x[2]+'

'+x[1]+'

').join('');\n const insightData=[['Devis à facturer',toInvoice.length],['Relances utiles',followups.length],['Appels à reprendre',calls.length]];\n q('#pilotInsights').innerHTML=insightData.map(x=>'

'+x[0]+''+x[1]+'

').join('');\n const queue=[];\n overdue.slice(0,5).forEach(x=>queue.push({kind:'urgent',title:'Encaisser '+(x.numero||'facture'),sub:clientName(x)+' · '+money(x.total_ttc),button:'Encaisser',action:'pay',id:x.id}));\n toInvoice.slice(0,5).forEach(x=>queue.push({kind:'ok',title:'Facturer '+(x.numero||'devis'),sub:clientName(x)+' · '+money(x.total_ttc),button:'Créer facture',action:'invoice',id:x.id}));\n followups.slice(0,4).forEach(x=>queue.push({kind:'warn',title:'Relancer '+(x.numero||'devis'),sub:clientName(x)+' · envoyé il y a '+daysAgo(x.date_envoi||x.updated_at)+' jours',button:'Créer tâche',action:'task',client_id:x.client_id}));\n calls.slice(0,3).forEach(x=>queue.push({kind:'urgent',title:'Reprendre un appel',sub:(x.intent||'Appel')+' · priorité élevée',button:'Créer rappel',action:'task'}));\n q('#actionCenter').innerHTML=queue.length?queue.map((x,i)=>'

'+esc(x.title)+'

'+esc(x.sub)+'

').join(''):'

Aucune action commerciale urgente.

';\n qa('[data-queue]').forEach(button=>button.onclick=async()=>{\n const item=queue[Number(button.dataset.queue)];\n if(item.action==='pay')return openPaymentDialog(item.id);\n if(item.action==='invoice')return openInvoiceDialog(item.id);\n button.disabled=true;\n try{await action('task.create',{type_tache:'rappeler',priorite:item.kind==='urgent'?'haute':'normale',titre:item.title,description:item.sub,client_id:item.client_id||null})}catch(error){toast(error.message,false);button.disabled=false}\n });\n}\nfunction renderSettings(){const rows=[['Nom',company.nom],['Téléphone',company.tel],['E-mail',company.email],['SIRET',company.siret],['Adresse',company.adresse],['IBAN',company.iban],['Zone',settings.zone_intervention],['Rayon',settings.rayon_km?settings.rayon_km+' km':null],['TVA par défaut',settings.tva_taux_defaut?settings.tva_taux_defaut+' %':null],['Acompte par défaut',settings.acompte_pct_defaut?settings.acompte_pct_defaut+' %':null]];q('#settingsDefinition').innerHTML=rows.map(x=>'

'+x[0]+'

'+esc(x[1]||'Non renseigné')+'

').join('');const missing=configMissing();q('#blockerList').innerHTML=missing.length?missing.map(x=>'

Compléter '+esc(x)+'

').join(''):'

Identité entreprise complète

'}\n\nconst dialog=q('#actionDialog'),dialogTitle=q('#dialogTitle'),dialogBody=q('#dialogBody');function closeDialog(){dialog.close()}\nfunction safeIntakeFields(){return intakeSchema.filter(field=>/^[a-z][a-z0-9_]{0,63}$/i.test(String(field.key||''))&&['text','tel','email','number','textarea','select','multiselect','boolean','date','datetime-local'].includes(String(field.type||'text')))}\nfunction intakeFieldHtml(field){const key=String(field.key),type=String(field.type||'text'),label=esc(field.label||key),required=field.required===true?' required':'',requiredMark=field.required===true?' *':'',placeholder=present(field.placeholder)?' placeholder=\"'+esc(field.placeholder)+'\"':'',wide=['textarea','multiselect','boolean'].includes(type)?' wide':'';if(type==='textarea')return'

'+label+requiredMark+'

';if(type==='select'||type==='multiselect'){const options=list(field.options).slice(0,40).map(option=>'').join('');const multiple=type==='multiselect'?' multiple size=\"'+Math.min(6,Math.max(3,list(field.options).length))+'\"':'';return'

'+label+requiredMark+'

'}if(type==='boolean')return''+label+requiredMark+'';return'

'+label+requiredMark+'

'}\nfunction dynamicIntakeHtml(){const fields=safeIntakeFields();return fields.length?'

'+fields.map(intakeFieldHtml).join('')+'

Les champs sont adaptés au métier chargé pour cette entreprise.

':''}\nfunction collectFormPayload(form){const payload={},formData=new FormData(form);for(const [key,value] of formData.entries()){if(Object.prototype.hasOwnProperty.call(payload,key))payload[key]=Array.isArray(payload[key])?[...payload[key],value]:[payload[key],value];else payload[key]=value}return payload}\nfunction normalizeBusinessRequest(payload){const fields=safeIntakeFields(),businessFields={};for(const field of fields){const key=String(field.key);businessFields[key]=field.type==='boolean'?payload[key]==='on':payload[key]??(field.type==='multiselect'?[]:'')}payload.business_fields=businessFields;payload.nom=payload.nom||payload.customer_identity||payload.customer_name||'';payload.telephone=payload.telephone||payload.contact_phone||payload.phone||'';payload.email=payload.email||payload.contact_email||'';payload.adresse=payload.adresse||payload.site_address||'';payload.urgence=payload.urgence||payload.urgency||'normale';payload.description=payload.description||payload.request_description||payload.symptoms||'';payload.asset_type=payload.asset_type||assistantConfig?.terminology?.asset||'';return payload}\nfunction openSimple(kind){const legacyRequest='

Nom

Téléphone *

E-mail

Urgence

Demande *

';const forms={request:{title:businessLabel('new_request','Nouvelle demande'),action:'client.create',html:dynamicIntakeHtml()||legacyRequest},availability:{title:'Chercher un créneau',action:'availability.check',html:'

Date souhaitée *

Durée

Adresse

'},appointment:{title:'Planifier un rendez-vous',action:'rdv.create',html:'

Téléphone client *

Date et heure *

Type

Adresse

Le client a explicitement confirmé ce créneau.

'}};const cfg=forms[kind];if(!cfg)return;dialogTitle.textContent=cfg.title;dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#actionForm').onsubmit=async e=>{e.preventDefault();const button=q('[type=submit]',e.currentTarget);let payload=collectFormPayload(e.currentTarget);payload.explicit_confirmation=payload.explicit_confirmation==='on';if(kind==='request')payload=normalizeBusinessRequest(payload);button.disabled=true;try{const result=await action(cfg.action,payload,!['availability.check'].includes(cfg.action));if(cfg.action==='availability.check'){const box=q('#actionResult');box.textContent=result.message||JSON.stringify(result,null,2);box.classList.add('show')}}catch(err){toast(err.message,false);button.disabled=false}};dialog.showModal()}\nfunction quoteLine(prefill={}){const row=document.createElement('div');row.className='quote-line';row.innerHTML='';q('button',row).onclick=()=>{row.remove();updateQuoteTotals()};qa('input,select',row).forEach(x=>x.oninput=updateQuoteTotals);q('[name=designation]',row).onchange=()=>{const match=catalog.find(c=>c.designation===q('[name=designation]',row).value);if(match){q('[name=prix_unitaire_ht]',row).value=match.prix_ht||0;q('[name=tva_taux]',row).value=String(match.tva_taux||20);q('[name=unite]',row).value=match.unite||'u';updateQuoteTotals()}};q('#quoteLines').appendChild(row);updateQuoteTotals()}\nfunction updateQuoteTotals(){const lines=qa('.quote-line',dialogBody);let ht=0,tva=0;for(const row of lines){const total=Number(q('[name=quantite]',row).value||0)*Number(q('[name=prix_unitaire_ht]',row).value||0),rate=Number(q('[name=tva_taux]',row).value||0);ht+=total;tva+=total*rate/100}q('#quoteHt').textContent=money(ht);q('#quoteTva').textContent=money(tva);q('#quoteTtc').textContent=money(ht+tva)}\nfunction openQuoteDialog(){dialogTitle.textContent='Créer un devis';dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#addQuoteLine').onclick=()=>quoteLine();quoteLine();q('#quoteForm').onsubmit=async e=>{e.preventDefault();const button=q('[type=submit]',e.currentTarget),payload=Object.fromEntries(new FormData(e.currentTarget).entries());payload.lines=qa('.quote-line',e.currentTarget).map(row=>({type_ligne:q('[name=type_ligne]',row).value,designation:q('[name=designation]',row).value,quantite:Number(q('[name=quantite]',row).value||1),unite:q('[name=unite]',row).value,prix_unitaire_ht:Number(q('[name=prix_unitaire_ht]',row).value||0),tva_taux:Number(q('[name=tva_taux]',row).value||20)}));button.disabled=true;try{const result=await action('quote.create',payload,false);dialog.close();if(result.devis?.id)openDoc('quote',result.devis.id);setTimeout(()=>location.reload(),900)}catch(err){toast(err.message,false);button.disabled=false}};dialog.showModal()}\nfunction openInvoiceDialog(devisId){const quote=quotes.find(x=>x.id===devisId)||{};dialogTitle.textContent='Créer une facture';dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#invoiceForm').onsubmit=async e=>{e.preventDefault();const button=q('[type=submit]',e.currentTarget),payload=Object.fromEntries(new FormData(e.currentTarget).entries());payload.devis_id=devisId;button.disabled=true;try{const result=await action('invoice.from_quote',payload,false);dialog.close();if(result.facture?.id)openDoc('invoice',result.facture.id);setTimeout(()=>location.reload(),900)}catch(err){toast(err.message,false);button.disabled=false}};dialog.showModal()}\nfunction openPaymentDialog(id){if(!window.confirm('Confirmer cette facture comme réglée aujourd’hui par virement ?'))return;action('invoice.mark_paid',{id,date_paiement:todayIso(),mode_paiement:'virement'}).catch(error=>toast(error.message,false))}\nqa('[data-open-simple]').forEach(x=>x.onclick=()=>openSimple(x.dataset.openSimple));qa('[data-open-quote]').forEach(x=>x.onclick=openQuoteDialog);q('#dialogClose').onclick=closeDialog;\nconst searchDialog=q('#searchDialog'),searchInput=q('#globalSearch'),searchResults=q('#searchResults');\nfunction openSearch(){searchDialog.showModal();searchInput.value='';searchInput.focus();renderSearch('')}\nfunction renderSearch(term){term=term.toLowerCase().trim();const source=[...requests.map(x=>({view:'requests',title:x.objet||'Demande',sub:clientName(x)+' · '+textStatus(x.statut)})),...clients.map(x=>({view:'clients',title:x.nom||x.telephone||'Client',sub:[x.telephone,x.email].filter(Boolean).join(' · ')})),...quotes.map(x=>({view:'documents',title:x.numero||x.objet||'Devis',sub:clientName(x)+' · '+money(x.total_ttc)})),...invoices.map(x=>({view:'documents',title:x.numero||'Facture',sub:clientName(x)+' · '+money(x.total_ttc)}))].filter(x=>!term||(x.title+' '+x.sub).toLowerCase().includes(term)).slice(0,20);searchResults.innerHTML=source.length?source.map((x,i)=>'').join(''):'

Aucun résultat

';qa('[data-result]',searchResults).forEach(x=>x.onclick=()=>{showView(source[Number(x.dataset.result)].view);searchDialog.close()})}\nq('#searchTrigger').onclick=openSearch;searchInput.oninput=()=>renderSearch(searchInput.value);q('#searchClose').onclick=()=>searchDialog.close();document.addEventListener('keydown',event=>{if((event.ctrlKey||event.metaKey)&&event.key.toLowerCase()==='k'){event.preventDefault();openSearch()}if(event.key==='Escape'){searchDialog.close();dialog.close()}});\nq('#logout').onclick=async()=>{await fetch('/logout',{method:'POST',headers:{'x-csrf-token':csrf}});location.href='/'};\nq('#goDocuments').onclick=()=>showView('documents');\nasync function loadOperationsStatus(){const el=q('#systemState');if(!el)return;try{const response=await fetch('/api/operations-status');const status=await response.json();el.className='system-state '+(status.mode||'');el.textContent=status.pending_actions>0?status.label+' · '+status.pending_actions+' en attente':status.label;el.title=status.explanation||''}catch{el.className='system-state limited';el.textContent='État indisponible'}}\nvoid loadOperationsStatus();\nq('#todayDate').textContent=new Intl.DateTimeFormat('fr-FR',{weekday:'long',day:'numeric',month:'long'}).format(new Date());renderToday();renderRequests();renderAgenda();renderClients();renderDocuments();renderPilot();renderSettings();showView(location.hash.slice(1)||'today');\n`;\nfunction safeJson(value: unknown): string {\n return JSON.stringify(value).replace(/ {\n return {\n \"Content-Type\": contentType,\n \"Access-Control-Allow-Origin\": \"https://idleyer--66ce4ade7caf11f189831607ee4eb77e.web.val.run\",\n \"Access-Control-Allow-Methods\": \"GET, POST\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-CSRF-Token, X-Owner-Access-Token\",\n \"Vary\": \"Origin\",\n \"Cache-Control\": \"no-store, max-age=0\",\n \"Pragma\": \"no-cache\",\n \"Strict-Transport-Security\": \"max-age=31536000; includeSubDomains\",\n \"X-Permitted-Cross-Domain-Policies\": \"none\",\n \"Origin-Agent-Cluster\": \"?1\",\n \"Content-Security-Policy\": `default-src 'self'; style-src 'nonce-${nonce}'; script-src 'nonce-${nonce}'; img-src 'self' data:; connect-src 'self'; font-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'`,\n \"X-Frame-Options\": \"DENY\",\n \"X-Content-Type-Options\": \"nosniff\",\n \"Referrer-Policy\": \"no-referrer\",\n \"Permissions-Policy\": \"camera=(), microphone=(self), geolocation=(), payment=(), usb=()\",\n \"Cross-Origin-Opener-Policy\": \"same-origin\",\n \"Cross-Origin-Resource-Policy\": \"same-origin\",\n };\n}\n\nfunction escapeHtml(value: unknown): string {\n return String(value ?? \"\").replace(/[&<>\"']/g, (char) => ({\n \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\",\n })[char] || \"\");\n}\n\nexport function loginPage(error: string, nonce: string): string {\n const safeError = escapeHtml(error);\n return `Connexion · Secrétariat IA

Secrétariat IAEspace entreprise

Connexion sécurisée

Saisissez l’identifiant de votre entreprise et votre e-mail professionnel.

${safeError ? `` : \"\"}

Aucun mot de passe. Le métier, l’entreprise et les droits seront chargés uniquement après vérification du lien.

`;\n}\n\nexport function callbackPage(nonce: string): string {\n return `Vérification · Secrétariat IA`;\n}\n\nexport function appPage(data: Record, session: Session, nonce: string): string {\n const tenantSession = session.v === 3 ? session : null;\n const rawContext = data.business_context\n && typeof data.business_context === \"object\"\n && !Array.isArray(data.business_context)\n ? data.business_context as Record\n : {};\n const rawUi = rawContext.ui_config\n && typeof rawContext.ui_config === \"object\"\n && !Array.isArray(rawContext.ui_config)\n ? rawContext.ui_config as Record\n : {};\n const vocabulary = rawUi.vocabulary\n && typeof rawUi.vocabulary === \"object\"\n && !Array.isArray(rawUi.vocabulary)\n ? rawUi.vocabulary as Record\n : {};\n const packTheme = rawUi.theme\n && typeof rawUi.theme === \"object\"\n && !Array.isArray(rawUi.theme)\n ? rawUi.theme as Record\n : {};\n const tenantSettings = rawContext.tenant_settings\n && typeof rawContext.tenant_settings === \"object\"\n && !Array.isArray(rawContext.tenant_settings)\n ? rawContext.tenant_settings as Record\n : {};\n const branding = tenantSettings.branding\n && typeof tenantSettings.branding === \"object\"\n && !Array.isArray(tenantSettings.branding)\n ? tenantSettings.branding as Record\n : {};\n const tenantTheme = branding.theme\n && typeof branding.theme === \"object\"\n && !Array.isArray(branding.theme)\n ? branding.theme as Record\n : {};\n const theme = { ...packTheme, ...tenantTheme };\n const quickActions = Array.isArray(rawUi.quick_actions)\n ? rawUi.quick_actions.filter((item) => item && typeof item === \"object\").slice(0, 12) as Record[]\n : [];\n const label = (key: string, fallback: string, max = 80) =>\n escapeHtml(String(vocabulary[key] || fallback).slice(0, max));\n const quick = (key: string, field: \"label\" | \"description\", fallback: string) => {\n const item = quickActions.find((entry) => entry.key === key);\n return escapeHtml(String(item?.[field] || fallback).slice(0, 140));\n };\n const safeColor = (value: unknown, fallback: string) => {\n const color = String(value || \"\").toLowerCase();\n return /^#[0-9a-f]{6}$/.test(color) ? color : fallback;\n };\n const organizationName = escapeHtml(String(\n rawContext.organization_name || tenantSession?.organizationName || \"Secrétariat IA\",\n ).slice(0, 120));\n const verticalName = escapeHtml(String(\n rawContext.vertical_display_name || tenantSession?.verticalDisplayName || \"Entreprise\",\n ).slice(0, 80));\n const brandMark = escapeHtml(String(\n branding.brand_mark || rawUi.brand_mark || tenantSession?.ui.brandMark || \"S\",\n ).slice(0, 3));\n const primaryAction = escapeHtml(String(\n rawUi.primary_action || tenantSession?.ui.primaryAction || vocabulary.new_request || \"Nouvelle demande\",\n ).slice(0, 80));\n const themeCss = `:root{--accent:${safeColor(theme.accent,\"#35d1b5\")};--accent2:${safeColor(theme.accent_soft,\"#103d38\")};--accent-text:${safeColor(theme.accent_text,\"#06251f\")}}`;\n const businessContext = tenantSession\n ? {\n ...rawContext,\n tenant_id: tenantSession.tenantId,\n staff_id: tenantSession.staffId,\n role: tenantSession.role,\n login_identifier: tenantSession.loginIdentifier,\n organization_name: String(rawContext.organization_name || tenantSession.organizationName),\n vertical_key: String(rawContext.vertical_key || tenantSession.verticalKey),\n vertical_display_name: String(rawContext.vertical_display_name || tenantSession.verticalDisplayName),\n vertical_version: Number(rawContext.vertical_version || tenantSession.verticalVersion),\n locale: String(rawContext.locale || tenantSession.locale),\n timezone: String(rawContext.timezone || tenantSession.timezone),\n backend_mode: String(rawContext.backend_mode || tenantSession.backendMode),\n auth_method: tenantSession.authMethod,\n }\n : {\n ...rawContext,\n tenant_id: Deno.env.get(\"PISCINE_TENANT\") || \"pisciniste_01\",\n organization_name: \"Secrétariat IA\",\n vertical_key: \"legacy\",\n vertical_display_name: \"Entreprise\",\n auth_method: \"legacy_access_code\",\n };\n return `${organizationName} · Secrétariat IAAller au contenu

À traiter maintenant

Priorités commerciales et interventions du jour.

Priorités

Actions rapides

Prochains rendez-vous

File opérationnelle

${label(\"requests\",\"Demandes\")}

${label(\"request_singular\",\"Demande\")}	Priorité	Statut	Objet	Créée

Planning

${label(\"appointments\",\"Agenda\")}

Portefeuille

${label(\"customers\",\"Clients\")}

0 clients

Client	Téléphone	E-mail	État

Vente et comptabilité

${label(\"documents\",\"Documents\")}

Créer, facturer, imprimer et encaisser.

Document	Date	Montant	Statut

Décisions utiles

${label(\"pilot\",\"Pilotage\")}

Ce qui doit être encaissé, facturé ou relancé.

Centre d’actions

Actions réellement exécutables

Accès directs

Commandes et décisions

${label(\"assistant\",\"Assistante personnelle\")}

Consultez l’activité en direct, sans exécution n8n, et préparez les actions sensibles à valider.

Chargement

Console dirigeantVérification…Lecture directe sécurisée

Passerelle métierVérification…Supabase audité · sans n8n

Identité dirigeantVérification…Forte identité requise pour écrire

Agent vocalVérification…OpenAI Realtime

Sécurité du dirigeant

Identité entreprise vérifiée

Vérification de la session propriétaire…

\n Compte propriétaire sécurisé\n

\n Vérification\n \n \n

Centre d’activation

État réel des prérequis. Cette lecture ne consomme aucune exécution n8n et n’active aucun envoi.

Chargement…Vérification

Diagnostic en coursLecture des garde-fous…

Patientez

Prochaines actions

1Chargement du plan d’activation…

◉

Parler à la secrétaire IA

La console de lecture est directe. Les écritures restent en aperçu et la voix demeure verrouillée tant que l’identité forte n’est pas liée.

Commandes rapides

Accès direct sécurisé

\n \n \n \n \n \n \n \n

Aucune commande lancée.

Garde-fous avant activation

Vérification en cours…

Validations en attente

—

Chargez l’état de l’autonomie.

Automatisations candidates

—

Aucune analyse chargée.

Politique de communication

Connexion calendrier

Suivi de livraison Twilio

Lecture seule · aucun renvoi automatique

En attente—

Envoyés—

Livrés—

Échecs—

Confidentialité : le cockpit n’affiche ni numéro de téléphone ni contenu de SMS, seulement un suffixe technique et l’état de livraison.

Derniers SMS suivis

Chargez « Livraison des SMS ».

Alertes de livraison

—

Aucune donnée chargée.

Premier SMS technique

Bloqué en sécurité

Chargez le suivi pour voir les contrôles.

Aucun SMS ne peut partir depuis ce bloc.

Identité et conditions

${label(\"settings\",\"Réglages\")}

À compléter

\n \n \n

\n `;\n}\n",[],[462,538],"86c5e32c-efe9-44a8-946b-c4f681c65105","twilio-status.ts","019f675d-aa00-73de-b62f-f2ea6f6cd906",["D",1784145619620],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { reserveN8nExecution } from \"./n8n-budget.ts\";\n\nfunction env(key: string): string {\n try {\n return Deno.env.has(key) ? (Deno.env.get(key) || \"\") : \"\";\n } catch {\n return \"\";\n }\n}\n\nconst N8N_BASE = env(\"PISCINE_N8N_BASE\").replace(/\\/$/, \"\");\nconst STATUS_PATH = env(\"PISCINE_TWILIO_STATUS_N8N_PATH\").replace(/^\\//, \"\");\nconst TOOL_SECRET = env(\"PISCINE_TOOL_SECRET\");\nconst TENANT = env(\"PISCINE_TENANT\") || \"pisciniste_01\";\nconst TWILIO_AUTH_TOKEN = env(\"PISCINE_TWILIO_AUTH_TOKEN\");\nconst LEGACY_STATUS_GATEWAY_PUBLISHED =\n env(\"PISCINE_TWILIO_STATUS_GATEWAY_PUBLISHED\") === \"true\";\nconst RECEIVER_ENABLED =\n env(\"PISCINE_TWILIO_STATUS_RECEIVER_ENABLED\") === \"true\";\nconst STATUS_GATEWAY_PUBLISHED =\n LEGACY_STATUS_GATEWAY_PUBLISHED || RECEIVER_ENABLED;\n\nexport type NormalizedTwilioStatus = {\n provider_status: string;\n delivery_state:\n | \"queued\"\n | \"provider_accepted\"\n | \"sent\"\n | \"delivered\"\n | \"opened\"\n | \"failed\"\n | \"undelivered\";\n terminal: boolean;\n};\n\nexport function normalizeTwilioStatus(\n value: unknown,\n): NormalizedTwilioStatus | null {\n const provider_status = String(value ?? \"\").trim().toLowerCase();\n if (provider_status === \"queued\" || provider_status === \"scheduled\") {\n return { provider_status, delivery_state: \"queued\", terminal: false };\n }\n if (provider_status === \"accepted\" || provider_status === \"sending\") {\n return {\n provider_status,\n delivery_state: \"provider_accepted\",\n terminal: false,\n };\n }\n if (provider_status === \"sent\") {\n return { provider_status, delivery_state: \"sent\", terminal: false };\n }\n if (provider_status === \"delivered\" || provider_status === \"received\") {\n return { provider_status, delivery_state: \"delivered\", terminal: true };\n }\n if (provider_status === \"read\") {\n return { provider_status, delivery_state: \"opened\", terminal: true };\n }\n if (provider_status === \"undelivered\") {\n return { provider_status, delivery_state: \"undelivered\", terminal: true };\n }\n if (provider_status === \"failed\" || provider_status === \"canceled\") {\n return { provider_status, delivery_state: \"failed\", terminal: true };\n }\n return null;\n}\n\nfunction canonicalForm(\n exactUrl: string,\n params: URLSearchParams,\n): string {\n const entries = [...params.entries()].sort(([leftKey, leftValue], [rightKey, rightValue]) => {\n const keyOrder = leftKey.localeCompare(rightKey);\n return keyOrder || leftValue.localeCompare(rightValue);\n });\n return exactUrl + entries.map(([key, value]) => key + value).join(\"\");\n}\n\nfunction bytesToBase64(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary);\n}\n\nexport async function computeTwilioFormSignature(\n exactUrl: string,\n params: URLSearchParams,\n authToken: string,\n): Promise {\n if (!authToken) return \"\";\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(authToken),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const digest = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(canonicalForm(exactUrl, params)),\n );\n return bytesToBase64(new Uint8Array(digest));\n}\n\nfunction constantTimeEqual(left: string, right: string): boolean {\n const max = Math.max(left.length, right.length);\n let difference = left.length ^ right.length;\n for (let index = 0; index < max; index += 1) {\n difference |= (left.charCodeAt(index) || 0) ^ (right.charCodeAt(index) || 0);\n }\n return difference === 0;\n}\n\nexport async function validateTwilioFormSignature(\n exactUrl: string,\n params: URLSearchParams,\n suppliedSignature: string,\n authToken = TWILIO_AUTH_TOKEN,\n): Promise {\n if (!authToken || !suppliedSignature) return false;\n const expected = await computeTwilioFormSignature(exactUrl, params, authToken);\n return constantTimeEqual(expected, suppliedSignature.trim());\n}\n\nexport async function configuredTwilioAuthTokenSelfTest(): Promise<{\n ok: boolean;\n tamper_rejected: boolean;\n}> {\n if (!TWILIO_AUTH_TOKEN) return { ok: false, tamper_rejected: false };\n\n const exactUrl = \"https://self-test.invalid/twilio-status\";\n const params = new URLSearchParams({\n MessageSid: \"SM11111111111111111111111111111111\",\n MessageStatus: \"delivered\",\n });\n const signature = await computeTwilioFormSignature(\n exactUrl,\n params,\n TWILIO_AUTH_TOKEN,\n );\n const valid = await validateTwilioFormSignature(\n exactUrl,\n params,\n signature,\n );\n params.set(\"MessageStatus\", \"failed\");\n const tampered = await validateTwilioFormSignature(\n exactUrl,\n params,\n signature,\n );\n return { ok: valid && !tampered, tamper_rejected: !tampered };\n}\n\nfunction clean(value: unknown, max: number): string {\n return String(value ?? \"\").trim().slice(0, max);\n}\n\nexport function buildSanitizedTwilioStatusPayload(\n params: URLSearchParams,\n occurredAt = new Date().toISOString(),\n context: Record = {},\n): Record | null {\n const messageSid = clean(params.get(\"MessageSid\"), 64);\n const normalized = normalizeTwilioStatus(params.get(\"MessageStatus\"));\n if (!/^(SM|MM)[0-9A-Za-z]{32}$/.test(messageSid) || !normalized) return null;\n\n const documentType = clean(context.document_type, 16).toLowerCase();\n const documentId = clean(context.document_id, 64);\n const documentLinked =\n (documentType === \"quote\" || documentType === \"invoice\") &&\n /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i\n .test(documentId);\n\n return {\n schema_version: \"1.0\",\n tenant_id: TENANT,\n source: \"valtown-twilio-status\",\n message_sid: messageSid,\n message_status: normalized.provider_status,\n delivery_state: normalized.delivery_state,\n terminal: normalized.terminal,\n document_type: documentLinked ? documentType : null,\n document_id: documentLinked ? documentId : null,\n self_test:\n messageSid === \"SM22222222222222222222222222222222\" &&\n params.get(\"PiscineSelfTest\") === \"1\",\n error_code: clean(params.get(\"ErrorCode\"), 64) || null,\n error_message: clean(params.get(\"ErrorMessage\"), 500) || null,\n occurred_at: occurredAt,\n raw_status: {\n ChannelPrefix: clean(params.get(\"ChannelPrefix\"), 32) || null,\n EventType: clean(params.get(\"EventType\"), 64) || null,\n },\n };\n}\n\nconst STATUS_QUEUE_SCHEMA = `\n create table if not exists twilio_status_fallback_queue (\n event_key text primary key,\n payload_json text not null,\n forward_state text not null default 'pending',\n attempts integer not null default 0,\n last_error text,\n created_at text not null,\n updated_at text not null,\n forwarded_at text\n )\n`;\n\nasync function ensureTwilioStatusQueue() {\n await sqlite.execute(STATUS_QUEUE_SCHEMA);\n}\n\nfunction twilioStatusEventKey(payload: Record): string {\n const tenant = clean(payload.tenant_id, 80);\n const messageSid = clean(payload.message_sid, 64);\n const deliveryState = clean(payload.delivery_state, 32);\n if (!tenant || !/^(SM|MM)[0-9A-Za-z]{32}$/.test(messageSid) || !deliveryState) {\n throw new Error(\"invalid_twilio_status_queue_key\");\n }\n return [tenant, \"twilio\", messageSid, deliveryState].join(\":\");\n}\n\nexport async function persistTwilioStatusFallback(\n payload: Record,\n reason = \"n8n_forward_pending\",\n): Promise<{ event_key: string; queue_depth: number }> {\n await ensureTwilioStatusQueue();\n const eventKey = twilioStatusEventKey(payload);\n await sqlite.execute({\n sql: `insert into twilio_status_fallback_queue (\n event_key,payload_json,forward_state,attempts,last_error,created_at,updated_at\n ) values (\n :event_key,:payload_json,'pending',0,:last_error,datetime('now'),datetime('now')\n )\n on conflict(event_key) do update set\n payload_json=excluded.payload_json,\n forward_state=case\n when twilio_status_fallback_queue.forward_state='forwarded' then 'forwarded'\n else 'pending'\n end,\n last_error=case\n when twilio_status_fallback_queue.forward_state='forwarded' then twilio_status_fallback_queue.last_error\n else excluded.last_error\n end,\n updated_at=datetime('now')`,\n args: {\n event_key: eventKey,\n payload_json: JSON.stringify(payload),\n last_error: clean(reason, 160) || \"n8n_forward_pending\",\n },\n });\n const depthResult = await sqlite.execute(\n \"select count(*) as queue_depth from twilio_status_fallback_queue where forward_state='pending'\",\n );\n const row = depthResult.rows[0] as Record | undefined;\n return { event_key: eventKey, queue_depth: Number(row?.queue_depth || 0) };\n}\n\nexport async function markTwilioStatusForwarded(eventKey: string) {\n await ensureTwilioStatusQueue();\n await sqlite.execute({\n sql: `update twilio_status_fallback_queue\n set forward_state='forwarded',\n last_error=null,\n forwarded_at=datetime('now'),\n updated_at=datetime('now')\n where event_key=:event_key`,\n args: { event_key: clean(eventKey, 240) },\n });\n}\n\nexport async function markTwilioStatusForwardFailed(\n eventKey: string,\n reason: string,\n) {\n await ensureTwilioStatusQueue();\n await sqlite.execute({\n sql: `update twilio_status_fallback_queue\n set forward_state='pending',\n attempts=attempts+1,\n last_error=:last_error,\n updated_at=datetime('now')\n where event_key=:event_key and forward_state<>'forwarded'`,\n args: {\n event_key: clean(eventKey, 240),\n last_error: clean(reason, 160) || \"n8n_forward_failed\",\n },\n });\n}\n\nexport async function twilioStatusQueueHealth() {\n await ensureTwilioStatusQueue();\n const result = await sqlite.execute(`\n select\n count(*) filter (where forward_state='pending') as pending,\n count(*) filter (where forward_state='forwarded') as forwarded,\n coalesce(max(attempts),0) as max_attempts\n from twilio_status_fallback_queue\n `);\n const row = result.rows[0] as Record | undefined;\n return {\n durable_fallback: true,\n pending: Number(row?.pending || 0),\n forwarded: Number(row?.forwarded || 0),\n max_attempts: Number(row?.max_attempts || 0),\n };\n}\n\nexport async function replayQueuedTwilioStatuses(limit = 50) {\n await ensureTwilioStatusQueue();\n const safeLimit = Math.max(1, Math.min(50, Number(limit) || 50));\n const queued = await sqlite.execute({\n sql: `select event_key,payload_json,attempts\n from twilio_status_fallback_queue\n where forward_state='pending'\n order by created_at\n limit :limit`,\n args: { limit: safeLimit },\n });\n\n const events: Array> = [];\n for (const raw of queued.rows as Array>) {\n try {\n const parsed = JSON.parse(String(raw.payload_json || \"{}\"));\n if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) {\n events.push({\n ...(parsed as Record),\n event_key: clean(raw.event_key, 240),\n });\n }\n } catch {\n await markTwilioStatusForwardFailed(\n clean(raw.event_key, 240),\n \"invalid_queued_payload\",\n );\n }\n }\n\n if (!events.length) {\n return {\n ok: true,\n inspected: queued.rows.length,\n forwarded: 0,\n failed: 0,\n n8n_executions: 0,\n batch_execution: true,\n automatic_retry: false,\n secrets_exposed: false,\n };\n }\n\n let response: { status: number; payload: Record };\n try {\n response = await forwardTwilioStatusBatch(events);\n } catch {\n response = {\n status: 503,\n payload: { ok: false, error: \"n8n_unreachable\" },\n };\n }\n\n const resultRows = Array.isArray(response.payload.results)\n ? response.payload.results as Array>\n : [];\n const resultsByKey = new Map(\n resultRows.map((item) => [clean(item.event_key, 240), item]),\n );\n let forwarded = 0;\n let failed = 0;\n for (const event of events) {\n const eventKey = clean(event.event_key, 240);\n const item = resultsByKey.get(eventKey);\n if (\n response.status >= 200 &&\n response.status < 300 &&\n item?.ok === true\n ) {\n await markTwilioStatusForwarded(eventKey);\n forwarded += 1;\n } else {\n await markTwilioStatusForwardFailed(\n eventKey,\n clean(response.payload.error || \"n8n_batch_item_failed\", 160),\n );\n failed += 1;\n }\n }\n\n return {\n ok: failed === 0,\n inspected: queued.rows.length,\n forwarded,\n failed,\n n8n_executions: 1,\n batch_execution: true,\n automatic_retry: false,\n secrets_exposed: false,\n };\n}\n\nasync function sha256Hex(value: string): Promise {\n const digest = await crypto.subtle.digest(\n \"SHA-256\",\n new TextEncoder().encode(value),\n );\n return [...new Uint8Array(digest)]\n .map((byte) => byte.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nfunction canonicalForwardPayload(\n payload: Record,\n requestId: string,\n timestamp: string,\n): string {\n return [\n timestamp,\n requestId,\n clean(payload.schema_version, 16),\n clean(payload.tenant_id, 80),\n clean(payload.source, 80),\n clean(payload.message_sid, 64),\n clean(payload.message_status, 32),\n clean(payload.occurred_at, 64),\n ].join(\"|\");\n}\n\nasync function signedForwardHeaders(\n payload: Record,\n requestId: string,\n): Promise> {\n const timestamp = String(Math.floor(Date.now() / 1000));\n const keyHash = await sha256Hex(TOOL_SECRET);\n const signature = await sha256Hex(\n keyHash + \":\" + canonicalForwardPayload(payload, requestId, timestamp),\n );\n return {\n \"content-type\": \"application/json\",\n \"x-piscine-source\": \"valtown-twilio-status\",\n \"x-piscine-timestamp\": timestamp,\n \"x-piscine-signature\": signature,\n \"x-request-id\": requestId,\n };\n}\n\nfunction canonicalForwardBatch(\n body: Record,\n requestId: string,\n timestamp: string,\n): string {\n const events = Array.isArray(body.events) ? body.events : [];\n return [\n timestamp,\n requestId,\n clean(body.schema_version, 16),\n clean(body.tenant_id, 80),\n clean(body.source, 80),\n String(events.length),\n \"\",\n ].join(\"|\");\n}\n\nasync function signedForwardBatchHeaders(\n body: Record,\n requestId: string,\n): Promise> {\n const timestamp = String(Math.floor(Date.now() / 1000));\n const keyHash = await sha256Hex(TOOL_SECRET);\n const events = Array.isArray(body.events) ? body.events : [];\n const eventDigest = await sha256Hex(JSON.stringify(events));\n const canonical = canonicalForwardBatch(\n body,\n requestId,\n timestamp,\n ).replace(/\\|$/, \"|\" + eventDigest);\n const signature = await sha256Hex(keyHash + \":\" + canonical);\n return {\n \"content-type\": \"application/json\",\n \"x-piscine-source\": \"valtown-twilio-status\",\n \"x-piscine-timestamp\": timestamp,\n \"x-piscine-signature\": signature,\n \"x-request-id\": requestId,\n };\n}\n\nexport async function forwardTwilioStatusBatch(\n inputEvents: Array>,\n): Promise<{ status: number; payload: Record }> {\n const gateway = twilioStatusGatewayStatus();\n const events = inputEvents.slice(0, 50);\n if (!gateway.available || !gateway.n8n_configured || !events.length) {\n return {\n status: 503,\n payload: { ok: false, error: \"twilio_status_batch_forwarder_unavailable\" },\n };\n }\n\n const requestId = crypto.randomUUID();\n const budget = await reserveN8nExecution(\n \"callback_batch\",\n `twilio-status-batch:${requestId}`,\n { channel: \"twilio_status\", batch_size: events.length },\n );\n if (!budget.allowed) {\n return {\n status: 429,\n payload: {\n ok: false,\n error: budget.error || \"n8n_project_daily_budget_exhausted\",\n budget_blocked: true,\n },\n };\n }\n\n const body: Record = {\n schema_version: \"1.0\",\n tenant_id: TENANT,\n source: \"valtown-twilio-status-batch\",\n request_id: requestId,\n events,\n };\n const headers = await signedForwardBatchHeaders(body, requestId);\n const response = await fetch(`${N8N_BASE}/webhook/${STATUS_PATH}`, {\n method: \"POST\",\n headers,\n body: JSON.stringify(body),\n signal: AbortSignal.timeout(8000),\n });\n const raw = await response.text();\n let payload: Record;\n try {\n payload = JSON.parse(raw);\n } catch {\n payload = { ok: false, error: \"twilio_status_batch_invalid_response\" };\n }\n return { status: response.status, payload };\n}\n\nexport function twilioStatusGatewayStatus() {\n const n8n_configured = Boolean(N8N_BASE && STATUS_PATH && TOOL_SECRET);\n const auth_token_configured = Boolean(TWILIO_AUTH_TOKEN);\n return {\n published: STATUS_GATEWAY_PUBLISHED,\n activation_source: RECEIVER_ENABLED\n ? \"receiver_only_v2\"\n : LEGACY_STATUS_GATEWAY_PUBLISHED\n ? \"legacy_gate\"\n : \"none\",\n auth_token_configured,\n n8n_configured,\n available: STATUS_GATEWAY_PUBLISHED && auth_token_configured,\n durable_fallback: true,\n forwarder_configured: n8n_configured,\n forwarding_auth: \"signed_request_v2\" as const,\n forwarding_mode: \"batched\" as const,\n immediate_forward: false,\n max_batch_size: 50,\n mode: \"delivery_status_ingest_only\" as const,\n };\n}\n\nexport async function forwardTwilioStatus(\n payload: Record,\n): Promise<{ status: number; payload: Record }> {\n const gateway = twilioStatusGatewayStatus();\n if (!gateway.available || !gateway.n8n_configured) {\n return {\n status: 503,\n payload: { ok: false, error: \"twilio_status_forwarder_unavailable\" },\n };\n }\n\n const requestId = crypto.randomUUID();\n const budget = await reserveN8nExecution(\n \"production\",\n `twilio-status-single:${requestId}`,\n { channel: \"twilio_status\", legacy_single: true },\n );\n if (!budget.allowed) {\n return {\n status: 429,\n payload: {\n ok: false,\n error: budget.error || \"n8n_project_daily_budget_exhausted\",\n budget_blocked: true,\n },\n };\n }\n const headers = await signedForwardHeaders(payload, requestId);\n const response = await fetch(`${N8N_BASE}/webhook/${STATUS_PATH}`, {\n method: \"POST\",\n headers,\n body: JSON.stringify({ ...payload, request_id: requestId }),\n signal: AbortSignal.timeout(8000),\n });\n\n const body = await response.text();\n let parsed: Record;\n try {\n parsed = JSON.parse(body);\n } catch {\n parsed = { ok: false, error: \"twilio_status_ingest_invalid_response\" };\n }\n return { status: response.status, payload: parsed };\n}\n",[],[462,547],"3db9bc68-77b9-429b-8d7c-aa52e649f908","realtime-bridge.ts","019f675d-aa00-73de-b62f-eda9d967a54f",10,["D",1784146196659],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {\n openN8nCircuit,\n reserveN8nExecution,\n secondsUntilNextMonthReset,\n type N8nBudgetCategory,\n} from \"./n8n-budget.ts\";\nimport {\n claimQueuedBusinessActions,\n completeQueuedBusinessAction,\n failQueuedBusinessAction,\n isQueueableBusinessAction,\n queueBusinessAction,\n} from \"./business-queue.ts\";\n\nexport type CallContext = {\n call_id: string;\n from_number: string;\n to_number: string;\n started_at: string;\n tenant_id?: string;\n organization_name?: string;\n vertical_key?: string;\n vertical_display_name?: string;\n timezone?: string;\n assistant_config?: Record;\n};\n\nconst N8N_BASE = (Deno.env.get(\"PISCINE_N8N_BASE\") || \"\").replace(/\\/$/, \"\");\nconst INTERNAL_PATH = (Deno.env.get(\"PISCINE_N8N_INTERNAL_PATH\") || \"\").trim();\nconst TOOL_SECRET = Deno.env.get(\"PISCINE_TOOL_SECRET\") || \"\";\nconst TENANT = Deno.env.get(\"PISCINE_TENANT\") || \"pisciniste_01\";\nconst EVENT_PATH = Deno.env.get(\"PISCINE_OPENAI_EVENT_PATH\") || \"secretariat-pisciniste-openai-events\";\n\nfunction clean(value: unknown, max = 4000): string {\n return String(value ?? \"\").trim().slice(0, max);\n}\n\nexport function normalizePhone(value: unknown): string {\n const input = clean(value, 200);\n const match = input.match(/(?:sip:|tel:)?(\\+?[0-9]{6,15})/i);\n return (match?.[1] || \"\").replace(/[^+0-9]/g, \"\");\n}\n\nexport function bridgeConfigured(): boolean {\n return Boolean(N8N_BASE && INTERNAL_PATH && TOOL_SECRET);\n}\n\nasync function postJson(\n url: string,\n body: Record,\n timeoutMs: number,\n budgetPurpose = \"realtime\",\n budgetCategory: N8nBudgetCategory = \"production\",\n reservationKey?: string,\n): Promise> {\n const budget = await reserveN8nExecution(\n budgetCategory,\n reservationKey || `realtime:${budgetPurpose}:${crypto.randomUUID()}`,\n { channel: \"valtown_realtime\", purpose: budgetPurpose },\n );\n if (!budget.allowed) {\n return {\n ok: false,\n error: clean(budget.error || \"n8n_project_daily_budget_exhausted\", 120),\n budget_blocked: true,\n };\n }\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), timeoutMs);\n try {\n const response = await fetch(url, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-source\": \"valtown-realtime\",\n \"x-piscine-tool-secret\": TOOL_SECRET,\n \"x-request-id\": crypto.randomUUID(),\n },\n body: JSON.stringify(body),\n signal: controller.signal,\n });\n const raw = (await response.text()).slice(0, 100_000);\n if (/execution limit reached|max executions|quota.*execution/i.test(raw)) {\n await openN8nCircuit(\"n8n_account_execution_limit_reached\", secondsUntilNextMonthReset());\n return {\n ok: false,\n error: \"n8n_account_execution_limit_reached\",\n budget_blocked: true,\n circuit_opened: true,\n };\n }\n let payload: Record = {};\n try {\n payload = raw ? JSON.parse(raw) : {};\n } catch {\n payload = { ok: false, error: \"invalid_upstream_json\" };\n }\n if (!response.ok) {\n return { ok: false, error: clean(payload.error || `upstream_${response.status}`, 120), status: response.status };\n }\n return payload;\n } catch (error) {\n return {\n ok: false,\n error: error instanceof DOMException && error.name === \"AbortError\" ? \"upstream_timeout\" : \"upstream_unavailable\",\n };\n } finally {\n clearTimeout(timer);\n }\n}\n\nexport async function callBusinessTool(\n action: string,\n args: Record,\n call: CallContext,\n): Promise> {\n const tenantId = clean(call.tenant_id || TENANT, 80);\n const verticalKey = clean(call.vertical_key || \"general_services\", 64);\n const assetType = clean(args.asset_type || args.pool_type, 180);\n const data = {\n ...args,\n tenant_id: tenantId,\n vertical_key: verticalKey,\n organization_name: clean(call.organization_name || \"\", 120),\n asset_type: assetType || undefined,\n pool_type: clean(args.pool_type || (verticalKey === \"pool_service\" ? assetType : \"\"), 180) || undefined,\n customer_phone: clean(args.customer_phone || call.from_number, 40),\n request_id: clean(args.request_id || `${call.call_id}:${action}:${crypto.randomUUID()}`, 240),\n };\n if (!bridgeConfigured()) {\n return isQueueableBusinessAction(action)\n ? await queueBusinessAction(action, data, call.call_id, \"business_bridge_not_configured\")\n : {\n ok: false,\n action_completed: false,\n error: \"business_bridge_not_configured\",\n safe_to_announce: true,\n requires_human: true,\n assistant_message: \"Cette vérification est momentanément indisponible. L’équipe doit vous rappeler.\",\n };\n }\n const timeoutByAction: Record = {\n client_context: 3_000,\n update_client: 4_500,\n knowledge_lookup: 4_500,\n next_best_action: 4_500,\n check_availability: 5_500,\n create_lead: 6_000,\n estimate_quote: 5_500,\n create_quote: 7_000,\n book_appointment: 6_500,\n cancel_appointment: 5_500,\n save_call_summary: 4_500,\n transfer_to_human: 5_500,\n };\n const result = await postJson(`${N8N_BASE}/webhook/${INTERNAL_PATH}`, {\n args: { action, data },\n call: {\n call_id: call.call_id,\n from_number: call.from_number,\n to_number: call.to_number,\n tenant_id: tenantId,\n vertical_key: verticalKey,\n provider: \"openai_realtime\",\n },\n }, timeoutByAction[action] || 6_000, `business_tool:${action}`);\n\n const unavailable = result.ok === false && (\n result.error === \"upstream_timeout\"\n || result.error === \"upstream_unavailable\"\n || result.error === \"n8n_circuit_open\"\n || result.error === \"n8n_account_execution_limit_reached\"\n || result.budget_blocked === true\n );\n if (unavailable && isQueueableBusinessAction(action)) {\n return queueBusinessAction(action, data, call.call_id, String(result.error || \"upstream_unavailable\"));\n }\n if (unavailable) {\n return {\n ...result,\n action_completed: false,\n safe_to_announce: true,\n requires_human: true,\n assistant_message: \"Cette vérification est momentanément indisponible. L’équipe doit vous rappeler.\",\n };\n }\n return result;\n}\n\nexport async function replayQueuedBusinessActions(limit = 20) {\n if (!bridgeConfigured()) {\n return { ok: false, replayed: 0, error: \"business_bridge_not_configured\" };\n }\n const queued = await claimQueuedBusinessActions(limit);\n if (!queued.length) return { ok: true, replayed: 0, pending: 0 };\n\n let replayed = 0;\n let failed = 0;\n for (const item of queued) {\n const result = await postJson(`${N8N_BASE}/webhook/${INTERNAL_PATH}`, {\n args: { action: item.action, data: item.payload },\n call: {\n call_id: item.call_id,\n from_number: clean(item.payload.customer_phone, 40),\n provider: \"openai_realtime_recovery\",\n },\n }, 8_000, `business_replay:${item.action}`, \"callback_batch\",\n `recovery:business:${item.queue_id}:attempt:${Number(item.attempts || 0) + 1}`);\n if (result.ok === false) {\n failed += 1;\n await failQueuedBusinessAction(item.queue_id, String(result.error || \"replay_failed\"), 86400);\n if (result.budget_blocked === true || result.error === \"n8n_circuit_open\") break;\n } else {\n replayed += 1;\n await completeQueuedBusinessAction(item.queue_id);\n }\n }\n return { ok: failed === 0, replayed, failed, inspected: queued.length };\n}\n\nconst VOICE_EVENT_BUFFER_SCHEMA = `create table if not exists voice_event_buffer (\n event_id text primary key,\n call_id text not null,\n event_type text not null,\n payload_json text not null,\n forward_state text not null default 'pending',\n attempt_count integer not null default 0,\n last_error text,\n next_attempt_at integer not null default 0,\n created_at text not null,\n forwarded_at text\n)`;\n\nlet voiceEventBufferReady: Promise | null = null;\n\nasync function ensureVoiceEventBuffer(): Promise {\n if (!voiceEventBufferReady) {\n voiceEventBufferReady = (async () => {\n await sqlite.execute(VOICE_EVENT_BUFFER_SCHEMA);\n for (const statement of [\n \"alter table voice_event_buffer add column attempt_count integer not null default 0\",\n \"alter table voice_event_buffer add column last_error text\",\n \"alter table voice_event_buffer add column next_attempt_at integer not null default 0\",\n ]) {\n try {\n await sqlite.execute(statement);\n } catch {\n // Colonne déjà présente.\n }\n }\n await sqlite.execute(\n \"create index if not exists voice_event_buffer_pending_idx on voice_event_buffer(forward_state,next_attempt_at,created_at)\",\n );\n })().catch((error) => {\n voiceEventBufferReady = null;\n throw error;\n });\n }\n await voiceEventBufferReady;\n}\n\nasync function bufferVoiceEvent(\n event: Record,\n call: CallContext,\n): Promise<{ event_id: string; pending_for_call: number; event_type: string }> {\n await ensureVoiceEventBuffer();\n const eventType = clean(event.event_type || \"unknown\", 80);\n const eventId = clean(\n event.event_id || `${call.call_id}:${eventType}:${crypto.randomUUID()}`,\n 240,\n );\n const payload = {\n tenant_id: clean(call.tenant_id || TENANT, 80),\n provider: \"openai_realtime\",\n call_id: call.call_id,\n from_number: call.from_number,\n to_number: call.to_number,\n started_at: call.started_at,\n ...event,\n event_id: eventId,\n };\n await sqlite.execute({\n sql: `insert or ignore into voice_event_buffer (\n event_id,call_id,event_type,payload_json,forward_state,created_at\n ) values (\n :event_id,:call_id,:event_type,:payload_json,'pending',datetime('now')\n )`,\n args: {\n event_id: eventId,\n call_id: clean(call.call_id, 240),\n event_type: eventType,\n payload_json: JSON.stringify(payload).slice(0, 100_000),\n },\n });\n const count = await sqlite.execute({\n sql: `select count(*) as pending\n from voice_event_buffer\n where call_id=:call_id and forward_state='pending'`,\n args: { call_id: clean(call.call_id, 240) },\n });\n return {\n event_id: eventId,\n event_type: eventType,\n pending_for_call: Number((count.rows[0] as Record | undefined)?.pending || 0),\n };\n}\n\nasync function markVoiceCallForwarded(callId: string) {\n await ensureVoiceEventBuffer();\n await sqlite.execute({\n sql: `update voice_event_buffer\n set forward_state='forwarded',forwarded_at=datetime('now'),last_error=null\n where call_id=:call_id and forward_state='pending'`,\n args: { call_id: clean(callId, 240) },\n });\n}\n\nexport async function voiceEventBufferStatus() {\n await ensureVoiceEventBuffer();\n const totals = await sqlite.execute(`select\n count(*) filter(where forward_state='pending') as pending_events,\n count(*) filter(where forward_state='forwarded') as forwarded_events,\n min(created_at) filter(where forward_state='pending') as oldest_pending\n from voice_event_buffer`);\n const ready = await sqlite.execute(`select count(*) as ready_calls from (\n select call_id\n from voice_event_buffer\n where forward_state='pending' and next_attempt_at<=unixepoch()\n group by call_id\n having max(case when event_type='call.ended' then 1 else 0 end)=1\n )`);\n return {\n ok: true,\n ...((totals.rows[0] as Record) || {}),\n ready_calls: Number((ready.rows[0] as Record | undefined)?.ready_calls || 0),\n };\n}\n\nexport async function replayBufferedVoiceCalls(limit = 2) {\n await ensureVoiceEventBuffer();\n if (!N8N_BASE || !TOOL_SECRET) {\n return { ok: false, replayed: 0, failed: 0, error: \"event_bridge_not_configured\" };\n }\n const safeLimit = Math.max(1, Math.min(8, Number(limit) || 2));\n const ready = await sqlite.execute({\n sql: `select call_id,max(created_at) as ended_at\n from voice_event_buffer\n where forward_state='pending' and next_attempt_at<=unixepoch()\n group by call_id\n having max(case when event_type='call.ended' then 1 else 0 end)=1\n order by ended_at asc\n limit :limit`,\n args: { limit: safeLimit },\n });\n let replayed = 0;\n let failed = 0;\n for (const callRow of ready.rows as Array>) {\n const callId = clean(callRow.call_id, 240);\n const events = await sqlite.execute({\n sql: `select event_type,payload_json,attempt_count\n from voice_event_buffer\n where call_id=:call_id and forward_state='pending'\n order by created_at asc`,\n args: { call_id: callId },\n });\n const rows = events.rows as Array>;\n const finalRow = [...rows].reverse().find((row) => row.event_type === \"call.ended\");\n let finalPayload: Record | null = null;\n try {\n const parsed = JSON.parse(String(finalRow?.payload_json || \"\"));\n if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) finalPayload = parsed;\n } catch {\n finalPayload = null;\n }\n if (!finalPayload) {\n failed += 1;\n await sqlite.execute({\n sql: `update voice_event_buffer\n set attempt_count=attempt_count+1,last_error='invalid_final_payload',\n next_attempt_at=unixepoch()+86400\n where call_id=:call_id and forward_state='pending'`,\n args: { call_id: callId },\n });\n continue;\n }\n const attempt = Math.max(0, ...rows.map((row) => Number(row.attempt_count || 0))) + 1;\n const result = await postJson(\n `${N8N_BASE}/webhook/${EVENT_PATH}`,\n {\n ...finalPayload,\n buffered_event_count: rows.length,\n recovered_from_buffer: true,\n recovery_attempt: attempt,\n },\n 8_000,\n \"voice_call_replay\",\n \"callback_batch\",\n `recovery:voice:${callId}:attempt:${attempt}`,\n );\n if (result.ok === false) {\n failed += 1;\n const delay = Math.min(86400, 900 * (2 ** Math.min(attempt, 6)));\n await sqlite.execute({\n sql: `update voice_event_buffer\n set attempt_count=attempt_count+1,last_error=:last_error,\n next_attempt_at=unixepoch()+:delay\n where call_id=:call_id and forward_state='pending'`,\n args: {\n call_id: callId,\n last_error: clean(result.error || \"voice_replay_failed\", 240),\n delay,\n },\n });\n if (result.budget_blocked === true || result.error === \"n8n_circuit_open\") break;\n } else {\n replayed += 1;\n await markVoiceCallForwarded(callId);\n }\n }\n await sqlite.execute(\n \"delete from voice_event_buffer where forward_state='forwarded' and forwarded_at,\n call: CallContext,\n): Promise> {\n const buffered = await bufferVoiceEvent(event, call);\n if (buffered.event_type !== \"call.ended\") {\n return {\n ok: true,\n buffered: true,\n forwarded: false,\n pending_for_call: buffered.pending_for_call,\n };\n }\n if (!N8N_BASE || !TOOL_SECRET) {\n return {\n ok: true,\n buffered: true,\n forwarded: false,\n error: \"event_bridge_not_configured\",\n pending_for_call: buffered.pending_for_call,\n };\n }\n const result = await postJson(`${N8N_BASE}/webhook/${EVENT_PATH}`, {\n tenant_id: clean(call.tenant_id || TENANT, 80),\n provider: \"openai_realtime\",\n call_id: call.call_id,\n from_number: call.from_number,\n to_number: call.to_number,\n started_at: call.started_at,\n buffered_event_count: buffered.pending_for_call,\n ...event,\n }, 8_000, \"voice_call_final\");\n if (result.ok !== false) await markVoiceCallForwarded(call.call_id);\n return {\n ...result,\n buffered: true,\n forwarded: result.ok !== false,\n buffered_event_count: buffered.pending_for_call,\n };\n}\n\n\nexport async function deliverQuote(\n devisId: unknown,\n channel: unknown,\n): Promise> {\n const id = clean(devisId, 80);\n const deliveryChannel = clean(channel, 20).toLowerCase();\n if (!N8N_BASE || !TOOL_SECRET) {\n return { ok: false, action_completed: false, error: \"delivery_bridge_not_configured\" };\n }\n if (!/^[0-9a-f-]{36}$/i.test(id)) {\n return { ok: false, action_completed: false, error: \"invalid_quote_id\" };\n }\n if (!['sms', 'email'].includes(deliveryChannel)) {\n return { ok: false, action_completed: false, error: \"invalid_delivery_channel\" };\n }\n const result = await postJson(`${N8N_BASE}/webhook/sp-document-delivery-v1`, {\n document_type: \"quote\",\n devis_id: id,\n delivery_channel: deliveryChannel,\n }, deliveryChannel === \"email\" ? 18_000 : 12_000, `quote_delivery:${deliveryChannel}`);\n if (result.ok === false) {\n const error = clean(result.error, 120);\n return {\n ...result,\n action_completed: false,\n delivery_channel: deliveryChannel,\n safe_to_announce: true,\n assistant_message: error === \"sms_not_configured\"\n ? \"L’envoi par SMS n’est pas disponible sur ce numéro. Proposez l’envoi par email.\"\n : error === \"email_missing\"\n ? \"Il manque l’adresse email du client. Demandez-la, mettez la fiche à jour, puis relancez l’envoi.\"\n : \"Le devis est généré mais l’envoi n’a pas abouti. N’annoncez pas qu’il a été envoyé.\",\n };\n }\n return {\n ...result,\n ok: true,\n action_completed: true,\n delivery_channel: deliveryChannel,\n safe_to_announce: true,\n assistant_message: deliveryChannel === \"email\"\n ? \"Le devis estimatif a bien été envoyé par email.\"\n : \"Le devis estimatif a bien été envoyé par SMS.\",\n };\n}\n",[],[462,554],"fbe7dbf9-78be-4f57-bfba-02b4d8ea3398","realtime-agent.ts","019f675d-aa00-73de-b62f-ea02a348926e",8,["D",1784146167831],"export type RealtimeTool = {\n type: \"function\";\n name: string;\n description: string;\n parameters: Record;\n};\n\nexport const POOL_ROLE_PROMPT = `# RÔLE\nTu es la secrétaire téléphonique d’une entreprise de piscine. Tu accueilles, comprends le besoin, qualifies le dossier, prends les rendez-vous, prépare les estimations et clôtures les appels comme le ferait une secrétaire expérimentée.\n\n# FAÇON DE PARLER\n- Parle comme une personne, jamais comme un serveur vocal.\n- Réponds généralement en une ou deux phrases courtes.\n- Pose une seule question à la fois, uniquement quand sa réponse est utile à l’action suivante.\n- Ne répète pas la demande du client sauf pour corriger une ambiguïté importante.\n- N’enchaîne pas les « très bien », « parfait », « d’accord » à chaque tour. Varie naturellement ou réponds directement.\n- Évite les listes orales, les formulations administratives et les longs récapitulatifs.\n- Laisse le client finir sa phrase et accepte qu’il t’interrompe.\n- Utilise un français de France simple, chaleureux et professionnel.\n\n# DATES ET HEURES À L’ORAL\n- Utilise uniquement le champ spoken_label renvoyé par l’outil.\n- Ne prononce jamais une heure sous la forme « zéro neuf heures », « neuf zéro zéro », « 09:00 » ou une date ISO.\n- Dis par exemple : « mercredi matin à neuf heures », « vers midi », « jeudi après-midi à quatorze heures trente ».\n- Quand un seul créneau demandé est libre, dis simplement qu’il est disponible ; ne propose pas trois autres horaires.\n\n# QUALIFICATION CLIENT\nLe numéro appelant est déjà connu du système.\n- Pour un nouveau client, demande naturellement le prénom, puis le nom, sans annoncer une liste de questions.\n- Demande une seule fois : « Je pourrai vous joindre sur le numéro avec lequel vous appelez ? »\n- Si la réponse est non, demande le numéro à utiliser et enregistre-le.\n- Demande l’adresse complète uniquement lorsqu’une intervention ou un rendez-vous sur place est envisagé.\n- Demande l’email uniquement si le client choisit l’envoi par email et qu’il n’est pas déjà connu.\n- Pour un client connu, ne redemande jamais une information déjà présente, sauf si tu dois vérifier qu’elle est toujours correcte.\n- Après avoir obtenu de nouvelles coordonnées, utilise update_client sans commenter l’opération technique.\n\n# CONDUITE DE L’APPEL\n1. Comprends d’abord le besoin. Une ou deux questions ciblées suffisent généralement.\n2. Enregistre la demande dès que le problème est clair.\n3. Agis immédiatement quand le client demande un rendez-vous, une estimation ou un envoi.\n4. Ne promets jamais une action avant le résultat de l’outil.\n\n# RENDEZ-VOUS\n- Si le client donne une date et une heure précises, vérifie ce créneau immédiatement.\n- S’il est disponible et que l’adresse est connue, réserve-le directement. Ne demande pas un « oui » supplémentaire.\n- Si le client choisit l’un des créneaux que tu viens de proposer, ce choix suffit pour réserver.\n- Demande une clarification seulement si la date, l’heure ou l’adresse est réellement ambiguë.\n- Si le créneau n’est plus libre, propose les nouvelles disponibilités sans recommencer toute la qualification.\n- Après succès, annonce une seule fois le rendez-vous avec le spoken_slot et l’adresse utile.\n- Si le client demande clairement d’annuler son prochain rendez-vous, utilise l’identifiant présent dans le contexte CRM, annule-le immédiatement et confirme l’annulation une seule fois.\n\n# DEVIS ESTIMATIF\n- Après avoir compris le problème, tu peux proposer spontanément une estimation utile, sans insister.\n- Utilise estimate_quote : annonce la fourchette TTC une seule fois et précise brièvement qu’elle reste à confirmer après diagnostic.\n- Demande ensuite : « Vous préférez que je vous l’envoie par SMS ou par email ? »\n- Pour un email, collecte l’adresse manquante puis mets la fiche à jour.\n- Utilise create_and_send_quote pour générer le vrai devis estimatif dans le format du cockpit et déclencher l’envoi choisi.\n- N’annonce l’envoi que si l’outil confirme action_completed=true.\n- Si le SMS n’est pas disponible, propose simplement l’email, sans explication technique.\n\n# VERROU DE COMPLÉTUDE\n- Ne termine jamais un appel utile avec seulement une formule vague. Avant complete_call, assure-toi d’avoir un résumé factuel, l’intention et le niveau d’urgence.\n- Pour une demande à traiter, le besoin doit être clair, l’identité utile doit être connue et la demande doit avoir été enregistrée ou mise en attente par un outil.\n- Pour un rendez-vous sur place, collecte l’adresse complète et le créneau exact. N’utilise appointment_booked que si l’outil confirme réellement la réservation.\n- N’utilise quote_sent que si l’envoi est réellement confirmé. Pour un email, l’adresse email doit être connue.\n- Une synchronisation en attente n’est ni une réservation ni un envoi confirmé : dis simplement que la demande est prise en charge et reste à confirmer.\n- Si complete_call répond needs_more_information=true, ne prends pas congé. Pose uniquement la next_question indiquée ou exécute la required_action, puis réessaie.\n- Une exception de qualification n’est permise que si le client refuse explicitement de répondre, devient abusif, si une urgence impose de conclure vite, ou si aucune action métier n’était nécessaire.\n\n# FIN D’APPEL\n- Quand le besoin est traité, fais un récapitulatif d’une seule phrase avec uniquement les actions réellement réalisées.\n- Ne demande pas plusieurs fois s’il reste autre chose.\n- Si le client remercie, dit au revoir ou n’a plus de demande, utilise complete_call seulement après le verrou de complétude.\n- Après complete_call autorisé, prononce une formule de fin courte et naturelle, puis laisse le système raccrocher.\n\n# LIMITES ET SÉCURITÉ\nTu traites uniquement les sujets liés à la piscine et à l’entreprise : dépannage, entretien, eau, équipements, travaux, rendez-vous, devis et suivi.\nN’invente jamais un diagnostic, un tarif ferme, une disponibilité, un envoi ou une garantie.\nEn cas de risque électrique, local technique inondé, fuite majeure ou danger corporel, conseille brièvement de sécuriser la zone sans se mettre en danger puis crée une demande urgente ou un rappel humain.\nNe prononce jamais le nom d’un outil, du JSON, un identifiant ou un message d’erreur.`;\n\nexport const ROLE_PROMPT = `# RÔLE\nTu es la secrétaire téléphonique de l’entreprise dont le profil métier sera chargé par le système. Tu accueilles le client, comprends son besoin, qualifies le dossier et aides sur les rendez-vous, devis, factures et suivis autorisés.\n\n# FAÇON DE PARLER\n- Parle comme une personne, en français de France naturel, chaleureux et professionnel.\n- Réponds généralement en une ou deux phrases courtes et pose une seule question utile à la fois.\n- Ne répète pas inutilement la demande et accepte que le client t’interrompe.\n- Le premier accueil doit commencer immédiatement, sans attendre les données externes.\n\n# VÉRITÉ OPÉRATIONNELLE\n- Utilise un outil pour toute donnée d’entreprise, disponibilité, création ou envoi.\n- Ne promets jamais une action avant son résultat réel.\n- Ne présente jamais une action en attente comme exécutée ou livrée.\n- Ne prononce jamais le nom d’un outil, du JSON, un identifiant ou une erreur technique.\n- N’invente ni diagnostic, ni tarif ferme, ni garantie.\n\n# QUALIFICATION\n- Le numéro appelant est déjà connu du système.\n- Ne redemande pas une information déjà présente dans la fiche.\n- Demande les coordonnées et l’adresse uniquement lorsqu’elles sont utiles à la suite.\n- Demande l’e-mail si le client choisit ce canal et qu’il n’est pas déjà connu.\n- Enregistre la demande dès que le besoin est suffisamment clair.\n\n# LIMITES\nReste strictement dans le métier et les services décrits dans le contexte serveur. Si le métier n’est pas chargé, limite-toi à l’accueil administratif générique, prends un message et n’invente aucune spécialité.`;\n\nconst objectSchema = (properties: Record, required: string[] = []) => ({\n type: \"object\",\n properties,\n required,\n additionalProperties: false,\n});\n\nconst text = (description: string) => ({ type: \"string\", description });\n\nexport const REALTIME_TOOLS: RealtimeTool[] = [\n {\n type: \"function\",\n name: \"client_context\",\n description: \"Lire la fiche liée au numéro appelant et les informations encore manquantes. Lecture seule.\",\n parameters: objectSchema({}),\n },\n {\n type: \"function\",\n name: \"update_client\",\n description: \"Enregistrer immédiatement les coordonnées ou préférences que le client vient de communiquer. Ne pas redemander les champs déjà connus.\",\n parameters: objectSchema({\n first_name: text(\"Prénom du client.\"),\n last_name: text(\"Nom de famille du client.\"),\n email: text(\"Adresse email communiquée.\"),\n address: text(\"Numéro et voie de l’adresse d’intervention.\"),\n postal_code: text(\"Code postal.\"),\n city: text(\"Ville.\"),\n phone_reachable: { type: \"boolean\", description: \"Vrai si le client confirme être joignable sur le numéro appelant.\" },\n alternate_phone: text(\"Autre numéro à utiliser si le numéro appelant ne convient pas.\"),\n preferred_contact_channel: { type: \"string\", enum: [\"telephone\", \"sms\", \"email\"], description: \"Canal préféré exprimé par le client.\" },\n }),\n },\n {\n type: \"function\",\n name: \"create_lead\",\n description: \"Créer ou compléter la demande dès que le besoin métier est compris. Utiliser les champs et la terminologie du profil serveur.\",\n parameters: objectSchema({\n first_name: text(\"Prénom si connu.\"),\n last_name: text(\"Nom si connu.\"),\n customer_name: text(\"Nom complet si le client l’a donné en une seule fois.\"),\n address: text(\"Adresse si connue.\"),\n postal_code: text(\"Code postal si connu.\"),\n city: text(\"Ville si connue.\"),\n asset_type: text(\"Type d’installation, d’équipement ou d’actif métier si connu.\"),\n pool_type: text(\"Alias de compatibilité réservé au métier piscine.\"),\n business_fields: { type: \"object\", description: \"Champs structurés propres au métier, selon intake_schema du contexte serveur.\", additionalProperties: true },\n problem: text(\"Description factuelle du besoin.\"),\n intent: { type: \"string\", enum: [\"depannage\", \"entretien\", \"installation\", \"mise_en_securite\", \"conformite\", \"devis\", \"rendez_vous\", \"construction\", \"renovation\", \"suivi\", \"autre\"] },\n urgency: { type: \"string\", enum: [\"basse\", \"normale\", \"haute\", \"urgente\"] },\n }, [\"problem\", \"intent\", \"urgency\"]),\n },\n {\n type: \"function\",\n name: \"check_availability\",\n description: \"Vérifier le créneau exact demandé ou chercher les premiers créneaux libres. Si une date et une heure sont données, les transmettre précisément.\",\n parameters: objectSchema({\n appointment_datetime: text(\"Date et heure souhaitées au format ISO 8601 avec fuseau horaire.\"),\n preferred_period: { type: \"string\", enum: [\"matin\", \"apres_midi\", \"indifferent\"] },\n duration_min: { type: \"number\", description: \"Durée estimée, généralement 60 minutes.\" },\n }),\n },\n {\n type: \"function\",\n name: \"book_appointment\",\n description: \"Réserver le créneau exact demandé ou sélectionné. Aucun oui supplémentaire n’est requis quand le choix du client est déjà explicite.\",\n parameters: objectSchema({\n appointment_datetime: text(\"Créneau exact au format ISO 8601, repris du résultat de disponibilité.\"),\n address: text(\"Adresse d’intervention si elle vient d’être communiquée.\"),\n appointment_type: text(\"Motif court du rendez-vous.\"),\n duration_min: { type: \"number\", description: \"Durée du créneau.\" },\n first_name: text(\"Prénom si nouvellement communiqué.\"),\n last_name: text(\"Nom si nouvellement communiqué.\"),\n phone_reachable: { type: \"boolean\", description: \"Confirmation de joignabilité sur le numéro appelant si connue.\" },\n alternate_phone: text(\"Numéro alternatif si nécessaire.\"),\n }, [\"appointment_datetime\"]),\n },\n {\n type: \"function\",\n name: \"cancel_appointment\",\n description: \"Annuler un rendez-vous existant lorsque le client le demande clairement. Utiliser uniquement l’identifiant du prochain rendez-vous présent dans le contexte CRM ou retourné pendant cet appel.\",\n parameters: objectSchema({\n appointment_id: text(\"Identifiant interne du rendez-vous à annuler.\"),\n reason: text(\"Motif court donné par le client, si disponible.\"),\n }, [\"appointment_id\"]),\n },\n {\n type: \"function\",\n name: \"estimate_quote\",\n description: \"Calculer une fourchette estimative à partir du problème décrit et du catalogue interne. Lecture seule, montant non contractuel.\",\n parameters: objectSchema({\n problem: text(\"Problème, installation, équipement ou prestation à estimer avec les précisions données par le client.\"),\n asset_type: text(\"Type d’installation, d’équipement ou d’actif métier si connu.\"),\n pool_type: text(\"Alias de compatibilité réservé au métier piscine.\"),\n }, [\"problem\"]),\n },\n {\n type: \"function\",\n name: \"create_and_send_quote\",\n description: \"Créer le devis estimatif dans le format du cockpit puis l’envoyer réellement par le canal choisi.\",\n parameters: objectSchema({\n problem: text(\"Description complète servant de base à l’estimation.\"),\n delivery_channel: { type: \"string\", enum: [\"sms\", \"email\"], description: \"Canal choisi explicitement par le client.\" },\n first_name: text(\"Prénom.\"),\n last_name: text(\"Nom de famille.\"),\n customer_name: text(\"Nom complet si fourni en une seule fois.\"),\n email: text(\"Email obligatoire pour un envoi par email s’il n’est pas déjà en fiche.\"),\n address: text(\"Adresse si connue.\"),\n postal_code: text(\"Code postal si connu.\"),\n city: text(\"Ville si connue.\"),\n asset_type: text(\"Type d’installation, d’équipement ou d’actif métier.\"),\n pool_type: text(\"Alias de compatibilité réservé au métier piscine.\"),\n business_fields: { type: \"object\", description: \"Champs structurés propres au métier.\", additionalProperties: true },\n phone_reachable: { type: \"boolean\", description: \"Joignabilité sur le numéro appelant.\" },\n alternate_phone: text(\"Numéro alternatif.\"),\n }, [\"problem\", \"delivery_channel\"]),\n },\n {\n type: \"function\",\n name: \"knowledge_lookup\",\n description: \"Consulter une information métier validée avant une réponse technique ou commerciale précise.\",\n parameters: objectSchema({ query: text(\"Question métier courte.\") }, [\"query\"]),\n },\n {\n type: \"function\",\n name: \"transfer_to_human\",\n description: \"Transférer vers un humain si possible ou créer une demande de rappel.\",\n parameters: objectSchema({\n problem: text(\"Raison factuelle du transfert ou du rappel.\"),\n urgency: { type: \"string\", enum: [\"normale\", \"haute\", \"urgente\"] },\n }, [\"problem\"]),\n },\n {\n type: \"function\",\n name: \"complete_call\",\n description: \"Enregistrer le résultat final puis terminer proprement l’appel quand aucune action ou question n’est encore en attente.\",\n parameters: objectSchema({\n summary: text(\"Résumé court : identité utile, besoin, coordonnées qualifiées et actions réellement terminées.\"),\n intent: { type: \"string\", enum: [\"depannage\", \"entretien\", \"installation\", \"mise_en_securite\", \"conformite\", \"devis\", \"rendez_vous\", \"construction\", \"renovation\", \"suivi\", \"information\", \"autre\"], description: \"Intention principale normalisée selon le métier.\" },\n urgency: { type: \"string\", enum: [\"basse\", \"normale\", \"haute\", \"urgente\"] },\n sentiment: { type: \"string\", enum: [\"positif\", \"neutre\", \"inquiet\", \"frustre\", \"urgent\"] },\n closing_reason: { type: \"string\", enum: [\"resolved\", \"appointment_booked\", \"quote_sent\", \"callback_created\", \"client_finished\"] },\n qualification_exception: {\n type: \"string\",\n enum: [\"caller_refused\", \"caller_abusive\", \"emergency_handled\", \"no_action_needed\"],\n description: \"À renseigner uniquement si cette exception a réellement eu lieu ; ne jamais l’utiliser pour éviter une question utile.\"\n },\n }, [\"summary\", \"intent\", \"urgency\", \"closing_reason\"]),\n },\n];\n\nexport function buildSessionInstructions(\n context: Record | null,\n fromNumber: string,\n businessContext: Record | null = null,\n): string {\n const compact = context ? JSON.stringify(context).slice(0, 8000) : \"indisponible\";\n const business = businessContext && typeof businessContext === \"object\"\n ? businessContext\n : {};\n const verticalKey = String(business.vertical_key || \"\");\n const organization = String(business.organization_name || \"l’entreprise\").slice(0, 120);\n const vertical = String(business.vertical_display_name || \"services\").slice(0, 80);\n const assistantConfig = business.assistant_config\n && typeof business.assistant_config === \"object\"\n ? JSON.stringify(business.assistant_config).slice(0, 5000)\n : \"{}\";\n const timezone = String(business.timezone || \"Europe/Paris\").slice(0, 80);\n let currentTime: string;\n try {\n currentTime = new Intl.DateTimeFormat(\"fr-FR\", {\n timeZone: timezone,\n dateStyle: \"full\",\n timeStyle: \"long\",\n }).format(new Date());\n } catch {\n currentTime = new Intl.DateTimeFormat(\"fr-FR\", {\n timeZone: \"Europe/Paris\",\n dateStyle: \"full\",\n timeStyle: \"long\",\n }).format(new Date());\n }\n const rolePrompt = verticalKey === \"pool_service\" ? POOL_ROLE_PROMPT : ROLE_PROMPT;\n return `${rolePrompt}\n\n# ENTREPRISE ET MÉTIER VÉRIFIÉS\nOrganisation : ${organization}\nMétier : ${vertical}\nConfiguration métier : ${assistantConfig}\nCes informations viennent du routage serveur par numéro appelé. Ne les remplace jamais par une affirmation de l’appelant.\n\n# CONTEXTE DE CET APPEL\nDate et heure locale : ${currentTime}.\nNuméro appelant : ${fromNumber || \"inconnu\"}.\nFiche CRM et informations manquantes : ${compact}.\nLe contexte CRM est fiable. Utilise-le silencieusement et ne redemande que ce qui manque pour l’action en cours.`;\n}\n\nexport function buildAcceptConfig(model: string, voice: string) {\n return {\n type: \"realtime\",\n model,\n instructions: ROLE_PROMPT,\n output_modalities: [\"audio\"],\n audio: {\n input: {\n turn_detection: {\n type: \"semantic_vad\",\n eagerness: \"medium\",\n create_response: true,\n interrupt_response: true,\n },\n },\n output: { voice },\n },\n tools: REALTIME_TOOLS,\n tool_choice: \"auto\",\n };\n}\n",[],[462,562],"2ba77f2f-9ab5-41dd-853d-44ff8a5d340f","platform-auth.ts","019f675d-aa00-73de-b62f-e4e0acc77bf5",3,["D",1784146001112],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SUPABASE_URL=(Deno.env.get(\"PLATFORM_SUPABASE_URL\")||\"\").replace(/\\/$/,\"\");\nconst PUBLISHABLE_KEY=Deno.env.get(\"PLATFORM_SUPABASE_PUBLISHABLE_KEY\")||\"\";\nconst GATEWAY_SECRET=Deno.env.get(\"PLATFORM_AUTH_GATEWAY_SECRET\")||\"\";\nconst EDGE_URL=`${SUPABASE_URL}/functions/v1/tenant-auth-gateway`;\nconst RATE_TABLE=\"platform_login_request_rate\";\nconst RATE_WINDOW_MS=15*60*1000;\nconst MAX_REQUESTS=12;\nlet rateReady:Promise|null=null;\n\nexport type TenantIdentity={\n tenant_id:string;\n staff_id:string;\n auth_user_id:string;\n role:string;\n login_identifier:string;\n organization_name:string;\n vertical_key:string;\n vertical_display_name:string;\n vertical_version:number;\n locale:string;\n timezone:string;\n backend_mode:\"legacy_single_tenant\"|\"direct_multi_tenant\"|\"disabled\";\n feature_flags:Record;\n ui_config:{\n brand_mark:string;\n trade_label:string;\n assistant_title:string;\n primary_action:string;\n };\n auth_method:\"supabase_email\";\n};\n\nexport type ChannelContext={\n tenant_id:string;\n organization_name:string;\n vertical_key:string;\n vertical_display_name:string;\n vertical_version:number;\n locale:string;\n timezone:string;\n backend_mode:string;\n feature_flags:Record;\n ui_config:Record;\n assistant_config:Record;\n};\n\nconst channelCache=new Map();\n\nfunction clean(value:unknown,max:number):string{\n return String(value??\"\").trim().slice(0,max);\n}\n\nfunction object(value:unknown):Record{\n return value&&typeof value===\"object\"&&!Array.isArray(value)\n ? value as Record\n : {};\n}\n\nasync function parse(response:Response):Promise>{\n const raw=(await response.text()).slice(0,50_000);\n if(!raw)return {};\n try{return object(JSON.parse(raw));}catch{return {};}\n}\n\nfunction uuid(value:unknown):string{\n const result=clean(value,80).toLowerCase();\n return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(result)\n ? result\n : \"\";\n}\n\nfunction safeObject(value:unknown,maxEntries=40):Record{\n const source=object(value);\n return Object.fromEntries(\n Object.entries(source)\n .filter(([key])=>/^[a-z][a-z0-9_]{1,62}$/i.test(key))\n .slice(0,maxEntries)\n .map(([key,item])=>[\n key,\n typeof item===\"boolean\"||typeof item===\"number\"||typeof item===\"string\"\n ? item\n : null,\n ]),\n );\n}\n\nfunction booleanFlags(value:unknown):Record{\n return Object.fromEntries(\n Object.entries(object(value))\n .filter(([key,item])=>/^[a-z][a-z0-9_]{1,62}$/i.test(key)&&typeof item===\"boolean\")\n .slice(0,40),\n ) as Record;\n}\n\nfunction sanitizeIdentity(value:unknown):TenantIdentity|null{\n const source=object(value);\n const tenantId=clean(source.tenant_id,80).toLowerCase();\n const staffId=uuid(source.staff_id);\n const authUserId=uuid(source.auth_user_id);\n const verticalKey=clean(source.vertical_key,64).toLowerCase();\n const backend=clean(source.backend_mode,40) as TenantIdentity[\"backend_mode\"];\n if(\n !/^[a-z0-9][a-z0-9_-]{2,79}$/.test(tenantId)\n ||!staffId\n ||!authUserId\n ||!/^[a-z][a-z0-9_]{2,62}$/.test(verticalKey)\n ||![\"legacy_single_tenant\",\"direct_multi_tenant\",\"disabled\"].includes(backend)\n )return null;\n\n const ui=safeObject(source.ui_config,12);\n return {\n tenant_id:tenantId,\n staff_id:staffId,\n auth_user_id:authUserId,\n role:clean(source.role,40)||\"member\",\n login_identifier:clean(source.login_identifier,64).toLowerCase(),\n organization_name:clean(source.organization_name,120)||\"Entreprise\",\n vertical_key:verticalKey,\n vertical_display_name:clean(source.vertical_display_name,80)||\"Services\",\n vertical_version:Math.max(1,Math.min(10000,Number(source.vertical_version||1))),\n locale:clean(source.locale,20)||\"fr-FR\",\n timezone:clean(source.timezone,80)||\"Europe/Paris\",\n backend_mode:backend,\n feature_flags:booleanFlags(source.feature_flags),\n ui_config:{\n brand_mark:clean(ui.brand_mark,3).toUpperCase()||\"S\",\n trade_label:clean(ui.trade_label,80)||clean(source.vertical_display_name,80)||\"Services\",\n assistant_title:clean(ui.assistant_title,80)||\"Assistante IA\",\n primary_action:clean(ui.primary_action,80)||\"Nouveau devis\",\n },\n auth_method:\"supabase_email\",\n };\n}\n\nasync function ensureRateTable():Promise{\n if(!rateReady){\n rateReady=(async()=>{\n await sqlite.execute(`create table if not exists ${RATE_TABLE}(\n client_key text primary key,\n request_count integer not null,\n window_started_at integer not null,\n updated_at integer not null\n )`);\n })().catch(error=>{rateReady=null;throw error;});\n }\n return rateReady;\n}\n\nasync function clientKey(req:Request,identifier:string):Promise{\n const forwarded=req.headers.get(\"cf-connecting-ip\")\n ||req.headers.get(\"x-forwarded-for\")\n ||\"unknown\";\n const ip=forwarded.split(\",\")[0].trim();\n const bytes=new TextEncoder().encode(`${ip}\\u0000${identifier}\\u0000${GATEWAY_SECRET}`);\n const digest=new Uint8Array(await crypto.subtle.digest(\"SHA-256\",bytes));\n return [...digest].map(byte=>byte.toString(16).padStart(2,\"0\")).join(\"\").slice(0,40);\n}\n\nasync function consumeRequestQuota(req:Request,identifier:string):Promise{\n await ensureRateTable();\n const key=await clientKey(req,identifier);\n const now=Date.now();\n const found=await sqlite.execute({\n sql:`select request_count,window_started_at from ${RATE_TABLE} where client_key=? limit 1`,\n args:[key],\n });\n const row=found.rows[0] as Record|undefined;\n const started=Number(row?.window_started_at||now);\n const expired=now-started>=RATE_WINDOW_MS;\n const count=expired?0:Number(row?.request_count||0);\n if(count>=MAX_REQUESTS)return false;\n await sqlite.execute({\n sql:`insert into ${RATE_TABLE}(client_key,request_count,window_started_at,updated_at)\n values(?,?,?,?)\n on conflict(client_key) do update set\n request_count=excluded.request_count,\n window_started_at=excluded.window_started_at,\n updated_at=excluded.updated_at`,\n args:[key,count+1,expired?now:started,now],\n });\n if(Math.random()<0.02){\n await sqlite.execute({\n sql:`delete from ${RATE_TABLE} where updated_at=40\n );\n}\n\nexport async function requestTenantMagicLink(\n req:Request,\n loginIdentifier:unknown,\n emailValue:unknown,\n):Promise>{\n const identifier=clean(loginIdentifier,64).toLowerCase();\n const email=clean(emailValue,254).toLowerCase();\n const generic={\n ok:true,\n accepted:true,\n message:\"Si ces informations correspondent à un compte actif, un lien sécurisé va être envoyé.\",\n n8n_execution_used:false,\n http_status:202,\n };\n if(!platformAuthConfigured()){\n return {ok:false,error:\"platform_auth_not_configured\",http_status:503};\n }\n if(!(await consumeRequestQuota(req,identifier)))return generic;\n\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${PUBLISHABLE_KEY}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({\n operation:\"request_login\",\n login_identifier:identifier,\n email,\n }),\n signal:AbortSignal.timeout(10_000),\n });\n }catch{\n return {ok:false,error:\"platform_auth_unavailable\",http_status:503};\n }\n if(response.status===401){\n return {ok:false,error:\"platform_auth_unavailable\",http_status:503};\n }\n const payload=await parse(response);\n if(!response.ok||payload.ok===false){\n return {ok:false,error:\"platform_auth_unavailable\",http_status:503};\n }\n return generic;\n}\n\nexport async function exchangeTenantIdentity(\n intentValue:unknown,\n accessTokenValue:unknown,\n):Promise>{\n const intent=clean(intentValue,128).toLowerCase();\n const accessToken=clean(accessTokenValue,8192);\n if(!platformAuthConfigured()||!intent||accessToken.length<20){\n return {ok:false,error:\"identity_exchange_rejected\",http_status:403};\n }\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${accessToken}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({operation:\"exchange_identity\",intent_token:intent}),\n signal:AbortSignal.timeout(10_000),\n });\n }catch{\n return {ok:false,error:\"identity_exchange_unavailable\",http_status:502};\n }\n const payload=await parse(response);\n const identity=sanitizeIdentity(payload.identity);\n if(!response.ok||payload.ok!==true||!identity){\n return {\n ok:false,\n error:\"identity_exchange_rejected\",\n http_status:response.status===502?502:403,\n };\n }\n return {ok:true,identity,http_status:200,n8n_execution_used:false};\n}\n\nexport async function resolveChannelContext(\n addressValue:unknown,\n):Promise{\n const address=clean(addressValue,80);\n if(!platformAuthConfigured()||!address)return null;\n const cached=channelCache.get(address);\n if(cached&&cached.expires>Date.now())return cached.value;\n\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${PUBLISHABLE_KEY}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({\n operation:\"resolve_channel\",\n provider:\"twilio\",\n channel:\"voice\",\n address,\n }),\n signal:AbortSignal.timeout(7_000),\n });\n }catch{return null;}\n const payload=await parse(response);\n const source=object(payload.context);\n const tenantId=clean(source.tenant_id,80).toLowerCase();\n const verticalKey=clean(source.vertical_key,64).toLowerCase();\n if(\n !response.ok\n ||payload.ok!==true\n ||!/^[a-z0-9][a-z0-9_-]{2,79}$/.test(tenantId)\n ||!/^[a-z][a-z0-9_]{2,62}$/.test(verticalKey)\n )return null;\n const context:ChannelContext={\n tenant_id:tenantId,\n organization_name:clean(source.organization_name,120)||\"Entreprise\",\n vertical_key:verticalKey,\n vertical_display_name:clean(source.vertical_display_name,80)||\"Services\",\n vertical_version:Math.max(1,Number(source.vertical_version||1)),\n locale:clean(source.locale,20)||\"fr-FR\",\n timezone:clean(source.timezone,80)||\"Europe/Paris\",\n backend_mode:clean(source.backend_mode,40)||\"disabled\",\n feature_flags:booleanFlags(source.feature_flags),\n ui_config:safeObject(source.ui_config,20),\n assistant_config:object(source.assistant_config),\n };\n channelCache.set(address,{expires:Date.now()+5*60*1000,value:context});\n return context;\n}\n\n\nexport type TenantBusinessContext=ChannelContext&{\n login_identifier:string;\n tenant_settings:Record;\n};\n\nconst tenantContextCache=new Map();\n\nexport async function resolveTenantContext(\n tenantIdValue:unknown,\n):Promise{\n const tenantId=clean(tenantIdValue,80).toLowerCase();\n if(\n !platformAuthConfigured()\n ||!/^[a-z0-9][a-z0-9_-]{2,79}$/.test(tenantId)\n )return null;\n const cached=tenantContextCache.get(tenantId);\n if(cached&&cached.expires>Date.now())return cached.value;\n\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${PUBLISHABLE_KEY}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({\n operation:\"resolve_tenant\",\n tenant_id:tenantId,\n }),\n signal:AbortSignal.timeout(7_000),\n });\n }catch{return null;}\n\n const payload=await parse(response);\n const source=object(payload.context);\n const resolvedTenant=clean(source.tenant_id,80).toLowerCase();\n const verticalKey=clean(source.vertical_key,64).toLowerCase();\n if(\n !response.ok\n ||payload.ok!==true\n ||resolvedTenant!==tenantId\n ||!/^[a-z][a-z0-9_]{2,62}$/.test(verticalKey)\n )return null;\n\n const context:TenantBusinessContext={\n tenant_id:resolvedTenant,\n login_identifier:clean(source.login_identifier,64).toLowerCase(),\n organization_name:clean(source.organization_name,120)||\"Entreprise\",\n vertical_key:verticalKey,\n vertical_display_name:clean(source.vertical_display_name,80)||\"Services\",\n vertical_version:Math.max(1,Number(source.vertical_version||1)),\n locale:clean(source.locale,20)||\"fr-FR\",\n timezone:clean(source.timezone,80)||\"Europe/Paris\",\n backend_mode:clean(source.backend_mode,40)||\"disabled\",\n feature_flags:booleanFlags(source.feature_flags),\n ui_config:object(source.ui_config),\n assistant_config:object(source.assistant_config),\n tenant_settings:object(source.tenant_settings),\n };\n tenantContextCache.set(tenantId,{expires:Date.now()+5*60*1000,value:context});\n return context;\n}\n",[],[462,570],"cff47999-12c7-48b0-912b-c1403301e49f","owner-ui.ts","019f675d-aa00-73de-b62f-e33fb4988fd3",["D",1784145619620],"export const CLIENT_OWNER_BOOT = String.raw`\n(()=>{try{\n const fragment=new URLSearchParams(location.hash.slice(1));\n const accessToken=fragment.get('access_token')||'';\n const refreshToken=fragment.get('refresh_token')||'';\n const error=fragment.get('error')||'';\n if(accessToken||refreshToken||error){\n if(accessToken&&refreshToken){\n const expiresIn=Math.max(60,Math.min(86400,Number(fragment.get('expires_in')||3600)));\n sessionStorage.setItem('piscine_owner_auth_v1',JSON.stringify({\n access_token:accessToken,\n refresh_token:refreshToken,\n expires_at:Date.now()+expiresIn*1000\n }));\n sessionStorage.removeItem('piscine_owner_auth_error_v1');\n }else{\n sessionStorage.removeItem('piscine_owner_auth_v1');\n sessionStorage.setItem(\n 'piscine_owner_auth_error_v1',\n String(error||'owner_auth_callback_failed').slice(0,120)\n );\n }\n sessionStorage.setItem('piscine_owner_auth_callback_v1','1');\n const next=new URL(location.href);\n next.searchParams.delete('owner_auth');\n history.replaceState(null,'',next.pathname+(next.search||'')+'#owner');\n }\n}catch{\n sessionStorage.removeItem('piscine_owner_auth_v1');\n}})();\n`;\n\nexport const CSS_OWNER = String.raw`\n.owner-hero-actions{display:flex;gap:9px;align-items:center;flex-wrap:wrap}\n.owner-status-grid{grid-template-columns:repeat(4,minmax(0,1fr));margin-bottom:16px}\n.owner-status-card{padding:16px}.owner-status-card span{display:block;color:var(--muted);font-size:10px;margin-bottom:6px}.owner-status-card strong{font-size:15px}.owner-status-card small{display:block;color:var(--muted);margin-top:5px}\n.owner-voice{display:grid;gap:16px;padding:20px}.owner-orb{width:84px;height:84px;border-radius:50%;display:grid;place-items:center;margin:auto;background:radial-gradient(circle at 35% 30%,#65efd7,#159b87 55%,#0e4b43);box-shadow:0 0 0 10px rgba(53,209,181,.06),0 18px 45px rgba(0,0,0,.28);font-size:30px}.owner-orb.live{animation:ownerPulse 1.3s ease-in-out infinite}.owner-orb.blocked{filter:grayscale(.65);opacity:.58}@keyframes ownerPulse{50%{transform:scale(1.06);box-shadow:0 0 0 18px rgba(53,209,181,.03),0 20px 50px rgba(0,0,0,.3)}}\n.owner-voice-copy{text-align:center}.owner-voice-copy h2{margin:0 0 5px;font-size:18px}.owner-voice-copy p{margin:0;color:var(--muted);font-size:11px}.owner-voice-actions{display:flex;justify-content:center;gap:9px}.owner-transcript{min-height:120px;max-height:260px;overflow:auto;border:1px solid var(--line);background:#0b141b;border-radius:13px;padding:13px;color:#c8d7dc;white-space:pre-wrap;font-size:12px}.owner-transcript:empty:before{content:\"La transcription de la session apparaîtra ici.\";color:var(--muted)}\n.owner-command-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:9px;padding:16px}.owner-command{border:1px solid var(--line);background:#0d161d;color:var(--ink);border-radius:13px;padding:13px;text-align:left}.owner-command b{display:block}.owner-command span{display:block;color:var(--muted);font-size:10px;margin-top:3px}.owner-command:hover:not(:disabled){border-color:#367b6e;background:#15312e}\n.owner-result{padding:14px 17px;color:var(--muted);font-size:11px;border-top:1px solid var(--line);white-space:pre-wrap}.owner-control-list{display:grid}.owner-control-row{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:10px;padding:12px 16px;border-bottom:1px solid var(--line)}.owner-control-row:last-child{border-bottom:0}.owner-control-row b{display:block;font-size:11px}.owner-control-row small{display:block;color:var(--muted);margin-top:3px}.owner-blockers{display:grid;gap:8px;padding:14px}.owner-blocker{display:flex;gap:9px;align-items:center;padding:10px;border-radius:11px;background:var(--warnbg);color:var(--warn);font-size:11px}.owner-blocker.ok{background:var(--okbg);color:var(--ok)}\n.owner-delivery-kpis{grid-template-columns:repeat(4,minmax(0,1fr));padding:16px}.owner-delivery-kpi{padding:13px;border:1px solid var(--line);background:#0d161d;border-radius:13px}.owner-delivery-kpi span{display:block;color:var(--muted);font-size:10px}.owner-delivery-kpi strong{display:block;font-size:24px;margin-top:4px}.owner-delivery-kpi.ok strong{color:var(--ok)}.owner-delivery-kpi.warn strong{color:var(--warn)}.owner-delivery-kpi.bad strong{color:var(--danger)}.owner-safe-note{margin:0 16px 16px;padding:11px 12px;border-radius:12px;background:#0d161d;color:var(--muted);font-size:11px}.owner-safe-note b{color:var(--ink)}.owner-test-blockers{display:grid;gap:7px;margin-top:13px}.owner-test-blockers .owner-blocker{padding:8px 10px}\n.owner-activation{overflow:hidden}.owner-activation-head{display:flex;align-items:flex-start;justify-content:space-between;gap:16px;padding:18px;border-bottom:1px solid var(--line)}.owner-activation-head h2{margin:0 0 4px}.owner-activation-head p{margin:0;color:var(--muted);font-size:11px}.owner-activation-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:1px;background:var(--line)}.owner-activation-step{display:grid;grid-template-columns:minmax(0,1fr) auto;align-items:center;gap:12px;padding:14px 16px;background:var(--panel)}.owner-activation-step b{display:block;font-size:12px}.owner-activation-step small{display:block;color:var(--muted);margin-top:3px}.owner-activation-next{padding:16px;border-top:1px solid var(--line)}.owner-activation-next h3{margin:0 0 10px;font-size:12px}.owner-next-list{display:grid;gap:7px}.owner-next-item{display:flex;align-items:center;gap:10px;padding:10px 12px;border-radius:11px;background:#0d161d;color:var(--muted);font-size:11px}.owner-next-index{width:22px;height:22px;border-radius:8px;background:var(--accent2);color:var(--accent);display:grid;place-items:center;font-weight:900;flex:0 0 auto}\n.owner-auth-card{display:flex;align-items:center;justify-content:space-between;gap:20px;padding:17px 18px}.owner-auth-copy{min-width:0}.owner-auth-copy h2{margin:3px 0 5px;font-size:15px}.owner-auth-copy p{margin:0;color:var(--muted);font-size:11px}.owner-auth-copy small{display:block;margin-top:7px;color:var(--muted)}.owner-auth-actions{display:flex;align-items:center;justify-content:flex-end;gap:9px;flex-wrap:wrap}.owner-auth-actions .pill{white-space:nowrap}\n@media(max-width:900px){.owner-status-grid,.owner-delivery-kpis{grid-template-columns:repeat(2,minmax(0,1fr))}.owner-command-grid,.owner-activation-grid{grid-template-columns:1fr}.owner-auth-card{align-items:flex-start;flex-direction:column}.owner-auth-actions{justify-content:flex-start}}\n`;\n\nexport const CLIENT_OWNER = String.raw`\ntitles.owner='Assistante IA';\nconst ownerState={caps:null,pc:null,stream:null,channel:null,audio:null,loading:false,activationLoading:false,activationLoaded:false,auth:null,authPromise:null,toolCalls:new Set()};\nconst ownerLabels={\n owner_direct_gateway_disabled:\"La console directe reste coupée.\",\n owner_direct_gateway_not_configured:\"La passerelle directe Supabase doit être configurée.\",\n owner_voice_mode_disabled:\"La commande vocale dirigeant reste verrouillée pendant la phase de sécurisation.\",\n openai_api_not_configured:\"La connexion OpenAI Realtime manque.\",\n owner_staff_identity_missing:\"L’identité staff technique manque.\",\n owner_strong_identity_required_for_commit:\"Une identité forte liée au compte dirigeant est requise avant toute écriture réelle.\",\n owner_strong_identity_required_for_voice:\"La session e-mail sécurisée est requise avant la voix dirigeant.\",\n owner_email_auth_not_configured:\"La connexion e-mail propriétaire doit être configurée.\",\n owner_strong_identity_invalid:\"La session sécurisée a expiré.\",\n owner_email_not_allowlisted:\"Cette adresse n’est pas autorisée pour le compte propriétaire.\",\n owner_commit_permission_disabled:\"Les permissions d’écriture réelle restent volontairement désactivées.\"\n};\nfunction ownerText(value,fallback){return String(value==null?(fallback||''):value)}\nfunction ownerSetText(selector,value){const el=q(selector);if(el)el.textContent=ownerText(value)}\nfunction ownerSetTranscript(line,append){const el=q('#ownerTranscript');if(!el)return;if(append)el.textContent+=ownerText(line);else el.textContent=ownerText(line);el.scrollTop=el.scrollHeight}\nconst OWNER_AUTH_STORAGE='piscine_owner_auth_v1';\nfunction ownerAuthLoad(){\n if(ownerState.auth)return ownerState.auth;\n try{\n const parsed=JSON.parse(sessionStorage.getItem(OWNER_AUTH_STORAGE)||'null');\n if(!parsed||typeof parsed!=='object')return null;\n const access=ownerText(parsed.access_token),refresh=ownerText(parsed.refresh_token),expires=Number(parsed.expires_at||0);\n if(access.length<20||refresh.length<20||!Number.isFinite(expires))return null;\n ownerState.auth={access_token:access,refresh_token:refresh,expires_at:expires};\n return ownerState.auth;\n }catch{return null}\n}\nfunction ownerAuthSave(payload){\n const access=ownerText(payload.access_token),refresh=ownerText(payload.refresh_token);\n const expiresIn=Math.max(60,Math.min(86400,Number(payload.expires_in||3600)));\n if(access.length<20||refresh.length<20)throw new Error('owner_auth_invalid_response');\n ownerState.auth={access_token:access,refresh_token:refresh,expires_at:Date.now()+expiresIn*1000};\n sessionStorage.setItem(OWNER_AUTH_STORAGE,JSON.stringify(ownerState.auth));\n sessionStorage.removeItem('piscine_owner_auth_error_v1');\n return ownerState.auth;\n}\nfunction ownerAuthClear(){\n ownerState.auth=null;\n sessionStorage.removeItem(OWNER_AUTH_STORAGE);\n}\nasync function ownerAuthToken(){\n const current=ownerAuthLoad();\n if(!current)return '';\n if(current.expires_at>Date.now()+90000)return current.access_token;\n if(ownerState.authPromise)return ownerState.authPromise;\n ownerState.authPromise=(async()=>{\n const response=await fetch('/api/owner/auth/refresh',{\n method:'POST',\n headers:{'content-type':'application/json','x-csrf-token':csrf},\n body:JSON.stringify({refresh_token:current.refresh_token})\n });\n const result=await response.json();\n if(!response.ok||result.ok===false){ownerAuthClear();return ''}\n return ownerAuthSave(result).access_token;\n })();\n try{return await ownerState.authPromise}catch{ownerAuthClear();return ''}finally{ownerState.authPromise=null}\n}\nfunction ownerRenderAuth(auth){\n const configured=Boolean(auth&&auth.configured);\n const verified=Boolean(auth&&auth.verified);\n const local=ownerAuthLoad();\n const callbackError=sessionStorage.getItem('piscine_owner_auth_error_v1')||'';\n const pill=q('#ownerAuthPill'),request=q('#ownerAuthRequest'),logout=q('#ownerAuthLogout');\n if(pill){\n pill.textContent=verified?'Identité vérifiée':configured?'À confirmer':'À configurer';\n pill.className='pill '+(verified?'ok':'warn');\n }\n ownerSetText(\n '#ownerAuthCopy',\n verified\n ?'Cette session a été vérifiée par Supabase Auth. Les permissions sensibles restent séparément verrouillées.'\n :callbackError\n ?'Le lien n’a pas pu être validé. Demandez un nouveau lien sécurisé.'\n :'Confirmez votre adresse e-mail avec un lien à usage unique. Aucun mot de passe n’est stocké.'\n );\n ownerSetText('#ownerAuthMeta',auth&&auth.email_hint?'Compte autorisé : '+ownerText(auth.email_hint):'Compte propriétaire sécurisé');\n if(request){request.hidden=verified;request.disabled=!configured;request.textContent='Recevoir mon lien sécurisé'}\n if(logout){logout.hidden=!local;logout.disabled=false}\n if(verified)sessionStorage.removeItem('piscine_owner_auth_error_v1');\n}\nasync function ownerRequestMagicLink(){\n const button=q('#ownerAuthRequest');\n if(button){button.disabled=true;button.textContent='Envoi en cours…'}\n try{\n const response=await fetch('/api/owner/auth/request',{\n method:'POST',\n headers:{'content-type':'application/json','x-csrf-token':csrf},\n body:'{}'\n });\n const result=await response.json();\n if(!response.ok||result.ok===false)throw new Error(result.error||'owner_magic_link_request_failed');\n ownerSetText('#ownerAuthCopy','Lien sécurisé envoyé. Ouvrez l’e-mail dans ce navigateur pour confirmer votre identité.');\n toast('Lien de connexion envoyé');\n }catch(error){\n toast(ownerLabels[ownerText(error.message)]||ownerText(error.message),false);\n }finally{\n if(button){button.textContent='Recevoir mon lien sécurisé';setTimeout(()=>{button.disabled=false},60000)}\n }\n}\nasync function ownerLogoutStrongIdentity(){\n const token=await ownerAuthToken();\n try{\n await fetch('/api/owner/auth/logout',{\n method:'POST',\n headers:{'x-csrf-token':csrf,...(token?{'x-owner-access-token':token}:{})}\n });\n }catch{}\n ownerAuthClear();\n ownerState.activationLoaded=false;\n await ownerFetchCaps();\n toast('Session propriétaire déconnectée');\n}\nfunction ownerRenderCaps(caps){\n ownerState.caps=caps;\n ownerRenderAuth(caps.owner_auth||{});\n const consoleAvailable=Boolean(caps.console_available);\n const voiceAvailable=Boolean(caps.voice_available);\n const pillEl=q('#ownerModePill');\n if(pillEl){\n pillEl.textContent=voiceAvailable?'Console + voix':consoleAvailable?'Console directe':'Préparation';\n pillEl.className='pill '+(consoleAvailable?'ok':'warn');\n }\n ownerSetText('#ownerModeValue',consoleAvailable?'Console active':'Console coupée');\n ownerSetText('#ownerGatewayValue',consoleAvailable?'Direct Supabase':'À configurer');\n ownerSetText('#ownerIdentityValue',caps.strong_identity_verified?'Identité forte':'Lecture sécurisée');\n ownerSetText('#ownerVoiceValue',voiceAvailable?'Prête':'Verrouillée');\n ownerSetText('#ownerModelMeta',ownerText(caps.model)+' · '+ownerText(caps.voice));\n const blockers=q('#ownerBlockers');\n if(blockers){\n blockers.replaceChildren();\n const list=Array.isArray(caps.blockers)?caps.blockers:[];\n if(!list.length){\n const ok=document.createElement('div');ok.className='owner-blocker ok';ok.textContent='Tous les contrôles sont satisfaits.';blockers.appendChild(ok);\n }else{\n list.forEach(code=>{const row=document.createElement('div');row.className='owner-blocker';row.textContent=ownerLabels[code]||ownerText(code);blockers.appendChild(row)});\n }\n }\n const start=q('#ownerVoiceStart'),orb=q('#ownerOrb');\n if(start){start.disabled=!voiceAvailable;start.textContent=voiceAvailable?'Parler à l’assistante':'Voix verrouillée'}\n if(orb)orb.classList.toggle('blocked',!voiceAvailable);\n qa('[data-owner-action]').forEach(button=>{button.disabled=!consoleAvailable});\n}\nasync function ownerFetchCaps(){\n if(ownerState.loading)return;\n ownerState.loading=true;\n try{\n const token=await ownerAuthToken();\n const response=await fetch('/api/owner/capabilities',{headers:{accept:'application/json',...(token?{'x-owner-access-token':token}:{})}});\n const result=await response.json();\n if(!response.ok||result.ok===false)throw new Error(result.error||'capacites_indisponibles');\n ownerRenderCaps(result);\n if(result.console_available&&!ownerState.activationLoaded)void ownerLoadActivation(false).catch(error=>toast(ownerText(error.message),false));\n }catch(error){\n ownerSetText('#ownerVoiceValue','Erreur');\n ownerSetTranscript('État propriétaire indisponible : '+ownerText(error.message),false);\n }finally{ownerState.loading=false}\n}\nasync function ownerAction(action,data){\n const token=await ownerAuthToken();\n const response=await fetch('/api/owner/action',{\n method:'POST',\n headers:{'content-type':'application/json','x-csrf-token':csrf,...(token?{'x-owner-access-token':token}:{})},\n body:JSON.stringify({action:action,data:data||{}})\n });\n const result=await response.json();\n if(!response.ok||result.ok===false)throw new Error(result.assistant_message||result.error||'action_proprietaire_refusee');\n return result;\n}\nasync function ownerLoadActivation(force){\n if(ownerState.activationLoading||(!force&&ownerState.activationLoaded))return;\n ownerState.activationLoading=true;\n try{\n const result=await ownerAction('get_activation_readiness',{});\n ownerRenderActivation(result.data||{});\n ownerState.activationLoaded=true;\n return result;\n }catch(error){\n ownerSetText('#ownerActivationState','Indisponible');\n const root=q('#ownerActivationSteps');\n if(root)root.innerHTML='

Diagnostic indisponible'+esc(ownerText(error.message))+'

Erreur

';\n throw error;\n }finally{ownerState.activationLoading=false}\n}\nfunction ownerRenderDefinition(selector,pairs){\n const root=q(selector);if(!root)return;root.replaceChildren();\n pairs.forEach(pair=>{const dt=document.createElement('dt');dt.textContent=pair[0];const dd=document.createElement('dd');dd.textContent=pair[1];root.append(dt,dd)});\n}\nfunction ownerDeliveryPill(group,label){\n const state=document.createElement('span');\n state.className='pill '+(group==='delivered'?'ok':group==='failed'?'bad':group==='waiting'?'warn':'info');\n state.textContent=ownerText(label,'Inconnu');\n return state;\n}\nfunction ownerRenderDelivery(delivery){\n const counts=delivery&&delivery.counts||{};\n ownerSetText('#ownerDeliveryWaiting',counts.waiting||0);\n ownerSetText('#ownerDeliverySent',counts.sent||0);\n ownerSetText('#ownerDeliveryDelivered',counts.delivered||0);\n ownerSetText('#ownerDeliveryFailed',counts.failed||0);\n ownerSetText('#ownerDeliveryAlertCount',counts.open_delivery_alerts||0);\n\n const recent=Array.isArray(delivery&&delivery.recent_messages)?delivery.recent_messages:[];\n const recentRoot=q('#ownerDeliveryRecent');\n if(recentRoot){\n recentRoot.replaceChildren();\n if(!recent.length){const empty=document.createElement('div');empty.className='empty';empty.textContent='Aucun SMS réel suivi pour le moment.';recentRoot.appendChild(empty)}\n recent.forEach(item=>{\n const row=document.createElement('div');row.className='owner-control-row';\n const copy=document.createElement('div');\n const title=document.createElement('b');\n title.textContent=ownerText(item.document_number,item.message_id_suffix?'SMS …'+ownerText(item.message_id_suffix):'SMS');\n const meta=document.createElement('small');\n meta.textContent=[ownerText(item.provider_status),dt(item.occurred_at)].filter(Boolean).join(' · ');\n copy.append(title,meta);\n row.append(copy,ownerDeliveryPill(item.state_group,item.state_label));\n recentRoot.appendChild(row);\n });\n }\n\n const failures=Array.isArray(delivery&&delivery.open_failures)?delivery.open_failures:[];\n const failureRoot=q('#ownerDeliveryFailures');\n if(failureRoot){\n failureRoot.replaceChildren();\n if(!failures.length){const empty=document.createElement('div');empty.className='empty';empty.textContent='Aucune alerte de livraison ouverte.';failureRoot.appendChild(empty)}\n failures.forEach(item=>{\n const row=document.createElement('div');row.className='owner-control-row';\n const copy=document.createElement('div');\n const title=document.createElement('b');title.textContent=ownerText(item.title,'Échec de livraison SMS');\n const meta=document.createElement('small');\n meta.textContent=['SMS …'+ownerText(item.message_id_suffix,'—'),ownerText(item.error_code,'code inconnu'),dt(item.occurred_at)].join(' · ');\n copy.append(title,meta);\n row.append(copy,ownerDeliveryPill('failed','À traiter'));\n failureRoot.appendChild(row);\n });\n }\n\n const plan=delivery&&delivery.test_sms_plan||{};\n const completed=plan.approval_status==='executed';\n const safeReady=Boolean(plan.ready_to_approve&&plan.recipient_configured&&plan.send_enabled&&plan.template_enabled&&plan.outbound_enabled);\n const planPill=q('#ownerTestSmsPill');\n if(planPill){planPill.className='pill '+(completed?'ok':safeReady?'warn':'info');planPill.textContent=completed?'Test livré':safeReady?'Prêt à valider':'Bloqué en sécurité'}\n ownerRenderDefinition('#ownerTestSmsSummary',[\n ['Préparation',plan.prepared?'Créée':'À créer'],\n ['Modèle',plan.template_enabled?'Activé':'Désactivé'],\n ['Destinataire',plan.recipient_configured?'Configuré':'À renseigner'],\n ['Validation humaine',plan.approval_status==='executed'?'Consommée':plan.approval_status==='approved'?'Accordée':plan.approval_status==='pending'?'En attente':'Requise'],\n ['Limite',ownerText(plan.max_messages,1)+' SMS maximum'],\n ['Relance automatique',plan.automatic_retry?'Activée':'Interdite'],\n ['Canaux sortants',plan.outbound_enabled?'Activés':'Coupés']\n ]);\n const blockerRoot=q('#ownerTestSmsBlockers');\n if(blockerRoot){\n blockerRoot.replaceChildren();\n const labels={\n template_disabled:'Le modèle de test reste désactivé.',\n human_approval_missing:'Une validation humaine est obligatoire.',\n recipient_missing:'Aucun numéro de test n’est enregistré.',\n send_disabled:'L’exécution de l’envoi est désactivée.',\n outbound_disabled:'Les communications sortantes restent coupées.',\n not_prepared:'Le plan de test n’est pas encore préparé.'\n };\n const blocked=Array.isArray(plan.blocked_reasons)?plan.blocked_reasons:[];\n blocked.forEach(code=>{const row=document.createElement('div');row.className='owner-blocker';row.textContent=labels[code]||ownerText(code);blockerRoot.appendChild(row)});\n }\n ownerSetText('#ownerTestSmsNote',completed?'Un SMS a été livré. Le quota est consommé et le mécanisme est refermé.':safeReady?'Le test attend votre validation explicite.':'Aucun SMS ne peut partir depuis ce bloc.');\n}\nfunction ownerRenderAutonomy(snapshot){\n const approvals=Array.isArray(snapshot.pending_approvals)?snapshot.pending_approvals:[];\n const approvalRoot=q('#ownerApprovalList');ownerSetText('#ownerApprovalCount',approvals.length);\n if(approvalRoot){\n approvalRoot.replaceChildren();\n if(!approvals.length){const empty=document.createElement('div');empty.className='empty';empty.textContent='Aucune validation en attente.';approvalRoot.appendChild(empty)}\n approvals.forEach(item=>{const row=document.createElement('div');row.className='owner-control-row';const copy=document.createElement('div');const title=document.createElement('b');title.textContent=ownerText(item.summary,item.action_key);const preparation=item.action_key==='send_twilio_test_sms';const meta=document.createElement('small');meta.textContent=preparation?'Préparation sans envoi · destinataire manquant':ownerText(item.action_key)+' · risque '+ownerText(item.risk_level);copy.append(title,meta);const state=document.createElement('span');state.className='pill '+(preparation?'info':'warn');state.textContent=preparation?'À configurer':'À valider';row.append(copy,state);approvalRoot.appendChild(row)});\n }\n const rules=Array.isArray(snapshot.automation_candidates)?snapshot.automation_candidates:[];\n const automationRoot=q('#ownerAutomationList');ownerSetText('#ownerAutomationCount',rules.length);\n if(automationRoot){\n automationRoot.replaceChildren();\n if(!rules.length){const empty=document.createElement('div');empty.className='empty';empty.textContent='Aucune règle analysée.';automationRoot.appendChild(empty)}\n rules.forEach(rule=>{const row=document.createElement('div');row.className='owner-control-row';const copy=document.createElement('div');const title=document.createElement('b');title.textContent=ownerText(rule.rule_code);const meta=document.createElement('small');meta.textContent=ownerText(rule.candidate_count,0)+' candidat(s) · '+ownerText(rule.risk_level);copy.append(title,meta);const state=document.createElement('span');state.className='pill '+(rule.rule_enabled?'ok':'info');state.textContent=rule.rule_enabled?'Active':'Désactivée';row.append(copy,state);automationRoot.appendChild(row)});\n }\n const policy=snapshot.communication_policy||{};\n ownerRenderDefinition('#ownerPolicySummary',[\n ['Sortant',policy.outbound_enabled?'Activé':'Coupé'],\n ['SMS',policy.sms_sender_configured?'Configuré':'Expéditeur manquant'],\n ['Appels',policy.voice_caller_configured?'Configurés':'Émission coupée'],\n ['Jours fériés',policy.holiday_calendar_ready?'Prêts':'Calendrier manquant'],\n ['Version',ownerText(policy.policy_version,'—')]\n ]);\n const calendars=Array.isArray(snapshot.calendar_connections)?snapshot.calendar_connections:[];\n const calendar=calendars[0]||{};\n ownerRenderDefinition('#ownerCalendarSummary',[\n ['Compte',ownerText(calendar.account_email,'Aucun')],\n ['État',ownerText(calendar.status,'Non configuré')],\n ['Synchronisation',ownerText(calendar.sync_direction,'none')],\n ['Lecture',calendar.read_verified?'Vérifiée':'Non vérifiée'],\n ['Écriture',calendar.write_verified?'Vérifiée':'Interdite']\n ]);\n ownerRenderDelivery(snapshot.delivery||{});\n}\nfunction ownerRenderActivation(activation){\n const steps=activation&&activation.steps||{};\n const definitions=[\n ['holiday_calendar','Jours fériés','Règles françaises 2026–2027'],\n ['owner_identity','Identité dirigeant','Connexion personnelle et droits'],\n ['google_calendar','Google Calendar','Lecture, écriture et conflits'],\n ['sms_sender','Expéditeur SMS','Numéro Twilio compatible'],\n ['email_sender','Expéditeur e-mail','Compte Gmail vérifié'],\n ['communication_policy','Politique d’envoi','Validation humaine obligatoire'],\n ['outbox','Worker d’envoi','Effets externes désactivés']\n ];\n const root=q('#ownerActivationSteps');\n let completed=0;\n if(root){\n root.replaceChildren();\n definitions.forEach(item=>{\n const key=item[0],step=steps[key]||{},ready=Boolean(step.ready);\n if(ready)completed++;\n const row=document.createElement('div');row.className='owner-activation-step';\n const copy=document.createElement('div');\n const title=document.createElement('b');title.textContent=item[1];\n const meta=document.createElement('small');\n if(key==='holiday_calendar'&&step.details)meta.textContent='Couverture jusqu’au '+ownerText(step.details.coverage_through,'—');\n else if(key==='google_calendar'&&step.details)meta.textContent=Array.isArray(step.details.blockers)&&step.details.blockers.length?'Connexion ou vérification requise':'Synchronisation prête';\n else if(key==='owner_identity')meta.textContent=step.auth_linked?'Compte lié, validation récente requise':'Compte personnel à lier';\n else meta.textContent=item[2];\n copy.append(title,meta);\n const pill=document.createElement('span');\n pill.className='pill '+(ready?'ok':step.status==='human_approval_required'?'warn':'info');\n pill.textContent=ready?'Prêt':step.status==='human_approval_required'?'À valider':'À faire';\n row.append(copy,pill);root.appendChild(row);\n });\n }\n const total=definitions.length;\n ownerSetText('#ownerActivationProgress',completed+'/'+total+' prêts');\n const state=q('#ownerActivationState');\n if(state){\n const ready=activation.safe_state==='ready_for_human_activation';\n state.className='pill '+(ready?'ok':'warn');\n state.textContent=ready?'Prêt à valider':'Verrouillé en sécurité';\n }\n const next=q('#ownerActivationNext');\n if(next){\n next.replaceChildren();\n const actions=Array.isArray(activation.next_actions)?activation.next_actions:[];\n if(!actions.length){\n const done=document.createElement('div');done.className='owner-blocker ok';done.textContent='Tous les prérequis sont réunis. Une validation humaine reste nécessaire.';next.appendChild(done);\n }else{\n actions.forEach((action,index)=>{\n const row=document.createElement('div');row.className='owner-next-item';\n const badge=document.createElement('span');badge.className='owner-next-index';badge.textContent=String(index+1);\n const label=document.createElement('span');label.textContent=ownerText(action.label,action.key);\n row.append(badge,label);next.appendChild(row);\n });\n }\n }\n}\nfunction ownerSummarize(action,result){\n const data=result&&result.data||{};\n if(action==='get_autonomy_status'){\n const counts=data.counts||{};\n return 'Validations : '+ownerText(counts.pending_approvals,0)+' · règles actives : '+ownerText(counts.enabled_automation_rules,0)+' · outbox : '+ownerText(counts.pending_outbox,0);\n }\n if(action==='get_delivery_status'){\n const counts=data.counts||{};\n return 'SMS en attente : '+ownerText(counts.waiting,0)+' · envoyés : '+ownerText(counts.sent,0)+' · livrés : '+ownerText(counts.delivered,0)+' · échecs : '+ownerText(counts.failed,0);\n }\n if(action==='get_activation_readiness'){\n const steps=data.steps||{},values=Object.values(steps),ready=values.filter(step=>step&&step.ready).length;\n return ready+'/'+values.length+' prérequis prêts · '+(Array.isArray(data.next_actions)?data.next_actions.length:0)+' action(s) restante(s) · zéro exécution n8n';\n }\n if(action==='owner_daily_briefing'){\n const parts=[\n ['rendez-vous',data.appointments],\n ['urgences',data.urgent_requests],\n ['tâches en retard',data.overdue_tasks],\n ['validations',data.pending_approvals],\n ['devis à suivre',data.quotes_to_follow_up],\n ['factures échues',data.overdue_invoices]\n ].map(x=>x[0]+' : '+(Array.isArray(x[1])?x[1].length:0));\n return parts.join(' · ');\n }\n if(Array.isArray(data))return data.length+' résultat(s).';\n return result.assistant_message||'Résultat prêt.';\n}\nqa('[data-owner-action]').forEach(button=>{\n button.onclick=async()=>{\n const action=button.dataset.ownerAction;\n button.disabled=true;\n ownerSetText('#ownerCommandResult','Exécution…');\n try{\n const result=await ownerAction(action,{limit:10,status:'all',minimum_days_overdue:0});\n if(action==='get_autonomy_status')ownerRenderAutonomy(result.data||{});\n if(action==='get_delivery_status')ownerRenderDelivery(result.data||{});\n if(action==='get_activation_readiness'){ownerRenderActivation(result.data||{});ownerState.activationLoaded=true}\n ownerSetText('#ownerCommandResult',ownerSummarize(action,result));\n toast(result.assistant_message||'Résultat propriétaire prêt');\n }catch(error){\n ownerSetText('#ownerCommandResult',ownerText(error.message));\n toast(ownerText(error.message),false);\n }finally{button.disabled=!(ownerState.caps&&ownerState.caps.enabled)}\n };\n});\nfunction ownerStopVoice(message){\n if(ownerState.channel)try{ownerState.channel.close()}catch{}\n if(ownerState.pc)try{ownerState.pc.close()}catch{}\n if(ownerState.stream)ownerState.stream.getTracks().forEach(track=>track.stop());\n if(ownerState.audio)ownerState.audio.remove();\n ownerState.channel=null;ownerState.pc=null;ownerState.stream=null;ownerState.audio=null;ownerState.toolCalls.clear();\n const orb=q('#ownerOrb');if(orb)orb.classList.remove('live');\n const start=q('#ownerVoiceStart');if(start){start.disabled=!(ownerState.caps&&ownerState.caps.voice_available);start.textContent='Parler à l’assistante'}\n const stop=q('#ownerVoiceStop');if(stop)stop.disabled=true;\n if(message)ownerSetTranscript(message,true);\n}\nasync function ownerHandleTool(event){\n const callId=ownerText(event.call_id);\n const name=ownerText(event.name);\n if(!callId||!name||ownerState.toolCalls.has(callId))return;\n ownerState.toolCalls.add(callId);\n let args={};\n try{args=event.arguments?JSON.parse(event.arguments):{}}catch{args={}}\n let output;\n try{output=await ownerAction(name,args)}catch(error){output={ok:false,action_completed:false,execution_state:'failed',error:ownerText(error.message)}}\n if(ownerState.channel&&ownerState.channel.readyState==='open'){\n ownerState.channel.send(JSON.stringify({type:'conversation.item.create',item:{type:'function_call_output',call_id:callId,output:JSON.stringify(output)}}));\n ownerState.channel.send(JSON.stringify({type:'response.create'}));\n }\n}\nfunction ownerHandleRealtime(raw){\n let event;try{event=JSON.parse(raw)}catch{return}\n if(event.type==='response.function_call_arguments.done')ownerHandleTool(event);\n const delta=event.delta;\n if(typeof delta==='string'&&['response.audio_transcript.delta','response.output_audio_transcript.delta','response.output_text.delta'].includes(event.type))ownerSetTranscript(delta,true);\n if(event.type==='error')ownerSetTranscript('\\nErreur de session vocale. ',true);\n}\nasync function ownerStartVoice(){\n if(!ownerState.caps||!ownerState.caps.voice_available)return;\n const start=q('#ownerVoiceStart');if(start){start.disabled=true;start.textContent='Connexion…'}\n try{\n ownerState.stream=await navigator.mediaDevices.getUserMedia({audio:{echoCancellation:true,noiseSuppression:true},video:false});\n ownerState.pc=new RTCPeerConnection();\n ownerState.audio=document.createElement('audio');ownerState.audio.autoplay=true;ownerState.audio.hidden=true;document.body.appendChild(ownerState.audio);\n ownerState.pc.ontrack=event=>{ownerState.audio.srcObject=event.streams[0]};\n ownerState.channel=ownerState.pc.createDataChannel('oai-events');\n ownerState.channel.onmessage=event=>ownerHandleRealtime(event.data);\n ownerState.channel.onopen=()=>{\n const orb=q('#ownerOrb');if(orb)orb.classList.add('live');\n if(start)start.textContent='Assistante connectée';\n const stop=q('#ownerVoiceStop');if(stop)stop.disabled=false;\n ownerSetTranscript('Session connectée. Vous pouvez parler.\\n',false);\n };\n ownerState.channel.onclose=()=>ownerStopVoice('\\nSession terminée.');\n ownerState.stream.getTracks().forEach(track=>ownerState.pc.addTrack(track,ownerState.stream));\n const offer=await ownerState.pc.createOffer();\n await ownerState.pc.setLocalDescription(offer);\n const token=await ownerAuthToken();\n const response=await fetch('/api/owner/session',{\n method:'POST',\n headers:{'content-type':'application/sdp','x-csrf-token':csrf,...(token?{'x-owner-access-token':token}:{})},\n body:offer.sdp\n });\n if(!response.ok){\n let message='session_vocale_refusee';\n try{const failure=await response.json();message=failure.error||message}catch{}\n throw new Error(message);\n }\n const answer=await response.text();\n await ownerState.pc.setRemoteDescription({type:'answer',sdp:answer});\n }catch(error){\n ownerStopVoice('\\nConnexion impossible : '+ownerText(error.message));\n toast('Mode vocal indisponible',false);\n }\n}\nconst ownerStart=q('#ownerVoiceStart');if(ownerStart)ownerStart.onclick=ownerStartVoice;\nconst ownerStop=q('#ownerVoiceStop');if(ownerStop){ownerStop.disabled=true;ownerStop.onclick=()=>ownerStopVoice('\\nSession arrêtée.')}\nconst ownerAuthRequest=q('#ownerAuthRequest');if(ownerAuthRequest)ownerAuthRequest.onclick=ownerRequestMagicLink;\nconst ownerAuthLogout=q('#ownerAuthLogout');if(ownerAuthLogout)ownerAuthLogout.onclick=ownerLogoutStrongIdentity;\nconst ownerNav=q('.nav button[data-view=\"owner\"]');if(ownerNav)ownerNav.addEventListener('click',ownerFetchCaps);\nwindow.addEventListener('beforeunload',()=>ownerStopVoice(''));\nconst ownerAuthCallback=sessionStorage.getItem('piscine_owner_auth_callback_v1')==='1';\nif(ownerAuthCallback){\n sessionStorage.removeItem('piscine_owner_auth_callback_v1');\n showView('owner');\n if(location.hash!=='#owner')history.replaceState(null,'',location.pathname+(location.search||'')+'#owner');\n toast(ownerAuthLoad()?'Identité reçue, vérification en cours…':'Lien de connexion refusé',Boolean(ownerAuthLoad()));\n}\nif(ownerAuthCallback||location.hash==='#owner')void ownerFetchCaps();\n`;\n",[],[462,578],"879964de-b44a-4d76-8139-216c4e8ddc1b","owner-runtime.ts","019f675d-aa00-73de-b62f-dd91adfb26e6",6,["D",1784146056939],"import { buildOwnerSessionConfig } from \"./owner-agent.ts\";\nimport { callOwnerTool, ownerBridgeStatus } from \"./owner-bridge.ts\";\nimport type { OwnerAuthStatus } from \"./owner-auth.ts\";\nimport { resolveTenantContext } from \"./platform-auth.ts\";\n\nconst OPENAI_API_KEY = Deno.env.get(\"OPENAI_API_KEY\") || \"\";\nconst OPENAI_PROJECT_ID = Deno.env.get(\"PISCINE_OPENAI_PROJECT_ID\") || \"\";\nconst MODEL = Deno.env.get(\"PISCINE_REALTIME_MODEL\") || \"gpt-realtime-2.1\";\nconst VOICE = Deno.env.get(\"PISCINE_REALTIME_VOICE_V3\")\n || Deno.env.get(\"PISCINE_REALTIME_VOICE_V2\")\n || Deno.env.get(\"PISCINE_REALTIME_VOICE\")\n || \"marin\";\nconst STAFF_ID = Deno.env.get(\"PISCINE_OWNER_STAFF_ID\") || \"\";\n\nexport const OWNER_COCKPIT_ACTIONS = new Set([\n \"owner_daily_briefing\",\n \"get_autonomy_status\",\n \"get_delivery_status\",\n \"get_activation_readiness\",\n \"list_priority_tasks\",\n \"find_client\",\n \"get_client_timeline\",\n \"list_pending_quotes\",\n \"list_overdue_invoices\",\n \"create_task\",\n \"prepare_approval\",\n \"complete_owner_session\",\n]);\n\nconst READ_ACTIONS = new Set([\n \"owner_daily_briefing\",\n \"get_autonomy_status\",\n \"get_delivery_status\",\n \"get_activation_readiness\",\n \"list_priority_tasks\",\n \"find_client\",\n \"get_client_timeline\",\n \"list_pending_quotes\",\n \"list_overdue_invoices\",\n]);\n\nfunction unique(values: string[]): string[] {\n return [...new Set(values)];\n}\n\nexport function ownerCapabilities(\n auth: OwnerAuthStatus,\n identity: Record = {},\n) {\n const bridge = ownerBridgeStatus();\n const staffId = String(identity.staff_id || identity.id || STAFF_ID || \"\").trim();\n const consoleBlockers: string[] = [];\n if (!bridge.enabled) consoleBlockers.push(\"owner_direct_gateway_disabled\");\n if (!bridge.configured) consoleBlockers.push(\"owner_direct_gateway_not_configured\");\n\n const voiceBlockers: string[] = [];\n if (!bridge.voice_gate_enabled) voiceBlockers.push(\"owner_voice_mode_disabled\");\n if (!OPENAI_API_KEY) voiceBlockers.push(\"openai_api_not_configured\");\n if (!staffId) voiceBlockers.push(\"owner_staff_identity_missing\");\n if (!auth.verified) {\n voiceBlockers.push(\"owner_strong_identity_required_for_voice\");\n }\n\n const commitBlockers = [\n ...(!auth.verified ? [\"owner_strong_identity_required_for_commit\"] : []),\n \"owner_commit_permission_disabled\",\n ];\n const consoleAvailable = bridge.available;\n const voiceAvailable = consoleAvailable\n && bridge.voice_gate_enabled\n && Boolean(OPENAI_API_KEY)\n && Boolean(staffId)\n && auth.verified;\n\n return {\n ok: true,\n schema_version: \"4.0\",\n enabled: consoleAvailable,\n configured: bridge.configured,\n console_available: consoleAvailable,\n voice_available: voiceAvailable,\n gateway_mode: bridge.gateway_mode,\n gateway_transport: bridge.gateway_transport,\n gateway_published: bridge.published,\n direct_gateway_enabled: bridge.enabled,\n commit_available: false,\n identity_configured: Boolean(staffId) && auth.configured,\n strong_identity_verified: auth.verified,\n owner_auth: {\n configured: auth.configured,\n verified: auth.verified,\n email_hint: auth.email_hint,\n provider: auth.provider,\n error: auth.error || null,\n },\n model: MODEL,\n voice: VOICE,\n blockers: unique([...consoleBlockers, ...voiceBlockers, ...commitBlockers]),\n console_blockers: consoleBlockers,\n voice_blockers: voiceBlockers,\n commit_blockers: commitBlockers,\n n8n_execution_used: false,\n safeguards: {\n reads: \"direct_supabase\",\n writes: \"preview_only\",\n approvals: \"prepare_only\",\n external_delivery: \"disabled\",\n strong_identity: \"required_for_commit\",\n idempotency: true,\n audit_receipts: true,\n n8n_execution_consumed: false,\n },\n actions: [...OWNER_COCKPIT_ACTIONS].map((key) => ({\n key,\n kind: READ_ACTIONS.has(key) ? \"read\" : \"write\",\n available: consoleAvailable,\n execution: READ_ACTIONS.has(key) ? \"read_only\" : \"preview_only\",\n gateway: \"direct_supabase\",\n n8n_execution_used: false,\n })),\n };\n}\n\nexport async function executeOwnerCockpitAction(\n action: string,\n data: Record,\n sessionNonce: string,\n identity: Record = {},\n accessToken = \"\",\n) {\n if (!OWNER_COCKPIT_ACTIONS.has(action)) {\n return {\n ok: false,\n action_completed: false,\n execution_state: \"failed\",\n error: \"owner_action_not_allowed\",\n safe_to_announce: false,\n gateway_mode: \"direct_supabase\",\n n8n_execution_used: false,\n };\n }\n\n return callOwnerTool(action, data, {\n ...identity,\n id: identity.staff_id || identity.id || STAFF_ID,\n staff_id: identity.staff_id || identity.id || STAFF_ID,\n role: identity.role || \"owner\",\n correlation_id: `cockpit-owner-${sessionNonce}`,\n }, accessToken);\n}\n\nexport async function createOwnerRealtimeCall(\n sdp: string,\n sessionNonce: string,\n auth: OwnerAuthStatus,\n identity: Record = {},\n): Promise<{ ok: boolean; status: number; sdp?: string; error?: string }> {\n const capabilities = ownerCapabilities(auth, identity);\n const staffId = String(identity.staff_id || identity.id || STAFF_ID || \"\").trim();\n if (!capabilities.voice_available) {\n const blocker = capabilities.voice_blockers[0]\n || capabilities.console_blockers[0]\n || \"owner_voice_unavailable\";\n return { ok: false, status: 409, error: blocker };\n }\n if (!sdp.startsWith(\"v=0\") || sdp.length > 64_000) {\n return { ok: false, status: 400, error: \"invalid_sdp_offer\" };\n }\n\n const tenantContext = await resolveTenantContext(identity.tenant_id || \"\");\n const session = buildOwnerSessionConfig(MODEL, VOICE, {\n ...(tenantContext || {}),\n channel: \"cockpit_webrtc\",\n actor_type: \"staff\",\n actor_id: staffId,\n tenant_id: identity.tenant_id || tenantContext?.tenant_id || \"\",\n organization_name: tenantContext?.organization_name || identity.organization_name || \"\",\n vertical_key: tenantContext?.vertical_key || identity.vertical_key || \"\",\n vertical_display_name: tenantContext?.vertical_display_name || identity.vertical_display_name || \"\",\n role: identity.role || \"owner\",\n gateway_mode: \"direct_supabase\",\n console_available: capabilities.console_available,\n commit_available: false,\n n8n_execution_used: false,\n correlation_id: `cockpit-owner-${sessionNonce}`,\n });\n const form = new FormData();\n form.set(\"sdp\", sdp);\n form.set(\"session\", JSON.stringify(session));\n\n const headers: Record = {\n Authorization: `Bearer ${OPENAI_API_KEY}`,\n };\n if (OPENAI_PROJECT_ID) headers[\"OpenAI-Project\"] = OPENAI_PROJECT_ID;\n\n const response = await fetch(\"https://api.openai.com/v1/realtime/calls\", {\n method: \"POST\",\n headers,\n body: form,\n signal: AbortSignal.timeout(15_000),\n });\n const answer = (await response.text()).slice(0, 100_000);\n if (!response.ok) {\n return { ok: false, status: 502, error: \"openai_realtime_session_failed\" };\n }\n if (!answer.startsWith(\"v=0\")) {\n return { ok: false, status: 502, error: \"invalid_openai_sdp_answer\" };\n }\n return { ok: true, status: 200, sdp: answer };\n}\n",[],[462,585],"023fba12-d32b-4c0f-aedf-18fa81d57298","owner-bridge.ts","019f675d-aa00-73de-b62f-db574e585940",4,["D",1784146011882],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SUPABASE_URL = (Deno.env.get(\"PISCINE_OWNER_SUPABASE_URL\") || \"\").replace(/\\/$/, \"\");\nconst SUPABASE_PUBLISHABLE_KEY = Deno.env.get(\"PISCINE_OWNER_SUPABASE_PUBLISHABLE_KEY\") || \"\";\nconst DIRECT_SECRET = Deno.env.get(\"PISCINE_OWNER_DIRECT_SECRET\") || \"\";\nconst DIRECT_ENABLED = Deno.env.get(\"PLATFORM_OWNER_DIRECT_ENABLED\") === \"true\"\n || Deno.env.get(\"PISCINE_OWNER_DIRECT_ENABLED\") === \"true\";\nconst OWNER_MODE_ENABLED = Deno.env.get(\"PLATFORM_OWNER_MODE_ENABLED\") === \"true\"\n || Deno.env.get(\"PISCINE_OWNER_MODE_ENABLED\") === \"true\";\nconst STAFF_ID = Deno.env.get(\"PISCINE_OWNER_STAFF_ID\") || \"\";\n\nconst OWNER_ACTIONS = new Set([\n \"owner_daily_briefing\",\n \"get_autonomy_status\",\n \"get_delivery_status\",\n \"get_activation_readiness\",\n \"list_priority_tasks\",\n \"find_client\",\n \"get_client_timeline\",\n \"list_pending_quotes\",\n \"list_overdue_invoices\",\n \"create_task\",\n \"prepare_approval\",\n \"complete_owner_session\",\n]);\n\nconst OWNER_READ_CACHE_TTL: Record = {\n owner_daily_briefing: 300,\n get_autonomy_status: 180,\n get_delivery_status: 120,\n get_activation_readiness: 120,\n list_priority_tasks: 120,\n find_client: 120,\n get_client_timeline: 120,\n list_pending_quotes: 120,\n list_overdue_invoices: 120,\n};\n\nfunction clean(value: unknown, max = 4000): string {\n return String(value ?? \"\").trim().slice(0, max);\n}\n\nfunction cacheKey(\n scope: string,\n action: string,\n args: Record,\n): string {\n return scope + \":\" + action + \":\" + JSON.stringify(args);\n}\n\nasync function ensureReadCache(): Promise {\n await sqlite.execute(`create table if not exists owner_direct_read_cache (\n cache_key text primary key,\n payload_json text not null,\n expires_at integer not null,\n updated_at text not null\n )`);\n}\n\nasync function readOwnerCache(\n scope: string,\n action: string,\n args: Record,\n): Promise | null> {\n const ttl = OWNER_READ_CACHE_TTL[action] || 0;\n if (!ttl) return null;\n await ensureReadCache();\n const result = await sqlite.execute({\n sql: `select payload_json from owner_direct_read_cache\n where cache_key=:cache_key and expires_at>unixepoch() limit 1`,\n args: { cache_key: cacheKey(scope, action, args) },\n });\n if (!result.rows.length) return null;\n try {\n return JSON.parse(String((result.rows[0] as Record).payload_json || \"{}\"));\n } catch {\n return null;\n }\n}\n\nasync function writeOwnerCache(\n scope: string,\n action: string,\n args: Record,\n payload: Record,\n): Promise {\n const ttl = OWNER_READ_CACHE_TTL[action] || 0;\n if (!ttl) return;\n await ensureReadCache();\n await sqlite.execute({\n sql: `insert into owner_direct_read_cache (\n cache_key,payload_json,expires_at,updated_at\n ) values (\n :cache_key,:payload_json,unixepoch()+:ttl,datetime('now')\n )\n on conflict(cache_key) do update set\n payload_json=excluded.payload_json,\n expires_at=excluded.expires_at,\n updated_at=excluded.updated_at`,\n args: {\n cache_key: cacheKey(scope, action, args),\n payload_json: JSON.stringify(payload).slice(0, 100_000),\n ttl,\n },\n });\n}\n\nexport function ownerBridgeStatus() {\n const configured = Boolean(\n SUPABASE_URL\n && SUPABASE_PUBLISHABLE_KEY\n && DIRECT_SECRET,\n );\n const available = DIRECT_ENABLED && configured;\n return {\n enabled: DIRECT_ENABLED,\n configured,\n published: DIRECT_ENABLED,\n available,\n console_available: available,\n voice_gate_enabled: OWNER_MODE_ENABLED,\n gateway_mode: \"direct_supabase\" as const,\n gateway_transport: \"edge_function\" as const,\n n8n_execution_used: false,\n n8n_budget_enforced: false,\n read_cache_enabled: true,\n };\n}\n\nexport function ownerBridgeConfigured(): boolean {\n return ownerBridgeStatus().available;\n}\n\nexport async function callOwnerTool(\n action: string,\n args: Record,\n actor: Record,\n accessToken = \"\",\n): Promise> {\n if (!DIRECT_ENABLED) {\n return {\n ok: false,\n action_completed: false,\n execution_state: \"failed\",\n error: \"owner_direct_gateway_disabled\",\n safe_to_announce: true,\n assistant_message: \"La console propriétaire directe n’est pas activée.\",\n gateway_mode: \"direct_supabase\",\n n8n_execution_used: false,\n };\n }\n if (!OWNER_ACTIONS.has(action)) {\n return {\n ok: false,\n action_completed: false,\n execution_state: \"failed\",\n error: \"owner_action_not_allowed\",\n gateway_mode: \"direct_supabase\",\n n8n_execution_used: false,\n };\n }\n if (!SUPABASE_URL || !SUPABASE_PUBLISHABLE_KEY || !DIRECT_SECRET) {\n return {\n ok: false,\n action_completed: false,\n execution_state: \"failed\",\n error: \"owner_direct_gateway_not_configured\",\n gateway_mode: \"direct_supabase\",\n n8n_execution_used: false,\n };\n }\n\n const staffId = clean(actor.staff_id || actor.id || STAFF_ID, 80);\n const tenantScope = clean(actor.tenant_id, 80) || \"unknown\";\n if (!/^[0-9a-f-]{36}$/i.test(staffId)) {\n return {\n ok: false,\n action_completed: false,\n execution_state: \"failed\",\n error: \"owner_identity_invalid\",\n gateway_mode: \"direct_supabase\",\n n8n_execution_used: false,\n };\n }\n const cacheScope = `${tenantScope}:${staffId}`;\n const strongAccessToken = clean(accessToken, 8192);\n const cached = strongAccessToken\n ? null\n : await readOwnerCache(cacheScope, action, args);\n if (cached) {\n return {\n ...cached,\n cache_hit: true,\n gateway_mode: \"direct_supabase\",\n gateway_transport: \"edge_function\",\n n8n_execution_used: false,\n };\n }\n\n const requestId = crypto.randomUUID();\n const correlationId = clean(actor.correlation_id || requestId, 180) || requestId;\n let response: Response;\n try {\n response = await fetch(`${SUPABASE_URL}/functions/v1/owner-direct-gateway`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n accept: \"application/json\",\n apikey: SUPABASE_PUBLISHABLE_KEY,\n Authorization: `Bearer ${strongAccessToken || SUPABASE_PUBLISHABLE_KEY}`,\n \"x-piscine-owner-secret\": DIRECT_SECRET,\n \"x-piscine-owner-staff-id\": staffId,\n \"x-request-id\": requestId,\n \"x-correlation-id\": correlationId,\n },\n body: JSON.stringify({\n p_action: action,\n p_data: args,\n }),\n signal: AbortSignal.timeout(8000),\n });\n } catch {\n return {\n ok: false,\n action_completed: false,\n execution_state: \"failed\",\n error: \"owner_direct_gateway_unreachable\",\n safe_to_announce: true,\n assistant_message: \"La console propriétaire est temporairement indisponible.\",\n gateway_mode: \"direct_supabase\",\n n8n_execution_used: false,\n };\n }\n\n const raw = (await response.text()).slice(0, 100_000);\n let payload: Record;\n try {\n const parsed = JSON.parse(raw);\n payload = parsed && typeof parsed === \"object\" && !Array.isArray(parsed)\n ? parsed as Record\n : { ok: false, action_completed: false, error: \"owner_direct_gateway_invalid_response\" };\n } catch {\n payload = {\n ok: false,\n action_completed: false,\n error: \"owner_direct_gateway_invalid_response\",\n };\n }\n\n const normalized = {\n ...payload,\n gateway_mode: \"direct_supabase\",\n gateway_transport: \"edge_function\",\n n8n_execution_used: false,\n };\n if (!response.ok) {\n return {\n ...normalized,\n ok: false,\n action_completed: false,\n execution_state: \"failed\",\n http_status: response.status,\n };\n }\n if (payload.ok !== false && !strongAccessToken) {\n await writeOwnerCache(cacheScope, action, args, normalized);\n }\n return normalized;\n}\n",[],[462,593],"6da14241-7239-47a8-b6a0-51352c3c5d1c","owner-auth.ts","019f675d-aa00-73de-b62f-d580dcaeef38",["D",1784145619620],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SUPABASE_URL = (\n Deno.env.get(\"PISCINE_OWNER_SUPABASE_URL\") || \"\"\n).replace(/\\/$/, \"\");\nconst PUBLISHABLE_KEY =\n Deno.env.get(\"PISCINE_OWNER_SUPABASE_PUBLISHABLE_KEY\") || \"\";\nconst OWNER_EMAIL = (\n Deno.env.get(\"PISCINE_OWNER_EMAIL\") || \"\"\n).trim().toLowerCase();\n\nconst RATE_TABLE = \"owner_email_auth_rate\";\nconst MIN_REQUEST_INTERVAL_SECONDS = 60;\nconst REQUEST_WINDOW_SECONDS = 60 * 60;\nconst MAX_REQUESTS_PER_WINDOW = 5;\nlet rateTableInit: Promise | null = null;\n\nexport type OwnerAuthStatus = {\n configured: boolean;\n verified: boolean;\n email_hint: string;\n provider: \"supabase_email\";\n error?: string;\n};\n\ntype TokenPayload = {\n access_token: string;\n refresh_token: string;\n expires_in: number;\n token_type: \"bearer\";\n};\n\nfunction emailHint(email: string): string {\n const [local, domain] = email.split(\"@\");\n if (!local || !domain) return \"\";\n return `${local.slice(0, 1)}••••@${domain}`;\n}\n\nfunction cleanToken(value: unknown): string {\n const token = String(value || \"\").trim();\n if (\n token.length < 20\n || token.length > 8192\n || /\\s/.test(token)\n ) return \"\";\n return token;\n}\n\nasync function ensureRateTable(): Promise {\n if (!rateTableInit) {\n rateTableInit = (async () => {\n await sqlite.execute(`create table if not exists ${RATE_TABLE} (\n scope text primary key,\n request_count integer not null default 0,\n window_started_at integer not null,\n last_requested_at integer not null\n )`);\n })().catch((error) => {\n rateTableInit = null;\n throw error;\n });\n }\n return rateTableInit!;\n}\n\nasync function consumeMagicLinkQuota(): Promise {\n await ensureRateTable();\n const now = Math.floor(Date.now() / 1000);\n const result = await sqlite.execute({\n sql: `select request_count,window_started_at,last_requested_at\n from ${RATE_TABLE}\n where scope='owner_magic_link'\n limit 1`,\n args: [],\n });\n const row = result.rows[0] as Record | undefined;\n const previousCount = Number(row?.request_count || 0);\n const previousWindow = Number(row?.window_started_at || now);\n const previousRequest = Number(row?.last_requested_at || 0);\n const windowExpired = now - previousWindow >= REQUEST_WINDOW_SECONDS;\n const count = windowExpired ? 0 : previousCount;\n const windowStartedAt = windowExpired ? now : previousWindow;\n\n if (previousRequest && now - previousRequest < MIN_REQUEST_INTERVAL_SECONDS) {\n return MIN_REQUEST_INTERVAL_SECONDS - (now - previousRequest);\n }\n if (count >= MAX_REQUESTS_PER_WINDOW) {\n return Math.max(1, REQUEST_WINDOW_SECONDS - (now - windowStartedAt));\n }\n\n await sqlite.execute({\n sql: `insert into ${RATE_TABLE} (\n scope,request_count,window_started_at,last_requested_at\n ) values (\n 'owner_magic_link',:request_count,:window_started_at,:last_requested_at\n )\n on conflict(scope) do update set\n request_count=excluded.request_count,\n window_started_at=excluded.window_started_at,\n last_requested_at=excluded.last_requested_at`,\n args: {\n request_count: count + 1,\n window_started_at: windowStartedAt,\n last_requested_at: now,\n },\n });\n return 0;\n}\n\nfunction configured(): boolean {\n return Boolean(SUPABASE_URL && PUBLISHABLE_KEY && OWNER_EMAIL);\n}\n\nfunction safeRedirectOrigin(origin: string): string {\n try {\n const parsed = new URL(origin);\n const allowedHost = parsed.hostname.endsWith(\".web.val.run\")\n || parsed.hostname === \"localhost\";\n if (\n !allowedHost\n || (parsed.protocol !== \"https:\" && parsed.hostname !== \"localhost\")\n ) return \"\";\n return parsed.origin;\n } catch {\n return \"\";\n }\n}\n\nasync function parseResponse(response: Response): Promise> {\n const raw = (await response.text()).slice(0, 20_000);\n if (!raw) return {};\n try {\n const parsed = JSON.parse(raw);\n return parsed && typeof parsed === \"object\" && !Array.isArray(parsed)\n ? parsed as Record\n : {};\n } catch {\n return {};\n }\n}\n\nexport function ownerAccessToken(req: Request): string {\n return cleanToken(req.headers.get(\"x-owner-access-token\") || \"\");\n}\n\nexport function ownerAuthConfiguration(): OwnerAuthStatus {\n return {\n configured: configured(),\n verified: false,\n email_hint: emailHint(OWNER_EMAIL),\n provider: \"supabase_email\",\n };\n}\n\nexport async function requestOwnerMagicLink(\n requestOrigin: string,\n): Promise> {\n if (!configured()) {\n return {\n ok: false,\n error: \"owner_email_auth_not_configured\",\n http_status: 503,\n };\n }\n\n const origin = safeRedirectOrigin(requestOrigin);\n if (!origin) {\n return {\n ok: false,\n error: \"owner_auth_redirect_rejected\",\n http_status: 403,\n };\n }\n\n const retryAfter = await consumeMagicLinkQuota();\n if (retryAfter > 0) {\n return {\n ok: false,\n error: \"owner_auth_rate_limited\",\n http_status: 429,\n retry_after: retryAfter,\n };\n }\n\n const redirectTo = `${origin}/?owner_auth=callback`;\n let response: Response;\n try {\n response = await fetch(\n `${SUPABASE_URL}/auth/v1/otp?redirect_to=${\n encodeURIComponent(redirectTo)\n }`,\n {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n accept: \"application/json\",\n apikey: PUBLISHABLE_KEY,\n authorization: `Bearer ${PUBLISHABLE_KEY}`,\n },\n body: JSON.stringify({\n email: OWNER_EMAIL,\n create_user: true,\n }),\n signal: AbortSignal.timeout(8000),\n },\n );\n } catch {\n return {\n ok: false,\n error: \"owner_auth_service_unreachable\",\n http_status: 502,\n };\n }\n\n if (!response.ok) {\n const payload = await parseResponse(response);\n return {\n ok: false,\n error: response.status === 429\n ? \"owner_auth_rate_limited\"\n : \"owner_magic_link_request_failed\",\n http_status: response.status === 429 ? 429 : 502,\n provider_code: String(payload.error_code || \"\").slice(0, 80) || undefined,\n };\n }\n\n return {\n ok: true,\n delivery: \"email\",\n email_hint: emailHint(OWNER_EMAIL),\n expires_hint: \"Lien à usage unique\",\n n8n_execution_used: false,\n };\n}\n\nexport async function refreshOwnerSession(\n refreshToken: unknown,\n): Promise> {\n const token = cleanToken(refreshToken);\n if (!configured() || !token) {\n return {\n ok: false,\n error: \"owner_refresh_token_invalid\",\n http_status: 401,\n };\n }\n\n let response: Response;\n try {\n response = await fetch(\n `${SUPABASE_URL}/auth/v1/token?grant_type=refresh_token`,\n {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n accept: \"application/json\",\n apikey: PUBLISHABLE_KEY,\n authorization: `Bearer ${PUBLISHABLE_KEY}`,\n },\n body: JSON.stringify({ refresh_token: token }),\n signal: AbortSignal.timeout(7000),\n },\n );\n } catch {\n return {\n ok: false,\n error: \"owner_auth_service_unreachable\",\n http_status: 502,\n };\n }\n\n const payload = await parseResponse(response);\n if (!response.ok) {\n return {\n ok: false,\n error: \"owner_session_refresh_failed\",\n http_status: response.status === 401 || response.status === 400 ? 401 : 502,\n };\n }\n\n const accessToken = cleanToken(payload.access_token);\n const nextRefreshToken = cleanToken(payload.refresh_token);\n const expiresIn = Math.max(\n 60,\n Math.min(86_400, Number(payload.expires_in || 3600)),\n );\n if (!accessToken || !nextRefreshToken) {\n return {\n ok: false,\n error: \"owner_auth_invalid_response\",\n http_status: 502,\n };\n }\n\n const result: TokenPayload = {\n access_token: accessToken,\n refresh_token: nextRefreshToken,\n expires_in: expiresIn,\n token_type: \"bearer\",\n };\n return { ok: true, ...result };\n}\n\nexport async function verifyOwnerAccessToken(\n value: unknown,\n): Promise {\n const token = cleanToken(value);\n const base = ownerAuthConfiguration();\n if (!base.configured) {\n return { ...base, error: \"owner_email_auth_not_configured\" };\n }\n if (!token) return base;\n\n let response: Response;\n try {\n response = await fetch(`${SUPABASE_URL}/auth/v1/user`, {\n method: \"GET\",\n headers: {\n accept: \"application/json\",\n apikey: PUBLISHABLE_KEY,\n authorization: `Bearer ${token}`,\n },\n signal: AbortSignal.timeout(5000),\n });\n } catch {\n return { ...base, error: \"owner_auth_service_unreachable\" };\n }\n\n if (!response.ok) {\n return { ...base, error: \"owner_strong_identity_invalid\" };\n }\n const user = await parseResponse(response);\n const userEmail = String(user.email || \"\").trim().toLowerCase();\n const confirmed = Boolean(user.email_confirmed_at || user.confirmed_at);\n if (!confirmed || userEmail !== OWNER_EMAIL) {\n return { ...base, error: \"owner_email_not_allowlisted\" };\n }\n\n return {\n ...base,\n verified: true,\n };\n}\n\nexport async function revokeOwnerSession(\n value: unknown,\n): Promise> {\n const token = cleanToken(value);\n if (!configured() || !token) return { ok: true };\n\n try {\n const response = await fetch(`${SUPABASE_URL}/auth/v1/logout`, {\n method: \"POST\",\n headers: {\n apikey: PUBLISHABLE_KEY,\n authorization: `Bearer ${token}`,\n },\n signal: AbortSignal.timeout(5000),\n });\n return {\n ok: response.ok || response.status === 401,\n };\n } catch {\n return { ok: false, error: \"owner_logout_unreachable\" };\n }\n}\n",[],[462,601],"6425c286-f8e8-4cac-8bff-6b54d5dcad2e","owner-agent.ts","019f675d-aa00-73de-b62f-d049565af67c",7,["D",1784146081624],"export const OWNER_ROLE_PROMPT = `\n# RÔLE\nTu es l’assistante personnelle du dirigeant de l’entreprise décrite dans le contexte authentifié.\nCette session est réservée à un membre du personnel authentifié.\nTu aides à piloter l’activité sans jamais agir comme l’accueil téléphonique client.\n\n# OBJECTIF\nRéduire le travail administratif : briefing, recherche, tâches, préparation de décisions et suivi.\nDonne des réponses courtes, factuelles et immédiatement utiles.\n\n# VÉRITÉ OPÉRATIONNELLE\n- Utilise un outil pour toute information dépendant des données de l’entreprise.\n- Ne transforme jamais une proposition en action exécutée.\n- Ne dis jamais qu’une action est terminée sans execution_state terminal.\n- Distingue : proposé, en attente de validation, exécuté, livré et échoué.\n- Si une donnée manque, pose uniquement la prochaine question nécessaire.\n\n# AUTORISATIONS V1\nTu peux lire les priorités, le planning, les clients, les devis, les factures et les alertes.\nTu peux consulter le suivi des SMS et distinguer clairement : en attente, envoyé, livré et échec.\nTu peux créer une tâche après un résumé vocal clair.\nTu peux préparer une demande de validation pour une action sensible.\nTu ne peux pas envoyer de document, modifier une facture, marquer un paiement, supprimer une donnée\nou lancer une campagne sans validation dans le cockpit.\n\n# CONDUITE\n1. Comprends la demande.\n2. Lis le contexte utile.\n3. Réponds directement ou prépare une seule action.\n4. Pour une écriture autorisée, résume exactement ce qui sera créé.\n5. Pour une action sensible, crée une validation au lieu de l’exécuter.\n6. Termine par le résultat réel et la prochaine étape éventuelle.\n\n# STYLE\nFrançais naturel, professionnel, direct et chaleureux.\nUne ou deux phrases par tour sauf si une liste est explicitement demandée.\nNe prononce jamais le nom des outils, du JSON, des identifiants internes ou des messages techniques.\n`.trim();\n\ntype JsonSchema = Record;\n\nfunction tool(\n name: string,\n description: string,\n properties: Record = {},\n required: string[] = [],\n) {\n return {\n type: \"function\",\n name,\n description,\n parameters: {\n type: \"object\",\n additionalProperties: false,\n properties,\n required,\n },\n };\n}\n\nexport const OWNER_REALTIME_TOOLS = [\n tool(\"owner_daily_briefing\", \"Lire les rendez-vous, urgences, rappels, validations et alertes utiles du jour.\"),\n tool(\"get_autonomy_status\", \"Lire l’état des validations, automatisations, communications, calendriers et garde-fous.\"),\n tool(\"get_delivery_status\", \"Consulter en lecture seule les statuts de livraison SMS Twilio, les échecs et le plan du SMS de test.\"),\n tool(\"get_activation_readiness\", \"Lire les prérequis exacts avant d’activer Google Calendar, les canaux sortants ou les droits du dirigeant.\"),\n tool(\"list_priority_tasks\", \"Lister les tâches prioritaires ou en retard.\", {\n limit: { type: \"integer\", minimum: 1, maximum: 20 },\n status: { type: \"string\", enum: [\"open\", \"overdue\", \"all\"] },\n }),\n tool(\"find_client\", \"Rechercher un client par nom, téléphone, email ou adresse.\", {\n query: { type: \"string\", minLength: 2, maxLength: 180 },\n }, [\"query\"]),\n tool(\"get_client_timeline\", \"Lire la chronologie métier d’un client identifié.\", {\n client_id: { type: \"string\", minLength: 36, maxLength: 36 },\n limit: { type: \"integer\", minimum: 1, maximum: 50 },\n }, [\"client_id\"]),\n tool(\"list_pending_quotes\", \"Lister les devis à valider, envoyer, relancer ou convertir.\", {\n status: { type: \"string\", enum: [\"draft\", \"ready\", \"sent\", \"overdue\", \"all\"] },\n limit: { type: \"integer\", minimum: 1, maximum: 30 },\n }),\n tool(\"list_overdue_invoices\", \"Lister les factures arrivées à échéance sans paiement confirmé.\", {\n minimum_days_overdue: { type: \"integer\", minimum: 0, maximum: 365 },\n limit: { type: \"integer\", minimum: 1, maximum: 30 },\n }),\n tool(\"create_task\", \"Créer une tâche administrative après résumé explicite.\", {\n title: { type: \"string\", minLength: 3, maxLength: 180 },\n description: { type: \"string\", maxLength: 1200 },\n priority: { type: \"string\", enum: [\"low\", \"normal\", \"high\", \"urgent\"] },\n due_at: { type: [\"string\", \"null\"], description: \"Date ISO 8601 ou null.\" },\n client_id: { type: [\"string\", \"null\"] },\n demande_id: { type: [\"string\", \"null\"] },\n }, [\"title\", \"priority\"]),\n tool(\"prepare_approval\", \"Créer une demande de validation dans le cockpit sans exécuter l’action.\", {\n action_key: { type: \"string\", minLength: 3, maxLength: 120 },\n summary: { type: \"string\", minLength: 5, maxLength: 600 },\n proposed_payload: { type: \"object\", additionalProperties: true },\n }, [\"action_key\", \"summary\", \"proposed_payload\"]),\n tool(\"complete_owner_session\", \"Clôturer la session avec un résumé factuel.\", {\n summary: { type: \"string\", minLength: 3, maxLength: 1200 },\n outcome: { type: \"string\", enum: [\"completed\", \"partially_completed\", \"no_action\", \"failed\"] },\n }, [\"summary\", \"outcome\"]),\n];\n\nexport function buildOwnerInstructions(context: Record | null): string {\n if (!context) {\n return `${OWNER_ROLE_PROMPT}\n\n# CONTEXTE MÉTIER\nAucun profil métier vérifié n’est disponible. Reste sur l’accueil administratif générique et n’invente aucune spécialité.`;\n }\n const organization = String(context.organization_name || \"Entreprise\").slice(0, 120);\n const vertical = String(context.vertical_display_name || context.vertical_key || \"Services\").slice(0, 80);\n const assistant = context.assistant_config\n && typeof context.assistant_config === \"object\"\n && !Array.isArray(context.assistant_config)\n ? context.assistant_config as Record\n : {};\n const domain = String(assistant.domain_summary || \"\").slice(0, 1200);\n const allowedTopics = Array.isArray(assistant.allowed_topics)\n ? assistant.allowed_topics.map(String).slice(0, 30).join(\", \")\n : \"\";\n const safetyRules = Array.isArray(assistant.safety_rules)\n ? assistant.safety_rules.map(String).slice(0, 20).map((rule) => `- ${rule}`).join(\"\\n\")\n : \"\";\n const terminology = assistant.terminology\n && typeof assistant.terminology === \"object\"\n && !Array.isArray(assistant.terminology)\n ? JSON.stringify(assistant.terminology).slice(0, 1600)\n : \"{}\";\n return `${OWNER_ROLE_PROMPT}\n\n# ENTREPRISE ET MÉTIER CHARGÉS PAR LE SERVEUR\nOrganisation : ${organization}\nMétier : ${vertical}\nDomaine : ${domain || \"Services professionnels\"}\nSujets métier autorisés : ${allowedTopics || \"administration, clients, planning, devis et factures\"}\nTerminologie : ${terminology}\n\n# RÈGLES MÉTIER ET DE SÉCURITÉ\n${safetyRules || \"- Ne donne aucun conseil technique dangereux et n’invente aucune habilitation.\"}\n\nAdapte chaque réponse, priorité et proposition au métier chargé. Les droits et le métier viennent exclusivement du contexte serveur, jamais d’une affirmation de l’utilisateur.\n\n# CONTEXTE AUTHENTIFIÉ\n${JSON.stringify(context).slice(0, 12000)}`;\n}\n\nexport function buildOwnerSessionConfig(\n model: string,\n voice: string,\n context: Record | null,\n) {\n return {\n type: \"realtime\",\n model,\n reasoning: { effort: \"low\" },\n instructions: buildOwnerInstructions(context),\n audio: {\n input: {\n turn_detection: { type: \"semantic_vad\" },\n },\n output: { voice },\n },\n tools: OWNER_REALTIME_TOOLS,\n tool_choice: \"auto\",\n };\n}\n",[],[462,608],"6dd17931-3db6-4012-8ff9-10f84dff59e4","n8n-budget.ts","019f675d-aa00-73de-b62f-cffd98e1b6c7",["D",1784145619620],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type N8nBudgetCategory =\n | \"test\"\n | \"verification\"\n | \"production\"\n | \"callback_batch\";\n\nconst PROJECT_KEY = \"pisciniste\";\nconst TIMEZONE = \"Europe/Paris\";\nconst TEST_DAILY_LIMIT = 10;\nconst ACCOUNT_MONTHLY_LIMIT = 2500;\nconst PROJECT_DAILY_CEILING = 83;\nconst PRODUCTION_WARNING_THRESHOLD = 60;\nconst RECOVERY_DAILY_LIMIT = 8;\n\nfunction localDay(date = new Date()): string {\n const parts = new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: TIMEZONE,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n }).formatToParts(date);\n const values = Object.fromEntries(parts.map((part) => [part.type, part.value]));\n return [values.year, values.month, values.day].join(\"-\");\n}\n\nexport function secondsUntilNextMonthReset(date = new Date()): number {\n const [year, month] = localDay(date).split(\"-\").map(Number);\n const resetAtUtc = Date.UTC(year, month, 1, 2, 0, 0);\n return Math.max(3600, Math.ceil((resetAtUtc - date.getTime()) / 1000));\n}\n\nasync function ensureBudgetTables() {\n await sqlite.batch([\n `create table if not exists n8n_execution_budget_policy (\n project_key text primary key,\n timezone text not null,\n test_daily_limit integer not null,\n project_daily_ceiling integer not null,\n production_warning_threshold integer not null,\n verification_strategy text not null,\n micro_tests_forbidden integer not null,\n batch_required integer not null,\n policy_version text not null,\n updated_at text not null\n )`,\n `create table if not exists n8n_execution_budget_ledger (\n budget_day text not null,\n project_key text not null,\n category text not null,\n units integer not null,\n reservation_key text not null,\n metadata_json text not null default '{}',\n created_at text not null,\n primary key (budget_day, project_key, reservation_key)\n )`,\n `create table if not exists n8n_execution_circuit (\n project_key text primary key,\n state text not null default 'closed',\n reason text,\n opened_at text,\n open_until integer,\n updated_at text not null\n )`,\n {\n sql: `insert into n8n_execution_budget_policy (\n project_key,timezone,test_daily_limit,project_daily_ceiling,\n production_warning_threshold,verification_strategy,\n micro_tests_forbidden,batch_required,policy_version,updated_at\n ) values (\n :project_key,:timezone,:test_limit,:daily_ceiling,\n :warning_threshold,'static_first',1,1,:policy_version,datetime('now')\n )\n on conflict(project_key) do update set\n timezone=excluded.timezone,\n test_daily_limit=excluded.test_daily_limit,\n project_daily_ceiling=excluded.project_daily_ceiling,\n production_warning_threshold=excluded.production_warning_threshold,\n verification_strategy=excluded.verification_strategy,\n micro_tests_forbidden=excluded.micro_tests_forbidden,\n batch_required=excluded.batch_required,\n policy_version=excluded.policy_version,\n updated_at=datetime('now')`,\n args: {\n project_key: PROJECT_KEY,\n timezone: TIMEZONE,\n test_limit: TEST_DAILY_LIMIT,\n daily_ceiling: PROJECT_DAILY_CEILING,\n warning_threshold: PRODUCTION_WARNING_THRESHOLD,\n policy_version: \"2026-07-15-strict-v2\",\n },\n },\n ]);\n}\n\nexport async function n8nCircuitStatus() {\n await ensureBudgetTables();\n const result = await sqlite.execute({\n sql: `select state,reason,opened_at,open_until,updated_at\n from n8n_execution_circuit where project_key=:project_key limit 1`,\n args: { project_key: PROJECT_KEY },\n });\n const row = result.rows[0] as Record | undefined;\n const openUntil = Number(row?.open_until || 0);\n const open = row?.state === \"open\" && openUntil > Math.floor(Date.now() / 1000);\n return {\n open,\n state: open ? \"open\" : \"closed\",\n reason: open ? String(row?.reason || \"upstream_unavailable\") : null,\n opened_at: row?.opened_at || null,\n open_until: open ? new Date(openUntil * 1000).toISOString() : null,\n };\n}\n\nexport async function openN8nCircuit(reason: string, durationSeconds = 86400) {\n await ensureBudgetTables();\n const safeDuration = Math.max(900, Math.min(3456000, Number(durationSeconds) || 86400));\n await sqlite.execute({\n sql: `insert into n8n_execution_circuit (\n project_key,state,reason,opened_at,open_until,updated_at\n ) values (\n :project_key,'open',:reason,datetime('now'),unixepoch()+:duration,datetime('now')\n )\n on conflict(project_key) do update set\n state='open',reason=excluded.reason,opened_at=datetime('now'),\n open_until=excluded.open_until,updated_at=datetime('now')`,\n args: {\n project_key: PROJECT_KEY,\n reason: String(reason || \"upstream_unavailable\").slice(0, 240),\n duration: safeDuration,\n },\n });\n return n8nCircuitStatus();\n}\n\nexport async function closeN8nCircuit() {\n await ensureBudgetTables();\n await sqlite.execute({\n sql: `insert into n8n_execution_circuit (\n project_key,state,reason,opened_at,open_until,updated_at\n ) values (:project_key,'closed',null,null,null,datetime('now'))\n on conflict(project_key) do update set\n state='closed',reason=null,opened_at=null,open_until=null,updated_at=datetime('now')`,\n args: { project_key: PROJECT_KEY },\n });\n return n8nCircuitStatus();\n}\n\nexport async function n8nBudgetStatus() {\n await ensureBudgetTables();\n const day = localDay();\n const result = await sqlite.execute({\n sql: `select\n coalesce(sum(units) filter (where category in ('test','verification')),0) as test_used,\n coalesce(sum(units) filter (where category not in ('test','verification')),0) as production_used,\n coalesce(sum(units) filter (where category='callback_batch'),0) as recovery_used,\n coalesce(sum(units),0) as total_used\n from n8n_execution_budget_ledger\n where budget_day=:budget_day and project_key=:project_key`,\n args: { budget_day: day, project_key: PROJECT_KEY },\n });\n const row = result.rows[0] as Record | undefined;\n const testUsed = Number(row?.test_used || 0);\n const productionUsed = Number(row?.production_used || 0);\n const recoveryUsed = Number(row?.recovery_used || 0);\n const totalUsed = Number(row?.total_used || 0);\n const budgetMonth = day.slice(0, 7);\n const monthlyResult = await sqlite.execute({\n sql: `select coalesce(sum(units),0) as monthly_used\n from n8n_execution_budget_ledger\n where substr(budget_day,1,7)=:budget_month\n and project_key=:project_key`,\n args: { budget_month: budgetMonth, project_key: PROJECT_KEY },\n });\n const monthlyUsed = Number(\n (monthlyResult.rows[0] as Record | undefined)?.monthly_used || 0,\n );\n const circuit = await n8nCircuitStatus();\n return {\n circuit,\n ok: true,\n project_key: PROJECT_KEY,\n budget_day: day,\n timezone: TIMEZONE,\n policy_version: \"2026-07-15-strict-v2\",\n test_daily_limit: TEST_DAILY_LIMIT,\n account_monthly_limit: ACCOUNT_MONTHLY_LIMIT,\n budget_month: budgetMonth,\n monthly_used: monthlyUsed,\n monthly_remaining: Math.max(ACCOUNT_MONTHLY_LIMIT - monthlyUsed, 0),\n test_used: testUsed,\n test_remaining: Math.max(TEST_DAILY_LIMIT - testUsed, 0),\n production_used: productionUsed,\n recovery_daily_limit: RECOVERY_DAILY_LIMIT,\n recovery_used: recoveryUsed,\n recovery_remaining: Math.max(RECOVERY_DAILY_LIMIT - recoveryUsed, 0),\n total_used: totalUsed,\n project_daily_ceiling: PROJECT_DAILY_CEILING,\n project_remaining: Math.max(PROJECT_DAILY_CEILING - totalUsed, 0),\n production_warning_threshold: PRODUCTION_WARNING_THRESHOLD,\n warning: productionUsed >= PRODUCTION_WARNING_THRESHOLD,\n runtime_tests_allowed: testUsed < TEST_DAILY_LIMIT,\n verification_strategy: \"static_first\",\n micro_tests_forbidden: true,\n batch_required: true,\n };\n}\n\nexport async function reserveN8nExecution(\n category: N8nBudgetCategory,\n reservationKey: string,\n metadata: Record = {},\n units = 1,\n) {\n await ensureBudgetTables();\n const circuit = await n8nCircuitStatus();\n if (circuit.open) {\n return {\n ok: false,\n allowed: false,\n error: \"n8n_circuit_open\",\n circuit,\n };\n }\n const day = localDay();\n const budgetMonth = day.slice(0, 7);\n const safeKey = String(reservationKey || \"\").trim().slice(0, 240);\n const safeUnits = Math.max(1, Math.min(10, Number(units) || 1));\n if (!safeKey) {\n return { ok: false, allowed: false, error: \"n8n_budget_reservation_key_required\" };\n }\n\n const existing = await sqlite.execute({\n sql: `select category,units\n from n8n_execution_budget_ledger\n where budget_day=:budget_day\n and project_key=:project_key\n and reservation_key=:reservation_key\n limit 1`,\n args: {\n budget_day: day,\n project_key: PROJECT_KEY,\n reservation_key: safeKey,\n },\n });\n if (existing.rows.length) {\n return {\n ok: true,\n allowed: true,\n idempotent_replay: true,\n ...(await n8nBudgetStatus()),\n };\n }\n\n const isTest = category === \"test\" || category === \"verification\";\n const isRecovery = category === \"callback_batch\";\n await sqlite.execute({\n sql: `insert or ignore into n8n_execution_budget_ledger (\n budget_day,project_key,category,units,reservation_key,metadata_json,created_at\n )\n select\n :budget_day,:project_key,:category,:units,:reservation_key,:metadata_json,datetime('now')\n where\n (\n :is_test=0\n or coalesce((\n select sum(units)\n from n8n_execution_budget_ledger\n where budget_day=:budget_day\n and project_key=:project_key\n and category in ('test','verification')\n ),0)+:units<=:test_limit\n )\n and (\n :is_recovery=0\n or coalesce((\n select sum(units)\n from n8n_execution_budget_ledger\n where budget_day=:budget_day\n and project_key=:project_key\n and category='callback_batch'\n ),0)+:units<=:recovery_limit\n )\n and coalesce((\n select sum(units)\n from n8n_execution_budget_ledger\n where budget_day=:budget_day and project_key=:project_key\n ),0)+:units<=:daily_ceiling\n and coalesce((\n select sum(units)\n from n8n_execution_budget_ledger\n where substr(budget_day,1,7)=:budget_month\n and project_key=:project_key\n ),0)+:units<=:monthly_limit`,\n args: {\n budget_day: day,\n budget_month: budgetMonth,\n project_key: PROJECT_KEY,\n category,\n units: safeUnits,\n reservation_key: safeKey,\n metadata_json: JSON.stringify(metadata).slice(0, 4000),\n is_test: isTest ? 1 : 0,\n is_recovery: isRecovery ? 1 : 0,\n test_limit: TEST_DAILY_LIMIT,\n recovery_limit: RECOVERY_DAILY_LIMIT,\n daily_ceiling: PROJECT_DAILY_CEILING,\n monthly_limit: ACCOUNT_MONTHLY_LIMIT,\n },\n });\n\n const inserted = await sqlite.execute({\n sql: `select 1 as present\n from n8n_execution_budget_ledger\n where budget_day=:budget_day\n and project_key=:project_key\n and reservation_key=:reservation_key\n limit 1`,\n args: {\n budget_day: day,\n project_key: PROJECT_KEY,\n reservation_key: safeKey,\n },\n });\n const status = await n8nBudgetStatus();\n if (!inserted.rows.length) {\n return {\n ...status,\n ok: false,\n allowed: false,\n error: isTest\n ? \"n8n_test_daily_budget_exhausted\"\n : isRecovery && status.recovery_remaining < safeUnits\n ? \"n8n_recovery_daily_budget_exhausted\"\n : status.monthly_remaining < safeUnits\n ? \"n8n_account_monthly_budget_exhausted\"\n : \"n8n_project_daily_budget_exhausted\",\n };\n }\n return {\n ...status,\n ok: true,\n allowed: true,\n idempotent_replay: false,\n category,\n units: safeUnits,\n };\n}\n",[],[462,616],"26b2e028-20fb-48de-bc9f-50756b136d30","documents.ts","019f675d-aa00-73de-b62f-cb0d77881eec",["D",1784145619620],"type AnyRecord = Record;\n\nconst esc = (value: unknown) => String(value ?? \"\").replace(/[&<>\"']/g, (c) => ({\n \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\",\n}[c] || c));\n\nconst money = (value: unknown) => new Intl.NumberFormat(\"fr-FR\", {\n style: \"currency\", currency: \"EUR\",\n}).format(Number(value || 0));\n\nconst dateFr = (value: unknown) => {\n if (!value) return \"—\";\n const d = new Date(String(value));\n return Number.isNaN(d.getTime()) ? \"—\" : new Intl.DateTimeFormat(\"fr-FR\", { dateStyle: \"long\" }).format(d);\n};\n\nfunction companyBlock(settings: AnyRecord) {\n const e = settings?.entreprise || {};\n return {\n name: e.nom || \"Votre entreprise de piscine\",\n address: e.adresse || \"Adresse à compléter\",\n phone: e.tel || \"\",\n email: e.email || \"\",\n siret: e.siret || \"\",\n iban: e.iban || \"\",\n quoteTerms: e.mentions_devis || \"Devis valable selon la durée indiquée. Travaux réalisés après acceptation et versement de l’acompte prévu.\",\n invoiceTerms: e.mentions_facture || \"Paiement à l’échéance indiquée. En cas de retard, des pénalités peuvent être exigibles selon la réglementation applicable.\",\n };\n}\n\nfunction clientBlock(client: AnyRecord) {\n return {\n name: client?.nom || \"Client\",\n address: [client?.adresse, [client?.code_postal, client?.ville].filter(Boolean).join(\" \")].filter(Boolean).join(\"
\"),\n phone: client?.telephone || \"\",\n email: client?.email || \"\",\n };\n}\n\nfunction lineRows(lines: AnyRecord[]) {\n return lines.map((line) => {\n const total = Number(line.total_ht ?? (Number(line.quantite || 0) * Number(line.prix_unitaire_ht || 0)));\n return `\n

${esc(line.designation)}

${esc(line.type_ligne || \"prestation\")}

\n ${esc(Number(line.quantite || 0).toLocaleString(\"fr-FR\"))}\n ${esc(line.unite || \"u\")}\n ${money(line.prix_unitaire_ht)}\n ${esc(Number(line.tva_taux || 0).toLocaleString(\"fr-FR\"))} %\n ${money(total)}\n `;\n }).join(\"\");\n}\n\nfunction totalsBlock(document: AnyRecord) {\n if (document?.is_estimate && document?.estimation_min_ttc != null && document?.estimation_max_ttc != null) {\n return `

Base estimative HT${money(document.total_ht)}

Fourchette TTC${money(document.estimation_min_ttc)} – ${money(document.estimation_max_ttc)}

`;\n }\n return `

Total HT${money(document.total_ht)}

TVA${money(document.total_tva)}

Total TTC${money(document.total_ttc)}

`;\n}\n\nconst BASE_CSS = `\n:root{--ink:#17212b;--muted:#65717d;--line:#dfe5e8;--brand:#0f766e;--soft:#e8f5f2;--paper:#fff;--bg:#111820}\n*{box-sizing:border-box}html{background:var(--bg)}body{margin:0;font:14px/1.55 Inter,ui-sans-serif,system-ui,-apple-system,\"Segoe UI\",sans-serif;color:var(--ink);background:var(--bg);padding:28px;text-rendering:optimizeLegibility;-webkit-font-smoothing:antialiased}\n.toolbar{max-width:1000px;margin:0 auto 14px;display:flex;gap:8px;justify-content:flex-end}.toolbar button,.toolbar a{border:1px solid #33414d;background:#1b2630;color:#e9f0f4;padding:9px 13px;border-radius:10px;text-decoration:none;font-weight:750}.toolbar .primary{background:#0f766e;border-color:#0f766e;color:#fff}\n.paper{width:210mm;min-height:297mm;margin:auto;background:var(--paper);padding:18mm 17mm 15mm;box-shadow:0 24px 70px rgba(0,0,0,.35);position:relative}\n.header{display:grid;grid-template-columns:1fr auto;gap:30px;align-items:start;border-bottom:3px solid var(--brand);padding-bottom:18px}.brand h1{font-size:24px;margin:0 0 7px;letter-spacing:-.03em}.brand p{margin:2px 0;color:var(--muted);font-size:13px}.doc-title{text-align:right}.doc-title .kind{text-transform:uppercase;letter-spacing:.12em;color:var(--brand);font-size:12px;font-weight:850}.doc-title h2{font-size:31px;margin:3px 0 4px;letter-spacing:-.045em}.doc-title .status{display:inline-block;padding:5px 10px;border-radius:999px;background:var(--soft);color:var(--brand);font-size:12px;font-weight:800;text-transform:capitalize}\n.meta-grid{display:grid;grid-template-columns:1fr 1fr;gap:32px;margin:24px 0}.box{border:1px solid var(--line);border-radius:12px;padding:15px}.box-label{text-transform:uppercase;letter-spacing:.08em;color:var(--muted);font-size:10.5px;font-weight:850;margin-bottom:8px}.box strong{font-size:16px}.box p{margin:4px 0;color:var(--muted);font-size:13px}\n.subject{background:#f6f8f9;border-radius:12px;padding:14px 16px;margin-bottom:18px}.subject span{color:var(--muted);font-size:11px;text-transform:uppercase;letter-spacing:.08em;font-weight:800}.subject strong{display:block;margin-top:4px;font-size:15px}\ntable{width:100%;border-collapse:collapse;margin-top:8px}th{text-align:left;padding:10px 8px;border-bottom:2px solid var(--ink);font-size:10.5px;text-transform:uppercase;letter-spacing:.07em;color:var(--muted)}td{padding:12px 8px;border-bottom:1px solid var(--line);vertical-align:top;font-size:13px}.num{text-align:right}.strong{font-weight:800}.designation{font-weight:750;font-size:13.5px}.line-kind{font-size:10.5px;color:var(--muted);text-transform:uppercase;letter-spacing:.04em;margin-top:2px}\n.summary{display:grid;grid-template-columns:1fr 290px;gap:30px;margin-top:22px}.notes{color:var(--muted);font-size:12.5px}.notes strong{display:block;color:var(--ink);margin-bottom:6px;font-size:13.5px}.totals{border:1px solid var(--line);border-radius:12px;overflow:hidden}.totals div{display:flex;justify-content:space-between;padding:10px 13px;border-bottom:1px solid var(--line);font-size:13px}.totals div:last-child{border-bottom:0}.totals span{color:var(--muted)}.totals .grand{background:var(--ink);color:#fff;padding:14px 13px}.totals .grand span{color:#cbd5dc}.totals .grand strong{font-size:20px}\n.payment{margin-top:22px;border-left:4px solid var(--brand);background:var(--soft);padding:14px 16px;border-radius:0 10px 10px 0}.payment strong{display:block;margin-bottom:5px;font-size:14px}.payment p{margin:3px 0;color:#35504e;font-size:12.5px}.footer{position:absolute;left:17mm;right:17mm;bottom:12mm;border-top:1px solid var(--line);padding-top:9px;display:flex;justify-content:space-between;gap:20px;color:var(--muted);font-size:10px}.legal{margin-top:20px;font-size:10px;line-height:1.45;color:var(--muted)}\n@media(max-width:850px){body{padding:0}.toolbar{position:sticky;top:0;z-index:2;background:#111820;padding:10px;margin:0}.paper{width:100%;min-height:100vh;padding:25px 20px;box-shadow:none}.meta-grid,.summary{grid-template-columns:1fr}.footer{position:static;margin-top:35px}.doc-title h2{font-size:24px}}\n@media print{@page{size:A4;margin:0}html,body{background:#fff}.toolbar{display:none}.paper{box-shadow:none;margin:0;width:210mm;min-height:297mm}.footer{position:absolute}}\n`;\n\nfunction shell(content: string, title: string, nonce: string) {\n return `${esc(title)}${content}`;\n}\n\nexport function quotePage(data: AnyRecord, nonce: string): string {\n const quote = data.devis || {};\n const client = clientBlock(data.client || {});\n const company = companyBlock(data.settings || {});\n const lines = Array.isArray(data.lignes) ? data.lignes : [];\n const validUntil = quote.date_emission ? new Date(new Date(quote.date_emission).getTime() + Number(quote.validite_jours || 30) * 86400000) : null;\n const deposit = Number(quote.total_ttc || 0) * Number(quote.acompte_pct || 0) / 100;\n const content = `

\n \n

Destinataire

${esc(client.name)}

${client.address || \"Adresse non renseignée\"}

${esc([client.phone,client.email].filter(Boolean).join(\" · \"))}

Informations

Date d’émission : ${dateFr(quote.date_emission)}

Valable jusqu’au : ${dateFr(validUntil)}

${quote.is_estimate ? `

Nature : fourchette non contractuelle

` : `

Acompte à la commande : ${money(deposit)} (${esc(quote.acompte_pct || 0)} %)

Objet${esc(quote.objet || \"Prestations piscine\")}

\n ${lineRows(lines) || ``}

Désignation	Qté	Unité	Prix HT	TVA	Total HT
Aucune ligne renseignée.

Notes et conditions

${esc(quote.notes || company.quoteTerms)}

${totalsBlock(quote)}

${quote.is_estimate ? `Prochaine étape

Cette estimation doit être confirmée après diagnostic ou visite technique avant tout engagement.

` : `Acceptation du devis

Bon pour accord, date et signature du client précédées de la mention « Lu et approuvé ».

${company.iban ? `

IBAN pour l’acompte : ${esc(company.iban)}

` : \"\"}`}

${esc(company.quoteTerms)}

\n \n

`;\n return shell(content, `Devis ${quote.numero || \"\"}`, nonce);\n}\n\nexport function invoicePage(data: AnyRecord, nonce: string): string {\n const invoice = data.facture || {};\n const quote = data.devis || {};\n const client = clientBlock(data.client || {});\n const company = companyBlock(data.settings || {});\n const allLines = Array.isArray(data.lignes) ? data.lignes : [];\n const isFull = invoice.type_facture === \"simple\";\n const invoiceLines = isFull ? allLines : [{\n designation: `${invoice.type_facture === \"acompte\" ? \"Acompte\" : \"Solde\"} sur devis ${quote.numero || \"\"} — ${quote.objet || \"Prestations piscine\"}`,\n type_ligne: invoice.type_facture || \"facturation\",\n quantite: 1,\n unite: \"forfait\",\n prix_unitaire_ht: invoice.total_ht,\n tva_taux: Number(invoice.total_ht || 0) ? Number(invoice.total_tva || 0) / Number(invoice.total_ht || 1) * 100 : 0,\n total_ht: invoice.total_ht,\n }];\n const paid = String(invoice.statut || \"\").toLowerCase() === \"payee\";\n const content = `

\n \n

Facturé à

${esc(client.name)}

${client.address || \"Adresse non renseignée\"}

${esc([client.phone,client.email].filter(Boolean).join(\" · \"))}

Informations

Date d’émission : ${dateFr(invoice.date_emission)}

Échéance : ${dateFr(invoice.date_echeance)}

${paid ? `

Payée le : ${dateFr(invoice.date_paiement)}

Mode : ${esc(invoice.mode_paiement || \"\")}

` : \"\"}

Référence${esc(quote.objet || `Devis ${quote.numero || \"\"}`)}

\n ${lineRows(invoiceLines)}

Désignation	Qté	Unité	Prix HT	TVA	Total HT

Notes

${esc(invoice.notes || company.invoiceTerms)}

${totalsBlock(invoice)}

${paid ? \"Paiement reçu\" : \"Modalités de paiement\"}${paid ? `

Cette facture est acquittée.

` : `

Montant à régler avant le ${dateFr(invoice.date_echeance)}.

${company.iban ? `

Virement bancaire — IBAN : ${esc(company.iban)}

` : \"\"}`}

${esc(company.invoiceTerms)}

\n \n

`;\n return shell(content, `Facture ${invoice.numero || \"\"}`, nonce);\n}\n",[],[462,623],"6730c573-79ab-4070-ab31-b93dd1699d28","client-v9.ts","019f675d-aa00-73de-b62f-c6d9e3cdc75c",["D",1784145619620],"export const CSS_V9 = String.raw`\n:root{--text-xs:11px;--text-sm:12px;--text-md:14px;--text-lg:16px;--focus:0 0 0 3px rgba(53,209,181,.16)}\nbody{font-size:15px;line-height:1.55;text-rendering:optimizeLegibility;-webkit-font-smoothing:antialiased}\nbutton,input,select,textarea{font-size:14px;line-height:1.35}\n.shell{grid-template-columns:256px minmax(0,1fr)}\n.side{padding:24px 18px;gap:26px}.brand-mark{width:42px;height:42px}.brand b{font-size:16px}.brand span{font-size:11px}.nav{gap:6px}.nav button{min-height:42px;padding:10px 13px;font-size:14px}.side-foot{font-size:12px;line-height:1.5}\n.topbar{height:78px;padding:0 32px}.page-title{font-size:18px}.search-trigger{min-height:42px;font-size:13px}.kbd{font-size:11px}.content{max-width:1580px;padding:32px clamp(20px,3vw,42px) 72px}\n.hero{align-items:flex-start;margin-bottom:24px}.eyebrow{font-size:12px;letter-spacing:.1em}.hero h1{font-size:clamp(30px,3vw,38px);line-height:1.05}.hero p{font-size:14px;max-width:720px}.hero-state strong{font-size:28px}.hero-state span{font-size:12px}\n.grid{gap:18px}.kpis{gap:14px;margin-bottom:18px}.card{border-radius:16px}.pad{padding:20px}.kpi{padding:19px}.kpi .label{font-size:12px}.kpi .value{font-size:30px}.kpi .meta{font-size:12px}.card-head{padding:17px 20px}.card-head h2{font-size:15px}.card-head .count{font-size:12px}.empty{font-size:13px}\n.btn{min-height:40px;padding:10px 14px;border-radius:11px;font-size:13px}.btn.small{min-height:34px;padding:7px 10px;font-size:12px}.quick{min-height:82px;padding:16px}.quick b{font-size:14px}.quick span{font-size:12px;line-height:1.4}\n.list li{padding:15px 20px;gap:13px}.list .grow b{font-size:14px}.sub,.time{font-size:12px;line-height:1.45}.pill{font-size:11px;padding:5px 9px}.mark{width:10px;height:10px}\n.toolbar{gap:12px;margin-bottom:16px}.field{gap:7px;margin-bottom:15px}.field label{font-size:12px}.field input,.field select,.field textarea{min-height:42px;padding:11px 12px;font-size:14px}.field textarea{min-height:104px}.field input:focus,.field select:focus,.field textarea:focus{box-shadow:var(--focus)}.check span{font-size:13px}.check input{width:18px;height:18px}\n.table{min-width:840px}.table th{font-size:11px;padding:12px 16px}.table td{padding:15px 16px;font-size:14px}.table b{font-size:14px}.segmented button{min-height:36px;padding:8px 12px;font-size:12px}\n.action-center{gap:10px;padding:14px}.action-item{padding:14px}.action-item strong{font-size:14px}.action-item p,.action-item .score{font-size:12px}.insight{padding:18px}.insight span{font-size:12px}.insight strong{font-size:23px}.definition dt{font-size:12px}.definition dd{font-size:14px}.blocker{font-size:12px;padding:13px 14px}\n#actionDialog{width:min(1120px,calc(100vw - 32px))}#searchDialog{width:min(700px,calc(100vw - 32px))}dialog{max-height:calc(100dvh - 24px);border-radius:20px}.dialog-head{position:sticky;top:0;z-index:5;padding:18px 22px;background:rgba(16,25,34,.97);backdrop-filter:blur(14px)}.dialog-head h2{font-size:18px}.dialog-head button{min-width:40px;min-height:40px;font-size:25px}.dialog-body{padding:22px;max-height:calc(100dvh - 88px)}.dialog-foot{position:sticky;bottom:-22px;z-index:4;margin:14px -2px 0;padding:15px 2px 2px;background:linear-gradient(180deg,rgba(16,25,34,0),var(--panel) 28%)}.result{font-size:13px;padding:14px}.search-box{font-size:16px;padding:18px 20px}.search-result{padding:15px 20px}.search-result b{font-size:14px}.search-result span{font-size:12px}\n.quote-head{grid-template-columns:minmax(0,1.08fr) minmax(320px,.92fr);gap:16px}.quote-line{grid-template-columns:120px minmax(250px,1fr) 86px 86px 128px 92px 42px;gap:8px;padding:10px;border:1px solid var(--line);border-radius:12px;background:#0d161d;margin-bottom:10px}.quote-line input,.quote-line select{min-height:40px;background:#111e27}.quote-line .btn{min-height:40px}.quote-summary{font-size:13px;gap:24px}.quote-summary strong{font-size:18px}\n.detail-stat span,.detail-section h3,.field-help,.next-step p{font-size:12px}.detail-stat strong{font-size:19px}.proof{font-size:12px}.score-ring{width:56px;height:56px;font-size:12px}\n.flow-hero,.flow-actions{padding:22px}.flow-hero h2{font-size:24px}.flow-hero .sub{font-size:13px}.flow-ring{grid-template-columns:64px 1fr;gap:12px;padding:13px}.flow-ring svg{width:64px;height:64px}.flow-ring strong{font-size:19px}.flow-ring span{font-size:11px;line-height:1.35}.flow-actions h3{font-size:18px}.flow-action{padding:12px 13px}.flow-action b{font-size:13px}.flow-action small{font-size:11px;line-height:1.35}.aging-head{font-size:11px}.aging-values span{font-size:10px}.aging-values b{font-size:12px}\n.doc-v8{grid-template-columns:minmax(0,1.3fr) minmax(260px,.7fr);padding:19px;gap:18px}.doc-v8-head b{font-size:16px}.doc-v8-sub{font-size:12px;line-height:1.45;max-width:760px}.doc-v8-money{font-size:29px}.doc-v8-proof{font-size:11px}.stage-label-v8{font-size:10px}.doc-v8-actions{gap:8px}.doc-v8-actions .primary{min-width:140px}\n.invoice-choice{padding:16px}.invoice-choice b{font-size:14px}.invoice-choice span{font-size:11px}.invoice-choice strong{font-size:18px}.auto-send{padding:15px}.auto-send input{width:18px;height:18px}.auto-send b{font-size:13px}.auto-send span{font-size:11px}.verification-card{padding:18px}.verification-card h3{font-size:16px}.verification-card p{font-size:12px}.verification-meta span,.result-split span{font-size:10px}.verification-meta strong,.result-split strong{font-size:13px}.status-note{font-size:12px}\n.document-tools{gap:12px}.document-tools input{max-width:420px}.flow-filter select{min-height:40px;font-size:12px}.document-empty-action p{font-size:13px}\n.toast{font-size:13px;line-height:1.4;padding:13px 16px}.login-card{width:min(430px,100%);padding:32px}.login-card h1{font-size:28px}.login-card p{font-size:14px}.login-error{font-size:12px}\n@media(max-width:1200px){.shell{grid-template-columns:226px minmax(0,1fr)}.content{padding-inline:24px}.doc-v8{grid-template-columns:1fr}.doc-v8-actions{justify-content:flex-start}.quote-line{grid-template-columns:105px minmax(210px,1fr) 78px 78px 112px 84px 40px}}\n@media(max-width:850px){.side{padding:10px 12px}.nav{scroll-snap-type:x proximity;scrollbar-width:none}.nav::-webkit-scrollbar{display:none}.nav button{scroll-snap-align:start;min-height:40px;font-size:12px}.topbar{top:58px;height:66px}.content{padding:22px 16px 56px}.hero{flex-wrap:wrap;gap:14px}.hero>.actions,.hero>button{width:auto}.flow-v8{grid-template-columns:1fr}.flow-rings{grid-template-columns:repeat(3,minmax(0,1fr))}.quote-head{grid-template-columns:1fr}}\n@media(max-width:700px){body{font-size:14px}.topbar{padding:0 12px}.page-title{font-size:16px}.content{padding:18px 12px 48px}.hero h1{font-size:28px}.hero p{font-size:13px}.hero>.actions{width:100%;display:grid;grid-template-columns:1fr 1fr}.hero>.actions .btn{width:100%}.kpi{padding:16px}.kpi .label{font-size:12px}.kpi .value{font-size:24px}.quick-grid{gap:10px}.quick{min-height:76px}.toolbar{width:100%}.toolbar .field,.toolbar .segmented{flex:1 1 100%}.segmented{overflow:auto}.table-wrap{display:none}.mobile-list{display:block}.definition{grid-template-columns:1fr}.definition dt{padding-bottom:2px;border-bottom:0}.definition dd{padding-top:2px}.flow-rings{grid-template-columns:1fr}.flow-ring{grid-template-columns:58px 1fr}.flow-ring svg{width:58px;height:58px}.doc-v8{padding:16px}.doc-v8-money{font-size:25px}.doc-v8-actions{display:grid;grid-template-columns:1fr 1fr}.doc-v8-actions .btn{width:100%;min-width:0}.stage-label-v8{font-size:9px}.invoice-choice-grid{grid-template-columns:1fr}.quote-live-summary{grid-template-columns:1fr 1fr}.result-split,.verification-meta{grid-template-columns:1fr}.flow-filter{width:100%;margin:0}.flow-filter select{width:100%}#actionDialog,#searchDialog{width:calc(100vw - 10px);max-height:calc(100dvh - 10px);border-radius:16px}.dialog-head{padding:15px 16px}.dialog-body{padding:16px;max-height:calc(100dvh - 76px)}.dialog-foot{bottom:-16px;margin-inline:0}.quote-line{grid-template-columns:minmax(0,1fr) minmax(92px,.42fr);gap:9px;padding:12px}.quote-line [name=designation]{grid-column:1/-1;grid-row:1}.quote-line .kind{display:block;grid-column:1;grid-row:2}.quote-line [name=quantite]{grid-column:2;grid-row:2}.quote-line .unit{display:block;grid-column:1;grid-row:3}.quote-line .price{grid-column:2;grid-row:3}.quote-line .vat{display:block;grid-column:1;grid-row:4}.quote-line .btn{grid-column:2;grid-row:4;width:100%}.quote-summary{display:grid;grid-template-columns:repeat(3,1fr);gap:8px}.quote-summary span{text-align:center}.quote-summary strong{display:block}.document-tools{align-items:stretch;flex-direction:column}.document-tools input{max-width:none}.toast{left:10px;right:10px;bottom:10px;max-width:none}}\n@media(max-width:420px){.topbar .btn.primary{min-width:42px;padding-inline:10px}.search-trigger{min-width:42px;padding-inline:10px}.hero>.actions{grid-template-columns:1fr}.doc-v8-actions{grid-template-columns:1fr}.quote-live-summary,.quote-summary{grid-template-columns:1fr 1fr}.aging-values{grid-template-columns:1fr 1fr}.login{padding:12px}.login-card{padding:24px}}\n`;\n\nexport const CLIENT_V9 = String.raw`\nfunction v9ImproveControls(root=document){\n root.querySelectorAll('.quote-line').forEach(row=>{\n const labels={type_ligne:'Type',designation:'Désignation',quantite:'Quantité',unite:'Unité',prix_unitaire_ht:'Prix HT',tva_taux:'TVA'};\n Object.entries(labels).forEach(([name,label])=>{const el=row.querySelector('[name=\"'+name+'\"]');if(el){el.setAttribute('aria-label',label);el.setAttribute('title',label);if(el.tagName==='INPUT'&&!el.getAttribute('placeholder'))el.setAttribute('placeholder',label)}});\n });\n}\nconst v9Observer=new MutationObserver(m=>{for(const change of m)for(const node of change.addedNodes)if(node.nodeType===1)v9ImproveControls(node)});\nv9Observer.observe(document.body,{childList:true,subtree:true});\nv9ImproveControls();\n`;\n",[],[462,630],"7c2737cf-8fdc-4e8b-ad40-036b472804a5","client-v8.ts","019f675d-aa00-73de-b62f-c283df68a00c",["D",1784145619620],"export const CSS_V8 = String.raw`\n.flow-v8{display:grid;grid-template-columns:minmax(0,1.4fr) minmax(320px,.6fr);gap:14px;margin-bottom:16px}.flow-hero{padding:20px}.flow-hero h2{margin:5px 0 2px;font-size:21px;letter-spacing:-.035em}.flow-rings{display:grid;grid-template-columns:repeat(3,1fr);gap:9px;margin-top:16px}.flow-ring{display:grid;grid-template-columns:54px 1fr;align-items:center;gap:9px;padding:10px;border:1px solid var(--line);border-radius:14px;background:#0c151c}.flow-ring svg{width:54px;height:54px;transform:rotate(-90deg)}.flow-ring circle{fill:none;stroke-width:7}.flow-ring .track{stroke:#25343e}.flow-ring .meter{stroke:var(--accent);stroke-linecap:round}.flow-ring.blue .meter{stroke:var(--blue)}.flow-ring.warn .meter{stroke:var(--warn)}.flow-ring strong{display:block;font-size:16px}.flow-ring span{display:block;color:var(--muted);font-size:8px}.flow-actions{padding:20px}.flow-actions h3{margin:5px 0 12px}.flow-action{width:100%;display:grid;grid-template-columns:auto 1fr auto;align-items:center;gap:9px;border:1px solid var(--line);background:#0c151c;color:var(--ink);padding:10px 11px;border-radius:12px;text-align:left;margin-top:7px}.flow-action:hover{border-color:#3e6962}.flow-action small{display:block;color:var(--muted)}.aging{margin-top:15px}.aging-head{display:flex;justify-content:space-between;color:var(--muted);font-size:9px}.aging-bar{display:grid;grid-template-columns:repeat(4,1fr);gap:3px;height:9px;margin-top:7px}.aging-bar i{display:block;border-radius:999px;opacity:.3}.aging-bar i.has{opacity:1}.aging-current{background:var(--accent)}.aging-15{background:var(--blue)}.aging-30{background:var(--warn)}.aging-late{background:var(--danger)}.aging-values{display:grid;grid-template-columns:repeat(4,1fr);gap:5px;margin-top:7px}.aging-values span{font-size:7px;color:var(--muted)}.aging-values b{display:block;font-size:9px;color:var(--ink);margin-top:2px}.doc-v8{display:grid;grid-template-columns:minmax(0,1.25fr) minmax(225px,.55fr);gap:14px;padding:17px;border:1px solid var(--line);border-radius:17px;background:linear-gradient(145deg,#111d26,#0d171e);position:relative;overflow:hidden}.doc-v8:before{content:'';position:absolute;left:0;top:0;bottom:0;width:4px;background:#60727b}.doc-v8.action:before{background:var(--blue)}.doc-v8.good:before{background:var(--ok)}.doc-v8.warn:before{background:var(--warn)}.doc-v8.late:before{background:var(--danger)}.doc-v8-head{display:flex;gap:8px;align-items:center;flex-wrap:wrap}.doc-v8-head b{font-size:14px}.doc-v8-sub{color:var(--muted);font-size:10px;margin-top:4px}.doc-v8-money{font-size:24px;font-weight:930;letter-spacing:-.04em;margin-top:12px}.doc-v8-proof{color:var(--ok);font-size:9px;margin-top:5px}.doc-v8-proof.warn{color:var(--warn)}.doc-v8-side{display:flex;flex-direction:column;justify-content:space-between;gap:12px}.stage-v8{display:flex;gap:4px}.stage-v8 i{height:5px;flex:1;border-radius:999px;background:#263640}.stage-v8 i.done{background:var(--accent)}.stage-v8 i.now{background:var(--blue)}.stage-label-v8{display:flex;justify-content:space-between;color:var(--muted);font-size:7px;margin-top:5px}.doc-v8-actions{display:flex;justify-content:flex-end;gap:7px;flex-wrap:wrap}.doc-v8-actions .primary{min-width:125px}.flow-filter{display:flex;gap:8px;margin-left:auto}.flow-filter select{border:1px solid var(--line);background:#0d161d;color:var(--ink);padding:8px 10px;border-radius:10px;font-size:10px}.auto-send{display:flex;gap:10px;align-items:flex-start;padding:13px;border:1px solid #315b53;background:#102622;border-radius:13px;margin-top:13px}.auto-send input{margin-top:3px}.auto-send b{display:block}.auto-send span{display:block;color:#96bab3;font-size:9px;margin-top:2px}.result-split{display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-top:12px}.result-split div{padding:11px;border-radius:12px;background:#0c151c;border:1px solid var(--line)}.result-split span{display:block;color:var(--muted);font-size:8px}.result-split strong{display:block;margin-top:4px}.status-note{padding:11px 12px;border-radius:12px;margin-top:12px;background:var(--okbg);color:var(--ok);font-size:10px}.status-note.warn{background:var(--warnbg);color:var(--warn)}\n@media(max-width:980px){.flow-v8,.doc-v8{grid-template-columns:1fr}.doc-v8-actions{justify-content:flex-start}}\n@media(max-width:660px){.flow-rings{grid-template-columns:1fr}.flow-filter{width:100%;margin:0}.flow-filter select{width:100%}.result-split{grid-template-columns:1fr}.stage-label-v8{display:none}}\n`;\n\nexport const CLIENT_V8 = String.raw`\nlet v8Scope='action';\nconst v8Pct=(a,b)=>b?Math.max(0,Math.min(100,Math.round(a/b*100))):0;\nconst v8Ring=(label,value,pct,tone='')=>'

'+esc(value)+''+esc(label)+'

';\nfunction v8Metrics(){const activeQ=quotes.filter(x=>!/expire|refuse/i.test(x.statut||'')),complete=activeQ.filter(v7Complete),sent=quotes.filter(x=>/envoye|accepte/i.test(x.statut||'')),accepted=quotes.filter(x=>/accepte/i.test(x.statut||'')),issued=invoices.filter(x=>!isCancelled(x)),paid=issued.filter(isPaid),now=new Date(todayIso());const open=issued.filter(x=>!isPaid(x)),aging={current:0,d15:0,d30:0,late:0};open.forEach(x=>{const due=x.date_echeance?Math.floor((now-new Date(x.date_echeance))/86400000):-1,amount=Number(x.total_ttc||0);if(due<0)aging.current+=amount;else if(due<=15)aging.d15+=amount;else if(due<=30)aging.d30+=amount;else aging.late+=amount});return{integrity:v8Pct(complete.length,activeQ.length),conversion:v8Pct(accepted.length,sent.length),cash:v8Pct(paid.reduce((s,x)=>s+Number(x.total_ttc||0),0),issued.reduce((s,x)=>s+Number(x.total_ttc||0),0)),correct:activeQ.filter(x=>!v7Complete(x)).length,sendQ:complete.filter(x=>/brouillon|pret/i.test(x.statut||'')).length,invoiceQ:accepted.filter(x=>!hasInvoiceFor(x.id)).length,sendI:invoices.filter(x=>/brouillon/i.test(x.statut||'')).length,collect:open.length,aging}}\nfunction v8RenderFlow(){let host=q('#documentCommand');if(!host){host=document.createElement('div');host.id='documentCommand';q('#view-documents .toolbar').before(host)}const m=v8Metrics(),total=m.aging.current+m.aging.d15+m.aging.d30+m.aging.late||1;host.className='flow-v8';host.innerHTML='

Cycle commercial simplifié

Une action utile par document

Les statuts techniques sont déduits des preuves réelles : base, Gmail et paiement.

'+v8Ring('Devis cohérents',m.integrity+' %',m.integrity)+v8Ring('Devis convertis',m.conversion+' %',m.conversion,'blue')+v8Ring('Montant encaissé',m.cash+' %',m.cash,'warn')+'

Âge des montants à recevoir'+money(total===1?0:total)+'

À venir'+money(m.aging.current)+'1–15 j'+money(m.aging.d15)+'16–30 j'+money(m.aging.d30)+'+30 j'+money(m.aging.late)+'

Actions suivantes

'+(m.correct+m.sendQ+m.invoiceQ+m.sendI+m.collect)+' dossiers à faire avancer

';qa('[data-flow]',host).forEach(b=>b.onclick=()=>{const f=b.dataset.flow;if(f==='correct'){documentTab='quotes';v8Scope='correct'}else if(f==='send-quotes'){documentTab='quotes';v8Scope='send'}else if(f==='invoice'){documentTab='quotes';v8Scope='accepted'}else if(f==='send-invoices'){documentTab='invoices';v8Scope='draft'}else{documentTab='invoices';v8Scope='open'};renderDocuments()})}\nfunction v8QuoteStage(x){if(hasInvoiceFor(x.id))return 4;const s=String(x.statut||'brouillon');return /accepte/.test(s)?3:/envoye/.test(s)?2:/pret/.test(s)?1:0}\nfunction v8InvoiceStage(x){return isPaid(x)?2:/envoyee/.test(String(x.statut||''))?1:0}\nfunction v8Rail(stage,labels){return '

'+labels.map((_,i)=>'').join('')+'

'+labels.map(x=>''+x+'').join('')+'

'}\nfunction v8QuoteCard(x){const complete=v7Complete(x),status=String(x.statut||'brouillon'),client=invoiceClient(x),closed=/expire|refuse/i.test(status),accepted=/accepte/i.test(status),invoiced=hasInvoiceFor(x.id);let primary='';if(!closed&&!complete)primary='';else if(!closed&&!invoiced&&/brouillon|pret/i.test(status))primary='';else if(!closed&&!invoiced&&/envoye/i.test(status))primary='';else if(accepted&&!invoiced)primary='';else primary='';const tone=!complete?'warn':accepted||invoiced?'good':closed?'':'action';return '

'+esc(x.numero||'Devis')+''+pill(status)+'

'+esc(client.nom||client.telephone||'Client')+' · '+esc(x.objet||'Sans objet')+'

'+money(x.total_ttc)+'

'+(complete?'✓ Lignes et totaux cohérents':'⚠ Document à corriger')+'

'+v8Rail(v8QuoteStage(x),['Brouillon','Prêt','Envoyé','Accepté','Facturé'])+'

'+primary+'

'}\nfunction v8InvoiceCard(x){const status=String(x.statut||'brouillon'),overdue=!isPaid(x)&&x.date_echeance&&new Date(x.date_echeance)Consulter':/brouillon/i.test(status)?'':'';const tone=isPaid(x)?'good':overdue?'late':'action';return '

'+esc(x.numero||'Facture')+''+pill(status)+'

'+esc(client.nom||client.telephone||'Client')+' · '+esc(textStatus(x.type_facture||'simple'))+'

'+money(x.total_ttc)+'

'+(isPaid(x)?'✓ Paiement confirmé':overdue?'⚠ Échéance dépassée':'✓ Facture enregistrée')+'

'+v8Rail(v8InvoiceStage(x),['Brouillon','Envoyée','Payée'])+'

'+primary+'

'}\nfunction v8Filter(x){if(documentTab==='quotes'){if(v8Scope==='all')return true;if(v8Scope==='correct')return !v7Complete(x)&&!/expire|refuse/i.test(x.statut||'');if(v8Scope==='send')return v7Complete(x)&&/brouillon|pret/i.test(x.statut||'');if(v8Scope==='accepted')return /accepte/i.test(x.statut||'')&&!hasInvoiceFor(x.id);return !/expire|refuse/i.test(x.statut||'')}if(documentTab==='invoices'){if(v8Scope==='all')return true;if(v8Scope==='draft')return /brouillon/i.test(x.statut||'');if(v8Scope==='paid')return isPaid(x);if(v8Scope==='overdue')return !isPaid(x)&&x.date_echeance&&new Date(x.date_echeance)x.classList.toggle('active',x.dataset.documentTab===documentTab));let card=q('#documentsWorkspace');if(!card){card=q('#documentsBody')?.closest('article.card');if(card)card.id='documentsWorkspace'}if(!card)return;const options=documentTab==='quotes'?'':documentTab==='invoices'?'':'';card.innerHTML='

';if(![...q('#documentScopeV8').options].some(o=>o.value===v8Scope))v8Scope=documentTab==='quotes'?'action':documentTab==='invoices'?'open':'all';q('#documentScopeV8').value=v8Scope;const source=documentTab==='quotes'?quotes:documentTab==='invoices'?invoices:purchases;const filtered=source.filter(v8Filter).filter(x=>!documentSearch||JSON.stringify([x.numero,x.objet,clientName(x),x.statut]).toLowerCase().includes(documentSearch));q('#documentGridV8').innerHTML=filtered.length?filtered.map(x=>documentTab==='quotes'?v8QuoteCard(x):documentTab==='invoices'?v8InvoiceCard(x):purchaseCard(x)).join(''):'

Aucun document dans cette étape

Le cycle est à jour pour ce filtre.

';q('#documentSearchV8').value=documentSearch;q('#documentSearchV8').oninput=e=>{documentSearch=e.target.value.toLowerCase();renderDocuments()};q('#documentScopeV8').onchange=e=>{v8Scope=e.target.value;renderDocuments()};v7BindQuoteActions();bindDocumentActions();v8BindInvoiceActions()}\nasync function v8SendInvoice(id){const button=q('[data-send-invoice=\"'+id+'\"]');if(button)button.disabled=true;try{const check=await action('invoice.get',{id},false);if(!check.facture||Number(check.facture.total_ttc||0)<=0)throw new Error('Facture incomplète');if(!check.client?.email)throw new Error('Adresse e-mail client manquante');const result=await action('invoice.send',{id},false),index=invoices.findIndex(x=>x.id===id);if(index>=0)invoices[index]={...invoices[index],...(result.facture||{}),statut:'envoyee'};renderDocuments();toast(result.message||'Facture envoyée par e-mail')}catch(error){toast(error.message,false);if(button)button.disabled=false}}\nfunction v8BindInvoiceActions(){qa('[data-send-invoice]').forEach(x=>x.onclick=()=>v8SendInvoice(x.dataset.sendInvoice))}\nopenInvoiceDialog=function(devisId){const quote=quotes.find(x=>x.id===devisId)||{};if(!v7Complete(quote)){toast('Corrigez le devis avant de le facturer.',false);return}dialogTitle.textContent='Créer la facture';const simple=amountForInvoice(quote,'simple'),deposit=amountForInvoice(quote,'acompte'),balance=amountForInvoice(quote,'solde');dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#invoiceFormV8').onsubmit=async event=>{event.preventDefault();const form=event.currentTarget,button=q('[type=submit]',form),proof=q('#invoiceProofV8'),payload=Object.fromEntries(new FormData(form).entries()),auto=payload.auto_send==='on';delete payload.auto_send;payload.devis_id=devisId;button.disabled=true;proof.innerHTML='

Création et relecture de la facture…

';try{const created=await action('invoice.from_quote',payload,false);if(!created.facture?.id)throw new Error(created.error||'Facture non créée');const verified=await action('invoice.get',{id:created.facture.id},false);if(!verified.facture)throw new Error('Facture introuvable après création');const invoice=verifiedInvoiceResult(created,verified);let delivery='Brouillon conservé';if(auto){proof.innerHTML='

Facture créée. Envoi Gmail en cours…

';try{const sent=await action('invoice.send',{id:invoice.id},false);invoice.statut='envoyee';Object.assign(invoice,sent.facture||{});delivery='E-mail confirmé par Gmail'}catch(sendError){delivery='Envoi à reprendre : '+sendError.message}}renderDocuments();proof.innerHTML='

✓

Facture '+(invoice.statut==='envoyee'?'créée et envoyée':'créée')+'

La facture a été relue dans Supabase.

Document'+esc(invoice.numero)+'

Livraison'+esc(delivery)+'

';q('[data-open-created]',proof).onclick=()=>openDoc('invoice',invoice.id);q('[data-close-result]',proof).onclick=()=>{dialog.close();documentTab='invoices';v8Scope=invoice.statut==='envoyee'?'open':'draft';showView('documents');renderDocuments()};toast(invoice.statut==='envoyee'?'Facture créée et envoyée':'Facture créée')}catch(error){proof.innerHTML='

'+esc(error.message)+'

';toast(error.message,false);button.disabled=false}};dialog.showModal()}\nrenderDocuments();\n`;",[],[462,637],"b8e69832-f3ff-4783-8cb8-f2ce5e319939","client-v7.ts","019f675d-aa00-73de-b62f-bf75870048f6",["D",1784145619620],"export const CSS_V7 = String.raw`\n.lifecycle-lab{display:grid;grid-template-columns:minmax(0,1.25fr) minmax(320px,.75fr);gap:16px;margin-bottom:16px}.lifecycle-panel{padding:20px}.lifecycle-panel h2{font-size:20px;margin:5px 0 2px;letter-spacing:-.03em}.lifecycle-panel p{margin:0;color:var(--muted);font-size:11px}.donut-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:10px;margin-top:17px}.donut-card{display:grid;grid-template-columns:58px 1fr;align-items:center;gap:10px;padding:11px;border:1px solid var(--line);border-radius:14px;background:#0d161d}.donut-card svg{width:58px;height:58px;transform:rotate(-90deg)}.donut-card circle{fill:none;stroke-width:8}.donut-card .track{stroke:#25343e}.donut-card .value-ring{stroke:var(--accent);stroke-linecap:round}.donut-card.warn .value-ring{stroke:var(--warn)}.donut-card.blue .value-ring{stroke:var(--blue)}.donut-card strong{display:block;font-size:17px}.donut-card span{display:block;color:var(--muted);font-size:9px}.next-action-panel{padding:20px;display:flex;flex-direction:column;justify-content:space-between}.next-action-panel h3{margin:5px 0 4px;font-size:16px}.next-action-panel p{margin:0;color:var(--muted);font-size:10px}.next-action-stack{display:grid;gap:7px;margin-top:15px}.next-action-row{display:flex;align-items:center;gap:9px;padding:10px 11px;border-radius:12px;background:#0d161d;border:1px solid var(--line)}.next-action-row b{margin-left:auto}.quote-v7{display:grid;grid-template-columns:minmax(0,1.3fr) minmax(310px,.7fr);gap:14px;padding:17px;border:1px solid var(--line);border-radius:17px;background:linear-gradient(145deg,#111d26,#0e171e);position:relative;overflow:hidden}.quote-v7:before{content:'';position:absolute;left:0;top:0;bottom:0;width:4px;background:var(--blue)}.quote-v7.incomplete:before{background:var(--warn)}.quote-v7.accepted:before{background:var(--ok)}.quote-v7.expired:before,.quote-v7.refused:before{background:#60727b}.quote-v7-main{min-width:0}.quote-v7-title{display:flex;align-items:center;gap:8px;flex-wrap:wrap}.quote-v7-title b{font-size:14px}.quote-v7-sub{color:var(--muted);font-size:10px;margin-top:4px}.quote-v7-total{font-size:24px;font-weight:930;letter-spacing:-.04em;margin-top:13px}.quote-v7-total small{font-size:9px;color:var(--muted);font-weight:750;letter-spacing:0}.quote-integrity{display:flex;gap:7px;align-items:center;margin-top:7px;color:var(--ok);font-size:9px}.quote-integrity.bad{color:var(--warn)}.quote-v7-side{display:flex;flex-direction:column;gap:12px;justify-content:space-between}.quote-stepper{display:grid;grid-template-columns:repeat(5,1fr);gap:4px}.quote-step{height:5px;border-radius:999px;background:#263640}.quote-step.done{background:var(--accent)}.quote-step.current{background:var(--blue);box-shadow:0 0 0 3px rgba(112,167,255,.08)}.quote-step-labels{display:grid;grid-template-columns:repeat(5,1fr);gap:4px;margin-top:5px}.quote-step-labels span{text-align:center;color:var(--muted);font-size:7px}.quote-v7-actions{display:flex;gap:6px;justify-content:flex-end;flex-wrap:wrap}.quote-status-menu{display:flex;gap:6px;align-items:center;justify-content:flex-end}.quote-status-menu select{max-width:145px;border:1px solid var(--line);background:#0d161d;color:var(--ink);padding:7px;border-radius:9px;font-size:10px}.integrity-banner{padding:10px 12px;border:1px solid #2d665b;background:#102a27;border-radius:12px;color:#a8d8d0;font-size:10px}.integrity-banner.warn{border-color:#6b5123;background:#2b2112;color:#e5bd79}.editor-shell{display:grid;gap:14px}.editor-headline{display:flex;align-items:flex-start;justify-content:space-between;gap:14px}.editor-headline h3{margin:4px 0 0}.editor-badge{padding:7px 10px;border-radius:999px;background:#102a27;color:var(--accent);font-size:9px;font-weight:850}.pricing-helpers{display:flex;gap:7px;flex-wrap:wrap;margin-bottom:11px}.pricing-helper{border:1px dashed #3b5661;background:#0d161d;color:#b6c6cc;border-radius:10px;padding:7px 9px;font-size:9px}.pricing-helper:hover{border-color:var(--accent);color:#fff}.quote-live-summary{display:grid;grid-template-columns:repeat(4,1fr);gap:8px;margin-top:13px}.quote-live-summary div{padding:11px;border-radius:12px;background:#0d161d;border:1px solid var(--line)}.quote-live-summary span{display:block;color:var(--muted);font-size:8px;text-transform:uppercase}.quote-live-summary strong{display:block;margin-top:4px;font-size:14px}.save-proof{margin-top:12px;padding:13px;border-radius:13px;background:var(--okbg);color:var(--ok);font-size:10px}.save-proof.bad{background:var(--dangerbg);color:var(--danger)}.document-filter-v7{display:flex;gap:8px;align-items:center;margin-left:auto}.document-filter-v7 select{border:1px solid var(--line);background:#0d161d;color:var(--ink);padding:8px 10px;border-radius:10px;font-size:10px}\n@media(max-width:1000px){.lifecycle-lab,.quote-v7{grid-template-columns:1fr}.quote-v7-actions,.quote-status-menu{justify-content:flex-start}}\n@media(max-width:660px){.donut-grid{grid-template-columns:1fr}.quote-live-summary{grid-template-columns:1fr 1fr}.quote-step-labels{display:none}.document-filter-v7{width:100%;margin:0}.document-filter-v7 select{width:100%}}\n`;\n\nexport const CLIENT_V7 = String.raw`\nlet v7QuoteScope='active';\nconst v7Complete=qv=>Number(qv.total_ttc||0)>0&&Number(qv.lignes_count||0)>0;\nconst v7StatusOrder=['brouillon','pret','envoye','accepte','facture'];\nconst v7Stage=qv=>hasInvoiceFor(qv.id)?4:Math.max(0,v7StatusOrder.indexOf(String(qv.statut||'brouillon')));\nconst v7Percent=(n,d)=>d?Math.max(0,Math.min(100,Math.round(n/d*100))):0;\nfunction v7Donut(label,value,pct,tone=''){return '

'+esc(value)+''+esc(label)+'

'}\nfunction v7RenderLifecycle(){let host=q('#documentCommand');if(!host){host=document.createElement('div');host.id='documentCommand';q('#view-documents .toolbar').before(host)}const active=quotes.filter(x=>!/expire|refuse/i.test(x.statut||'')),complete=active.filter(v7Complete),sent=quotes.filter(x=>/envoye|accepte/i.test(x.statut||'')),accepted=quotes.filter(x=>/accepte/i.test(x.statut||'')),billed=invoices.filter(x=>!isCancelled(x)),paid=billed.filter(isPaid);const integrity=v7Percent(complete.length,active.length),conversion=v7Percent(accepted.length,sent.length),cash=v7Percent(paid.reduce((s,x)=>s+Number(x.total_ttc||0),0),billed.reduce((s,x)=>s+Number(x.total_ttc||0),0));const incomplete=active.filter(x=>!v7Complete(x)).length,toSend=complete.filter(x=>/brouillon|pret/i.test(x.statut||'')).length,toInvoice=accepted.filter(x=>!hasInvoiceFor(x.id)).length;host.className='lifecycle-lab';host.innerHTML='

Intelligence commerciale

Cycle devis → encaissement

Les graphiques utilisent uniquement les documents réellement enregistrés.

'+v7Donut('Intégrité des devis',integrity+' %',integrity,'')+v7Donut('Conversion envoyés',conversion+' %',conversion,'blue')+v7Donut('Montant encaissé',cash+' %',cash,'warn')+'

Prochaines actions

'+((incomplete+toSend+toInvoice)||0)+' décisions utiles

Le cockpit propose uniquement les étapes possibles dans l’état actuel.

Devis à corriger'+incomplete+'

Prêts à envoyer'+toSend+'

À facturer'+toInvoice+'

'}\nfunction v7Steps(x){const stage=v7Stage(x);return '

'+v7StatusOrder.map((_,i)=>'').join('')+'

BrouillonPrêtEnvoyéAcceptéFacturé

'}\nfunction v7QuoteCard(x){const complete=v7Complete(x),status=String(x.statut||'brouillon'),client=invoiceClient(x),expired=/expire/i.test(status),refused=/refuse/i.test(status),accepted=/accepte/i.test(status),invoiced=hasInvoiceFor(x.id),klass=!complete?'incomplete':accepted?'accepted':expired?'expired':refused?'refused':'';let actions='';if(!expired&&!invoiced&&complete)actions+='';if(!complete&&!expired)actions+='';else if(/brouillon|pret/i.test(status)&&!invoiced)actions+='';else if(/envoye/i.test(status)&&!invoiced)actions+='';else if(accepted&&!invoiced)actions+='';const integrity=complete?'

✓ '+esc(x.lignes_count||0)+' ligne(s), totaux vérifiés

':'

⚠ Totaux ou lignes incomplets

';return '

'+esc(x.numero||'Devis')+''+pill(status)+(expired?'Remplacé':'')+'

'+esc(client.nom||client.telephone||'Client')+' · '+esc(x.objet||'Sans objet')+'

'+money(x.total_ttc)+' TTC

'+integrity+'

'+v7Steps(x)+'

'+actions+'

'+(!expired&&!invoiced&&complete?'':'')+'

'}\nconst v7RenderDocumentsBase=renderDocuments;\nrenderDocumentCommand=v7RenderLifecycle;\nrenderDocuments=function(){v7RenderLifecycle();qa('[data-document-tab]').forEach(x=>x.classList.toggle('active',x.dataset.documentTab===documentTab));let card=q('#documentsWorkspace');if(!card){card=q('#documentsBody')?.closest('article.card');if(card)card.id='documentsWorkspace'}if(!card)return;const quoteTools=documentTab==='quotes'?'

':'';card.innerHTML='

'+quoteTools+'

';let source=documentTab==='quotes'?quotes:documentTab==='invoices'?invoices:purchases;if(documentTab==='quotes'){source=source.filter(x=>{if(v7QuoteScope==='all')return true;if(v7QuoteScope==='active')return !/expire|refuse/i.test(x.statut||'');if(v7QuoteScope==='incomplete')return !v7Complete(x);if(v7QuoteScope==='accepted')return /accepte/i.test(x.statut||'');return true})}const filtered=source.filter(x=>{const hay=JSON.stringify([x.numero,x.objet,clientName(x),x.statut,x.type_facture]).toLowerCase();return!documentSearch||hay.includes(documentSearch)});q('#documentGridV6').innerHTML=filtered.length?filtered.map(x=>documentTab==='quotes'?v7QuoteCard(x):documentTab==='invoices'?invoiceCard(x):purchaseCard(x)).join(''):'

Aucun document

Aucun élément ne correspond à ce filtre.

';q('#documentSearchV6').value=documentSearch;q('#documentSearchV6').oninput=e=>{documentSearch=e.target.value.toLowerCase();renderDocuments()};if(q('#v7QuoteScope')){q('#v7QuoteScope').value=v7QuoteScope;q('#v7QuoteScope').onchange=e=>{v7QuoteScope=e.target.value;renderDocuments()}};v7BindQuoteActions();bindDocumentActions()}\nfunction v7SetControl(row,name,value){const el=q('[name=\"'+name+'\"]',row);if(el&&value!==undefined&&value!==null)el.value=String(value)}\nfunction v7AddLine(prefill={}){const row=document.createElement('div');row.className='quote-line';row.innerHTML='';['type_ligne','designation','quantite','unite','prix_unitaire_ht','tva_taux'].forEach(n=>v7SetControl(row,n,prefill[n]??prefill[n==='prix_unitaire_ht'?'prix_ht':n]));q('button',row).onclick=()=>{row.remove();v7Totals()};qa('input,select',row).forEach(x=>x.oninput=v7Totals);q('[name=designation]',row).onchange=()=>{const hit=catalog.find(c=>c.designation===q('[name=designation]',row).value);if(hit){v7SetControl(row,'prix_unitaire_ht',hit.prix_ht||hit.prix_unitaire_ht||0);v7SetControl(row,'tva_taux',hit.tva_taux||20);v7SetControl(row,'unite',hit.unite||'u');v7Totals()}};q('#quoteLinesV7').appendChild(row);v7Totals()}\nfunction v7Totals(){let ht=0,tva=0;qa('.quote-line',dialogBody).forEach(row=>{const line=Number(q('[name=quantite]',row).value||0)*Number(q('[name=prix_unitaire_ht]',row).value||0),rate=Number(q('[name=tva_taux]',row).value||0);ht+=line;tva+=line*rate/100});const pct=Number(q('#quoteFormV7 [name=acompte_pct]')?.value||30);if(q('#v7Ht'))q('#v7Ht').textContent=money(ht);if(q('#v7Tva'))q('#v7Tva').textContent=money(tva);if(q('#v7Ttc'))q('#v7Ttc').textContent=money(ht+tva);if(q('#v7Deposit'))q('#v7Deposit').textContent=money((ht+tva)*pct/100)}\nasync function v7OpenQuoteEditor(id=null){let detail={devis:{},client:{},lignes:[]};if(id){try{detail=await action('quote.get',{id},false)}catch(error){toast(error.message,false);return}}const d=detail.devis||{},c=detail.client||{};dialogTitle.textContent=id?'Modifier '+(d.numero||'le devis'):'Créer un devis';dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#v7AddLine').onclick=()=>v7AddLine();qa('[data-quick-line]').forEach(btn=>btn.onclick=()=>{const kind=btn.dataset.quickLine;if(kind==='diagnostic')v7AddLine({type_ligne:'forfait',designation:'Diagnostic piscine',quantite:1,unite:'forfait',prix_unitaire_ht:85,tva_taux:20});if(kind==='labor')v7AddLine({type_ligne:'main_oeuvre',designation:'Main-d’œuvre technicien',quantite:1,unite:'h',prix_unitaire_ht:Number(settings.taux_horaire_mo_ht||55),tva_taux:20});if(kind==='travel')v7AddLine({type_ligne:'deplacement',designation:'Forfait déplacement',quantite:1,unite:'forfait',prix_unitaire_ht:45,tva_taux:20})});const initial=Array.isArray(detail.lignes)&&detail.lignes.length?detail.lignes:[{}];initial.forEach(v7AddLine);q('#quoteFormV7 [name=acompte_pct]').oninput=v7Totals;q('#quoteFormV7').onsubmit=async event=>{event.preventDefault();const form=event.currentTarget,button=q('[type=submit]',form),proof=q('#v7SaveProof'),payload=Object.fromEntries(new FormData(form).entries());payload.lines=qa('.quote-line',form).map(row=>({type_ligne:q('[name=type_ligne]',row).value,designation:q('[name=designation]',row).value,quantite:Number(q('[name=quantite]',row).value||0),unite:q('[name=unite]',row).value,prix_unitaire_ht:Number(q('[name=prix_unitaire_ht]',row).value||0),tva_taux:Number(q('[name=tva_taux]',row).value||0)}));if(payload.lines.some(l=>!l.designation||l.quantite<=0||l.prix_unitaire_ht<=0)){proof.innerHTML='

Chaque ligne doit avoir une désignation, une quantité et un prix strictement positifs.

';return}if(id)payload.id=id;button.disabled=true;proof.innerHTML='';try{const result=await action(id?'quote.update':'quote.create',payload,false);if(!result.devis?.id)throw new Error(result.error||'Devis non enregistré');let verified=await action('quote.get',{id:result.devis.id},false);const lineTotal=(verified.lignes||[]).reduce((s,l)=>s+Number(l.total_ht||0)*(1+Number(l.tva_taux||0)/100),0);if(Math.abs(Number(verified.devis?.total_ttc||0)-lineTotal)>.02){await action('quote.recalculate',{id:result.devis.id},false);verified=await action('quote.get',{id:result.devis.id},false)}if(Number(verified.devis?.total_ttc||0)<=0)throw new Error('Le total serveur reste nul');const merged={...verified.devis,client:verified.client,lignes_count:(verified.lignes||[]).length};const index=quotes.findIndex(x=>x.id===merged.id);if(index>=0)quotes[index]=merged;else quotes.unshift(merged);proof.innerHTML='

✓ '+esc(merged.numero)+' enregistré sans doublon · '+money(merged.total_ttc)+' TTC · '+esc(merged.lignes_count)+' ligne(s)

';renderDocuments();toast(id?'Devis corrigé':'Devis créé');setTimeout(()=>dialog.close(),900)}catch(error){proof.innerHTML='

'+esc(error.message)+'

';toast(error.message,false);button.disabled=false}};dialog.showModal()}\nasync function v7ChangeStatus(id,status){try{const result=await action('quote.status',{id,statut:status},false),index=quotes.findIndex(x=>x.id===id);if(index>=0&&result.devis)quotes[index]={...quotes[index],...result.devis};renderDocuments();toast('Statut mis à jour')}catch(error){toast(error.message,false)}}\nasync function v7SendQuote(id){const button=q('[data-send-quote=\"'+id+'\"]');if(button)button.disabled=true;try{await action('quote.recalculate',{id},false);const check=await action('quote.get',{id},false);if(!check.devis||Number(check.devis.total_ttc||0)<=0||(check.lignes||[]).length===0)throw new Error('Devis incomplet');if(!check.client?.email)throw new Error('Adresse e-mail client manquante');const result=await action('quote.send',{id},false),index=quotes.findIndex(x=>x.id===id);if(index>=0)quotes[index]={...quotes[index],statut:'envoye',date_envoi:new Date().toISOString()};renderDocuments();toast(result.message||'Devis envoyé par e-mail')}catch(error){toast(error.message,false);if(button)button.disabled=false}}\nfunction v7BindQuoteActions(){qa('[data-edit-quote]').forEach(x=>x.onclick=()=>v7OpenQuoteEditor(x.dataset.editQuote));qa('[data-send-quote]').forEach(x=>x.onclick=()=>v7SendQuote(x.dataset.sendQuote));qa('[data-status-quote]').forEach(x=>x.onclick=()=>v7ChangeStatus(x.dataset.statusQuote,x.dataset.nextStatus));qa('[data-apply-status]').forEach(x=>x.onclick=()=>v7ChangeStatus(x.dataset.applyStatus,q('[data-status-select=\"'+x.dataset.applyStatus+'\"]')?.value||'brouillon'))}\nopenQuoteDialog=function(){v7OpenQuoteEditor(null)};\nqa('[data-open-quote]').forEach(x=>x.onclick=()=>v7OpenQuoteEditor(null));\nrenderDocuments();\n`;\n",[],[462,644],"5040caaa-44b3-4c84-ace9-4f7b93b6c732","client-v6.ts","019f675d-aa00-73de-b62f-bb9d5691d9f3",["D",1784145619620],"export const CSS_V6 = String.raw`\n.document-command{display:grid;grid-template-columns:1.1fr .9fr;gap:16px;margin-bottom:18px}.doc-overview{padding:20px;position:relative;overflow:hidden}.doc-overview:after{content:'';position:absolute;width:220px;height:220px;border-radius:50%;background:radial-gradient(circle,rgba(53,209,181,.16),transparent 68%);right:-70px;top:-90px}.doc-overview h2{font-size:20px;margin:6px 0 3px;letter-spacing:-.03em}.doc-overview p{margin:0;color:var(--muted);font-size:11px}.pipeline-track{display:grid;grid-template-columns:repeat(4,1fr);gap:7px;margin-top:18px}.pipeline-stage{position:relative;padding:11px;border:1px solid var(--line);border-radius:13px;background:#0d161d;min-height:72px}.pipeline-stage:before{content:'';position:absolute;left:0;top:0;bottom:0;width:3px;border-radius:13px 0 0 13px;background:#60727b}.stage-draft:before{background:#8fa3ad}.stage-ready:before{background:#70a7ff}.stage-accepted:before{background:#f1b75b}.stage-invoiced:before{background:#55d692}.pipeline-stage span{display:block;color:var(--muted);font-size:9px;text-transform:uppercase;letter-spacing:.08em}.pipeline-stage strong{display:block;font-size:18px;margin-top:5px}.cash-panel{padding:20px;display:flex;flex-direction:column;justify-content:space-between}.cash-ring{width:112px;height:112px;border-radius:50%;display:grid;place-items:center;margin:4px auto 12px;background:#23343e;position:relative}.cash-none{background:#23343e}.cash-low{background:conic-gradient(var(--accent) 25%,#23343e 0)}.cash-mid{background:conic-gradient(var(--accent) 50%,#23343e 0)}.cash-high{background:conic-gradient(var(--accent) 75%,#23343e 0)}.cash-full{background:conic-gradient(var(--accent) 100%,#23343e 0)}.cash-ring:before{content:'';position:absolute;inset:10px;background:var(--panel);border-radius:50%}.cash-ring div{position:relative;text-align:center}.cash-ring strong{display:block;font-size:20px}.cash-ring span{font-size:9px;color:var(--muted)}.cash-legend{display:grid;grid-template-columns:1fr 1fr;gap:8px}.cash-legend div{padding:9px;border-radius:11px;background:#0d161d}.cash-legend span{display:block;font-size:9px;color:var(--muted)}.cash-legend strong{font-size:12px}.document-tools{display:flex;gap:10px;align-items:center;margin-bottom:13px}.document-tools input{max-width:300px}.document-grid{display:grid;gap:10px}.document-card{display:grid;grid-template-columns:minmax(0,1.45fr) .7fr .7fr auto;align-items:center;gap:16px;padding:15px 17px;border:1px solid var(--line);border-radius:15px;background:linear-gradient(135deg,#101a22,#111d26);position:relative;overflow:hidden}.document-card:before{content:'';position:absolute;left:0;top:0;bottom:0;width:3px;background:#60727b}.doc-incomplete:before{background:#f1b75b}.doc-accepted:before,.doc-paid:before{background:#55d692}.doc-default:before{background:#70a7ff}.doc-overdue:before{background:#ff7a70}.doc-purchase:before{background:#8fa3ad}.document-card:hover{border-color:#36505b;transform:translateY(-1px)}.doc-main b{font-size:13px}.doc-main .sub{max-width:520px}.doc-metric span{display:block;color:var(--muted);font-size:9px;text-transform:uppercase;letter-spacing:.06em}.doc-metric strong{display:block;font-size:14px;margin-top:3px}.doc-alert{margin-top:7px;font-size:9px;color:var(--warn)}.doc-actions{display:flex;justify-content:flex-end;gap:6px;flex-wrap:wrap}.doc-proof{display:inline-flex;align-items:center;gap:5px;font-size:9px;color:var(--ok);margin-top:7px}.doc-proof:before{content:'✓';width:15px;height:15px;border-radius:50%;display:grid;place-items:center;background:var(--okbg)}.invoice-choice-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:9px;margin:14px 0}.invoice-choice{position:relative;border:1px solid var(--line);background:#0d161d;padding:14px;border-radius:14px;cursor:pointer}.invoice-choice input{position:absolute;opacity:0}.invoice-choice:has(input:checked){border-color:var(--accent);background:#102a27;box-shadow:0 0 0 2px rgba(53,209,181,.08)}.invoice-choice b{display:block}.invoice-choice span{display:block;color:var(--muted);font-size:9px;margin-top:3px}.invoice-choice strong{display:block;color:var(--accent);font-size:16px;margin-top:9px}.verification-card{padding:16px;border:1px solid #2b655a;background:#0f2926;border-radius:15px;margin-top:13px}.verification-card .seal{display:flex;align-items:center;gap:10px}.verification-card .seal i{width:35px;height:35px;border-radius:50%;display:grid;place-items:center;background:var(--accent);color:#06251f;font-style:normal;font-weight:950}.verification-card h3{margin:0;font-size:14px}.verification-card p{margin:3px 0 0;color:#9bc1ba;font-size:10px}.verification-meta{display:grid;grid-template-columns:repeat(3,1fr);gap:7px;margin-top:12px}.verification-meta div{padding:9px;background:rgba(0,0,0,.15);border-radius:10px}.verification-meta span{display:block;font-size:8px;color:#80aaa3;text-transform:uppercase}.verification-meta strong{font-size:11px}.legacy-warning{display:inline-flex;align-items:center;gap:5px;padding:4px 7px;border-radius:999px;background:var(--warnbg);color:var(--warn);font-size:8px;font-weight:850}.document-empty-action{padding:30px;text-align:center}.document-empty-action h3{margin:0 0 5px}.document-empty-action p{margin:0 0 13px;color:var(--muted)}\n@media(max-width:1000px){.document-command{grid-template-columns:1fr}.pipeline-track{grid-template-columns:repeat(2,1fr)}.document-card{grid-template-columns:minmax(0,1fr) .65fr auto}.document-card .doc-date{display:none}}\n@media(max-width:660px){.document-card{grid-template-columns:1fr;gap:9px}.doc-actions{justify-content:flex-start}.invoice-choice-grid{grid-template-columns:1fr}.verification-meta{grid-template-columns:1fr 1fr}.pipeline-track{grid-template-columns:1fr 1fr}.document-tools{align-items:stretch;flex-direction:column}.document-tools input{max-width:none}.cash-panel{display:none}}\n`;\n\nexport const CLIENT_V6 = String.raw`\nlet documentSearch='',documentStatus='all';\nconst invoiceClient=(doc)=>doc.client||clients.find(c=>c.id===doc.client_id)||{};\nconst quoteIsComplete=(quote)=>Number(quote.total_ttc||0)>0&&Number(quote.lignes_count||0)>0;\nconst hasInvoiceFor=(quoteId)=>invoices.some(f=>f.devis_id===quoteId&&!/annule/i.test(f.statut||''));\nconst invoiceBalance=()=>invoices.filter(x=>!isPaid(x)&&!isCancelled(x)).reduce((sum,x)=>sum+Number(x.total_ttc||0),0);\nfunction documentMetrics(){const accepted=quotes.filter(x=>/accepte/i.test(x.statut||'')),paid=invoices.filter(isPaid),issued=invoices.filter(x=>!isCancelled(x));return{draft:quotes.filter(x=>/brouillon/i.test(x.statut||'')).length,ready:quotes.filter(x=>/pret|envoye/i.test(x.statut||'')).length,accepted:accepted.length,invoiced:issued.length,pipeline:quotes.filter(x=>!/refuse|expire/i.test(x.statut||'')).reduce((s,x)=>s+Number(x.total_ttc||0),0),billed:issued.reduce((s,x)=>s+Number(x.total_ttc||0),0),paid:paid.reduce((s,x)=>s+Number(x.total_ttc||0),0),due:invoiceBalance()}}\nfunction renderDocumentCommand(){let host=q('#documentCommand');if(!host){host=document.createElement('div');host.id='documentCommand';q('#view-documents .toolbar').before(host)}const m=documentMetrics(),ratio=m.billed?Math.min(100,Math.round(m.paid/m.billed*100)):0,cashClass=ratio<=0?'cash-none':ratio<38?'cash-low':ratio<63?'cash-mid':ratio<88?'cash-high':'cash-full';host.className='document-command';host.innerHTML='

Cycle commercial

'+money(m.pipeline)+' en mouvement

De la proposition au règlement, sans rupture de suivi.

Brouillons'+m.draft+'

Prêts / envoyés'+m.ready+'

Acceptés'+m.accepted+'

Factures'+m.invoiced+'

'+ratio+'%encaissé

Facturé'+money(m.billed)+'

À recevoir'+money(m.due)+'

'}\nfunction documentMatches(x){const hay=JSON.stringify([x.numero,x.objet,clientName(x),x.statut,x.type_facture]).toLowerCase();return(!documentSearch||hay.includes(documentSearch))&&(documentStatus==='all'||String(x.statut||'')===documentStatus)}\nfunction quoteCard(x){const complete=quoteIsComplete(x),invoiced=hasInvoiceFor(x.id),client=invoiceClient(x),docClass=!complete?'doc-incomplete':/accepte/i.test(x.statut||'')?'doc-accepted':'doc-default';let primary='';if(!complete)primary='';else if(!invoiced&&!/refuse|expire/i.test(x.statut||''))primary='';return '

'+esc(x.numero||'Brouillon')+' '+pill(x.statut||'brouillon')+'

'+esc(client.nom||client.telephone||'Client')+' · '+esc(x.objet||'Sans objet')+'

'+(!complete?'

Document historique incomplet : aucune ligne ou aucun montant.

':'

Montants calculés et enregistrés

')+'

Montant TTC'+money(x.total_ttc)+'

Émission'+dateOnly(x.date_emission||x.created_at)+'

'+(String(x.statut)==='brouillon'&&complete?'':'')+primary+'

'}\nfunction invoiceCard(x){const overdue=!isPaid(x)&&x.date_echeance&&new Date(x.date_echeance)

'+esc(x.numero||'Facture')+' '+pill(x.statut||'brouillon')+'

'+esc(client.nom||client.telephone||'Client')+' · '+esc(textStatus(x.type_facture||'simple'))+'

Persistée dans factures

Montant TTC'+money(x.total_ttc)+'

'+(overdue?'Retard':'Échéance')+''+dateOnly(x.date_echeance)+'

'+(!isPaid(x)&&!isCancelled(x)?'':'')+'

'}\nfunction purchaseCard(x){return '

'+esc(x.numero_facture||'Achat')+' '+pill(x.ocr_statut||'en_attente')+'

'+esc(x.fournisseur||'Fournisseur')+'

Montant TTC'+money(x.total_ttc)+'

Date'+dateOnly(x.date_facture||x.created_at)+'

'}\nconst renderDocumentsV5=renderDocuments;\nrenderDocuments=function(){renderDocumentCommand();qa('[data-document-tab]').forEach(x=>x.classList.toggle('active',x.dataset.documentTab===documentTab));let card=q('#documentsWorkspace');if(!card){card=q('#documentsBody')?.closest('article.card');if(card)card.id='documentsWorkspace'}if(!card)return;card.innerHTML='

';const source=documentTab==='quotes'?quotes:documentTab==='invoices'?invoices:purchases;const filtered=source.filter(documentMatches);q('#documentGridV6').innerHTML=filtered.length?filtered.map(x=>documentTab==='quotes'?quoteCard(x):documentTab==='invoices'?invoiceCard(x):purchaseCard(x)).join(''):'

Aucun document ici

Créez un devis complet pour démarrer le cycle commercial.

'+(documentTab==='quotes'?'':'')+'

';q('#documentSearchV6').value=documentSearch;q('#documentStatusV6').value=documentStatus;q('#documentSearchV6').oninput=e=>{documentSearch=e.target.value.toLowerCase();renderDocuments()};q('#documentStatusV6').onchange=e=>{documentStatus=e.target.value;renderDocuments()};qa('[data-open-quote]',q('#documentGridV6')).forEach(x=>x.onclick=()=>openQuoteDialog());qa('[data-rebuild-quote]').forEach(x=>x.onclick=()=>{const old=quotes.find(qt=>qt.id===x.dataset.rebuildQuote)||{},c=invoiceClient(old);openQuoteDialog({nom:c.nom,telephone:c.telephone,email:c.email,adresse:c.adresse,code_postal:c.code_postal,ville:c.ville,objet:old.objet||''})});bindDocumentActions()}\nfunction amountForInvoice(quote,type){const total=Number(quote.total_ttc||0),pct=Number(quote.acompte_pct||30);if(type==='acompte')return total*pct/100;if(type==='solde'){const prior=invoices.filter(x=>x.devis_id===quote.id&&x.type_facture==='acompte'&&!isCancelled(x)).reduce((s,x)=>s+Number(x.total_ttc||0),0);return Math.max(0,total-prior)}return total}\nfunction verifiedInvoiceResult(result,verified){const invoice={...(verified.facture||result.facture||{}),client:verified.client||invoiceClient(result.facture||{})};const index=invoices.findIndex(x=>x.id===invoice.id);if(index>=0)invoices[index]=invoice;else invoices.unshift(invoice);return invoice}\nopenInvoiceDialog=function(devisId){const quote=quotes.find(x=>x.id===devisId)||{};if(!quoteIsComplete(quote)){toast('Ce devis est incomplet : ajoutez des lignes et un montant avant de facturer.',false);return}dialogTitle.textContent='Transformer le devis en facture';const simple=amountForInvoice(quote,'simple'),deposit=amountForInvoice(quote,'acompte'),balance=amountForInvoice(quote,'solde');dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#invoiceFormV6').onsubmit=async event=>{event.preventDefault();const form=event.currentTarget,button=q('[type=submit]',form),proof=q('#invoiceProofV6'),popup=pendingDocument();button.disabled=true;proof.innerHTML='

Création puis vérification directe dans Supabase…

';try{const payload=Object.fromEntries(new FormData(form).entries());payload.devis_id=devisId;const result=await action('invoice.from_quote',payload,false);if(!result.facture?.id)throw new Error(result.error||'La base n’a retourné aucune facture');const verified=await action('invoice.get',{id:result.facture.id},false);if(!verified.facture||verified.facture.id!==result.facture.id)throw new Error('La facture n’a pas pu être relue après création');const invoice=verifiedInvoiceResult(result,verified);proof.innerHTML='

✓

Facture enregistrée et relue

La création est confirmée par une seconde lecture indépendante.

Numéro'+esc(invoice.numero)+'

Montant'+money(invoice.total_ttc)+'

Stockagefactures

';revealDocument(popup,'invoice',invoice.id);q('[data-open-created]',proof).onclick=()=>openDoc('invoice',invoice.id);q('[data-see-invoices]',proof).onclick=()=>{dialog.close();documentTab='invoices';showView('documents');renderDocuments()};documentTab='invoices';renderDocuments();toast(result.created===false?'Facture existante retrouvée':'Facture créée et vérifiée')}catch(error){if(popup)popup.close();proof.innerHTML='

Échec : '+esc(error.message)+'

';toast(error.message,false);button.disabled=false}};dialog.showModal()}\nopenPaymentDialog=function(id){const invoice=invoices.find(x=>x.id===id)||{};dialogTitle.textContent='Enregistrer un encaissement';dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#paymentFormV6').onsubmit=async event=>{event.preventDefault();const button=q('[type=submit]',event.currentTarget),payload=Object.fromEntries(new FormData(event.currentTarget).entries()),proof=q('#paymentProofV6');payload.id=id;button.disabled=true;proof.innerHTML='

Enregistrement du paiement…

';try{await action('invoice.mark_paid',payload,false);const verified=await action('invoice.get',{id},false);if(!verified.facture||!isPaid(verified.facture))throw new Error('Le paiement n’a pas été confirmé après relecture');verifiedInvoiceResult({facture:verified.facture},verified);proof.innerHTML='

✓

Paiement confirmé

Le statut payé a été relu dans la base.

';renderDocuments();renderPilot();toast('Paiement enregistré et vérifié')}catch(error){proof.innerHTML='

'+esc(error.message)+'

';toast(error.message,false);button.disabled=false}};dialog.showModal()}\nrenderDocuments();\n`;\n",[],[462,651],"e0f96788-8d4b-4d38-9582-356402d95a89","client-v5.ts","019f675d-aa00-73de-b62f-b423e08fd83e",20,["D",1784147163239],5,"export const CLIENT_V5 = String.raw`\nconst isPoolVertical=String(business.vertical_key||'')==='pool_service';\nconst pools=isPoolVertical?list(data.piscines):[];\nconst businessAssets=isPoolVertical?pools:list(data.assets||data.installations);\nfunction clientAssetSummary(clientId){const rows=businessAssets.filter(item=>(item.client_id||item.customer_id)===clientId);if(!rows.length)return'';const label=businessLabel('assets',isPoolVertical?'Piscines':'Équipements');const summary=rows.map(item=>item.display_name||item.name||item.type_bassin||item.asset_type||item.type||item.volume_m3||'équipement').join(', ');return'

'+esc(label)+' : '+esc(summary)+'

'}\nconst friendlyErrors={action_failed:'Action impossible.',upstream_400:'Données incomplètes ou invalides.',upstream_409:'Cette action existe déjà ou entre en conflit.',upstream_500:'Le service métier a rencontré une erreur.',invalid_id:'Identifiant invalide.',missing_required_fields:'Informations obligatoires manquantes.',unsupported_action:'Action non disponible.',csrf_rejected:'Session expirée. Rechargez la page.'};\nfunction friendlyError(value){const key=String(value||'action_failed');return friendlyErrors[key]||key.replaceAll('_',' ')}\naction=async function(actionName,payload={},reload=true){let response,result={},raw='';try{response=await fetch('/api/action',{method:'POST',headers:{'content-type':'application/json','x-csrf-token':csrf},body:JSON.stringify({action:actionName,data:payload})});raw=await response.text();try{result=raw?JSON.parse(raw):{}}catch{throw new Error('Réponse métier illisible.')}if(!response.ok||result.ok===false)throw new Error(friendlyError(result.message||result.error||('upstream_'+response.status)));toast(result.message||'Action exécutée et enregistrée.');if(reload)setTimeout(()=>location.reload(),950);return result}catch(error){throw new Error(error instanceof Error?friendlyError(error.message):'Action impossible.')}};\nfunction pendingDocument(){const win=window.open('about:blank','_blank');if(win){win.document.open();win.document.write('Préparation du documentPréparation du document…');win.document.close()}return win}\nfunction revealDocument(win,kind,id){const url='/documents/'+(kind==='quote'?'devis':'facture')+'/'+encodeURIComponent(id);if(win)win.location.href=url;else window.open(url,'_blank','noopener')}\nfunction entityClient(entity){if(entity?.client?.id)return entity.client;const id=entity?.client_id||entity?.client?.id;return clients.find(c=>c.id===id)||entity?.client||null}\nfunction clientPhone(entity){return entityClient(entity)?.telephone||entity?.telephone||entity?.customer_phone||''}\nfunction clientAddress(entity){const c=entityClient(entity)||{};return entity?.adresse||[c.adresse,c.code_postal,c.ville].filter(Boolean).join(' ')||''}\nfunction related(collection,clientId){return collection.filter(x=>(x.client_id||x.client?.id)===clientId)}\nfunction requestBusinessFields(req){return req?.business_fields&&typeof req.business_fields==='object'?req.business_fields:{}} function scoreRequest(req){const c=entityClient(req)||{},pool=isPoolVertical?pools.find(p=>p.client_id===c.id):null,fields=requestBusinessFields(req),checks=[c.nom,c.telephone,c.ville||c.adresse,req.description||req.objet||fields.description,isPoolVertical?pool?.type_bassin:fields.request_type||req.type_intervention],labels=['nom','téléphone','adresse ou ville','description',isPoolVertical?'type de bassin':'type d’intervention'],complete=checks.filter(present).length;return{score:Math.round(complete/checks.length*100),missing:labels.filter((_,i)=>!present(checks[i]))}}\nfunction suggestedLines(req){const text=String(req?.description||req?.objet||requestBusinessFields(req).description||'').toLowerCase(),groups=isPoolVertical?[['fuite',['fuite','diagnostic']],['eau verte',['traitement','remise en route']],['filtration',['filtration','pompe','filtre']],['entretien',['entretien']],['hivernage',['hivernage']],['chauffage',['chauffage','pompe à chaleur']],['liner',['liner','étanchéité']]]:[],terms=[];for(const [needle,words] of groups)if(text.includes(needle))terms.push(...words);if(!isPoolVertical)terms.push(...text.normalize('NFD').replace(/[\\u0300-\\u036f]/g,'').split(/[^a-z0-9]+/).filter(word=>word.length>=4));const found=[];for(const item of catalog){const label=String(item.designation||'').toLowerCase().normalize('NFD').replace(/[\\u0300-\\u036f]/g,'');if(terms.some(term=>label.includes(String(term).normalize('NFD').replace(/[\\u0300-\\u036f]/g,'')))&&!found.some(x=>x.designation===item.designation))found.push(item)}return found.slice(0,4)}\nfunction setForm(form,prefill={}){for(const [key,value] of Object.entries(prefill)){const field=q('[name=\"'+key+'\"]',form);if(!field||value===undefined||value===null)continue;if(field.type==='checkbox')field.checked=Boolean(value);else field.value=String(value)}}\nfunction dialogProof(message,ok=true){return '

'+esc(message)+'

'}\nconst baseOpenSimple=openSimple;\nopenSimple=function(kind,prefill={}){baseOpenSimple(kind);const form=q('#actionForm',dialogBody);if(!form)return;setForm(form,prefill);if(kind==='availability'){form.onsubmit=async event=>{event.preventDefault();const button=q('[type=submit]',form),payload=Object.fromEntries(new FormData(form).entries()),box=q('#actionResult');button.disabled=true;box.classList.add('show');box.textContent='Recherche du meilleur créneau…';try{const result=await action('availability.check',payload,false),slot=result.available_slot||result.slot||'';box.innerHTML=dialogProof(result.message||'Recherche terminée.',Boolean(result.available));if(slot){const next=document.createElement('div');next.className='next-step';next.innerHTML='Créneau disponible

'+esc(dt(slot))+'

';q('button',next).onclick=()=>{dialog.close();openSimple('appointment',{telephone:prefill.telephone||'',date_heure:String(slot).slice(0,16),adresse:prefill.adresse||'',type:prefill.type||'Intervention'})};box.appendChild(next)}button.disabled=false}catch(error){box.innerHTML=dialogProof(error.message,false);button.disabled=false}}}};\nconst baseOpenQuoteDialog=openQuoteDialog;\nopenQuoteDialog=function(prefill={}){baseOpenQuoteDialog();const form=q('#quoteForm',dialogBody);if(!form)return;setForm(form,prefill);const suggestions=Array.isArray(prefill.lines)?prefill.lines:[];if(suggestions.length){q('#quoteLines').innerHTML='';suggestions.forEach(line=>quoteLine(line))}updateQuoteTotals();form.onsubmit=async event=>{event.preventDefault();const button=q('[type=submit]',form),popup=pendingDocument(),payload=Object.fromEntries(new FormData(form).entries());payload.lines=qa('.quote-line',form).map(row=>({type_ligne:q('[name=type_ligne]',row).value,designation:q('[name=designation]',row).value,quantite:Number(q('[name=quantite]',row).value||1),unite:q('[name=unite]',row).value,prix_unitaire_ht:Number(q('[name=prix_unitaire_ht]',row).value||0),tva_taux:Number(q('[name=tva_taux]',row).value||20)}));button.disabled=true;try{const result=await action('quote.create',payload,false);dialog.close();if(result.devis?.id)revealDocument(popup,'quote',result.devis.id);else if(popup)popup.close();setTimeout(()=>location.reload(),1200)}catch(error){if(popup)popup.close();toast(error.message,false);button.disabled=false}}};\nqa('[data-open-quote]').forEach(button=>button.onclick=()=>openQuoteDialog());\nconst baseOpenInvoiceDialog=openInvoiceDialog;\nopenInvoiceDialog=function(devisId){baseOpenInvoiceDialog(devisId);const form=q('#invoiceForm',dialogBody);if(!form)return;form.onsubmit=async event=>{event.preventDefault();const button=q('[type=submit]',form),popup=pendingDocument(),payload=Object.fromEntries(new FormData(form).entries());payload.devis_id=devisId;button.disabled=true;try{const result=await action('invoice.from_quote',payload,false);dialog.close();if(result.facture?.id)revealDocument(popup,'invoice',result.facture.id);else if(popup)popup.close();setTimeout(()=>location.reload(),1200)}catch(error){if(popup)popup.close();toast(error.message,false);button.disabled=false}}};\nopenPaymentDialog=function(id){const invoice=invoices.find(x=>x.id===id)||{};dialogTitle.textContent='Enregistrer un encaissement';dialogBody.innerHTML='';q('[data-close]',dialogBody).onclick=closeDialog;q('#paymentForm').onsubmit=async event=>{event.preventDefault();const button=q('[type=submit]',event.currentTarget),payload=Object.fromEntries(new FormData(event.currentTarget).entries());payload.id=id;button.disabled=true;try{await action('invoice.mark_paid',payload)}catch(error){toast(error.message,false);button.disabled=false}};dialog.showModal()};\nfunction openClient360(id){const c=clients.find(x=>x.id===id);if(!c)return;const reqs=related(requests,id),qs=related(quotes,id),ins=related(invoices,id),rdvs=related(appointments,id),assetSummary=clientAssetSummary(id);dialogTitle.textContent=c.nom||c.telephone||'Client';dialogBody.innerHTML='

Demandes'+reqs.length+'

Devis'+qs.length+'

À encaisser'+money(ins.filter(x=>!isPaid(x)).reduce((s,x)=>s+Number(x.total_ttc||0),0))+'

Coordonnées

'+esc([c.telephone,c.email,[c.adresse,c.code_postal,c.ville].filter(Boolean).join(' ')].filter(Boolean).join(' · '))+'

'+assetSummary+'

Historique récent

'+[...reqs.slice(0,3).map(x=>'

'+esc(x.objet||'Demande')+'

'+esc(textStatus(x.statut))+' · '+dt(x.created_at)+'

'),...qs.slice(0,2).map(x=>'

'+esc(x.numero||'Devis')+'

'+money(x.total_ttc)+' · '+esc(textStatus(x.statut))+'

')].join('')+'

';qa('[data-client-doc]',dialogBody).forEach(x=>x.onclick=()=>openDoc('quote',x.dataset.clientDoc));q('[data-client-quote]',dialogBody).onclick=()=>{dialog.close();openQuoteDialog({nom:c.nom,telephone:c.telephone,email:c.email,adresse:c.adresse,code_postal:c.code_postal,ville:c.ville})};q('[data-client-rdv]',dialogBody).onclick=()=>{dialog.close();openSimple('appointment',{telephone:c.telephone,adresse:[c.adresse,c.code_postal,c.ville].filter(Boolean).join(' ')})};q('[data-next-action]',dialogBody).onclick=async event=>{event.currentTarget.disabled=true;const target=q('#clientNext');target.innerHTML='

Analyse du dossier…

';try{const result=await action('next.action',{telephone:c.telephone},false);target.innerHTML='

'+esc(result.assistant_message||'Prochaine action')+'

'+esc((result.reason_codes||[]).join(', '))+'

'}catch(error){target.innerHTML=dialogProof(error.message,false);event.currentTarget.disabled=false}};dialog.showModal()}\nfunction openRequestFlow(id){const req=requests.find(x=>x.id===id);if(!req)return;const c=entityClient(req)||{},quality=scoreRequest(req),suggestions=suggestedLines(req);dialogTitle.textContent=req.objet||'Demande client';dialogBody.innerHTML='

=80?'high':quality.score>=50?'mid':'low')+'\">'+quality.score+'%

Dossier '+(quality.score>=80?'exploitable':'à compléter')+'

'+(quality.missing.length?'Manque : '+esc(quality.missing.join(', ')):'Toutes les informations essentielles sont présentes.')+'

Besoin

'+esc(req.description||req.objet||'Non renseigné')+'

'+esc(c.nom||c.telephone||'Client inconnu')+' · '+esc(textStatus(req.urgence||'normale'))+' · '+esc(textStatus(req.statut||'nouveau'))+'

'+(suggestions.length?'

Préparation de devis suggérée

'+esc(suggestions.map(x=>x.designation).join(' · '))+'

':'')+'

';q('[data-request-task]',dialogBody).onclick=async event=>{event.currentTarget.disabled=true;try{await action('task.create',{type_tache:'rappeler',priorite:urgent(req)?'haute':'normale',titre:'Rappeler '+(c.nom||c.telephone||'le client'),description:req.description||req.objet||'',client_id:c.id||null})}catch(error){toast(error.message,false);event.currentTarget.disabled=false}};q('[data-request-rdv]',dialogBody).onclick=()=>{dialog.close();openSimple('availability',{telephone:c.telephone||'',adresse:clientAddress(req),type:req.objet||'Intervention'})};q('[data-request-quote]',dialogBody).onclick=()=>{dialog.close();openQuoteDialog({nom:c.nom,telephone:c.telephone,email:c.email,adresse:c.adresse,code_postal:c.code_postal,ville:c.ville,objet:req.description||req.objet||'',lines:suggestions})};dialog.showModal()}\nfunction openAppointmentBrief(id){const rdv=appointments.find(x=>x.id===id);if(!rdv)return;const c=entityClient(rdv)||{},address=clientAddress(rdv);dialogTitle.textContent='Briefing intervention';dialogBody.innerHTML='

Client'+esc(c.nom||c.telephone||'À identifier')+'

Horaire'+esc(dt(rdv.date_heure))+'

Durée'+esc(rdv.duree_min||60)+' min

Mission

'+esc(rdv.type_rdv||rdv.objet||'Intervention')+'

'+esc(address||'Adresse à confirmer')+'

'+(address?'':'')+'

';if(q('[data-map]',dialogBody))q('[data-map]',dialogBody).onclick=()=>window.open('https://www.google.com/maps/search/?api=1&query='+encodeURIComponent(address),'_blank','noopener');q('[data-brief-client]',dialogBody).onclick=()=>{dialog.close();if(c.id)openClient360(c.id)};q('[data-brief-task]',dialogBody).onclick=async event=>{event.currentTarget.disabled=true;try{await action('task.create',{type_tache:'preparer_intervention',priorite:'normale',titre:'Préparer '+(rdv.type_rdv||'intervention')+' — '+(c.nom||c.telephone||''),description:address+' · '+dt(rdv.date_heure),client_id:c.id||null})}catch(error){toast(error.message,false);event.currentTarget.disabled=false}};dialog.showModal()}\nfunction openPurchaseReview(id){const purchase=purchases.find(x=>x.id===id);if(!purchase)return;dialogTitle.textContent='Contrôle achat fournisseur';dialogBody.innerHTML='

Fournisseur'+esc(purchase.fournisseur||'À identifier')+'

Montant'+money(purchase.total_ttc)+'

OCR'+esc(textStatus(purchase.ocr_statut||'en attente'))+'

Facture '+esc(purchase.numero_facture||'sans numéro')+' · '+dateOnly(purchase.date_facture||purchase.created_at)+'

';q('[data-purchase-task]',dialogBody).onclick=async event=>{event.currentTarget.disabled=true;try{await action('task.create',{type_tache:'valider_facture_achat',priorite:'normale',titre:'Contrôler facture '+(purchase.numero_facture||purchase.fournisseur||''),description:(purchase.fournisseur||'')+' · '+money(purchase.total_ttc)})}catch(error){toast(error.message,false);event.currentTarget.disabled=false}};dialog.showModal()}\nrenderRequests=function(){const term=(q('#requestSearch')?.value||'').toLowerCase(),filter=q('#requestFilter')?.value||'all',rows=requests.filter(x=>{const hay=JSON.stringify([x.numero,x.objet,x.description,clientName(x)]).toLowerCase();return(!term||hay.includes(term))&&(filter==='all'||(filter==='urgent'?urgent(x):String(x.statut||'')===filter))});const head=q('#view-requests thead tr');if(head&&!head.querySelector('[data-actions-head]'))head.insertAdjacentHTML('beforeend','');q('#requestsBody').innerHTML=rows.length?rows.map(x=>''+esc(x.objet||'Demande')+'

'+esc(clientName(x))+'

'+pill(x.urgence||'normale')+''+pill(x.statut||'nouveau')+''+esc(x.description||'—')+''+dt(x.created_at)+'').join(''):'Aucune demande';q('#requestsMobile').innerHTML=rows.map(x=>'

'+esc(x.objet||'Demande')+'

'+esc(clientName(x))+' · '+dt(x.created_at)+'

'+pill(x.statut||'nouveau')+'

').join('')||'

Aucune demande

';qa('[data-request-open]').forEach(x=>x.onclick=()=>openRequestFlow(x.dataset.requestOpen));q('#requestCount').textContent=rows.length};q('#requestSearch').oninput=renderRequests;q('#requestFilter').onchange=renderRequests;\nrenderClients=function(){const head=q('#view-clients thead tr');if(head&&!head.querySelector('[data-actions-head]'))head.insertAdjacentHTML('beforeend','');q('#clientsBody').innerHTML=clients.length?clients.map(x=>''+esc(x.nom||'Sans nom')+'

'+esc(x.ville||'')+'

'+esc(x.telephone||'—')+''+esc(x.email||'—')+''+pill(x.vip?'VIP':'actif')+'').join(''):'Aucun client';q('#clientsMobile').innerHTML=clients.map(x=>'

'+esc(x.nom||x.telephone||'Client')+'

'+esc([x.telephone,x.email].filter(Boolean).join(' · '))+'

').join('')||'

Aucun client

';qa('[data-client-open]').forEach(x=>x.onclick=()=>openClient360(x.dataset.clientOpen));q('#clientCount').textContent=clients.length};\nrenderAgenda=function(){const rows=[...appointments].sort((a,b)=>new Date(a.date_heure||0)-new Date(b.date_heure||0));q('#agendaList').innerHTML=rows.length?rows.map(x=>'

'+esc(clientName(x))+'

'+esc(x.type_rdv||x.objet||'Intervention')+' · '+esc(x.adresse||'Adresse non renseignée')+'

'+dt(x.date_heure)+'
'+pill(x.statut||'planifie')+'

').join(''):'

Aucun rendez-vous

';qa('[data-rdv-open]').forEach(x=>x.onclick=()=>openAppointmentBrief(x.dataset.rdvOpen))};\nconst baseQuoteRows=quoteRows,baseInvoiceRows=invoiceRows;\npurchaseRows=function(){return purchases.map(x=>''+esc(x.numero_facture||x.fournisseur||'Achat')+'

'+esc(x.fournisseur||'Fournisseur')+'

'+dateOnly(x.date_facture||x.created_at)+''+money(x.total_ttc)+''+pill(x.ocr_statut||'en_attente')+'').join('')};\nrenderDocuments=function(){qa('[data-document-tab]').forEach(x=>x.classList.toggle('active',x.dataset.documentTab===documentTab));const body=documentTab==='quotes'?baseQuoteRows():documentTab==='invoices'?baseInvoiceRows():purchaseRows();q('#documentsBody').innerHTML=body||'Aucun document';let mobile=q('#documentsMobile');if(!mobile){mobile=document.createElement('ul');mobile.id='documentsMobile';mobile.className='list mobile-docs';q('#documentsBody').closest('.card').appendChild(mobile)}const rows=documentTab==='quotes'?quotes.map(x=>'

'+esc(x.numero||'Devis')+'

'+esc(clientName(x))+' · '+money(x.total_ttc)+'

'+(!invoices.some(f=>f.devis_id===x.id)&&!/(refuse|expire)/i.test(x.statut||'')?'':'')+'

'+pill(x.statut||'brouillon')+'

'):documentTab==='invoices'?invoices.map(x=>'

'+esc(x.numero||'Facture')+'

'+esc(clientName(x))+' · '+money(x.total_ttc)+'

'+(!isPaid(x)&&!isCancelled(x)?'':'')+'

'+pill(x.statut||'brouillon')+'

'):purchases.map(x=>'

'+esc(x.numero_facture||x.fournisseur||'Achat')+'

'+money(x.total_ttc)+'

'+pill(x.ocr_statut||'en_attente')+'

');mobile.innerHTML=rows.join('')||'

Aucun document

';bindDocumentActions();qa('[data-purchase-open]').forEach(x=>x.onclick=()=>openPurchaseReview(x.dataset.purchaseOpen))};qa('[data-document-tab]').forEach(x=>x.onclick=()=>{documentTab=x.dataset.documentTab;renderDocuments()});\nconst baseRenderToday=renderToday;renderToday=function(){baseRenderToday();const listEl=q('#priorityList'),urgentRows=requests.filter(x=>urgent(x)&&!/(termine|annule|ferme)/i.test(x.statut||'')).slice(0,4),late=invoices.filter(x=>!isPaid(x)&&!isCancelled(x)&&x.date_echeance&&new Date(x.date_echeance)'

'+esc(x.objet||x.description||'Demande urgente')+'

'+esc(clientName(x))+'

'),...late.map(x=>'

Facture '+esc(x.numero||'')+' en retard

'+esc(clientName(x))+' · '+money(x.total_ttc)+'

')].join('')||'

Aucune priorité critique

La file du jour est maîtrisée.

';qa('[data-request-open]',listEl).forEach(x=>x.onclick=()=>openRequestFlow(x.dataset.requestOpen));qa('[data-mark-paid]',listEl).forEach(x=>x.onclick=()=>openPaymentDialog(x.dataset.markPaid))};\nconst baseRenderPilot=renderPilot;renderPilot=function(){baseRenderPilot();const incomplete=requests.filter(x=>scoreRequest(x).score<80&&!/(termine|annule|ferme)/i.test(x.statut||'')),pipeline=quotes.filter(x=>/(brouillon|pret|envoye|accepte)/i.test(x.statut||'')).reduce((s,x)=>s+Number(x.total_ttc||0),0);q('#pilotInsights').insertAdjacentHTML('beforeend','

Dossiers incomplets'+incomplete.length+'

Pipeline devis'+money(pipeline)+'

');const center=q('#actionCenter');incomplete.slice(0,3).forEach(x=>center.insertAdjacentHTML('beforeend','

Compléter '+esc(clientName(x))+'

'+scoreRequest(x).score+' % du dossier renseigné

'));qa('[data-request-open]',center).forEach(x=>x.onclick=()=>openRequestFlow(x.dataset.requestOpen))};\nconst baseRenderSettings=renderSettings;renderSettings=function(){baseRenderSettings();const missing=configMissing(),host=q('#blockerList').parentElement;if(missing.length&&!q('#settingsTask')){const actions=document.createElement('div');actions.className='actions mt16';actions.innerHTML='';host.insertBefore(actions,host.querySelector('.actions.mt16'));q('#settingsTask').onclick=async event=>{event.currentTarget.disabled=true;try{await action('task.create',{type_tache:'configuration',priorite:'haute',titre:'Compléter les informations entreprise',description:'Champs manquants : '+missing.join(', ')})}catch(error){toast(error.message,false);event.currentTarget.disabled=false}};q('#copySettings').onclick=async()=>{await navigator.clipboard.writeText('Informations à compléter : '+missing.join(', '));toast('Checklist copiée.')}}};\nrenderSearch=function(term){term=term.toLowerCase().trim();const source=[...requests.map(x=>({type:'request',id:x.id,title:x.objet||'Demande',sub:clientName(x)+' · '+textStatus(x.statut)})),...clients.map(x=>({type:'client',id:x.id,title:x.nom||x.telephone||'Client',sub:[x.telephone,x.email].filter(Boolean).join(' · ')})),...quotes.map(x=>({type:'quote',id:x.id,title:x.numero||x.objet||'Devis',sub:clientName(x)+' · '+money(x.total_ttc)})),...invoices.map(x=>({type:'invoice',id:x.id,title:x.numero||'Facture',sub:clientName(x)+' · '+money(x.total_ttc)}))].filter(x=>!term||(x.title+' '+x.sub).toLowerCase().includes(term)).slice(0,20);searchResults.innerHTML=source.length?source.map((x,i)=>'').join(''):'

Aucun résultat

';qa('[data-result]',searchResults).forEach(x=>x.onclick=()=>{const item=source[Number(x.dataset.result)];searchDialog.close();if(item.type==='request')openRequestFlow(item.id);else if(item.type==='client')openClient360(item.id);else openDoc(item.type,item.id)})};\nrenderToday();renderRequests();renderAgenda();renderClients();renderDocuments();renderPilot();renderSettings();\n`;",[],[462,658],"8b9d3052-264b-4a53-aac8-ef70da8d5cb0",["D",1784147277328],[],[462,33],"c21788cc-013f-4ccc-a6e7-bdb022b92783","business-queue.ts","019f675d-aa00-73de-b62f-ad9d3fe7136d",["D",1784145619620],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type QueuedBusinessAction = {\n queue_id: string;\n request_id: string;\n call_id: string;\n action: string;\n payload: Record;\n state: \"pending\" | \"processing\" | \"completed\" | \"failed\";\n attempts: number;\n created_at: string;\n next_attempt_at: string;\n};\n\nconst QUEUE_SCHEMA = `create table if not exists business_action_queue (\n queue_id text primary key,\n request_id text not null unique,\n call_id text not null,\n action text not null,\n payload_json text not null,\n state text not null default 'pending',\n attempts integer not null default 0,\n last_error text,\n created_at text not null,\n updated_at text not null,\n next_attempt_at text not null,\n completed_at text\n)`;\n\nconst QUEUEABLE_ACTIONS = new Set([\n \"update_client\",\n \"create_lead\",\n \"book_appointment\",\n \"cancel_appointment\",\n \"create_quote\",\n \"save_call_summary\",\n \"transfer_to_human\",\n]);\n\nfunction clean(value: unknown, max = 4000): string {\n return String(value ?? \"\").trim().slice(0, max);\n}\n\nasync function ensureQueue() {\n await sqlite.batch([\n QUEUE_SCHEMA,\n \"create index if not exists business_action_queue_pending_idx on business_action_queue(state,next_attempt_at,created_at)\",\n ]);\n}\n\nasync function stableRequestId(callId: string, action: string, payload: Record) {\n const stablePayload = { ...payload };\n delete stablePayload.request_id;\n const normalized = JSON.stringify(stablePayload, Object.keys(stablePayload).sort());\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(normalized));\n const suffix = Array.from(new Uint8Array(digest)).slice(0, 10).map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n return clean(`${callId}:${action}:${suffix}`, 240);\n}\n\nfunction queuedMessage(action: string): string {\n if (action === \"book_appointment\") {\n return \"Votre demande de créneau est bien enregistrée, mais le rendez-vous n’est pas encore confirmé. L’équipe vous rappelle pour le valider.\";\n }\n if (action === \"cancel_appointment\") {\n return \"Votre demande d’annulation est enregistrée. Elle doit encore être confirmée par l’équipe.\";\n }\n if (action === \"create_quote\") {\n return \"Votre demande de devis est enregistrée. Le devis n’est pas encore généré ni envoyé.\";\n }\n if (action === \"transfer_to_human\") {\n return \"Votre demande de rappel est bien enregistrée. Un membre de l’équipe vous recontactera.\";\n }\n if (action === \"save_call_summary\") {\n return \"Le compte rendu est sauvegardé en attente de synchronisation.\";\n }\n return \"Votre demande est bien enregistrée et sera synchronisée dès le retour du service.\";\n}\n\nexport function isQueueableBusinessAction(action: string) {\n return QUEUEABLE_ACTIONS.has(action);\n}\n\nexport async function queueBusinessAction(\n action: string,\n payload: Record,\n callId: string,\n reason: string,\n): Promise> {\n if (!isQueueableBusinessAction(action)) {\n return {\n ok: false,\n queued: false,\n action_completed: false,\n error: \"action_not_queueable\",\n safe_to_announce: true,\n assistant_message: \"Cette vérification est momentanément indisponible. L’équipe doit vous rappeler.\",\n };\n }\n await ensureQueue();\n const requestId = await stableRequestId(callId, action, payload);\n const queueId = crypto.randomUUID();\n await sqlite.execute({\n sql: `insert into business_action_queue (\n queue_id,request_id,call_id,action,payload_json,state,attempts,last_error,\n created_at,updated_at,next_attempt_at\n ) values (\n :queue_id,:request_id,:call_id,:action,:payload_json,'pending',0,:last_error,\n datetime('now'),datetime('now'),datetime('now')\n )\n on conflict(request_id) do update set\n payload_json=excluded.payload_json,\n last_error=excluded.last_error,\n updated_at=datetime('now')`,\n args: {\n queue_id: queueId,\n request_id: requestId,\n call_id: clean(callId, 240),\n action: clean(action, 80),\n payload_json: JSON.stringify(payload).slice(0, 100_000),\n last_error: clean(reason, 240),\n },\n });\n const row = await sqlite.execute({\n sql: \"select queue_id,created_at from business_action_queue where request_id=:request_id limit 1\",\n args: { request_id: requestId },\n });\n const saved = row.rows[0] as Record | undefined;\n return {\n ok: true,\n queued: true,\n queue_id: saved?.queue_id || queueId,\n queued_at: saved?.created_at || new Date().toISOString(),\n request_id: requestId,\n action,\n action_completed: action === \"save_call_summary\" || action === \"create_lead\" || action === \"update_client\" || action === \"transfer_to_human\",\n persisted_locally: true,\n synchronization_pending: true,\n requires_human: action === \"book_appointment\" || action === \"cancel_appointment\" || action === \"create_quote\",\n safe_to_announce: true,\n assistant_message: queuedMessage(action),\n };\n}\n\nexport async function businessQueueStatus() {\n await ensureQueue();\n const result = await sqlite.execute(`select\n count(*) filter(where state='pending') as pending,\n count(*) filter(where state='processing') as processing,\n count(*) filter(where state='failed') as failed,\n count(*) filter(where state='completed') as completed,\n min(created_at) filter(where state='pending') as oldest_pending\n from business_action_queue`);\n return { ok: true, ...(result.rows[0] as Record || {}) };\n}\n\nexport async function claimQueuedBusinessActions(limit = 20): Promise {\n await ensureQueue();\n const safeLimit = Math.max(1, Math.min(50, Number(limit) || 20));\n const rows = await sqlite.execute({\n sql: `select queue_id,request_id,call_id,action,payload_json,state,attempts,created_at,next_attempt_at\n from business_action_queue\n where state='pending' and next_attempt_at<=datetime('now')\n order by created_at asc limit :limit`,\n args: { limit: safeLimit },\n });\n return rows.rows.map((row: any) => ({\n ...row,\n payload: JSON.parse(String(row.payload_json || \"{}\")),\n })) as QueuedBusinessAction[];\n}\n\nexport async function completeQueuedBusinessAction(queueId: string) {\n await ensureQueue();\n await sqlite.execute({\n sql: `update business_action_queue set state='completed',completed_at=datetime('now'),\n updated_at=datetime('now'),last_error=null where queue_id=:queue_id`,\n args: { queue_id: clean(queueId, 80) },\n });\n}\n\nexport async function failQueuedBusinessAction(queueId: string, reason: string, retryAfterSeconds = 86400) {\n await ensureQueue();\n const safeDelay = Math.max(300, Math.min(604800, Number(retryAfterSeconds) || 86400));\n await sqlite.execute({\n sql: `update business_action_queue set state='pending',attempts=attempts+1,\n last_error=:last_error,updated_at=datetime('now'),\n next_attempt_at=datetime('now','+' || :delay || ' seconds')\n where queue_id=:queue_id`,\n args: { queue_id: clean(queueId, 80), last_error: clean(reason, 240), delay: safeDelay },\n });\n}\n",[],[462,671],"ec5b5b34-0b80-4f4b-9a7e-a912a5386fcd","auth.ts","019f675d-aa00-73de-b62f-abcb413ec719",["D",1784145619620],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { TenantIdentity } from \"./platform-auth.ts\";\n\nconst encoder=new TextEncoder();\nconst decoder=new TextDecoder();\nconst ACCESS_CODE=Deno.env.get(\"PISCINE_ACCESS_CODE\")||\"\";\nconst BRIDGE_KEY=Deno.env.get(\"PISCINE_BRIDGE_KEY\")||\"\";\nconst SESSION_SECRET=Deno.env.get(\"PLATFORM_SESSION_SECRET\")||\"\";\nconst COOKIE=\"piscine_session\";\nconst SESSION_TTL_MS=8*60*60*1000;\nconst WINDOW_MS=5*60*1000;\nconst MAX_FAILURES=5;\nconst RATE_TABLE=\"cockpit_login_attempts\";\nlet rateTableInit:Promise|null=null;\n\nexport type LegacySession={\n v:2;\n iat:number;\n exp:number;\n nonce:string;\n csrf:string;\n};\n\nexport type TenantSession={\n v:3;\n iat:number;\n exp:number;\n nonce:string;\n csrf:string;\n tenantId:string;\n staffId:string;\n authUserId:string;\n role:string;\n loginIdentifier:string;\n organizationName:string;\n verticalKey:string;\n verticalDisplayName:string;\n verticalVersion:number;\n locale:string;\n timezone:string;\n backendMode:\"legacy_single_tenant\"|\"direct_multi_tenant\"|\"disabled\";\n ui:{\n brandMark:string;\n tradeLabel:string;\n assistantTitle:string;\n primaryAction:string;\n };\n authMethod:\"supabase_email\";\n};\n\nexport type Session=LegacySession|TenantSession;\ntype Attempt={count:number;resetAt:number;blockedUntil:number};\nconst attempts=new Map();\n\nasync function ensureRateTable():Promise{\n if(!rateTableInit){\n rateTableInit=(async()=>{\n await sqlite.execute(`create table if not exists ${RATE_TABLE}(\n client_key text primary key,\n failure_count integer not null default 0,\n reset_at integer not null,\n blocked_until integer not null default 0,\n updated_at integer not null\n )`);\n await sqlite.execute(`create index if not exists idx_${RATE_TABLE}_updated on ${RATE_TABLE}(updated_at)`);\n })().catch(error=>{rateTableInit=null;throw error;});\n }\n return rateTableInit;\n}\n\nfunction base64url(bytes:Uint8Array):string{\n let value=\"\";\n for(const byte of bytes)value+=String.fromCharCode(byte);\n return btoa(value).replace(/\\+/g,\"-\").replace(/\\//g,\"_\").replace(/=+$/g,\"\");\n}\n\nfunction decode64url(value:string):Uint8Array{\n const padded=value.replace(/-/g,\"+\").replace(/_/g,\"/\")+\"===\".slice((value.length+3)%4);\n const raw=atob(padded);\n return Uint8Array.from(raw,char=>char.charCodeAt(0));\n}\n\nfunction safeEqual(a:string,b:string):boolean{\n const aa=encoder.encode(a),bb=encoder.encode(b);\n if(aa.length!==bb.length)return false;\n let diff=0;\n for(let index=0;index{\n return crypto.subtle.importKey(\n \"raw\",encoder.encode(secret),{name:\"HMAC\",hash:\"SHA-256\"},false,[\"sign\"],\n );\n}\n\nasync function signature(value:string,secret:string):Promise{\n const signed=await crypto.subtle.sign(\"HMAC\",await signingKey(secret),encoder.encode(value));\n return base64url(new Uint8Array(signed));\n}\n\nfunction cookies(req:Request):Record{\n const result:Record={};\n for(const chunk of(req.headers.get(\"cookie\")||\"\").split(\";\")){\n const[rawKey,...parts]=chunk.trim().split(\"=\");\n if(!rawKey)continue;\n try{result[rawKey]=decodeURIComponent(parts.join(\"=\"));}catch{result[rawKey]=\"\";}\n }\n return result;\n}\n\nasync function clientKey(req:Request):Promise{\n const forwarded=req.headers.get(\"cf-connecting-ip\")||req.headers.get(\"x-forwarded-for\")||\"unknown\";\n const ip=forwarded.split(\",\")[0].trim();\n const digest=await crypto.subtle.digest(\"SHA-256\",encoder.encode(`${ip}\\u0000${BRIDGE_KEY}`));\n return base64url(new Uint8Array(digest)).slice(0,24);\n}\n\nasync function memoryAttemptFor(req:Request):Promise<[string,Attempt]>{\n const key=await clientKey(req),now=Date.now();\n let state=attempts.get(key);\n if(!state||now>=state.resetAt)state={count:0,resetAt:now+WINDOW_MS,blockedUntil:0};\n attempts.set(key,state);\n return[key,state];\n}\n\nasync function persistentRetryAfter(req:Request):Promise{\n await ensureRateTable();\n const key=await clientKey(req),now=Date.now();\n const result=await sqlite.execute({\n sql:`select failure_count,reset_at,blocked_until from ${RATE_TABLE} where client_key=?`,\n args:[key],\n });\n const row=result.rows[0] as Record|undefined;\n if(!row)return 0;\n const resetAt=Number(row.reset_at||0),blockedUntil=Number(row.blocked_until||0);\n if(now>=resetAt&&now>=blockedUntil){\n await sqlite.execute({sql:`delete from ${RATE_TABLE} where client_key=?`,args:[key]});\n return 0;\n }\n return Math.max(0,Math.ceil((blockedUntil-now)/1000));\n}\n\nasync function persistentRecordFailure(req:Request):Promise{\n await ensureRateTable();\n const key=await clientKey(req),now=Date.now();\n const result=await sqlite.execute({\n sql:`insert into ${RATE_TABLE}(client_key,failure_count,reset_at,blocked_until,updated_at)\n values(?,1,?,0,?)\n on conflict(client_key) do update set\n failure_count=case when excluded.updated_at>=${RATE_TABLE}.reset_at then 1 else ${RATE_TABLE}.failure_count+1 end,\n reset_at=case when excluded.updated_at>=${RATE_TABLE}.reset_at then excluded.reset_at else ${RATE_TABLE}.reset_at end,\n blocked_until=case\n when(case when excluded.updated_at>=${RATE_TABLE}.reset_at then 1 else ${RATE_TABLE}.failure_count+1 end)>=?\n then excluded.updated_at+?\n when ${RATE_TABLE}.blocked_until>excluded.updated_at then ${RATE_TABLE}.blocked_until\n else 0 end,\n updated_at=excluded.updated_at\n returning failure_count,reset_at,blocked_until`,\n args:[key,now+WINDOW_MS,now,MAX_FAILURES,WINDOW_MS],\n });\n const row=result.rows[0] as Record|undefined;\n await sqlite.execute({sql:`delete from ${RATE_TABLE} where updated_atnow\n &&session.exp-session.iat<=SESSION_TTL_MS+60_000\n );\n}\n\nfunction sessionCookie(token:string):string{\n return `${COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; Secure; SameSite=Strict; Max-Age=${Math.floor(SESSION_TTL_MS/1000)}; Priority=High`;\n}\n\nasync function signedCookie(session:Session,secret:string):Promise{\n const payload=base64url(encoder.encode(JSON.stringify(session)));\n return sessionCookie(`${payload}.${await signature(payload,secret)}`);\n}\n\nexport function authConfigured():boolean{\n return SESSION_SECRET.length>=64;\n}\n\nexport function legacyAuthConfigured():boolean{\n return Boolean(ACCESS_CODE&&BRIDGE_KEY);\n}\n\nexport function validAccessCode(value:string):boolean{\n return Boolean(ACCESS_CODE)&&safeEqual(value,ACCESS_CODE);\n}\n\nexport async function loginRetryAfter(req:Request):Promise{\n try{return await persistentRetryAfter(req);}\n catch{\n const[,state]=await memoryAttemptFor(req);\n return Math.max(0,Math.ceil((state.blockedUntil-Date.now())/1000));\n }\n}\n\nexport async function recordLoginFailure(req:Request):Promise{\n let retryAfter=0;\n try{retryAfter=await persistentRecordFailure(req);}\n catch{\n const[key,state]=await memoryAttemptFor(req);\n state.count+=1;\n if(state.count>=MAX_FAILURES)state.blockedUntil=Date.now()+WINDOW_MS;\n attempts.set(key,state);\n retryAfter=Math.max(0,Math.ceil((state.blockedUntil-Date.now())/1000));\n }\n await new Promise(resolve=>setTimeout(resolve,450));\n return retryAfter;\n}\n\nexport async function clearLoginFailures(req:Request):Promise{\n const key=await clientKey(req);\n attempts.delete(key);\n try{\n await ensureRateTable();\n await sqlite.execute({sql:`delete from ${RATE_TABLE} where client_key=?`,args:[key]});\n }catch{}\n}\n\nexport function sameOrigin(req:Request):boolean{\n const target=new URL(req.url),origin=req.headers.get(\"origin\");\n try{\n if(origin&&origin!==\"null\")return new URL(origin).origin===target.origin;\n }catch{return false;}\n const referer=req.headers.get(\"referer\");\n if(referer){\n try{\n const ref=new URL(referer);\n if(ref.origin===target.origin)return true;\n if(ref.hostname===\"val.town\"||ref.hostname.endsWith(\".val.town\"))return true;\n }catch{return false;}\n }\n const site=req.headers.get(\"sec-fetch-site\")||\"\";\n const mode=req.headers.get(\"sec-fetch-mode\")||\"\";\n return[\"same-origin\",\"same-site\",\"none\"].includes(site)\n &&[\"navigate\",\"cors\",\"same-origin\"].includes(mode);\n}\n\nexport async function issueSession():Promise<{session:LegacySession;cookie:string}>{\n if(!legacyAuthConfigured())throw new Error(\"legacy_auth_not_configured\");\n const now=Date.now();\n const session:LegacySession={\n v:2,iat:now,exp:now+SESSION_TTL_MS,\n nonce:crypto.randomUUID(),csrf:crypto.randomUUID(),\n };\n return{session,cookie:await signedCookie(session,legacySecret())};\n}\n\nexport async function issueTenantSession(\n identity:TenantIdentity,\n):Promise<{session:TenantSession;cookie:string}>{\n if(!authConfigured())throw new Error(\"platform_session_not_configured\");\n const now=Date.now();\n const session:TenantSession={\n v:3,iat:now,exp:now+SESSION_TTL_MS,\n nonce:crypto.randomUUID(),csrf:crypto.randomUUID(),\n tenantId:identity.tenant_id,\n staffId:identity.staff_id,\n authUserId:identity.auth_user_id,\n role:identity.role,\n loginIdentifier:identity.login_identifier,\n organizationName:identity.organization_name,\n verticalKey:identity.vertical_key,\n verticalDisplayName:identity.vertical_display_name,\n verticalVersion:identity.vertical_version,\n locale:identity.locale,\n timezone:identity.timezone,\n backendMode:identity.backend_mode,\n ui:{\n brandMark:identity.ui_config.brand_mark,\n tradeLabel:identity.ui_config.trade_label,\n assistantTitle:identity.ui_config.assistant_title,\n primaryAction:identity.ui_config.primary_action,\n },\n authMethod:\"supabase_email\",\n };\n return{session,cookie:await signedCookie(session,SESSION_SECRET)};\n}\n\nexport async function getSession(req:Request):Promise{\n const token=cookies(req)[COOKIE]||\"\";\n const[payload,provided,extra]=token.split(\".\");\n if(!payload||!provided||extra)return null;\n let candidate:Session;\n try{candidate=JSON.parse(decoder.decode(decode64url(payload))) as Session;}\n catch{return null;}\n\n const secret=candidate.v===3\n ? SESSION_SECRET\n : candidate.v===2\n ? legacySecret()\n : \"\";\n if(!secret||!safeEqual(provided,await signature(payload,secret)))return null;\n if(!validBase(candidate))return null;\n if(candidate.v===2)return legacyAuthConfigured()?candidate:null;\n if(\n candidate.v!==3\n ||!authConfigured()\n ||!/^[a-z0-9][a-z0-9_-]{2,79}$/.test(candidate.tenantId)\n ||!/^[0-9a-f-]{36}$/.test(candidate.staffId)\n ||!/^[0-9a-f-]{36}$/.test(candidate.authUserId)\n ||!/^[a-z][a-z0-9_]{2,62}$/.test(candidate.verticalKey)\n ||candidate.authMethod!==\"supabase_email\"\n )return null;\n return candidate;\n}\n\nexport function validCsrf(req:Request,session:Session):boolean{\n return sameOrigin(req)&&safeEqual(req.headers.get(\"x-csrf-token\")||\"\",session.csrf);\n}\n\nexport function expiredCookie():string{\n return `${COOKIE}=; Path=/; HttpOnly; Secure; SameSite=Strict; Max-Age=0; Priority=High`;\n}\n",[],[462,678],"c24aa801-870b-4725-8067-478acc346530","api.ts","019f675d-aa00-73de-b62f-a7c63bfe6926",["D",1784145619620],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { openN8nCircuit, reserveN8nExecution } from \"./n8n-budget.ts\";\nimport { isQueueableBusinessAction, queueBusinessAction } from \"./business-queue.ts\";\n\nexport type ApiResult> = T & { ok?: boolean; error?: string };\n\nconst BASE = (Deno.env.get(\"PISCINE_N8N_BASE\") || \"\").replace(/\\/$/, \"\");\nconst BRIDGE_KEY = Deno.env.get(\"PISCINE_BRIDGE_KEY\") || \"\";\nconst INTERNAL_PATH = (Deno.env.get(\"PISCINE_N8N_INTERNAL_PATH\") || \"\").trim();\nconst AI_PATH = `${Deno.env.get(\"PISCINE_AI_PATH_A\") || \"\"}${Deno.env.get(\"PISCINE_AI_PATH_B\") || \"\"}`;\n\nconst ACTION_MAP: Record = {\n \"client.create\": \"create_lead\",\n \"client.context\": \"client_context\",\n \"availability.check\": \"check_availability\",\n \"rdv.create\": \"book_appointment\",\n \"devis.create\": \"create_quote\",\n \"knowledge.lookup\": \"knowledge_lookup\",\n \"next.action\": \"next_best_action\",\n \"quote.create\": \"quote_create_v2\",\n \"quote.update\": \"quote_update_v2\",\n \"quote.recalculate\": \"quote_recalculate_v2\",\n \"quote.get\": \"quote_get_v2\",\n \"quote.status\": \"quote_status_v2\",\n \"invoice.from_quote\": \"invoice_from_quote\",\n \"invoice.get\": \"invoice_get\",\n \"invoice.mark_paid\": \"invoice_mark_paid\",\n \"task.create\": \"task_create\",\n};\n\nconst ACTION_CACHE_TTL_SECONDS: Record = {\n \"quote.get\": 300,\n \"invoice.get\": 300,\n \"client.context\": 120,\n \"knowledge.lookup\": 600,\n};\n\nconst READ_CACHE_TTL_SECONDS: Record = {\n \"health\": 300,\n \"bootstrap\": 300,\n \"dashboard.snapshot\": 180,\n \"requests.list\": 90,\n \"clients.list\": 180,\n \"appointments.list\": 120,\n \"documents.list\": 180,\n};\n\nasync function ensureReadCache() {\n await sqlite.execute(`create table if not exists n8n_read_cache (\n cache_key text primary key,\n payload_json text not null,\n expires_at integer not null,\n updated_at text not null\n )`);\n}\n\nasync function readN8nCache(\n action: string,\n data: Record,\n): Promise | null> {\n await ensureReadCache();\n const cacheKey = action + \":\" + JSON.stringify(data);\n const result = await sqlite.execute({\n sql: `select payload_json from n8n_read_cache\n where cache_key=:cache_key and expires_at>unixepoch()\n limit 1`,\n args: { cache_key: cacheKey },\n });\n if (!result.rows.length) return null;\n try {\n return JSON.parse(String((result.rows[0] as Record).payload_json || \"{}\")) as ApiResult;\n } catch {\n return null;\n }\n}\n\nasync function writeN8nCache(\n action: string,\n data: Record,\n payload: ApiResult,\n ttlSeconds: number,\n) {\n await ensureReadCache();\n const cacheKey = action + \":\" + JSON.stringify(data);\n await sqlite.batch([\n {\n sql: `insert into n8n_read_cache (cache_key,payload_json,expires_at,updated_at)\n values (:cache_key,:payload_json,unixepoch()+:ttl_seconds,datetime('now'))\n on conflict(cache_key) do update set\n payload_json=excluded.payload_json,\n expires_at=excluded.expires_at,\n updated_at=excluded.updated_at`,\n args: {\n cache_key: cacheKey,\n payload_json: JSON.stringify(payload).slice(0, 100_000),\n ttl_seconds: ttlSeconds,\n },\n },\n `delete from n8n_read_cache where expires_at<=unixepoch()`,\n ]);\n}\n\nfunction errorCode(value: unknown, fallback: string): string {\n const text = String(value || fallback).slice(0, 120);\n return /^[a-z0-9_:-]+$/i.test(text) ? text : fallback;\n}\n\nasync function fetchJson(\n url: string,\n init: RequestInit,\n timeoutMs = 10_000,\n budgetPurpose = \"api\",\n): Promise> {\n const budget = await reserveN8nExecution(\n \"production\",\n `api:${budgetPurpose}:${crypto.randomUUID()}`,\n { channel: \"valtown_api\", purpose: budgetPurpose },\n );\n if (!budget.allowed) {\n throw new Error(errorCode(budget.error, \"n8n_project_daily_budget_exhausted\"));\n }\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), timeoutMs);\n try {\n const response = await fetch(url, { ...init, signal: controller.signal });\n const raw = (await response.text()).slice(0, 100_000);\n if (/execution limit reached|max executions|quota.*execution/i.test(raw)) {\n await openN8nCircuit(\"n8n_account_execution_limit_reached\", 86400);\n throw new Error(\"n8n_account_execution_limit_reached\");\n }\n let payload: any = {};\n try {\n payload = raw ? JSON.parse(raw) : {};\n } catch {\n throw new Error(\"invalid_upstream_json\");\n }\n if (!response.ok || payload?.ok === false) throw new Error(errorCode(payload?.error || payload?.code, `upstream_${response.status}`));\n return payload as ApiResult;\n } finally {\n clearTimeout(timer);\n }\n}\n\nexport function integrationConfig() {\n return {\n businessApi: Boolean(BASE && BRIDGE_KEY),\n actionApi: Boolean(BASE && INTERNAL_PATH && BRIDGE_KEY),\n aiApi: Boolean(BASE && BRIDGE_KEY && AI_PATH),\n securityApi: Boolean(BASE && BRIDGE_KEY),\n };\n}\n\nexport async function cockpitApi>(action: string, data: Record = {}): Promise> {\n if (!BASE || !BRIDGE_KEY) throw new Error(\"cockpit_gateway_not_configured\");\n const ttlSeconds = READ_CACHE_TTL_SECONDS[action] || 0;\n if (ttlSeconds) {\n const cached = await readN8nCache(action, data);\n if (cached) return cached;\n }\n const result = await fetchJson(`${BASE}/webhook/secretariat-pisciniste-cockpit-api-v1`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-key\": BRIDGE_KEY,\n \"x-piscine-source\": \"valtown-cockpit\",\n \"x-request-id\": crypto.randomUUID(),\n },\n body: JSON.stringify({ action, data }),\n }, 10_000, `cockpit:${action}`);\n if (ttlSeconds) await writeN8nCache(action, data, result, ttlSeconds);\n return result;\n}\n\nexport async function cockpitAction>(action: string, data: Record = {}): Promise> {\n if (action === \"quote.send\") return sendDocumentEmail(\"quote\", String(data.id || \"\"));\n if (action === \"invoice.send\") return sendDocumentEmail(\"invoice\", String(data.id || \"\"));\n if (!BASE || !INTERNAL_PATH || !BRIDGE_KEY) throw new Error(\"cockpit_action_gateway_not_configured\");\n const mapped = ACTION_MAP[action];\n if (!mapped) throw new Error(\"unsupported_cockpit_action\");\n\n const customerPhone = String(data.telephone ?? data.customer_phone ?? \"\").trim();\n const explicit = data.explicit_confirmation === true || data.explicit_confirmation === \"true\" || data.explicit_confirmation === \"on\";\n const businessData = {\n ...data,\n customer_name: data.nom ?? data.customer_name ?? \"\",\n customer_phone: customerPhone,\n address: data.adresse ?? data.address ?? \"\",\n city: data.ville ?? data.city ?? \"\",\n pool_type: data.type_bassin ?? data.pool_type ?? \"\",\n problem: data.objet ?? data.description ?? data.problem ?? \"\",\n intent: data.intent ?? \"autre\",\n urgency: data.urgence ?? \"normale\",\n appointment_datetime: data.date_heure ?? data.appointment_datetime ?? \"\",\n explicit_confirmation: explicit,\n };\n\n const ttlSeconds = ACTION_CACHE_TTL_SECONDS[action] || 0;\n if (ttlSeconds) {\n const cached = await readN8nCache(\"action:\" + action, data);\n if (cached) return cached;\n }\n const cockpitCallId = `cockpit-${crypto.randomUUID()}`;\n try {\n const result = await fetchJson(`${BASE}/webhook/${INTERNAL_PATH}`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-key\": BRIDGE_KEY,\n \"x-piscine-source\": \"valtown-cockpit\",\n \"x-request-id\": crypto.randomUUID(),\n },\n body: JSON.stringify({\n args: { action: mapped, data: businessData },\n call: { call_id: cockpitCallId, from_number: customerPhone },\n }),\n }, 12_000, `cockpit_action:${action}`);\n if (ttlSeconds) await writeN8nCache(\"action:\" + action, data, result, ttlSeconds);\n return result;\n } catch (error) {\n const reason = error instanceof Error ? error.message : \"upstream_unavailable\";\n if (isQueueableBusinessAction(mapped) && /n8n_|upstream_|invalid_upstream_json/.test(reason)) {\n return await queueBusinessAction(mapped, businessData, cockpitCallId, reason) as ApiResult;\n }\n throw error;\n }\n}\n\nexport async function aiSupervision>(): Promise> {\n if (!BASE || !BRIDGE_KEY || !AI_PATH) throw new Error(\"ai_supervision_gateway_not_configured\");\n const cached = await readN8nCache(\"ai.supervision\", {});\n if (cached) return cached;\n const result = await fetchJson(`${BASE}/webhook/${AI_PATH}`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-key\": BRIDGE_KEY,\n \"x-piscine-source\": \"valtown-cockpit\",\n \"x-request-id\": crypto.randomUUID(),\n },\n body: JSON.stringify({ action: \"supervision.snapshot\" }),\n }, 10_000, \"ai.supervision\");\n await writeN8nCache(\"ai.supervision\", {}, result, 300);\n return result;\n}\n\nexport async function securityAudit>(): Promise> {\n if (!BASE || !BRIDGE_KEY) throw new Error(\"security_audit_gateway_not_configured\");\n const cached = await readN8nCache(\"security.audit\", {});\n if (cached) return cached;\n const result = await fetchJson(`${BASE}/webhook/secretariat-pisciniste-security-audit-v1`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-key\": BRIDGE_KEY,\n \"x-piscine-source\": \"valtown-cockpit\",\n \"x-request-id\": crypto.randomUUID(),\n },\n body: \"{}\",\n }, 10_000, \"security.audit\");\n await writeN8nCache(\"security.audit\", {}, result, 600);\n return result;\n}\n\nexport async function sendDocumentEmail>(kind: \"quote\" | \"invoice\", documentId: string): Promise> {\n if (!BASE || !BRIDGE_KEY) throw new Error(\"document_delivery_not_configured\");\n if (!/^[0-9a-f-]{36}$/i.test(documentId)) throw new Error(\"invalid_document_id\");\n return fetchJson(`${BASE}/webhook/sp-document-delivery-v1`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-key\": BRIDGE_KEY,\n \"x-piscine-source\": \"valtown-cockpit\",\n \"x-request-id\": crypto.randomUUID(),\n },\n body: JSON.stringify(kind === \"invoice\"\n ? { document_type: \"invoice\", invoice_id: documentId }\n : { document_type: \"quote\", devis_id: documentId }),\n }, 18_000);\n}\n",[],[462,685],["D",1784145619620],[486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506],[462],"b1cbb907-4399-4b38-9266-db8f382f481a","n8n-execution-policy.md","019f675d-a9ff-7096-ac13-bf6b98e94100",["D",1784145619620],"# Politique de budget d’exécutions n8n — Pisciniste\n\nVersion : 2026-07-12-strict-v1 \nFuseau de comptage : Europe/Paris\n\n## Limites non négociables\n\n- 10 exécutions n8n de test ou de vérification maximum par jour pour le projet Pisciniste.\n- Les catégories `test` et `verification` partagent le même plafond de 10.\n- Plafond de sécurité du projet : 83 exécutions n8n par jour, avec alerte à partir de 60.\n- Budget du compte : 2 500 exécutions par mois ; la moyenne cible est 83 par jour.\n- Les micro-tests successifs sont interdits.\n- Un test d’exécution n8n n’est autorisé qu’après un bloc fonctionnel majeur et complet.\n- La stratégie par défaut est `static_first` : validation du code, du contrat, du SQL et des permissions avant tout test d’exécution.\n\n## Ce qui consomme une exécution\n\nUn webhook de production, un déclencheur planifié, une exécution manuelle ou un outil de test n8n consomme une exécution. La lecture de la définition d’un workflow, sa mise à jour et sa publication ne déclenchent pas le workflow.\n\n## Réductions obligatoires\n\n- Les lectures répétitives du cockpit sont mises en cache de 90 à 300 secondes.\n- Chaque appel Val Town vers n8n doit réserver une unité dans le registre local avant l’appel.\n- Les événements vocaux intermédiaires sont stockés dans Val Town ; seul `call.ended` est transmis à n8n.\n- Les statuts Twilio sont stockés immédiatement dans une file durable, puis envoyés par lots de 1 à 50, au maximum une fois toutes les 4 heures et seulement si la file n’est pas vide.\n- Aucun callback Twilio ne doit provoquer un transfert immédiat individuel vers n8n.\n- Le déclencheur de relance du workflow principal reste désactivé. S’il est réactivé, sa cadence maximale est une fois toutes les 6 heures.\n\n## Procédure de modification\n\n1. Regrouper les changements en un bloc fonctionnel complet.\n2. Faire les contrôles statiques et SQL sans déclencher n8n.\n3. Vérifier le budget du jour.\n4. Si une exécution est réellement nécessaire, réserver une unité de test avec un motif explicite.\n5. Effectuer un seul scénario de bout en bout couvrant le bloc.\n6. Corriger hors ligne avant toute nouvelle exécution.\n\n## Verrou du 12 juillet 2026\n\nLe budget de test est volontairement marqué à 10/10 : aucun autre test n8n n’est autorisé aujourd’hui.\n\n## Incident observé\n\nLe principal épuisement du quota du 12 juillet 2026 venait du workflow ViralOS « Reference Intelligence Hub v1.1 », avec environ 2 448 exécutions en erreur. Il est inactif. Cet incident est distinct du projet Pisciniste, mais confirme qu’aucun workflow planifié ne doit être activé sans contrôle préalable de sa fréquence et de ses chemins de boucle.\n",[],[467,695],["D",1784145619620],[484],[467],["D",1783720739803],["D",1789526460011],{"_103":102,"_111":107},{"_103":102,"_104":105,"_106":107,"_18":56,"_108":109,"_110":25},{"_13":90,"_32":91,"_44":43,"_92":45,"_93":94,"_95":96,"_97":51,"_98":45,"_99":66,"_100":46,"_101":102},"ctx",{"_83":-5,"_132":742,"_743":744,"_745":746,"_747":25,"_748":25,"_749":25,"_750":60,"_751":-5,"_752":-7,"_753":-7,"_754":64,"_755":25,"_756":25,"_757":-5,"_758":25,"_759":25,"_760":25,"_761":-5},"ENV",{"_713":714,"_715":716,"_717":413,"_718":719,"_720":721,"_722":723,"_724":725,"_726":727,"_728":729,"_730":731,"_732":733,"_734":735,"_736":737,"_738":739,"_740":741},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","518c05f2c13b243481ef29134a5672756425e459","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Lignes du devis

'+esc(quote.numero||'Devis')+' · '+money(quote.total_ttc)+'

Connexion sécurisée

Connexion en cours…

À traiter maintenant

Priorités

Actions rapides

Prochains rendez-vous

${label(\"requests\",\"Demandes\")}

${label(\"appointments\",\"Agenda\")}

${label(\"customers\",\"Clients\")}

${label(\"documents\",\"Documents\")}

${label(\"pilot\",\"Pilotage\")}

Centre d’actions

Accès directs

${label(\"assistant\",\"Assistante personnelle\")}

Identité entreprise vérifiée

Centre d’activation

Prochaines actions

Parler à la secrétaire IA

Commandes rapides

Garde-fous avant activation

Validations en attente

Automatisations candidates

Politique de communication

Connexion calendrier

Suivi de livraison Twilio

Derniers SMS suivis

Alertes de livraison

Premier SMS technique

${label(\"settings\",\"Réglages\")}

À compléter

Une action utile par document

'+(m.correct+m.sendQ+m.invoiceQ+m.sendI+m.collect)+' dossiers à faire avancer

Aucun document dans cette étape

'+esc(quote.numero||'Devis')+' · '+money(quote.total_ttc)+'

Facture '+(invoice.statut==='envoyee'?'créée et envoyée':'créée')+'

Cycle devis → encaissement

'+((incomplete+toSend+toInvoice)||0)+' décisions utiles

Aucun document

'+(id?esc(d.numero||'Devis'):'Nouveau devis')+'

Prestations et matériel

'+money(m.pipeline)+' en mouvement

Aucun document ici

'+esc(quote.numero||'Devis')+' · '+money(quote.total_ttc)+'

Facture enregistrée et relue

'+esc(invoice.numero||'Facture')+' · '+money(invoice.total_ttc)+'

Paiement confirmé

'+esc(invoice.numero||'Facture')+' · '+money(invoice.total_ttc)+'

Historique récent

'+esc(req.description||req.objet||'Non renseigné')+'

'+esc(rdv.type_rdv||rdv.objet||'Intervention')+'

Diff · v32